I'm the type of person who leaves a huge mess everywhere I go

Ive tried to fix it so many times but I can't

I wish I wasn't this way

Despite all the craziness going on, I would like to personally shake hands with all of you, my fellow schizos, still stacking these internet coins with our private keys 🤝

God bless us all and our devices and forks and nodes and btcpayservers

Btcpayserver exploit explained:

The old check only refused Basic auth if the user had FIDO2 credentials (a hardware security key). If you secured your account with TOTP (Google Authenticator etc.), Fido2Credentials.Any() was false, so the API accepted username+password and never asked for the TOTP code.

An attacker who obtained your password (reuse, phishing, a leak, brute force) could authenticate straight into Greenfield and skip the second factor entirely, then call spend endpoints.

https://github.com/btcpayserver/btcpayserver/commit/c173a9192d1d4dd1ca837dd906b586af8790632f

Bruh

Psyop senses are tingling

Damn