The negotiation over 4,000 Bitcoin is happening in transaction metadata, in public, where anyone can read it.

The attacker put an OP_RETURN in the peg out saying they were white hats and to contact them on chain. Blockstream answered an hour later with an OP_RETURN pointing at a support email address. Six hours after that they sent an encrypted message to the hacker's PGP key.

The hacker came back with: bug first. The chain is under risk at latest commit right now. Make sure every node is patched, then we will transfer the money back safely after confirming the fix.

Three minutes later, Blockstream said thank you.

@npub1jg552...

https://ungovernable.network/shows/bitcoin-brief/4000-bitcoin-hacked/

On the surface, an 11 of 15 multisig to peg out Bitcoin sounds unbreakable. How are you going to compromise 11 geographically distributed companies?

You don't have to.

The federation keys were never touched. The withdrawal had valid authorisation because it went through the normal service. The failure happened earlier, when the network accepted liquid Bitcoin that should never have existed.

Every signer was reading the same faulty software, so every signer agreed.

The number of keys does not fix a shared code failure.

https://ungovernable.network/shows/bitcoin-brief/4000-bitcoin-hacked/

Max Tannahill, on Freedom Tech Friday, with a story I had not heard before.

When Keonne Rodriguez had to make the Bitcoin payment for his fine, he had no node of his own to connect to. He used Max's Dojo, found through Dojo Bay.

"When you've actually got the developer of Samurai wallet comfortable in a set of trade offs using someone else's node, I think it kinda tells you that some people are a bit too prescriptive on you must always use your own node."

Preferable and mandatory are not the same word.

https://ungovernable.network/shows/freedom-tech-friday/the-dojo-bay-with-max-tannahill/

The VPN industry is built on horrible YouTube sponsorships, scare tactics, fake top 10 lists and ownership structures you would need a private investigator to untangle.

And underneath all of it sits one fact the influencers skip over. Your provider can see who you are and everything you do.

Every single one of them.

"No logs" is a pinky promise that nobody can truly verify, because you have no way to check it. @Obscura VPN

https://ungovernable.network/shows/freedom-tech-friday/obscura-vpn-with-carl-dong/

The thing that changed with Dojo Bay is not the technology, it is who there is to serve paper on.

Samourai was a known legal entity running the back end.
A directory has none of that. It does not hold your transactions, it is not running the Dojo you connected to, and the page gives no indication which of the twenty listed you picked.

Operators are in Spain, Singapore, the UK, the US and Canada. Max Tannahill's point: if you are in the US, why would you put your XPub on a box in the US.

https://ungovernable.network/shows/freedom-tech-friday/the-dojo-bay-with-max-tannahill/

Best explanation of the two hop model I have heard.

Think of the packets you hand Obscura as a box locked with a key only Mullvad has. Carl's words: "we have no idea what the fuck is in it. All we can do is hand it over."

Mullvad opens the box and talks to Google for you. It sees thousands of users' packets arriving from Obscura and cannot tell which one is you.

Obscura knows who. Mullvad knows what. Neither knows both.

https://ungovernable.network/shows/freedom-tech-friday/obscura-vpn-with-carl-dong/

GG wanted miniscript on @SeedSigner. Rob Hamilton opened an issue about it three years ago and it sat there.

So GG put the clankers to work and built the fork himself, plus a standalone bridge so it talks to the live Liana desktop without patching Liana at all.

Twelve months ago that was an insurmountable challenge for most junior developers, let alone someone who is not a developer.

Nobody is claiming these forks are safe to hold funds on. But getting 95% of the way there, so an actual engineer can pick it up and review it properly, is completely fucking wild.

This is the other side of the AI story, and it does not get the headlines the hacks do.

https://ungovernable.network/shows/bitcoin-brief/the-ai-pocalypse-continues/

Peach has paused its escrow.

Sell offers are KYC or whitelist only and non KYC sellers get one trade at a time.

The escrow was the safety.


If you use it, be very careful now. HODL HODL, Bisq and RoboSats are still there.

@peachbitcoin

https://ungovernable.network/shows/bitcoin-brief/the-ai-pocalypse-continues/