Stop trying to use dice-rolled seeds unless you're an expert ❌

Just had yet another person (hard to count the total now) reach out about a low-entropy seed they generated and were allowed to import into a certain hardware wallet. A lot of the blame for these lost funds falls on influencers who shill users on overly-complex security setups without properly explaining the massive risks and tradeoffs associated for the average user.

What happened:

Less than 10min after funds were sent to what they thought was secure storage, they were swept to an attackers address.

They used <10 dice rolls, meaning the private key had <25bits of entropy when the minimum for strong security is 50 dice rolls (128 bits of entropy). Wallets should not allow a user to import a seed that they know is completely insecure.

Staying safe:

As I have said many times, if you don't know the ins and outs of dice rolls, entropy, verification of the resulting seed offline, etc. please do not use dice rolls alone for seed generation. 99.99999% of users are better off allowing good, multi-source, open-source random number generation like we do on Passport.

To date I have heard of zero compromised seeds that were generated using on-board RNG due to entropy issues, while there are countless examples of users losing funds due to improper dice rolls.

Stay safe out there, folks.

Bookmarked für später 😜

Does anyone use Cloudron, Yunohost, Sandstorm?

Ja das habe ich mir auch angeschaut. Wie schätzt du die Sicherheit davon ein bzw. Kann man nachträglich noch die Signaturen prüfen?

Good morning!

I've been reluctant to use the Doctor title for Craig Wright, but with the sheer amount of his doctored evidence being unveiled by COPA, I'm about to change my mind. He earned it!

Somehow this math doesn't add up. 50k bitcoin seized/handed over because they distributed 880k movies. That's about $4k per movie.

- Fed extends BTFP program and does not lower rates > Bitcoin rises

- Fed cancels BTFP program and lowers rates > Bitcoin rises

- Fed extends BTFP program and lowers rates > Bitcoin rises in God Mode

- Fed cancels BTFP program and does not lower rates > Bitcoin goes down > Bitcoin goes down

- Fed cancels BTFP program and raises rates > Bitcoin goes down in God Mode

Interesting

Reminder:

The #Cashu protocol is a very young trusted system. Mints are not professionally managed at the moment and may go down temporarily or have other issues.

Apps like #eNuts are also in early development phase and maintained by contributors in their free time.

We strongly advice to exercise caution and limit the usage to small amounts for experimental or educational purposes.

Thank you all for your interest! We will continue to work on improvements.

Wishing you a smooth and nutty transition into the New Year!

Hat ja keiner mit rechnen können, dass Bitcoiner wirklich solche Psychopathen sind. 😅

Danke für eure Geduld beim Ticketkauf.

#BTCZitadelle nostr:note1j48kjj7fm84asnwjmnhpj609y40tqds32n4vd4des66c897cgnwqdhqn4c