Dweeb Duncan

Bitcoin, NOT cRyPTo⚡

[Dweeb Duncan @DweebDuncan]

I dont see why everyone is having so much trouble.

Coldcard has perfect entropy if you shoot where you are supposed to and weigh each piece after.

[Dweeb Duncan @DweebDuncan]

@BitPaine @zndtoshi Using mine for entropy by "shooting here" and weighing each piece after.

[Dweeb Duncan @DweebDuncan]

@RichardDias_CFA We are suffering thru boomer's komodo stories each week. How high until Keith cant afford?

[Dweeb Duncan @DweebDuncan]

@JoeyTweeets Are those his dice rolls in the reflection?

[Dweeb Duncan @DweebDuncan]

@JoeyTweeets Is this guy going to run for politics or what?

[Dweeb Duncan @DweebDuncan]

@gegelsmr4 I didnt know peter could jam

[Bitcoin Policy Institute @bitcoinpolicy]

We made a short visual explainer to help people understand the Coldcard bug, and what it means for the security of affected wallets.

Bitcoin's entire security model depends on a user's ability to select astronomically large numbers from a truly random set.

If you imagine every possible Bitcoin private key as individual atoms, when a private key is generated properly, the pool of possibilities is so large that it's like an attacker is hunting for one specific atom hidden somewhere across 2 billion galaxies. No classical computer could ever search that many possibilities.

Unfortunately, affected Coldcard firmware drew its seeds from a much smaller, more predictable pool. If every possible Coldcard private key was an atom, the possible set of keys would only be about the size of a large virus. In comparison, a standard computer could work through that space in just a few hours.

Our video helps visualize what this difference looks like, we hope this is helpful for everyone to establish the importance of true entropy in key generation.

We are deeply sorry for anyone who lost funds to this bug. We know several people that were personally affected, including members of the BPI team. Losing funds after working hard protect your wealth is extremely difficult.

We are developing a set of policy reflections based on this vulnerability that we hope to publish as soon as possible.

[Dweeb Duncan @DweebDuncan]

@UncleCheeki @kinetic_finance @KLoaec @giacomozucco Even human-composed pattern passphrases will give enough entropy with enough characters, unless its linkin park lyrics or something stupid.
ExamplePassphrase!AnythingWillWork69420DuDuDuMaxVerstappen~!Etcetera-YaKnow?

[Clay Garrett @clay_garrett]

1/ During our investigation of the Coldcard drain yesterday, we identified an unusual pattern in the sweeps. That pattern led us to a hypothesis that has since been confirmed: the operator used a paid account at a well-known blockchain-services provider to query the source addresses and perform other related activity during the sweeps.

[Dweeb Duncan @DweebDuncan]

@edskii79 @COLDCARDwallet @BTCtreasuries Just don't bother wondering. Move your funds to new seed generated elsewhere.

[Dweeb Duncan @DweebDuncan]

@BlackL_ion @Pato77781O bc1qq85v2c926eg6pgxhwp6q7lf6cnsz80qs3fcu9r

[Dweeb Duncan @DweebDuncan]

@Pato77781O @IsaakNieuweton @COLDCARDwallet @BTCsessions A whole lot of pleb-sized utxo's smh. I'm sick.

[Dweeb Duncan @DweebDuncan]

@LangmanVince In all the medical journals safety studies she would be treated as unvaccinated because its less than 14 days since her last dose.

[Dweeb Duncan @DweebDuncan]

@KEriksenV2 @justfoodreview

[Dweeb Duncan @DweebDuncan]

@Verstappenn_ not interested in soccer

[Dweeb Duncan @DweebDuncan]

@midwestbitcorn @Strategy Sell them. If you think Strategy is "milking" you, then you have no idea what you own.

[Dweeb Duncan @DweebDuncan]

@MV33Racing

[Dweeb Duncan @DweebDuncan]

@iFightForKids Debasing the money supply

[Bit Paine ⚡️ @BitPaine]

this is what you’ve been waiting for.
don’t fuck it up.

[Dweeb Duncan @DweebDuncan]

@JoeyTweeets I didnt know he was my premier until you posted this lol