<unnamed>

Public Key

npub160t5zfxalddaccdc7xx30sentwa5lrr3rq4rtm38x99ynf8t0vwsvzyjc9

Profile Code

nprofile1qqsd846pynwlkk7uvxu0rrghcve4hw6033c3s234acnnzjjf5n4hk8gpramhxue69uhhyetvv9ujucnfw33k76twv35hxarjd93hgtn0wfnszxrhwden5te0wpex2mtfw4kjuurjd9kkzmpwdejhgqgdwaehxw309ahx7uewd3hkcqgkwaehxw309aex2mrp0yh8qunfd4skctnwv46qz9rhwden5te0wfjkccte9ejxzmt4wvhxjmcpxdmhxue69uhhyetvv9ujucnfw33k76twv35hxarjd93hgtn0wfnj7mrpde6x2unw94kkj6m994mx2un5v4uq0rrprz

Publishing to

relay.bitcoindistrict.org

relay.bitcoindistrict.org/lantern-mike-vertex

Last Notes

2026-09-07 03:37:18 CEST

- reply

This is pretty cool

2026-09-06 02:58:50 CEST

- reply

Pretty sure that has to do with the way the volatge flows through the chips. Iirc, they're serial on a single board so changing to new work requires flushing the current work. I could be wrong and would defer to @nprofile…cg20

2026-09-03 18:54:42 CEST

- reply

The best part of freedom is concealed in this pic.

2026-09-03 18:54:21 CEST

Have a coworker headed to El Zonte, who wants to say hi?

2026-09-03 14:21:36 CEST

https://blossom.primal.net/acf999f516a50a9500004640cbc49e48aae26bcd6c6beedab57644f3d94fbc0f.jpg

2026-09-02 18:29:32 CEST

If you read anything today. Read this, please.
https://www.vinteum.org/blog/inside-a-vinteum-deep-dive-bitcoin-mining-from-protocol-to-silicon

2026-09-02 17:03:15 CEST

Can't believe @nprofile…gy2r would mog @nprofile…ruq2 like this...
https://blossom.primal.net/02517ea367c18d78b4867651e0c648359024b9dc7f2fef5c657553d2ec2e62fd.jpg

2026-09-01 19:28:37 CEST

Audit and compliance dances for software projects are kinda silly. I can't approve my own PRs because "I" wrote it with Claude.

2026-09-01 15:53:04 CEST

- reply

Ooooooooo hadn't though of Iceberg for mints. That sounds interesting. And channel partners need not know!

2026-09-01 15:52:17 CEST

- reply

But how will you gate the web request for the LN invoice?

2026-08-31 21:30:27 CEST

So maybe we have our own ecash mints that are just author tokens for access (402) to our services. Then you can NFC or chat the tokens to frenz and such.
#nevent1q…l8u0

2026-08-31 21:29:15 CEST

- reply

Digital signatures are the safeguard

2026-08-25 21:38:50 CEST

- reply

Iconic and generous Godly woman who used her wealth and fame to do good in the world and not just enrich herself.

2026-08-25 21:03:25 CEST

- reply

@nprofile…xltm

2026-08-25 21:02:51 CEST

RIP Dolly 😢🫂

2026-08-25 20:49:48 CEST

- reply

Sned pix

2026-08-25 17:07:18 CEST

- reply

Small batch devices aren't cheap. @nprofile…8fv9 is worth the price tag. Might have more devices enabled for it soon. Feel free to clank firmware for your own device, the protocol and apps are FOSS..

2026-08-24 23:03:42 CEST

- reply

Just for plebs. ; )

2026-08-24 22:03:50 CEST

- reply

Trolling with satire.

2026-08-24 22:03:27 CEST

https://delvingbitcoin.org/t/silent-payments-coinbase/2833
https://average-gary.github.io/sp-coinbase-vectors/
https://github.com/average-gary/sp-coinbase-vectors

2026-08-24 20:17:33 CEST

We should repeal 2nd amendment to prevent plebs from owning guns.
@nprofile…5rc8

2026-08-24 19:36:58 CEST

- reply

I hope to meet and never know it.

2026-08-22 13:00:23 CEST

- reply

Thnx. All good for now.

2026-08-22 12:58:52 CEST

@nprofile…xyrw Gunna hit daily buzz with the kids for breakfast. You around?

2026-08-22 12:57:32 CEST

2026-08-22 12:55:56 CEST

- reply

Half cow just acquired.
https://blossom.primal.net/04fd30b39cc3a490887deb71c9f064204c11b7372e5eb94ed48a660efa561ece.jpg

2026-08-17 15:01:23 CEST

- reply

It has it's charm and seems to be front lines for culture/logical war as pockets of competing variety are all over the place. Just glad to be rural with food.
You think the corporate AI espionage will be external or internally executed?

2026-08-17 15:00:07 CEST

- reply

You too bro

2026-08-17 14:27:19 CEST

- reply

You won't see it

2026-08-17 14:23:18 CEST

- reply

Fwiw. Active intimidation is not really effective, IMHO. More of, look fit and capable intimidation.

2026-08-17 03:22:30 CEST

- reply

Physical intimidation is the first line of defense. Looking unassuming or harmless does nothing for deterrence.

2026-08-13 16:26:04 CEST

- reply

It's available on Start9. It's never been easier.

2026-08-12 21:43:02 CEST

- reply

https://ShenandoahBitcoin.club

2026-08-12 21:11:08 CEST

- reply

We'll be buzzing about bitcoin

2026-08-12 19:37:35 CEST

- reply

Join us if you're ever home.

2026-08-12 15:48:08 CEST

- reply

2026-08-12 14:54:17 CEST

- reply

All people won't understand. And that's OK

2026-08-12 14:42:44 CEST

- reply

You can run your own pool

2026-08-12 14:42:21 CEST

- reply

Removing ourselves from bitcoin would be retarded.

2026-08-12 14:38:49 CEST

Join us
https://i.nostr.build/zLQhsKIS6gxVtBPBiQfeT2.jpg

2026-08-11 22:10:34 CEST

Dear Lord, help us
#nevent1q…nqsh

2026-08-11 22:09:53 CEST

- reply

LMAO

2026-08-11 21:16:34 CEST

- reply

But what hashing algo?

2026-08-11 19:58:18 CEST

the mission remains unchanged.
we're replacing the central banks with magic internet money to liberate humanity from under the yoke of fiat.

2026-08-10 16:41:28 CEST

- reply

Oh? Offerings to the fire?

2026-08-10 14:50:16 CEST

New local bitcoiner acquired.
Dude just moved to the area. Paid in Bitcoin at the coffee spot I frequent and they told him about my existence.
Today we finally made contact.
Bullish AF

2026-08-09 14:00:26 CEST

- reply

Yes please

2026-08-09 05:25:49 CEST

- reply

Never been. Quandary peak Colorado

2026-08-09 05:25:33 CEST

- reply

Almost 14k feet here.

2026-08-09 05:25:15 CEST

- reply

Colorado

2026-08-09 05:24:42 CEST

- reply

Will hit you up next I'm in HR

2026-08-08 16:45:47 CEST

- reply

Have only seen him reposting things on X

2026-08-08 16:44:49 CEST

GM
https://blossom.primal.net/a62273d63c9d00e5d1777bf06e336cc25212be7f0af339b714e10af173b39cb1.jpg

2026-08-06 03:14:04 CEST

- reply

Sad but true

2026-08-06 03:12:51 CEST

- reply

As for C. It's common to not discuss publicly details of security issues immediately.

2026-08-06 03:11:43 CEST

- reply

B assumes it was dice rolls and not a USB bug that would allow access to on device REPL which would give access to key material.
If you're compiling firmware, then it's relevant. Idk if released or not implies protection or not.
If you don't believe me, maybe beloved the Foundation CEO who hates CoinKite et al
https://x.com/i/status/2085116068230549791

2026-08-05 21:00:27 CEST

- reply

do you think listeners to RHR would compile their own CC code? that seems likely given listener demographic but maybe I'm off on that.

2026-08-05 20:59:30 CEST

- reply

yet to be discovered is very interesting, indeed

2026-08-05 20:58:19 CEST

- reply

review https://github.com/Coldcard/firmware/blob/2021-01-14T1617-v3.2.2/stm32/COLDCARD/vcp_lockdown.c
vs.
https://github.com/Coldcard/firmware/commit/dac940cc893ace370738c0c4ce3f763036089a8f#diff-b14a0bb021c4ebd7f34d21aae7f7374e894c99008d99a225f14da4cf2fdc7c7e
In pre-4.0.0 firmware, the ckcc_vcp_enabled is set to false.
The 4.0.1 patch on top of 4.0.0 is:
- //XXX/bool ckcc_vcp_enabled = false;
- bool ckcc_vcp_enabled = true;
+ extern bool ckcc_vcp_enabled;
So pre 4.0.0, USB issue does not exist because this value was set to false. In 4.0.1, this is changed from "true" to "false", closing the issue that only appeared in the update from pre-4.
Does that make sense? there is a bug that didn't exist pre-4.0.0 that was introduced in the refactor, that isn't the entropy bug. Matt's guides were for air gap usage, so you would no be impacted by this bug if you followed the guide.

2026-08-05 20:50:10 CEST

- reply

i don't believe it was foreknowledge of the entropy issue. foreknowledge of the USB security that was patched between 4.0.0->4.0.1, yes. which an air gapped guide would have mitigated because no USB usage.

2026-08-05 19:21:37 CEST

- reply

This would be one of those comms moments I was talking about.
#nevent1q…g8as

2026-08-05 19:20:10 CEST

- reply

#nevent1q…m0ns

2026-08-05 19:19:44 CEST

- reply

don't think @nprofile…cd8v knew about entropy
There was a USB bug in this version bump that would not have affected air gap usage (which would have been in the guide, i know because i used them).
Details here on the bug: March 17–29, 2021
https://coinkite.com/historical-disclosures

2026-08-05 19:07:30 CEST

- reply

fwiw, i have yet to see indications of intentional complicity with the "influencers" shilling CC products. I know and have comms with many people that considered NVK a friend up until recently.
from my perspective, CoinKite's CTO is the party with the highest likelihood of intentional malice, followed by other technical leadership at that company.
Nothing definitive but the obfuscation of the author of the vulnerable library that was introduced coupled with some choice CoinKite comms are pretty damning. And then there's the whole blockclock phone home.
#nevent1q…y8fv

2026-08-05 19:03:08 CEST

- reply

looks like there was a USB vuln between 4.0.0 and 4.0.1 that would be referenced to. given USB as the threat vector, an air gapped setup would not be affected. I don't believe he is complicit based on a number of things but this needed some clarification

2026-08-05 17:21:14 CEST

- reply

Where did the screenshot come from?

2026-08-05 17:05:22 CEST

@nprofile…qy52
https://x.com/i/status/2085019024124264569

2026-08-05 17:02:45 CEST

- reply

Clipping to ask on X.

2026-08-05 16:52:56 CEST

- reply

https://fountain.fm/episode/eY7RLVJQmgq9lED7bXuy?t=5645

2026-08-05 16:41:30 CEST

- reply

Onward

2026-08-05 16:41:05 CEST

- reply

It's always darkest before the dawn

2026-08-05 16:40:22 CEST

- reply

At this point, I'm convinced of malice so the podcasts would be the well funded funnel

2026-08-05 03:30:14 CEST

- reply

I have suffered from a severe mistaken identity over similar names... Plz forgive me.

2026-08-05 01:14:47 CEST

🌽
https://v.nostr.build/0wm9uhmgRtxjJcBa.mov

2026-08-04 17:28:18 CEST

- reply

Shhhh don't scare the plebs

2026-08-04 17:27:44 CEST

- reply

Localism rising.

2026-08-04 16:24:07 CEST

- reply

Attempt to obfuscate the origin of the bug. That, combined with other things, imply explicit intention to introduce the vulnerability by at least one member of the coinkite team.

2026-08-04 16:22:01 CEST

- reply

Not quite. But still indicators of an inside job surfacing and being validated
https://blossom.primal.net/641d566b63770c109de89cd8d9559a3e79ef2f8c4ac068d2f88345f3c5e1ddcd.png

2026-08-04 16:20:32 CEST

- reply

2026-08-04 16:20:11 CEST

- reply

Seeming more likely by the minute.

2026-08-04 16:18:56 CEST

- reply

Yes. Confirmed by at least one honest dev. Working to validate the claims independently.
Severely underestimated this as simple negligence. It's fucking malice at this point.

2026-08-04 15:58:23 CEST

- reply

Eh. Paradigms shifting big time. If you know contextually what to prompt for, it's absolutely on par. Do you think security auditors won't be using LLMs?

2026-08-04 15:14:44 CEST

- reply

Hmmmm. Will have to contemplate this. What do you see as the implications?

2026-08-04 15:12:08 CEST

- reply

Wdym? I've not seen much abrasive assholery from calle.

2026-08-04 15:10:34 CEST

- reply

Few undestand this.

2026-08-04 15:08:31 CEST

- reply

@nprofile…6e5s

2026-08-04 15:06:59 CEST

- reply

He founded AnchorWatch (UTXO based insurance company) and is sometime known as the Giggler. I've met him several times and even broke bread with him. He's a wizard with Bitcoin transactions and a joyful man to be around. He's leading a Bitcoin red team using Kimi and other high end models to scan/review load bearing Bitcoin repos for vulns and working to disseminate and patch them.

2026-08-04 15:00:14 CEST

- reply

Download the model for safe keeping.

2026-08-04 14:59:36 CEST

- reply

Confirmed he is covering Sparrow.

2026-08-04 12:36:30 CEST

- reply

@nprofile…wmn8

2026-08-04 12:34:52 CEST

- reply

All the suits in custodians just feel vindicated for not self custodying. They're not selling.
All the bitcoiners either have no sats to sell or migrated funds to new setup. It's catastrophic but not a sell trigger. At least for any significant size

2026-08-04 12:32:59 CEST

- reply

That may be covered in the scans @nprofile…6p2f is doing

2026-08-04 12:25:02 CEST

- reply

yea. found myself debating some lesser Gary on a X space who doesn't understand bitcoin but he's certain it's doomed if the N doesn't GU. and is certain bitcoin businesses will fail because they can't scale. He failed to realize there are successful infra businesses that don't scale but are sustainable. I pointed him to RedHat. Furthermore, he was measuring everything in fiat, so ofc you need to scale scale scale. But we don't need that anymore because we have satsflow. humble profits over time allows for growth and scale.

2026-08-04 04:11:35 CEST

- reply

i'm not sure how'd you eff up dice rolls. you could have biased dice that lowers the entropy some. i don't the exact maths, but one six sided dice roll is ~2 bits of entropy. if the dice is bias to a degree, then that goes down a bit. it would lower your overall entropy some, but if you go in excess of the 100 rolls recommended, you'd still have plenty of entropy.
does that make sense? or am i misunderstanding?

2026-08-04 04:08:18 CEST

- reply

it's bad for health. need to do a detox again. 😟

2026-08-04 04:06:52 CEST

- reply

i've pasted mine to at least two friends during a crash out

2026-08-03 21:32:09 CEST

- reply

that's why you use multiple implementations to validate. you could even use hand maths to validate the entropy.

2026-08-03 21:30:42 CEST

- reply

ask LLM about entropy for X dice rolls of a six sided die to understand if your rolls are sufficient. 100+ times is sufficienct from my maths understanding. passphrase adds additional entropy but only so much as the lenght of the passphrase.
depends on hardware _X_'s source of entropy. true entropy comes from the physical world and needs translated into the digital space. ideally from multiple sources and then XOR'd together.
computers are meant to be deterministic(*ish) so using them as a source for entropy is not ideal.

2026-08-03 15:52:22 CEST

- reply

You didn't aka about single key. You asked how to validate that CC was respecting the dice rolls.

2026-08-02 21:11:36 CEST

- reply

FROST snap uses novel cryptography that removes liability from a single device but introduces some new trade offs. Need to dig in a bit more but will consider taking some time to review.