y² = x³ + 7

Public Key

npub1nxzjcplexq4v239gv7ql54susyaawss7rlcg796fyq6emjcwe0yqc8fw3a

Profile Code

nprofile1qqsfnpfvqlunq2k9gj5x0q062cwgzw7hgg0pluy0zayjqdvaev8vhjqppamhxue69uhkummnw3ezumt0d5qs6amnwvaz7tmwdaejumr0dssafd7u

Publishing to

nostr.mom

nos.lol

nostr.bitcoiner.social

Author Public Key

npub1nxzjcplexq4v239gv7ql54susyaawss7rlcg796fyq6emjcwe0yqc8fw3a

Show more details

Last Notes

2026-08-15 13:28:13 GMT

- reply

Unfortunately, feminism has long been a hateful ideology.
People create ideologies and if the people are hateful, they can hide behind pretty words, but that doesn't change what they are really up to.

2026-08-14 07:23:35 GMT

- reply

No, the shipping company leaked data of some customers in some regions who ordered in last 90 days

2026-08-12 18:47:35 GMT

- reply

Worse that that, he is evil

2026-08-11 18:04:24 GMT

- reply

You were always buying just a license to access the movie and the license can be revoked any time 🤷‍♂️

2026-08-10 12:17:44 GMT

LukeCoin now closed. Have a nice day.

2026-08-10 11:19:54 GMT

- reply

You can send it to me and I will responsibly dispose it

2026-08-09 17:42:13 GMT

- reply

Money for puppets stopped flowing

2026-08-09 13:10:39 GMT

- reply

Edgy

2026-08-08 20:59:07 GMT

All quiet on the BIP110 front

2026-08-06 19:56:55 GMT

- reply

As far as I understand:
The ColdCard has hardware random number generator. The bug caused the firmware to NOT use the HRNG (which provides quality entropy) and rather used the MicroPython's software RNG as a fallback. The software RNG was seeded with time and IDs because in an airgapped system, there's no way to get entropy from another sources like disk or network activity. The hardware RNG usually works by measuring noise in the hardware. The noise is unpredictable by physics so it's a great source of entropy by it self. It is not a deterministic mathematical function (PRNG/software RNG), so we don't need to seed it with anything.

2026-08-05 13:19:17 GMT

- reply

Nice!

2026-08-05 08:55:28 GMT

- reply

Stay strong, don't let yourself be swept away by online bullshit

2026-08-05 08:52:47 GMT

- reply

So just becoming emotional retard

2026-08-05 08:34:57 GMT

- reply

Doesn't matter if he would even be able to launder this amount of Bitcoin, wouldn't it be suspicious if he just became multimilionare in real life without any explanation? Assuming he would make zero opsec mistakes.

2026-08-05 08:32:17 GMT

- reply

The force beyond his understanding is just human stupidy

2026-08-04 20:17:58 GMT

- reply

Why? Do you think he could somehow spend the stolen Bitcoin when everyone is watching and actively monitoring?

2026-08-04 20:07:34 GMT

- reply

Luke is also technical (a developer), but he (aside from many other things) maliciously modified the source code of the Bitcoin node in Gentoo to censor transactions to specific addresses. He also changed the description of the Bitcoin core package in Ubuntu to scare users with his "Core is dangerous malware" bullshit and tried to hijack the translations repository rom Core to Knots. He is by no means a good willing person, nor are his puppets (Mechanic or Chris/Dathom). 🤷‍♂️ They know better

2026-08-04 20:02:22 GMT

- reply

Pedocoin is when you don't want regulatory compliance in Bitcoin, get it (btw Luke is known as a censor for a long time, he even maliciously modified the source code of the Bitcoin node in Gentoo)

2026-08-04 18:14:12 GMT

- reply

Maybe, but I don't see a metric in which would ColdCard be the best one 🤷‍♂️

2026-08-04 15:56:49 GMT

- reply

I hope the BIP110cashjrs will grow some balls and won't come back to Bitcoin and use their new coin like Bcashers.

2026-08-04 15:49:59 GMT

- reply

Yeah, but ColdCard was never the best.

2026-08-04 15:47:16 GMT

- reply

Wow, that's crazy. GitHub helps organizations to invade the privacy of people willing to help them. Any serious threat actor will of course hide their IP, so this prevents nothing.

2026-08-04 15:38:29 GMT

- reply

I love when criminal masterminds just confess in public spaces for no reason

2026-08-04 13:25:04 GMT

- reply

Podcasters don't verify

2026-08-04 12:57:27 GMT

- reply

Wdym? He is deleting much more

2026-08-04 12:56:37 GMT

- reply

Trezor uses TROPIC01 as it's Secure Element (alongside Optiga Trust M). TROPIC01 is open, auditable and both SEs are without an NDA. This way you don't have to rely on Trezor (yes, you can self host the oracle server, but how many users will do that? You must have good defaults)

2026-08-04 06:31:08 GMT

- reply

They could, yes. Did they? Probably not

2026-08-02 19:47:03 GMT

- reply

I know what supply chain attack is, but Trezor implements some counter measures so I am asking you what type of attack you mean exactly. For example, Trezor devices have Trezor's public keys embedded directly in hardware, so if the firmware of the device was tempered, the device integrity check would fail.

2026-08-02 19:33:56 GMT

- reply

What do you mean by that exactly? Would they temper the manufacturing/shipment?

2026-08-02 19:30:15 GMT

- reply

😂 It sadly happens more often than you think apparently. Check Libbitcoin's Mersenne Twister, Blockstream's android wallet or Android's Java SecureRandom. It already happened multiple times.

2026-08-02 10:08:29 GMT

- reply

🤣

2026-08-02 09:18:45 GMT

- reply

If you think everyone has the best technical skills to secure their Bitcoin then you are just stupid. We need high quality hardware so people can simply and safely self custody their Bitcoin. ColdCard was never simple or high quality. Forcing users to generate entropy themselves will end badly - this is not new (eg. brain wallets hashing).

2026-08-02 07:33:00 GMT

- reply

It's not. More Bitcoin were lost due to people trying to outsmart the cryptography. This CC "hack" is nothing more than a stupid error that should have been caught by testing. The mistake is really simple and so is it's exploitation method. Literally the same thing already happened in Bitcoin's history many times (Libbitcoin explorer, Blockchain.info, Java's SecureRandom bug, ...). Using a hardware TRNG (for example thermal noise) and testing your implementation would prevent all of this.

2026-08-02 06:55:15 GMT

- reply

Extreme use cases are important, permissionless P2P networks are fragile and that's why we need to have a rock solid consensus rules. BIP110 is broken by design.

2026-08-02 06:50:55 GMT

- reply

Nah, hopefully they won't come back.

2026-08-02 06:48:43 GMT

- reply

With SLIP39, yes

2026-08-02 06:45:07 GMT

- reply

I don't think that's a good lesson since casual users should not have to do that for UX reasons and placing the entropy generation in the hands of casual users will end badly.

2026-08-01 20:26:27 GMT

- reply

The security of our cryptography relies on randomness and when the RNG used is fundamentally broken...you get this.

2026-08-01 20:22:37 GMT

- reply

Yeah, don't trust, verify, but at some point you have to trust something/somebody. Hardware wallets are the best way to securely store your sats and Trezor simply makes the best ones, they are not amateurs. The 12 years old Trezor One (without any secure element or ARM enclave) is still safe against overwhelming majority of attackers. 🤷‍♂️

2026-08-01 20:09:12 GMT

- reply

Just use Trezor

2026-08-01 19:32:27 GMT

- reply

The Linux desktop still has many rough edges :/

2026-08-01 19:29:32 GMT

- reply

Is it finally the year of Linux desktop? 😏

2026-08-01 19:27:34 GMT

- reply

Reading 32 bytes from /dev/urandom is not that hard