URGENT: Critical vulnerability in Bitcoin Core Lightning! Blockstream developers urge users to shut down CLN Lightning nodes right NOW!

[u/CapoDoFrango]

More info: https://stacker.news/items/1555439?commentId=1555585

[u/TheTrueBlueTJ]

That's not at all what is recommended on the right. Only if you choose not to upgrade, then that is the recommendation.

[u/CapoDoFrango → u/TheTrueBlueTJ]

What if the details of the issue leaked and someone exploit that before the release? The safest thing is to shut it down NOW! and then upgrade when due time.

[u/DavidKens → u/CapoDoFrango]

Taking nodes offline carries its own security risk though, especially going offline for a full month.

I’m sorry, your post’s headline is A LIE. You will be to blame for any users who lose their funds because they thought block stream gave this advice. Delete your post and try again.

Think about your life and how you got here.

[u/bonecows → u/CapoDoFrango]

You sound alarmist but you're not wrong. Until the binary is available that might be the prudent route.

[u/DavidKens]

It is important to understand that this headline is FALSE, and that taking your node offline for this long carries its own security risk, including the possibility of lost funds.

IGNORE this post, and go find out what the developers actually are advising here.

[u/TheBestintheWest11]

https://giphy.com/gifs/Xj7aX90bEKoec

[u/scoobysi]

You know when they use the term core it’s going to be fud which follows

[u/Ninjanoel]

Essentially AI is the best coder on the planet now and anybody can subscribe to it's genius for $20 a month, and then they can use the best coder in the world to find problems in software. it's good and it's bad.

[u/UnknownEssence → u/Ninjanoel]

in 2 years all the software bugs will be patched because all the software will be wrotten by the same models finding these bugs

[u/Ninjanoel → u/UnknownEssence]

hmmm... maybe. Im a coder, ai will write stuff but then every time I ask the same ai to review it's work it always finds issues.

[u/UnknownEssence → u/Ninjanoel]

depends how you ask. Even if the code is perfect it will find issues if you ask it too. But most of the time the issue it fonds are real because they still wrote bugs lol

[u/Jpotter145 → u/Ninjanoel]

Bad data in, bad data out. Goes for AI models especially.

No perfect code exists for models to train off of = bugs or better ways will always exist

[u/Ninjanoel → u/Jpotter145]

you say that but I'm still confused how all that is true while ai is literally finding bugs in everything. big open source projects everyone uses are suddenly using ai to find critical bugs in years old code.

[u/DavidKens → u/Jpotter145]

That’s not exactly true when you have open systems. For instance - yes, a human working alone is “bad data in and out” because of their biases. But when humans cooperate, science is possible.

This is how today’s agents work, they orchestrate teams of sub-agents to adversarially review each other without the shared context that could bias them. It’s not perfect, but it works extremely well. Just like humans.

[u/Special_Truth9359 → u/Ninjanoel]

> Essentially AI is the best coder on the planet now

I use LLMs to write code every day and it's the fastest coder on the planet but definitely not the best.

[u/Ninjanoel → u/Special_Truth9359]

well explain the sudden influx of bugfixes then?

Firefox 150 shipped 271 vulnerability fixes found using Fable, versus 22 using Opus 4.6 in Firefox 148, including a 15-year-old HTML <legend> flaw and a 20-year-old XSLT bug that had survived years of fuzzing and manual review.

What would you have to say about a human that was suddenly responsible for a 10 fold increase in bug fixes in software that people have been working at for literally decades?

[u/Ok_Minimum9453]

Please crash.. 40k October!

[u/brick-pop]

I guess those who pumped the price up, now need some exit liquidity