webdev :: @BtcpayServer integrations :: PHP/JS/Vibecode :: Let's change the world with #Bitcoin #nostr: [email protected]
EUSSR
Joined March 2010
- Tweets16.4K
- Following4.9K
- Followers2.6K
- Likes87K
ndeet ∞/21M retweeted
💥 Die FOMO hat ein Ende!
🎙️ Hier sind die heißesten News zur Zitadelle 2027 exklusiv vom Gemeinderat (Kay, Stackerella, Tobi, Harry und Daniel):
- Wo findet sie statt?
- Hat Markus Turm auf die richtige Location getippt und seine Wette gewonnen?
- Wie kommt man hin?
- Welche Tickets und Unterkünfte gibt es?
- Wann geht der Ticketverkauf los?
🚀 LFG.
🎧 Fountain
fountain.fm/episode/SjsSgtIi…
🎧 Hopp
sovereigncast.space/open?fee…
ndeet ∞/21M retweeted
Omarchy Mobile now has a home: omamobile.org
Native Omarchy on phones: Arch Linux ARM, Hyprland and Omarchy's own apps on a mainline Linux kernel. No Android underneath. No Google Play.
On the Pixel 7 Pro, 19 of 22 hardware parts work today: display at 120Hz, GPU, touch, Wi-Fi, Bluetooth, cameras, GPS, fingerprint unlock, NFC, charging and more. Modem and suspend are next.
Now I need help bringing it to more phones.
Community ports are underway for the Pixel 6, 6 Pro, 8 Pro, 9a and Fold, plus the OnePlus 13 and the POCO F3. The wanted list includes the Pixel 7, 7a, 6a, 8, 9, 10 and Tablet.
If you have an unlockable phone and want to learn kernel bring-up, this is the project. Stock Android stays on slot A and your calibration data stays read-only, so it's built to never brick your phone.
Point your agents at the repo, connect your phone to your computer, and let the tokens flow.
To hardware wallet manufacturers:
- why are you unable to protect customer data?
- why do you give customer data to 3rd parties (email, shipping)?
- why don't you care enough and risk your customers getting physically attacked?
At this point no excuses how lazy you are.
ndeet ∞/21M retweeted
Through all the challenges & AI attacks the @BtcpayServer still continues to ship the updates & fixes!
Thanks to all of you reporting issues, opening PRs and testing new versions on your servers.
Onwards ✊🗽
ndeet ∞/21M retweeted
Every CEO of exchange should follow Francis' example and fight for their users.
Politicians that passed these insane laws are accomplices in mentioned criminal kidnappings.
ndeet ∞/21M retweeted
BTCPay Server 2.4.6 is out! 🚨
Another security-focused release, bringing further hardening especially around our dependencies.
To update, go to Server Settings → Maintenance → Update, or run btcpay-update(.)sh from the command line after removing the parentheses.
ndeet ∞/21M retweeted
ANNOUNCEMENT: SPAM EMAILS HAVE BEEN SENT THAT APPEAR TO HAVE COME FROM OFFICIAL FOUNDATION DOMAINS.
We have traced this back to one or more compromised API keys on Cloudflare, and have already revoked all API keys.
The malicious domain in the spam email has been taken down.
Funds stored on Passport are safe and Passport hardware is not compromised.
We are working nonstop to discover exactly what happened and will put out a report ASAP.
ndeet ∞/21M retweeted
Vulnerability disclosure: github.com/spesmilo/electrum…
Frontier models are castrated and useless in cybersecurity. Claude immediately downgraded to opus 4.8 and quit altogether when asking how to secure servers before recent PHP RCE disclosures.
I used Qwen 3.8 Flash, GLM 5.3 F and DS 4.1 F locally, good enough for 95% of tasks.
Claude can no longer “Reverse Engineer Anything.”
Anthropic just quietly killed REA.
But Interesting timing.
After a few viral cases of people using Claude to reverse-engineer Samsung TV firmware and identify data-collection services, Anthropic appears to have restricted those reverse-engineering abilities.
ndeet ∞/21M retweeted
New release: Electrum 4.8.3. This release fixes a critical security issue, so we urge all users to upgrade. A description of the vulnerability will be published later today. (note: Windows Defender may show a warning about ZXing.dll, ignore that, it is a false positive)
ndeet ∞/21M retweeted
You know the CCP has an absolute banger version of the new Kimi 3.1 model with full cyber capabilities which was kept from release to try and appease US frontier AI companies crying about “Saftey”.
Don’t you feel safer now that only some governments/companies have the tools?
ndeet ∞/21M retweeted
⏰ Ab sofort gibt es alle News zur Zitadelle exklusiv auf nostr.
npub12gu2kjnlnkrkjt2npteh3qcn8cp8q5ufamw6jzkk4sjk7snd8flqa3sz97
ndeet ∞/21M retweeted
Liked PHP2Shell? You’re gonna love Node2Shell.
We reproduced CVE-2026-111497 as pre-auth RCE. On a vulnerable Node.js runtime, app.use(express.json()) is enough to expose your server to code execution through a single Brotli request. Patch your systems now!
imperva.com/blog/node2shell-…
ndeet ∞/21M retweeted
🚨 UPDATE: A public PoC demonstrates RCE on PHP 8.5.12, even after the October 21 security patches.
The attack is separate from the patched php2shell CVEs and requires specific session configurations and application weaknesses.
Our earlier concerns about PHP session handling remain relevant.
We've updated php2shell-protection with additional hardening guidance.
#php #cybercurity
github.com/syhunt/php2shell-…
ndeet ∞/21M retweeted
Honestly, it's kinda ridiculous that the plugin builder of @BtcpayServer has been under attack for days now.
There is literally nothing on that server now other than infrastructure for community to build and distribute the plugins.
Yet someone is burning tons of AI tokens and GitHub accounts to come up with more & more elaborate malware to try to take over the server.
Really gets you thinking about how most FOSS contributors will be forced to give up rather than keep dealing with this type of nonsense.
ndeet ∞/21M retweeted
Ask yourself, if the frontier AI companies actually cared about cyber security, why would they disable Zero Data Retention for their leading models?
The truth is, every time you get a cyber security flag, they are looking at that data for themselves to train on it.