Glimaren

and it all hinges on the individuals ability to keep a secret. Writing off a tool that can offload some risks actors face when interacting with the protocol as a grift across the board is bad practice, and neglecting the existence of commonly known attack vectors.

2026-08-09 09:52:56 GMT

- reply

the whole premise of btc as a financial legder is the use of secrets to sign for proof of work. If the practice of keeping a secret stays static and falls behind in a dynamically evolving environment it undermines the very foundation of the protocol. This kind of rhetoric is borderline malicious practice and a culture that will get people rekt badly.

2026-08-09 09:38:22 GMT

- reply

proper usage means controlling the keys, how a individual approaches this is up to them. Waste of money is exposing or losing the keys, regardless of the process. If a signing device is a waste of money, then that is a individual consideration based on risk, consequences and mitigation knowledge. It is dishonest to apply the same conclusion for every risk profile as they are inherently different.

2026-08-09 09:25:04 GMT

- reply

in certain cases yes, but ignoring the potential benefits and technical pitfalls the average user exposes themselves to by avoiding a hw signing implementation without real concideration is sub optimal advice in general. You dont need to buy anything if you have the knowledge to create a encrypted airgapped environment that only loads in ram in a safe way. But you cannot realistically recommend that to someone who has never interfaced with their home directory in a terminal, and even then its a big ask…

2026-08-09 09:06:03 GMT

- reply

satoshi was obviously a opsec expert with deep knowledge of security, operating in a relatively low threat environment compared to today. Both the incentive economically and the attack surface is bigger now than the satoshi era. Satoshis keys went cold long before they were at any risk of beeing swept, and they are not actively beeing loaded into a adversarial environment for signing on a regular basis. Dedidcated signing hardware is a risk mitigation tool that can reduce attack surface and protect the user against malware and catastrophic user error when the keys need to sign anything. It is easy to create a wallet, load funds on a fresh os install in a clean environment and burn the keys. This is likely never to be hacked, but the user has no ownership over the keys and so the entire comparison falls short

2026-08-09 08:39:07 GMT

- reply

my point is the enviroment the satoshi keys were generated and stored in initially before going cold is not comparable to the average user

2026-08-08 18:27:44 GMT

- reply

sathoshis signing environment on a general purpose computing device is not in any way comparable to the average user. If satoshis computer was online with hot keys and you gave it to a run of the mill above average tech literate linux users today coins would likely be swept in relatively no time id wager. The game has changed since then…

2026-08-06 23:24:45 GMT

- reply

Rip that shit apart and dump the firmware in a public repo

2026-08-06 23:08:09 GMT

- reply

The existance of sub optimal RNG binaries in a consumer facing hww, and a fail open policy on the arguably single most critical logic in the entire device is sus af on its own...

2026-08-06 05:30:14 GMT

- reply

The problem as I se it, is that it is impossible to verify that the computer TRNG did its job for 99.9% of people. Dice rolls, while not a perfect solution is a better way for a lot of people to get verifiable real entropy. We should find ways to eliminate foot guns and encourage people to use dice or cointoss for entropy by default

2026-08-05 12:53:46 GMT

- reply

the masses got sold ~$170 malware by influencers. Lets hope that wrong can be rectified one day…

2026-08-05 07:36:26 GMT

- reply

Im thinking we need to made entropy a noob friendly concept. Scaring people away from “advanced” dice rolls as a way to generate seeds was a terrible mistake. To some degree understandable, but there is no reason to outsource such a critical component of a holding setup to any proprietary black box going forward. Individuals must step up and take responsibility for their own entropy and concider if potentially well implemented true entropy is in fact better than slightly biased real entropy. Given what we now know, i find it critical that we enable the masses with the tools and knowledge to own their own entropy, and make that kind the industry standard. If only supplemental to a sufficient degree it would have prevented this tragic, disastrous “bug”.

2026-08-03 21:18:08 GMT

- reply

yeah… not looking good.

2026-08-03 20:26:44 GMT

- reply

Should a HW device even have the binaries to produce PRNG in the production codebase, when the whole point is TRNG?

2026-07-19 13:50:21 GMT

- reply

I think russia fucked up big time with the war, dont get me wrong. However there is something that feels off with your rhetoric and the dishing out judgement like ops dont find themselves in precarious situations. I am not convinced by the line drawn for «active combatant» that would justify liquidation in this manner… The collini case comes to mind.

2026-07-19 01:54:19 GMT

- reply

You are losing it bro

2026-03-28 05:16:21 GMT

- reply

fucking sick

2026-02-23 11:35:04 GMT

- reply

The eye is the best part🐑

2025-12-24 15:11:50 GMT

- reply

This is the way. Happy for you bro, merry christmas. Beware of opsec. There are evil forces out there. God bless

2025-10-31 19:18:58 GMT

- reply

Want

2025-10-18 19:59:08 GMT

- reply

Lmao based

2025-10-18 09:41:47 GMT

Running RNode...
https://blossom.primal.net/9518e81995c13b5634625cfe798e047b289b8b9c87729a5bb32b4873cf0cd257.jpg

2025-10-17 20:44:41 GMT

https://youtube.com/watch?v=nWszlmgOdYc

2025-10-14 18:49:03 GMT

- reply

I like the idea of paying for a service like kagi, I dont like logging in. Ppq.ai has "account" ids you can load with lightning and lets you copypaste that string to access the account. If kagi implemented something simililar or use a lightning wallet to sign in without giving personal info I would immediately.

2025-08-19 18:06:23 GMT

- reply

bro needs to revisit high school physics

2025-02-03 21:50:22 GMT

- reply

fuck big smoke

2025-02-03 08:39:05 GMT

- reply

dama betaler godt hvis dere skulle ende opp med litt ekstra... kjenner flere tyske som lengter sårt etter det greiene der.