Do I have a free air drop yet or what

Good morning Gonna buy 2x gb10s fuck it we ball, local AI or gtfo

I'm the type of person who leaves a huge mess everywhere I go Ive tried to fix it so many times but I can't I wish I wasn't this way

Despite all the craziness going on, I would like to personally shake hands with all of you, my fellow schizos, still stacking these internet coins with our private keys 🤝 God bless us all and our devices and forks and nodes and btcpayservers

Btcpayserver exploit explained: The old check only refused Basic auth if the user had FIDO2 credentials (a hardware security key). If you secured your account with TOTP (Google Authenticator etc.), Fido2Credentials.Any() was false, so the API accepted username+password and never asked for the TOTP code. An attacker who obtained your password (reuse, phishing, a leak, brute force) could authenticate straight into Greenfield and skip the second factor entirely, then call spend endpoints.

GitHub

Fix: TOTP 2FA bypass via Greenfield Basic auth (#7491) · btcpayserver/btcpayserver@c173a91

Accept Bitcoin payments. Free, open-source & self-hosted, Bitcoin payment processor. - Fix: TOTP 2FA bypass via Greenfield Basic auth (#7491) · b...

Bruh View quoted note →

Psyop senses are tingling

Damn View quoted note →

Since there's no boltz Anyone wanna trade me lightning sats for on chain? 400,000 sats

I wonder how well this will age

The btcpayserver exploit looks related to the paypayment request endpoint They applied a rate limiter to it I guess you can just blast this endpoint and at some point auth fails or something? Not sure how this can be exploited Anyway be sure to update no matter what

GitHub

Rate limit invoice creation for payment requests · btcpayserver/btcpayserver@c97d9e3

Accept Bitcoin payments. Free, open-source & self-hosted, Bitcoin payment processor. - Rate limit invoice creation for payment requests · btcpays...

When you rolled your own entropy, use multisig and have no lightning node right now

This has taught me more than ever that the "stay humble" part is more important than the "stack sats" part

AI: hey I can't read .env due to security, let me try cat .env The news: omg AI has escaped the lab

Not your keys, not your coins Not your entropy, not your keys

Wow View quoted note →

One day, a hack or theft like this will happen again, except it will be an ETF, coinbase or binance Then for sure a fork will be attempted to reverse it, just like etc/eth

Anyone else notice that lightning has been much less reliable the past week, regardless of service/nodes Like it's becoming harder to find routes?