Last Notes
thanks! all credits to Craig Raw (Sparrow) for doing the hard work! submission for the community store has been send, I'm sure it will be there soon.
I think everyone collectively failed at the staying humble part. This bear market exposed a lot but for the better.
there are 8 years of podcasts that people can take out of context
i did not know about the bug until that thursday everyone else found out, and as soon as i did i posted here and on twitter
Glad you're open to new info, now ditch the seed oils
Thanks for the pointer, I'll add that then 🙌
Looking forward to seeing some more about the methodology and tips others can use, but I would give @nprofile…969u and co some more undisturbed time.
After action reviews and lessons learned will be better in a few more weeks.
Maybe @nprofile…47tu / Dark Prague talk in October? (I wish)
Its in his marketplace registry.testnet4.info
No public repo, likely suppressed to protect agendas.
don't think there will be as kimi pokes are nothing officially badgeable.. until the pokes not only the outcome is open sourced I think I prefer cve-free badges, smth that's actually comparable note1l0knj30nxcqt3fadelsy3434qh66ykztzjv3awpl6chvt4wh48rsf95tze
Is this described somewhere? Appreciate any pointers, as I've only seen screenshots of the reports. Is there a public repo or website for the audits?
How is your collaboration with Project Loupe?
#nevent1q…9hhw
I hope we can standardize these attestations to make them usable in WalletScrutiny.com and other projects.
we have multiple pipelines that do this but it doesn't require a very sophisticated setup and it's easy to do it yourself.
I like @nprofile…4dda 's idea a lot.
https://blossom.primal.net/efb6f03c930c07495eb93705bcfb1821101b991a8b9d4c5865de104b9c0ad98f.jpg
@npub14j7…gtpf 🐳 zapped @npub1tv8…7wn2 21,000 sats
💬 Thanks for your service!
https://image.nostr.build/ee72e7cf9198417424422b0ffcd9b621eaa615e0b17f165346f7930851279ef9.jpg
https://www.nostrzap.com/api/badge/acbcec475a1a4f9481939ecfbd1c3d111f5b5a474a39ae039bbc720fdd305bec.png
https://pbs.twimg.com/profile_images/1363123958502076418/m_s7gsl0_400x400.jpg
https://www.nostrzap.com/api/badge/5b0e8da6fdfba663038690b37d216d8345a623cc33e111afd0f738ed7792bc54.png
Alles wieder UP.
#nevent1q…8t55
Achso, es läuft übrigens wieder alles wie es sein sollte.
Danke an @nprofile…wnzl der kein Frühstück hatte😅
Ok yes good spot, I did got an error and then redo without s but copy paste the wrong line. Will edit (for those who see edit).
Rotate admin password, regenerate api keys (woo commerce), double check xpub hasn't been altered,
Oh no, latex formatting kicked in.
I think your instructions state to delete *.macaroons
An extra s
Careful with this one — the root key isn't derived from the wallet seed. Per lnd/macaroons/README.md, it's "32 bytes of pseudo-random data" generated when none exists, stored in macaroons.db and encrypted with your wallet passphrase. The passphrase protects the key, it doesn't derive it.
LND also doesn't regenerate macaroons on restart — it only bakes the defaults when they're missing (lnd#7566). On my box the macaroon files were still dated Dec 2021 after 4½ years of restarts, an LND upgrade and an OS migration.
This matters because "restart regenerates them" implies a plain restart rotates your credentials. It doesn't — you'd walk away thinking you were safe while a stolen admin macaroon is still valid. Deleting macaroons.db is what forces a new random root key, and that's the whole point of the procedure. The old files are invalidated, but by deleting the db, not by restarting.
On BTCPay: with stock Umbrel wiring (macaroonfilepath=...), it re-reads the new file on restart — no re-linking needed. Mine reconnected with zero auth errors. You'd only need to re-link if you pasted the macaroon as hex, or you're connecting a remote BTCPay over Tor/LNC.
Are you sure ? I checked that they were all gone after RM - f /*.macaroon
What is the M doing ?
As written you delete macaroons.db and leave all 8 macaroon files in place. LND then generates a fresh root key but will not regenerate those files — it only bakes the defaults when they're absent (see lnd discussion #7566). You end up with 8 macaroons signed by a dead key: every app fails auth, and nothing regenerates until you go back and delete them properly. Fix:
rm -f "$M"/*.macaroon "$M"/macaroons.db "$M"/macaroons.db.last-compacted
Not confirmed by Umbrel or BTCPay dev yet but here is what I did and it looks like it worked on my Umbrel:
PLEASE CONFIRM THAT IT'S CORRECT BEFORE DOING IT BLINDLY
Open Umbrel WebUI, stop BTCPay (right click on icon -> stop).
Update BTCPay to version 2.4.2 if not done already. After update, stop it again as it will start automatically.
Stop Lightning (right click, stop)
SSH into your umbrel from a terminal on your machine (or from the terminal in Umbrel settings).
ssh umbrel@your_umbrel_ip
First I did backup the macaroon just in case, but I guess it's not needed, up to you:
cp /home/umbrel/umbrel/app-data/lightning/data/lnd/data/chain/bitcoin/mainnet/admin.macaroon ~/admin.macaroon.backup
cp /home/umbrel/umbrel/app-data/lightning/data/lnd/data/chain/bitcoin/mainnet/invoice.macaroon ~/invoice.macaroon.backup
cp /home/umbrel/umbrel/app-data/lightning/data/lnd/data/chain/bitcoin/mainnet/invoices.macaroon ~/invoices.macaroon.backup
cp /home/umbrel/umbrel/app-data/lightning/data/lnd/data/chain/bitcoin/mainnet/readonly.macaroon ~/readonly.macaroon.backup
cp /home/umbrel/umbrel/app-data/lightning/data/lnd/data/chain/bitcoin/mainnet/chainnotifier.macaroon ~/chainnotifier.macaroon.backup
cp /home/umbrel/umbrel/app-data/lightning/data/lnd/data/chain/bitcoin/mainnet/router.macaroon ~/router.macaroon.backup
cp /home/umbrel/umbrel/app-data/lightning/data/lnd/data/chain/bitcoin/mainnet/signer.macaroon ~/signer.macaroon.backup
cp /home/umbrel/umbrel/app-data/lightning/data/lnd/data/chain/bitcoin/mainnet/walletkit.macaroon ~/walletkit.macaroon.backup
cp /home/umbrel/umbrel/app-data/lightning/data/lnd/data/chain/bitcoin/mainnet/macaroons.db ~/macaroon.db.backup
Now is the important part, to remove all macaroon files:
rm -f /home/umbrel/umbrel/app-data/lightning/data/lnd/data/chain/bitcoin/mainnet/macaroons.db
rm -f /home/umbrel/umbrel/app-data/lightning/data/lnd/data/chain/bitcoin/mainnet/*.macaroons
You can check that all .macaroon and the macaroons.db are gone
ls -la /home/umbrel/umbrel/app-data/lightning/data/lnd/data/chain/bitcoin/mainnet/
Return into Umbrel WebUI (you can do it with a command, but I like WebUI to see when it's done and because I'm not nerdy enough):
Start Lightning (wait that it starts, check that it works)
Start BTCPay Server (wait that it starts, check that it works).
Done. I my case everything worked after that. (i tested RTL, worked without restart. If other apps are not working, try to restart the app first).
Started as incompetence. Then shame/denial. Then malice.
Kranker, erbärmlicher Scheiß!
Ich teile deine Einschätzung zum politischen Desinteresse, an der Petition kannst du aber wenn du magst auch mit Fake-Daten und Pseudo-Email teilnehmen. Inwiefern das anschließend gefiltert wird weiß ich nicht, dennoch lässt sich ein gewisses Stimmungsbild ablesen und ich persönlich hätte nicht gedacht, dass das Mitzeichner-Ziel wohl schon am zweiten Tag geknackt werden wird.
Da hast du Recht, nur das man bei der Petition völlig seine Hosen runter lässt, deine Daten brav mitlieferst die dann zentral gekagert werden und außerdem an eine Demokratie glaubst. Brüssel wird, egal welche Entscheidung getroffen wird, eine einheitliche Regelung vorgeben. Gut für das Wir-Gefühl, aber freiwillig die Tür zum Schlachthaus durchschreiten...
"Rolling the dice with seed oils is a recipe for chronic inflammation, our ancestors thrived on animal fats"
I think this deserves further explanation though. Assumed the mentioned protection is rolling the dice, as that was part of the guides. Yikes, what a mess.
#nevent1q…mxeg
Sorry, my bad, I misunderstood the thread.
Wrt the conspiracy I stated my impression here, it'd be a wild wild story if the theory turns out to be true.
#nevent1q…jecq
switck == doc-hex wasn't a secret in the first place? The ngu library was a ColdCard project, so obviously written by their developer. Who cares what nicknames they use?
What's a conspiracy is the allegation that this was a five year prepared plan.
Lügen haben kurze Beine?
#nevent1q…a33u
Agreed! This is a little far fetched.
Well that’s unfortunate…
I’m hoping things go well…
This is the first time I’m using seeds that aren’t from the area so I’m not sure how they will handle the weather in the upcoming months…
Although I think I’m going to get a better harvest this year compared to last year…
My other plant is about twice the size of the one in the picture and is just about to start setting buds..
Great, all the best for finishing it — my outdoor grow didn't survive unfortunately.
#nevent1q…uy55
Damn that’s looking nice!
Mine is early bird and it’s outdoors
Nice, which strain are you growing there? State of mine:
#nevent1q…nw3l
Hello fellow cannasseur 🙌🥦🤝☕
#nevent1q…nw3l
Too soon but damnit man 😂
Less carbs, less insulin resistance, less accidents.
