Upcoming: Loaded dice attack (lol? 🥲)

At this point, I'm going to say you're retarded if you aren't at a minimum running your safety critical software through various AI models before official release. It seems like a duty to know what is popular and likely being used to find exploits, and to use it against yourself first and continuously. All this bullshit also reminds me of an undergrad class I had on validation and verification of software input and output. Maybe we should be testing assumptions? For example, that generated key output isn't trivial to guess? Surely there's a way to generate and test data prior to release. Subject to change if someone convinces me otherwise, but that's where my thinking is.

Move fast and break things. Ship, ship, ship!

Wordle 1,869 5/6* ⬛🟨⬛🟩⬛ ⬛🟩🟩🟩🟩 ⬛🟩🟩🟩🟩 ⬛🟩🟩🟩🟩 🟩🟩🟩🟩🟩

Blaming educators, journalists and podcasters for advocating self-custody is misguided. Bitcoin has little point without it. This really has nothing to do with Bitcoin or self-custody. And it isn't fair to blame people who have no duty to be experts in relevant security and engineering principles. Knowingly promoting dangerous devices is one thing, but I don't think any of them were doing that. There are things to reflect on and change going forward, but this isn't one of them. I don't see who wins if we have no builders, educators, or self-custody promoters in the space. Free market certifications, standards, audits, testing, etc... Absolutely.

A Simply Bitcoin title that isn't clickbait. I'm impressed.

At least we know how to increase Nostr activity now. I haven't had this much interaction in a long time.

I'm feeling this too. I'm asking myself whether I really should have given up my 50/50 strategy of gold and Bitcoin. And the gaslighting is pissing me the fuck off. I get that we each bear the full consequences, but good luck getting new adoption with this garbage ass culture. I don't think the game is over, but this is a massive fucking failure that has me revisiting everything. And maybe that's a win in this big pile of loss. View quoted note →

I'm shifting on AI. I question the ethics and practicality of not using it at least for testing at this point. Particularly in safety critical domains.

Many CC related scams are coming. Buckle up.

For every minute I spend analyzing and criticizing others, I spend probably an hour or more on myself. There's nothing wrong with pointing out the issues with competitors (I appreciate it when it's done in a healthy way). Just spend more time looking at your own work and not demeaning anyone who points out concerns for what you're doing. It could be the case that you spent so much energy preparing for edge case splinters and preventing competition that you completely missed the plank in your own eye. External and internal criticism are both important. Ego has no place when lives are at stake. Practice both fairly.

I don't want anyone at CC to be harassed or harmed. That said, there needs to be serious general discussion around the ineffectiveness of ego and being an asshole to anyone who dares to suggest that something isn't right. I called out concerns for not being FOSS and got demeaned for it. Would that have prevented this? I don't know. But my concern was that there was no longer an incentive for the code to be used and viewed by anyone outside CC. And certainly no economic incentive outside of paid audits. That's a big fucking problem. Again, total speculation, but I have a hard time believing this would have gone undiscovered had the codebase remained FOSS, and it probably wouldn't have been an issue at all without the code changes that were made to rip FOSS out (from what I've read). I also use several alternatives that were heavily shit on and nothing has been rekt yet. So maybe we should work together on the things that matter most and not treat each other like shit for daring to think differently. Alienating people with concerns just creates blind spots for everyone. And stop gaslighting users who did what they were supposed to do. If you claim to be the best and alienate others, you goddamn better have your shit straight. It is not the user's fault. I've read the guides. I've went through the flow. There was no indication these people were doing anything wrong.

I wouldn't fault anyone for moving some to Lightning wallets, Strike (etc) or whatever is necessary to not have their entire stack in a CC setup, regardless of whether dice or passphrases were used. View quoted note →

Ad reads with claims that may or may not be true shouldn't build reputation. And that's basically where we are these days. View quoted note →

Exchanges today

If it's truly "best practice," something advertised as "ultra-secure" and the best should encourage it by default, not as an optional afterthought at the end of the flow. And either way, that would do nothing to address the underlying ultra-security failure. Besides, passphrase is meant to help protect your seed if it's physically found out, not as a bandage for security fuck ups at the point of generation. Gaslighting.

Now I lay me down to sleep; I pray the Trezor my stack to keep. Amen.