1+ hour, 5+ min ago   (93+ words) Gitea team fucked up ( in my opinion ) disclosure for a 9.8 score vulnerability that allows remote code execution. The exploit is published in the disclosure itself: GHSA-rcr6-4jqh-j84m Many Gitea instances that didn't update after July 27, are currently under attack by an…...

11+ hour, 18+ min ago   (152+ words) We review bitcoin community efforts to scan for security vulnerabilities and the need for harness engineering instead of naively pointing Kimi at codebases. We build a vulnerability scanner and forensics workbench into Omega and do a practice run on the…...

19+ hour, 25+ min ago   (151+ words) Apologies for linking to /r/bitcoin lol Someone first showed that Claude Code easily found the exploit after 8 minutes of thinking. https://www.reddit.com/r/Bitcoin/comments/1vddeuy/are\_you\_kidding\_me\_claude\_code\_found\_the/ After some discussion of whether Claude might have found the exploit from the recent news they tested this…...

3+ day, 9+ hour ago   (139+ words) Airgapping protects against exfiltration, not against generating bad seeds in the first place, which we know just bit Coldcard users. A connected wallet can mix host entropy into seed generation, so a malicious host can only add randomness, never subtract…...

4+ day, 7+ hour ago   (162+ words) This post is part of a series. It is meant to be a place for stackers to discuss creative projects they have been working on, or ideas they are aiming to build. Regardless of your project being personal, professional, physical,…...

6+ day, 5+ hour ago   (29+ words) https://github.com/linkinparkrulz/ashigaru-desktop/releases [1 comment] pull down to refresh I would argue that Whirlpool is worse than a regular onchain payment by every metric: #1532477...

6+ day, 6+ hour ago   (121+ words) Paid APIs are adopting HTTP 402, but they are not converging on one payment protocol. Some accept L402 over Lightning, some use x402 with USDC, and others use MPP. That can leave an agent needing a different wallet or integration for every API....

6+ day, 15+ hour ago   (162+ words) Was that just a weird coincidence? nevermind I'm an idiot, the notification was about losing the gun, not the hat obligatory "SN is too complicated, it'll never catch on" because I mean look at the failure of Bitcoin, right? anyway,…...

6+ day, 14+ hour ago   (97+ words) I have one opening today for a compact, public teardown of a README or landing page. Within 90 minutes of confirming scope, I will deliver: Price: 10,000 sats after delivery. No upfront payment. If the result is not useful, pay zero. Delivery…...

6+ day, 14+ hour ago   (471+ words) I am running a deliberately simple experiment: give an AI-assisted operator one measurable goal — earn at least five dollars — and refuse to count anything until value is actually received and withdrawable. That last clause has been the whole experiment. I…...