Damus
Engineer profile picture
Engineer
@nostrich

Retired software engineer
Full-time dad
Student of Austrian economics
Lifter of heavy things

Relays (7)
  • wss://relay.primal.net – read & write
  • wss://purplepag.es – read & write
  • wss://nos.lol – read & write
  • wss://relay.corpum.com – read & write
  • wss://relay.strfront.com – read & write
  • wss://relay.beta.fogtype.com – read & write
  • wss://relay.orange-crush.com/invoices – read & write

Recent Notes

Laser · 1w
How does people not connecting their unlocked Coldcard to a computer prevent an attacker who obtains their unlocked Coldcard from simply plugging it into his computer to leverage the REPL to extract s...
Engineer profile picture
An attacker with physical access to an unlocked Coldcard doesn't need any additional exploit to extract the seed. He can just use the Coldcard at that point.

The vulnerability being discussed may have allowed a *remote* attacker to extract the seed via the USB connection.
1❤️2
Laser · 1w
For Odell to have been able to "steal all" affected funds using the REPL exploit, he would have had to compromise each and every machine with malware that leveraged the REPL. This is an extremely high bar compared to simply sweeping wallets that were generated with low entropy due to the CTO's expl...
Mountain Top Candle Co. · 18w
Don't see anything!
Sam Magner · 19w
Yes, didn't mean to keep a whole blockchain backup. More like node related items like xpubs, utxo labels etc. The other 4tb of data would be all personal stuff unrelated to that.
Engineer · 19w
*blockchain
The Bitcoin Libertarian - En Español · 19w
Vos creés que Iran es el ejemplo a seguir? Primero, habiliten las transacciones legales y seguras en su país y luego hablemos de adopción de Bitcoin
jnrynlds · 20w
Hey NOSTR! Inspired by nostr:nprofile1qqsg86qcm7lve6jkkr64z4mt8lfe57jsu8vpty6r2qpk37sgtnxevjcpz3mhxue69uhhyetvv9ujuerpd46hxtnfduq3jamnwvaz7tms09exzmtfvshxv6tpw34xze3wvdhk67ftwev , I’ve begun the j...
Engineer profile picture
"Is it necessary?" If you are asking this question, it is clearly not "necessary".

You've already made some huge progress.

Apple is actually pretty good on privacy and security, except for *privacy from Apple*.

My recommendation would be to spend some time getting comfortable with your current setup before making any more major changes. Privacy fatigue is real.

On mobile, GrapheneOS is the only option that would be an upgrade from iOS.

On desktop, going from Mac to Linux is a tough call. You'll get substantially worse security, but better privacy from big tech.

🫂1