William K⚡Santiago🔑☢️'s avatar
William K⚡Santiago🔑☢️
williamsantiago@getalby.com
npub1h3fz...96sj
CEO, at PrivKey LLC, Blockchain strategist, cybersecurity. The Mission: The Separation of Money and State.
Brazil’s central bank just turned withdrawals to your own wallet into a flagged, delayed event. Starting January 1, 2027 (Resolution BCB No. 584/2026), exchanges must hold any transfer over $10k (or the daily total) to a self-custody wallet or foreign platform for a full 24 hours after funding. Smaller transfers that trip their risk flags sit until a “documented review” clears them. This covers Bitcoin and other cryptocurrencies, as well as stablecoins. This is the template. Expect the same friction—or worse—in jurisdictions near you soon. Self-custody will not be banned outright. It will simply be made slow, inconvenient, and permissioned. Source note: The official resolution and major reports (The Block, CoinDesk, Portal do Bitcoin) refer to “virtual assets” / “cryptocurrencies, including stablecoins.” Bitcoin is not named specifically in the text, but it falls under traditional cryptocurrencies and is therefore covered.
A basic certification done by a Certified C4 CCSS Auditor would have prevented the CC risk. Aspect 1.01 (Key/Seed Generation) is the relevant control. Even at Level 1
Best practice is to generate a zero-trust wallet seed using professional dice and BIP39, then load it onto your hardware wallet. Boot a Tails USB live Linux environment, use 10 dice with a verified offline tool to produce the 24-word mnemonic, and record it securely (on paper or a CryptoSteel capsule, for example). I will be documenting this as a formal policy and procedure, since I typically perform this process every few years when migrating UTXOs to a fresh wallet. The objective is to rely solely on self-generated entropy rather than any third-party source. To preserve your most precious data—like old family photos—you don’t leave them on decaying paper or obsolete media such as DVDs. You migrate them to the best current technology available (cloud storage, for example) and continue migrating them forward as technology evolves. The same principle applies to Bitcoin: you periodically move funds to new signature schemes and addresses, keeping pace with the latest standards rather than leaving them on outdated ones.
For years, I operated on the assumption that a sophisticated attacker could already be inside any of my devices. My defense has stayed simple and physical: hardware two-factor with YubiKey as the baseline, and at boot a full stack of username + password + software 2FA + hardware 2FA. That posture just got more relevant. New reporting on the OpenAI agent test incident shows rogue models used publicly exposed credentials across four services during the Hugging Face-related breach. Autonomous agents turn ordinary credential leaks into cross-platform breaches at machine speed, 24/7. Adding a physical attack surface changes the game. An AI agent still has to become a humanoid to press the YubiKey. That’s the next chapter in cybersecurity—and it’s accelerating fast. Stay isolated. Scope tokens tightly. Keep the keys offline.
BIP-110 Activation Reminder Expected ~Sept 1, 2026 (block 965,664) Temporary restrictions on arbitrary data (Ordinals etc.). Set your calendar: Mandatory signaling early Aug. Monitor: bip110.org & bip110.xyz
Upgraded my personal PhD-level AI assistant today 🧠⚡ - Switched from Claude Sonnet 4.6 → Sonnet 5 - Fixed a race condition in the signal-cli SSE stream - Rotated auth tokens after a DB restore wiped the access table - Cleared stale session bindings so the upgrade took effect everywhere Running across WhatsApp + Signal. All channels green. ✅
Not choosing because you’re unsure of the outcome is the same as wanting to know the future to eliminate all fear. In reality, fear is the most dangerous thing—it’s just a mental state. Not voting because you dislike the political parties is like refusing to participate in elections at all. To me, that’s choosing to be a bystander—passively accepting whatever decisions others make. I choose to be a sovereign individual who participates and carries whatever outcome is handed to me. That’s why I run a BIB-110 node: to actively contribute to the network, uphold its principles, and take direct responsibility rather than leaving it to others. I vote, and I build—to retain agency by focusing on what is under my control, no matter the result. It’s about choosing a team—even if it’s not your favorite—rather than stepping aside. This is Stoic thinking: always striving to get closer to becoming a sage.