Anyone know about a critical bug in LND? Or why else has BOLTZ shut down so suddenly?
VOLKER - Voice Of Logic Knowledge Experience & Responsibility
volker@nostrplebs.com
npub1g4jd...fm70
Bitcoin translator, educator, communicator:
English ↔ German | Nerd ↔ Noob
And some of them are on this platform....


Signing device security analysis overview here!
Crossposted from X account Scott Marmoll @bitcoinsbanker
Thanks to a generous credit of tokens from @PPQdotAI , Kimi K3 and an ape with a laptop (me) have conducted the following analysis of a bunch of projects / companies wallet softwares. @Coinkite , @OPENDIME , @SeedSigner , @Bitkey , @bluewalletio , @PhoenixWallet , @SparrowWallet , @Trezor , @Blockstream , @Ledger , @BitBoxSwiss , @SpecterDIY , @ElectrumWallet , @SamouraiWallet
🟡 Yellow ≠ broken. None of the nine Yellow products has a confirmed fund-loss-by-default flaw. Yellow means at least one of: (a) something security-critical sits outside independent verification. i.e., closed firmware or secure-element code (Opendime, Ledger, open source please!), vendor-run recovery infrastructure (Phoenix/ACINQ, Jade's oracle, Bitkey's WSM); (b) a real but bounded weakness, such as a zero-work-factor KDF (BlueWallet), weak legacy KDFs on a hot wallet (Electrum), no-SE DIY hardware with thin maintenance (SpecterDIY), a just-patched vulnerability awaiting its report (Bitkey); or (c) a dead/unmaintained product whose crypto reviewed clean (free Samourai!). In every case the entropy/key-generation path itself was reviewed and found sound unless the cell says otherwise.


@kelbie can you plz check the logic in your cc bug code?
View quoted note →
GM! Maybe I'm just stupid, or brainfogged from working through the night helping my friends copy with the CC bug, but isn't this logic wrong anyhow?
If the board config defines HW_ENABLE_RNG as zero (logically: FALSE), and the SW later checks for it NOT being TRUE, then the hardware still isn't used, right?
@NVK 🌞⚡️ @N
Source: Kevin Kelbie's


coldcard.rip
A source-linked analysis of the COLDCARD random-number flaw, the affected firmware, and the Bitcoin sweeps that followed.

Peak Deutschland: Polizei ruft zur Öffentlichkeitsfahndung auf, verheimlicht aber den Nachnamen und darf "aus datenschutzrechtlichen Gründen" kein Foto posten 🤦♂️


Glad to see this getting some mainstream visibility


I saw a 14 minute video here today, about similarities between GenZ and ancient Japan's Ronin, but I can't find it anymore. Can anyone help me out please? Thanks 🙏
The only brand that labels its customers properly


Looks like Africa lost another FIFA world cup match 😹
Still laughing about the BIP-110 spoon TBH.
How to find a wife


Mir fiel grade auf, dass beide Bilder eine Türk linke zeigen 😂

Gökay Akbulut – Wikipedia

In anderen Ländern ist es tatsächlich möglich, einfach 37C vorherzusagen, ohne den ganzen Kontinent in höllische Rottönen einzufärben.
DAS MUSS ANDERS WERDEN! EU-REGULIERUNG TUT NOT! JETZT!!!

