Y'know what sucks?

Cryptocurrency grifting.

Y'know what doesn't suck?

Furry blogger dropping a 0day on those fools

https://saltysquirrel1759d62f4c-tcyiv.wordpress.com/2026/01/15/lets-talk-about-layer-one-x-and-x_wallet/

(I'm told that this will be available on squirrelly.blog when DNS stops being a fuck)

@soatok
*snerk*
Nice nice nice nice.
.... did they actually?
XD
Oh gods, I miss when the cryptocurrency slop was at /least/ the domain of actual cryptography nerds.

Such a fundamental misunderstanding of the whole gods damned point. It's so incompetent I'd almost suspect them of intentionally weakening their product.

@soatok I was in disbelief when seeing that counter value that I had to check the source code. Oh gawd, they really did an xkcd.com/221 .

But then I wondered: why that number? Could it be that they copied the same flawed logic from the unmaintained JS library they're using for AES? https://github.com/ricmoo/aes-js?tab=readme-ov-file#ctr---counter-recommended

Truly flabbergasting.

@litchralee_v6 @soatok ah, but see, 5 is one more than 4, so therefore it must be more secure. logic!

@gsuberland @soatok I've long wanted to make exceedingly-niche T shirts for myself, the sort that reference things which read mostly normal for the general public, but would pique the interest of people in that field.

I feel like a shirt that says "// The counter is optional, and if omitted will begin at 1" followed by an unlabeled diagram of the AES S-box would meet that criteria.

@litchralee_v6 @soatok The one time I've cracked a cryptosystem in anger, it was because someone forgot to set an IV. Classic mistake.

@soatok > Jesus fucking Christ, what mouth-breathing, beady-eyed, slack-jawed, sister-fucking dipshits wrote this?

Was his name Claude?

@litchralee_v6 @soatok took one look at the implementation and it’s not constant time lmfao