Good morning
People keep waiting for GPU prices to go down and bubble to pop, but...
Local models are getting so god damn good, I don't see how it's going to let up
Latest DeepSeek can run for like $8k locally and it's about as good as Opus 4.6
Opus was good enough for anthropic to be valued at a trillion dollars
utxo the webmaster ๐งโ๐ป
_@utxo.one
npub1utx0...50e8
Wisp: https://wisp.mobile
Nostr Archives: https://NostrArchives.com
Haven: https://github.com/barrydeen/haven
Rektbot: npub1r3kty2vkh247jgdu63wgkcsnktdtp9hc3e962eudg0getgvxs4gsz4uytc
All Projects:
https://github.com/barrydeen
New additions to the homelab


People on twitter will invest millions into bitcoin but suggesting they spend 2 minutes rolling dice is a bridge too far and proof that bitcoin ngmi apparently
Like bros probably play monopoly for hours but won't do the same to keep their money safe smh
I think the bip110 folks have good hearts and love bitcoin and their spirits are in the right place, I do not fault them, no gloating from me boys :wisp_salute:
Managed to grab two dgx sparks but literally nobody in Ontario has the connector cable thing for it sigh
Do I have a free air drop yet or what
Good morning
Gonna buy 2x gb10s fuck it we ball, local AI or gtfo
I'm the type of person who leaves a huge mess everywhere I go
Ive tried to fix it so many times but I can't
I wish I wasn't this way
Despite all the craziness going on, I would like to personally shake hands with all of you, my fellow schizos, still stacking these internet coins with our private keys ๐ค
God bless us all and our devices and forks and nodes and btcpayservers
Btcpayserver exploit explained:
The old check only refused Basic auth if the user had FIDO2 credentials (a hardware security key). If you secured your account with TOTP (Google Authenticator etc.), Fido2Credentials.Any() was false, so the API accepted username+password and never asked for the TOTP code.
An attacker who obtained your password (reuse, phishing, a leak, brute force) could authenticate straight into Greenfield and skip the second factor entirely, then call spend endpoints.

GitHub
Fix: TOTP 2FA bypass via Greenfield Basic auth (#7491) ยท btcpayserver/btcpayserver@c173a91
Accept Bitcoin payments. Free, open-source & self-hosted, Bitcoin payment processor. - Fix: TOTP 2FA bypass via Greenfield Basic auth (#7491) ยท b...
Bruh
View quoted note โ
Psyop senses are tingling
Damn
View quoted note โ
Since there's no boltz
Anyone wanna trade me lightning sats for on chain?
400,000 sats
I wonder how well this will age


The btcpayserver exploit looks related to the paypayment request endpoint
They applied a rate limiter to it
I guess you can just blast this endpoint and at some point auth fails or something? Not sure how this can be exploited
Anyway be sure to update no matter what

GitHub
Rate limit invoice creation for payment requests ยท btcpayserver/btcpayserver@c97d9e3
Accept Bitcoin payments. Free, open-source & self-hosted, Bitcoin payment processor. - Rate limit invoice creation for payment requests ยท btcpays...
When you rolled your own entropy, use multisig and have no lightning node right now