Damus
Judge Hardcase profile picture
Judge Hardcase
@Judge Hardcase
npub1wmkwc2gffvpx4c60jwc5qt4xyd6mkch6z0u9yjdph63xhx3kql0qxjxset@npubx.cashlnurl
Relays (4)
  • wss://relay.wisp.talk/ – read & write
  • wss://nos.lol/ – read & write
  • wss://relay.primal.net/ – read & write
  • wss://relay.nostr.watch/ – read & write

Recent Notes

note1x40aa...
Judge Hardcase profile picture
I think you're just not thinking big enough:

6-day weeks; with 10 6-week months; plus *5* public vacation days at the end of the year.

The campaign platform writes itself:
"Everyone hates Mondays, right? So, I'm going to ban Mondays."
"Under my plan, your monthly rent pays for 6 weeks; not just 4".

How could you lose?
Judge Hardcase profile picture
HOW TO BE YOUR OWN BANK:

Step 1: Do your own due diligence. Get a really good safe. This step is not simple. There is a bottomless pit of things to consider. And ultimately, there is no perfect safe.

Step 2: Do your own due diligence. Don't be satisfied with using a combination that the safe manufacturer provides you. Instead, generate your own combination that you can verify by yourself has in fact been generated as randomly as can reasonably be achieved. This step is very simple. So simple it's not even worth considering skipping. In fact, it should be viewed as borderline malpractice for safe manufactures to be offering to choose a combination for you in the first place.
utxo the webmaster 🧑‍💻 · 6d
Good morning Perhaps it's easy to move on from coldcard if you didn't personally get rugged, but we must never forget our fallen brethren... Good honest bitcoiners saving for their futures and famil...
Judge Hardcase profile picture
Also, even if you didn't get rugged by a fat, stupid asshole this time, make sure you're taking the proper precautions to not just get rugged by the next fat, stupid asshole.


video from about 50:25 -

I know that a hardware wallet should be required and expected to provide great randomness for seeds. But how do you validate that? So, you know what I mean? Like, if there's no way to validate it, then what's the point? What is the point?

And so, this is again, if you're learning the wrong lessons, the wrong lesson would be, "Thank God I didn't trust NVK. That guy was a dickhead. You know, pat on the back. I was smart not to trust him and so I'm good."

No, that's the wrong lesson.

Or, this is, okay, you know, yeah, this is isolated to this one thing, and if you didn't get taken by this one thing, you're good.

That's not the lesson.

The lesson is, do you actually know that you're good? And how? And I'm sorry, but if you're trusting a hardware wallet, random number generator without seeing like a robust review, I think you're fooling yourself.

https://www.youtube.com/watch?v=la63ROwLCnU
1❤️1
mrecheese 🧀 · 6d
If you're using Bitkey, it's probably because you don't wan't to know or care about that. How does Ledger do RNG? Who knows? I never asked when I first bought one. That said, my understanding is it's...
Judge Hardcase profile picture
Fair. I guess my thinking is that (as many say) 'being your own bank' responsibly requires caring about such things. i.e. get a device that allows you to bring your own seed that you manually created (which is simple enough for just about anyone to learn to do safely) and avoid the otherwise unnecessary risk introduced by an RNG altogether.

Of course, it's trade-offs all the way down, though. I guess Bitkey could makes some sense for someone who understands the risks that come with making those trade-offs... or even for a normie who just doesn't want to be bothered with understanding them. (though, personally, for those people, I think I would be recommending they just stick with CashApp).
mrecheese 🧀 · 6d
Worth playing with. I semi-bricked one because GrapheneOS things, and an update coincidentally fixing the odd bricking path appeared in the Play store a couple days after I contacted support. It is s...
Judge Hardcase profile picture
I know bitkey abstracts away the seed phrase; but, at some level, it must be relying on an RNG for key generation, right? How do you validate that? Or, is the thinking that its multi-sig (albeit, not multi-vendor) is in itself a good enough mitigation against a potential coldcard-like fiasco?
3❤️2🤙1
mrecheese 🧀 · 6d
If you're using Bitkey, it's probably because you don't wan't to know or care about that. How does Ledger do RNG? Who knows? I never asked when I first bought one. That said, my understanding is it's 3 separate RNGs for the 3 separate keys: phone/app, hardware, server. To audit those RNGs, you'd ha...
Cykros · 6d
I'm still just annoyed they bothered to give it an easy button to begin with. And then said that it required more trust, but that you should use it anyway.
Judge Hardcase profile picture
Same. I know I never would have used this easy button myself anyway; but, I could easily have led others to a recurring potential for danger (even if I had the foresight to initially warn them).

Now, I don't think I would feel comfortable recommending any signing device that even offers this easy button at all... which is seemingly like all of them. 🤷
12❤️1💯1
Cykros · 6d
This is the big annoyance. I certainly know anytime I responded to 'what hardware signer should I use?' With 'Coldcard is the best off the shelf option' I MEANT 'and you should supply your own entropy. But I doubt I specified it every time. Glad the discord I hang out in drove it home as a choru...
bootlace · 2d
Inspired (and obsessed) by all this, I used Gemini this week to build a new bare-metal, air-gapped, widely-bootable image, for use on old commodity laptops, with coin/dice for entropy (and changed my dumb old random github name): https://github.com/bootlace-dev/subzero-keyosk Please review, audit,...
Joe Nakamoto · 6d
The lack of mobile is probs why I don’t use it