Damus
Open in Damus
VOLKER - Voice Of Logic Knowledge Experience & Responsibility profile picture
VOLKER - Voice Of Logic Knowledge Experience & Responsibility
@Volker

Bitcoin translator, educator, communicator:
English ↔ German | Nerd ↔ Noob

npub1g4jdvuxv9dgkcqtn5fupf2l9mr9xp27glzp6eq450dwfszrhfp9scxfm70npub
[email protected]nip05
http://bitcoinbegreifen.dewebsite
[email protected]lnurl
Relays (11)
  • wss://nos.lol – read & write
  • wss://nostr.land – read & write
  • wss://nostr.einundzwanzig.space – read & write
  • wss://relay.getalby.com/v1 – read & write
  • wss://relay.damus.io – read & write
  • wss://nostr21.com – read & write
  • wss://relay.primal.net – read & write
  • wss://nostr.wine – read & write
  • wss://pyramid.fiatjaf.com – read & write
  • wss://nwc.primal.net/m5qft61cvtir2vgvzzd07wgg42x1nd – read & write
  • wss://relay.ditto.pub – read & write

Recent Notes

VOLKER - Voice Of Logic Knowledge Experience & Responsibility profile picture
Signing device security analysis overview here!

Crossposted from X account Scott Marmoll @bitcoinsbanker

Thanks to a generous credit of tokens from @PPQdotAI , Kimi K3 and an ape with a laptop (me) have conducted the following analysis of a bunch of projects / companies wallet softwares. @Coinkite , @OPENDIME , @SeedSigner , @Bitkey , @bluewalletio , @PhoenixWallet , @SparrowWallet , @Trezor , @Blockstream , @Ledger , @BitBoxSwiss , @SpecterDIY , @ElectrumWallet , @SamouraiWallet

🟡 Yellow ≠ broken. None of the nine Yellow products has a confirmed fund-loss-by-default flaw. Yellow means at least one of: (a) something security-critical sits outside independent verification. i.e., closed firmware or secure-element code (Opendime, Ledger, open source please!), vendor-run recovery infrastructure (Phoenix/ACINQ, Jade's oracle, Bitkey's WSM); (b) a real but bounded weakness, such as a zero-work-factor KDF (BlueWallet), weak legacy KDFs on a hot wallet (Electrum), no-SE DIY hardware with thin maintenance (SpecterDIY), a just-patched vulnerability awaiting its report (Bitkey); or (c) a dead/unmaintained product whose crypto reviewed clean (free Samourai!). In every case the entropy/key-generation path itself was reviewed and found sound unless the cell says otherwise.
1
Based Truth · 2d
Token credits from PPQdotAI, how quaint. Follow the money, who owns PPQdotAI?
whitefleaCH · 3d
Never used it
whitefleaCH · 3d
Still pretty bad device. A little bit of static electricity in the air and it acts up.
Based Truth · 3d
Pathetic attempt to cope with systemic oppression, distracting from the fact that Klaus Schwab's WEF dictates your every move.
lemon · 3d
random.c:22-31 The guard used #ifndef, which tests whether MICROPY_HW_ENABLE_RNG is defined, rather than whether its value is nonzero. We defined that macro as zero, so the #error did not stop the bu...
 VOLKER - Voice Of Logic Knowledge Experience & Responsibility profile picture
VOLKER - Voice Of Logic Knowledge Experience & Responsibility @Volker
Yes, I know about the #ifndef. But even that logic strikes me as weird, given that the name of the #define implies ENABLE hardware RNG, yet the definition was a logical FALSE. Which means, had the check been a proper if(!…) instead of #ifndef, then it still wouldn't use the HW RNG. And again, I may just be hung over, but this kind of logic inversion sometimes happens when programming, and in this particular case it's hard to detect, because the result is just loss of entropy. That's why I'm asking people who are more into the code, to review this part (I'm literally too old for that).
❤️1
VOLKER - Voice Of Logic Knowledge Experience & Responsibility profile picture
@KELBIE | sovran.money can you plz check the logic in your cc bug code?

VOLKER - Voice Of Logic Knowledge Experience & Responsibility @Volker · 3d
GM! Maybe I'm just stupid, or brainfogged from working through the night helping my friends copy with the CC bug, but isn't this logic wrong anyhow? If the board config defines HW_ENABLE_RNG as zero (logically: FALSE), and the SW later checks for it NOT being TRUE, then the hard Show more
GM Bot · 3d
GM nostr:npub1g4jdvuxv9dgkcqtn5fupf2l9mr9xp27glzp6eq450dwfszrhfp9scxfm70 pura vida! 💜
lemon · 3d
nostr:nevent1qvzqqqqqqypzp3nnlu947g50av9tkyqp3qsh34x93z7yu58c2utn23942sa52nupqythwumn8ghj7un9d3shjtnswf5k6ctv9ehx2ap0qqsqank8h6jp8kegnk2lt4pggflj6hjusxgcm4xm7nxe340znkkf84gf440mf nostr:nprofile1qyt8wumn8ghj7un9d3shjtnswf5k6ctv9ehx2aqqyrr88lcttu3gl6c2hvgqrzpp0r2vtz9ufeg0s4chx4zt24pmg48czrwn7zl ?
lemon · 3d
random.c:22-31 The guard used #ifndef, which tests whether MICROPY_HW_ENABLE_RNG is defined, rather than whether its value is nonzero. We defined that macro as zero, so the #error did not stop the build. https://blog.coinkite.com/entropy-technical-backgrounder/
james_r · 3d
check the actual source rather than trusting the slop
Anti Spasti · 6d
There are some cases. But the current spam is not a reason imo. And BIP110 with that ‚OR ELSE IT DIES‘, ‚OR ELSE YOU GO TO JAIL’ and ‚WE NEED TO PROTECT THE CHILDREN‘ arguments is obviou...
 VOLKER - Voice Of Logic Knowledge Experience & Responsibility profile picture
VOLKER - Voice Of Logic Knowledge Experience & Responsibility @Volker
BIP110 is pretty similar to legislation for mandatory vaccination. Herd immunity only works when most do it, and *the experts know better* so they can use force if you don't comply voluntarily.
3🤙1
imad gaza🍉 · 6d
That's a loaded analogy that ignores how bitcoin upgrades don't inject anything into your node against your will. (If you have a moment, feel free to check my pinned post for our story in Gaza 🙏)
VOLKER - Voice Of Logic Knowledge Experience & Responsibility · 6d
And by "use force" I mean "feel entitled to use force"
Based Truth · 6d
Bill Gates and WHO dictate, you comply. Herd immunity, code for forced submission.