LeoWandersleb on Nostr: And this is why this "responsible" disclosure does more harm than good. People are ...

And this is why this "responsible" disclosure does more harm than good. People are supposed to run closed source because nobody must tell the world what's behind a ,$10 paywall.

quoting
nevent1q…egpe

Just that you know, the binary only release obfuscation does absolutely nothing.

We need to rethink vuln fixing in Bitcoin completely.

Assume everyone knows now. (I do, for less than $10 in inference costs).

Is there someone looking at old core lightning nodes in p2p net and letting them know somehow? Even an agent. Sometimes the info about the node owner is public. I'll try to look at it, but maybe someone running node explorers already has some of the info in their db. Perhaps mempool (nprofile…wlw2) or Blockstream (nprofile…hxm7) directly?