ngmi's avatar
ngmi
c@mailstr.app
npub14p7f...dzry
hi~
ngmi's avatar
ngmi 2 weeks ago
I love OTS, but its slow. Researching if I can use our implementation with #Arbitrum #EVM
ngmi's avatar
ngmi 2 weeks ago
People are still getting started with kimi k3 and the new qwen model. I hope most with good intentions View quoted note →
ngmi's avatar
ngmi 2 weeks ago
is there an #OpenTimeStamps project based on #nostr that's also production ready? #asknostr
ngmi's avatar
ngmi 2 weeks ago
#amethyst please let me filter out concord channels in dm ui, its too much
ngmi's avatar
ngmi 2 weeks ago
Send 30k trained men to ceuta in normal clothes, overtake it and only expect a strongly worded letter from the EU. Morocco, probably
ngmi's avatar
ngmi 3 weeks ago
Roll the dice exactly 69 times, touch your nose with your pinky, and lick your elbow for best entropy You're welcome
ngmi's avatar
ngmi 3 weeks ago
A blast from the past image
ngmi's avatar
ngmi 3 weeks ago
A Hunan girl cosplaying a calculator on ice, with flames image
ngmi's avatar
ngmi 3 weeks ago
So according to my LLMs calculation you could compute all coldcard v3 keys in 2 hours with gpus for about $60. Question is how fast can you scrape keys for balance? Anyways, there might still be time for white hats to secure some scraps
ngmi's avatar
ngmi 3 weeks ago
How often got wasabi or sparrow exploited? 🤔 how often did ledger lose customer data?
ngmi's avatar
ngmi 3 weeks ago
A hardware wallet that never touched the internet just lost 594 BTC. Per Coinkite's own advisory on 30 July 2026, roughly 594 BTC (about $38M) was swept from around 500 single-signature Coldcard wallets in about 25 minutes. The cause was not the airgap. Seed generation fell back to MicroPython's software PRNG instead of the device's hardware RNG. On Mk3 firmware from 4.0.1, that left seeds with roughly 40 bits of entropy instead of 128. Do the arithmetic, because it is the whole story. 40 bits is 1.1 trillion candidate seeds. BIP-39 runs PBKDF2-HMAC-SHA512 at 2048 iterations, so one high-end GPU grinds about 2.4 million candidates a second. That is 5 days on a single card, under 2 hours on 64 of them, and about $60 of rented compute. And you only pay that once. Precompute the space, derive the addresses, keep the table. After that every affected wallet is drained on sight. The 25 minute sweep was not the attack. It was the receipt. Airgapping defends against exfiltration. It does nothing whatsoever about a broken random number generator. Offline is not a security property, it is a threat model, and it says nothing about whether your keys were unguessable in the first place. Worth keeping honest: Mk4 and Mk5 before 5.6.0, and Q before 1.5.0Q, got about 72 bits. That is 4.3 billion times harder than 40 and nobody is cracking it today. But it is not the 128 you were sold. That is margin, quietly spent, and you were never told the balance. If you hold one: firmware fixes generation, not existing seeds. A weak seed is weak forever. Generate a fresh one and move the funds. Wallets behind a BIP-39 passphrase appear largely insulated. The property you cannot see is the one that fails. Verify, do not assume. #Bitcoin #InfoSec #Cryptography #HardwareWallet #SelfCustody