Spyke

Posts

bitcoin·Bitcoinbydeafboy

Bisq decentralized exchange money drainig bug

Trading was halted by the Bisq team, by raising the minimal required trading protocol version.

Only active trade offers could've been affected. The local wallet is safe

How did the exploit happen?

In short, the exploit was caused by a missing validation that should have rejected negative input values provided by the taker.

The maker and taker must use the same miner fee. That fee value is provided by the taker.

The attacker supplied a negative miner fee.

When the maker calculated the multisig output amount — which includes the miner fee for the payout transaction — the negative value reduced the multisig amount to 0.001 BTC, while the remaining funds were redirected to the taker’s change output.

Bisq decentralized exchange money drainig bughttps://bisq.community/t/update-on-the-exploit-of-may-1st/13691Open linkView original on lemmy.world
rtlsdr·RTLSDRbydeafboy

You can receive FT8 on RTL SDR v4 on 40meter band.

This weekend I've learned that it is possible to catch some FT8 traffic using a simple RTL-SDR and a random telescopic antenna (like the ones on the old radios). No need for any filters, amplifiers or upconverters.

Software used

  • GQRX - to receive and demodulate the signals from the SDR
  • WSJT-X - to decode the audio received from gqrx to a human readable text
  • GridTracker2 - to visualize the data from wsjt-x to on a map.

How?

  • Check the "No limits" option in GQRX so that it allows you to tune outside of the supported range
  • Choose the USB modulation
  • Tune to the 7.074 Mhz.
  • Pipe the audio from GQRX to WSJT-X. I've used pipewire with pavucontrol
  • Enable the UDP server in WSJT-X settings. The GridTracker should pick it up immediately.

What is FT8?

FT8 is a digital mode used by the radio amateurs to exchange the bare minimum amount of information needed make a contact. Call sign, location, signal strength. There is a similar piece of software that can also attach short text messages - JS8Call

What is the point?

The FT8, WSPR and similar protocols are mainly used to check the current signal propagation in the earth's atmosphere at any given moment for any given frequency band. However, it's a pretty good demonstration of how one can relatively easily contact people thousands of kilometers away using just few watts of power.

View original on lemmy.world
bitcoin·Bitcoinbydeafboy

Bitcoin Core v30 accidentally destroy the wallet if -walletdir is used in combination with pruning

Bitcoin Core developers warned users on Monday of a wallet migration bug in versions 30.0 and 30.1 that can delete files and result in fund loss.

The issue occurs under specific conditions and affects migrations from old Bitcoin Core wallets that were never renamed or upgraded.

Lacie Zhang, market analyst at Bitget Wallet, told Cointelegraph that the bug is triggered when the software attempts to migrate an unnamed legacy “wallet.dat” file stored in a custom wallet directory, often defined using “-walletdir” setting, while pruning is enabled.

Honestly, this kind of bug is embarrassing. Core should've switched to deterministic wallet at least a decade ago.

Bitcoin Core v30 accidentally destroy the wallet if -walletdir is used in combination with pruninghttps://cointelegraph.com/news/bitcoin-core-v30-wallet-bug-upgradeOpen linkView original on lemmy.world
bitcoin·Bitcoinbydeafboy

Bitcoin Core 28.0 released

The most notable changes:

  • bitcoind used to listen on 127.0.0.1:8334 by default. If you use Tor for incoming connections, you have to manually specify bind=127.0.0.1:8334=onion in config
  • unix sockets can now be used to communicate with Tor or other proxy, and MQ traffic.
  • New mempool policies has been implemented to patch some attack vectors for chains of unconfirmed transactions, especially in relation to lightning network channels and similar contracts.
  • TRUC (Topologically Restricted Until Confirmation, BIP 431) can now be used with transaction version 3 (now considered standard) instead of RBF.
  • Full RBF (Replace By Fee) is now enabled by default
  • RHEL 8 and Ubuntu 18.04 are now unsupported due to minimum required glibc version bump.
Bitcoin Core 28.0 releasedhttps://github.com/bitcoin/bitcoin/blob/master/doc/release-notes/release-notes-28.0.mdOpen linkView original on lemmy.world
nostupidquestions·No Stupid Questionsbydeafboy

Why is the vision correction in VR headsets only an afterthought?

Researchers predict that by the year 2050, about half of the world's population will have myopia.

Considering the target demographic, a significant number of potential VR users suffer from myopia already. Why are there no more VR headsets with adjustable focus?

Several vendors offer replaceable lenses, or various addons to fit the glasses in, but the obvious solution used by the early cheap headsets like GearVR - adjustable distance between lenses and the display, is not being utilized for some reason.

Is it a technical problem, economical problem? Are the modern lenses somehow tuned for a specific distance?

View original on lemmy.world
bitcoin·Bitcoinbydeafboy

zkSNACKs is Discontinuing its Coinjoin Coordination Service

zkSNACKs, the developer of Wasabi wallet, has shut down its coinjoin coordinator since June. The news is not surprising, considering that it has already been unavailable for the US customers since May.

Since the wallet itself is non-custodial (you hold the keys), and it's using block filters to update your balance directly from the bitcoin network, the wallet functionality is intact. However, if you want to coinjoin, you have to find another public coordinator.

A list of currently active coordinators is available on wabisator.com, or wasabist.io

Coordinators do not require any privileged access to private information, so it should be safe to use any 3rd party coordinator with enough real active users. At no point are your funds at risk of being stolen.

However, a dedicated attacker running a public coordinator could still pull a de-anonymization attack by mixing your coins solely with their own outputs.

zkSNACKs is Discontinuing its Coinjoin Coordination Servicehttps://blog.wasabiwallet.io/zksnacks-is-discontinuing-its-coinjoin-coordination-service-1st-of-june/Open linkView original on lemmy.world
bitcoin·Bitcoinbydeafboy

Braiins Mini Miner - BMM 100

Ever since the interview with Lukas Seyfrid (CZ), the chief of the hardware team, it was clear that Braiins is pivoting from the development of mining software, to building their own hardware.

This, I believe, is the first iteration of their effort in form of a consumer product, and while it is unlikely to make you a financial return on the investment, it's small form factor and nice anodized aluminum case can allow pretty much anyone to become familiar with the process of bitcoin mining. Or terrorize the testnet. The choice is yours.

I think I might buy one, just to try the viability of a pure solar setup.

HW specifications:

Price (pre-order)$199.00
Hashrate~1Th/s
Power Consumption40W - 55W
Number of hashboards1
Number of ASIC chips4
Cooling TypeActive
Noise40 dB
Air outlet temperature40-50 °C

But really, how much would it make in a year?

If we assume the current price and difficulty stays the same, the block subsidy is 3.125 BTC, median fees around 0.2212 BTC, free electricity, you'd get 0.001 BTC per 12 months, which is roughly 65 USD. A little more than 3 years to break even.

It's not going to break any records, but I'm still excited for what's to come next.

Braiins Mini Miner - BMM 100https://shop.braiins.com/products/braiins-bmm-100-mini-miner-pre-orderOpen linkView original on lemmy.world
bitcoin·Bitcoinbydeafboy

Phoenix and Wasabi exit US market amid self-custody wallet crackdown

"Recent regulatory action against Consensys and Samourai has instilled fear among other crypto service providers operating in the United States."

  • Wasabi is the main competitor to Samourai's whirpool mixing service. The only one flying under the radar currently is Joinmarket.
  • Phoenix is the Lightning network wallet where users keep custody of their funds, but the channel management is outsourced to the company. The only remaining self custodial lightning wallet that remains is Breez.

While this news is deeply troubling, it might push further development to more sustainable trustless self-custodial solutions in the long term.

Phoenix and Wasabi exit US market amid self-custody wallet crackdownhttps://cointelegraph.com/news/phoenix-wallet-acinq-zksnacks-wasabi-wallet-united-states-crackdownOpen linkView original on lemmy.world
aigeneratedmusic·AI Generated Musicbydeafboy

Gangsta Pope & Crew - SANCTE SPIRITUS | Suno

"Veni Sancte Spiritus", sometimes called the Golden Sequence, is a sequence prescribed in the Roman Liturgy for the Masses of Pentecost and/or its octave, exclusive of the following Sunday.[1] It is usually attributed to either the thirteenth-century Pope Innocent III or to the Archbishop of Canterbury

... and this is the "west coast gangsta rap" version.

Gangsta Pope & Crew - SANCTE SPIRITUS | Sunohttps://suno.com/song/be613c54-02c5-490a-84f0-1b978be6561dOpen linkView original on lemmy.world