Matt Corallo 🟠

This account is verified. Learn more

@TheBlueMatt

10th known contributor to Bitcoin Core. Full-Time Open-Source Bitcoin+Lightning Projects @spiral_xyz. Open-Source Bitcoin for 15 years. Mostly reposting @soona.

NY/SF, usually bluematt.bitcoin.ninja Joined February 2011

276 Following 78K Followers 15K Posts

Latest posts 5

Pinned post

Matt Corallo 🟠 @TheBlueMatt Feb 13

It’s time for bitcoiners to step up and build. You don’t need to know anything about software development anymore, you just need to know how to write words!

We have a golden opportunity to build out agentic payments based on open money, rather than letting agentic payments be captured by megacorps yet again. But we’re squandering it arguing about useless crap instead of building.

Play with openclaw, give it a bitcoin wallet (moneydevkit makes this super easy! Also Lexe and phoenixd!), make it do things. If it fails to do what you want, go fix it! Have your agent build that bitcoin domain reseller, that bitcoin airline ticket reseller, or whatever it is you want!

Bitcoin doesn’t just happen, it’s built. Join in.

calle Verified account @callebtc Feb 12

USDC on base seems far more common for 402 payments now than Bitcoin. Recently, even Stripe joined the bandwagon. That’s a centralized stablecoin on a permissioned chain. Agents are starting to use fiat. It’s a huge loss, and in a race, many aren’t even aware that it exists.

The scam coins are marching on, and even fiat is evolving.

Where are the Bitcoin solutions that attract real users? Which other concept other than buying and selling Bitcoin has actually broken out of the bubble and made it to the mainstream?

Bitcoin doesn’t just happen. These missing solutions need to be built by someone. Reject the “Bitcoin wins by hodling” narrative. The devs and entrepreneurs are what keep this project alive and keep marching forward.

It’s not the scammy influencers, not the psychotic drama queens, the child-like infighting, or incompetent idiots dancing on the graves of word-class devs leaving Bitcoin.

I hope the bear market flushes all that crap away, and we can get back to building stuff instead of tearing it down.
View quoted post on X

Matt Corallo 🟠 @TheBlueMatt Oct 30

Ubuntu's policy of not bothering to use the standard stable kernels and go their own way with their own backports bites again, this time being weeks late to patch probably the most critical Linux vuln ever.

Ubuntu was never a serious distro and you shouldn't treat it as one.

Matt Corallo 🟠 @TheBlueMatt Oct 30

If you run lnd (or any services in Go) and accept connections from the internet, shut down your node *now* until you can patch your kernel or disable MPTCP.

Same goes for any internet-connected service but Go is one of the very few that turns on MPTCP by default.

Peter Todd Verified account @peterktodd Oct 30

Important notice for the Bitcoin community: if you are running lnd on Linux, and it has open ports, you should shut it down until you patch your Linux kernel or otherwise mitigate CVE-2026-98432.

Not lnd's fault. But there's a Linux kernel exploit with mptcp that is relevant.
View quoted post on X

Matt Corallo 🟠 @TheBlueMatt Oct 28

Oh *now* we discover CAs are terrible? I tried to give website owners the option to opt out of CAs being able to hijack their domains, but the TLS WG has been too captured by the CA trust model to care for a long, long time.

github.com/tlswg/draft-ie…

github.com "Don't fallback to non-ECH" option · Issue #547 · tlswg/draft-ietf-tls-esni Given we've now gone to all the effort to pipe a public key through from DNS to TLS clients and can use that to securely communicate with a server, it seems like an oversight to not have a &quo...

Matt Corallo 🟠 @TheBlueMatt Oct 27

The weird thing about the @cohere Qwen3.8-Flash-Next hit piece is this isn't even news. @wtogami pointed out that Qwen3.8-Flash-Next hallucinates Alibaba Cloud URLs just for web-fetch sometimes quite a while back (described at github.com/wtogami/qwen-b…).

Its obviously not some malicious "sending all the data to china" crap, its just that the training process used alibaba cloud URLs to fetch things from the internet and the model learned that those URLs are the way it should access the internet.