MEGA v0.1.17 - Custody Backup+. Seal your entire MEGA backup + one doc (a will, estate papers, instructions,) into a single encrypted container. Your heirs or attorney hold the passphrase. Your advisor holds the file. Neither - not even MEGA - can open it. github.com/timme0126/MEGA-en…
MEGA now has QR output for Sentinel on PSBTs — v0.1.16.
Turns out Sentinel only accepts raw tx hex and rejects every signed PSBT. So it gets exactly that: one static hex QR, via a new one-tap export picker — Sparrow / BlueWallet (PSBT v0) / Sentinel.
github.com/timme0126/MEGA-en…
MEGA v0.1.15: BlueWallet can finally import our signed PSBTs.
Cause: its parser rejects BIP174 v2 globals. Fix: opt-in "Legacy wallet mode" export — strict v0 re-encode, every signable byte preserved, hard refusal over silent drop. Sparrow unchanged.
github.com/timme0126/MEGA-en…
We're pushing out UX hotfixes like hotcakes. Thank you to all the Beta Testers! @BULLBITCOIN_ @AnyoneOReally1 @3ricmills @bobvankirk @UnruggableGG and more.
github.com/timme0126/MEGA-en…
MEGA Demo #3:
BIP85 lets one dice-rolled seed spawn unlimited wallets. No passphrase, index 17, a brand new 12-word mnemonic. Derive its own public key, scan into @bluewalletio or Sparrow as watch-only — all traceable to 50 rolls of a die. @GrapheneOS
▎github.com/timme0126/MEGA-en…
MEGA Demo #2:
Import a dice-rolled seed into Advanced Mode, add a BIP39 passphrase for a second wallet, then derive just the public key. Scan the QR into BlueWallet or Sparrow Wallet as watch-only — the private key never leaves the device. @GrapheneOS
▎github.com/timme0126/MEGA-en…
See MEGA end to end:
Roll real dice, get a BIP39 recovery phrase with every calculation shown, save it, close the app, unlock with your PIN, and pull it back up in Advanced Mode. No accounts, no network, no device RNG — just dice.
@GrapheneOS
▎ github.com/timme0126/MEGA-en…
MEGA v0.1.13 is out:
Encrypted backup export/import. Move saved seeds + multisig vaults to a new device or sandboxed user - AES-256-GCM, scrypt key derivation (RFC 7914), passphrase never stored. Offline Bitcoin dice-entropy wallet for @GrapheneOS.
▎ github.com/timme0126/MEGA-en…
MEGA v0.1.12 is live — an offline, dice-entropy Bitcoin wallet designed for @GrapheneOS.
Adds Taproot (BIP340/341/350/86/371) key derivation + PSBT signing, and Shamir Secret Sharing backup shares. 100% open source, no accounts, no network access.
github.com/timme0126/MEGA-en…
TimmE 🧠 retweeted
Microsoft’s signed Windows Defender Boot-Time Removal driver (BTR.sys) is a one-shot kernel component that decrypts an RC4-encrypted transaction list from an Alternate Data Stream and performs Ring-0 operations.
An attacker with SeLoadDriverPrivilege can craft a valid encrypted config and load it early via a transient “Boot Bus Extender” service, abusing it as a trusted kernel primitive to bypass Tamper Protection, delete EDR/AV components before they start, drop malicious drivers, and gain persistence, without any vulnerability or BYOVD. No in-the-wild abuse has been observed.
research.checkpoint.com/2026…
MEGA v0.1.11 is out. Make Entropy Great Again
New: "Structure a Transaction" — split a wallet's UTXOs entirely offline. Scan a PSBT from your watch-only wallet, MEGA harvests the real inputs, choose split size/fee/destination, full preview before signing
github.com/timme0126/MEGA-en…
TimmE 🧠 retweeted
Researchers pulled a 256-bit encryption key out of a device by filming its power LED.
The status light on a smart card reader flickers in sync with the chip's power draw, and that power draw leaks the key. They recovered a full ECDSA key from 16 meters away, through a window, using a hijacked security camera. No malware, no contact, just video of a status light.
The trick: a camera's rolling shutter turns 60 frames per second into 60,000 brightness samples per second.
The light that tells you a device is on tells an attacker what it is computing.
Proof, Ben-Gurion University 2023: nassiben.com/video-based-cry…
TimmE 🧠 retweeted
Today we launch the new and improved RoninDojo v3.0.0 bitcoin node. 🥳
Now more than ever, we need open source node software that enables anyone be their own bank, have the electronic cash experience, and avoid trusting a 3rd party.
Get started: ronindojo.io
1/3 🧵
Consider: privacytests.org/ to understand your web browser's #privacy failures.
Knowledge is power. Choose wisely.🦾
Follow me for more privacy perspective and tools.
FUTO is the Android keyboard that doesn't spy on you.
github.com/futo-org/android-…
Can be used on @GrapheneOS and stock Android. It's available in Google PlayStore, FDroid, and apk on their site - keyboard.futo.org/
#privacy #safety #security #MEGA
Maybe you don't yet understand the value of @GrapheneOS.
To use MEGA (or other sensitive data apps) on a stock Android phone, take precautions to run in a Secure Folder or Private Space.
Turn off all comms on your device during use. #privacy
🤖 Made with AI
In Advanced Mode, MEGA (Make Entropy Great Again) keeps your private key offline while the transaction moves.
BlueWallet/Sparrow → PSBT via QR → MEGA → Sign offline → Signed TX via QR → BlueWallet/Sparrow → Broadcast
The transaction moves. The private key is air-gapped.
🤖 Made with AI
MEGA v0.1.10 is released.
github.com/timme0126/MEGA-en…
This security-hardening update adds strict Bitcoin amount validation, overflow-safe fee calculations, stricter PSBT parsing, truncated BBQr rejection, and cryptographic verification of signatures before finalization. @GrapheneOS
