calle

Without Lightning, none of the Layer 2s make sense.
Without it, every Layer 2 would be a useless silo and a centralization vector.
Maybe Lightning was Bitcoin's Layer 3 all along.
https://blossom.primal.net/e8efb658494ae4cdea50ceb367faa38028fb80e22609b54ba1afc9185c53463f.png

2026-08-27 08:53:34 UTC

- reply

if you can update it within a couple days, it should be ok to temporarily shut down

2026-08-27 08:52:30 UTC

- reply

cloud hosting, having no way to ssh into your node's box, being away from home etc

2026-08-27 07:29:00 UTC

- reply

you’ve certainly been mislead by people who have no idea what they’re talking about

2026-08-27 07:26:21 UTC

CLN action priority list:
- restart with —offline
- if you can’t, turn off
- if you can’t, pray

2026-08-27 07:07:03 UTC

If you can, restart with `--offline`.
If you can't, I would turn it off instead of doing nothing.
#nevent1q…qwn4

2026-08-27 07:05:57 UTC

- reply

Thats still safer than not doing it 😂

2026-08-27 07:04:46 UTC

Restart your CLN node with `--offline` and keep an eye out for updates.
Note that shutting it down for too long can expose you to force closure risk. Starting it with `--offline` will still observe the chain for malicious channel closures.
#nevent1q…v2uz

2026-08-27 07:00:01 UTC

- reply

added as comment!

2026-08-26 19:07:48 UTC

this too shall pass 🟥

2026-08-26 18:46:43 UTC

- reply

Restart your CLN node with `--offline` and keep an eye out for updates soon.
https://stacker.news/items/1555439?commentId=1555585

2026-08-26 18:46:06 UTC

🟥 URGENT: Critical vulnerability in Core Lightning
Blockstream developers urge users to shut down CLN Lightning nodes right NOW!
Please let everyone know!
https://blossom.primal.net/6bed280f966703baf8642602c70bfeada9730129e30890e6a41a1ec72820e03f.png

2026-08-26 13:43:25 UTC

- reply

how am I supposed to send this shit out?

2026-08-26 13:42:00 UTC

- reply

are you a bip110 retard?

2026-08-25 08:31:06 UTC

nostr on the front page of Hacker News
and of course it's funny
https://blossom.primal.net/3be52708a95b0cd6c257a45538b01550f31b39bed4a67bf154a947dd99cd2997.jpg
https://news.ycombinator.com/item?id=49399722

2026-08-23 09:26:44 UTC

- reply

as a non-routing node powering a cashu federation though....

2026-08-22 17:02:49 UTC

insane
#nevent1q…wzmw

2026-08-21 09:27:57 UTC

@nprofile…4nqj can you use this for your brain?
#nevent1q…vcm0

2026-08-20 08:21:24 UTC

we're all bitcoin red team
#nevent1q…3uts

2026-08-19 08:13:25 UTC

- reply

166 Mhz

2026-08-18 19:07:40 UTC

- reply

https://divine.video/u/tacobell

2026-08-18 19:07:28 UTC

https://divine.video/u/tacobell

2026-08-18 19:05:15 UTC

@nprofile…qwuj has an npub omfg

2026-08-16 16:04:46 UTC

- reply

can you share a link?

2026-08-14 11:11:12 UTC

cashu .me is now fully integrated with the latest version of npub .cash – that means your lightning address now works across all mints
settings -> Lightning address -> choose your mint
thank you @nprofile…umhn
https://blossom.primal.net/04f752672ab90a8d46bb22a639703668041fedafa6a8476738fffa19fa1ebc5e.png

2026-08-14 07:38:24 UTC

- reply

He didn't

2026-08-14 07:37:54 UTC

- reply

2026-08-14 07:28:41 UTC

nuts on the radio
#nevent1q…a8jd

2026-08-14 07:16:28 UTC

- reply

I mean Perl

2026-08-13 12:17:22 UTC

- reply

why humans should not code in c: we're finding memory-safety vulnerabilities in c projects that are prevented by default in many other languages.
in the past, finding a simple buffer overflow wasn't enough. you'd need a highly skilled hacker to turn the vulnerability into a working end-to-end exploit.
today, that's a single prompt.
#nevent1q…dvcy

2026-08-13 11:35:46 UTC

- reply

oh boy 😂

2026-08-13 11:05:05 UTC

gained a ton of new insights working in bitcoin red team 🟥 that i wish i could share without vague posting. but this is what i got anon.
- we’re experiencing a massive collision between decades of human open source slop against 2 weeks of kimi k3 (not good)
- everything is broken, bitcoin is burning
- bitcoin is becoming stronger through this
- bitcoin is the obvious first target but the rest of the world will follow shortly
- sometimes old things need to burn so new things can grow on healthy soil
- humans should never code in c (just stop)
- lightning is complicated and is more broken than the average (sorry)
- verification is free. we used to complain about slop PRs. then about slop security audits. if you can’t handle the information overload, stop complaining and use AI to sort through it.
- those projects that started AI audits months ago are in a completely different position than those who didn’t
- projects need their own AI audit pipeline going into the future
- the burden for a developer to keep software safe and secure is pretty stressful and not for everyone. it has become a lot more stressful now.
- unmaintained projects are most probably broken, don’t rely on them. i’d rather one-shot it myself with a modern AI
- multiple concurrent, diverse human approaches have proven to be the best vulnerability search method
- external red teaming will probably have to continue forever
- we’ve basically completed a basic scan of virtually the entirety of bitcoin open source. the low hanging fruit is done.
- we’ve reported a ton of real critical and high vulnerabilities. project maintainers across the board have validated our findings.
- response speed is very different across projects and shows how healthy each project is. i recommend acting fast these days.
- red team etiquette matters. if you don’t disclose responsibly, boast on twitter about your findings on a particular project, or make indications about the nature of particular findings, you’ve disqualified yourself as a serious security researcher. trust is the most important factor in this game. if you lose it, it’s very hard to win it back.
- did i mention that humans should not code in c?

2026-08-12 10:04:28 UTC

- reply

Everything is broken!

2026-08-12 10:04:01 UTC

- reply

never use a cold car ever again, how did you not get the message?

2026-08-11 21:29:35 UTC

- reply

mac + linux

2026-08-11 09:17:39 UTC

- reply

bip110 retard detected, opinion dismissed, added to mute list, have a nice day

2026-08-11 09:16:16 UTC

- reply

all I hear is sad fucking bip110 noises

2026-08-11 09:11:17 UTC

- reply

nobody gives even the tiniest fuck about what retarded bip110 shitcoiners have to say

2026-08-11 09:01:48 UTC

- reply

blocked for excessive retardation and bip110 brain damage

2026-08-11 08:01:57 UTC

- reply

at least I'm not a loser who fell for the most retarded scam in bitcoin's history

2026-08-11 08:00:52 UTC

- reply

wav and m4a!

2026-08-11 08:00:39 UTC

- reply

maybe your mom had too many drinks when you were still in her womb

2026-08-11 07:59:54 UTC

- reply

I don't talk to shitcoiners

2026-08-11 07:33:35 UTC

- reply

bip110 retard, max iq ~65, opinion dismissed

2026-08-11 07:32:49 UTC

- reply

bip110 retard loser, opinion dismissed

2026-08-10 21:32:52 UTC

- reply

handy.computer

2026-08-10 17:02:56 UTC

Say It — private, local text-to-speech for macOS
Open models 100% on-device, speak text from any app with a hotkey, and even clone your own voice.
Infinite voices. Free & open-source.
Listen to the video 🔊
https://blossom.primal.net/e649070d3a79dc06f35d8dee63b0b218cc1059928834aaeb3523e118c183e41a.mp4
Download for macOS: https://sayit.sh
This is my contribution to the war against paid apps that should be free. I hope you enjoy it!
Leave a star on GitHub ⭐️ PRs are welcome!
https://github.com/callebtc/sayit

2026-08-10 09:56:42 UTC

- reply

we have multiple pipelines that do this but it doesn't require a very sophisticated setup and it's easy to do it yourself.
I like @nprofile…4dda 's idea a lot.

2026-08-09 12:37:16 UTC

dickbutt.jpg
|
|
3 yrs later
|
|
V
luke dashjr
becomes a
shitcoiner

2026-08-08 23:08:24 UTC

🚩 Bitcoin Red Team Update
We're continuing a large-scale security review of the Bitcoin open-source ecosystem.
25 Bitcoin developers around the world have been working on this task non-stop for 108 hours.
https://blossom.primal.net/0a31b776061ffea8d5d1f544232bd40fdf2c2ed9812ca0a78d165483b8717f3f.png
We scanned 501 projects and produced 7,958 findings, of which 1,280 are rated high or critical (H+C) severity.
Our goal is to provide the most useful information. Based on feedback from maintainers, we've recalibrated our severity ratings and are now stricter about what we classify as H+C.
https://blossom.primal.net/a1c91429c176f784c66117ae1b19a4ae468336aa33131e517fec509bbe7d8df3.png
The share of all findings rated H+C increased to 16.2%, and the share of findings with a reproducible proof of concept increased to 24.7%.
That means our accuracy is improving.
As we harvest the low-hanging fruit, we're now focusing on improving harnesses, deploying better cyber-capable models, and probing more sophisticated attacks.
https://blossom.primal.net/ce6dde791e2f5468d7942c410092726655714af84765c8c855cf1c135d742800.png
Our AI spend remains consistently high.
Our cumulative spend has passed $58K as we add more inference sources. Notably, we've started using cyber models from OpenAI and Anthropic.
These models are producing incredible results, but the vast majority of our spend (74%) still goes to Kimi K3.
Kimi K3 remains the top choice among our hunters, but we've also seen a significant increase in the use of Qwen 3.8 over the past few days.
https://blossom.primal.net/4da137b276eba405c01bd5d58101e0f29f0bbd11c6192916bc87506ed81267cb.png
Our goal is to strengthen the Bitcoin ecosystem and increase the resilience of our infrastructure in the age of AI.
To achieve this, we're conducting the largest red-teaming campaign in Bitcoin's history.
As a Bitcoiner, I am immensely proud of this.
We're sharing all our findings with developers for free.
This would not have been possible without the generous support of organizations like @nprofile…5h0z and donors like @FPuklowski and @nprofile…8a9z.
You can help keep the Red Team alive by donating to the OpenSats Red Team Fund here: https://opensats.org/funds/red
Last but not least, our reporting rate is picking up. Thanks to our outreach team, we've reported 29.4% of our findings so far.
We're also rolling out new infrastructure to deliver these findings to projects more quickly and securely, while improving how we incorporate feedback.
Stay tuned!
https://blossom.primal.net/c52088aa3fb6c6692c54c791be525a0a99476ccfa54f3831943fb83f6481e62f.png

2026-08-08 20:55:06 UTC

it's finally over!
the bip110 cancer is finally removed from bitcoin!
what a massively inconsequential waste of time!
https://media1.giphy.com/media/v1.Y2lkPTc5MGI3NjExcWpwYTZmcWY3NHU4eTk0bDVrMGlpdzdxeTkyZzVqM2Y3dzJ3eXdueCZlcD12MV9pbnRlcm5hbF9naWZfYnlfaWQmY3Q9Zw/KYElw07kzDspaBOwf9/giphy.gif

2026-08-08 19:37:31 UTC

fork off
gg

2026-08-08 12:50:48 UTC

Gocoin 🤝 Red Team
Thank you for pushing a fix so quickly. Brilliant red teaming by @nprofile…fzlj 🚩
https://gocoin.pl/gocoin_news.html
https://blossom.primal.net/adce14082103596aa5b33c16cc627b351db5af4ecabdaa19a07737c398f383e7.png

2026-08-08 12:07:25 UTC

https://blossom.primal.net/d8e95767cd28ec66b144b464eace61e19990ae82f41df28a5c889d0b3be946f4.png

2026-08-08 11:28:33 UTC

- reply

i disagree.

2026-08-08 11:02:35 UTC

- reply

both of these screenshots are shared with permission
have an issue?

2026-08-07 16:55:20 UTC

- reply

Turn off your BTCPay Server immediately if you can’t update right now.
#nevent1q…u76c

2026-08-07 16:02:35 UTC

gm
https://blossom.primal.net/4c57a10cabc9c81985443ab783795713cd10117c5c01380aba30c059a78f1fa7.jpg

2026-08-07 15:52:59 UTC

🚨🚨 URGENT: BTCPAYSERVER 🚨🚨
There is a critical vulnerability that is being actively exploited on BTCPay Server which can lead to loss of funds.
Update your BTCPayServer to to 2.4.2 or turn off your BTCPayServer now.

2026-08-06 17:52:27 UTC

🚩 Bitcoin Red Team update 55 hours into the campaign
We're now 24 people working around the clock.
We've scanned 425 projects so far and have produced 1029 high+critical (H+C) findings.
https://blossom.primal.net/9c1af29b7a362e981cdac51f88186552e3e0e9c9fbc18fae5047d12015ad8565.png
We generated 6700 findings so far and are hitting 7.7 projects per hour.
Our H+C rate per person per hour is back at ~1 as we work off a massive backlog and as the team grows and naturally divides up roles.
We have hunters, wizards, outreachers, sugar daddies, and gigglers.
https://blossom.primal.net/4dc7b8b0c997a50ba2c60f8d69add016370cd0a76838b2244799c8f385b4d252.png
https://blossom.primal.net/ed41ccd68901b5a794084466bc552e57e41f7d026d5b91da39dd8b4fe0064ef7.png
Our H+C ratio is at 15.4% of all findings, increased by a percentage point compared to yesterday.
This is great, our accuracy is stable, and even slightly increasing. We're trying out best to reproduce all critical findings in local regtests before reporting them to projects.
https://blossom.primal.net/fd24c2f5f8057510eeca48735c208268303795feab03085cbd8c2e6de2659b04.png
Our biggest bottleneck is outreach. Most projects don't have a SECURITY .md in their repos (19.5%). Only 13.1% have an email in there.
We're working on better ways to reach folks. In the mean time, the best thing you can do as a project maintainer is to leave an email address in your repo.
https://blossom.primal.net/0c7e7ca2e032b79a7f84a4cbb775fbe2e609bb9ab5ca6dfa3dd0c8bd0adf5885.png
Thank you to the sponsors and donors who cover the costs of this campaign and help to keep it alive.
Specifically @nprofile…5h0z, FPuklowski, @nprofile…8a9z, and everyone who has donated to OpenSats Red.
https://opensats.org/funds/red
An incredible team of some of the most hard core Bitcoiners I know have assembled and dedicated their last days to this effort.
We've seen shit.
I don't want to reveal anyone personally, they can choose to do that themselves, but I think the way that people came together to join forces was and still is the most beautiful part about this entire program.
It makes me very hopeful, seeing so many people step up and give their time and energy to Bitcoin, especially during times of pain.
We're not done yet.
https://blossom.primal.net/833de63c0d642b97bc6662803604b1173578a16528b1908be8448830351668a2.png

2026-08-06 16:10:10 UTC

- reply

we don't disclose which projects we scan, or the results

2026-08-06 15:11:31 UTC

- reply

thank you opensats
#nevent1q…ngx9

2026-08-06 15:10:01 UTC

- reply

where's the food?

2026-08-06 15:06:13 UTC

hi
https://blossom.primal.net/4175f79ea16b727bab14e31fedf0151e33a0bf26c63f1cc4a642defe24e274dd.png

2026-08-06 14:35:35 UTC

what day is it
https://blossom.primal.net/b03b3b36259254876516e23d112e7850f56d48625f392c94208f121c52198979.png

2026-08-05 00:29:43 UTC

- reply

multiple...

2026-08-04 22:11:37 UTC

i keep thinking about all those who lost their life savings in the colcard disaster. it's so incredibly sad.

2026-08-04 22:10:05 UTC

- reply

🥵

2026-08-04 18:53:56 UTC

https://blossom.primal.net/bf3bd6e5a792247d251c52a8ddfb3832e1f05946ee5798324f1b8b782e00d730.png

2026-08-04 00:43:54 UTC

- reply

no, you will be able to get them

2026-08-04 00:41:35 UTC

oshitI forgot to water @nprofile…ze0e

2026-08-03 22:08:43 UTC

- reply

bug was reported, fixed soon!

2026-07-31 15:01:43 UTC

- reply

yep happening right now

2026-07-31 15:01:22 UTC

help your bitcoiner friend with a coldcard today

2026-07-31 12:40:52 UTC

- reply

fuck man I'm so sorry

2026-07-31 12:38:02 UTC

bitcoin is burning

2026-07-31 12:37:51 UTC

This is worse than any previous Bitcoin exchange hack. It is arguably one of the worst things that could happen.
The popular hardware wallet COLDCARD has a faulty random number generator (RNG). Funds are being drained from ordinary users’ hardware wallets as you read this.
Users first reported to Block less than 24 hours ago that funds were moving out of their wallets. The exploit was most likely discovered with the help of AI. Block has confirmed that the RNG is broken. You know what that means.
There are likely already multiple attackers competing for the affected BTC. Many more will join very soon.
Nobody knows how much BTC is affected.
Nobody knows how many users are affected.
This attack has only just begun, and it will continue until all affected BTC has been drained unless users secure their funds first. Inevitably, many Bitcoiners will not hear about the incident early enough to respond in time.
I am truly saddened for everyone affected, especially those who may have just lost their life savings.
The worst part is that they did everything right.

2026-07-31 02:10:51 UTC

- reply

Which people have you met recently and how are they like?

2026-07-31 02:08:39 UTC

@nprofile…4nqj how much did you spend on inference in the last few days?

2026-07-30 15:36:36 UTC

I love Granola
Granola is a decentralized exchange layer on top of Cashu. It connects Cashu wallets across mints and coordinates atomic swaps over Nostr.
https://github.com/brenorb/granola

2026-07-30 15:32:37 UTC

Stateless Bash CLI for buying a @nprofile…3j25 VPS with Cashu or Lightning
https://github.com/gudnuf/charon

2026-07-30 11:29:19 UTC

free your model and your mind will follow

2026-07-30 11:03:44 UTC

- reply

handy.computer et al

2026-07-30 10:56:50 UTC

speech to text: solved. great open source apps out there that run fully locally and achieve incredible results.
text to speech: frustrating. couldn't find an app to generate audio offline with open source models.
made me so angry that I'm going to release a new project today.

2026-07-29 15:26:42 UTC

- reply

I don't know, I only have a pixel watch to test. but it should, it's pure wear os

2026-07-29 15:25:03 UTC

- reply

you'll find it in the next github release! (reproducible builds even)

2026-07-29 11:29:47 UTC

- reply

now on github, later on play store et al