r3drun3

security

Having a blast implementing my first Kubernetes-native Capture The Flag. 
Still a work in progress, although it already encompasses two fully developed challenges. 
I invite you to play with it, the lab can be spun up locally via minikube by cloning [*this*](https://github.com/rooted-io/ctfs) repository.  


My own Kubernetes CTF

![1000007282.jpg](https://m.stacker.news/26939) 

No matter how much effort you invest or how objectively severe the vulnerability you find is, you can always be brushed off with a "We believe is not that serious" or "Someone else has already reported it." 
Essentially, you're blindly trusting companies to pay you after you did the job and reported to them, with no kind of contract backing the employment relationship.  

It's no coincidence that the prices for this kind of information on the dark web are much higher than on official bug bounty platforms: 
demand is greater, opportunity cost is lower and market equilibrium is more genuine. 
We need stronger incentives if we want to stay ahead in the cybersecurity war.

All that is wrong with bug bounty in a single image

bitcoin

Some time ago I wrote [this post](https://stacker.news/items/460000) stating that I had been considering dedicating my work life to Bitcoin for quite some time and becoming a consultant for Bitcoin adoption. 
Many comments were so encouraging that I decided to dive in headfirst and test the waters.


I chose to start with local businesses that I could eventually reach out to in person to speak face-to-face with the owners. 
I compiled a list of businesses in my area (clubs, restaurants, hotels, merchants, etc.) that could be a good target and wrote a professional email to each of them (also trying to personalize the message where possible), explaining the consulting services I offered. 


Less than a month later, out of about *35* emails sent, I received *0* responses.

Then, a small miracle happened. 

The owner of a trendy restaurant in my area (known for gourmet hamburgers) responded, saying they might be interested but needed me to send a brief presentation to discuss internally before confirming.

I got to work on a brief but detailed PowerPoint where I explained at a high level what Bitcoin is, what problems it solves, and the benefits it can bring to businesses through its adoption. 
After a few days, they contacted me asking for a first in-person meeting to delve deeper.

The first meeting went well; they knew almost nothing about Bitcoin but were very curious and enthusiastic.
I gathered some information about their current posture and their needs, and I presented an adoption plan that they agreed with.

I know it's a small start, a drop in the ocean, but as the saying goes, "all great things have small beginnings." 
Thanks again to everyone who supported me, and let's hope things continue this way. 
My mission is to orange-pill the whole world! 💊💪

Secured My First Client as a Bitcoin Consultant!

Hacking Systems via Exposed ETCD Instances

libertarian

deleted by author

I recently watched an Italian [movie](https://m.youtube.com/watch?v=qS2NtbEoIc8&pp=ygUZTmV0ZmxpeCByb3NlIGlzbGFuZCBtb3ZpZQ%3D%3D) from 2020 produced by *Netflix*, based on an incredible true story. 
Set in the 1960s, an Italian engineer constructs an island (more of a platform) off the coast of Rimini in the Adriatic Sea and declares it a sovereign state. 
The film does an excellent job of highlighting the irony and paradox of laws, bureaucracy and statism and I highly recommend it to all libertarians. 
It's remarkable that in the current context of wokeism and cultural Marxism, a platform like Netflix has produced such a work.

Libertarian Movie: Rose Island

[𝐃𝐨𝐦𝐚𝐢𝐧 𝐅𝐫𝐨𝐧𝐭𝐢𝐧𝐠](https://en.m.wikipedia.org/wiki/Domain_fronting) is an intriguing evasion technique that can be employed in both malicious contexts and to circumvent internet censorship in authoritarian regimes. 

This method typically capitalizes on the capability to specify a different host header in HTTPS requests, distinct from the requested destination. 
It commonly involves utilizing a [*Content Delivery Network*](   https://en.m.wikipedia.org/wiki/Content_delivery_network) that hosts numerous domains, encompassing both the front domain and the target domain. 

Basically, we can hide an HTTPS request to a "bad" site inside a TLS connection to a "good" site.

If you wish to assist in preventing internet censorship in the world, you can volunteer to run [*Snowflake*](https://snowflake.torproject.org/)
Snowflake is a proxy that employs domain fronting to enable access to the Tor network.
![1000007002.jpg](https://m.stacker.news/24428)

Domain Fronting

I was about to ask, "**Which nation is the most libertarian?**" but then I realized how far we are from libertarianism in this world, making the current title much more meaningful. 
I mean the existence of nation-states themselves is somewhat anti-libertarian...

Based on your direct experience and/or anecdotes, which nations or states do you believe are currently the least authoritarian in the world?

Guaranteed zap from me if you provide a well-motivated and reasoned response.

Least Authoritarian Nations?

econ

"Free" is Slavery

jimmysong

> We're much closer to communism in western societies than we'd like to believe.

I've been saying this for years!

opensource

Are you a DevOps/SRE interested in learning how to implement kubernetes operators?
Take a look at my [open source project](https://github.com/stackzoo/khaos) !
You can use this as a blueprint to learn the craft!

Lear how to develop Kubernetes Operators

Buying non-KYC bitcoins peer-to-peer #1: Peach

expatriotic

incredibly impressed by LND + Neutrino

conduition

For those interested in a step-by-step guide on how to run a lightning node with *neutrino*, you can follow [*this guide*](https://github.com/stackzoo/lightning-network-the-hard-way).

nostr

Recent controversies surrounding the Italian [*Piracy Shield*](https://torrentfreak.com/piracy-shield-source-code-internal-documentation-leak-online-240326/) once again underscore that protocols like **Nostr** are poised to become a crucial component of the internet's technological stack. 
Our society is in dire need of decentralization, and network infrastructure is no exception.
I leave you with a compelling [*article*](https://voltage.cloud/blog/nostr/exploring-6-use-cases-of-nostr-beyond-messaging/) by *Voltage* that explores various use cases of Nostr.

Nostr: A Fundamental Pillar for Decentralization

![1000006898.jpg](https://m.stacker.news/23278)
The President of El Salvador has disclosed that all the Bitcoin purchased by the state are held in a single wallet with a single address.

Do not follow his example; these are poor security and privacy practices. 
Generate a new receiving address for each payment and refrain from disclosing your UTXOs to the entire world.
Furthermore, for figures of this magnitude, it is advisable to separate your assets into multiple wallets, preferably hardware wallets, and protected by multisig.

Try to imagine at this very moment how many individuals and nation-states are striving to hack that single wallet and seize the fortune of El Salvador, both for its intrinsic value and the unprecedented anti-Bitcoin media spectacle that would ensue. 
Why simplify the lives of these entities in this manner?


El Salvador has all UTXOs in a single wallet and single address

Hedgehog: A protocol for asynchronous layer two bitcoin payments

supertestnet

For those interested [here](https://github.com/supertestnet/hedgehog) is the official *Github* repo with the protocol description.

FiresidePhilosophy

Breaking out of the fiat mindset


I've realized that I give too much importance to the price (in dollars) of Bitcoin. 
Lately, I check it dozens of times a day, and for what? 
In my mind, it's clear that *1 BTC = 1 BTC*, yet I persist in living in this fiat mindset. 
If we truly want Bitcoin to succeed, we need to start pricing things in sats: 
the hardest form of money should be the denominator. 
Start doing this mental exercise and think about how much things are worth in sats.
 
"How much did you pay for this dress?" 
"45,000 sats" 
"How much for this coffee?"
"3000 sats"

Let's stop playing the finance dinosaurs' game; the old world is ending, and we make the rules of the new one.

Bitcoin Core In your Phone 

IgnaciobTato

I believe it lacks practicality. 
I mean, it might be feasible to save storage space on phones by running Bitcoin Core in pruned mode, but to validate blocks, it would need to remain constantly active. 
It's a suboptimal solution, to say the least.
Run a **REAL** full node!

As a techie Bitcoiner, I've always longed for a tool encompassing various utilities to interact with the Bitcoin ecosystem swiftly and directly. 
Picture this scenario: 
I'm working on my Mac, and suddenly, I want to know the current Bitcoin price. 
What do I do? 
Do I open Google search, or do I open Stacker News and observe the price, or perhaps other apps? 
And what if I want to know the latest block? 
Do I open [mempool](https://mempool.space) and check or connect to my Bitcoin node? 
And what if I want to know which nodes are the top ones in the Lightning network? 
Again, I might open mempool or [amboss](https://amboss.space).
What if I want to decode a raw transaction?
What if I want to see the UTXO of an address?
The point is, there isn't a single tool consolidating these utilities. 
That's why I've embarked on [developing one](https://github.com/stackzoo/craftbit). Currently, it's little more than a proof of concept, but I believe it holds value. 
I invite all technical Bitcoiners who share my vision to provide feedback and, perhaps, even become contributors! 
Thank you all.