Seth For Privacy's avatar
Seth For Privacy
sethforprivacy@primal.net
npub1tr4d...2y5g
Privacy is a human right and necessary for freedom. - VP of Operations at Cake Wallet - Privacy advocate - Host of optoutpod.com, a privacy-focused podcast
Everything actionable you need to know about what this indictment means for you as a Samourai Wallet (SW) or Whirlpool user ๐Ÿ‘‡ As a Samourai Wallet user (no Dojo) Unfortunately, the architecture of SW meant that your xpub (a master public key, allowing anyone holding it to derive all your past/present/future Bitcoin addresses) was at some point in time held by Samourai, and could now possible in the hands of the DOJ. Though it's a worst-case scenario, you should assume that your xpub was compromised, and thus all previous mixes you have done have been unwound and are now traceable. You should also assume that the gov can now derive all past/present/future addresses of yours and track movement of funds if so desired. In addition, Samourai's coordinator and backend sync server was seized, and so SW will no longer sync, show received funds, or allow sending funds out. As such, you have to migrate funds to another wallet like @SparrowWallet following the docs here: In addition, I would recommend migrating funds to a new seed phrase to prevent anyone holding the xpub from seeing all future received/spent funds. You should also disable automatic updates in the Play Store (if used) to ensure no malicious updates are pushed. As a Samourai Wallet user (using your own Dojo) Thankfully, you avoided having your xpub potentially compromised. The worst case scenario for you is that your previous mixes may not have the full anon set you expected if non-Dojo users xpubs were compromised. You will still be able to sync/send/receive from your Samourai Wallet app, but should also migrate funds eventually as no further updates will come out for Samourai Wallet. If you want to migrate, use the docs below: You should, however, disable automatic updates in the Play Store (if used) to ensure no malicious updates are pushed. As a Sparrow Wallet user Thankfully, you avoided having your xpub potentially compromised as well. The worst case scenario for you is that your previous mixes may not have the full anon set you expected if non-Dojo/Sparrow users xpubs were compromised. There is no real need to rotate to a new wallet etc, and Sparrow is still an excellent option. Unfortunately you will no longer be able to mix in Sparrow as the Samourai coordinator was seized. Next steps for privacy If you (like me) relied on Samourai Wallet for privacy on Bitcoin, it's time to look elsewhere sadly. As of today I have two recommendations: Use Monero for spending, keep using Bitcoin for savings Yes, this isn't Bitcoin, but its by far the most used and most practical privacy coin out there with strong (and growing) ways to swap in/out of it without a centralized, KYC exchange. My recommendation is buying enough to cover your normal spending of Bitcoin for a month at least, and spend out of that lump sum as needed. Learn more: getmonero.org Where to get Monero: bisq.network Trocador.app In Cake Wallet's exchange feature Wallets: Feather Wallet Cake Wallet Monerujo Wallet Merchants that accept Monero: monerica.com cryptwerk.com/pay-with/xmr/ Use JoinMarket JoinMarket is a decentralized Coinjoin protocol that brings together peers to mix funds together, gaining strong privacy without relying on a central coordinator, without giving fees to a central entity, etc. The best way to get started today is using the new UI built around JoinMarket, @jamapporg: jamapp.org Have any more questions? Drop them below and I'll do my best to answer them.
GM โ˜•๏ธ Heading to Dallas for Finney Forum, pumped to reconnect with old friends, learn about new freedom tech, and be in the midst of some of the best community crossovers in the space. Any of you Nostriches attending?
Been secretly enjoying RBF and the new address and amount formats for what feels like an eternity ๐Ÿ˜… Now itโ€™s live for all you lovely Envoy users out there on all platforms ๐Ÿซก View quoted note โ†’
Who do I need to follow here? My โ€œLatestโ€ feed is a bit dead a lot of the time. Help me fix it ๐Ÿซ‚
Stop trying to use dice-rolled seeds unless you're an expert โŒ Just had yet another person (hard to count the total now) reach out about a low-entropy seed they generated and were allowed to import into a certain hardware wallet. A lot of the blame for these lost funds falls on influencers who shill users on overly-complex security setups without properly explaining the massive risks and tradeoffs associated for the average user. What happened: Less than 10min after funds were sent to what they thought was secure storage, they were swept to an attackers address. They used <10 dice rolls, meaning the private key had <25bits of entropy when the minimum for strong security is 50 dice rolls (128 bits of entropy). Wallets should not allow a user to import a seed that they know is completely insecure. Staying safe: As I have said many times, if you don't know the ins and outs of dice rolls, entropy, verification of the resulting seed offline, etc. please do not use dice rolls alone for seed generation. 99.99999% of users are better off allowing good, multi-source, open-source random number generation like we do on Passport. To date I have heard of zero compromised seeds that were generated using on-board RNG due to entropy issues, while there are countless examples of users losing funds due to improper dice rolls. Stay safe out there, folks.
Bringing back #Bitcoin #SkepticismSundays ๐Ÿ˜Ž One of the things that showed me the intellectual honesty of the Monero community and helped to force the community to stay grounded in reality and always laser focused on their core ethos was their weekly "Skepticism Sunday" Reddit threads. These threads allowed the community to come together, ask hard and skeptical questions about the design of Monero, the privacy provided, the economic approach, and much more. In my time in Bitcoin I've never seen anything similar, but the nuanced and high-signal crowd on Nostr seems like a perfect fit to fire things up and see how it goes. The goal of this thread (which I'll post weekly on Sunday's) is for discussing the uncertainties, shortcomings, and concerns some may have about Bitcoin. Things like what makes it difficult for you to use Bitcoin, what pain-points you have, etc. NOT the positive aspects of it. Discussing things with a critical thinking approach and level-headed discussion helps us learn where Bitcoin and its community can improve and go from there. P.S. -- I try to take a break from social media on Sundays so I will follow up and reply whwre I can tomorrow!
If we can't have honest, divergent opinions about the state of Nostr without people being abject assholes about it, then my bearishness will 100% prove true. Being able to openly discuss issues with each other without purely strawman, insulting replies is vital to the success of any project like this, even more so because its success relies on social networks. Read through the replies to this and enjoy a healthy response to criticism ๐Ÿ˜… View quoted note โ†’
Itโ€™s official, Iโ€™m on #TeamNerdMiner โ›๏ธ Had to pick one of these up and support the amazing work of @bitmaker Absolutely love the educational aspects of this, and a great way to play with @Public_Pool_BTC more as well. Can buy your own here, great way to support the amazing dev behind the NerdMiner project! image
# Taproot didnโ€™t cause Ordinals โŒ I've seen the view that "Taproot caused/enabled Ordinals" commonly mentioned across Twitter, and it's one that can be extremely harmful. Many in the space would love to further ossify (prevent change) in Bitcoin and use Ordinals "spam" as the reason for doing so, but I'd argue that that would be the worst possible outcome from this situation. This needs a lengthy explanation to properly grasp what's at play here, though, so let's get into the fun details. ## Arbitrary data in Bitcoin has always been possible Something most people don't understand is that a system like Bitcoin is built for data storage, it's just intended for monetary data. This design made it possible from day one to include arbitrary (arbitrary) data into the blockchain, either through methods like OP_RETURN (a good place for storing arbitrary data as it can be easily pruned) or in tweaked pubkeys (a bad place for storing arbitrary data, as it cannot be pruned). Some examples of this: - Satoshi inscribed a newspaper headline in the genesis block coinbase ( - Luke Dash Jr. used his pool to inscribe Bible texts and prayers in 2011 in the coinbase ( - Someone added the entire Bitcoin whitepaper to the UTXO set in 2013 ( All of these happened before both SegWit and Taproot, and there are many more cases of this type of data storage on Bitcoin. ## But I thought Taproot enabled this? Unfortunately, there is a common misunderstanding (thanks for the troll name [@TaprootWizards](https://twitter.com/TaprootWizards) ๐Ÿ˜…) that Taproot enabled this type of data storage, thus opening the way for Ordinals "spam." In reality, this type of arbitrary data storage on Bitcoin has always been possible, but was made much cheaper to do with the introduction of SegWit in 2017. SegWit was a major upgrade and bug fix for Bitcoin that enabled the Lightning network to be built and included a 3MB "witness" data allowance within each block w/ reduced fees for data to incentivize spending UTXOs (therefore making them prunable). More on SegWit in a fantastic post from [@River](https://twitter.com/River) here: <https://river.com/learn/what-is-segwit/> This incentivized portion of each transaction (called "witness" data) is intended for things like Bitcoin scripts, but can be used to store any data as long as it's done the "right" way. Specifically, Ordinals store them in an "envelope" between two opcodes, allowing the data to count as witness data and get the discount. This storage method was possible before SegWit, but now saves on fees in comparison to pre-SegWit usage. While this of course was not the intent of SegWit, it underlines the simple fact that if someone wants to store arbitrary data in a blockchain, they will find ways to do it. ## Does that make SegWit bad? If your first reaction is then to want to raise a pitchfork and campaign for no more changes in Bitcoin, remember this -- without the SegWit soft-fork there would be no Lightning network, no discount for users consolidating UTXOs, and instead users would be incentivized to create more un-prunable UTXOs as it's cheaper to create than to consume UTXOs w/o SegWit. Additionally, Ordinals being stored in witness data allows those who run a node to easily prune them and not store them in RAM, unlike any method that leverages pubkey tweaking or other types of stenography to include arbitrary data on-chain. This means that the actual impact of Ordinals on those who run a node is drastically minimized versus other arbitrary data storage methods. ## If we didn't have SegWit, Ordinals would all use the UTXO set It's extremely like that if we had never included the SegWit soft-fork into Bitcoin that the Ordinals craze would still have happened, and along with it a drastically worse outcome for the blockchain. In this alternate reality, Ordinals (and all similar NFTs) would likely be inscribed directly into the UTXO set, similar to how Stamps function today. Some within the Bitcoin community have been asking for a removal of the SegWit witness data discount to force Ordinals to pay the same fees as all other users per byte. Unfortunately, this would have two extremely detrimental side-effects: it would disincentivize healthy UTXO management (consolidating UTXOs vs creating new ones) and incentivize Ordinals to be put in the UTXO set directly. While putting the data into the UTXO set does cost those creating these NFTs drastically more, it also means that those running a Bitcoin node cannot prune the data, no matter what. Bitcoin relies on nodes being able to retain the entire UTXO set in order to verify transactions properly and prevent double-spends, and any data within that UTXO set must be kept in perpetuity. That would be drastically worse for those running a Bitcoin node, and makes the Ordinals in SegWit witness data pale in comparison when it comes to negative impact on Bitcoin nodes. ## So what can we do about it? The solution to reducing the cost of using Bitcoin is not censoring Ordinals (something that isn't even technologically possible, BTW), but rather is finally building solutions to Bitcoin's long-term scaling. Ordinals have highlighted something most of us knew would happen -- base-layer fees would become untenably high, as they have to for Bitcoin to be secure long-term. In order for the average person to use Bitcoin, we need powerful scaling solutions like layer twos, and unfortunately Lightning in it's current form isn't the final solution. Lightning relies on every channel-owner (and thus user when done in a non-custodial manner) being able to settle back on-chain to resolve disputes, something that isn't economically feasible in a realistic fee environment. ## The solution? Covenants Enter covenants, an improvement to Bitcoin that has been a long-time in the making and is finally picking up the steam it deserves in the space. Covenants enable both improvements to Lightning that make it drastically more scalable, and new layer two networks to be built that have different (often better) trade-offs compared to Lightning. As this post is already getting a bit too long I won't dive into the details of covenants, but instead ask you to spend a few minutes going through this fantastic set of resources on covenants to better understand what they enable: <https://covenants.info> Have questions? **ASK THEM!** The best way for the broader Bitcoin "rough consensus" layer to work is for more people to step up, learn, and ask questions as they go.
โ†‘