RT by @sesi_the_man: Sorry, but you don't get to bitch against reality because it's not as easy as you want. The only "real solution" is to use real #entropy for your keys. Literally. Full stop. No way around it. Reality literally gives you a very few options to implement this solution:
1) you review the software/firmware yourself (and you mostly pray about the hardware),
2) you minimize risk by mixing different software/hardware/external sources (default #multisig like BitKey or Jade, rolling ...
1) you review the software/firmware yourself (and you mostly pray about the hardware),
2) you minimize risk by mixing different software/hardware/external sources (default #multisig like BitKey or Jade, rolling ...
Nitter
Giacomo ShadowUNbanned Zucco (@giacomozucco)
Sorry, but you don't get to bitch against reality because it's not as easy as you want.
The only "real solution" is to use real entropy for your keys. Literally. Full stop. No way around it.
Reality literally gives you a very few options to implement this…
The only "real solution" is to use real entropy for your keys. Literally. Full stop. No way around it.
Reality literally gives you a very few options to implement this…
RT by @eubernardobraga: .@KLoaec from Wizard Sardine just published a full technical breakdown of a critical Coldcard vulnerability. Every seed generated on the device since 2021 is compromised. Wallets are being drained right now. The chip has a perfectly working hardware random number generator. Nobody was calling it. "The Coldcard replaces MicroPython's randomness module with its own, deemed more conservative. To do so, it disables the original one... The catch is that MicroPython does not...
https://wizardsardine.com/blog/coldcard-rng-vulnerability/
https://coldcard-hack-tracker.vercel.app/
https://coldcard-watch.vercel.app/
PS.
- Recomendação técnica: Descarte #Hardwallet@TutorialBTC Marca #Coldcard@TutorialBTC
(Caso tenha sido prejudicado, guarde junto com notas e outros documentos para fazer perícia; e consulte um advogado cibernético para devida providência judicial)
https://www.nobsbitcoin.com/coldcard-disaster-weak-entropy-bug-enables-drain-of-funds-from-cold-storage-wallets/
- Erros fazem parte do aprendizado. Persistir no erro é tolice.
- Se Você quer terceirizar alguma parte, pesar na balança custo x risco.
- Aprender, fazendo!
Para quem não sabe o que é DYOR
⚠️ SCAMs | #TB@TutorialBTC
| Nostr Minute | 256 bits |
https://wizardsardine.com/blog/coldcard-rng-vulnerability/
https://coldcard-hack-tracker.vercel.app/
https://coldcard-watch.vercel.app/
PS.
- Recomendação técnica: Descarte #Hardwallet@TutorialBTC Marca #Coldcard@TutorialBTC
(Caso tenha sido prejudicado, guarde junto com notas e outros documentos para fazer perícia; e consulte um advogado cibernético para devida providência judicial)
https://www.nobsbitcoin.com/coldcard-disaster-weak-entropy-bug-enables-drain-of-funds-from-cold-storage-wallets/
- Este Canal @TutorialBTC NUNCA e NEM VAI recomendar HardWallet de Marca (Fazer propaganda), seja qual for.
- Fins Educativos: O que disponibilizamos são diversas fontes para fazer o seu DYOR (Faça sua própria pesquisa).
- Somos #DIY (Faça Você mesmo), como o principio base em toda e qualquer atividade de código aberto, onde você constrói, detém e audita 100%. Consulte tags abaixo:
#SelfCustody@TutorialBTC
#AutoCustódia@TutorialBTC
#ColdWallet@TutorialBTC
#MultiSig@TutorialBTC
#Seed@TutorialBTC
#PassPhrase@TutorialBTC
#Entropia@TutorialBTC
#Entropy@TutorialBTC
#AirGap@TutorialBTC
#Xpub@TutorialBTC
#BackupSeeds@TutorialBTC
#Educação@TutorialBTC
#Education@TutorialBTC
- Erros fazem parte do aprendizado. Persistir no erro é tolice.
- Se Você quer terceirizar alguma parte, pesar na balança custo x risco.
- Aprender, fazendo!
Para quem não sabe o que é DYOR
#DYOR Faça sua própria pesquisa
- Destrinche palavra-chave,
- Compare com outras fontes ou indicadores
- Trace uma linha (Etapas) de ação de acordo com suas possibilidades e gestão (KPIs) de risco).
⚠️ SCAMs | #TB@TutorialBTC
| Nostr Minute | 256 bits |
RT by @sesi_the_man: This means that #unchained can now natively support #SeedSigner without needing any of my prior tiny hacks! 🔥🔥 Looking forward to trying it out! DIY bring-your-own #entropy + multivendor #multisig + collaborative custody. Solid option.
Nitter
Keith Mukai (@KeithMukai)
This means that @unchained can now natively support @SeedSigner without needing any of my prior tiny hacks! 🔥🔥
Looking forward to trying it out!
DIY bring-your-own entropy + multivendor multisig + collaborative custody. Solid option.
Looking forward to trying it out!
DIY bring-your-own entropy + multivendor multisig + collaborative custody. Solid option.
“É simples. Compra 2 #SeedSigner, monta o #multisig 2 de 3 com fabricantes diferentes, gera a #entropia com 99 rolagens de dado, aplica #passphrase, grava em placa de aço (#BackupSeeds), guarda em 3 cofres em cidades diferentes, testa a recuperação a cada 6 meses e documenta o descriptor pros herdeiros.”
Nitter
J. P. Mayall (@jpmayall)
“É simples. Compra 2 SeedSigner, monta o multisig 2 de 3 com fabricantes diferentes, gera a entropia com 99 rolagens de dado, aplica passphrase, grava em placa de aço, guarda em 3 cofres em cidades diferentes, testa a recuperação a cada 6 meses e documenta…
Don't be complacent with collaborative custody multi-sig... If your seed is made with a cold card and the custodian has a seed in a two out of three #multisig, then by hacking your cold card seed alone gives the custodian full access to your wallet. I promote my services because it's important... ParmaVault clients learn to make their own seed. Https://parman.org/parmavaul…
Nitter
Parman BIP110🔑Paranoid Bitcoin SelfCustody Mentor (@parman_the)
Don't be complacent with collaborative custody multi-sig...
If your seed is made with a cold card and the custodian has a seed in a two out of three multisig, then by hacking your cold card seed alone gives the custodian full access to your wallet.
I promote…
If your seed is made with a cold card and the custodian has a seed in a two out of three multisig, then by hacking your cold card seed alone gives the custodian full access to your wallet.
I promote…
Which signing device should you pick for a multi-vendor multisig? Liana supports every hardware wallet that implements Miniscript, and we add new ones as soon as support becomes available. The full list today: Ledger: → Nano S Plus → Nano X → Stax → Flex → Nano Gen 5 BitBox: → BitBox02 → BitBox Nova Jade: → Jade → Jade Plus → Jade Core Note: Jade devices currently support Miniscript only for native SegWit, not for Taproot. → Specter DIY → Krux Coldcard also supports Miniscript in its Edge fir...
#Liana@TutorialBTC
#Multisig@TutorialBTC
#Coldwallet@TutorialBTC
#Liana@TutorialBTC
#Multisig@TutorialBTC
#Coldwallet@TutorialBTC
Nitter
Liana Wallet (@lianabitcoin)
Which signing device should you pick for a multi-vendor multisig?
Liana supports every hardware wallet that implements Miniscript, and we add new ones as soon as support becomes available.
The full list today:
Ledger:
→ Nano S Plus
→ Nano X
→ Stax
→ Flex…
Liana supports every hardware wallet that implements Miniscript, and we add new ones as soon as support becomes available.
The full list today:
Ledger:
→ Nano S Plus
→ Nano X
→ Stax
→ Flex…
RT by @satsails: Para usar uma #multisig, você primeiro precisa entender a singlesig. Se nem o básico as pessoas entendem direito, quem dirá algo que é mais complexo. Você não precisa de uma multisig para proteger o seu saldo. Basta fazer o básico bem feito e pronto.
Nitter
Doguera Bitcoin⚡ (@DogueraBitcoin)
Para usar uma multisig, você primeiro precisa entender a singlesig. Se nem o básico as pessoas entendem direito, quem dirá algo que é mais complexo.
Você não precisa de uma multisig para proteger o seu saldo. Basta fazer o básico bem feito e pronto.
Você não precisa de uma multisig para proteger o seu saldo. Basta fazer o básico bem feito e pronto.