DocHex

Co-Founder Coinkite. Programmer.

[DocHex @DocHex]

Life goal for #bitcoin businesses: Some revenue confirmed in every block.

[NVK @nvk]

The uncomfortable truth, everyone looked through the COLDCARD firmware.

[GrapheneOS @GrapheneOS]

Motorola has announced their new high end flagship phone including upcoming official support for GrapheneOS as an OS option.

Motorola Signature 27 will be the first Motorola device supported by GrapheneOS. More devices will be supported in the future.

https://t.co/ARJFCisI8z

[NVK @nvk]

Code debt is coming back at us fast; human review limits kept it at bay.

The great hardening of software will not be pretty, but is not optional.

~200 ppl were catastrophically affected by a 5yo COLDCARD integration bug reviewed multiple times by humans over years.

It took kimi-k3 1 week.

[DETERMINISTIC ENTROPY 🎲 @Gen6G]

Me: I can type a very strong, all characters, truly random passphrase on the Q in 15 seconds.

SeedSigner users: Why do you need to type that fast?

Me: I can confidently dice roll seeds with the Q way faster than any other hardware.

SS users: So what?

Me: I can configure all sorts of trick pins, wipe features, scramble keys, etc.

SS users: Why do you need to do that?

Me: I can use the USB port to send stored passwords directly to PC.

SS users: just copy from vaultwarden

Me: I can conveniently store a ridiculous amount of seeds with beautiful seed names :) in the seed vault (without backups) and even if someone managed to compromise device and retrieve these seeds, the real funds could be hidden behind a passphrase on top of the seeds.

SS users: just have like 15 different encrypted QR codes and memorize the decryptions.

Me: I can create a specially prepared microsd card that must be inserted before correct pin is entered or the seed is wiped.

SS users: Who uses that?

Me: I can securely store and use several multisig descriptor backups directly on my devices in case some of my other ones get lost.

SS users: stateless is the way bro

Me: I can clone my Q with everything on it and have an exact backup on another Q within 45 seconds

SS users: Who cares?

Me: I can securely store passwords, personal info, card info, gun serial numbers, seeds of all types (bip85, passphrase) node QR info, everything, etc on the CC Q. All of this info can be conveniently stored in beautiful, organized groups :) I can then securely and selectively transfer some of this info or all of this info to someone in a different country with a wiped Q, using the Key Teleport feature without anything being intercepted.

SS users: .........

Me: I can literally just keep requesting new features without any additional work on my end and the CC team will keep adding them.

SS users: just fork your own firmware bro

Me: I can continue wasting my time explaining what the SeedSigner is not capable of (there is plenty more) but you dont actually care.

SS users: you are correct

Me: the Q has a built in flashlight

SS users: thats sick

[Coinkite @Coinkite]

Address Explorer derives receive addresses on the signing device and shows their paths. Use it to cross-check the address displayed by a networked wallet before sending funds.

https://t.co/erbH7dcs2N

[Wicked @w_s_bitcoin]

Just saw a Coinkite ad in my feed. 😳

Unpopular opinion: COLDCARD’s still the gold standard for signing devices and if other vendors don’t get their shit together, Coinkite’s probably gonna make a comeback with the Q2 next year.

[DETERMINISTIC ENTROPY 🎲 @Gen6G]

@VandelayBTC CC are the OG feature wizards 🧙 No one else like them. They can keep adding new ones forever. I have specifically requested at least 5 and that does not include what is added on top of the groups feature :)

[DETERMINISTIC ENTROPY 🎲 @Gen6G]

Kill Key ☠️: the quickest, non-invasive feature to wipe the seed on your device. You choose the predetermined key that you will press when your anti-phishing words appear and your seed is immediately wiped 🤙🎃

[Vandelay ₿TC Industries ⚡ @VandelayBTC]

18 years and we're just getting started for a proper takeoff. 🚀

[patagucci perf papi @kenwheeler]

even if we all get our dicks ripped off by robots like fuckin honeysuckles, how crazy is it that we get to live through it. there were like 1k year stretches where mfs just started fires and gathered shit and then died. and here we are like the white trash jetsons.

[Coinkite @Coinkite]

Happy 18yrs #BitcoinWhitePaperDay 📃

For the next 24hrs enjoy 15-20% off many products of our store including #COLDCARD, #BLOCKCLOCK, #SEEDPLATE and #TAPSIGNER

https://t.co/Y2rCnF66MT

[Mark Harvey @thepowerfulHRV]

A quick primer on #Bitcoin multisig:

Multisig allows you to take custody of your BTC in a way that eliminates any single point of failure.

With multisig, you will not lose your BTC if you lose a key, or if your house is broken into, catches fire, or floods.

The most common type of multisig setup is a 2-of-3, meaning 2 out of 3 keys (hardware wallets) are required to sign a transaction to move/spend the BTC.

With a multisig setup, you need to keep track of your keys and a descriptor file.

Keys:
These are typically hardware wallets that come with a paper backup for the seed phrase.

With a 2-of-3 setup, you can lose one of the keys and still be safe.

Best practices are to (1) store all 3 keys in separate geographic locations, (2) use a different hardware vendor for each key, and (3) back up each hardware wallet's seed phrase on steel instead of just paper.

Descriptor file:
This is essentially a backup of the multisig wallet configuration.

The descriptor file should be saved securely and/or printed out (as a QR code).

If an attacker gains access to the descriptor file, they can recreate the multisig wallet and view the BTC balance, but they can't move the funds unless they actually have access to at least 2 of the keys.

If the descriptor file is lost, it can be restored, but it requires gathering all 3 keys to recreate it.

[Coinkite @Coinkite]

COLDCARD is a Bitcoin-only signing device. It does not require a COLDCARD account or mandatory companion app. Pair it with compatible wallet software and keep the signing key offline.

https://t.co/nxpiE7umtZ

[CHAMPAIGN HODL 👑 🥇 @0ld_AF]

@BTCBreadMan Coldcard is still a good wallet!

[idle Stoev @idlebg]

@mononautical with the option to export it to Coldcard 🥳

[DETERMINISTIC ENTROPY 🎲 @Gen6G]

My top three HWS in order, explained. I intentionally left out DIY to keep this simple so the DIY people don't need to come at me but I respect you 👍

1. COLDCARD Q @Coinkite - My prized possession. I play with the Q all the time, becoming more obsessed as time goes on. The Q immediately makes most other hardware irrelevant IMO considering all the features and functionality, especially not requiring a companion app for initial setup. There really is something special about the full QWERTY keyboard... I have never regretted buying a CC and features are still being added 🐦‍🔥

2. Frostsnap @FrostsnapTech - By far the best multi sig option there is, as SIMPLE as it gets. Perfect when you don't only have yourself to think about as long as they are geographically distributed properly. These devices give me the same excitement as the Q even though I use them much less. You don't have to worry about internal batteries. They appear as single sig regardless of how many are used. The setup, signing and restoration are magical. Seriously love these things... ❄️

3. Blockstream Jade Plus @BlockstreamJade - I gave Blockstream a hard time for months after the release of the Jade Plus because of my issues with the camera but that was eventually fixed after 2 or 3 firmware updates. The Jade does not actually force you to use an app although most people are probably better off hosting their own oracle when they can for better reliability. I enjoy the simple, small, lightweight form factor while still incorporating some features like a passphrase, BIP 85, OTP, and stateless which most people don't realize is an option. I do occasionally use liquid too so it's great for that. The oracle is not perfect but I respect @Blockstream for doing something different. The alternative theme options scores the Jade some Aura points. I do feel bad for attacking Blockstream so much in the past so hopefully they will appreciate it still being in my top 3 😇

[Coinkite @Coinkite]

@PremiumBusiness having issues with access to premium business support, please DM back.

[Programming Wisdom @CodeWisdom]

“Security is like Tetris: Your successes disappear but your failures pile up.” — Mikko Hyppönen

[Ferenc Huszár @fhuszar]

I heard OpenAI are testing GPT-7 Astra inside vim so the agents can’t escape.