Pinned post
Latest posts 5
Can we now do away with the whole CA nonsense and use DANE/RFC6698 in browsers? Yes, yes, it was great that the CIA/NSA could MITM every website, but it's time to move on.
If the choice is between consensus changes pushed by people who have roughly the same levels of insanity as the bip110 folks, it's hard to not be pro-ossification.
Freezing Bitcoin's protocol at this stage is just as reckless as weekly hardforks.View quoted post on X
Hmm, blockstream's liquid post-mortem isn't terribly confidence inspiring: "Both approaches were reasonable engineering choices for the reported issue. The byte-boundary vulnerability that later surfaced as Bug B was a separate defect that was not identified by any reviewer at the time."
Introducing a byte-boundary vulnerability wasn't a reasonable engineering choice, and if that problem wasn't identified by any reviewer, there was vastly insufficient review.
Introducing a byte-boundary vulnerability wasn't a reasonable engineering choice, and if that problem wasn't identified by any reviewer, there was vastly insufficient review.