The nostr:npub15qgfat6kkmzecup683u64lalqdceaejq97d8z8njhwk0c68umx6qcs5dcmairport meat up is about to start, we’re ready for your sats! @npub1gwa2...a2sz @npub144xv...wa0y @npub1vxeh...87da

I saw Pleb Underground @npub109vf...9kfa mention the findings of a shallow security review of the Coinkite #blockclock firmware, feeding the firmware binary to my clanker reveals that there might be some more severe vulnerabilities because of the old MicroPython version used even in the latest firmware. I don't have an actual device myself to test but it seems likely that, because the data feeds are cleartext (no TLS connection to the data service!) a man in the middle attack is possible and therefore let someone own the box through the freezed Python WebREPL in the firmware.

Gist

MicroPython Vulnerabilities Blockclock

MicroPython Vulnerabilities Blockclock. GitHub Gist: instantly share code, notes, and snippets.

Quite some people have been asking me how I feel about the "current situation". It is of course horrible that so many people have lost their funds by Coinkite being so negligent after shipping their non open source Coldcard firmware. Them being so negligent and seeing how badly they behaved towards users reporting issues, offering bad customer service on bricked devices and their CEO talking shit about Seedsigner and Foundation however makes me feel like the following GIF when thinking about the sentiment and future of Coinkite. I think it is good for open-source in bitcoin and nostr that NVK has been removed from the @npub10pen...n34f board and I see a lot of podcasters sponsored by Coinkite scratching their ears.

Quite a hilarious moment in the @npub1rxys...hnp8 live show 😬 #wtfnvk

Thanks @npub1q8w7...w95u for the meme templates! Here is one #wtfnvk Check out nvk.wtf

New #BTClock screen just dropped 😬 j/k.. for now, it's easy to use the BTClock API to show this

Going to add a receipts section to

nvk.wtf

nvk.wtf - Bitcoin hardware, the Coldcard vulnerability & the receipts

Open-source Bitcoin hardware - SeedSigner, BTClock, Foundation Passport - plus reporting on the Coldcard entropy vulnerability and an archive of po...

Share and tag your screenshots of deleted tweets with #wtfnvk so I can collect them easier

@npub1f4qf...l37g in your https://lnsolo.com/solo/blocks overview you're missing the solo block #944078 mined with the solo #noderunners pool i'm managing

The Mempool Open Source Project®

Explore the full Bitcoin ecosystem with The Mempool Open Source Project®. See the real-time status of your transactions, get network info, and more.

It’s a me! @npub12ay0...ryxk @npub1nj5v...rxzg @npub1gwa2...a2sz @npub1cn67...wt8a @npub167n5...zu3r Thanks for the photo @npub1dwek...sqel

Made it to #Prague with a little delay

I will be at BTC Prague @npub167n5...zu3r next Friday and Saturday! If you're also going, and want a #BTClock, you can order one at www.btclock.store and choose for "Pick up at event / meet-up" to save shipping costs!

Did you already play @npub10vde...mv83 ? #clock selfie @npub1nj5v...rxzg @npub1kmwd...xqk9

I created a #BTClock Android Home widget, available via @npub10r8x...t2p8

Zapstore

BTClock — Zapstore

BTClock Widget brings the BTClock device to your Android home screen — same panels, same fonts, same screens it cycles through.