pull down to refresh
You wake up and: PHP has two critical unauthenticated remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619), both rated 9.2. Exploitation started before the fix was published, and older versions (PHP 8.1 and below) have no official patch.…
If you run any sort of infrastructure, website, self-hosted service, cloud service etc etc etc it might be a good idea to just have an agent run daily if not hourly scans for any security disclosures that affect those systems, and notify you immediately if any vulnerabilities relevant to you are…
For people who already know what and why we need better OPSEC. We have been operating under an assumption that doxxing comes with high costs and requires intensive resources. And that deanonymisation is possible but expensive, that linking a forum account to a real identity takes a skilled…
There’s a rounded value heuristic (often discussed in Bitcoin privacy) which is inherited by any public chain, including non-shielded Zcash. This isn’t the case when values are hidden, especially for Monero and any shielded Zcash (or future shielded Bitcoin). A pool boundary… twitter.com/yfarmx/status/2109671242458358176
I've been meaning to check this ever since I saw Spirobel's tweet last week. Browser wallets have been a routine part of other chains like Solana for a long time. They're pretty convenient. I think it's pretty neat: I just tried using it with Stasher: https://youtu.be/-xN-RzpOLww I know browser…
one benefit of building in the browser is that the instrumentation tools work very well. for example it is possible to slow down specific network requests with the old monero-wallet-rpc the issue was that the concurrency of the local http server was interleaved with the…
I have come to suspect that to most people thinking is painful. Some of us are addicted to thinking. Some of us find it a necessity. Johnny enjoyed it. I even have the suspicion that he enjoyed almost nothing else. -- Edward Teller, eulogizing John von Neumann I listened to Ananyo Bhattacharya's…
Monero Research Lab meeting - October 21, 2026 The Monero Research Lab met on Wednesday, October 21, chaired by Rucknium. In updates, Rucknium is doing further analysis for his eclipse-attack fix (#11527); tevador is working on Share or Perish and relative time locks; vtnerd is adding tests to the…
For those who do not know: Nikolai was a true builder and one of the last genuine cypherpunks in crypto. He focused on elegant, permissionless, corruption-resistant systems rather than hype, profit, or personal branding. As one tribute put it, he spent his life crafting tools to realize a vision of…
today is Nikolai Mushegian's (@delete_shitcoin) 33rd birthday. here's to a genius who dared to see things for what they are and call them by their true names—and, most importantly, when he saw something wrong, he built the tools to make it right. Nikolai was a builder in the…
First published July 5, 2018 Came across this essay on the internets, hope it educates you the reader as much as it educated me. I admit I used to believe in Bitcoin. I was one of its most naïve and vehement apologists to friends, family members, and complete strangers (online). This was all before…
In my quest to investigate the rising RAM and storage prices, as I am looking to upgrade my workstation and build a NAS with plenty of storage for backups and media, I've been researching, ironically with AI, the market prices, the current and forecasted trends, and the news surrounding these…
We all know the idea of separating money from the state. The Myth of the Rule of Law by John Hasnas was the first time I saw someone try the harder cut IRL (non-fiction): separating law / lawmaking from the state. (The real first time I ran into the idea was in Heinlein’s The Moon Is a Harsh…
The Depoliticization of Law John Hasnas Advocates of the privatization of law often assume that unless law springs from some act of agreement, some express or implicit social contract by which individuals consent to be bound, it is nothing more than force. In this Article, I argue that this is a…
Monero Research Lab meeting - October 28, 2026 The Monero Research Lab met on Wednesday, October 28, chaired by Rucknium. In updates, jberman is on FCMP++ integration followups, Rucknium on more Nyx eclipse-attack defense analysis, gingeropolous on Share-or-Perish and antiproxy research in…
Stasher News FAQ To quickly browse through this FAQ page, click the chapters icon in the top-right corner. This will let you scroll through all chapters or search for a particular topic within this page. last updated: September 27, 2026 New Stashers Start Here What is Stasher News? Stasher News is…
Interesting find from my implementation of the Monero Inflation Checker (MIC). Some actor was sending coins to invalid stealth addresses. It seems unlikely this was searching for an exploit... But then it continues for three years, so seems unlikely it's just an undiscovered bug too. Heres a…