Just finding out about loupe by spiral - man, the teams at block really deliver. What timing given the current conversations around CoinKite

👀 View quoted note →

I wrote a brief review about the cultural shift that HAS to happen within the bitcoin space to ensure self-custody is successful. The biggest community failure leading up to the ColdCard incident was an inability to recognize the problem - masked by advertising and social reputation. It is quite literally the opposite of “don’t trust, verify” and it is something we should be able to fix as long as we shift our expectations. View quoted note →

Open questions to the bitcoin community: - why did we not trust the banks, but we trusted hardware providers like coinkite? Was this purely an education gap about seeds or was it a double standard? - how did we not catch a software error in a critical piece of code that was “source-available”? Are there bounty programs for vulnerabilities like this? If not, why not? - why don’t more hardware wallets directly support dice rolls? I know seedsigner does, but is that it now that the coldcard is toast? Are these paths thoroughly tested for reliability?

Seems like a good time to remind folks of the great multisig guide from seedsigner. Even if you don’t have a seedsigner there are some great bitcoin security tidbits in here like the section on “Creating Secure Private Keys in a Trust-Minimized Way”. The ColdCard exploit is a great reminder of the importance of minizing vendor risk. The same exploit could have been found in SeedSigner or any other vendor. If you aren’t making an effort to take vendor risk out of each part of the process then you should re-evaluate your strategy.

SeedSigner: Air-gapped DIY Bitcoin Signing Device

SeedSigner Independent Custody Guide - SeedSigner: Air-gapped DIY Bitcoin Signing Device

[hfcm id=”1″]

So now that we’re all running agents… who has hindsight wired in for memory? If you don’t you’re missing out.

I know we are all caught up in the agent hype, but did anyone recognize that this is blocks attempt to fully. Replace the GitHub interface? Not sure how I feel about it yet - wish it was integrated with existing git over nostr solutions that are more decentralized. Hopefully some discussion to come.

Surprised no one had made this yet… Let’s test out buzz! nostr.communities.buzz.xyz