pull down to refresh
Not on discord.
Maybe website, git repo, nostr, email, anywhere that is not a "walled garden" that is hidden from public view.
Again, if they have something to say, they should make it a public announcement.
"Why the fuck is someone called MADELINEVIBES, who did an "introduction to github" LAST YEAR, managing security releases for mission critical software?"
I absolutely agree
I was not talking about whether the discord is legitimate or not, I was talking about discord itself being the problem.
"inb4 "Discord is a walled garden and you shouldn't use it." Stay uninformed then."
No..... the fault is not US for being uninformed, it is THEM for not informing, by using discord.
real cypherpunks use things like XMPP, IRC, mailing lists, etc
Thanks for the clarification. How easy is it to decompile? What is to just simply stop anyone from decompiling and comparing with latest release?
Discord is non-credible and should be deemed the same as if anything claimed coming from discord as not existing. Discord sucks, is a closed source proprietary "chit-chat" platform, centralized system. And discord requires an account to view.
If it is on discord, it is same as if it does not exist, if someone wants to make an announcement, wel lthey shouldn't use discord. I am ignoring that CLN notice. This is all BS
WARNING: Do not update CLN
Consider it a trap. Even if the person saying "yeah, trust me bro" has a good reputation, so did ColdCard, and you do not know if their account or key was compromised. Don't trust. Verify.
The "update" is a closed source binary. I am claiming this to be a trap, If I'm wrong they can simply prove me wrong by releasing the source code of their claimed "update". If this is due to a vulnerability, it is better to recommend people to shutdown or take their router offline pending a delayed open source patch and details.
Backup source code of CLN, if CLN does not go back to open source or if they pull the source code, we shall fork it to something like OSLN (open-source lightning network)
Why is this garbage pinned? BIP110 is a poop-coin and Mechanic is part of a scam.
I propose this be unpinned.
WARNING: Do not install CLN update.
CLN is now closed source. Screw that. DO NOT TRUST CLOSED SOURCE BINARIES.
I was thinking this same exact thing, the moment they supported poop-coins they started experiencing issues. Poop coins are so convoluted and sloppy in code that they are just ripe for exploiting. Boltz should have just killed off support for such things and go back to btc and btc layer 2s only. onchain, lightning, liquid. Keep it simple.
Just please do not make wasabi into soy-ware, that is, software that is mobile use only. Anything that requires ios or android to use sucks, those are spyware. Phones also suck for use, limited to a tiny touchy screen that is hard to type on, and a very tiny screen that cannot even be plugged into a LAN.
If Wasabi stops being a desktop wallet, then it no longer is worthy of acknowledgement of existence.
Everyone, names have addresses. Canada also borders the USA by land. People have a right to reclaim their own property. And Canadians mostly are unarmed ;) also.
self custody was not the issue, the issue was the use of backdoored closed source "hardware wallets" which were not even audited. The coinkite scam does not impact those who use proper hardware wallets.
"whats wrong with satanism"
everything. Satan is a loser. Jesus is the way.
And Jesus can beat up Satan any day.
It does seem like Luke changed his mind on which algo to use, it is all chaotic and confusing. And they are going to keep their chain paused until september 1st, that is if no other issues come up.
Also, is Luke just making up the math and rules as this goes on? Are BIP110ers really just upholding this one guy as calling the shots now? This seems the opposite of decentralization to me.
I was a little bit too harsh on CLN.
I reacted in emotion when I should have analyzed the situation first. I am sorry.
They are in a tough place apparently, on how to publish an update without disclosing the vuln to those who might exploit people who are not patched yet. My respects goes out to the CLN dev team and their work.
However, I still stand by my concerns over closed source updates, and I would advise to not trust anything closed source. If CLN releases the security update as open source eventually, as it seems like the plan is, then that is good. If it were me, I personally would just be running CLN in offline mode instead of trusting a closed source update, then to wait for the open source security patch. But, at least people have choices here.