Avatar
lontivero
9e30e940238cd9ebebc6328176dd4d109812129442f2a6c38727fc66fa7ea90a
Bitcoin privacy warrior.

I reviewed the code to understand how it works and to find vulnerabilities. After about 2 hours, I didn't find anything. It is not a formal audit but it is better than nothing.

nostr:nevent1qqsp330l32drvn9psg8khnjvy40kgz3hqs5vgc3rjanntvkn2xfynzsppemhxue69uhkummn9ekx7mp0qy08wumn8ghj7mn0wd68yttsw43zuam9d3kx7unyv4ezumn9wshsz9thwden5te0dehhxarj9ehhsarj9ejx2a30jync33

# About the Submission of Wives to Their Husbands

We are all, in some way or another, in rebellion against God, and then it is not about judging women for their own rebellion but about trying to understand why and how they can change if they want to.

Let us start by saying that submission is something that one does voluntarily and that it couldn't be in any other way because men and women were created equally and our Father has no preference for men over women nor women over men, and since we all have free will, it is up to us whether we submit to someone or not.

Jesus Christ gave us the most astonishing example. When Jesus was twelve, his parents took him to Jerusalem for a holiday. On the way home, they realized he was missing and went back to look for him. After three days of searching, they found Jesus in the Temple sitting with the teachers. Everyone was amazed at how smart he was. Mary was upset and asked, "Why did you do this? We were so worried!" Jesus answered, "Why were you looking for me? Didn't you know I had to be in my Father's house?" Mary didn't understand what he meant. Jesus went back home with them and obeyed them.

Why would Jesus Christ, God himself, obey Mary and Joseph? Jesus voluntarily obeyed his parents because that's the natural law, God's law, and he doesn't break his own law. Children must obey their parents because nobody will love them and take care of them as their parents do. We all have obeyed our parents even when we weren't able to understand why they asked us to do or not to do something, and that's okay because parents love their children much more than children love their parents. In that sense, the family replicates in this world the same structure where our Father loves us more than we love him. Moreover, just as children somehow know that obeying is the natural thing to do, they don't always want to do it.

Submitting to God, our loving Father who wants the best for all of us and who sent his son to suffer and die for us, should simply be natural, but we fail to do it miserably again and again. The same happens with our sisters. If you met a good man, one that you are in love with, someone who loves you and wanted to marry you and form a family with you and make you happy, shouldn't it be natural to submit to him? I mean, all men know that women have virtues and vices different from theirs and they all know that women have been given what they don't have. However, many women believe they are like men and that men haven't received anything special, so why would a woman submit to her husband? But the reality is that leadership is more natural in men and submission to their husbands is also natural in women. In the same way that wives feel unhappy when their husbands refuse to lead, men feel unhappy when their wives don't follow them.

There is also a lack of trust. What if I submit to my husband and he loses his path? Or he becomes irresponsible or leads the family to ruin? What if he becomes a bad model for my children?

In the same way that you submitted voluntarily because you trusted him, once it is clear that you can no longer trust him anymore, you don't have to submit to him anymore in order to save your household. That's what Abigail's story is about, and God sees it as good, just as he sees your submission to your husband as good when he is a good man.

A husband who loves his wife would naturally pursue her happiness, and a wife who loves her husband would naturally submit to him. But how? Let us start by helping him to develop his role as the authority of the family and as the priest of the family. Let him sit at the head of the table, let him start the prayer, let him have the final decision and support it. Correct him with love when he makes a mistake, hold him when he stumbles, and ask him all what you need to fulfill your role as mather of the family.

Everything you always wanted to know about coinjoins but were afraid to ask: https://coinjoin-stats.github.io/www/nightly/wasabi2/wasabi2.html

Oh yes, absolutely. In fact Trezor uses two signature algorithms for their firmwares, pre and post quamtum precisely for the case that the post quatum algo ends being unsafe. Unfortunately I don't remember the details. I hope some of them come and comment. ping nostr:npub1lz8xv2dnyryrk4vswkcgf52vqqzruqwuyp53s7pvusx4fef9fh2s7hh86s

Trezor Safe 7 is the first "quantum-ready" hardware wallet.

But what does that mean? According to Trezor official documentation:

> A 'quantum ready' device is a device which will be able to run post-quantum cryptographic updates.

In other words, in case quantum computing becomes a real threat able to break elliptic curve cryptography, which would allow bad actors to sign fake firmware, users will still be able to update the real firmware and verify its integrity and authenticity because Trezor firmware is signed with a post-quantum signing algorithm. That's pretty much all.

Does it mean that your money will be safe? No. In case elliptic curve cryptography is broken, the Bitcoin (or your shitcoin) protocol must be updated to support some post-quantum cryptography signing scheme first, but even in that scenario I'm pretty sure your Trezor Safe 7 will not help you much. Basically, because nobody can predict the future and design a solution for a scenario that is completely hypothetical. But there are also some more concrete technical reasons. For example, the new TropicSquare's secure element TROPIC01 (core element in Trezor Safe 7 architecture) is not a post-quantum cryptographic coprocessor, but it is highly specialized in elliptic curve cryptography and 256-bit hash algorithms.

It could sound like something that is easy to implement and looks awesome in the product's brochure—a pure marketing move to catch the attention of uneducated buyers. I think there is something of that for sure, but it is also true that it comes with some benefits:

* In case Ed25519 is one day broken, even when quantum computing is not a reality, Trezor would have a safe way to update its firmware

* In case quantum computers break elliptic curve cryptography and a Bitcoin update is deployed, Trezor could come with firmware that helps us move funds or gain time

* It starts implementing post-quantum technology in the Bitcoin ecosystem and pushes competing products to implement new cryptographic technologies

The question then is: are users better with or without that feature? Well, they are not worse off than before and they have some very small benefits in a highly hypothetical scenario, but if we take into account that a hardware wallet is something that should be designed to last for many years, then I think it is a net positive. Tiny, but positive.

Replying to Avatar LiquiSabi

WabiSabi coinjoins on November 16

Full data: https://liquisabi.com

https://coinjoin.kruw .io/

Fee: 0.0 %

28 rounds

New: 105.7 BTC (est.) | Remixing: 845.4 BTC

Avg: 267 inputs | 11.54 AS | 1.29 s/vb

Min: 220 inputs | Max: 317 inputs

https://coinjoin .nl/

Fee: 0.0 %

2 rounds

New: 0.2 BTC (est.) | Remixing: 0.1 BTC

Avg: 28 inputs | 4.32 AS | 2.02 s/vb

Min: 27 inputs | Max: 28 inputs

https://api.opencoordinator .org/

Fee: 0.0 %

43 rounds

New: 0.1 BTC (est.) | Remixing: 8.0 BTC

Avg: 28 inputs | 3.79 AS | 2.01 s/vb

Min: 21 inputs | Max: 39 inputs

Congratulations nostr:nprofile1qqszfn67p6jlle0qsj7lwx2l0ylxpse83e0x56qe5euxtwgwnyzdfqgpzamhxue69uhhyetvv9ujuct60fsk6mewdejhgtcpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhsz9mhwden5te0wfjkccte9ec8y6tdv9kzumn9wshsegwjs3

Bukele is not my god. You and other idiots like you who love murderers and prefer them over innocent people are the ones who serve some dark god.

That's not the truth. The truth is that the human rights of all people are finally respected because criminals are in jail and millions of people can have a life.

The idea that human rights are for, and only for, criminals is over. Good people have rights too.

When will Trezor Safe 7 be supported by Wasabi?

The Trezor firmware team is working on that. The plan is to implement the needed changes in Electrum Wallet first and then add support in the Bitcoin Core HWI project, which Wasabi Wallet depends on.

There is a small challenge in the technical details because Trezor THP (Trezor Host Protocol) encrypts communication, which requires a handshake (key exchange) and then uses the key for the whole session. There's also a nonce that increments after every message on both sides (Trezor and Host) and needs to be kept in sync.

Currently, HWI is stateless and does a good job abstracting all the different details in terms of API calls and communication protocols. This means that delegating or leaking the session and nonce details to the host would break the smooth HWI API. So it seems the session could be handled by HWI itself.

It requires about 4.5GB. It is recommened to connect to your how node's rpc endpoint with compact filters enabled, in that way it can work without using an indexer and it is much faster.

I still can refuse to hire a woman, rent to a woman, etc. I wouldn't like to live in a society where I am forced to do things against my will and where I cannot decide what to do with my property.

But yes, feminism is communism pretending to be freedom.

Gold is also finite and has required an unimaginable amount of energy to synthesize it.

120,000 fresh bitcoins and 2 million bitcoins liquidity in 5 months. Impressive.

Source: https://coinjoin-stats.github.io/www/nightly/wasabi2/wasabi2.html

Replying to Avatar .

Ok so we agree that funds can't be swept by the devs and only upon the USER iniatiation of a Tx0 COULD there be, NOT that there IS, a malicious fee COULD in theory be made by the coordinator BUT there isn't any code that we have identified thay allows for the fee to be altered, it just isn't hard coded into the client Ashigaru Terminal.

If my above statement represents truth then we haven't established yet by what means, in the code, the fee CAN be changed.

Futhermore I believe so much of the framework for your line of arguement is based on the architecture of other coinjoin implementations. While yes it may be true that others can create X, Y or Z alternative implemantations of Whirlpool coordibators they also need to have a client that will communicate to it and be able to attract trust and lquidity.

Whirlpool requires a coordinator and connections to Dojo's. We don't want a bunch of different coordinators. We want the coordinator to either run in a true decentralized manner... meaning the coodination occurs by the users.. NOT via multiple coordinators and pools. The coordination will occur via user's Dojo's talking to eachother.

Whirlpool users aren't wanting multiple pools of liquidity. We want a single big pool to hide in. This is why there was never a fork of Samourai or Whirlpool before. No client or coordinator could compete. Sparrow joined the same pool they didn't release their own coordinator.

This initial release will be updated and improved. The goal is clearly a robust attack resistent and decentralized coordination over soroban with dojo's. I agree with actions to trust minimize like creating a new wallet just for whirpool and only sending pool size plus fees UTXO's to it.

> Ok so we agree that funds can't be swept by the devs

No, I stated exactly the opposite. I said that wallet developers can sweep users' wallets and users simply trust developers. There are very few wallets with tons of developers and eyes reviewing everything all the time; the rest of the projects have very few maintainers and almost no external reviewers.

> BUT there isn't any code that we have identified thay allows for the fee to be altered, it just isn't hard coded into the client Ashigaru Terminal.

The server decides the coordination fee and the client doesn't verify it —pthat's the point.

> Whirlpool requires a coordinator and connections to Dojo's. We don't want a bunch of different coordinators.

Okay, I get it. I misunderstood the decentralization part then. If there would not be other —potentially malicious— coordinators, then it makes no sense to protect the user from them. In fact, it makes no sense to verify anything coming from the server, only messages from the users should not be trusted.

> We want the coordinator to either run in a true decentralized manner... meaning the coodination occurs by the users.. NOT via multiple coordinators and pools. The coordination will occur via user's Dojo's talking to eachother.

Thanks for sharing, it is a really fantastic goal, but in that case it would be even more important to develop a defensive mentality where external inputs need to be verified and not blindly trusted.

A Wasabi coordinator is a software that allow multiple Wasabi clients to coordinate the creation of a collaborative transaction in a private way.