BR087 - ColliderScript, BTCPay Server, OpenSecret, Matrix, Lottie player JS Attack, the Bullish Case for Vaults, LN Payment Censorship , EmailBTC, secp256k1-node vulnerability + MORE ft. Justin & Paul

I'm joined by guests Justin Moon & Future Paul & to go through the list.

Quote of the Day
00:00:48 Nobody knows anything



Housekeeping
00:06:00 New COLDCARD Tutorials



Major/Urgent Vulnerability Disclosures
00:06:26 Vulnerability in secp256k1-node affecting ECDH
00:08:01 Stalling peers cause disclosure of hindered block propagation


Bitcoin
• Software Releases & Project Updates
00:08:40 Bitcoin Core
00:09:11 Electrs
00:10:22 BTC Pay Server
00:11:57 libsecp256k1
00:14:18 Bitcoin Keeper
00:14:56 Liana
00:17:30 Bitcoin Safe
00:20:08 RoboSats
00:21:10 Bitkey Firmware
00:21:20 Raspiblitz 
00:21:37 ESP-Miner
00:22:14 BoltzExchange


• Project Spotlight
 00:22:21 Frost
 00:23:12 ColliderScript
 00:27:44 GreatRSI
 00:28:16 Boltzmann TS monorepo
 00:28:55 PlebDevs
 00:29:51 SatSale
 00:31:58 EmailBTC



Vulnerability Disclosures
00:33:21 Lottie player JS hacked, affecting Primal and 1inch
00:38:38 Hackers abuse emergency data requests
00:41:15 Tor relays targeted in spoofing attack
00:41:22 Synology devices exposed to zero-click flaw
00:42:03 North Korean hackers BlueNoroff target crypto firms with new macOS malware
00:44:45 Five dollar wrench attacks
Privacy & Other Related Bitcoin Projects
• Software Releases & Project Updates
00:52:50 Reticulum MeshChat
00:53:14 Matrix


Lightning & L2(+)
• Project Spotlight
00:54:52 Podcaster Boost Dashboard
00:55:06 zPay.live
00:55:14 BullishNuts
00:55:19 Athenut
00:55:33 TinyPine


• Software Releases & Project Updates
 00:55:41 Fedimint
 00:56:34 Zeus
 00:58:19 Alby Go 
 00:58:28 Ride-The-Lightning
 00:58:37 CLBOSS
 00:58:40 Nutshell
 00:59:00 Geyser
 00:59:24 Clams Remote


Nostr
• Project spotlight
00:59:36 SnapNostr
00:59:42 OpenLibrarian
00:59:49 Jumble
00:59:54 Honeypot
1:00:00 Mutestr
1:00:08 Nostr Gadgets
1:00:16 Mostro Tools

Boosts
1:08:57 Shoutout to top boosters @Ape Mithrandir, @btconboard, @VonPhoto & @AVERAGE_GARY


Tech tip of the day
 1:10:45 LocalSend
 1:10:54 Protect iPhones from downgrade attacks by disabling 2G in Lockdown mode


News & Noteworthy
• Lightning + L2+
1:12:38 Ndolo and Tschorsch publish Payment Censorship in Lightning Network
1:14:01 Blockstream opens its newest research center in Lugano
1:14:05 CasaOS integrates Alby Hub


• Business & Finance
 1:14:46 Block refocuses on bitcoin mining equipment and Bitkey
 1:15:49 Fold App introduces insured deposits
 1:16:33 Strike introduces Bitcoin auto-withdrawals 
 1:18:52 Ten31 launches Bitcoin Alpha
 1:19:13 CleanSpark finalized its acquisition of GRIID Infrastructure


• Nostr
 1:19:25 Nos.social is now live in Australia and New Zealand


• Funding
 1:19:32 OpenSats announces its Eighth Wave of Nostr Grants


• Mining
 1:20:23 MMS and Metzler partner on Bitcoin mining for grid stability


• Privacy
 1:20:38 Tommy Robinson sentenced to 18 months for not unlocking phone for police
 1:20:47 Ex-TD Bank employee indicted for sharing customer data on Telegram
 1:21:02 Kenya to require phone IMEI declaration from 2025
 1:21:09 Apple adds "inactivity timer" feature in iOS 18.1 

• Protocol
 1:22:16 Ren Crypto Fish, Steve Lee, and Lyn Alden publish Analyzing Bitcoin Consensus: Risks in Protocol Upgrades
 1:25:30 BIP85 updated to final status, now widely deployed
 1:25:47 LDK #3207 adds invoice requests to async payments

• Government & Political
 1:26:05 US DOJ charges AurumXchange operator with laundering Silk Road fund
 1:26:12 Roman Sterlingov sentenced to 12.5 years for money laundering
 1:26:34 Argentina's central bank hosts a live Bitcoin mining art exhibit
 1:26:50 BIS exits cross-border payments platform Project mBridge
 1:26:56 EU and ECB debate digital euro control, raising sovereignty concerns


• Events
 1:27:22 Btc Hel: The first ever large scale bitcoin conference in the Nordics.

• Reads
 1:27:46 Top recently published reads


Links & Contacts:
Website: https://bitcoin.review/
Substack: https://substack.bitcoin.review/
Twitter: https://twitter.com/bitcoinreviewhq
NVK Twitter: https://twitter.com/nvk
Telegram: https://t.me/BitcoinReviewPod
Email: producer@coinkite.com
Nostr & LN:⚡nvk@nvk.org (not an email!)
Full show notes: https://bitcoin.review/podcast/episode-87