ODELL retweeted
at the rust-bitcoin summit, it has become clear that before rbitcoin takes over as the reference consensus implementation for bitcoin it will take over as the reference esplora implementation.
ODELL retweeted
Exclusive! Michael of @Boltzhq gives his LAST EVER interview: why he shut down the swap service, how AI changed the risk equation, and why he’s still optimistic about the future of software.
ODELL retweeted
🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases.
CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers.
Read - thehackernews.com/2026/10/cr…
ODELL retweeted
If they’ve worked on the PHP vulnerability for over 2 months then why has there been such a piss poor disclosure and rollout strategy?
It’s basically been a “in 24 hours you’re all fucked” rollout strategy.
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
openai.com/index/coordinated…
Readers added context they thought people might want to know
OpenAI may claim a role in the coordinated response and patching process. But the initial discovery and exploit development, however, occurred several months earlier by an independent researcher.
x.com/lcfr_hax/statu…
ODELL retweeted
Another fun infra project for me recently was moving all of our @torproject infrastructure to a proper Onionbalance setup, so now you have one Onion for a load-balanced back-end of nodes and services.
Using Tor in Cake just got a lot better, and is just a tap away 😎
We’ve expanded our Tor infrastructure in Cake Wallet v6.5.0! 🧅
New Tor nodes for Bitcoin and Litecoin, updated nodes for Monero and Zcash, plus Bitcoin fee estimates through our onion service when @torproject is enabled!
Want to try it out? Enable built-in Tor and select Cake Wallet (Tor) from your node list.
ODELL retweeted
Let’s set the record straight: @lcfr_hax was the first to discover php2shell and develop a working exploit. See his August 5 tweet: xitter.cf/lcfr_hax/status/208503…
His work convinced the PHP Foundation to invest in fixing this entire bug class. He then worked around the clock to review, test, and retest the patches.
ODELL retweeted
Go forth and open-source every IoT device in your house. Dump their comms. See what they're sending home.
God speed.
ODELL retweeted
PHP Security Advisories are out:
RCE via OOM corruption (9.2/10): github.com/php/php-src/secur…
RCE via stale global state (9.2/10): github.com/php/php-src/secur…
Need to upgrade to 8.2.35, 8.3.36, 8.4.27, or 8.5.12 ASAP to mitigate. Updates rolling out now. #PHP
ODELL retweeted
I pre-emptively disconnected ALL my sites / VPS servers from the web
I'll wait for the patch to hit at 2 PM UTC
If you have a PHP website, probably good to take them down until you patch PHP
69.3% of the web runs on PHP so this is going to be intense!
Good time maybe to buy cybersecurity stocks? (not financial advice)
ODELL retweeted
PSA: Do NOT use public WiFi or shady DNS servers for the next few weeks.
SSL is practically broken and you can be attcked with an MITM attack. Your ISP and other intermediaries can also spy on you. Use a trusted VPN.
It will take a few days at least to flush out this crap CA.
Instead of using 384 bit random private keys, they used private keys like the super secret, unguessable number 4.
They are a cryptography company. They had one job. They're selling Post-Quantum Cryptography while doing shit like this lmao.
Readers added context they thought people might want to know
SSL/TLS is not broken. The vulnerability involved eight eMudhra intermediate certificates, which major browsers and operating systems (Chrome, Firefox, Apple, and Microsoft) had already blocked by October 20. Updated devices are protected against these MITM attacks.
arstechnica.com/security/2026/…
emudhra.we-have-a-problem.com
ODELL retweeted
Your Claude Code can now chat on SimpleX!
With the MCP package we just released 👇, it can join channels/groups/talk to bots, and ask you before it connects or sends.
To run it: `npx -y @simplex-chat/mcp serve my-agent`
ODELL retweeted
Ask your AI "What has Luke Gromen said about the dollar and Treasuries? Give me timestamps." and get a real answer with links back to the episode.
That's the TFTC MCP server. It searches our podcast transcripts, reads The Commoner and pulls live bitcoin ETF flows and Treasury auction results. Works with Claude, ChatGPT, Cursor, Grok, Hermes and pretty much any agent.
Free. No account.
tftc.io/ai
ODELL retweeted
Huuuuuuge Cake update rolling out now, with two of the biggest missing pieces we had for the redesign we launched earlier this year.
I'm especially psyched for proper Bitcoin accounts in Cake, was the last missing piece for me on the Bitcoin side.
Get it now 👀
Big update alert! There’s a LOT packed into Cake Wallet v6.5.0 🔥
🗂️ Bitcoin Accounts + faster syncing
📈 Price charts
💸 Cash App Pay via MoonPay
🧅 Expanded Tor node support
🔒 Monero update + safer sends
🏹 Robinhood Chain
Plus plenty of fixes and improvements!
Update now to check it all out, and keep an eye out for upcoming video demos and tutorials!
ODELL retweeted
DeepSeek-V4.1-Flash-1017 is the new kimi k3.
I'd advise rescanning your code with this model, it finds things everything else previously missed, and its cheap!
ODELL retweeted
Talking to a lot of long time bitcoiners in the past two weeks, it's obvious that:
- there is a bitcoin fatigue (tech is moving, but people don't care, single sig or custodian NGU mentality)
- there is AI psychosis/FOMO
Bitcoin is freedom money. We achieved that already. (1/n)
ODELL retweeted
Unequivocally the best event in #bitcoin has been @tabconf over nearly a decade. Thank you @miketwenty1 and everyone else in ATL for a very memorable and inspiring #8. And @ALewin and @StephenDeLorme for the extremely engaging and educational bitdevs event. The building continues
ODELL retweeted
From Idaho to Oregon we are finding out again and again that responsible citizens who carry can end threats effectively. Conceal carry is a right and should not be restricted
ODELL retweeted
We're going live with @januszg_ for a special edition of the news hour!
Janusz will present Zark, his work at @lxdev_ funding GSR (Great Script Restoration), and our TABCONF 8 retrospective 📸 📰
xitter.cf/i/broadcasts/1yxBePqoa…
