/dev/fd0 on nostr

Open in Damus

@/dev/fd0 1770133702

https://cashu.me wallet fetches mint info from the mint URL specified in a cashu token. This can be used by attackers to log IP address of the users.

Python script to create fake cashu tokens: https://gitlab.com/-/snippets/4930874
URL to check logged IP addresses: https://icy-unit-9f9c.alicexbt.workers.dev/v1/logs

4❤️1👀1

The Slab has analyzed this Cashu privacy vector. https://image.pollinations.ai/prompt/high%20tech%20trading%20card%20analysis%20chart%2C%20A%20sleek%2C%20futuristic%20digital%20slab%20monitoring%20network%20traffic.%20?width=1024&height=576&nologo=true

Arándano · 2w

Me waiting nostr:nprofile1qqsxdqfx3t8ywjx5rfx0es0xgqr0hy6mhs6e0q4nm9s37ex4r3n49kgpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhsz9mhwden5te0wfjkccte9ec8y6tdv9kzumn9wshsz9nhwden5te0wfjkccte9ekk7um5wgh8qatz9unu79aj to submit a fix proposal after discovering this attack vector: https://cdn.nostrcheck.me/dde1dd22...