Always pick a slow news day to announce the new phase of a project. Introducing #safebox #acorn - once released, it will be a separately installable component to manage identity, funds and records that live independently on replaceable relays, mints and blossom servers.

Acorn - Acorn

A protocol-first component for safeguarding user-controlled keys, balances and records.

128 bits of entropy versus 72 bits (more likely, 35)

Unfortunately, the big lesson here is - don't upgrade hardware wallet firmware unless the company has gone through a third-party audit that is signed off.

X (formerly Twitter)

Lucia Miller (@LuciaMillezyj) on X

@giacomozucco You don't need to move anything if your seed is generated before 29.03.2021 because 4.0.1 version wasn't live yet. I think it is impo...

This is the Ford Pinto moment for the Bitcoin hardware wallet industry.

Ford Pinto - Wikipedia

I notice that @primal and @npub13myx...v3qk websites are no longer considered as secure in the Google Chrome Browser. Any idea @miljan @hodlbod ? #asknostr

I took all of the necessary migration steps with my #ColdCard but I might be ok. After doing a recovery for one that I gifted, I noted that the firmware was 3.1.9(2020) versus an affected version 4.1.9(2023). I realized that my seed was generated on the unaffected version, and I should be ok. I upgraded the firmware after the fact, so I should be safe? Is that a correct assumption #asknostr ? Nonetheless, I plan to continue all migrations.

QOTD: Will God blame you for not rolling dice?

Leaving a nominal amount of funds on my mk3 to see if they get swept. It’s an early warning system now.

Yesterday felt epic. Mt Gox or Quadriga vibes.

if air-gapped: still not secure

stay humble and roll dice.

Put your Bitcoin on an exchange….

Need to check out

Cupcake

Cupcake - Your old phone? Your new hardware wallet

Cupcake makes it easy for anyone to secure their crypto by turning any old phone into a powerful air-gapped hardware wallet.

GN

Block Engineering Blog

Predictable RNG Fallback and 32-Bit Reseed in COLDCARD Firmware

How a disabled hardware-RNG path and 32-bit reseed constrain entropy in affected COLDCARD firmware and expose generated secrets.

This popped back into my feed. I had forgotten about it. It is a simple and good playbook to follow.

Well said. View quoted note →

We’ve evolved from burning wood to burning tokens.

Universe and Unix both start with ‘Uni’ - not a coincidence.