@level09

The lazy mouse did not get the cheese.

 Zurich
level09.com
Joined May 2008
  • Tweets11.8K
  • Following1.7K
  • Followers556
908Media
Not your code, Not your keys, Not your coins
1
1
10
673
New release: Electrum 4.8.3. This release fixes a critical security issue, so we urge all users to upgrade. A description of the vulnerability will be published later today. (note: Windows Defender may show a warning about ZXing.dll, ignore that, it is a false positive)
41
178
74
720
116,435
Looks like @AnthropicAI is finally replacing their devs with a skill.md file
9
The entropy was the product
zender ⚔️
@zndtoshiAug 29
Replying to @NeilJacobs
They made a mistake. Sure. But if you generate the entropy yourself it's a great product. Even more so now that it has been verified with all frontier models possible. Facts don't care about your feelings.
2
50
level09 retweeted
BitBox
@BitBoxSwissAug 17
We just released the Dixence security update. During our internal audits, we were able to discover and fix multiple security issues in the BitBox firmware. We recommend our users to update their BitBoxApp and device firmware through the BitBoxApp settings. blog.bitbox.swiss/en/bitbox-…

BitBox 08.2026 Dixence update

This update includes important security improvements for the BitBox firmware as well as smaller bug fixes.

blog.bitbox.swiss
88
238
123
820
469,319
On a positive note, @Trezor Entropy is still fine
2
35
WE ARE ALL [checks notes] "SR-strcUSX?" MAXIMALISTS NOW
Michael Saylor
@saylorAug 13
Digital Assets form a monetary spectrum: $BTC = Digital Capital $STRC = Digital Credit SR-strcUSX = Digital Money $USDT = Digital Currency From left to right, volatility and return potential fall while stability and transactional utility rise.
85
26
3
399
44,140
Everyone has AI to attack, but everyone also has AI to defend.
30
Useful. Don't attempt to cash out your forked BTC on BIP110 Chain
Ledger
@LedgerAug 8
Replying to @Ledger
Ledger devices automatically support these signatures. However, we recommend not claiming any BIP-110 coins unless and until a replay-protection mechanism is added. Signing on the BIP-110 chain could put your BTC at risk.
57
lol this supposed to be good news for Bitcoin? The unstoppable uncontrollable money protocol ?
TFTC
@TFTC21Aug 5
TFTC 780 w/ @intangiblecoins: "I can trace anything in Bitcoin. The stolen coins are just sitting there, the thieves can't move them without getting caught." We discuss: ⚡ Inside the biggest Bitcoin hack ⚡ How the stolen coins were traced ⚡ Why self-custody isn't dead

Inside The Biggest Bitcoin Hack In History

Alex Thorn joins Marty to break down the Coldcard vulnerability draining Bitcoin wallets across multiple attack waves.

2
2
93
Replying to @notgrubles
use promo code "rugged"
2
29
470
Here is a dice with proper entropy
22
It’s not about weak randomness. It’s about an attacker being able to inject deterministic seed phrases into your wallets. Zoom out and consider the full threat model.
23
Is this for real?
COLDCARD
@COLDCARDwallet10 Oct 2021
Replying to @blk014
It’s when the project makers could have a “bug” in the entropy generation for later retrieval.
44
level09 retweeted
level09@level0922 Jun 2022
Not your code, Not your keys. #Bitcoin
2
1
1
9
Maybe that deterministic generation was not really a bug after all
Samsoum@sDefreesJul 31
Well, that aged well
45
What if that cold card deterministic generation was on purpose?
20
The lesson is that you cannot eliminate trust You can only shift where it is placed.
1
19
Please run full security scans with frontier AI models on all your wallets.
Samson Mow
@ExcellionJul 31
All @BlockstreamJade hardware wallets are unaffected by the COLDCARD RNG vulnerability. Jade derives entropy from multiple independent sources (the companion app, user input, battery state, and more) as well as the chip's hardware RNG, which draws on Bluetooth radio noise. If you're running the "No-Radio" firmware, Jade already compensates by design, seeding from internal chip noise on every boot and continuously mixing in sensor data. The engineering behind Jade's RNG is solid.
1
1
82
level09 retweeted
level09@level095 Jun 2022
How does one verify those hardware wallets are actually generating random #Bitcoin seed words and not using a deterministic algorithm that looks random 🤣 ? Asking for a friend
1
1
1
2
I warned you about those cold card wallet attacks long time ago, the prediction turned out to be true
level09@level097 Oct 2022
Replying to @hodlonaut
Do you trust keys generated by 3rd party software/hardware wallets ? Do you trust they give you really random keys and not some deterministic words that look random? Well, control your own code. xitter.cf/level09/status/1539510…
2
59
Load more