Haakon Nilsen aka Norbert ⚡️ Activate CTV + CSFS

I like Bitcoin. I code. Occasional court reporter. Founding board member of Bitcoin Policy Norway.

PGP: 84EA 8254 1F47 C4A7

[Haakon Nilsen aka Norbert ⚡️ Activate CTV + CSFS @bitnorbert]

This faketoshi cryptocult leader is back to launch an altcoin. He's picked up some tricks from Craig Wright, such as the three-piece suit and getting angry when asked to sign.

Will you allow him to be your arch angel?

[Rod Palmer 🟥 @rodpalmerhodl]

🚨 BREAKING: Three new Bitcoin Core vulnerabilities discovered including a bug allowing attackers to remotely brick nodes.

The vulnerabilities include two medium-severity flaws that could allow malicious peers to exhaust node memory and a third that could corrupt blockchain undo data under extreme conditions. @ProjectLoupe, an AI-powered security initiative at @spiral_xyz, independently identified the vulnerabilities alongside other researchers, including @L0RINC of the #Bitcoin Red Team 🟥.

Fixes have been released in Bitcoin Core versions 29.5, 30.4, 31.2, and 32.1, although certain 32-bit and FAT32 configurations remain vulnerable to the third issue.

[Bitcoin Core Project @bitcoincoreorg]

Bitcoin Core v32.1 was released!
It is available from: https://t.co/WpMuMaejz1
Release notes: https://t.co/hWQTLpfGBl

[Haakon Nilsen aka Norbert ⚡️ Activate CTV + CSFS @bitnorbert]

They want democracy NOW, not democracy every four years.

[Haakon Nilsen aka Norbert ⚡️ Activate CTV + CSFS @bitnorbert]

@CoinbaseSupport Everyone, listen up!

[Haakon Nilsen aka Norbert ⚡️ Activate CTV + CSFS @bitnorbert]

@zherbert @presel_ @FoundationHQ @btcqna . @btcqna is a great support representative and tester, but why would you have him write such an important tool? Is he even a developer?

This stuff is as important as the core crypto in your firmware; you should put your top talent at it, not the customer support department.

[Haakon Nilsen aka Norbert ⚡️ Activate CTV + CSFS @bitnorbert]

@thefaketomato @zherbert @ripsline He has already explained they were in breach of their policy by accident. WooCommerce's redaction feature left your information intact in another database table that wasn't visible in their web tools, and they didn't realize. The attackers got access to that table.

[Haakon Nilsen aka Norbert ⚡️ Activate CTV + CSFS @bitnorbert]

@zherbert @CobraBitcoin You have to understand that WooCommerce isn't written with the threat model you're facing in mind. It's written for hobbyist knitters to sell cute dolls, not bitcoin transaction signers that can get you wrench attacked.

[Haakon Nilsen aka Norbert ⚡️ Activate CTV + CSFS @bitnorbert]

@zherbert @TurnerAnalytics What is your policy around retention of your customer list, including their contact information?

Has the policy in this 2022 tweet changed? If so, was this disclosed? https://t.co/nu9i7auQE3

[FOUNDATION @FoundationHQ]

In addition to self-hosting, we automatically purge customer data from our servers 60 days after your order ships.

Data tied to any #bitcoin company is sensitive. We love our customers but always make sure you and your data are forgotten!

[Haakon Nilsen aka Norbert ⚡️ Activate CTV + CSFS @bitnorbert]

@blockdyor @TurnerAnalytics @FoundationHQ It appears they lied here. https://t.co/nu9i7auQE3

[FOUNDATION @FoundationHQ]

In addition to self-hosting, we automatically purge customer data from our servers 60 days after your order ships.

Data tied to any #bitcoin company is sensitive. We love our customers but always make sure you and your data are forgotten!

[FOUNDATION @FoundationHQ]

ANNOUNCEMENT: SPAM EMAILS HAVE BEEN SENT THAT APPEAR TO HAVE COME FROM OFFICIAL FOUNDATION DOMAINS.

We have traced this back to one or more compromised API keys on Cloudflare, and have already revoked all API keys.

The malicious domain in the spam email has been taken down.

Funds stored on Passport are safe and Passport hardware is not compromised.

We are working nonstop to discover exactly what happened and will put out a report ASAP.

[Haakon Nilsen aka Norbert ⚡️ Activate CTV + CSFS @bitnorbert]

@alistairmilne How can a protocol even "shut down"? Like, if HTTP or SNMP shut down, what would that involve?

[Haakon Nilsen aka Norbert ⚡️ Activate CTV + CSFS @bitnorbert]

@privacymatter21 If he's really that specific about his bitcoin to strangers in bars, he's lucky indeed that he still has the money, and his fingers.

[Haakon Nilsen aka Norbert ⚡️ Activate CTV + CSFS @bitnorbert]

@Pat_McCat Even dumber: @pete_rizzo_ promoting BSV as "Bitcoin".

[Ethan ✨ is on BlueSky✨ Heilman 🐱 @Ethan_Heilman]

> "An attacker with the private key of any of the compromised intermediate CAs could impersonate any website or service."

Uh oh!
Fixes are now out, if you have them, update 'em

https://t.co/chuQ4o70Qr

[Haakon Nilsen aka Norbert ⚡️ Activate CTV + CSFS @bitnorbert]

@secparam Crypto still means cryptography and I will die on this hill.

[Haakon Nilsen aka Norbert ⚡️ Activate CTV + CSFS @bitnorbert]

@Gr8erGoodMining @ToasterMining @RedPandaMining They even use terms like "hash whore".

[Haakon Nilsen aka Norbert ⚡️ Activate CTV + CSFS @bitnorbert]

@Ma1973sk @JoeNakamoto Live by the wrench …

[Haakon Nilsen aka Norbert ⚡️ Activate CTV + CSFS @bitnorbert]

@SatoshiNagonna @BalaiBB So you decide to helpfully tell the world how much he has and in which part of town he lives. Best friend ever

[Haakon Nilsen aka Norbert ⚡️ Activate CTV + CSFS @bitnorbert]

This is a unique opportunity for the UK – they stumbled upon a huge amount of bitcoin and could turn it into a strategic reserve to benefit generations far into the future.

I haven't looked into the current UK government, but I assume they have the required long-term thinking skills and care for its people. Good luck!

[Haakon Nilsen aka Norbert ⚡️ Activate CTV + CSFS @bitnorbert]

@MarinaMedvin This was misreported.

"she never called on Israel to share its defensive bounties, but rather criticized the United States for helping to fund the advanced system and noted that “no such protection has been provided to Gazans against the shelling.”"

https://t.co/MmKCzssWY5