mikkoph

@Keycard_ dev

[TΞRRICOLλ @0xterricola]

Yesterday: CLI plumbing.
Today: browser → Keycard Shell → browser.
@ThurinLabs now has the OpenPGP hardware-signing flow working directly in the browser with @Keycard_.
Load the public key → scan the request → review + sign on Shell → scan the response → verified.
Then one more hardware approval for the Ethereum authorization.
No private keys leave the card. No CLI required.
This is starting to feel like the right boundary between apps, wallets, and trusted hardware signing. 🔐

[TΞRRICOLλ @0xterricola]

LFG. Full @Keycard_ → OpenPGP → @ThurinLabs → Ethereum demo.
OpenPGP signs the identity statement. Ethereum signs the EIP-712 authorization. Everything moves over QR, both proofs verify on the host, and neither private key leaves the card.
Hardware-backed identity is real.

[TΞRRICOLλ @0xterricola]

Big milestone for the Keycard Shell OpenPGP work:
We now have the full flow working end-to-end on Ethereum mainnet.
A physical Keycard:
→ signs an OpenPGP statement binding the PGP identity to its Ethereum address
→ verifies that PGP signature on the host
→ signs the Thurin EIP-712 attestation with the EVM key on the same Keycard
→ recovers the signer back to the runtime Keycard address
→ publishes the attestation onchain
Both the OpenPGP key and EVM key are used directly on the Keycard. Neither private key ever leaves the card.
What started as getting OpenPGP primitives working on Shell is now a real hardware-backed identity integration.
Thurin identity:
https://t.co/0AsDRSTDIn
Mainnet tx:
https://t.co/e84zYlvE5N

[TΞRRICOLλ @0xterricola]

New Keycard Shell OpenPGP demo is done.

CREATE_IDENTITY creates a public OpenPGP identity for the Shell’s own derived key by binding a UID to its public key with a self-certification.

In the video:

host generates the request
Shell shows UID / creation time / fingerprint for trusted review
Shell returns the public OpenPGP certificate over animated BC-UR
host reconstructs it
GnuPG verifies the self-signature

Final result:
REQUEST SELF-CHECK: PASS
RESPONSE STRUCTURE CHECK: PASS
gpg: 1 good signature

Physical hardware, end to end.

[TΞRRICOLλ @0xterricola]

Got the OpenPGP certification demo working end-to-end 🔐
Starting from Thurin Labs’ published public key, I generate a QR containing the actual OpenPGP key + User ID + self-certification packets.
The device independently parses the OpenPGP object, verifies the UID self-cert, derives the fingerprint itself, shows it on the trusted display, requires physical approval + a local PIN, and signs with the removable NeoPGP card.
The resulting standard OpenPGP certification packet comes back over QR, and stock GnuPG verifies it:
gpg: 5 good signatures
This is the architecture I’m exploring toward Keycard Shell as a general-purpose trusted cryptographic interface: not just signing a host-provided hash, but letting the trusted device understand the protocol object and show the human what they’re actually authorizing.
Full demo Video ↓ (excuse the pauses 😅 I’m thinking through a lot of this in real time while I demo it)

Github link: https://t.co/VJO2UtCHvV

[Guy-Louis Grau @glgrau]

@SCBuergel Even better you could use @keycard_ Shell hardware wallet with Claude

Your private keys never leave the secure element and the trusted display decodes your transactions

This takes 2 minutes to setup with Shell MCP

https://t.co/Ygw50ozS6d

[Guy-Louis Grau @glgrau]

something's cooking ....
@mmlado_eth is building an android+iphone app to use any QR wallet (ERC-4527) with @Keycard_
https://t.co/6UxzWSh61v

[Logos Tech - Testnet v0.3 is live @Logos_devs]

Corey Petty on Dev Club: the chain does its one job well: delivering digital scarcity nobody can tamper with. Everything around it (wallets, extensions, RPCs, indexers, the dApp in your browser) leaks what you do and who you do it with.

Muster is an experimental app on Logos Basecamp. It runs a transaction from the first message to settlement and shows what leaks at each step.

[Logos Tech - Testnet v0.3 is live @Logos_devs]

A hacked frontend shows you one transaction and hands your hardware wallet another. Calldata looks like noise to most, so you sign it.

@Corpetty's Muster app builds a transaction from scratch inside Logos Basecamp, with no safe indexer and no dApp UI, so you can inspect the provenance of what you sign before you sign it.

Verified proxy and @Keycard_ signer modules are next.

[chair λ @vrycmfy]

100% Open Source
100% Air-Gapped
10% Off Code: chair

[nixo.eth @nixorokish]

alright y'all - this last ledger vulnerability was the last straw. i haven't downloaded the ledger live app in years since it became obvious how much data was being collected from there and there's seemingly no way to update your app without it

i've already been using @Keycard_ for some things. moved my 'most used' one to a card today. i'm all in on Keycard and @ambire now

pls don't become evil, my dudes. we need you

[cinesius.eth @cinesiusss]

migrated hot accounts to @Keycard_ NFC. there is no second best.

[Václav Pavlín | λ @vpavlin]

Scala (https://t.co/6F15guWbi6) allows you to use @Keycard_ (on mobile, Basecamp is still unfinished) to control your calendars and events - i.e. as long as you have the card, you can edit from any device and stealing/losing your devices does not matter.

Keycard support is coming to Shrooms next

Then Qaku and other apps...

I love Keycard

[Logos @Logos_network]

Society is crumbling with every freedom taken from us.

The Museum of Civil Liberties is a reminder of what we’ve lost and a call to reclaim it.

Enter the museum: https://t.co/C4Vd9oBLfY

[cinesius.eth @cinesiusss]

NFC signing with @Keycard_ is live in @ambire app

ping if you wanna try it out

[chair λ @vrycmfy]

the point of bitcoin WAS sovereignty

the point of ethereum WAS sovereignty

the point of Logos IS sovereignty

[chair λ @vrycmfy]

Most hardware wallets ask you to trust the seed came from a real RNG.

Keycard ships receipts: a BSI AIS-31 certified hardware TRNG in an EAL6+ secure element, firmware + applet you can build and verify yourself.

The seed never leaves the chip.

For discount, use code: chair

https://t.co/SVlALO5pVR

[Qwen @Alibaba_Qwen]

📢Meet Qwen3.8-Max — our most capable model to date.

Next week, the open weights of Qwen3.8-Max will be released, and Qwen3.8-27B is also going open-weights to meet you all!🎉

Qwen3.8-Max, a new bar for coding and cowork at 2.4T parameters:

- Autonomous coding: 10+ days of self-evolving development, from empty folder to production without hand-holding, complete project trace in the GitHub：https://t.co/iVHZWQoeSo
- Real work, real results: Production-quality deliverables across hundreds of professions.
- Long-horizon mastery: System-level autonomous planning with closed-loop adaptive learning, driving 500+ turns of chip design optimization and 365 days of e-commerce strategy.
- Native multimodal intelligence: Vision isn't just input — it's a continuous feedback loop for planning, execution, and self-correction.

💰Pricing:
Input: $2.0 / M tokens
Output: $6.0 / M tokens
Implicit Caching: $0.25 / M tokens

Start building with Qwen3.8-Max! 🚀

📖 Blog: https://t.co/iwjmQxLBof
✅ Qwen Studio: https://t.co/4V2pFvDovG
⚡ API: https://t.co/gAGqaLQGbN

[mikkoph @Bitgamma]

@antirez so far, Laguna S2.1 has been underwhelming for me, Qwen3.6 27B with MTP still seems to be the best I can run on my Strix Halo 128GB at least from a speed/quality ratio standpoint. Would love to see something better pop up soon.

[mikkoph @Bitgamma]

Now on https://t.co/2M7bw1jNnv