Pleasing everyone is a prostitute's job.
Hint, you’re wasting your time if you think everyone is going to like you on any social media apparatus.
Contra
reformedsaint@zaps.lol
npub14hq5...jjzu
The unexamined premise is the only tyranny that asks for your consent. Reformed Christian, Nostr class of 23, I think
I make music, bitcoin music 👇🏻
https://wavlake.com/contra
The first million people to send me 21 Sats will get a copy of my guide on how to become a Millionaire using Nostr 😉🫂
Gm Nostr
I’ll leave you with this little jam for the evening. Gn Nostr


Wavlake
Initial Block Download • Contra
Play, boost, and more on Wavlake ⚡️🎵

GET YOURSELF A CONSPIRACY THEORIST FRIEND. THEY’LL MAKE YOU LAUGH AT THE ABSURDITY UNTIL YOU REALIZE IT WAS ACTUALLY A REALITY.
If we put up a system that allowed us to track every movement of law enforcement and government officials they'd be tearing it down and arresting us.
ISN'T IT IRONIC THAT MILLIONS OF PEOPLE LOVE MOVIES THAT CELEBRATE REBELLION AND UNDERDOGS WHO RESIST OPPRESSION, YET IN REAL WORLD THEY OBEY RULES WITHOUT EVER QUESTIONING AUTHORITY?
The vault opened exactly as designed. That's the problem.


I don't buy that all hatred is poison. I hate innocent blood. I hate theft. I hate somebody taking a man's freedom who never earned the right to. I hate a rigged scale and money quietly watered down so the number holds and the weight doesn't.
If none of that moves you, what do you love? Comfort does a decent impression of virtue.
Love and hate run off the same wire. Aim it at what you love, devotion. Aim it at what's eating the thing you love, hate. A father who shrugs about the guy hurting his kid didn't find peace. Something in him died.
The line is between the evil and the man. Hate the evil, that's the job. Hate the man and you're trying a case that isn't yours, and somebody with the full file already has it. Pick it up anyway and it bends you. That's the kind of hate people mean when they say it rots you. They just never say which kind.
Erase the line and you get a code that ties good men's hands and leaves the wicked alone. Somebody benefits. Never the people getting hurt.
A lot of people are showing who they truly are right now.
It's a good time to be paying attention.
People are so used to others being indirect and phony that clear direct communication appears aggressive.
Look at you, held together by caffeine, audacity and what I can only assume is a legally questionable amount of spite.
Absolutely radiant.
Proud of you, you phenomenal chaos creatures of Nostr
It’s “Shitcoin Season”…


Wavlake
Shitcoin Season (Devil’s Advocate) • Contra
Play, boost, and more on Wavlake ⚡️🎵
Weather has been crazy on the west coast…


The “Shanty for The Sovereign” went back to #1 on @npub1yfg0...v6vg
If you haven’t heard it, it’s pretty good.


Wavlake
Shanty For The Sovereign • Contra
Play, boost, and more on Wavlake ⚡️🎵

Let me know what you think about this song…A preview of what’s coming……….”OP_RETURN” New Album


Wavlake
Genesis • Contra
Play, boost, and more on Wavlake ⚡️🎵
As you enter the Purpleverse for the first time today, remember that you are part of the earliest revolution in our time. Nostr may not be the biggest, or cleanest or smoothest but it damn sure beats any platform. It doesn’t hurt that I like you guys also.
Gm Nostr.
George be vibe coding like @Derek Ross
THERE ARE SO MANY SCAMS ON THE INTERNET NOWADAYS.
SEND ME 21,000 SATS AND I WILL TELL YOU HOW TO AVOID THEM. 🤣
Here’s some timeline fillers for what @Laser didn’t have. Still working on more
2010
Peter D. Gray and Rodolfo Novak (NVK) begin working together at Ripe Apps, an iPhone/iPad app development studio in Toronto. Predates their Bitcoin involvement by a year.
2011
Gray discovers the Bitcoin whitepaper and shares it with Novak, his existing business partner.
2012
The pair builds btclook.com, a visual blockchain explorer, as a Ripe Apps side project. Later that year they build PCI-certified Bitcoin payment terminals and begin international deployment, ahead of incorporating.
2012–2013
Peter D. Gray and Rodolfo Novak (NVK) co-found Coinkite in Toronto. Gray becomes CTO, Novak becomes CEO. Debuts a working terminal at the Bitcoin Conference. Raises a $120K seed round, the company’s only funding round to date. Remains a team of around five.
November 7, 2013
Peter D. Gray creates his GPG key (uid “Peter D. Gray peter@coinkite.com”). This key later signs dozens of commits under the switck identity, including the critical libngu changes.
Early 2016
Coinkite shuts down its web wallet/exchange service, citing legal complications and DDoS attacks, and pivots fully to hardware — the turn that leads to Opendime and eventually Coldcard.
December 2017
Coinkite announces the Coldcard hardware wallet. Pre-orders open for 2018 shipping.
July 25, 2018
First Coldcard Mk1 units ship.
August 2019
Peter creates the anonymous identity “switch,” named after the Matrix character Switch, using a still of that character as the profile picture. First posts note DEF CON is a good time to start a new identity. Later commits under this name are often single-word or extremely terse.
2019–2020 onward
Bitcoin educators and influencers, including BTC Sessions, begin promoting Coldcard as one of the most secure Bitcoin hardware wallets.
July 2020
Foundation Devices announces the Passport, built in part on Coldcard’s then-GPLv3 firmware.
Early 2020s
Ten31 becomes Coinkite’s sole external investor, confirmed on record by NVK in podcast disclosures.
January 8, 2021
Coldcard firmware 3.2.1 announces the license change from GPL to MIT + Commons Clause.
January 5, 2021
Domain switck.com is registered via a privacy service. The switck account posts the single word “got” the same day.
January 28, 2021
Under switck, the vulnerable preprocessor guard (#ifndef MICROPY_HW_ENABLE_RNG) is committed to libngu. This fails to force the hardware TRNG when the macro is set to zero. The library is co-maintained with scgbckbone.
March 1, 2021
Under doc-hex, the commit “First pass w/ libNgU” (b18723dd) replaces remaining Trezor-derived GPL crypto and BIP-39 code with libngu. Seed generation switches from hardware path to ngu.random.bytes(). This is the point real hardware entropy is replaced by the weak software PRNG. Coinkite release notes later thank @switck for the library.
March 17, 2021
Firmware v4.0.0 released, stating all crypto and BIP39 code had been replaced and the last remaining GPL code removed.
March 29, 2021
Firmware 4.0.1 ships. Seeds generated under this and later affected versions fall back to the software PRNG, yielding roughly 40 bits of effective entropy on Mk2/Mk3 (roughly 72 bits on later models with limited secure-element mixing).
Around April 2021
Public users begin questioning the libngu rewrite and the replacement of the prior crypto stack.
2022
As DocHex, Gray publicly states that as CTO he encourages Coinkite developers to operate under nyms and stay low-profile about their employer, and notes he may appear to author his own GitHub commits under a different identity. In a podcast appearance the same year, Novak refers to Gray directly as “Doc Hex, my co-founder.”
May 2025
James O’Beirne audits the firmware, identifies the low-star, pseudonymously maintained libngu library as the RNG source. In his own words, posted on X: he wanted to figure out conclusively where the Coldcard RNG was sourced from, and traced it to a shady library. He contacts Coinkite. Reported response: if something were wrong, they’d likely already know about it by now. The warning is not acted on.
July 30, 2026
Attackers begin draining wallets. Initial wave: roughly 594 BTC (~$38M) from about 500 addresses in ~25 minutes. Coinkite publishes a security advisory the same day acknowledging the 2021 entropy failure.
July 31, 2026
Coinkite releases fixed firmware (4.2.0 Mk3, 5.6.0 Mk4/Mk5, 1.5.0Q). Existing weak seeds remain compromised and must be migrated. Independent verification beyond Coinkite’s own account: Bitcoin Core developer instagibbs reproduces the vulnerability on a fresh Mk3 device. Kevin Loaec of Wizardsardine is among the first to publicly sound the alarm. Peter Todd flags a specific multisig risk for 2-of-3 setups using compromised Coldcards. Multiple reports note NVK deleting older tweets related to the 2020–2021 license change and open-source decisions.
View quoted note →