pull down to refresh

3 sats \ 3 replies \ @ek OP 18 Sep \ parent \ on: bolt11: reject duplicate payment hashes in invoices security lightning

I mean the lightning devs, see GitHub PR.

Sorry if I should have kept a low profile, I'm still learning (a lot).

unless I knew everything was patched

How/when do you know that?

write
compose
30 sats \ 2 replies \ @anon 18 Sep

It was fucked already anyway. Red team is the example of responsible now.

reply
3 sats \ 0 replies \ @optimism 19 Sep
Red team is the example of responsible now.

Please, no?

reply
3 sats \ 0 replies \ @ek OP 18 Sep

Well, I guess I should go through everything I found confusing about the lightning spec again and look at it with an adversarial mindset, rather than just thinking, “Damn, this sucks to implement.” I think I wasn't expecting to find a vuln in something as superficial as parsing a BOLT11 invoice (compared to everything that's going on in lightning), so I didn't look at things from the right perspective.

reply