pull down to refresh

related

You wake up and: PHP has two critical unauthenticated remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619), both rated 9.2. Exploitation started before the fix was published, and older versions (PHP 8.1 and below) have no official patch.…

If you run any sort of infrastructure, website, self-hosted service, cloud service etc etc etc it might be a good idea to just have an agent run daily if not hourly scans for any security disclosures that affect those systems, and notify you immediately if any vulnerabilities relevant to you are…

For people who already know what and why we need better OPSEC. We have been operating under an assumption that doxxing comes with high costs and requires intensive resources. And that deanonymisation is possible but expensive, that linking a forum account to a real identity takes a skilled…

RRoxana λ (TheHat)@roxananasoi

There’s a rounded value heuristic (often discussed in Bitcoin privacy) which is inherited by any public chain, including non-shielded Zcash. This isn’t the case when values are hidden, especially for Monero and any shielded Zcash (or future shielded Bitcoin). A pool boundary… twitter.com/yfarmx/status/2109671242458358176

Until recently I have owned physical gold. As I got more into monero I bought less gold, and then I began buying more tokenized gold like $KAU, PAXG, and XAUT. Lot's more risk, but very convenient, portable and cheaper to secure. I've also considered buying tokenized platinum and palladium on…

I've been meaning to check this ever since I saw Spirobel's tweet last week. Browser wallets have been a routine part of other chains like Solana for a long time. They're pretty convenient. I think it's pretty neat: I just tried using it with Stasher: https://youtu.be/-xN-RzpOLww I know browser…

Sspirobel@spirobel

one benefit of building in the browser is that the instrumentation tools work very well. for example it is possible to slow down specific network requests with the old monero-wallet-rpc the issue was that the concurrency of the local http server was interleaved with the…

I have come to suspect that to most people thinking is painful. Some of us are addicted to thinking. Some of us find it a necessity. Johnny enjoyed it. I even have the suspicion that he enjoyed almost nothing else. -- Edward Teller, eulogizing John von Neumann I listened to Ananyo Bhattacharya's…

The Stash #01: What Monero Hides, and What It Doesn't Level: Intermediate Reading time: \~10 min Last verified: 26 Oct 2026 Version covered: Monero v0.18.5.4 "Fluorine Fermi" (GitHub release ) Contents In short Scenario Stop 1: Exchange Stop 2: Swap Stop 3: Payment Deadly zone: network and OPSEC…

The arcade gets stronger with each new arrival. But what if it had to last the server? Yes. Stasher is a game about creating a community with no bank, no landlord, and no timezone. It's built on Monero because we want the ability to control our own value, to be censorship resistant and self…

Monero Research Lab meeting - October 21, 2026 The Monero Research Lab met on Wednesday, October 21, chaired by Rucknium. In updates, Rucknium is doing further analysis for his eclipse-attack fix (#11527); tevador is working on Share or Perish and relative time locks; vtnerd is adding tests to the…

For those who do not know: Nikolai was a true builder and one of the last genuine cypherpunks in crypto. He focused on elegant, permissionless, corruption-resistant systems rather than hype, profit, or personal branding. As one tribute put it, he spent his life crafting tools to realize a vision of…

Cchaser@chaserxy

today is Nikolai Mushegian's (@delete_shitcoin) 33rd birthday. here's to a genius who dared to see things for what they are and call them by their true names—and, most importantly, when he saw something wrong, he built the tools to make it right. Nikolai was a builder in the…

First week of sn and here are some things I learned. I noticed myself spending more and more time on stasher.news lately, as this is one of the most refreshing sites I have found, and I would like to share what I have learned after hanging around for a while - sharing is caring. Starting with The…

First published July 5, 2018 Came across this essay on the internets, hope it educates you the reader as much as it educated me. I admit I used to believe in Bitcoin. I was one of its most naïve and vehement apologists to friends, family members, and complete strangers (online). This was all before…

In my quest to investigate the rising RAM and storage prices, as I am looking to upgrade my workstation and build a NAS with plenty of storage for backups and media, I've been researching, ironically with AI, the market prices, the current and forecasted trends, and the news surrounding these…

We all know the idea of separating money from the state. The Myth of the Rule of Law by John Hasnas was the first time I saw someone try the harder cut IRL (non-fiction): separating law / lawmaking from the state. (The real first time I ran into the idea was in Heinlein’s The Moon Is a Harsh…

The Depoliticization of Law John Hasnas Advocates of the privatization of law often assume that unless law springs from some act of agreement, some express or implicit social contract by which individuals consent to be bound, it is nothing more than force. In this Article, I argue that this is a…

Monero Research Lab meeting - October 28, 2026 The Monero Research Lab met on Wednesday, October 28, chaired by Rucknium. In updates, jberman is on FCMP++ integration followups, Rucknium on more Nyx eclipse-attack defense analysis, gingeropolous on Share-or-Perish and antiproxy research in…

Stasher News FAQ To quickly browse through this FAQ page, click the chapters icon in the top-right corner. This will let you scroll through all chapters or search for a particular topic within this page. last updated: September 27, 2026 New Stashers Start Here What is Stasher News? Stasher News is…

Interesting find from my implementation of the Monero Inflation Checker (MIC). Some actor was sending coins to invalid stealth addresses. It seems unlikely this was searching for an exploit... But then it continues for three years, so seems unlikely it's just an undiscovered bug too. Heres a…

no more