tick tock, next block
#Bitcoin continues along as usual
Not giving a tinkers cuss about any damn thing

Exploit v Patch

This battle has been long simmering and those with superior tools and expertise have had the edge that allows them to find the vulnerabilities first .. and then to choose to disclose them, exploit them or sell them .. and yes, that last one is an entire industry

Exploitation of a BTCPayserver bug was a win for the Exploit team, but also the rapid response for the Patch team .. more news at 9 ;-)

https://opensats.org/blog/ongoing-exploits-of-bitcoin-open-source-software

Until it gets better

And it WILL get better! 💪

.. right now we are at the start of a journey where a mountain of unknown vulnerabilities are being identified .. and closed

It’s a race of Patch v Exploit

Bitcoin is first:
Security posture getting upgraded
Globally aligned experts
Collaborating
Funded

Then we’ll watch how it unfolds in the land of fiat 😬

Contribute to a repo?

1. DO THIS NOW:
Update your repos with a SECURITY.md to help make contacting you easy when others find vulnerabilities and want to disclose responsibly

2. Then focus on:
Now use today’s “frontier” AI model for cyber which is Moonshot’s Kimi k3

The US ai models are unfortunately borked and unable to find vulnerabilities, confirm with working exploits, or help build patches/solutions; everything Kimi can do in a single (well crafted) shot

@OpenSats announces support for red team initiatives; you can specify your donations go to this initiative directly if you want to support this .. 👇

https://opensats.org/blog/code-red-supporting-first-responders

Pay it forward

I appreciate the many many insights and learnings I've gleaned from @ODELL and @MartyBent and @Stephan Livera and many others over the last decade 🫂

These are all excellent men who walk their talk
They try stuff, they talk about the stuff they value
They are generous with their time and their knowledge
And they've done it week after week, year after year

I've learned a tonne from them and I'm eternally grateful

Just as I do with friends and family, I share what I believe is 'best'
They're always things I use myself - I've got actual skin in each game

Does it mean my approach is faultless?

Possibly not - but it's the very best I can come up with
And for my friends and family I owe them no less

I'll continue to share what I know and explain my choices
My objective is to help each person make informed decisions

Don't stop helping those who arrive at Bitcoin's door
Self-custody is core to the ethos of Bitcoin - it's critical
Help each newcomer find the solution that's right for them

Pay it forward 🧡

Thanks @Rob Hamilton

You mate, are a bloody legend 👑

Spending the last few days focusing on pointing KimiK3 at the wider bitcoin ecosystem beyond your own significant responsibilities at Anchorwatch is noted and appreciated - the responsible disclosures are helping other teams and projects close vulnerabilities that were unknown and exploitable

I'm aware you've pushed back on posting a donation address for people who want to contribute to the costs you incurred

BUT GUESS WHAT?

As @HODL would say: YOU CAN JUST DO THINGS!

So I zapped you on nostr and there's nothing you can do about it

Anyone could zap your nostr handle and there's not a damn thing you can do about it

🧡

Chat control in the EU

So the bureaucracy created a procedural loophole to overturn the EU Parliament’s very clear prior ‘NO’ vote on chat control

Horrendous outcome that now enables the bureaucracy to force scanning, logging and recording of every message you send/receive

Yet the real news is the mask-off moment that the EU Parliament is only a circus and utterly irrelevant in any decision making role in EU

If the EU Parliament let this stand then they may as well resign, and pack up and go home for good

Europe has fallen so far 😞