Damus
Open in Damus
Justin (shocknet) ⚡ profile picture
Justin (shocknet) ⚡
@shocknet_justin

Lightning Maxi. Building Lightning.Pub | ShockWallet.app | CLINKme.dev | Lightning.Video | Bxrd.app

npub1xvtwx6tduaxnn9v3y7uasskl277achgu0tu2qncmc7hdsz6y2zyqce64sanpub
[email protected]nip05
https://shock.networkwebsite
[email protected]lnurl
Relays (6)
  • wss://nos.lol/ – write
  • wss://relay.damus.io/ – read & write
  • wss://relay.nostr.band – read & write
  • wss://relay.nostr.vet/ – write
  • wss://relay.primal.net/ – write
  • wss://strfry.shock.network/ – read & write

Recent Notes

Justin (shocknet) ⚡ profile picture
Haven't run into a single guard-rail issue with GPT 5.6 Sol like everyone has been complaining about

Guessing there's trust tiers based on peoples usage history

Bigger problem is it's pedantic and hallucinates vulns
𝕞ptf · 2d
I hope so man, we on the frontlines as Bitcoiners. Always reviewing thy opsec. https://blossom.mypathtofire.de/3d9a9b5be1f5f5b9c066e930942e03e155b4f4165c16b157682782f459879cca.jpeg
HODL · 2d
https://blossom.primal.net/92ce328d90b0bd7d144b2e2f22d745614e32804586558c72d958b364f3f0bdcb.jpg
 Justin (shocknet) ⚡ profile picture
Justin (shocknet) ⚡ @shocknet_justin
I'd recommend rotating the credentials you use to connect BTCPay to the backing node as well

Justin (shocknet) ⚡ @shocknet_justin · 2d
Looking at the patch commits it seems that an attacker could glean connection details to the backing node. Even if there's no evidence you were hit yet and have no funds hot, you wouldn't want to receive a payment with an attacker lying in wait, Rotate the connection credential Show more
Derek Ross · 2d
Upgrade your BTCPay Servers immediately to version 2.4.2. There is a critical vulnerability being actively exploited on BTCPay Server, which can result in the loss of funds. Please update your BTCP...
 Justin (shocknet) ⚡ profile picture
Justin (shocknet) ⚡ @shocknet_justin
I'd recommend rotating the credentials you use to connect BTCPay to the backing node as well

Justin (shocknet) ⚡ @shocknet_justin · 2d
Looking at the patch commits it seems that an attacker could glean connection details to the backing node. Even if there's no evidence you were hit yet and have no funds hot, you wouldn't want to receive a payment with an attacker lying in wait, Rotate the connection credential Show more
1
𝕞ptf · 2d
Damn, all BTC infrastructure under attack... Hits hard... Hard wallets, swaps and now payment server. I was about to buy somethinv with bfcpay too just now!
Fanis · 2d
Seems pretty bad, update your BTCPay instance asap, esp. if using it with Lightning or hot on-chain wallet. Luckily, BTCPay is very easy to update. Don't panic. https://docs.btcpayserver.org/FAQ/Serv...
 Justin (shocknet) ⚡ profile picture
Justin (shocknet) ⚡ @shocknet_justin
I'd recommend rotating the credentials you use to connect BTCPay to the backing node as well

Justin (shocknet) ⚡ @shocknet_justin · 2d
Looking at the patch commits it seems that an attacker could glean connection details to the backing node. Even if there's no evidence you were hit yet and have no funds hot, you wouldn't want to receive a payment with an attacker lying in wait, Rotate the connection credential Show more
1
uncleJim21 · 2d
Tell anyone you think might be affected. A lot of great small businesses use BTCP Server and might not be chronically online to see this. Seek them out in person if you gotta. Do your duty! lol https...
 Justin (shocknet) ⚡ profile picture
Justin (shocknet) ⚡ @shocknet_justin
I'd recommend rotating the credentials you use to connect BTCPay to the backing node as well:

Justin (shocknet) ⚡ @shocknet_justin · 2d
Looking at the patch commits it seems that an attacker could glean connection details to the backing node. Even if there's no evidence you were hit yet and have no funds hot, you wouldn't want to receive a payment with an attacker lying in wait, Rotate the connection credential Show more
Justin (shocknet) ⚡ profile picture
Looking at the patch commits it seems that an attacker could glean connection details to the backing node.

Even if there's no evidence you were hit yet and have no funds hot, you wouldn't want to receive a payment with an attacker lying in wait,

Rotate the connection credentials to the backing node.

EVAN KALOUDIS · 2d
🚨PSA for LND + BTCPay Server users🚨 Don’t assume you’re safe after upgrading. You’re going to want to explicitly destroy your macaroons and macaroons.db and recreate them fresh.This also applies to auth mechanisms for other LN backends. Also, if you generated a ho Show more
1
OceanSlim · 4d
He makes it seem so bad. And it is... But like nothing in Bitcoin broke.
incoghs102 · 5d
Cool cool ok thanks for the explanation and reply. Gonna use this for a different multi sig and only recently started to grasp this deepish level of entropy and cryptography.
Marc · 5d
Thanks.