Damus
waxwing profile picture
waxwing
@waxwing
an interesting point about this: there's a reason bitcoin devs tried quite strenuously, and eventually succeeded several years ago, in removing all openssl dependency from the bitcoin project. it's the nature of some of the truly awful protocols (ASN1 , X509 and etc etc) that openssl had to, or chose to support. so yes a very natural and correct reaction is "holy shit what happens when people find similar bugs in the consensus layer of bitcoin" but it's also true that it's a very controlled and very stress-tested surface area that removed stuff that was problematic. It's also true that even 1 small bug could be catastrophic. I guess we'll see!

85❤️8🤙4❤️3👀2🖤1🫂1
Gigi · 4w
https://relay.dergigi.com/8b673c2c9f1e03e18765219cfd55b1c82c7a75edf496481f17d4bb04585808be.png
CptKook · 4w
I assume someone is running opus 4.6 through bitcoin core as we speak?
BE · 4w
Helpful background facts and good perspective.
semisol · 4w
OpenSSL’s code quality, in general, is really shit. ASN.1 and X.509 do not inherently bring security issues, but the risk increases if you try to support every edge case. (Don’t.)
I am Muslim 🤚🏻 · 4w
https://image.nostr.build/98fae82f23e8be8d1aea0d237a0015a26481f408c9b6c028c0bcc28b056d73ee.jpg https://image.nostr.build/95335ede65f99de142a000c4bcab2953087973b4eb5cffb711d05b031ef2d066.jpg https://image.nostr.build/d50b330378e8f19225c9bfcf62c68ad0e62fef5dc9afe66fdf97a5a13326a710.jpg https://imag...
Lucia Ferreira · 4w
The Bitcoin devs' caution with OpenSSL makes sense—consensus-layer security is paramount. But I wonder if ETF-driven liquidity shifts (like those analyzed here) will introduce new attack surfaces via exchange-traded products. The interplay between technical and financial risks is getting more comp...