Founder of https://xitter.cf/t.co/iza1OzHGL9, Bitcoinsultant & Lead VFX Artist. Helping HNWI's & Companies adopt BTC into their daily lives.
Joined November 2017
- Tweets5.9K
- Following2.5K
- Followers1.1K
- Likes5.7K
Pinned Tweet
I watched this killer video from @Breedlove22 on how @garyseconomics is wrong about #Bitcoin SPOILER ALERT!! 🤯🤯Gary makes a lot of basic mistakes 🤡. Here's a breakdown of why his arguments don't hold up
🧵 ⤵️ Below!
the ECB wants companies testing digital euro payments in 2027. last november I paid my brother in law over lightning while he sat on a beach in indonesia and it landed before my whatsapp did. what exactly are they still testing?
every time I show someone a lightning payment they're blown away. Not by the tech, by the money just arriving, that's how low the banks have set the bar
I've been in AAA Game dev for almost 9 Years, bug reports are like massive red alarms and we all figure out what happens and have to report our solutions and findings whenever we want to fix it, 0 repro steps = shooting in the dark and waisting time + money.
So why does "bitcoin is a scam", zero explanation, still make the front page at the legacy media outlets, does no one actually check their fucking work?
Well here we fucking go, time to open up all of our cold storage devices?
Alguien perdió 1,33 bitcoin.
Trezor bitcoin hardware wallet que parecía perfectamente genuino desde el exterior; sin embargo... (izquierda - original, derecha - falso)
La unidad se compró a un vendedor de confianza a través de un popular sitio web de anuncios clasificados, y las pegatinas holográficas de la caja y la propia cartera estaban presentes y sin daños.
Tanto la caja como la carcasa de la unidad están selladas con pegatinas holográficas, el microcontrolador está en modo de protección de lectura de memoria flash (RDP 2). El gestor de arranque comprueba la firma digital del firmware y, si se detecta una anomalía, debería mostrar un mensaje (que no mostró así que se supone todo debería estar bien) de firmware no original y elimina todos los datos de la cartera.
En primer lugar, se eliminaron las comprobaciones del gestor de arranque para los mecanismos de protección y las firmas digitales, eliminando así el problema de la "pantalla roja" durante la comprobación de originalidad del firmware en el inicio.
En segundo lugar, en la etapa de inicialización o al restablecer la cartera, la frase semilla generada al azar se reemplazó con una de las 20 frases semilla pregeneradas guardadas en el firmware pirateado. El propietario comenzaría a usarlo en lugar de uno nuevo y único.
Salsas en kaspersky.com/blog/fake-trez…
my girlfriend cooks me insanely asian food and asks how my stacking is going. other guys get asked about their feelings. I think I've won lads
the dutch crypto sector now fears an exodus over the box 3 plan (AD, 1 october). I asked back in february where a dutch bitcoiner should move. the kabinet seems keen to help me pick. anyone know a country that taxes what you sell, not what you hold?
😂😂😂😂😂, Cold Card is completely done
We are investigating how a post containing a phishing link was published from this account. It has since been deleted.
Do not visit or interact with that link. COLDCARD’s only official website is coldcard.com.
This account has used offline 2FA with tightly restricted access since 2017. We have contacted @X and are reviewing all account access.
We will share further verified updates here.
my bitaxe (tiny home miner, solo mining on the noderunners pool) looked bricked on 19 august. four reflashes later the problem was one space at the end of the wifi name. one space. this thing is trying to find a block against the entire planet and it lost to a space bar
I was trying to free dive in Bali some time ago, but the only option was to pay in cash, which was 5% more expensive because the IDR is worth dogshit, A direct bank transfer, which would take at least two days to settle and was prone to foreign exchange fees. Or I could pay through Wise and PayPal and then eat another 4% on top. So effectively, me as the end consumer had to pay the transfer and fiat tax.
Told the guy I'd be able to pay in Bitcoin and settle in one minute if he just downloads Wallet of Satoshi, but apparently marketing to having cash settled at speed of light wasn't something he was looking for.
Callan CB-Key retweeted
We're doing the largest Bitcoin mining giveaway we've ever run.
Antminer S23 Hydro AND Antminer S21j XP Hydro.
1,058 TH/s. $24,500 of hardware. Two winners.
If someone you refer wins, you win a miner too.
And everyone who enters gets a bonus gift when the giveaway ends (entries close Friday, October 9).
How to enter:
1) Follow, like, repost, comment
2) Fill out the form in the comments
An incredible amount of work has gone into reviewing COLDCARD's firmware, from our team, dozens of independent researchers, competitors and the Bitcoin Red Team.
We'll have more news on third-party audits soon.
Security status: coldcard.com/security/status
Callan CB-Key retweeted
Recent news about the EU 🇪🇺:
> Tighter AI regulations
> EU residents won’t be able to bank outside EU anymore
> Digital Euro coming next year
> Cash payments over 10.000€ are now illegal
> Digital ID already in force
> Chat control 2.0 passed
> Passport verification for internet use
Nice. @vonderleyen @EU_Commission @Europarl_EN
Callan CB-Key retweeted
gained a ton of new insights working in bitcoin red team 🟥 that i wish i could share without vague posting. but this is what i got anon.
- we’re experiencing a massive collision between decades of human open source slop against 2 weeks of kimi k3 (not good)
- everything is broken, bitcoin is burning
- bitcoin is becoming stronger through this
- bitcoin is the obvious first target but the rest of the world will follow shortly
- sometimes old things need to burn so new things can grow on healthy soil
- humans should never code in c (just stop)
- lightning is complicated and is more broken than the average (sorry)
- verification is free. we used to complain about slop PRs. then about slop security audits. if you can’t handle the information overload, stop complaining and use AI to sort through it.
- those projects that started AI audits months ago are in a completely different position than those who didn’t
- projects need their own AI audit pipeline going into the future
- the burden for a developer to keep software safe and secure is pretty stressful and not for everyone. it has become a lot more stressful now.
- unmaintained projects are most probably broken, don’t rely on them. i’d rather one-shot it myself with a modern AI
- multiple concurrent, diverse human approaches have proven to be the best vulnerability search method
- external red teaming will probably have to continue forever
- we’ve basically completed a basic scan of virtually the entirety of bitcoin open source. the low hanging fruit is done.
- we’ve reported a ton of real critical and high vulnerabilities. project maintainers across the board have validated our findings.
- response speed is very different across projects and shows how healthy each project is. i recommend acting fast these days.
- red team etiquette matters. if you don’t disclose responsibly, boast on twitter about your findings on a particular project, or make indications about the nature of particular findings, you’ve disqualified yourself as a serious security researcher. trust is the most important factor in this game. if you lose it, it’s very hard to win it back.
- did i mention that humans should not code in c?
love you all.
Callan CB-Key retweeted
Yesterday I began fully integrating the @OpenAI trust cyber program into my Bitcoin Red Team efforts.
This morning I woke up to see this.
I am now being blocked from doing additional analysis on a codebase which I've already responsibly disclosed to, and have received confirmation had legitimate findings.
To be clear, this is after having already KYC'd and completed the onboarding process months ago to use the cyber capabilities OpenAI has to offer.
I am now prevented from being able to continue the investigation in a further effort to make sure their code changes are sufficient, as well as understand if there are other issues that have yet to be discovered.
It absolutely guts me as a patriotic American to have to do this, but I will be going back to using Chinese open source models to conduct my research to protect Bitcoin infrastructure.
Black hats will not hit these issues. The white hats will. We've hit a local minima in policy. Intelligence is unrestricted for those who don't follow rules, and those who engadge in harm reduction are left on the sidelines.
What are we doing in this country? How is this keeping people safe?
Please do something @DavidSacks @sama @realDonaldTrump
Seeing the trauma and the damage being done to peoples lives is devestating, but after all rain there's always sunshine.
Seeing how the BTC community is fighting back, learning, adapting and evolving from this is amazing to witness.
We are now mapping the ongoing Coldcard attack with a live dashboard - link below
I am deploying tripwire UTXOs that have varying levels of added entropy on top of the broken default seeds. We have different levels for 5, 10, 15, ... dice rolls, and 1, 2, 3, ... passphrase words.
This is so we can approximate the frontier of the confiscations that are actively happening.
The control UTXO with no added entropy was swept in an hour.
I took real measurements on an MK3 to calibrate a "good bad entropy" emulator in software. The control confiscation has proven it to work.
I am going to continue to deploy tripwire UTXOs along the bit curve.
Huge thanks to @Rob1Ham @otaliptus @PortlandHODL and other redteamers for the help.
Everyone with DGX Sparks is just going to bruteforce all different digital vaults in the world. BTC must become resistant to all, and unfortunately this re-sparks the quantum resistance debate again.
