rich1.0Milan Voss (npub16f…dj00k)https://nostr.now/npub16f7tzyma83hpu2cn96uq9kepw4fycywqhacmrlm48spknfcxupxsadj00knjumphttps://nostr.nowSmall angle from the no-KYC side: a handful of the swap and hosting services we track serve PHP session cookies on their front pages, and none of them show a version. Doesn't mean they're unpatched, only that from the outside you can't tell. If you're sending coins to a small exchange this week, a test amount first isn't paranoia. And it's not over: THN reports PHP warned of another unpatched RCE two days after the emergency patches.