pull down to refresh

5 sats \ 2 replies \ @fonzdm 31 Aug \ on: The end of open source in Bitcoin security bitcoin devs lightning

I honestly would distinguish between "core" (or in general, proper bitcoin nodes) and any other product (btcpay, core lightning, they are companies products, although open source, so..). For core, can we really apply the same concerns?

write
compose
10 sats \ 1 reply \ @AaronDewes OP 31 Aug

BTCPay is owned by a non-profit.

Core Lightning is a Lightning node, which is also a "proper" node (although not Bitcoin directly).

In general, I highlighted these two examples of (in my opinion) wrong handling of security issues.

I believe for Bitcoin Core, it would be even more important to release source code alongside binaries than for these "less important" projects, because it's what the entire network relies on.

Not publishing the source code for that could allow maintainers to secretly hard fork the network without community consensus.

reply
15 sats \ 0 replies \ @fonzdm 31 Aug

I honestly think that a binary release from core without source code would never be installed (or at least, will be fiercely opposed) since the attention is at peak. Probably it won't even make to the github releases. Node runners i think do care about this stuff.

reply