45
Davide
456cfdb590144b9cee34dc09130217a938446b2558f06624f1cf160accd0e57d

Talking about the CC, what hardware wallet of another vendor can be used to check the deterministic signature for the transactions?

About Trezor I found this: https://forum.trezor.io/t/deterministic-signature-issues/18976

I don't trust Ledger.

Jade and Bitbox have their own anti-klepto and are not using RFC 6979.

You often say that generic computers should not be trusted.

So what else can be done for a single-sig?

GM and welcome on Nostr

Personal note:

Companies selling exploits for smartphones talking about #GrapheneOS in their internal documents and their limitation and failure in targeting the OS is only further evidence of the success of our recent mobile security and privacy work.

A multi-million dollar industry of companies exist just to discover and sell exploits for devices. Cellebrite is only one of many. Attacks by actors of such capabilities is what GrapheneOS aims to protect against, like we had done earlier this year, where we discovered vulnerabilities these companies took advantage of and disrupted their fun with improving and adding new security features. There is more to come.

We may not be as large as they are, but think about why they have to say our name and why they separated us from Android and iOS. What we do is significant and impactful. We don't ignore the competition or be deliberately vague or misleading about capabilities like these companies have been about us.

Digital forensics is such a valuable (and in my opinion, undervalued) cyber security skill but it is a shame these titans of the industry are all secretive and protective about their work. Some go as far as to mislead the public. Transparency and co-operation is the most valuable trait in the realm of digital security and companies like these shouldn't get a waiver.

I could have so much more to say including about how these companies' software are often designed too deliberately simple or complicated to make you depend on them and give them more money. Tools like Cellebrite are so easy to navigate and use that it feels like it's designed that way to not create forensics experts that can end up doing work themselves, and that other tools are deliberately complicated to faciliate to customer to buy their training.

If you want to hit companies like these where it hurts, then try learning DFIR, learn mobile forensics, and do it without selling out to them. Reduce what they can sell to you and break the gatekeeping the sector has.

nostr:nevent1qqst3mtuajfjrhmtr5sls78ycp5jh96tz92mfdl3x7d3mwvvv7cerqspz3mhxue69uhhyetvv9ujumn0wd68ytnzvupzps26tfjesmn6ksf5mm36hpf9fkjut49sfeutfutvs2phrykn25v9qvzqqqqqqym8r59g

What are good resources to learn from?

I primi te li devi cercare da solo, dopodiché guardi le loro follow list oppure aspetti che facciano dei repost di altri così da scoprire altri profili.

Do you think that the Russians will kill all of you if they win? If not, what consequences do you expect for the lives of Ukrainians ordinary people?

If you use cashu and don't run your own mint, then you are using someone else's LN node. However, the owner of the node does not know how much you are storing in his mint, nor can rug pull you individually (provided that you are not the only user of his mint).

Nuts are used to share LN nodes in a privacy-friendly way. The fact that car sharing exists implies that cars don't work?

It can be challenging to convince people to abandon tyranny technology

One of our readers wrote the following about why should he bother switching from Google products. We will try to convince him otherwise. He said:

“I keep thinking, to what extent does it matter that Google will know my interests to show me targeted ads? I don’t care, I actually prefer to see relevant ads if I have to see ads”

First of all, you don't have to see ads. If you use uBlock Origin browser extension or Brave Browser for example you won’t see them. Another option is a DNS block on Google. Even with a regular stock android any of these options work.

Second, you assume that the advertiser will charge you a fair price regardless. Our previous article on browser fingerprints, demonstrated from numerous academic sources that many retailers will abuse their knowledge about you to charge a higher price. For example Target charged a higher price on the mobile app when shoppers were physically closer to a store, because alternatives were much less convenient. Other examples include airlines knowing you will buy tickets because you checked the flight multiple times, and then jacking it up for you. You can find this article here:

https://simplifiedprivacy.com/browser-fingerprints-lead-to-price-discrimination/

He continues: “That Google will delete my account one day because they dislike something I said online? That would be bad, but by far less likely and, I can protect myself from this, I think, simply by having backups of my data and an email address in my own domain, using proton mail or alike, right?”

Yes, that’s exactly what we’re saying. Google can and will ban you for speech they dislike and by heavily using their services, you’ve become dependent on their will. This isn’t just about privacy, but it’s about power and self-sovereignty.

Now you might say, “oh well I’m not speaking out, and I’m not a controversial public influencer”. But what today may be normal speech or actions, may change in the future. For example, 10 years ago, would you have thought you might be forced to take a vaccine to enter a restaurant? Who knows what drugs future Google will require for accounts you’ve become dependent on.

He continues:

“What else can Google do to me? Denounce me to a dystopian government for being interested in Bitcoin, do that they can try to confiscate it? Sure but, first of all, hopefully extremely unlikely, and secondly, it’s “too late” already. I’m signed up in Gmail to many Bitcoin newsletters. They already know.”

If your Bitcoin can be taken, what is even the purpose of it? That sounds like a bank account, and Google can see all private keys kept on Android. So you never really own self-custody Bitcoin with Google, you only have temporary access.

It’s not unrealistic to think the government will confiscate your Bitcoin or try to do ridiculous tax hikes such as unrealized capital gains. Not only are people such as Elizabeth Warren actively pushing for this in Congress, but past precedent has shown the steps governments will take when their currency experiences heavy devaluation.

For example, in 1933 FDR confiscated Americans gold . Another example is India literally going door-to-door to confiscate cash, to force people in digital surveillance. Yet another recent example is in Nigeria, the forced CBDC program, which tried to end physical cash.

The idea that they “already know” and therefore you should never change is ridiculous. The knowledge about your past activity becomes less and less relevant, the sooner you stop surrendering all future data to a malicious surveillance firm such as Google. Bitcoin can be sent to an empty wallet on a Linux computer or DeGoogled phone and now you “don’t have it anymore” in the eyes of the empire.

There’s the old expression of the boiling frogs. That if you turn up the heat suddenly, they hop out. But if you slowly dial it up, they boil to death, not realizing there’s a way out.

Then again, you may not know about this example if Google AI is deciding everything you see.

"Google can see all private keys kept on Android. So you never really own self-custody Bitcoin with Google, you only have temporary access."

Why is that? Google Play Services has root access?