Welcome to BitDevs DC meeting 002!

Thank you to our gracious host, Compass Coffee

Wednesday, November 30 2022 @ 7PM

As a reminder, the ground rules of BitDevs are as follow:

1. No photos, videos, or recordings.
2. Chatham House Rule: you may reiterate the contents of the meeting without attribution.

These rules exist so that BitDevs participants can speak freely within the event.

Questions are encouraged, including basic ones!

Agenda

Cybersecurity

• Malicious PyPI packages recently published and discovered
  • https://blog.phylum.io/phylum-discovers-dozens-more-pypi-packages-attempting-to-deliver-w4sp-stealer-in-ongoing-supply-chain-attack
  • “W4sp stealer” malware
    • https://github.com/loTus04/W4SP-Stealer
• TrustCor Systems is a root CA operating out of a UPS Store PO box with ties to state intelligence
  • https://twitter.com/jvagle/status/1589978286134013952

Bitcoin

• lnd slayer pt. 2
  • https://twitter.com/brqgoo/status/1587397646125260802
  • https://github.com/btcsuite/btcd/issues/1906
  • https://blockstream.info/tx/73be398c4bdc43709db7398106609eea2a7841aaf3a4fa2000dc18184faa2a7e?expand
  • https://gist.github.com/chjj/4ff628f3a0d42823a90edf47340f0db9
  • Miner bribing - nonstandard txn that required ~$750 in fees
• fullrbf controversy
  • https://bitcoinops.org/en/newsletters/2022/11/09/#continued-discussion-about-enabling-full-rbf
  • sdaftuar on hazards of fullrbf
    • https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2022-October/021135.html
• Reproducible builds (for example: WalletScrutiny (https://walletscrutiny.com), guix, etc)
  • https://bootstrappable.org/
  • https://github.com/bitcoin/bitcoin/tree/master/contrib/guix
• Merklize All The Things! General smart contracts in bitcoin via covenants
  • https://merkle.fun
  • Mailing list thread
    • https://www.mail-archive.com/bitcoin-dev@lists.linuxfoundation.org/msg12193.html
• Channel Jamming paper from Shikhelman and Tikhomirov
  • Optech summary
    • https://bitcoinops.org/en/newsletters/2022/11/16/#paper-about-channel-jamming-attacks
  • Paper
    • https://raw.githubusercontent.com/s-tikhomirov/ln-jamming-simulator/master/unjamming-lightning.pdf
  • ML summary
    • https://lists.linuxfoundation.org/pipermail/lightning-dev/2022-November/003740.html
• Mempool, blocks full due to heavy consolidation activity
  • Binance proof-of-reserves?
  • https://mempool.space/block/0000000000000000000506448b3d22529a430dcb59314ee892fd5933b9a27e6c
  • bmon: increased mempool propagation spreads
    • 
• WolfNYC, a Lightning accelerator
  • Great opportunity if you want to start a Lightning company
    • https://wolfnyc.com/
  • They may be funding us in the future
• Christmas party?? 🎄