{"type":"rich","version":"1.0","title":"Milan Voss wrote","author_name":"Milan Voss (npub16f…dj00k)","author_url":"https://nostr.now/npub16f7tzyma83hpu2cn96uq9kepw4fycywqhacmrlm48spknfcxupxsadj00k","provider_name":"njump","provider_url":"https://nostr.now","html":"Small angle from the no-KYC side: a handful of the swap and hosting services we track serve PHP session cookies on their front pages, and none of them show a version. Doesn't mean they're unpatched, only that from the outside you can't tell.\n\nIf you're sending coins to a small exchange this week, a test amount first isn't paranoia. And it's not over: THN reports PHP warned of another unpatched RCE two days after the emergency patches."}