CISO @VDXofficial and formerly CTO of Bitcoin exchange. Technologist, @Smuxi hacker, white hat. Loves opensource, hacking, C#, #Bitcoin, VR
Hong Kong
Joined March 2009
- Tweets3.2K
- Following542
- Followers605
- Likes1.5K
Pinned Tweet
To all hackers and future hackers out there: you are the rockstar of the information age. Please keep studying computers, networks, protocols and code. The truth is waiting to be revealed. Malicious state actors of governments are the enemy of everyone.
catb.org/esr/faqs/hacker-how…
Mirco Bauer retweeted
People need to learn that security is not a silver bullet. X is full of bad security advice in the recent days. Especially when saying: don’t use vendor X, use vendor Y instead and all is fine.
Going from one vendor to another shifts the problem, not solves it. The graph above shows a good big picture across wallets. I have a strong tendency towards multi vendor, multi signature to avoid a range of single points of failure. Or an onchain vault with time lock for security in-depth.
A threat model needs to evolve as the threat landscape does, threats are not static.
People need to learn that security is not a silver bullet. X is full of bad security advice in the recent days. Especially when saying: don’t use vendor X, use vendor Y instead and all is fine.
Going from one vendor to another shifts the problem, not solves it. The graph above shows a good big picture across wallets. I have a strong tendency towards multi vendor, multi signature to avoid a range of single points of failure. Or an onchain vault with time lock for security in-depth.
A threat model needs to evolve as the threat landscape does, threats are not static.
My first code editor was a pre-cursor of editors. A continuous input and execution loop, also known as REPL. So any line you enter on your keyboard is executed as code. To edit a line you have to overwrite it on screen and either save and/or run.
Mirco Bauer retweeted
JUST IN: 🇺🇸 SEC Commissioner Hester Peirce calls to end mass KYC data collection, warning it puts crypto holders at risk of phishing and physical attacks.
Pierce says the current KYC/AML system creates massive databases of sensitive information that can be hacked, leaked, or exploited.
She's pushing for zero-knowledge proofs (ZK proofs) that could verify users meet regulatory requirements without exposing their personal information.
Mirco Bauer retweeted
Hot take: if you didn't read what your AI wrote, you shouldn't expect me to read it either.
We need something stronger than TL;DR.
TAI:DR - Too AI. Didn’t Read.
tai-dr.com
You're welcome, internet.
Mirco Bauer retweeted
Right response and yet most people
think it is ok to run:
curl $something_opaque_from_remote_server | bash
Exactly as @adam3us predicted. If you fork and don’t choose a name/ticker, exchanges will do it for you.
Hello Bitcoin BLAKE2b $BTCB2
We BTCing over here!
BTC pair added.
neoxa.exchange/trade/BTCB2_B…
In case you are considering to trade BTCB2 it appears to come with high risk as it lacks a two-way replay attack protection. They should have known better and not put your Bitcoins at risk.
xitter.cf/btcsessions/status/209…
Mirco Bauer retweeted
Not even worth dumping this shitcoin. The lack of replay protection means if you don't know what you're doing, you may risk your real Bitcoin worth 900x the price to snag yourself a measly $82. Imma sit this one out and leave those sats on the table.
BLAKE2B “BITCOIN” TRADES FOR $82 AS BTC HOLDS NEAR $77,000
The BLAKE2b fork is seeing trades around $82 per coin on the Neoxa Exchange, roughly 900x below the price of BTC.
The market is also extremely illiquid, with the highest bid at $82 and lowest ask at $190, creating a massive 131.7% spread.
Sell orders extend as high as $389, highlighting the thin liquidity and potential for extreme price swings from relatively small trades.
Mirco Bauer retweeted
I made my Spotify client turn into Winamp.
Fastpotify 0.4 is out: blazing fast, native, for Windows, Mac, and Linux. Load ANY classic Winamp 2 skin and you get a beautiful, fully functioning, period-accurate mini player. Visualizations, EQ, and integer pixel scaling included!
2000s vibemaxxing.
I made my first ever Winamp skin for it too.
Free and open source: fastpotify.rocks
Mirco Bauer retweeted
OCEAN and Luke Dashjr announce today that, by mutual agreement, Luke Dashjr has separated from OCEAN, resigning as Chairman, Chief Technology Officer, and director.
Link to the joint statement press release here: prnewswire.com/news-releases…
Mirco Bauer retweeted
We have some difficult news to share. Unfortunately, one of our shipping providers has experienced a data breach that exposed sensitive order data. This affects new customers in the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal who received an order within the 90 days prior to August 8th, 2026.
The data exposed:
- Full names
- Shipping addresses
- Phone numbers
- Email addresses
The incident affects 11,742 customers with full exposure (name, email, phone number, shipping address) and 1,947 customers with partial exposure (name, city, email). The breach is limited due to Trezor’s strict 90-day data storage policy (we were also able to negotiate the same terms with fulfillment partners, who follow the same policy).
All affected customers have been contacted separately by email.
Our systems and devices remain secure, but affected customers could experience an increase in phishing attempts.
NEVER enter your wallet backup on a website or share it with anyone, and only check for updates on official Trezor channels.
We are deeply sorry to the community and those affected.
We are investigating this situation and will post updates on our blog:
trezor.io/blog/news/recent-c…
Mirco Bauer retweeted
🚨Hardware Wallet Alert🚨
If you have used a seed generated by a @COLDCARDwallet Mk or Q model before the fixed firmware version, then your Bitcoins are at risk and needs your immediate attention.
If any of you know someone who uses or used a Coldcard (maybe they transfered the seed words to another wallet, they are still at risk), share them the security advisory from below. Stay safe!
🚨 COLDCARD SECURITY UPDATE [Jul 31, 9:40 EDT]
Mk3 4.2.0 is now available.
Affected seeds without ≥50 fair, independent, private dice rolls:
👉 Mk3 4.0.1–4.1.9
👉 Mk4/Mk5 <5.6.0
👉 Q <1.5.0Q
Update first. Generate a new seed. Migrate carefully.
blog.coinkite.com/entropy-te…
🚨Hardware Wallet Alert🚨
If you have used a seed generated by a @COLDCARDwallet Mk or Q model before the fixed firmware version, then your Bitcoins are at risk and needs your immediate attention.
If any of you know someone who uses or used a Coldcard (maybe they transfered the seed words to another wallet, they are still at risk), share them the security advisory from below. Stay safe!
🚨 COLDCARD SECURITY UPDATE [Jul 31, 9:40 EDT]
Mk3 4.2.0 is now available.
Affected seeds without ≥50 fair, independent, private dice rolls:
👉 Mk3 4.0.1–4.1.9
👉 Mk4/Mk5 <5.6.0
👉 Q <1.5.0Q
Update first. Generate a new seed. Migrate carefully.
blog.coinkite.com/entropy-te…
Mirco Bauer retweeted
A secure smart TV is a TV that is not connected to any networks. If you want Netflix, YouTube and co on your TV, get a device designed for that such as AppleTV, Chrome Cast, etc. these TV dongles are made to serve you with TV content without spying on you while being secure with updates.