The bitcoin faucet is back (iykyk) 👀
To celebrate, we’re giving away $1M in bitcoin for Bitcoin Day. Yes, you read that correctly.
To get your bitcoin bonus, follow these simple steps:
1️⃣ Download Cash App
2️⃣ Buy $10+ of BTC from 4/6 - 4/10
3️⃣ Earn $5 in BTC
Get all the details at https://t.co/34SmBMhtTa.
Bitcoin Day so you know it’s real…https://t.co/2dAsI1ueGe
Our Cash App, Square, and Bitkey teams are holding hands to celebrate with $1 million in bitcoin giveaways. April 6-10, we’re helping people experience bitcoin in everyday life.
All the info: https://t.co/6MEqe54Vps
@jack@matt_pulsipher “Aaron Swartz deserves a tremendous amount of credit for his feedback on the design of Markdown’s formatting syntax. Markdown is much better thanks to Aaron’s ideas, feedback, and testing.” 🥺
Ok so.. they left their CDN exposed.
If you ping the domain, you get this ip:
151.101.129.49
It turns out this is a https://t.co/wqDjtIZMEy IP . I had never heard of fastly but it looked to be something similar to vercel, so I figured maybe they had custom deployment links like vercel does.
Tried a few different combos and BINGO:
https://t.co/VUGl0CQFJm
This took me to this:
https://t.co/EaQKYxNtOy
That’s their CDN bucket on AWS. They currently have it setup so that any invalid endpoints redirect back to index.html
I went on a hunch and figured that they’d probably already have their production app stored somewhere in the CDN ready for deployment
I used SECLISTs (https://t.co/gafGrACoMC )and ffuf to try out over 20k different combinations on this URL.
After some sleuthing, BINGO!! I found these two files:
> live.html
> .DS_STORE
The important one here that immediately caught my eye was “live.html”. That sounded like a prod deployment.
And sure enough, it was!
This is what the https://t.co/eY5zWkX10Z site will look like on the day the faucet goes live:
https://t.co/vXn9H24Gvj
https://t.co/M7ExI8pQym
It turns out the entire faucet will be revealed to just be a promotion scheme to get you to buy a bitkey and use cash app.
There is no faucet - at least in the sense most were expecting.
Happy Birthday Satoshi Nakamoto.
Bitcoin started with a simple idea: open access to money for anyone.
Tomorrow at 9am ET, we’re dropping our modern take on the Bitcoin Faucet; rewarding real BTC usage, whether buying, spending, or self-custodying.
Earn sats for participating in the network.
₿REAKING: Jack Dorsey’s technology company @Blocks announced today a new ‘bitcoin faucet’ website https://t.co/sMRqQFut9G that goes live on April 6. The original in 2010, gave away five bitcoins to every site visitor promoting education, that would be $350,000 today.
We're expanding OpenIP to include Bitkey and Proto patents.
Our patent pledge is a commitment to use patents defensively, protecting Block and our community from bad actors while enabling good-faith builders to innovate freely.
Learn more: https://t.co/4QZEqByvUg