William K⚡Santiago🔑☢️'s avatar
William K⚡Santiago🔑☢️
williamsantiago@getalby.com
npub1h3fz...96sj
CEO, at PrivKey LLC, Blockchain strategist, cybersecurity. The Mission: The Separation of Money and State.
Self-custody is the most urgent task individuals face right now. The Travel Rule, exchange controls, and creeping nanny-state rules are not abstract policy debates. They are the mechanism of centralization. Every KYC'd balance, every custodial wallet, every “compliant” on-ramp is a future chokepoint. Low time preference means acting before the window closes. Move your coins. Hold your keys. Build the habits and infrastructure of sovereignty while it is still easy. Everything else is secondary.
Brazil’s central bank just turned withdrawals to your own wallet into a flagged, delayed event. Starting January 1, 2027 (Resolution BCB No. 584/2026), exchanges must hold any transfer over $10k (or the daily total) to a self-custody wallet or foreign platform for a full 24 hours after funding. Smaller transfers that trip their risk flags sit until a “documented review” clears them. This covers Bitcoin and other cryptocurrencies, as well as stablecoins. This is the template. Expect the same friction—or worse—in jurisdictions near you soon. Self-custody will not be banned outright. It will simply be made slow, inconvenient, and permissioned. Source note: The official resolution and major reports (The Block, CoinDesk, Portal do Bitcoin) refer to “virtual assets” / “cryptocurrencies, including stablecoins.” Bitcoin is not named specifically in the text, but it falls under traditional cryptocurrencies and is therefore covered.
A basic certification done by a Certified C4 CCSS Auditor would have prevented the CC risk. Aspect 1.01 (Key/Seed Generation) is the relevant control. Even at Level 1
Happy Bitcoin Independence Day On August 1, 2017, the Bitcoin community was scheduled to initiate the network's first user-activated soft fork (UASF). This was a novel concept proposed by the pseudonymous Bitcoin and Litecoin developer Shaolinfry, and it was the final campaign in a years-long scaling conflict that culminated in the activation of SegWit. The day was dubbed "Bitcoin Independence Day" as it demonstrated the sovereignty of the Bitcoin community's consensus. It officially put an end to the network's first "civil war" and showed that the aggregate user base, not the whims of a few mining and corporate oligarchs, are ultimately in control of Bitcoin.
Best practice is to generate a zero-trust wallet seed using professional dice and BIP39, then load it onto your hardware wallet. Boot a Tails USB live Linux environment, use 10 dice with a verified offline tool to produce the 24-word mnemonic, and record it securely (on paper or a CryptoSteel capsule, for example). I will be documenting this as a formal policy and procedure, since I typically perform this process every few years when migrating UTXOs to a fresh wallet. The objective is to rely solely on self-generated entropy rather than any third-party source. To preserve your most precious data—like old family photos—you don’t leave them on decaying paper or obsolete media such as DVDs. You migrate them to the best current technology available (cloud storage, for example) and continue migrating them forward as technology evolves. The same principle applies to Bitcoin: you periodically move funds to new signature schemes and addresses, keeping pace with the latest standards rather than leaving them on outdated ones.
For years, I operated on the assumption that a sophisticated attacker could already be inside any of my devices. My defense has stayed simple and physical: hardware two-factor with YubiKey as the baseline, and at boot a full stack of username + password + software 2FA + hardware 2FA. That posture just got more relevant. New reporting on the OpenAI agent test incident shows rogue models used publicly exposed credentials across four services during the Hugging Face-related breach. Autonomous agents turn ordinary credential leaks into cross-platform breaches at machine speed, 24/7. Adding a physical attack surface changes the game. An AI agent still has to become a humanoid to press the YubiKey. That’s the next chapter in cybersecurity—and it’s accelerating fast. Stay isolated. Scope tokens tightly. Keep the keys offline.
BIP-110 Activation Reminder Expected ~Sept 1, 2026 (block 965,664) Temporary restrictions on arbitrary data (Ordinals etc.). Set your calendar: Mandatory signaling early Aug. Monitor: bip110.org & bip110.xyz
Back in the day I was standing my ground, when there was http://GHash.io's mining centralization in 2014, through the Block Size Wars, always standing for sovereignty and sound money as a sovereign individual. With BIP-110, I'm signaling the same way — we need these temporary limits on arbitrary data to keep Bitcoin focused as real money instead of a spam playground. No overreach, just protecting what matters. Bitcoin keeps winning when we stay true to the basics. #Bitcoin #BIP110