@ODELLXYZ

freedom

 nashville
odell.xyz
Joined April 2024
  • Tweets1.6K
  • Following929
  • Followers14K
60Media
list of top projects funded by @opensats and amount of bitcoin sent to each opensats.org/projects

Project Showcase - OpenSats

A showcase of free and open-source Bitcoin and Nostr projects supported by OpenSats.

opensats.org
9
22
4
128
16,788
We taking bets on how long it'll be until all the skript kiddies start checking all those water treatment facility portals, gas station tank management portals, HVAC portals, elevator control systems, building access control systems, etc. on Shodan and elsewhere for these RCEs?
32
36
11
602
71,188
ODELL retweeted
Start9
@start9labs5h
Over the past two days, we released new versions of StartOS, StartTunnel and 100+ services to patch the security issues from eMudhra, PHP, and Node.js and others. We recommend updating ASAP.
6
18
2
107
5,945
I have managed highly successful multi million dollar enterprise #bitcoin #lightningnetwork nodes for more than half a decade and I have learned a lot. Now I am putting together an interactive learning environment for aspiring professional lightning node managers. There will be a simulated environment on a regular domain as well as an open source download for local automatic regtest node deployment in addition to the GUI and terminal simulation. We need more professional node managers and the best way to get them is to have a zero risk learning environment to build confidence. Still a lot to build but I will be dropping teasers here and there until I make it all public. Lightning is just too fun. Can't stop won't stop.
8
41
2
136
6,589
Did you know we do this? White label our custody tech and keep your customers on your own platform!
AnchorWatch
@AnchorWatch23h
Want to offer Bitcoin custody under your own brand? AnchorWatch offers the infrastructure, so you don't build from scratch. You keep the brand and the customer relationship. Your customers approve every move, and no single party can move their Bitcoin, including us.
AnchorWatch card on a wooden dock with rope wrapped around a post and calm sea behind. Text reads: Offer Bitcoin custody under your own brand. anchorwatch.com.

ALT AnchorWatch card on a wooden dock with rope wrapped around a post and calm sea behind. Text reads: Offer Bitcoin custody under your own brand. anchorwatch.com.

4
16
1,274
This story shows how hilariously broken online identity verification is from all relevant angles. 1. Your SSN, DOB, address history, etc. are sitting in countless data breaches and data-broker dumps. They’re cheap and widely available to basically anyone who looks. 2. KYC/AML mostly just checks that the data exists and matches a real person. It doesn’t confirm the person signing up is actually the real person behind that identity. Result: Amanda Smith spent three nights in jail and now faces up to six years in prison over a $1,000 CashApp scam account opened with her SSN and DOB. It wasn't necessarily opened by her, and the phone, IP, device, address, and other details don’t match. The funniest (and yes, saddest) part is CashApp wouldn't give her information about the account because she can’t prove she’s the owner. Her personal info was good enough to open the account, but not good enough to access it in the future, apparently. To be clear, CashApp is likely just following the law here. Anyway, we need to burn it all down and start fresh.
Joseph Cox
@josephfcoxOct 21
New: someone made a CashApp account in her name. She spent 3 nights in jail and now faces up to 6 years in prison Amanda Smith was arrested because a scam led to a CashApp account in her name. But she says she didn't make it, and the data doesn't line up 404media.co/amanda-smith-ope…

Someone Opened a CashApp In Her Name. She Faces Years in Prison

Amanda Smith spent three nights in jail after a Facebook Marketplace scam led to a CashApp account in her name. She says she didn't make it.

404media.co
34
388
22
2,916
282,680
Over 600,000 people talk on SimpleX, 20x more than in 2023. Thank you! It is the only messaging network without user identifiers. Now you can own a part of it - learn more and invest on Wefunder: wefunder.com/simplex.chat
9
24
5
132
3,706
An update to Bitcoin Core's security policy via @darosior on the Bitcoin-Dev mailing list
10
51
4
228
16,765
ODELL retweeted
b10c
@0xB10COct 22
Not enough FOSS devs know about @amizi's @waye_dev (nonprofit that facilitates coaching for devs). Just finished my last call with @changeworklife. Still surprised 1) how helpful 1h of reflecting & planning every 3 weeks is and 2) this is available for FOSS Bitcoin devs
2
11
2
42
3,088
ODELL retweeted
calle
@callebtcOct 22
I'm tired boss
153
830
386
8,106
1,961,461
Honestly, it's kinda ridiculous that the plugin builder of @BtcpayServer has been under attack for days now. There is literally nothing on that server now other than infrastructure for community to build and distribute the plugins. Yet someone is burning tons of AI tokens and GitHub accounts to come up with more & more elaborate malware to try to take over the server. Really gets you thinking about how most FOSS contributors will be forced to give up rather than keep dealing with this type of nonsense.
7
9
100
4,616
at the rust-bitcoin summit, it has become clear that before rbitcoin takes over as the reference consensus implementation for bitcoin it will take over as the reference esplora implementation.
4
10
45
2,977
Exclusive! Michael of @Boltzhq gives his LAST EVER interview: why he shut down the swap service, how AI changed the risk equation, and why he’s still optimistic about the future of software.
2
10
7
60
7,030
4 critical security issues in 24 hours gitlab: citadelwire.com/posts/2026-1… node js: citadelwire.com/posts/2026-1… php: citadelwire.com/posts/2026-1… insecure ca keys: citadelwire.com/posts/2026-1… wire will continue to monitor the situation: citadelwire.com

CITADEL WIRE

high signal news

citadelwire.com
13
46
7
255
49,374
Tenki: run your local LLM fleet from your phone (Experimental)

Tenki: run your local LLM fleet from your phone

Article · @vikrantnyc
3
5
2
39
4,626
🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases. CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers. Read - thehackernews.com/2026/10/cr…

Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

GitLab fixes CVE-2026-110264, a critical flaw that could allow unauthenticated code execution on self-managed versions dating back to 7.0.

thehackernews.com
262
2,857
1,545
14,891
3,504,565
If they’ve worked on the PHP vulnerability for over 2 months then why has there been such a piss poor disclosure and rollout strategy? It’s basically been a “in 24 hours you’re all fucked” rollout strategy.
OpenAI
@OpenAIOct 21
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites. Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors. Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact. This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare. openai.com/index/coordinated…

Patch the Planet: global response coordination as agents uncover critical vulnerabilities

Patch the Planet connects security researchers, maintainers, and incident responders to help address critical vulnerabilities across open source.

openai.com
Readers added context they thought people might want to know
‪OpenAI may claim a role in the coordinated response and patching process. But the initial discovery and exploit development, however, occurred several months earlier by an independent researcher.‬ ‪x.com/lcfr_hax/statu…‬
20
37
2
993
29,752
Another fun infra project for me recently was moving all of our @torproject infrastructure to a proper Onionbalance setup, so now you have one Onion for a load-balanced back-end of nodes and services. Using Tor in Cake just got a lot better, and is just a tap away 😎
Cake Wallet
@cakewalletOct 21
We’ve expanded our Tor infrastructure in Cake Wallet v6.5.0! 🧅 New Tor nodes for Bitcoin and Litecoin, updated nodes for Monero and Zcash, plus Bitcoin fee estimates through our onion service when @torproject is enabled! Want to try it out? Enable built-in Tor and select Cake Wallet (Tor) from your node list.
2
8
1
57
2,865
ODELL retweeted
Calif
@calif_ioOct 21
Let’s set the record straight: @lcfr_hax was the first to discover php2shell and develop a working exploit. See his August 5 tweet: xitter.cf/lcfr_hax/status/208503… His work convinced the PHP Foundation to invest in fixing this entire bug class. He then worked around the clock to review, test, and retest the patches.
LCFR
@lcfr_haxAug 5
d935be023a55b04681eccd1d2b8385b4b295e141a5df108e5e979d8d5d7124ac
54
404
92
3,071
385,453
Go forth and open-source every IoT device in your house. Dump their comms. See what they're sending home. God speed.
29
85
5
2,094
146,149
PHP Security Advisories are out: RCE via OOM corruption (9.2/10): github.com/php/php-src/secur… RCE via stale global state (9.2/10): github.com/php/php-src/secur… Need to upgrade to 8.2.35, 8.3.36, 8.4.27, or 8.5.12 ASAP to mitigate. Updates rolling out now. #PHP

RCE via OOM corruption

## Summary PHP uses `longjmp()` for out-of-memory (OOM) errors to exit the current context and abort handling of the request. In some contexts, request memory is temporarily reachable before it ...

github.com
12
110
15
649
31,276
Load more