07:14:21 codeberg disallows cryptocurrency projects now https://codeberg.org/Codeberg/org/pulls/1254 07:39:53 Had me thinking about alternatives that are more resilient than self hosting, anyone ever tried this? https://radicle.dev/ 07:51:01 @microchipster:underzsea.com: Yeah. 07:51:01 Seam to be only good option now 07:52:26 Time to spin up all the radicle nodes! Well.. This week.. 12:45:29 @microchipster:underzsea.com: you can check out their talk during fossdem 2026: https://fosdem.org/2026/schedule/event/BCVGUW-radicle/ they explained more about it very well 14:52:04 I have a detailed report on the security of Cake Products. Is this something MAGIC is interested in? 14:52:50 25 page report covering 26 alarming findings. A preview: 1. Four Bitcoin On‑Chain Fingerprints 14:52:50 2. Hidden OP_RETURN Leak 14:52:50 3. Radar Chat Unencrypted Payment Logger 14:52:50 4. Mandatory Chainalysis Surveillance 14:52:51 5. Governance Capture of getmonero.org[... more lines follow, see https://mrelay.p2pool.observer/e/8KTZx5kLejhRMTlY ] 14:54:30 Governance capture of getminero.org? Captured by whom? 14:55:05 Cake has quite literally zero influence on getmonero.org, the repos, or other core/community controlled infra 14:55:07 Anyone interested please DM me. 14:55:20 Im interested, share ir 14:55:23 Lolz 14:55:25 and everyone else focus on who is attempting to downplay our findings. 14:55:36 Post it in public, since you dont do responsible disclosure 14:56:32 Sloppity slop, make it public 14:56:35 1. Why the fuck would we care? this is monero 14:56:35 2. See #1 14:56:35 3. See #1 14:56:35 4. Clown lies 14:56:36 5. Clown lies[... more lines follow, see https://mrelay.p2pool.observer/e/yr3mx5kLdlRPM0tj ] 14:58:19 More context in #monero-markets for reference, but this user is attempting to extort us with bogus security findings that are entirely unrelated to Monero anyways. 14:58:19 He is more than welcome to responsibly disclose any real issues with Cake via our security policy: cakewallet.com/security 14:59:26 @sethforprivacy: This response is now included in our report. 14:59:48 Funny how his LLM couldn't figure out the security.txt https://cakewallet.com/.well-known/security.txt 15:00:20 Cakes security page (https://cakewallet.com/security/) listed dev⊙cc as the reporting address, promised no response timelines, and linked to a GitHub security policy that did not exist yet. (July 16, 2026) (https://web.archive.org/web/20260716150007/https://cakewallet.com/security/) 15:00:20 The GitHub repository had no SECURITY.md at all until July 22, 2026, six days after that archive snapshot and two days after our report was complete and verified. The current policy listing security⊙cc, a PGP key, and a 2‑business‑day acknowledgment promise was retrofitted after the fact. We are still waiting for that acknowledgment. 15:00:20 For years prior, multiple critical reports submitted through every available contact went unacknowledged, not for days, but indefinitely. Given that history, going directly to the founder was the only path that could force a timely review before further user exposure. We look forward to his response. 15:04:12 So much drama lately 15:04:47 Never a dull moment in Monero 🫡 15:05:17 https://mrelay.p2pool.observer/m/matrix.org/vRYBtWCGTZaSfWYLVgjshAZg.mp4 (ev4.mp4) 15:05:53 Clowns coming out of the woodwork 🤡 15:06:36 @plowsof:matrix.org @monerobull:monero.social 15:06:54 Can I just have the report? 15:07:07 No 15:07:18 Need to pay 8000/month in xmr for it 15:07:41 @ofrnxmr:xmr.mx: cheap cheap 15:07:50 you have 9 hours left on the clock to pay up 15:07:52 @fixatedresearch:matrix.org: People like you give security researchers a bad name and make life hell for anybody who run vulnerability disclosure programs. 15:08:27 @fixatedresearch:matrix.org: Stop trying and wasting time, instead of trying shit like this, you could learn a bit more and do things right 15:08:29 * moneromooo amused at cake complaining about extortion 15:08:38 These PR attempts don't work in matrix, our team is simply screen shotting who is downplaying our findings. 15:08:49 Carry on. 15:08:53 Nevermind 15:08:54 Go for it, it's a public channel :) 15:09:16 Its also logged publicly on monerologs.net 15:09:18 Also love that you're creating pod clips for us and sharing them, free marketing! 15:09:48 Yea wait till you see the other clips. 15:09:57 Pretty hilarious if a real security report includes people saying things they don't like on Matrix/IRC XD 15:10:21 Yet another sign this is a normal bogus report w/ extortion attempts 15:10:24 Fun times 15:10:35 What’s funny is that this person comes to MONERO channels and try to do stuff like that 15:10:59 PAY ME 8K/MTH IN XMR OR I'LL RELEASE A BUNCH OF BITCOIN PRIVACY ISSUES 15:11:11 bro, bitcoin IS a privacy issue 15:11:37 here at monero, we enjoy reading about bitcoin gotchas 15:12:06 It's a troll 15:12:18 why teasing me 15:12:24 Good way to enjoy my morning cofee 15:12:38 i'll pay 0.01xmr for some bitcoin privacy porn 15:16:50 https://mrelay.p2pool.observer/m/afk.pm/WpeBFCAObhPqikMFeTyiwOaB.jpg (I mean come on ) 15:17:27 I put the same amount of effort into making this throwaway that Vik and Cake put into protecting their users. 15:17:35 https://mrelay.p2pool.observer/m/matrix.org/SfGHORxBVoqwDfVDQDUNKfoS.png (74FF08F7-B98C-424C-A912-D29B42C4992A.png) 15:18:34 Pretty sad and weak extortion attempt. The audacity of this person to pull shit like this in the Monero community 😆 15:19:09 @mx_mandelbrot42:matrix.org: on point 15:33:59 @slowbeardigger:matrix.org: The research is our intellectual property, produced entirely with our own resources, and we are free to monetize it through paid consulting just as any security firm would, by offering real, deliverable services like a sustained positive campaign, competitor research, and remediation time, all i [... too long, see https://mrelay.p2pool.observer/e/t4TvyJkLb0JYSFJl ] 15:34:54 @fixatedresearch:matrix.org: Bruh, fuck off already, you had your chance to do things right but seems like you can’t comprehend where you’re standing on 15:35:56 No one is paying you shit here, you wasted your time, and we had a laugh, so just stop trying that hard here. 15:38:05 @fixatedresearch:matrix.org: If you cared so much then you wouldn't have a profile picture with adobe stock labeled on it 15:38:35 @fixatedresearch:matrix.org: I bet you're on a personal subscription with no data privacy agreement with the LLM company so it's not even your intellectual property. 15:39:52 @autiboy:chat.mautiweb.net: https://mrelay.p2pool.observer/m/chat.mautiweb.net/jVfLCtmMwZORizCvZwOeFgHQ.png (as per adobe, which you are doing right now) 15:52:50 I've put the screenshots of the messages this guy sent to me. They are in the Monero Markets channel. 15:53:41 https://matrix.to/#/!IJwltLbZTwLnaNOHks:matrix.org/$cAUqh920Wmx1XNfHETMph0blky9laPLax-fpxZrYroE?via=matrix.org&via=monero.social&via=tchncs.de 15:53:55 there 16:12:05 I guess that is the matrix monero markets channel 16:12:38 what is the full channel name? 16:13:20 #monero-markets:matrix.org 16:13:28 thx 16:30:32 @siren:kernal.eu: no, i believe all large llm providers state the ip of generated output belongs to user 17:33:16 #monero-markets:matrix.org = room not found 17:34:12 wut, really? 17:34:22 Lemme check, i am relatively new to matrix rooms and stuff 17:34:28 sorry 17:35:04 https://mrelay.p2pool.observer/m/matrix.org/ubPFGMGXDpoeZurKGCCHuLGe.png (weird, seems fine) 17:35:30 oh well, I'll try later 17:36:26 why isn't #monero-markets bridged to IRC :S 17:37:16 the irc op doesn't want the bridge 17:37:47 ooo