Avatar
bootlace
c96b702e29e73c3610a30fcf4bc6312b17338608cb815e3e83f02b3e0556706a
i don't deserve my low self-esteem

Inspired by your bitcoin.review BR096 conversation I heard today about upgrading Bitcoin on nodes. I don't want to upgrade my node or my Sparrow if I don't have to.

I'm using Sparrow 2.0.0 as my online watch-only wallet. I rarely touch it, only to transfer off the exchange every few months (to keep my utxos large). It works perfectly fine for my use-case. In fact, I've found no other wallet that works for me, thank you!

Is there a way to tell on the GitHub /releases page that I really should update for any security reasons? Is there a flag or string I should search for on that page? Is there an industry standard way to communicate such an upgrade urgency in release notes?

Thanks for all you do for all of us.

nostr:nprofile1qyv8wumn8ghj7urjv4kkjatd9ec8y6tdv9kzumn9wsq3vamnwvaz7tmjv4kxz7fwwpexjmtpdshxuet5qqsqfjg4mth7uwp307nng3z2em3ep2pxnljczzezg8j7dhf58ha7ejgqgzx3h

From Gemini deep research

...

In conclusion, the debate surrounding the suitability of JavaScript for security-sensitive development is multifaceted.

The elliptic vulnerability serves as a significant reminder of the potential risks involved in cryptographic _implementations_. (Emphasis mine)

However, it should not lead to an outright rejection of JavaScript. Instead, it should foster a more informed and cautious approach, emphasizing the critical role of secure development practices and the continuous need for vigilance in the ever-evolving field of cybersecurity.

The choice of programming language for security-sensitive applications should be a carefully considered decision based on a thorough understanding of the specific security requirements, the capabilities and limitations of the language, and the expertise of the development team.

Replying to Avatar corndalorian

I prefer the larger anonymity set

I'm currently struggling heavily with generating and handling encrypted secrets with friends and family (as part of inheritance planning treasure hunt).

Non technical people need a secure always offline device on which they can encrypt and decrypt info with symmetric AES and asymmetric public key tools.

They don't at all get the need nor the tech.

Would be nice if a verified nostr client could be installed via USB/SD on that always offline computer, and then be used to symmetric or asymmetric encrypt/decrypt text and files with friends and family.

Separately, trying to insist they chat with me over signal or simplex or heck any other encrypted messaging app...before we really need it...

Sorry, not sure if any of that is relevant to your request :(