-
br-m
<ofrnxmr:xmr.mx> codeberg disallows cryptocurrency projects now
codeberg.org/Codeberg/org/pulls/1254
-
br-m
<microchipster:underzsea.com> Had me thinking about alternatives that are more resilient than self hosting, anyone ever tried this?
radicle.dev
-
br-m
<ravfx:xmr.mx> @microchipster:underzsea.com: Yeah.
-
br-m
<ravfx:xmr.mx> Seam to be only good option now
-
br-m
<ravfx:xmr.mx> Time to spin up all the radicle nodes! Well.. This week..
-
br-m
<paulali:matrix.org> @microchipster:underzsea.com: you can check out their talk during fossdem 2026:
fosdem.org/2026/schedule/event/BCVGUW-radicle they explained more about it very well
-
br-m
<fixatedresearch:matrix.org> I have a detailed report on the security of Cake Products. Is this something MAGIC is interested in?
-
br-m
<fixatedresearch:matrix.org> 25 page report covering 26 alarming findings. A preview: 1. Four Bitcoin On‑Chain Fingerprints
-
br-m
<fixatedresearch:matrix.org> 2. Hidden OP_RETURN Leak
-
br-m
<fixatedresearch:matrix.org> 3. Radar Chat Unencrypted Payment Logger
-
br-m
<fixatedresearch:matrix.org> 4. Mandatory Chainalysis Surveillance
-
br-m
<fixatedresearch:matrix.org> 5. Governance Capture of getmonero.org[... more lines follow, see
mrelay.p2pool.observer/e/8KTZx5kLejhRMTlY ]
-
br-m
<ofrnxmr:xmr.mx> Governance capture of getminero.org? Captured by whom?
-
br-m
<ofrnxmr:xmr.mx> Cake has quite literally zero influence on getmonero.org, the repos, or other core/community controlled infra
-
br-m
<fixatedresearch:matrix.org> Anyone interested please DM me.
-
br-m
<ofrnxmr:xmr.mx> Im interested, share ir
-
br-m
<slowbeardigger:matrix.org> Lolz
-
br-m
<fixatedresearch:matrix.org> and everyone else focus on who is attempting to downplay our findings.
-
br-m
<ofrnxmr:xmr.mx> Post it in public, since you dont do responsible disclosure
-
br-m
<siren:kernal.eu> Sloppity slop, make it public
-
br-m
<ofrnxmr:xmr.mx> 1. Why the fuck would we care? this is monero
-
br-m
<ofrnxmr:xmr.mx> 2. See #1
-
br-m
<ofrnxmr:xmr.mx> 3. See #1
-
br-m
<ofrnxmr:xmr.mx> 4. Clown lies
-
br-m
<ofrnxmr:xmr.mx> 5. Clown lies[... more lines follow, see
mrelay.p2pool.observer/e/yr3mx5kLdlRPM0tj ]
-
br-m
<sethforprivacy> More context in #monero-markets for reference, but this user is attempting to extort us with bogus security findings that are entirely unrelated to Monero anyways.
-
br-m
<sethforprivacy> He is more than welcome to responsibly disclose any real issues with Cake via our security policy: cakewallet.com/security
-
br-m
<fixatedresearch:matrix.org> @sethforprivacy: This response is now included in our report.
-
br-m
<siren:kernal.eu> Funny how his LLM couldn't figure out the security.txt
cakewallet.com/.well-known/security.txt
-
br-m
<fixatedresearch:matrix.org> Cakes security page (
cakewallet.com/security) listed dev⊙cc as the reporting address, promised no response timelines, and linked to a GitHub security policy that did not exist yet. (July 16, 2026) (
web.archive.org/web/20260716150007/https://cakewallet.com/security)
-
br-m
<fixatedresearch:matrix.org> The GitHub repository had no SECURITY.md at all until July 22, 2026, six days after that archive snapshot and two days after our report was complete and verified. The current policy listing security⊙cc, a PGP key, and a 2‑business‑day acknowledgment promise was retrofitted after the fact. We are still waiting for that acknowledgment.
-
br-m
<fixatedresearch:matrix.org> For years prior, multiple critical reports submitted through every available contact went unacknowledged, not for days, but indefinitely. Given that history, going directly to the founder was the only path that could force a timely review before further user exposure. We look forward to his response.
-
br-m
<eddie:oblak.be> So much drama lately
-
br-m
<sethforprivacy> Never a dull moment in Monero 🫡
-
br-m
-
br-m
<mx_mandelbrot42:matrix.org> Clowns coming out of the woodwork 🤡
-
br-m
<ofrnxmr:xmr.mx> @plowsof:matrix.org @monerobull:monero.social
-
br-m
<ravfx:xmr.mx> Can I just have the report?
-
br-m
<ofrnxmr:xmr.mx> No
-
br-m
<ofrnxmr:xmr.mx> Need to pay 8000/month in xmr for it
-
br-m
<slowbeardigger:matrix.org> @ofrnxmr:xmr.mx: cheap cheap
-
br-m
<ofrnxmr:xmr.mx> you have 9 hours left on the clock to pay up
-
br-m
<siren:kernal.eu> @fixatedresearch:matrix.org: People like you give security researchers a bad name and make life hell for anybody who run vulnerability disclosure programs.
-
br-m
<slowbeardigger:matrix.org> @fixatedresearch:matrix.org: Stop trying and wasting time, instead of trying shit like this, you could learn a bit more and do things right
-
» moneromooo amused at cake complaining about extortion
-
br-m
<fixatedresearch:matrix.org> These PR attempts don't work in matrix, our team is simply screen shotting who is downplaying our findings.
-
br-m
<fixatedresearch:matrix.org> Carry on.
-
br-m
<slowbeardigger:matrix.org> Nevermind
-
br-m
<sethforprivacy> Go for it, it's a public channel :)
-
br-m
<ofrnxmr:xmr.mx> Its also logged publicly on monerologs.net
-
br-m
<sethforprivacy> Also love that you're creating pod clips for us and sharing them, free marketing!
-
br-m
<fixatedresearch:matrix.org> Yea wait till you see the other clips.
-
br-m
<sethforprivacy> Pretty hilarious if a real security report includes people saying things they don't like on Matrix/IRC XD
-
br-m
<sethforprivacy> Yet another sign this is a normal bogus report w/ extortion attempts
-
br-m
<sethforprivacy> Fun times
-
br-m
<slowbeardigger:matrix.org> What’s funny is that this person comes to MONERO channels and try to do stuff like that
-
br-m
<ofrnxmr:xmr.mx> PAY ME 8K/MTH IN XMR OR I'LL RELEASE A BUNCH OF BITCOIN PRIVACY ISSUES
-
br-m
<ofrnxmr:xmr.mx> bro, bitcoin IS a privacy issue
-
br-m
<ofrnxmr:xmr.mx> here at monero, we enjoy reading about bitcoin gotchas
-
br-m
<me:afk.pm> It's a troll
-
br-m
<ofrnxmr:xmr.mx> why teasing me
-
br-m
<slowbeardigger:matrix.org> Good way to enjoy my morning cofee
-
br-m
<ofrnxmr:xmr.mx> i'll pay 0.01xmr for some bitcoin privacy porn
-
br-m
-
br-m
<fixatedresearch:matrix.org> I put the same amount of effort into making this throwaway that Vik and Cake put into protecting their users.
-
br-m
<slowbeardigger:matrix.org>
mrelay.p2pool.observer/m/matrix.org/SfGHORxBVoqwDfVDQDUNKfoS.png (74FF08F7-B98C-424C-A912-D29B42C4992A.png)
-
br-m
<mx_mandelbrot42:matrix.org> Pretty sad and weak extortion attempt. The audacity of this person to pull shit like this in the Monero community 😆
-
br-m
<slowbeardigger:matrix.org> @mx_mandelbrot42:matrix.org: on point
-
br-m
<fixatedresearch:matrix.org> @slowbeardigger:matrix.org: The research is our intellectual property, produced entirely with our own resources, and we are free to monetize it through paid consulting just as any security firm would, by offering real, deliverable services like a sustained positive campaign, competitor research, and remediation time, all i [... too long, see
mrelay.p2pool.observer/e/t4TvyJkLb0JYSFJl ]
-
br-m
<slowbeardigger:matrix.org> @fixatedresearch:matrix.org: Bruh, fuck off already, you had your chance to do things right but seems like you can’t comprehend where you’re standing on
-
br-m
<slowbeardigger:matrix.org> No one is paying you shit here, you wasted your time, and we had a laugh, so just stop trying that hard here.
-
br-m
<autiboy:chat.mautiweb.net> @fixatedresearch:matrix.org: If you cared so much then you wouldn't have a profile picture with adobe stock labeled on it
-
br-m
<siren:kernal.eu> @fixatedresearch:matrix.org: I bet you're on a personal subscription with no data privacy agreement with the LLM company so it's not even your intellectual property.
-
br-m
<autiboy:chat.mautiweb.net> @autiboy:chat.mautiweb.net:
mrelay.p2pool.observer/m/chat.mauti…eb.net/jVfLCtmMwZORizCvZwOeFgHQ.png (as per adobe, which you are doing right now)
-
br-m
<vikrants> I've put the screenshots of the messages this guy sent to me. They are in the Monero Markets channel.
-
br-m
-
br-m
<slowbeardigger:matrix.org> there
-
nioc
I guess that is the matrix monero markets channel
-
nioc
what is the full channel name?
-
br-m
<slowbeardigger:matrix.org> #monero-markets:matrix.org
-
nioc
thx
-
br-m
<kiersten5821:matrix.org> @siren:kernal.eu: no, i believe all large llm providers state the ip of generated output belongs to user
-
nioc
<slowbeardigger:matrix.org> #monero-markets:matrix.org = room not found
-
br-m
<slowbeardigger:matrix.org> wut, really?
-
br-m
<slowbeardigger:matrix.org> Lemme check, i am relatively new to matrix rooms and stuff
-
br-m
<slowbeardigger:matrix.org> sorry
-
br-m
-
nioc
oh well, I'll try later
-
watch_dem_carbz
why isn't #monero-markets bridged to IRC :S
-
nioc
the irc op doesn't want the bridge
-
br-m
<slowbeardigger:matrix.org> ooo