
#Bitcoin #nostr nip05: [email protected] ⚡️[email protected]
Joined February 2020
- Tweets9.9K
- Following499
- Followers1.3K
- Likes13.3K
Just published a Grok @Bot to remove my number from spam call lists and one to remove my personal info from public sites
Call list remover: x.ai/bot/eGVcE2autG0u6UcAwE3…
Privacy scrubber: x.ai/bot/ZSQK72Iear_ykfnpTIO…
Took seconds to set up.
$BitMania $5554 | 💊 retweeted
Announcing new plugins marketplace in Antigravity! We've made it easier to search and discover customizations.
$BitMania $5554 | 💊 retweeted
Google Flash models really need an update....
todays DeepSeek Flash update is making Antigravity users realize how much they need a solid efficient Flash model....
we know Google is cooking with Gemini 4 Flash and wouldn’t be surprising if it beats all the current Flash models
if we made a hardware wallet fully modular so users could put it together themselves like lego, would that help prevent supply chain attacks?
I'm not sure it's practical, though. the assembly process would probably be too complicated for most people.
$BitMania $5554 | 💊 retweeted
JUST IN: Bitcoin jumps to $87,000 as U.S. Unemployment Rate comes in at 4.2%, higher than expectations 🇺🇸
$BitMania $5554 | 💊 retweeted
🚨 New COLDCARD firmware is out: 5.6.2 for Mk4/Mk5 and 1.5.2Q for Q.
View TRNG Words is back. We also added an offline tool to verify dice-roll or coin-flip mixing, USB ncry v3, and more transaction, Virtual Disk, firmware and wallet-state fixes.
Please update promptly:
coldcard.com/downloads
Full notes:
blog.coinkite.com/coldcard-f…
$BitMania $5554 | 💊 retweeted
How the new COLDCARD seed generation works (MK4/MK5 ≥5.6.1 and Q ≥1.5.1Q):
Track the security status here: coldcard.com/security/status
Explore the interactive tool and source code here: scgbckbone.github.io/seedflo…
$BitMania $5554 | 💊 retweeted
TENEMOS NUEVO PIN MATCHERINO 🔥
Es un pin de una máquina de garra de buffies, lo pueden conseguir si contribuyes con $5 dólares en uno de sus torneos
Más info:
supercell.com/en/games/brawl…
$BitMania $5554 | 💊 retweeted
🎁 ALL NEW FREE REWARDS 🎁
👉🏻 Rage-Emote: store.supercell.com/clashroy…
👉🏻 Ice Wizard Banner: supr.cl/4cZS8tA?r=qr
👉🏻 Ebarbs Banner: store.supercell.com/clashroy…
👉🏻 Valkyrie Emote: store.supercell.com/clashroy…
Follow for more Rewards 🔥
$BitMania $5554 | 💊 retweeted
Je viens de découvrir un truc sur Bitcoin que je trouve vraiment sous-coté : les Silent Payments (BIP-352).
Le principe est assez fou. Tu peux publier une seule adresse Bitcoin permanente, qui commence par sp1q..., et la donner à tout le monde. Contrairement à une adresse Bitcoin classique, quelqu’un ne peut pas simplement copier cette adresse dans un explorer et voir tout ce que tu as reçu. Techniquement, quand quelqu’un t’envoie des BTC, il ne paie pas directement ton adresse sp1q.... Son wallet utilise les données cryptographiques de ton Silent Payment et de la transaction pour dériver un nouvel output Taproot unique.
Donc si 10 personnes m’envoient du Bitcoin, la blockchain verra 10 outputs différents, sans lien public évident entre eux. Mon wallet peut reconnaître ceux qui m’appartiennent grâce à une clé de scan.
J’aime beaucoup l’idée : une identité Bitcoin permanente que tu peux afficher publiquement, sans transformer ton historique financier en information publique. Évidemment, ça ne rend pas Bitcoin totalement anonyme et tu peux toujours recréer des liens en dépensant tes UTXO d’une mauvaise manière. Mais pour la réception, je trouve le concept incroyablement élégant.
Je viens de le tester directement avec Cake Wallet. Silent Payments / BIP-352. Clairement une fonctionnalité Bitcoin dont je n’entendais quasiment jamais parler.
$BitMania $5554 | 💊 retweeted
Brawl Talk is LIVE NOW 🔴
youtu.be/qhvPlcwJUvk
🛠️ Starr Road Rework - BRAWLER BLAST!
🐥 Collab with @duolingo
☕️ 2 new Brawlers
💪 6 new Buffies
🤯 And tons of new Skins, including 5 Supercell MAKE ones!
#BrawlTalk
$BitMania $5554 | 💊 retweeted
BREAKTHROUGH: FIRST QUANTUM-RESISTANT BITCOIN TRANSACTION SUCCESSFULLY EXECUTED
StarkWare says it has successfully demonstrated the first Bitcoin transaction designed to resist a future quantum attack.
The technique adds an “extra lock” using signature grinding, generating millions of potential signatures until finding one that does not expose public-key material that a quantum computer could exploit while the transaction awaits confirmation.
There are major tradeoffs. Creating a transaction can take hours of computation, and because it does not conform to Bitcoin’s standard relay rules, it cannot travel through the normal mempool.
Instead, the transaction was sent directly to MARA and mined using its Slipstream service.
StarkWare says the breakthrough could provide a temporary “lifeboat” against quantum attacks, but argues Bitcoin still needs a protocol-level upgrade for permanent quantum resistance.
$BitMania $5554 | 💊 retweeted
Replying to @JuanSGalt
COLDCARD’s seed path is layered and inspectable. [At boot](github.com/Coldcard/firmware…), firmware reads 32 bytes from SE1 and eight bytes from SE2, hashes them, and reseeds libngu’s generator. [Libngu uses SHA-256 Hash_DRBG](github.com/switck/libngu/blo…): it begins with 128 bytes from the STM32 hardware TRNG, generates output, then XORs every block with fresh, checked STM32 TRNG words. Repeated, zero, seed-error, or stalled hardware output [causes failure](github.com/Coldcard/firmware…) rather than returning suspect bytes.
For each seed, COLDCARD [requests 32 bytes from that generator](github.com/Coldcard/firmware…), independently requests another 32 bytes from SE1 and eight from SE2, concatenates them, and double-SHA-256 hashes the result. The user must then add one independent source: [65 timed key presses, 50 dice rolls, or 128 coin flips](github.com/Coldcard/firmware…). Method-specific hashing, purpose tags, and a versioned domain separator prevent the same input from being reused ambiguously; device and human entropy are [double-hashed together](github.com/Coldcard/firmware…).
That entropy becomes [12 or 24 BIP-39 words](github.com/Coldcard/firmware…), is checked through the on-device quiz, encoded, and stored as the wallet secret. When unlocked, BIP-39 [derives the master secret](github.com/Coldcard/firmware…)—with an optional passphrase—and initializes the BIP-32 HD root. “[Dice Rolls Only](github.com/Coldcard/firmware…)” is deliberately separate: it excludes all hardware sources and requires 50 rolls for 12 words or 99 for 24.
$BitMania $5554 | 💊 retweeted
🚨 New COLDCARD firmware is available: 5.6.1 for Mk4/Mk5 and 1.5.1Q for Q.
This release follows three weeks of sustained review since our July 31 hotfix. We continue to acknowledge the customers who suffered severe financial losses from the seed-generation attack.
Every newly generated seed now requires one source of user entropy: at least 65 key presses with unpredictable timing, 50 physical dice rolls, or 128 physical coin flips. This input is combined with fresh entropy from the STM32 TRNG, SE1, and SE2.
The release also adds staged-PSBT verification immediately before signing, stronger USB and firmware-update boundaries, improved Delta Mode isolation, active-wallet backup fixes, stronger RNG initialization and fault checks, safer SIGHASH defaults, and many additional security and correctness improvements.
Important: Updating does not repair an existing seed generated on affected firmware. If the advisory applies to your seed, update your device, generate and verify a new seed, then move your funds.
We strongly recommend that all Mk4, Mk5, and Q users update and verify the signed firmware download.
Thank you to every researcher who reported issues, reproduced edge cases, reviewed fixes, and helped make this release stronger.
blog.coinkite.com/coldcard-s…
$BitMania $5554 | 💊 retweeted
🚨ESTO ES UNA LOCURA
Un desarrollador chino acaba de lanzar una herramienta GRATUITA capaz de crear vídeos automáticamente para TikTok, Reels y YouTube Shorts.
Se llama MoneyPrinterTurbo.
Y ya ha superado las 100.000 estrellas en GitHub.
Así funciona:
1. Introduces un tema o una palabra clave
2. La IA genera el guion, la narración y los subtítulos
3. Busca el material visual, edita el vídeo y te entrega el resultado final
Todo ocurre en un único flujo de trabajo.
Guárdate esta herramienta.
Estoy seguro de que puedes sacarle muchísimo partido.
Enlace abajo👇
gained a ton of new insights working in bitcoin red team 🟥 that i wish i could share without vague posting. but this is what i got anon.
- we’re experiencing a massive collision between decades of human open source slop against 2 weeks of kimi k3 (not good)
- everything is broken, bitcoin is burning
- bitcoin is becoming stronger through this
- bitcoin is the obvious first target but the rest of the world will follow shortly
- sometimes old things need to burn so new things can grow on healthy soil
- humans should never code in c (just stop)
- lightning is complicated and is more broken than the average (sorry)
- verification is free. we used to complain about slop PRs. then about slop security audits. if you can’t handle the information overload, stop complaining and use AI to sort through it.
- those projects that started AI audits months ago are in a completely different position than those who didn’t
- projects need their own AI audit pipeline going into the future
- the burden for a developer to keep software safe and secure is pretty stressful and not for everyone. it has become a lot more stressful now.
- unmaintained projects are most probably broken, don’t rely on them. i’d rather one-shot it myself with a modern AI
- multiple concurrent, diverse human approaches have proven to be the best vulnerability search method
- external red teaming will probably have to continue forever
- we’ve basically completed a basic scan of virtually the entirety of bitcoin open source. the low hanging fruit is done.
- we’ve reported a ton of real critical and high vulnerabilities. project maintainers across the board have validated our findings.
- response speed is very different across projects and shows how healthy each project is. i recommend acting fast these days.
- red team etiquette matters. if you don’t disclose responsibly, boast on twitter about your findings on a particular project, or make indications about the nature of particular findings, you’ve disqualified yourself as a serious security researcher. trust is the most important factor in this game. if you lose it, it’s very hard to win it back.
- did i mention that humans should not code in c?
love you all.
we're all bitcoin red team 🟥
~90% of ASICs run one vendor's closed-source firmware. Almost nobody has audited it.
We at @256FOUNDATION do.
Introducing the 256 Red Team 🧵 — the 256 Foundation's firmware security program. On hardware we own, in an isolated lab, under coordinated disclosure.
Replying to @shtrltz1
Hi, the default wallet backup Trezor generates is 20 words, hence the 20-word list. But you can download and print a list for any variant (12, 20, or 24 words) here 👇
trezor.io/learn/security-pri…



































