Sunday salmon and steak! Steak was a touch overdone but still good. Smoked over cherry and finished in butter, garlic, and rosemary. Chard from the garden stir fried with ginger, garlic, soy sauce, rice wine vinegar, and sesame oil. Chard and summer squash were the first good batch of veggies from the garden! #foodstr

@Keith Mukai I built a security audit skill for Claude a while back that tries to establish a strong security system for software based on the documented claims. I pointed it at seedsigner this morning to see what it would do. It’s relatively opinionated and there are pieces like a CI/CD check for audit on each release that might be overkill, BUT I think it flagged some interesting things. It also drafted a SECURITY.md. Posted it as a draft PR in my fork so I could share.

Key suggestions:
- one instance of a potential string injection
- suggests to pin dependencies to hashes instead of versions to decrease supply chain risk
- establishes a SECURITY.md with clear claims

https://github.com/armstrys/seedsigner/pull/1

How ironic is it that ColdCard got bit by a general purpose function in their execution environment after endlessly complaining about the security of using general purpose hardware as a hardware wallet?

Woops!

Also how are we turning a blind eye so fast on open sats… sometime you have to hold integrity over money.

I hear rumors of big donations to catching up on the audit backlog - great… but there had better be a lot more resignations or governance changes in the next couple weeks before we accept open sats as a neutral actor.

One spurt of money doesn’t fix a decade of biased decision making.

@calle

Have been pulled over to x during the coldcard situation. Feed become less useful and more random ass content over time.

How do we convince the bitcoiners still using that shit platform to escape?

Just finding out about loupe by spiral - man, the teams at block really deliver.

What timing given the current conversations around CoinKite