Bitcoin.Review's avatar
Bitcoin.Review
_@bitcoin.review
npub1qdca...zclt
A Podcast and Newsletter review of Bitcoin Software updates and related topics with NVK and guests.
Harbor is a new ecash wallet for desktop, designed for privacy from the ground up. 🤖 Rust backend & frontend 🧅 Tor by default 🪙 Supports multiple mints (Fedimint + Cashu) Devs @Paul and @benthecarman give @BLUESKY the lowdown in BR097.
Dev testing? Choose your chain: Testnet = chaotic & adversarial Signet = predictable & controlled @Rob Hamilton walks through mining behavior, forks, and block timing. [BR096]
Bitcoiners - it’s time to return to #nostr @BLUESKY and Odell dissect why many Bitcoiners bailed on nostr after a disappointing first touch, and how UX improvements can win back users. [BR096]
Nostr MLS is here! A HUGE step forward. 💪 But before you start using #nostr for sensitive Bitcoin actions, take warning from @craigraw - encrypted or not, nostr messages live forever on servers you don’t control. (Oh, and not to mention future post-quantum threats!) [BR096]
What happens if a soft fork (such as CTV) were activated by 50% of the hash rate, but rejected by the rest? @Rob Hamilton explains how this would play out, ultimately resulting in a chain split. [BR096]
The OP_RETURN debate may be distracting from a far more existential threat to #Bitcoin. The Samourai Wallet case could set precedent on whether node operation is legal in the US. ⚖️ @craigraw urges us to focus on the real fight in BR095.
Ephemeral anchors recently dropped in Bitcoin Core v29! 🚀 No more fee baking in pre-signed txs. You can now "delegate" fee payment post-signature. Better for Lightning, covenants and more. @BLUESKY , @Rijndael & @Rob Hamilton unpack it in BR095.
Is Cashu an L2 or an L3? While this may be debated (and @calle might disagree!), @BLUESKY and @Rijndael argue that #Cashu is the "perfect L3" - generally using lightning for settlement, whilst offering a different trust model and features. [BR095]
🔐 COLDCARD just got a HUGE upgrade! COLDCARD Co-sign lets you do 2-of-3 multisig with yourself - while enforcing spending limits, whitelisted outputs, and time-based constraints, all locked behind a policy key. @BLUESKY , @Rijndael , and @Rob Hamilton break it down in BR095.
Want to share a seed or SSH key securely across borders? Meet Key Teleport: a new protocol by @Coinkite to transfer secrets without trusting phones, computers, or comms. All via QR, NFC, and BBQr. @BLUESKY & @Rob Hamilton discuss the new protocol and its applications in BR094.
🚫 SaaS bloat ✅ Vibe-coded precision @Paul and @BLUESKY make the case for ditching multi-tenant SaaS complexity in favor of simple, self-hosted tools tailored to real needs - which can now be quickly built with the help of AI. [BR094]
From building Lightning interfaces to coding backend agents, LLMs are evolving fast. The challenge is no longer compute—it’s control. @BLUESKY , @Rob Hamilton & @Paul unpack vibe coding, prompting limits, and where AI tools are ready in BR094.
Mining decentralization is gaining momentum. 🧱 With Stratum .work showing live template timing and Stratum V2 adoption on the rise, a shift toward hasher-led block building could arrive within the next few years. @BLUESKY shares his take in BR094.
@mempool now flags address poisoning attempts. These attacks spoof wallet addresses to fool users into sending to the wrong address. @Rob Hamilton outlines the importance of Mempool space’s update in BR094.
🚨 Trezor Safe 3 vulnerability Ledger Donjon demonstrated they could bypass firmware checks and run malicious code — enabling remote recovery of user funds. Why? Critical ops still run on the MCU, not the Secure Element. @BLUESKY & @Rob Hamilton break it down in BR094.
Change verification is a must for wallet security. If you send 1 BTC from a 100 BTC UTXO, that 99 BTC needs to come back to you. Many wallets ignore this. @Rob Hamilton & @BLUESKY highlight this critical security oversight in BR093.
🛡️COLDCARD v5.4.1: ✍️ Message signing from secure notes 🛡️ Delta Mode: Hide/wipe seed vault, notes & p'words 👓 Enhanced address display 🔐 Verify BBQr Signed RFC messages + more! @BLUESKY gives a rundown of the latest COLDCARD updates in BR093.
BDK abstracts wallet dev complexity, making it accessible for all. @BLUESKY : "It'll be the default in a few years." @Rob Hamilton : "Even a left curve like me can build safely." With v1.1.0, the future of wallet development is more promising than ever. 🦾
Bitcoin Safe v1.1.0 is here: ✅ Jade wallet support ✅ Deb build ✅ Xpub import @BLUESKY and @Rob Hamilton discuss the project's progress, whilst also highlighting privacy concerns over using #nostr for multisig coordination. [BR093]
Is ESP32 really safe for securing #Bitcoin? Undocumented commands in ESP32 Bluetooth chip have recently raised security concerns, adding to existing risks. 🚨 @BLUESKY , @Rob Hamilton , and @Seardsalmon sound the alarm in BR093.