Ungovernable's avatar
Ungovernable
ungovernablemisfits@getalby.com
npub1jcym...2890
An Ungovernable Bitcoin & Privacy Movement
Ungovernable's avatar
Ungovernable 1 month ago
The advice, after all the war stories. "You have two different ways of interacting with Bitcoin. You have proper Bitcoin that's more private, and you use that peer to peer. And then you have the whitelisted, KYC version if you're gonna interact with KYC services." "Keep these two things separate." Not because the regulation is right. Max is clear that it is not, and that it gets people kidnapped and worse. It is still the reality you have to route around. @MaxUM
Ungovernable's avatar
Ungovernable 1 month ago
KYC - Kill Your customer. The full list of what Revolut handed over: a copy of your passport or driving licence, a verification selfie of you holding said document, your full name, your date of birth, your occupation, your home address, your email, your phone number, your IBAN account details, your account statements, your withdrawal records, and your full transaction history including Bitcoin. It went to someone using an email account on a real government agency domain. Revolut treated the request as genuine and sent the files. Let that sink in.
Ungovernable's avatar
Ungovernable 1 month ago
"I think in today's AI economy, there's no excuse to come out with a new product now without a proper graphical user interface." @QnA There is really one game in town for privacy on Bitcoin, and until recently the way in was a terminal. Plenty of people will tell you that if you cannot be bothered to learn it, you do not deserve the tools. Max put the counter better than I did. This should not just be for the big brains. It should be there for the crayon eaters who want privacy too.
Ungovernable's avatar
Ungovernable 1 month ago
Max, on why he started caring about any of this. "Tying your identity to Bitcoin is very dangerous in the physical world. You can be attacked by all sorts of different entities. You could pay your plumber to go and do some work for you, and then they can suddenly see, if you haven't managed your UTXOs properly, how much money you have, and they might come back and crack your skull to take the rest." Privacy on Bitcoin can be life or death. @MaxUM
Ungovernable's avatar
Ungovernable 2 months ago
Your weekly reminder to get your funds off an exchange has got a lot harder to give. Get them on chain. Don't use Lightning, you might get hacked. I would not use Liquid, it is probably not safe. Don't use a sidechain. Don't use a second layer. Bring them into self custody, but make sure your entropy is good, and think very carefully about who you trust as your hardware provider. Have self custody. Don't have all your eggs in one basket. Ask the questions. And don't trust any cunt.
Ungovernable's avatar
Ungovernable 2 months ago
Orange Surf pointed at something uncomfortable in his analysis. The fix for the bug that drained Liquid had a commit dated the 3rd of August. The pull request carrying it was still open on the 1st of September. Which means the patch was public while the hole it closed was still live on the network. Anyone reading that repo could see exactly what to look for. If you are sitting on 4,000 Bitcoin of other people's money, an open pull request is a map for anyone who bothers to read it. @OrangeSurf
Ungovernable's avatar
Ungovernable 2 months ago
"He went ahead and just deleted everything and then fucked off of the comms channels, taking a load of code with him, which pissed me off no end." So Dojo Bay has a button on it that downloads the whole source. Anyone can take it, run the installer on any Ubuntu box that already has a Dojo, and have their own directory up in a couple of minutes.
Ungovernable's avatar
Ungovernable 2 months ago
"Why do you need a VPN? My traffic is all encrypted with TLS." Carl Dong: that is half right, which is the most frustrating type of right. TLS does encrypt your traffic. But when the connection starts, the client hello carries a field called SNI, and SNI shows the hostname you are visiting in plain text, to everybody on the path. WikiLeaks, your bank, whatever it is. Encrypted contents, fully legible destination. @Obscura VPN
Ungovernable's avatar
Ungovernable 2 months ago
Pocket Bitcoin leaked compliance records for 291 customers, tying identity information and documents to Bitcoin addresses. Another 5,120 had names, IBANs and payment amounts exposed. No private keys were touched, and it barely matters. An address on its own doesn't identify anybody. A leaked compliance file does exactly that, permanently, against a public ledger. Max put it better than I could. The safest way to use Bitcoin is the way that causes you the most trouble. Buy peer to peer, hold your own funds, jump through hoops to keep it away from your identity, manage your UTXOs, and then you cannot spend it in normie world because you cannot prove where it came from. That is the cost of KYC. This information gets leaked because it had to be collected in the first place, by people making decisions for your safety who do not understand what they are regulating.
Ungovernable's avatar
Ungovernable 2 months ago
On the surface, an 11 of 15 multisig to peg out Bitcoin sounds unbreakable. How are you going to compromise 11 geographically distributed companies? You don't have to. The federation keys were never touched. The withdrawal had valid authorisation because it went through the normal service. The failure happened earlier, when the network accepted liquid Bitcoin that should never have existed. Every signer was reading the same faulty software, so every signer agreed. The number of keys does not fix a shared code failure.
Ungovernable's avatar
Ungovernable 2 months ago
The VPN industry is built on horrible YouTube sponsorships, scare tactics, fake top 10 lists and ownership structures you would need a private investigator to untangle. And underneath all of it sits one fact the influencers skip over. Your provider can see who you are and everything you do. Every single one of them. "No logs" is a pinky promise that nobody can truly verify, because you have no way to check it. @Obscura VPN
Ungovernable's avatar
Ungovernable 2 months ago
GG wanted miniscript on @SeedSigner. Rob Hamilton opened an issue about it three years ago and it sat there. So GG put the clankers to work and built the fork himself, plus a standalone bridge so it talks to the live Liana desktop without patching Liana at all. Twelve months ago that was an insurmountable challenge for most junior developers, let alone someone who is not a developer. Nobody is claiming these forks are safe to hold funds on. But getting 95% of the way there, so an actual engineer can pick it up and review it properly, is completely fucking wild. This is the other side of the AI story, and it does not get the headlines the hacks do.
Ungovernable's avatar
Ungovernable 2 months ago
Between the 17th and the 24th of August, wallets tied to sanctioned exchange HTX sent roughly 12,000 dust transfers into Kraken user addresses. The deposits tripped Kraken's AML controls and froze the accounts. Access has been restored, but Kraken still holds 4.2 million it considers tainted, and restored access is not the same as getting your money back. HTX denies all involvement. Look at the asymmetry. Sending dust from an address you know is sanctioned costs an attacker close to nothing, even at current mempool rates. It can cost the victim their entire account. This is what coin control is for, and it is what leaving coins on an exchange can cost you.
Ungovernable's avatar
Ungovernable 2 months ago
Two Starkware researchers broadcast a quantum resistant Bitcoin transaction on mainnet, in block 964199, using hash based one time signatures built from script opcodes that already exist. No consensus change. No soft fork. Nobody had to ask Bitcoin Core for anything. It is about five times the size of a normal transaction, so at fifty sats a byte it stings. At one sat a byte it is nothing. And if the alternative is being quantum vulnerable, that is a price worth paying. The headline is not the cost. It is that this was possible the whole time.
Ungovernable's avatar
Ungovernable 2 months ago
Thank you for joining us for #FREEDOMTECHFRIDAY! Don't forget to help spread the word and share the show! See you at the same time next week. image
Ungovernable's avatar
Ungovernable 4 months ago
Bitcoin for profit? Fine. Pretending to care about freedom for clout then vanishing when it counts? That’s a problem.
Ungovernable's avatar
Ungovernable 4 months ago
People don’t care about Bitcoin. They care about activists being able to raise money when governments try to stop them. That’s when it clicks. That’s Agora 👇
↑