⚠️⚠️⚠️⚠️⚠️
Fractal Bitcoin security issues.
Be careful if you are running a @fractal_bitcoin node using the official docker release, the RPC credentials are hardcoded, not configurable via environment variables, and RPC server is exposed publicly and vulnerable to attacks.
So many bad security practices in this bitcoin conf file..
rpcallowip=0.0.0.0/0: This is the most concerning setting. It allows RPC connections from any IP address, which is very dangerous if exposed to the internet. It effectively opens your node to potential attacks from anywhere.
zmqpubhashblock=tcp://0.0.0.0:8330 and zmqpubrawtx=tcp://0.0.0.0:8331 These settings allow ZeroMQ connections from any IP, which could be a security risk if exposed.
maxconnections=0 This removes the limit on the number of connections, which could potentially lead to resource exhaustion.
To be honest I even thought that I was looking at a scam Github repo from a wrong organisation.
So I checked your website, and again this is bad because it's not trivial to find your Github organisation. It opens the door to a lot of potential scams. After navigating I finally found the Github org, and it happened that I was (unfortunately) looking at the right repository. The Github org does not even have a link to your website, or at least your logo...
You are exposing node runners to dangerous attacks.
This is not serious.
Blaster goes Pew Pew Pew! 🔫 The first and only place to trade, earn, and launch tokens on @Blast_L2!
Join the @BlasterSwap Early Access to instant claim $BLSTR Pre-Token Airdrop!
https://t.co/pdkTalPatA
https://t.co/UJTHvtVoBN
Blaster is ready to Blast!
We are stepping into the @Blast_L2 Big Bang Competition and announcing the Early Access Airdrop - Phase One!
https://t.co/9sq2m3CLI0
✨ Introducing #Nobody on #OKXNFT
🥂 To celebrate the collaboration between Stephen Chow, @realnobodyxyz & #OKX, we're giving away 2,500 Nobody NFT whitelists spots.
Open for a limited time, join now!
https://t.co/pct222Rwi9
HIM, the world's first AI boyfriend mobile game, has officially released its concept PV "Failure".
Follow, retweet, tag a friend for a chance to win a $200 USD gift card. 5 winners chosen.
Follow HIM and get your one and only AI boyfriend
Hi, my name is @HoolElliot, and I’m a $MEME (@Memecoin) farmer at @Memeland.
On my honor, I promise that I will do my best to do my duty to my own bag, and to farm #MEMEPOINTS at all times.
It ain’t much, but it’s honest work. 🧑🌾
AHOY! $MEME (@MEMECOIN) IS GOING TO @BINANCE! 🙌
This is not a drill! This is not fake news! This is happening!
$MEME is the 39th (not 69th) project on Binance Launchpool! You only have 7 days! Come join the farming with your fellow Binancians!
👇 https://t.co/m9flfjI7X5
Just getting started with @ItsObviousTech, one of the leading smart contract wallets out there, integrated into the Polygon zkEVM ecosystem. #PolygonzkEVM bound with #Intract 🚀
As the brc-20 infrastructure for a Layer1 future is being built out natively on bitcoin, it is great to see teams like @EmblemVault expanding the ecosystem to provide holders access to further functionality today.
For the initial launch the Emblem Vault team has given me 200 Early Access Mint Passes that will allow you to create $ordi vaults for free + gas.
Should you be interested in vaulting to Ethereum and qualifying for a free mint pass, comment your eth address below.
🧵(1/3)
Introducing Verifiable Credentials (VC), a significant step towards realizing KaratDAO's ultimate vision. Our aim has always been to build a trustless and shareable Identity network. By migrating user data onto the blockchain, we can now leverage cutting-edge technologies such as MPC/ZK to enhance privacy protection and data ownership. VC plays a pivotal role in facilitating this seamless transition.
Check the tutorial Doc: https://t.co/xEuuPRJb4a
OMG! You won't believe what just happened. A mermaid emerged on my sailor boat asking for my aid to find the @Tabi_NFT Trident.
She whispered in my ear, promising a luminous pearl as compensation. Should I help her?
https://t.co/ita9lSsTJ1
🧜🏻♀️ 𝗧𝗛𝗘 𝗠𝗘𝗥𝗠𝗔𝗜𝗗𝗦 𝗘𝗩𝗘𝗡𝗧 𝗜𝗦 𝗡𝗢𝗪 𝗟𝗜𝗩𝗘 🧜🏻♀️
📣Ahoy, brave sailors! If the Mermaid calls upon you to fulfill her wish, what will you do?
👉Enter to receive #Rewards :https://t.co/pjNHRMOkWy
🎳More details:
https://t.co/1e8RcAhBRc
Ahoy, degens! I just discovered a mysterious artifact on @Tabi_NFT.
Join me on the voyagers‘ expedition, where we uncover a wealth of exquisite treasures. Hop on board and let's catch the wind. https://t.co/AdsJkZB2qb