Avatar
Seth For Privacy
58ead82fa15b550094f7f5fe4804e0fe75b779dbef2e9b20511eccd69e6d08f9
Privacy is a human right and necessary for freedom. - VP of Operations at Cake Wallet - Privacy advocate - Host of optoutpod.com, a privacy-focused podcast

Been secretly enjoying RBF and the new address and amount formats for what feels like an eternity 😅

Now it’s live for all you lovely Envoy users out there on all platforms 🫡

nostr:note1s0h66m3cpkym5cnk5vwsaa3xfa2v4nteaz8z0vphd7k42yg8ldysskjmyn

Done, added a bunch more!

Thanks, CK 🤝

Replying to Avatar Matt

Me.

Ah maybe I followed on X? I remember following you somewhere 😅

There is no second best when it comes to a full LN node in your pocket 🔥

nostr:note1k8cvl0xeymmutyrl7l23uv4mzgw60mckvxg2nnnryeesj7j0wcvszg5wzh

Replying to Avatar Yaël

hey nostr:npub1sn0wdenkukak0d9dfczzeacvhkrgz92ak56egt7vdgzn8pv2wfqqhrjdv9, do you believe Tucker's claim that NSA and those folks have been successful in snooping on his Signal account? And then they leaked the details of your meeting and others (including the initial interview w/ Putin) to select journalists?

I feel that not enough reporting has been done on this and poses a significant question for people who do care about privacy and encryption

https://www.youtube.com/watch?v=f_lRdkH_QoY

There is really no reason to believe that Signal itself was broken/breached.

Far more likely his device was pwnd and messages read via screen recording or some other method.

Who do I need to follow here? My “Latest” feed is a bit dead a lot of the time.

Help me fix it 🫂

Uhh how the hell does nostr:npub12vkcxr0luzwp8e673v29eqjhrr7p9vqq8asav85swaepclllj09sylpugg do no-KYC purchases of Bitcoin?

Is it KYC-lite or something? Can’t find any info on it.

CANNOT WAIT to do my first in-person workshop teaching Bitcoin self-custody from scratch alongside nostr:npub15c88nc8d44gsp4658dnfu5fahswzzu8gaxm5lkuwjud068swdqfspxssvx.

If you're in NYC, get your tickets ASAP before it's full!

nostr:note1e44tq0lzf9qj797q2vepqfhw58e8c3gfdjux2ajrkkeh9tmcgl4q4rrq83

Just used the latest Phoenix Wallet and Passport releases to top up my Lightning wallet from Taproot to Taproot 🔥

So glad to see the promise of Taproot FINALLY starting to pay off in the wild with better privacy and lower fees.

HUGE release just dropped 🤯

nostr:note1jkx43xe6z8k3wuqwat0zaxpqpevqruvr6gty63d5w5cxgf8zshnquhp4ns

this was a CC, they allow you to use only dice rolls for entropy, and still don't enforce minimum rolls on Mk3 or older Mk4 firmware.

you can even still so a single dice roll for a temp seed.

Stop trying to use dice-rolled seeds unless you're an expert ❌

Just had yet another person (hard to count the total now) reach out about a low-entropy seed they generated and were allowed to import into a certain hardware wallet. A lot of the blame for these lost funds falls on influencers who shill users on overly-complex security setups without properly explaining the massive risks and tradeoffs associated for the average user.

What happened:

Less than 10min after funds were sent to what they thought was secure storage, they were swept to an attackers address.

They used <10 dice rolls, meaning the private key had <25bits of entropy when the minimum for strong security is 50 dice rolls (128 bits of entropy). Wallets should not allow a user to import a seed that they know is completely insecure.

Staying safe:

As I have said many times, if you don't know the ins and outs of dice rolls, entropy, verification of the resulting seed offline, etc. please do not use dice rolls alone for seed generation. 99.99999% of users are better off allowing good, multi-source, open-source random number generation like we do on Passport.

To date I have heard of zero compromised seeds that were generated using on-board RNG due to entropy issues, while there are countless examples of users losing funds due to improper dice rolls.

Stay safe out there, folks.