KYC: kill your customer. This is where the name of the episode came from. An attacker now holds your personal information and your Bitcoin withdrawal history in the same file. They do not have to guess whether you are worth robbing, and they do not have to guess where you live. He lives down the road from me. I am going to go and get a very big wrench. None of this was a choice anybody made. The data existed because a regulator required it to be collected, from people who had no way to opt out, in the name of protecting them.

Ungovernable

KYC: KILL YOUR CUSTOMER

A weekly news show informing you on the latest in Bitcoin, privacy and open source tech, hosted by Ungovernables, Max and Q. AOB Max: spent a full ...

"So what I actually like about this application: there's no spend functionality in the wallet. You can only receive in here, and you can't spend." That is a design decision, not a missing feature. Ashigaru Desktop receives and it mixes. Spending is done on Ashigaru mobile, or you open the same wallet file in Sparrow, which reads it and the labels without complaint. Stay in your lane and there is less of you to attack. @jordan

Ungovernable

Ashigaru Desktop with Jordan

A weekly live show covering all things Freedom Tech with Max, Q and Seth. Thanks to Jordan for joining us to walk through Ashigaru Desktop live on ...

Max, on the Revolut leak: I guarantee you, people will die from this. Q's answer was that it sounds hyperbolic, and he is not wrong. Nobody gets a list. Revolut is not going to write to an individual customer and tell them that a file saying they own this much Bitcoin is now sitting with criminals. You cannot even warn a friend, because you have no way of knowing whether they are on it. What you get instead is people outside on the security camera with knives. Or a phone that rings every day. Or nothing at all, for years, until it is not nothing. We are treated like criminals for trying to protect ourselves and our families. We are not wrong. @MaxUM

Ungovernable

KYC: KILL YOUR CUSTOMER

A weekly news show informing you on the latest in Bitcoin, privacy and open source tech, hosted by Ungovernables, Max and Q. AOB Max: spent a full ...

Mix To is the feature more people should know about. You add a watch only wallet to Ashigaru Desktop with an xpub or an output descriptor, in this case a Passport Prime, and set a minimum number of mixes. Say five. Once a coin has been through that many, the coinjoin output goes straight to a fresh address on the hardware wallet instead of landing back in your post mix account. No manual send, no address copied by hand, no remembering to do it later. @Foundation

Ungovernable

Ashigaru Desktop with Jordan

A weekly live show covering all things Freedom Tech with Max, Q and Seth. Thanks to Jordan for joining us to walk through Ashigaru Desktop live on ...

"Anything that I've used to try and gain privacy will get flagged, will get seized, and getting it back is a fucking nightmare because you've gotta show provenance." Break the links with tools that actually work, then try to walk back into the regulated side, and you are the one proving where every coin came from. Where did you get them, proof of income, source of funds. @MaxUM

Ungovernable

Ashigaru Desktop with Jordan

A weekly live show covering all things Freedom Tech with Max, Q and Seth. Thanks to Jordan for joining us to walk through Ashigaru Desktop live on ...

The advice, after all the war stories. "You have two different ways of interacting with Bitcoin. You have proper Bitcoin that's more private, and you use that peer to peer. And then you have the whitelisted, KYC version if you're gonna interact with KYC services." "Keep these two things separate." Not because the regulation is right. Max is clear that it is not, and that it gets people kidnapped and worse. It is still the reality you have to route around. @MaxUM

Ungovernable

Ashigaru Desktop with Jordan

A weekly live show covering all things Freedom Tech with Max, Q and Seth. Thanks to Jordan for joining us to walk through Ashigaru Desktop live on ...

KYC - Kill Your customer. The full list of what Revolut handed over: a copy of your passport or driving licence, a verification selfie of you holding said document, your full name, your date of birth, your occupation, your home address, your email, your phone number, your IBAN account details, your account statements, your withdrawal records, and your full transaction history including Bitcoin. It went to someone using an email account on a real government agency domain. Revolut treated the request as genuine and sent the files. Let that sink in.

Ungovernable

KYC: KILL YOUR CUSTOMER

A weekly news show informing you on the latest in Bitcoin, privacy and open source tech, hosted by Ungovernables, Max and Q. AOB Max: spent a full ...

"I think in today's AI economy, there's no excuse to come out with a new product now without a proper graphical user interface." @QnA There is really one game in town for privacy on Bitcoin, and until recently the way in was a terminal. Plenty of people will tell you that if you cannot be bothered to learn it, you do not deserve the tools. Max put the counter better than I did. This should not just be for the big brains. It should be there for the crayon eaters who want privacy too.

Ungovernable

Ashigaru Desktop with Jordan

A weekly live show covering all things Freedom Tech with Max, Q and Seth. Thanks to Jordan for joining us to walk through Ashigaru Desktop live on ...

Max, on why he started caring about any of this. "Tying your identity to Bitcoin is very dangerous in the physical world. You can be attacked by all sorts of different entities. You could pay your plumber to go and do some work for you, and then they can suddenly see, if you haven't managed your UTXOs properly, how much money you have, and they might come back and crack your skull to take the rest." Privacy on Bitcoin can be life or death. @MaxUM

Ungovernable

Ashigaru Desktop with Jordan

A weekly live show covering all things Freedom Tech with Max, Q and Seth. Thanks to Jordan for joining us to walk through Ashigaru Desktop live on ...

Your weekly reminder to get your funds off an exchange has got a lot harder to give. Get them on chain. Don't use Lightning, you might get hacked. I would not use Liquid, it is probably not safe. Don't use a sidechain. Don't use a second layer. Bring them into self custody, but make sure your entropy is good, and think very carefully about who you trust as your hardware provider. Have self custody. Don't have all your eggs in one basket. Ask the questions. And don't trust any cunt.

Ungovernable

4000 BITCOIN HACKED

A weekly news show informing you on the latest in Bitcoin, privacy and open source tech, hosted by Ungovernables, Max and Q. AOB First live show! U...

Orange Surf pointed at something uncomfortable in his analysis. The fix for the bug that drained Liquid had a commit dated the 3rd of August. The pull request carrying it was still open on the 1st of September. Which means the patch was public while the hole it closed was still live on the network. Anyone reading that repo could see exactly what to look for. If you are sitting on 4,000 Bitcoin of other people's money, an open pull request is a map for anyone who bothers to read it. @OrangeSurf

Ungovernable

4000 BITCOIN HACKED

A weekly news show informing you on the latest in Bitcoin, privacy and open source tech, hosted by Ungovernables, Max and Q. AOB First live show! U...

"He went ahead and just deleted everything and then fucked off of the comms channels, taking a load of code with him, which pissed me off no end." So Dojo Bay has a button on it that downloads the whole source. Anyone can take it, run the installer on any Ubuntu box that already has a Dojo, and have their own directory up in a couple of minutes.

Ungovernable

The Dojo Bay with Max Tannahill

A weekly live show covering all things Freedom Tech with Max, Q and Seth. Thanks to xTx for coming up with DojoBay! Follow him here: https://x.com/...

"Why do you need a VPN? My traffic is all encrypted with TLS." Carl Dong: that is half right, which is the most frustrating type of right. TLS does encrypt your traffic. But when the connection starts, the client hello carries a field called SNI, and SNI shows the hostname you are visiting in plain text, to everybody on the path. WikiLeaks, your bank, whatever it is. Encrypted contents, fully legible destination. @Obscura VPN

Ungovernable

Obscura VPN with Carl Dong

A weekly live show covering all things Freedom Tech with Max, Q and Seth. Go and check out https://https://obscura.com/ for more information and be...

Pocket Bitcoin leaked compliance records for 291 customers, tying identity information and documents to Bitcoin addresses. Another 5,120 had names, IBANs and payment amounts exposed. No private keys were touched, and it barely matters. An address on its own doesn't identify anybody. A leaked compliance file does exactly that, permanently, against a public ledger. Max put it better than I could. The safest way to use Bitcoin is the way that causes you the most trouble. Buy peer to peer, hold your own funds, jump through hoops to keep it away from your identity, manage your UTXOs, and then you cannot spend it in normie world because you cannot prove where it came from. That is the cost of KYC. This information gets leaked because it had to be collected in the first place, by people making decisions for your safety who do not understand what they are regulating.

Ungovernable

4000 BITCOIN HACKED

A weekly news show informing you on the latest in Bitcoin, privacy and open source tech, hosted by Ungovernables, Max and Q. AOB First live show! U...