Ordinary Christian Saint. Reformed Baptist. Head of Household. On pilgrimage at #ToChristAlone.
Public Key
npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Profile Code
nprofile1qqsxft85q406sf4u4wz90cjwlra6wjg2hv08dkatd25822jn5r456jspzfmhxue69uhk7enxvd5xz6tw9ec82csprfmhxue69uhhyetvv9ujumt0wd68ymewdejhgam0wf4sfdprj6
Show more details
Published at
2026-09-02T01:51:16Z Event JSON
{
"id": "4701291d284e512f7dfac461ebe62b40a62b2a9e247cbc28be535095664095bf" ,
"pubkey": "64acf4055fa826bcab8457e24ef8fba7490abb1e76dbab6aa8752a53a0eb4d4a" ,
"created_at": 1788313876 ,
"kind": 0 ,
"tags": [],
"content": "{\"display_name\":\"Laser\",\"name\":\"Laser\",\"about\":\"Ordinary Christian Saint. Reformed Baptist. Head of Household. On pilgrimage at #ToChristAlone. \",\"picture\":\"https://blossom.primal.net/6fa71346e824ef6a7e590c07e93d25b030866f3015c6fa5e2e8e69f581a5eb25.jpg\",\"nip05\":\"[email protected] \",\"banner\":\"https://blossom.primal.net/fabf0d72e0f38a063cdb29ed00e2769c105795bb0876d34f4a67c7f0b481fc53.jpg\",\"lud16\":\"[email protected] \"}" ,
"sig": "5eb2e848963c323039de4caf69a1a041f039486c88bb6f4a72b772b3994f2950d0fe1338a4ac92c4de8b76f70a0c45ca59b94891daa59ac51db4378ca305c7bb"
}
Last Notes npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Chaga in the jar? npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser It is surprising that the radio entropy source was poorly understood and implemented by their devs. Grateful they ported Core's accumulative entropy approach, so that no single entropy source could collapse the entropy pool. Protects against mishaps like this, which are easier to make and trickier to verify than one would think. There is narrow case that needs to be researched by Blockstream: a Jade Classic on No-Radio firmware from the fast-fill era (around 1.0.40) generating a seed before useful host entropy arrived, and the boot camera plus sensors added little beyond that short HWRNG dump. Probability low of compromised seeds in my sense of things, but if I were relying on 1.0.40 seeds I'd be regenerating under the latest firmware or using diceware to BYOE. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Nightmare I was in San Francisco. Was late. Midnight. I was lonely and walking towards Polk St, looking for drink and company. Trying to connect with drinking friend. The atmosphere was dark and seedy. Across the street a lady is fire b0mbed by a homeless man. She shrieks and everyone begins to run. He's fast. My heart rate goes up as I begin to run. Feet are heavy. Then I awake. Run to the Father. I ate sushi last night. High Omega fatty acids, PUFA, have saturated my body. I should have taken Vitamin E before bed. Won't have sushi again for awhile. Haven't had a nightmare on saturated fat. #Peatstr https://blossom.primal.net/fbda99bc662d87ffbcee0f4618396f081fe2670c4a591965536a73d6c20aec2e.jpg npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser this is me as a car (64' Datsun Roadster) https://blossom.primal.net/baece6c74c7d696004381a17b8f00e8a51c94009563d29b9e41af11be2ced276.jpg #nevent1q…30vp npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Huh. @nprofile…4k44 doesn't like relay.ditto.pub npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser You sure? https://blossom.primal.net/f3688570edb747e6e16a73190111621ad9d2d28e37a6dffdce452ad38c503702.jpg npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser What's the ditto relay, I'll add it. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser The way. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser "The built-in hardware cryptographic random number generator (CRNG) derives entropy from various sources, one of which is the included radio (used for Bluetooth). When the radio is disabled with the optional “noradio” firmware (selectable in the Green companion app), the CRNG loses that source and, therefore, has reduced entropy. To mitigate this, we use an ESP32 API call named “bootloader_random_enable()” to sample raw radio noise only during boot, which is then added to the entropy pool along with the sources mentioned above." - @nprofile…6av2 https://blog.blockstream.com/blockstream-jade-tech-overview-part-1/ #nevent1q…8lgj npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Grok had some good insights: The rate mismatch you describe is real. Espressif documents `bootloader_random_enable()` + `esp_fill_random()` as valid true-RNG when RF is off, but `esp_random()`’s wait (`APB_CYCLE_WAIT_NUM = 16` ≈ 0.2 µs / ~5 MHz) is sized for the **RF / high-speed ADC** path. The TRM’s SAR-only max-entropy rate is ≤500 kHz (~2 µs per 32-bit read). Bootloader `bootloader_fill_random()` is much more conservative (“~1 bit per 40 APB cycles”). **v1.0.40** did exactly: `bootloader_random_enable(); esp_fill_random(entropy_state, 32); bootloader_random_disable();` **v1.0.41** (commit `e850c3b`) replaced that with eight `esp_random()` reads + 1 ms `vTaskDelay`. Comment: HW RNG state is 32 bits; 1 ms gives ~50× more refeed time than `esp_fill_random` and adds scheduler jitter. Commit text: change is **not** an admission that prior entropy was weak. ### Answers 1. **No public measurement.** Blockstream has not published a min-entropy estimate for `esp_fill_random(32)` on Classic ESP32 + SAR-only (`bootloader_random_enable`, RF off). Blog only says “multiple analyses confirmed robustness.” 2. **No evidence they applied the 500 kHz SAR cap to the 1.0.40 fill.** That fill used `esp_fill_random` → `esp_random` at the 16-APB-cycle cadence. 3. **No published lower bound** on min-entropy of that 256-bit `entropy_state`. 4. **Stated as defense-in-depth** (refeed time + jitter), not as a fix for a known break. Practically it also removes SAR refresh-rate uncertainty: 1 ms ≫ 2 µs TRM SAR interval. 5. **Not proven from the HWRNG dump alone; Blockstream treats the full pipeline as 128-bit.** A 12-word phrase is not `entropy_state` raw. After init, Jade mixes sensors, camera frames (Classic still has a camera on No-Radio), cycle-counter jitter, `strengthen()` time, host `add_entropy`, then SHA512-splits like Bitcoin Core. Isolated SAR-rate 32-byte dump is the under-specified piece; the seed path is not that dump. No-Radio docs themselves say the CRNG “has reduced entropy” without radio and that `bootloader_random_enable()` is the mitigation. That is an API-trust claim, not a published entropy bound. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser High serotonin, low dopamine. 🧠 #Peatstr #nevent1q…pajm npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser I am married to an unbeliever from an unbelieving family from an unbelieving nation. 🇯🇵 I pray often that she would be drawn into Christ through my testimony and the ordinary means or grace which she is being exposed to in order to demonstrate God's sovereign power to rescue sinners. And I pray that I can trust and have peace in God's perfect justice if she is not in the book of lambs. 🐑 #ToChristAlone npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Liver throughput is a key concern to recovering the metabolism. #Peatstr npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser This means getting the administrative state off their necks. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Nobody who thinks Jesus is some liberal hippy has studied Revelation. #ToChristAlone npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser How did that work? npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser It is #Bitcoin which has infected the legacy system, not the other way around. #nevent1q…l9gf npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser My strategy is to park in 21m and then focus on God. #Bitcoin #ToChristAlone npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Reminder: intelligence agencies regularly create fake companies to compromise a target population in mass. https://m.youtube.com/watch?v=VAQF8uOj6po npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Congratulations. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Where did you discover this power of basic, rudimentary discernment? npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser #MasculineFrame npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Screen record. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Manuka honey directly on eczema sores will heal them rapidly. Long term you need to get to the root cause. Eczema is a gut issue. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Record stool frequency, too. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser 1. Check his mouth/tongue in the AM. 2. Check his stool color/consistency. Also suggest taking basal temp and temp 10 mins after breakfast. Write them all down each day and report back in a few days. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser What's his stool like? npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser If a man makes #Bitcoin his master, he has displaced God of his proper role, thus: he is in rebellion. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Honest money. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser This is not what someone who is in our Lord looks like. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Followed. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser My Son, Fear Yahweh #ToChristAlone npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Is the #AI generative exploit bananza expanding beyond the #Bitcoin space? If so, the chances this is the #CyberPandemic go up precipitously. #nevent1q…c3rl npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Suggest replacing with rhodiola. **Slate (personal autoimmune + liver cases):** https://slate.com/life/2026/03/wellness-detox-ashwagandha-autoimmune-influencers.html **Liver shutdown story:** https://medcitynews.com/2025/07/i-trusted-a-popular-supplement-it-shut-down-my-liver/ **Salon overview of mixed/nightmare reports:** https://www.salon.com/2023/07/15/for-some-this-anti-anxiety-herb-is-a-godsend-for-others-its-a-nightmare-what-gives/ **Reddit personal accounts:** https://www.reddit.com/r/AshwagandhaSyndrome/ https://www.reddit.com/r/Supplements/comments/1eb0fi2/ashwagandha_thoroughly_ruined_my_life/ https://www.drugs.com/comments/ashwaganda/ Common reports: liver injury/jaundice, anhedonia/emotional bluntness, nightmares, anxiety spikes, hallucinations. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Depends on how much muscle you have. The leaner you are, the leaner your diet should be. Regardless: be highly discriminate in *which* fats you consume. The most conservative position is ghee and tallow only. Moderates disrespect seed oils but still consume egg yolk, lard, and chicken fat. Liberals consume fish fats, like salmon, etc. I like tallow, ghee, then low-PUFA pork and chicken products from Nourish Food Club. For seafood, I prefer shellfish only. No fish oil whatsoever, personally. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Too much fat is making you fat. 🥓 #Peatstr npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Kratter glows something fierce. 👻 #nevent1q…vh9j npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Do you want to go to heaven in order to avoid hell? Or do you want to go to heaven to be with Him? There is a big difference. Heaven is the presence of God more than it is the absence of hell. #ToChristAlone npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Rhodiola is a safer alternative IMHO. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Ashwaganda can create an entrenched serotonin state, which for some (many?) can cause a disassociative state which can mimic learned helplessness. In short, it can make you psycho in the same way that SSRIs can. Notice how every mass shooter is on SSRIs? npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Careful: can cause learned helplessness. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser It will be a #Bitcoin reset. https://www.youtube.com/watch?v=xy4et_uRMvA npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser When the full extent of #reset is ultimately revealed, #Bitcoin is going to make #AI look like penny stocks. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Why are you sure of that? npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Dolly Parton got the COVID vaccine. She received her first dose of the Moderna shot in March 2021 at Vanderbilt University Medical Center in Nashville. She even rewrote the lyrics to "Jolene" for the occasion, singing "Vaccine, vaccine, vaccine, vaccine" while getting the jab. She got her second dose about a month later and was fully vaccinated. #nevent1q…nyvw npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser The good news is that salvation is not based on your performance, but entirely a work of God for His own glory. #ToChristAlone npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Likely* npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser "You cannot have it. You may not be central in God's affections. God is central in God's affections." - John Piper #ToChristAlone https://blossom.primal.net/fbd236091da802077452326490de30638d86294bb584cd67431dc1538a4374ac.jpg npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser My #Coldcard findings: based on public data, there is a high probability that the #Coinkite CTO intentionally planted an entropy vulnerability into the firmware, and there is good reason to believe that the CEO knew about it at the time the exploit was distributed to customers. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser full git analysis? that's great send sats for family conditions dire npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Also loading not worth return IMO. Just go steady state. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Drink more water. Expect conventional kidney labs to get weird. Some people get a mood on creatine. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser these are serious conditions send ur bobs npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser im imad please bro 💧 npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Watching Esher and the King. 🍿 #ToChristAlone https://blossom.primal.net/c35a4e7a8ff7ab220364ebde4471e184f5d30418fb7fde90a6f13006a4ae43a8.jpg npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Careful for happy ending. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Grateful for milk. 🥛 #peatstr npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser We eat the carrot salad on #Nostr. That's one of the many reasons this place is more enjoyable than #Bicoin X. #Peatstr 🥕 #nevent1q…wwvr npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser I predicted that 2026-2029 would be peak monetary #reset. It's happening. #nevent1q…pf7d npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Mankind is utterly depraved. #ToChristAlone npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Mankind is utterly depraved, sir. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser I don't think it flipped. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser If there is anything good in me, it comes from God. He deserves all glory; I deserve none. 🕊️ #ToChristAlone npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Brother. 🫂 npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Just building a quiet, dignified life with Jesus Christ at the center. 🛠️ #ToChristAlone npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Suggest reading history. Mankind is decrepit by his/our own desires. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser I pray that God has revealed to you through #Covid that people are not "basically good"; that mankind has become enamoured by, enslaved to, and disfigured from his sin. ⚫ #ToChristAlone npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Every single person who becomes a genuine #Bitcoin payments user was first a genuine saver of #Bitcoin. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Real life #Bitcoin payments adoption is still nascent. Does that honestly surprise you? A tiny bit of real adoption in Africa. Bitcoiners checking out from vendors online and in some narrow locals. Saylor and many others are correct to observe that settlement/capital/collateral adoption is a far more pressing priority in the bigger picture. Money is adopted bottoms up. And yet, it is vital that the development and adoption of payments is advanced at the margin. These things can and should happen in parallel, and we should remain earnest in our expectations for both usecases. There has been alot of willful delirium surrounding real life #Bitcoin payments. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Well said. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Pate? npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser That is the biggest single piece of evidence, yes. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser You are responsible for your sin, but you are not responsible for your salvation. 🕊️ #ToChristAlone npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser After the asking of forgiveness. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Mute witches. 🧹 npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser This opportunity will not be around for long. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser "Telegram chat available on DM." npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Not financial advice! npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Rumor out there #Bitcoin is about to start a killer bull market, or trade sideways a bit, or go down a bit more from here. DYOR. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser I absolutely sure it will do one of these. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser The probability of an honest mistake is rapidly disintegrating. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser You get it. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser "You don't need to know that." npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser *spits cereal out* https://blossom.primal.net/16f2e2cf765bf57871b3f74bcebe2c09fdb194c37704c189d4d9c9126b26871a.jpg npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser No doubt legal told them to stfu. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser The bug you are referring to never got released to customers. nevent1qqsqqqqa07h3tv7ezl53zxfzc74z7q4dxr34jkwtgh3kf5ujlaave6gzypj2eaq9t75zd09ts3t7ynhclwn5jz4mremdh2m24p6j55aqadx55xzv0zc npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Why I believe #Coinkite defrauded #Coldcard customers. 🤫 1. CTO authored entropy vulnerability while pretending to be an external contributor. Coinkite props up CTO alias as an external dev in comms. 2. CEO shared details with Odell that could only apply to the entropy vulnerability that had just gone out to customers. Odell then bragged about his self custody guide, implicating CEO. 3. CTO always used the ifndef guard correctly in the Coldcard firmware, literally dozens of times, but shipped a singular misuse of the function under his alias, thus allowing customer funds to be swept remotely. 4. In the same release the entropy vulnerability was distributed, the CTO had enabled the interactive debugger used to verify code changes on live Coldcard devices, which would plainly reveal that the false/pseudo Yasmarang entropy had been selected. https://blossom.primal.net/7fbf5ad8e7af0682795e0c20d15200be252922b23f92275f8447c49fc88a9de5.jpg npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Peter used #ifndef dozens of times in the #Coldcard firmware, always correctly. But somehow he forgot how to use it when authoring the entropy vulnerability under his alias Switck. 🚨 Peter always used it the normal way (include guards, optional symbols, MicroPython “default if unset”). On MICROPY_HW_ENABLE_RNG specifically, the board side used the correct test: #if MICROPY_HW_ENABLE_RNG. But, incredibly, Peter, while pretending to be an external contributor, used it improperly while selecting the entropy implementation. In libngu, on that same flag, the gate was #ifndef, the operator that fails open when the macro is defined as 0. So it could not be "An external contributor who didn't know the preprocessor well made a classic C mistake." That is not available. Same person. Same flag. Dozens of times correct form on the board. A singular wrong form in the library that later owned seed generation. All Coinkite CTO Peter Gray. #nevent1q…fgcl npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Ask the clankers. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser The affected customers seem to be organizing legal action. Officials in the appropriate jurisdictions are hopefully starting investigations. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser We know that #Coinkite CTO Peter Gray was using the interactive debugger at the time that he had introduced the entropy vulnerability to the #Coldcard source via an alias. In 4.0.0, the major version containing the entropy vulnerability (ifndef fallback to false/pseudo entropy), Peter explicitly enabled the interactive debugger in order to debug integration of libngu, the library he authored under an alias which contained the entropy vulnerability. This is so that Peter could step through the execution environment to examine variables and control flow at each stage of the #Coldcard firmware on a live device before integrating the changes and distributing them to customers. The fact that Yasmarang, a false/pseudo entropy, was ultimately selected for use would be glaring and front center in the code path that Peter was verifying using the interactive debugger. The idea that Peter was too stupid to use Python, which he had been using for decades, and too reckless to verify the implementation, even as he clearly was using the interactive debugger to verify his own libngu library, is frankly absurd. They think we are dumb. https://blossom.primal.net/fbdae0c72b825520d00a5e7f1234ae3e211594964fb7bb818e6768309f2c748f.jpg https://github.com/Coldcard/firmware/blame/75addaefcb5b1861e1c8986195a448ac3f94a303/stm32/COLDCARD/vcp_lockdown.c#L14 npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Awesome. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Not sure. I think so. I run #GrapheneOS only, so a foldable would really enhance my overall computing experience I imagine. Im also pretty rough on my device, so there's hesitation there. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser #Coinkite CTO, pretending to be an external contributor, switches out Coldcard's strong entropy implementation for false/pseudo entropy, thus allowing future wallets to be remotely swept. Plebs: "It's an honest mistake. Python is hard! These things happen." Peter Gray had an extensive debugging setup for the #Coldcard development process. He even left the USB REPL enabled only days before the vulnerability was shipped, meaning he had been inside the runtime inspecting the state of variables within #Coldcard during their big entropy changes. Nobody makes the massive entropy changes they did without stepping into an interactive debugger (or automated testing) to see if things are in tact or broken. And guess what? Peter did. He left the interactive debugger enabled at the time that he shipped the entropy vulnerability, meaning: he must have been inspecting the entropy implementation, and saw that Yasmarang was "defaulted" to as a result of the innocuous "bug" that had been introduced. #Bitcoin https://blossom.primal.net/5b1d54f1cce40664e7af8b162f10e2db74e8884455ec0433bd5355ea77f95425.jpg https://blossom.primal.net/185f785dc70a87c04facfd619b420d9fbfa06c3d58170cd2da5e3e0272ed7a03.jpg https://blossom.primal.net/c0ace32ac2fd77d11925b5dc7c74a9808789ff0299b048aae5accd9e653fc7b1.jpg https://blossom.primal.net/0785d1c8969b037e068bf7fba3f03062e268493011a4bfd9ccc44364834d0b34.jpg npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Can't wait. 🤝 #GrapheneOS #nevent1q…ex87 npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Nobody makes the changes Coldcard made without automating testing and the use of an interactive debugger to verify the entropy implementation. Add the use creation of an alibi with the Switck alias. I'm not naive. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser CTO secretly introduces exactly the entropy vulnerability. Plebs "it could happen to anyone." npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Even as % moves get smaller. npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Are you a bot? npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q Laser Tokenization is going to let the population *feel* asset rich even as monetary reset facilitates the confiscation of their life savings.