pull down to refresh
For people who already know what and why we need better OPSEC. We have been operating under an assumption that doxxing comes with high costs and requires intensive resources. And that deanonymisation is possible but expensive, that linking a forum account to a real identity takes a skilled…
There’s a rounded value heuristic (often discussed in Bitcoin privacy) which is inherited by any public chain, including non-shielded Zcash. This isn’t the case when values are hidden, especially for Monero and any shielded Zcash (or future shielded Bitcoin). A pool boundary… twitter.com/yfarmx/status/2109671242458358176
Looking to start doing some writing in a private way. I like substack, but they seem to be shoving more and more people into their app. They are proprietary, they are centralized, and they'll probably do the thing that happens with every "free speech platform" which is bait all the interesting…
https://www.youtube.com/watch?v=n3_sMAAERwo In this video I explain how a zero day vulnerability in Dread's anti DDoS software, along with it's head technical admin accidentally uploading a private key, lead to the sites main onion domain getting hijacked, and the site being taken offline…
If you run any sort of infrastructure, website, self-hosted service, cloud service etc etc etc it might be a good idea to just have an agent run daily if not hourly scans for any security disclosures that affect those systems, and notify you immediately if any vulnerabilities relevant to you are…
You wake up and: PHP has two critical unauthenticated remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619), both rated 9.2. Exploitation started before the fix was published, and older versions (PHP 8.1 and below) have no official patch.…
A critical bug in the Linux kernel was discovered. It's called CVE-2026-98432. It is rated 9.8 out of 10. Anthropic just showed that it can be used to take over a server remotely. If you have a VPS, you are most likely affected. Ubuntu hasn't released a fix yet. Make sure to update as soon as a fix…
Information is power. But like all power, there are those who want to keep it for themselves. The world's entire scientific and cultural heritage, published over centuries in books and journals, is increasingly being digitized and locked up by a handful of private corporations. Want to read the…
h/t https://x.com/tallhatdoug/status/2112664778351026362
Looking for what Monero veterans actually use if it isn't a CEX. Just the methods people here consider the safest practical ways to turn some Bitcoin or cash into XMR. What works, and what would you avoid?
Film by Michael Oswald (2018) that shows: How The City of London transformed from a colonial power into a global financial power How The City of London funnels wealth from across the globe and hides it behind obscure financial structures in a web of offshore islands How The City of London leverages…
Haveno 1.12.0 and RetoSwap v1.12.0-reto are out with security fixes, UI improvements and bug fixes since v1.11.0. What's Changed Security Verify offers, arbitrators and support messages from peers before using them. Prevent fake or replayed account data from raising trade limits. Only accept trade…
Daily Ops v2: Daily Ops have proven to be a great secondary incentive and way to help newcomers get started using and learning Stasher News. We wanted to flesh-out the idea a bit more and reward long streaks. Boost credits from the flame streak milestones are now worth 0.00025 XMR worth of ranking…
Ruling groups maintain power via force, but long-run ideological support from the majority is essential: “Once a State has been established, the problem of the ruling group or ‘caste’ is how to maintain their rule. While force is their modus operandi, their basic and long-run problem is…
I've been building monostr for a few weeks: an Android Nostr client where the "zap" is a Monero tip. No Lightning, no custodian, no KYC wallet in the middle. How it works: you register your primary address and private view key with a watcher (the same trust model as stasher.news, which is where I…
The Stash #01: What Monero Hides, and What It Doesn't Level: Intermediate Reading time: \~10 min Last verified: 26 Oct 2026 Version covered: Monero v0.18.5.4 "Fluorine Fermi" (GitHub release ) Contents In short Scenario Stop 1: Exchange Stop 2: Swap Stop 3: Payment Deadly zone: network and OPSEC…
Filippo Valsorda (Go cryptography maintainer and age author) just updated the Cryptographic Right Answers for the post-quantum era. Basically: stop inventing your own protocols, hug the hybrids before the harvest-now-decrypt-later crowd cashes in, and that symmetric crypto is still mostly fine. A…
First off, a list of donts. DO NOT use GNOME. It's objectively horrible DO NOT use base Debian. It has very old packages which are prone to exploits. DO NOT use Kali Linux. It's for larpers i cannot lie. Anyways, are you technologically able? (e.g can you install a web browser without assistance)…
https://x.com/KevinR4v/status/2119452284996243914
⚠️⚠️ All LNbits users should stop their LNbits servers IMMEDIATELY. ⚠️⚠️ Please forward this announcement. Following a wave of attacks, we have a number of security patches to push. Until then, it's better to err on the side of caution. 🙏 Updates to follow soon.
On October 6, OpenAI makes an announcement about an unreleased internal model resolving long-standing open problems in mathematics. https://openai.com/index/sharing-ai-progress-in-mathematics/ Then Justrin Drake tweets this And calls upon the blockchain industry to "calmly begin planning for…
Stasher News has another 11 months of server costs paid for, and platform funds to reinvest into developing or promoting Stasher. Lets hear your proposals and suggestions. What should Stasher News improve, add, rework, or polish? What should Stasher News be focusing on: product development,…