Dennis on nostr

Open in Damus

@Dennis 1702657617

LNbank Vulnerability Recap: Last week, a critical vulnerability was identified in the LNbank plugin, which I developed as a plugin for @BTCPay Server. The following post aims to outline what transpired and steps I, as a maintainer of the plugin, and BTCPay Server team are taking to prevent similar occurrences in the future. https://d11n.net/lnbank-vulnerability-recap

1313❤️13🤙7🫂4❤️1🏛️1🐇1

UNCLE ROCKSTAR · 140w

I'm sorry for all the have lost Bitcoin, but am also sorry for what you went through with this vulnerability. I know how much of your heart and soul you have put into this plugin over the years with the best of intentions. Thank you for your contributions Dennis 🫂

Derek Ross · 140w

I was not affected, but I read stories of those that were. They'll appreciate it he apology and the gesture. Thanks for the post mortem.

BTCPay Server · 140w

takinbrrrr · 140w

Thank you nostr:npub14j7wc366rf8efqvnnm8m68pazy04kkj8fgu6uqumh3eqlhfst0kqrngtpf. Appreciate all that you do for Bitcoin.

Pavlenex · 140w

We appreciate everything you do for Bitcoin Dennis 💚

Thank you very much for hanging in with this and work tirelessly to identify the source of the bug and fix it asap. Thank you for developing this great plugin in the first place. It shows that we need to care more for the software we use and help reviewing code and doing more adverserial testing o...

Jameson Lopp · 140w

Related, can you explain why BTCPay asks for an admin macaroon in order to connect a remote LND instance? Shouldn't a read-only macaroon with invoice permission suffice?

openoms · 140w

Thank you for the recap! Indeed these things can happen, but working and solving issues in the open teaches and benefits everyone. While also being sorry for the losses I am looking forward to what more you are building! 💚💚💚

You’re the man, Dennis. Thanks for all your amazing work.