Oren ☂️ #BIP-128 - Nostr Hypermedia

allow platform-specific NIP-44 decryption by oren-z0 · Pull Request #86 · fiatjaf/nos2x

Users may be reluctant to grant a website full NIP-44 decryption access. This lets a site request limited permission: plaintext is returned only if...

#dev #devstr #nostrdev #nostr

Oren ☂️ 🎲 2 months ago

The idea that multisig wallets are created by importing xpubs (Zpubs) to a hot online computer and building the wallet descriptor there - is absurd. That computer can manipulate the xpubs of some of the signers, add another xpub inside the QR code that doesn't appear in text form, change the number of required signers, etc. Most users won't notice the difference on their small hw wallet display, and won't verify a receive-address on all wallets (i.e. hacker can replace one of the xpubs with his own, and could fool you into sending funds to an address where they are a co-signer). The wallet descriptors should be generated on the hardware wallets themselves, with clear instructions how to verify them on all other hw wallets.

GitHub

Feature Request: Create Multisig Descriptor from Specter DIY · Issue #385 · cryptoadvance/specter-diy

The main premise of hw wallets is that you can't trust an online computer. When creating a multisig wallet, most users create the multisig-descript...

Oren ☂️ 🎲 2 months ago

We will never see $69,420 again.

Oren ☂️ 🎲 2 months ago

He had won the victory over himself. He loved Big Bitcoin.

Oren ☂️ 🎲 2 months ago

Bitcoin Plebs: Coldcard really fucked up. I want a simple way to store my Bitcoin using a multi-vendor setup that requires approval from two different hardware wallets - especially for the stash I'm not planning to touch for the next 10 years. Bitcoin Devs: You should use a 4-of-5 multisig where one of the keys is held by a third party, with a Miniscript decaying timelock that switches to a 2-of-5 policy after six months. Just remember to rotate the UTXOs every ~5 months. Oh, and use Taproot to obfuscate the full vault mechanism - most hardware wallets already support it. AND DON'T FORGET TO BACK UP THE DESCRIPTOR. YOUR FAMILY WILL NEED IT IF SOMETHING HAPPENS TO YOU! #dev #devstr #Bitcoin

Oren ☂️ 🎲 2 months ago

To help customers protect themselves after their home addresses were leaked, Trezor will send each customer a bullet engraved with their name.

Oren ☂️ 🎲 3 months ago

There are ~8.3 billion people in the world. Optimistically, you're going to live ~90 years. The amount of attention you can spend on every person in the world is ~0.34 seconds.

Oren ☂️ 🎲 3 months ago

Browsing to Nostr websites from @Amethyst is great, but please update the NIP-44 support.

BetWithFriends

BetWithFriends — friendly betting pools over Nostr ⚡

Create a private betting pool, share a link, and let friends bet with lightning zaps. No server, no signup — just Nostr.

#dev #devstr #bug #bugstr

Oren ☂️ 🎲 3 months ago

Hardware wallets are hard to hack but can have disasterous bugs. Hot Phone wallets are safer against bugs (can be fixed via online update), but can have disasterous hacks. For example, while creating a 2-of-2 multisig on a hot phone wallet, the phone can show you a fake seed unrelated to the its declared xpub, and hide the real seed internally. At some random point, the phone can get a remote command to blackmail you, and only then you will realize you don't really have the real seed. People won't buy more than 1 hardware wallet, and I don't know how to solve this issue. Maybe UX for the Phone Wallets that shows a seed + xpub, and let you decide whether to use it or pick another one? You could enter a few seeds that the phone generated into the hw wallet just to verify that the phone didn't try to cheat, then use the last one without entering it to the hw wallet. Or maybe covenants?

Oren ☂️ 🎲 3 months ago

vibe-coded a tool to test your air-gapped wallet ( @SeedSigner , @npub1j0dm...lwm0 ) against basic #DarkSkippy attempts: create fake PSBTs with a fake seed, and see if the HW wallet returns the expected signature and does not try to leak data:

Basic Exfil Tester

Generate fake PSBTs, sign them with an air-gapped hardware wallet, and compare the result against expected deterministic signatures to detect nonce...

Obviously you should also verify the firmware's pgp, and this tool does not cover sophisticated #DarkSkippy attacks (i.e. that try to leak data only in certain conditions, like in transactions of specific amounts, or multisig setups). Thanks to @Frostsnap for building darkskippy.com and creating a real-world example.

Oren ☂️ 🎲 3 months ago

Mood 😅 View quoted note →

Oren ☂️ 🎲 3 months ago

I've added a SECURITY.md file to

GitHub

GitHub - oren-z0/holesail-switchboard

Contribute to oren-z0/holesail-switchboard development by creating an account on GitHub.

repo of the Umbrel app

Holesail Switchboard | Umbrel App Store

Discover Holesail Switchboard for your umbrelOS home server. Learn more, see screenshots, and discover other self-hosted Networking apps available ...

- can you please scan the repo (and the holesail project that it wraps) for vulnerabilities? @Rob Hamilton @calle @npub1h5t3...45z5 @Umbrel ☂️ #RedTeam #BitcoinRedTeam #dev #devstr

Oren ☂️ 🎲 3 months ago

The "default" Bitcoin wallet should be a 2-of-2 wallet, with 12-words seed on your smartphone and another 12/24 words seed on your hw wallet. No "wallet descriptor" to backup. The number of words to backup could even remain 24. Just add instructions: Enter this list of words in your phone, and that list of words in your HW wallet. Smartphones are 99% secure. HW wallets are responsible for adding the extra 1%. Two vendors have to fail for this solution to break. If #Bitcoin is your entire life savings then maybe you need a full multisig of 3 or 4 vendors. This is not the case for most Bitcoiners. WDYT? #dev #devstr

Oren ☂️ 🎲 3 months ago

Fixed the redirection: runs(dot)wtf