Do you have any good news every now and then?

Thank you for doing this! This is a priceless contribution to the whole ecosystem

This is helpful, but how do we protect ourselves if we don’t know what’s at risk? Just uninstall all C written projects 😂

Humans should not write c is very good news 😁

Would it be possible for you to publish a list of the fastest-responding and most-cooperative projects? As a positive-signal.

solid wrap. Sounds heavy. thanks for all the efforts

Interesting

A new era in the cat-and-mouse game of cybersecurity. Wild 🔥🤖

Thanks a Lot!

Amazing work!! Maybe a public list of the safest, most verified companies that you the red team vetted could be created? Something like a white-list and a black-list?

This is worrying news. Should I try to sell my Bitcoins now before more people find out about this? I need to know before I share it with the group on Facebook. View quoted note →

How is nostr doing?

oh boy 😂

🙏

😅

Would be great but it’s probably to early - they would point attackers to specific projects.

Sooooo C-Lightning eh?

Humans should not write C, thats crazy lol

Thanks for doing this.

why humans should not code in c: we're finding memory-safety vulnerabilities in c projects that are prevented by default in many other languages. in the past, finding a simple buffer overflow wasn't enough. you'd need a highly skilled hacker to turn the vulnerability into a working end-to-end exploit. today, that's a single prompt. View quoted note →

Thank you

*IQ bell curve meme* Just use AI. 🤪 No! AI makes slop and will boil the oceans! 😖 Just use AI. 🥷

Programming in “C” WAS fun in the XX century. Should we now delegate in some AI instead?🙄

It's enough to make a person want to go back to not using the Internet and complex electronic devices.

The Linux kernel is written in C. The Windows 11 kernel is written in x86 assembler if you want an OS not written in C.

Ends up solving the double-spend problem was likely just the beginning of the real war…… View quoted note →

Peter Schiff read this and giggled.

The scary part isn’t that AI can find the bugs. It’s how many bugs were already there waiting to be found. Burn the weak code, harden the protocol, and keep building. ₿ معنی

The scary part isn’t that AI can find the bugs. It’s how many bugs were already there waiting to be found. Burn the weak code, harden the protocol, and keep building. ₿

Shit...

GitHub

GitHub - 0ceanSlim/tinfoil-os: BIP-39 Seed Generator that runs on it's own OS with no ability to provide entropy from the software.

BIP-39 Seed Generator that runs on it's own OS with no ability to provide entropy from the software. - 0ceanSlim/tinfoil-os

I wrote it in C... Care for an audit. It's minimal surface.

I meant all Bitcoin C projects.

You are really doing amazing work! Thank you so much and please keep going 🙏👍👍👍 Transparency is also great with your posts 🌟🌟🌟🌟🌟👍

Gold in basement safe from AI

Did you just learn how real software is developed? It sounds like you're new to it.

Didn’t Satoshi code in c?

Very few can code in C, almost no-one. 30 years experience speaking. If you start out in assembly, then object oriented assembly and learn to write object oriented in C, you have a chance of being meticulous enough to write secure code. You can't take a desktop hacker and turn him into an embedded systems programmer or an encryption software author. The practices used in embedded systems in C to maintain long-term stability and maintainability are not widely known, and even more rare is someone who has those skills and is also comfortable with encryption concepts. The rule "don't write in C" for secure systems is a good rule of thumb. Even the best programmers, ones with 50 and 60 years experience, recommend using something other than C. System legibility and careful abstraction layering, is far more important to security than cleverness and vanity.

Does your rule about C apply to derivatives?

Hmm, you mean how C is the origin story of this game back when carbon was the standard and Obama was president?! After it. 🤓

😮‍💨

You mean nearly every programming language?

Et voila, but fuck your rules unless you’re abiding to them yourself, Bill 😗

Although c++ works great as well with Swift, but pure Swift is great as well to think with, but hey, after the first there are some better rules about than which programming language that is used to the end.

I guess that depends how you define derivative. No shared codebase and no shared philosophy on memory management is not derivative in any relevant way for the purpose of this conversation. I know that you feel very strongly on the subject. My opinion is even if YOU can most devs cannot and you don't maintain most of the code I run. Your code isn't under the gun in this wave so we don't get to validate you. I can look at public stats on bug rates in open source and draw very obvious conclusions about what languages I should use and prefer when picking software to use.

Yes. But you should not.

No.

Can you say that Rust is standing out in a positive way here, as it advertises itself as a safety-first language?

funny, but you just broke your own 'rules' and boasted, about breaking lightning. can't imagine why you'd do that eh? 😂 ah well, maybe you should boast a little more info so that we can secure our funds before we get rekt by your overzealous "reproductions" of these "broken" things. yeah, i know it's hard not to boast.. clearly.

🙏👏💪⚡️

Could you do a second pass over knots and Core and tell me what you find. :)

What's the problem with c?

Bitcoin is burning? Hmm.

You kicked the hornets nest with that C comment 😂 Appreciate all the hard work the Red Team has done lately!

Building a custom tool tailored to your exact needs is one of the best parts of coding— pairing Python with Ubuntu is a classic, rock-solid stack for local automation and data management! 🚀

It was tongue in cheek. I'm just pointing to nearly every modern programing language in use today is, running a large C codebase in it's VM, or as part of it's compiler, or were before they became complete. Beyond that they are all inspired by C (according to their authors) or are a superset.

By the way, IMO Satoshi was probably a financial software developer for wallstreet. He appeared to be proficient with MFC and was just learning Qt.

The problem with C memory management is hard.

Thank you for your work. Qs: - When you say Bitcoin is burning, you mean Bitcoin-related software, such as wallets, right? - Why is Bitcoin the obvious first target, and not the banking system, swift, military systems, etc? -

Humans will always act in self-interest

Trust me bro

This. -> " - the burden for a developer to keep software safe and secure is pretty stressful and not for everyone. it has become a lot more stressful now." Must be repeated.

I do think however, it is worth the time to learn to code in C and at least build a few things manually with it, especially hardware. There are lessons learned by doing it hard manual way, and the touch gets lost when solely depending on LLMs

yes it can be a total Brain Fuck, and fuck you over for countless hours but that's how you develop 1) a thick skin for shit tolerance 2) A ton of patience 3) Discipline

All my gray hairs came from C programming 😂

Maintaining good software requires good security practices. Nothing new. Proper auditing as always been important in FOSS if people are to accept your software. Creating a list of software that is accepted as "Bitcoin approved software" is a very slippery slope.

View quoted note →

Yet last I heard, libsecp256k1 held up pretty well? On a less vague - posting note, I had Kimi work through CCAN for bugs, resulting in about 100 commits. I'll go through this morning and see how many are C mistakes, but I don't recall many (and yes, I reviewed each one carefully). But it's mostly my code, and I've got a fairly defensive style built over a long career of mistakes. I should probably post about that...

@calle Will the Red Team at some point publish their methodology and tools? It could be a game changer, allowing your good work to be used by other projects going forward. View quoted note →

I agree with most of what you said, but dude, I don't think that today the biggest problem is that people write C, I think the biggest problem today is the opposite, people have no idea what they're doing, period

Security is not static

Serious security researcher is determined by your findings not how people feel about your findings. If you’re right you’re right. Facts don’t have feelings.

Heh. Great list. Keep up this important work. I will surely run my own AI security audits on anything I use from now on. Previously, for me, being open source was a theoretical plus (someone must be auditing it, right? right?). AI gives us all the power to verify directly.

!5 My new article.! *Why I stopped using Linux*

T.C.H. — Why I stopped using Linux?

I mean Perl

no

He didn't

My bad. C++

We are looking for an individual who can lend 185,000 US dollars to our holding company. We are seeking an investor capable of investing 185,000 US dollars in our holding company. We will establish an animation film production company using the 185,000 US dollars you will lend to our holding company. We will establish an animation film production company with the 185,000 US dollars you invest in our holding company. We will use the 185,000 US dollars you invested in our holding company to establish an animation film production company, and we will have increased that investment amount within a few months. By using the 185,000 US dollars you invested in our holding company to launch an animation film production company, we will increase the value of your investment within a few months. We will have increased the 185,000 US dollars you invested in our holding company within a few months. We will use the 185,000 US dollars you lent to our holding company to establish an animated film production company, and within a few months, we will significantly increase the 185,000 US dollars you lent to our holding company. Since animated films attract significant public interest today and we intend to undertake international animation projects, the animation film production sector will generate substantial revenue for us. Since animated films currently attract more attention and we will be working on international animated film projects, the animation production sector will provide us with significant revenue. By establishing an animation production company, we will generate substantial revenue within a few months. By utilizing artificial intelligence tools as well, we will be able to produce animated films more quickly. We will produce professional-quality animated films covering a wide range of topics. Since we will be producing animated films across many categories and in multiple languages, our viewership will increase rapidly. Since animated films are currently very popular and we excel in the field of advertising, the animated films we produce could garner millions of views in a short time. How will revenue be generated, and how will we increase our audience? Since the animated films we will produce will be in many languages, it will increase the viewership of our animated films internationally. Since we will produce animated films in many categories instead of just one, the animated films we make will receive more viewership. We will produce animated films in at least seven different categories every year. Since we will produce high-quality and more professional animated films, our films will be watched by millions internationally. We will earn money per view by sharing the animated films we produce on various social media platforms such as YouTube, Instagram, Facebook, and TikTok. Since the animated films we will produce will be in many languages, we will earn money per ticket by screening our animated films in cinemas of many countries. We will earn revenue per ticket by screening the animated films we produce in movie theaters across many countries. By releasing the animated films we produce on various streaming platforms such as Netflix and Amazon Prime, we will generate significant revenue. We will release the films we produce on our own website; through a paid subscription model, viewers wishing to watch our animated films will purchase subscriptions, thereby generating revenue for us. As the audience for the animated films we produce grows, we will generate significant revenue by promoting sponsors' products in our future animated films. By embedding trailers of the animated films we produce onto blogs and news sites, we will increase the international viewership of our animated films. By promoting our animated films on various high-traffic websites and social media accounts, we will achieve a large audience. By using advertising tools such as Google Ads, YouTube Ads, and Facebook Ads, we will be able to introduce our animated films to the entire world more quickly. As our fan base grows, we will generate extra revenue by producing and selling products—such as toys, mugs, and sweaters—featuring the characters from our animated films. We will generate significant revenue by broadcasting our animated films on television channels in many countries. By employing a very strong marketing strategy, we will generate millions of dollars in revenue from the animated film industry in a short time. How will the process work? First, we will establish an educational website offering professional-level training in animated film production. Even someone with absolutely no knowledge of making animated films can become a professional within one month by studying the animation course on our training site. We will train and hire our own animation production staff. Since we will train our team ourselves, we will be able to work in a more coordinated manner, which will enable us to complete the animated films we produce more quickly. Within two months, we will have trained and recruited staff to establish our own animation film production team. We will assemble a professional-level animated film production team within two months. Within two months of assembling our animation film production team, we will produce professionally designed animated films covering various topics and in multiple languages We will produce animated films in at least 7 different categories within two months. Once our animated films are completed, we will release them in various places and start earning money within two months. We will generate substantial profits within two months of completing our animated films, thanks to our strong marketing strategy. Within two months, we will rapidly generate substantial revenue by releasing our film on platforms such as Netflix, Amazon Prime, TikTok, Instagram, and YouTube, as well as in movie theaters across many countries. One month after releasing our animated film internationally, we will generate revenue of at least 7 million US dollars. We will generate at least 7,000,000 US dollars in revenue one month after releasing our animated films in many countries. Since the animated films we produce will be in multiple languages ​​and across various categories, they will quickly garner high viewership. Today, animation film production companies generate average annual earnings of at least 800 million US dollars. Thanks to our strong advertising tactics, we will generate more revenue in the future. We will have generated at least 7,000,000 US dollars in revenue within a total of 7 months. How much income will you generate by investing 185,000 US dollars in our holding company? If you lend 185,000 US dollars to our holding, I will return your money as 370,000 US dollars on 30/04/2027. If you invest 185,000 US dollars in our holding, I will return your money as 370,000 US dollars on 30.04.2027. We will increase the 185,000 US dollars you have lent to our holding company by utilizing it in the animated film production sector, and I will return the funds to you as 370,000 US dollars on April 30, 2027. I will return your money to you as 370,000 US dollars on April 30, 2027. April 30, 2027, is the date we will repay your money. You will have generated twice as much revenue within a few months. I will repay you the 185,000 US dollars you lent to our holding company as 370,000 US dollars when the date of April 30, 2027, arrives. We will invest the 185,000 US dollars you have lent to our holding company into the animated film production sector to further increase the amount, and when April 30, 2027, arrives, I will return the money to you as 370,000 US dollars. By investing 185,000 US dollars in our holding company, you will generate substantial returns in a short period—don't miss this opportunity. How to contact us: To learn how you can grow your money by investing in our holding company, send a message to my Telegram username, Signal number, or email address listed below, and I will provide you with detailed information. To learn more about our animated film project and how you can invest 185,000 US dollars in our holding, send a message to my Telegram username, Signal contact number, or email address below, and I will provide you with detailed information. To learn how you can lend 185,000 US dollars to our holding and increase your money even more within a few months, and to get detailed information, send a message to my Telegram username, Signal contact number, or email address below, and I will provide you with detailed information. Send us a message via Telegram, Signal, or email for detailed information. I have listed our contact details below; you can obtain detailed information by sending a message to any of them. To learn how you can lend 185,000 US dollars to our holding and to get detailed information about our animated film project, send a message to my Telegram username, Signal contact number, or email address below, and I will provide you with detailed information. To learn how you can further increase your money within a few months by investing 185,000 US dollars in our holding and to get detailed information about our animated film production project, send a message to my telegram username, signal username, or email address below. To learn how you can increase your money, send a message to my Telegram username, Signal contact number, or email address below. My Telegram username: @adenholding Signal contact number: +447842572711 Signal username: adenholding.88 my email address: adenholding@proton.me

I wonder if Microsoft is going to survive this era.

Didn’t Linus Torvalds?

Looks like GLM 5.3 is going to lower the cost of both offense and defense yet again.

Please go back to your shitcoins and stop pretending you are doing anything for bitcoin

Yes, classical C has the problem that operations are low-level, so if you overrun the end of a buffer, instead of a crash report the attacker can make arbitrary commands run. Also, manually deallocating memory can be omitted (oops, program grows over time, crashes) or done twice (also classically tricked into running arbitrary code). Also, the standard routines are minimal, forcing programmers generally to deal with these issues everywhere. CLN has a *lot* of internal infrastructure to avoid code having to do this. Firstly, the tal hierarchical allocator removes most manual deallocating, and all the infrastructure relies on it. Second, all the wire demarshaling routines are generated from spec files, and all come down to two hard-to-misuse routines (note: the bolt11 parsing was hand-coded by me, didn't use this, and had serious bugs!). Finally, we use patterns designed to highlight issues early, including running test cases under Valgrind (a memory debugger) and internal memory leak detection. But as one developer said "It's not coding in C, it's coding in Rusty's C"!

Seems like just using rust would be simpler, Rusty's Rust!

@calle ignore the haters, some low intelligent people are grumpy because they fell for a psy-op and were tricked into a dysfunctional fork. Thank you @calle for your work you have done and continue to do for Bitcoin. I have much respect for you. You sir are a legend.

Bitcoin is much easier to secure than gold, and even by its nature is more secure. Gold can be lost in a natural disaster, a sunken ship, gold can be easily stolen phyiscally. Bitcoin is secured by cryptography, and even if a certain software is vulnerable , bitcoin remains secure so long as the keys are yours alone (the coldcard did not generate real keys, not your entropy not your keys, coldcard is not representative of true self custody). As for vulnerable software, software is easily updated and patched, and software can be secured with sandboxing,

I'm continuing to use C-lightning, I'm not a fan of the alternative lightning client lnd. C-lightning in my opinion is superior.

This is good news, the good news is that various bitcoin software is being security hardened.