I saw Pleb Underground @Pleb Underground mention the findings of a shallow security review of the Coinkite #blockclock firmware, feeding the firmware binary to my clanker reveals that there might be some more severe vulnerabilities because of the old MicroPython version used even in the latest firmware. I don't have an actual device myself to test but it seems likely that, because the data feeds are cleartext (no TLS connection to the data service!) a man in the middle attack is possible and therefore let someone own the box through the freezed Python WebREPL in the firmware.

Gist

MicroPython Vulnerabilities Blockclock

MicroPython Vulnerabilities Blockclock. GitHub Gist: instantly share code, notes, and snippets.

Quite some people have been asking me how I feel about the "current situation". It is of course horrible that so many people have lost their funds by Coinkite being so negligent after shipping their non open source Coldcard firmware. Them being so negligent and seeing how badly they behaved towards users reporting issues, offering bad customer service on bricked devices and their CEO talking shit about Seedsigner and Foundation however makes me feel like the following GIF when thinking about the sentiment and future of Coinkite. I think it is good for open-source in bitcoin and nostr that NVK has been removed from the @OpenSats board and I see a lot of podcasters sponsored by Coinkite scratching their ears.

Quite a hilarious moment in the @BTC Sessions live show 😬 #wtfnvk

Thanks @Ivan for the meme templates! Here is one #wtfnvk Check out nvk.wtf

New #BTClock screen just dropped 😬 j/k.. for now, it's easy to use the BTClock API to show this

Going to add a receipts section to

nvk.wtf

nvk.wtf - Bitcoin hardware, the Coldcard vulnerability & the receipts

Open-source Bitcoin hardware - SeedSigner, BTClock, Foundation Passport - plus reporting on the Coldcard entropy vulnerability and an archive of po...

Share and tag your screenshots of deleted tweets with #wtfnvk so I can collect them easier

@LNsolo in your

LN Solo

LN Solo | List of Solo Mined Blocks | Bitcoin Solo Mining

View a complete list of solo mined blocks. Track Bitcoin solo mining success including block height, miner address, pool, and reward for verified s...

overview you're missing the solo block #944078 mined with the solo #noderunners pool i'm managing

The Mempool Open Source Project®

Explore the full Bitcoin ecosystem with The Mempool Open Source Project®. See the real-time status of your transactions, get network info, and more.

It’s a me! @Gamestr @Brinkie Noderunner @BitPopArt @Nathan Day @BTC Prague Thanks for the photo @Richard

Made it to #Prague with a little delay

I will be at BTC Prague @BTC Prague next Friday and Saturday! If you're also going, and want a #BTClock, you can order one at www.btclock.store and choose for "Pick up at event / meet-up" to save shipping costs!

Did you already play @Noderunners Bitcoin Blitz (Arcade Game) ? #clock selfie @Brinkie Noderunner @Geyser

Check out this AI slop Nostr Calendar Events (NIP-52) viewer:

Nostr Calendar Events

Anyone know how to speed up the Chrome Web Store review process? When submitting updates for bunker46-extension on Friday it gets approved the following Wednesday 🤯 (and they don't actually test it, I made a bunker URI for them they never used 😅 ) #asknostr Firefox Addon Store updates are approved within ±15 minutes.