@glennhodl They built a device to protect against the impossible - Then they made the impossible trivial by 'accident' - The truly depressing part? Nobody noticed for five years
Quick update.
As many people are concerned about the safety of their funds.
None of the Red Team activity up to this point around hardware wallets specifically has shown any kind of vulnerability that would indicate they are not safe.
There has been nothing I've seen from all the vulnerability scanning over the past 4 days that I have reviewed or anyone has shared to me that would indicate a security issue.
More updates to follow as things develop.
Bitcoin Red Team Update:
We have been working around the clock, with ~$20,000 of spend up to this point across different services. Funding is secured, I appreciate all the gestures for donations but it is not necessary. The bill is taken care of.
We have done over a dozen disclosures up to this point, with 150 repos scanned. The hardest part is coordinating to get things to the right people (thank you @danielabrozzoni for the help)
I have a first pass on a bitcoin red team agent harness which only requires an @opencode zen api key, makes it easy for us to use K3 for the actual heavy lifting and then GPT Sol + Fable/Opus + GLM5.2 for supporting documentation.
While it is powerful, having found critical issues, I would view this as only version one. There is a lot of iteration I'm looking forward to improving on.
Our goal is to open source the harness so it can be pointed at internal repositories for insights so the hardening of defenses can go deeper than the code which is made public.
We also have been connected with OpenAi for some help so I could manage getting the @OpenAI Cyber Harness running as well (thank you @lylepratt ). Its a much more expensive scan, but well worth it for load bearing portions of the bitcoin ecosystem and has already yielded good results.
Goals for tomorrow are scale in processes and systems so we can do a better job and automating full end to end functionality to get humans out of the loop for the heavy lifting. The first mile (requests/staging) and last mile (handoff of reports) are the choke points right now.
Thank you @stutxo@callebtc@benthecarman@thesimplekid and so may more.
This video is from an old Coldcard tutorial showcasing dice rolls to add entropy.
If you have no other hardware to migrate to but are worried about being on a hot wallet until you find a replacement device, this is just one of many possible options for the time being.
A few things:
1. It is important to upgrade to the newest firmware that was released today at the following link: https://t.co/N1g24D2DrN
2. Even with updated firmware, I think it's prudent to utilize dice rolls upon seed creation as seen below.
3. Nathan @theBTCmentor will be dropping a video shortly showing how to utilize seed vault to migrate from one seed to another on a single device. He'll reply with it here after.
4. If you have access to other hardware, the above is moot and you should simply migrate to that. This is time sensitive and waiting is not an option.
Podcasters and YouTubers please put out short 5-10 min emergency broadcast episodes today or tomorrow with a technical guest about the coldcard situation. That way we can reach all the people in the audience who aren’t too online twitter people.
There are still bitcoiners who don’t know this is happening.
Nobody has ever played Super Mario Bros. perfectly.
The game is 40 years old.
A computer can finish it in 4:54.265. The human record is 4:54.365. A tenth of a second difference.
So we made a Bitcoin bounty: 21,000,000 sats for the first person to do it. How hard can it be?
https://t.co/Gdza1hT2y9
🚨HUGE Pre-Historic Structures in England That NOBODY Visits!
These gigantic pre-historic structures in Yorkshire, England never get discussed, even though they are the largest in all of Britain!
I've documented ancient and highly mysterious sites across the world, but this time i'm in my own backyard of England. Specifically Yorkshire, home to some of the largest and most mysterious pre-historic structures in Britain.
We are not taught about these in school, most British people likely don't even know they exist, which is why I travelled to Yorkshire to document them in 4K quality for the first time.
FULL VIDEO LINK IN COMMENT SECTION!
Without freedom & sovereignty - you have no voice.
If you skip the spiritual part - you'll operate on automatic pilot, without really knowing what you stand for and what you won't sell out on.
Define your values and mission - discover your purpose.