Deutsch
Elias Rohrer
Melden

Elias Rohrer

@_tnull

Doing bitcoin things @spiral_xyz.

  • Berlin
  • Beigetreten
1K Gefolgt956 Follower314 Beiträge
  1. Elias Rohrer@_tnull
    Elias Rohrer
    RT @bitschmidty: Why disclose these so soon? Core's recently updated policy fast-tracks the disclosure of easily discoverable vulnerabilities. LLM-assisted security scans/discovery helped motivate the change. (Note: easy to find doesn't necessarily mean easy to exploit) All three advisories credit Elias Rohrer's (@_tnull) Project Loupe (@ProjectLoupe) at Spiral (@spiral_xyz), with Greg Sanders (@theinstagibbs) validating and reporting the findings. @L0RINC also disclosed 2 of the findings and Andrew Dorman, 1. The fixes shipped in 32.1, 31.2, 29.5 and 30.4. 29.x is now end-of-life.
    0604
  2. Elias Rohrer@_tnull
    Elias Rohrer
    RT @fanquake: After a drawn out 32.x release cycle, we’ve shipped 32.1. v32.0 was tagged, but not fully announced/released, and after this last-minute discovery: we decided to ship v32.1, which fixes this bug, along with others (below) and includes other minor backports.
    Bitcoin Core Project @bitcoincoreorg
    Bitcoin Core v32.1 was released! It is available from: Release notes:
    02303
  3. Bitcoin Core Project✓@bitcoincoreorg
    Bitcoin Core v32.1 was released! It is available from: Release notes:
    198423419.7K
  4. Elias Rohrer@_tnull
    Elias Rohrer
    RT @spiral_xyz: .@jack thinks bitcoin payment adoption isn’t where it should be. We want your ideas on how @Blocks, Spiral, and you can increase adoption within 5 years. Our trajectory needs changing. Here’s more on our thinking. Now we want yours:
    011204
  5. Elias Rohrer@_tnull
    Elias Rohrer
    RT @rbitcoin_org: New on master: the built-in Esplora server can look up a confirmed output by its block position (the short channel ID Lightning uses), even after it's spent, with no extra index. The Lightning docs show how an app can use it to check channel announcements.
    0306
  6. Elias Rohrer@_tnull
    Elias Rohrer
    RT @rbitcoin_org: LDK Node can now start against rbitcoin on a fresh regtest chain. Off mainnet, Esplora /fee-estimates returns an empty map instead of a 503, so clients apply their own fallback. Mainnet is unchanged. Reported by @_tnull, who wants rbitcoin in LDK Node's integration tests.
    02010
  7. Elias Rohrer@_tnull
    Elias Rohrer
    RT @btcplusplus: Project Loupe - AI powered security scanning for Bitcoin OSS Projects
    0803
  8. Elias Rohrer@_tnull
    Elias Rohrer
    RT @TheBlueMatt: Giving up on esplora, mempool-esplora, and electrs. rbitcoin is the only thing we support now.
    02204
  9. Elias Rohrer@_tnull
    Elias Rohrer
    RT @btcplusplus: LIVE NOW: @_tnull from @spiral_xyz talking about Project Loupe, their open source security scanning harness
    bitcoin++ @ seoul, nov 5-6 🇰🇷 @btcplusplus
    Project Loupe - AI powered security scanning for Bitcoin OSS Projects
    0301
  10. Elias Rohrer@_tnull
    Elias Rohrer
    RT @spiral_xyz: Proof of value.
    Project Loupe @ProjectLoupe
    We file our findings privately. Loupe only shows up in public if a maintainer credits us, which many have: ✅ 754 commits, PRs, & release notes across 23 projects reference Loupe ✅ 610 distinct findings cited by issue number ✅ 132 merged PRs name the finding they fixed
    0605
  11. Elias Rohrer@_tnull
    Elias Rohrer
    RT @ProjectLoupe: We file our findings privately. Loupe only shows up in public if a maintainer credits us, which many have: ✅ 754 commits, PRs, & release notes across 23 projects reference Loupe ✅ 610 distinct findings cited by issue number ✅ 132 merged PRs name the finding they fixed
    0507
  12. Elias Rohrer@_tnull
    Elias Rohrer
    RT @bitcoinoptech: Clara Shikhelman (@ClaraShik) and Elias Rohrer (@_tnull) joined Optech to discuss Newsletter #426: News ● Dynamic one-byte message type IDs for BIP324 (45:02) ● Discussion of conventions for tagged hash tags in BIPs (49:04) ● Proposal for onchain, private bitcoin transfers with no consensus changes (1:15) Releases and release candidates ● Bitcoin Core 32.0rc3 (53:34) ● Core Lightning 26.06.9 (54:38) ● LDK v0.3-rc3 (23:38) ● LDK v0.2.7 (24:33) ● BTCPay Server 2.4.5 (56:55) Notable code and documentation changes ● Bitcoin Core #36277 (59:51) ● Bitcoin Core #36365 (1:05:09) ● Bitcoin Core #36338 (1:07:53) ● Bitcoin Core #32895 (1:10:38) ● Core Lightning #9582 (1:12:38) ● Eclair #3390 (1:18:03) ● LDK #5057 (33:00) ● LDK #5042 (35:55) ● LDK #5046 (38:25) ● LDK #5028 (41:43) ● LND #11290 (1:20:41)
    0605
  13. Elias Rohrer@_tnull
    Elias Rohrer
    RT @lexeapp: Introducing LexeConnect: a new protocol to connect a Lexe wallet to your app in one tap. Your app requests the scopes it needs. The user taps Approve in Lexe. Your app receives a scoped, revocable credential and can now receive, pay, or read from the user's wallet. Full video 👇
    0505
  14. Elias Rohrer@_tnull
    Elias Rohrer
    RT @moneyball: Fixmaxxing
    Spiral @spiral_xyz
    There should be a word for when vuln scanners and devs work side-by-side to quickly patch large amounts of issues. Catch-and-patch? Fixmaxxing? Anyway, 👇
    0405
  16. Elias Rohrer@_tnull
    Elias Rohrer
    RT @spiral_xyz: There should be a word for when vuln scanners and devs work side-by-side to quickly patch large amounts of issues. Catch-and-patch? Fixmaxxing? Anyway, 👇
    Project Loupe @ProjectLoupe
    🤫 First up, a Silent Payments fix. Currently, a 3rd party could alter a P2PKH scriptSig so the wallet extracted the wrong pubkey while the spend stayed consensus-valid. Not good. Loupe reported it and @theStack fixed it. No SP implementations were harmed.
    0503
  17. Project Loupe✓@ProjectLoupe
    Beiträge @ProjectLoupe
    🤫 First up, a Silent Payments fix. Currently, a 3rd party could alter a P2PKH scriptSig so the wallet extracted the wrong pubkey while the spend stayed consensus-valid. Not good. Loupe reported it and @theStack fixed it. No SP implementations were harmed.
    12202.6K
  18. Elias Rohrer@_tnull
    Elias Rohrer
    RT @spiral_xyz: New vertical: AI Caramba lets the goose team open up about anything AI. In this first edition, @dosinga explains how goose replaced the agent loop with a state machine that can be turned off anywhere and resumed like nothing happened. Where does it go in between? Hell if we know.
    02403
  19. Elias Rohrer@_tnull
    Elias Rohrer
    RT @ProjectLoupe: Loupe findings have been landing in Bitcoin Core. During this cycle, five PRs landed: three have been merged, two are under review. Below is a thread on what each one caught and which Core dev implemented which fix.
    02005
  20. Elias Rohrer@_tnull
    Elias Rohrer
    RT @Core_LN: Core Lightning 26.06.9 is out. Upgrade now. It fixes a newly reported vulnerability that can lead to loss of funds. Nodes running 26.06.8 or earlier are affected. Verify the signatures and install it as soon as possible.
    07205
  21. Elias Rohrer@_tnull
    Elias Rohrer
    RT @ProjectLoupe: A second opinion: ✅ Another model double-checks every finding ✅ It returns "inconclusive" 30.2% of the time ✅ 88% of "dismissed" findings weren’t refuted but rather not established ✅ 3,671 findings were verified more than once and only 105 got a conflicting verdict
    Project Loupe @ProjectLoupe
    Some personal news: ✅ Loupe has produced 26,821 findings across 43 open-source bitcoin repos ✅ Average successful scan took 2H 52M and returned 53.6 findings ✅ Longest scan ran for 36H 58M ✅ 26,809/26,821 findings shipped a proof-of-concept & 12,774 shipped a proposed patch
    0208
  22. Project Loupe✓@ProjectLoupe
    Some personal news: ✅ Loupe has produced 26,821 findings across 43 open-source bitcoin repos ✅ Average successful scan took 2H 52M and returned 53.6 findings ✅ Longest scan ran for 36H 58M ✅ 26,809/26,821 findings shipped a proof-of-concept & 12,774 shipped a proposed patch
    429213419K
  23. Elias Rohrer@_tnull
    Elias Rohrer
    RT @MistralAI: Meet Mistral Large 4, aka Le Chonk. • 1T parameters, natively multimodal. 49B active. It is the best open weights model from US or Europe on aggregated benchmarks. • State-of-the-art on critical workloads, including cyber defense, manufacturing and finance and it surpasses closed frontier models on visual grounding. • Forged in Europe end-to-end and is deployable from Europe via our own Mistral Cloud infrastructure. • Available to all via API today. Working with cybersecurity partners privately. Open weights release end of October.
    04.6K08
  24. Mehr Beiträge anzeigen