Just now:

Querdenker oder Wunschdenker

Lots of signing Devices on shelf in Media Markt 🤓 A good way to get Ledger signers without address leakage and low supply chain risk. Is Bitcoin going mainstream or what?

Anyone know about a critical bug in LND? Or why else has BOLTZ shut down so suddenly?

Signing device security analysis overview here! Crossposted from X account Scott Marmoll @bitcoinsbanker Thanks to a generous credit of tokens from @PPQdotAI , Kimi K3 and an ape with a laptop (me) have conducted the following analysis of a bunch of projects / companies wallet softwares. @Coinkite , @OPENDIME , @SeedSigner , @Bitkey , @bluewalletio , @PhoenixWallet , @SparrowWallet , @Trezor , @Blockstream , @Ledger , @BitBoxSwiss , @SpecterDIY , @ElectrumWallet , @SamouraiWallet 🟡 Yellow ≠ broken. None of the nine Yellow products has a confirmed fund-loss-by-default flaw. Yellow means at least one of: (a) something security-critical sits outside independent verification. i.e., closed firmware or secure-element code (Opendime, Ledger, open source please!), vendor-run recovery infrastructure (Phoenix/ACINQ, Jade's oracle, Bitkey's WSM); (b) a real but bounded weakness, such as a zero-work-factor KDF (BlueWallet), weak legacy KDFs on a hot wallet (Electrum), no-SE DIY hardware with thin maintenance (SpecterDIY), a just-patched vulnerability awaiting its report (Bitkey); or (c) a dead/unmaintained product whose crypto reviewed clean (free Samourai!). In every case the entropy/key-generation path itself was reviewed and found sound unless the cell says otherwise.

@KELBIE | sovran.money can you plz check the logic in your cc bug code? View quoted note →

GM! Maybe I'm just stupid, or brainfogged from working through the night helping my friends copy with the CC bug, but isn't this logic wrong anyhow? If the board config defines HW_ENABLE_RNG as zero (logically: FALSE), and the SW later checks for it NOT being TRUE, then the hardware still isn't used, right? @npub132er...zmdh @N Source: Kevin Kelbie's

coldcard.rip

A source-linked analysis of the COLDCARD random-number flaw, the affected firmware, and the Bitcoin sweeps that followed.

Peak Deutschland: Polizei ruft zur Öffentlichkeitsfahndung auf, verheimlicht aber den Nachnamen und darf "aus datenschutzrechtlichen Gründen" kein Foto posten 🤦‍♂️

Glad to see this getting some mainstream visibility

I saw a 14 minute video here today, about similarities between GenZ and ancient Japan's Ronin, but I can't find it anymore. Can anyone help me out please? Thanks 🙏