Bitroot

www.bitroot.me

I architect self-custody security for Bitcoin holders. Every situation is different - your holdings, your threat model, your setup.

Public Key

npub1rhdu208t6vh03vswled09h65upr9ah9mlcz8lg9e67sdvk0aa6jq427zgk

NIP-05 Address

[email protected]

Profile Code

nprofile1qqspmk798n4axthckg80ukhjma2wq3j7mjaluprl5zua0gxkt877afqprpmhxue69uhkx6r9veehgu3wdehhxarjxyhxxmmdqyf8wumn8ghj7ur4wfcxcetsv9njuetnj420kz

Publishing to

chefstr.nostr1.com

purplepag.es

relay.primal.net

Author Public Key

npub1rhdu208t6vh03vswled09h65upr9ah9mlcz8lg9e67sdvk0aa6jq427zgk

Show more details

Last Notes

2026-08-01 07:53:52 UTC

- reply

Thanks @nprofile…tq4t 🙂
The answer is here in the article of @nprofile…uhrp 👍
https://blossom.primal.net/ef8b6d9209584a38d3ede1dbb8cc1ee36948021f350007a5e551f837ff1af08b.png

2026-07-31 21:18:19 UTC

- reply

@nprofile…tq4t
https://github.com/coldcard/firmware
https://blossom.primal.net/13d97d3684b8b06f17cc61e9476cd5c2e75743d392ed062c722d7c328e8c9598.png

2026-07-31 18:53:42 UTC

- reply

Oh I see. Its not open source since 2020.

2026-07-31 17:15:34 UTC

! Dont trust, verify!
We need to review code!
Almost 600 bitcoin was stolen from @nprofile…22gk Bitcoin hardware wallet ‘Coldcard’ users. Seeds generated by the wallet simply didn't have sufficient entropy. That's why we need to review open source code! That's the entire point of open source code for Bitcoin.
https://blossom.primal.net/392c81832aceb81edd754c14b70b145fda1e087893661ecd190fa1175347d4fa.png

2026-06-04 13:47:28 UTC

I'm running a session for people who want to keep their Bitcoin in self-custody.
What we're covering:
1. Hardware wallet mastery: Bulletproof seed generation and backup strategies.
2. Threats that come with self-custody: Not directly in your control, but absolutely your problem if you ignore them.
WHEN: 28th of July, 6:30 PM
WHERE: @nprofile…3gry
Get a ticket here: https://www.cyphermunkhouse.com/events
(First time visitors can join for free 🙂)

2026-04-21 07:29:43 UTC

- reply

😆😆😆

2026-04-19 09:47:55 UTC

Bitcoin Security Info: Why to Never Sell Forked Bitcoin
Imagine the situation in which Bitcoin just got forked. Now everyone has two versions of bitcoin associated with their wallet. It seems tempting to sell the one which seems worthless in the future but is currently still traded for a reasonably amount of money.
The problem is called "the replay attack." Here’s how the attack works: when you sell you have create and broadcast a transaction to sell your forked coins. This transaction is signed with your private key. The big issue is that this transaction doesn't say which version of Bitcoin it's for. The person who buys your forked coins can take that exact same published transaction and broadcast it on the original Bitcoin network. Since the transaction is signed correctly, the original Bitcoin network accepts it, and your original coins get transferred to the buyer too. You just lost your original Bitcoin by accident.
There is a solution to it, but that's not in your hands. Both chains (not only one) need to have a marker which makes transactions unique between different chains. For now just think of it like adding a special watermark to a check for one bank that the other bank won't accept. This "marker" is a technical change that the developers of the forked coin must build into their system. It makes it so any transaction for the new coin is automatically rejected by the original Bitcoin network. If this is the case, you need to make a code analysis before you sell the bitcoin fork.
Some people think you can taint your UTXOs, but this is not protecting you at all from the replay attack. The idea of "tainting" is to make a small test transaction first to somehow separate your coins, but that test transaction itself can be replayed, so it doesn't work.
Even sending the bitcoin which you want to keep to a brand new wallet first doesn't protect you from the replay attack!! The attacker just replays that transaction too, and now both sets of your coins are in your new wallet, still stuck together.
@nprofile…v6rc @nprofile…egyh
Could you build in checks and warnings for known forks without replay protection?

2026-04-09 16:52:21 UTC

- reply

Dont we have a platform which doesn't require registration via email to pay some sats for articles?

2026-04-08 17:55:44 UTC

- reply

I have tried it. It's a useful little app 🤓
#nevent1q…cwuy

2026-04-02 09:50:13 UTC

- reply

🤣

2026-04-01 16:08:51 UTC

Someone sent me a serious stack of sats a few hours ago. Whoever it was - thank you! 😎 Always very appreciated! 🙏🧡

2026-03-30 14:26:21 UTC

A Privacy Loophole When Installing @nprofile…c5de on a Pixel
For anyone serious about de-Googling their life, you need to know about this. I've seen privacy concerned people overlook a crucial step in the GrapheneOS installation process that creates a direct link to Google.
The Step: On a Google Pixel, before you can unlock the bootloader, you must enable "OEM unlocking" in the Developer Options.
The moment you toggle that setting, your phone makes a network request to Google's servers.
Google receives that request and can see your IP address. If you're doing this from your home network, an IP tied to your name, you've just created a digital fingerprint linking you (and your location) to that specific device's serial number before you even wiped it.
Google now knows that 1) the person at your IP address is in possession of that specific Pixel phone, and 2) that you intended to modify its software!!!
How to Mitigate:
Use a trustworthy VPN, or preferably, public Wi-Fi (like a café) that is not associated with you.
https://blossom.primal.net/d5d68a3474d642c4fc329a1517ba5ee0707cb5431dd11d4cefc5dcbe373e0b7c.png

2026-03-23 11:00:40 UTC

- reply

Cool! Many thanks @nprofile…ucu2 @nprofile…q32z @nprofile…vysa
I conclude from all your replies that:
🔸As a developer, you should verify the open-source code by:
1. Checking how the k value is generated. For any unique transaction, you should always get the same k value (Note: this will never happen after broadcasting the first transaction. Youll never get the exact same transaction again). For any different transaction, you should always get a different k value. (Note: E. g. Trezor uses RFC 6979 for generating deterministic k values.) This completely eliminates the risk of accidentally reusing a k value!
2. If code check passed, hash the downloaded firmware to confirm its integrity.
🔸Non-developers or ultra-paranoid users can perform a "signature test" against other devices. Sign the exact same transaction from two devices and compare them; the signatures should be completely identical.
🔸For ultimate protection that doesn't require verifying every update, use a multi-sig setup with hardware wallets from multiple manufacturers.

2026-03-22 14:53:09 UTC

- reply

Thank you - that makes sense. Do you know of any tests that run on wallets to check if they are corrupted?

2026-03-22 11:44:46 UTC

I have a security question that has been bugging me.
When a wallet broadcasts a Bitcoin transaction, we trust it's only sending the signature and transaction data. But how can we be certain that fragments of the private key aren't being secretly embedded in the broadcast over time?
For example, could a malicious hardware wallet manufacturer design a device that, after many transactions, allows them to reassemble the bits and know the private key?
Has anyone ever done a public test where the same seed phrase is used on different hardware wallets (like @nprofile…22gk @nprofile…vysa, Trezor @nprofile…q32z, @nprofile…enut) to sign the exact same transaction?
If the resulting signatures are identical, would that be definitive proof that both devices are performing the standard, non-corrupted signing process?

2026-03-20 18:10:39 UTC

- reply

:) What are you building?

2026-03-17 09:14:10 UTC

- reply

🤣

2026-02-11 17:33:59 UTC

- reply

Looks like a @JPMorgan bathroom!!! Haha...

2026-02-08 13:23:24 UTC

Another real story, based on real events in the finance and tech world. Names, companies, and details have been changed.
Title: Modern Architecture of Prison
On Tuesday morning, Dylan got ready for another day at the office. She followed the same habit she had for years: wearing the same clothes as always - jeans and one of two 'office' hoodies. Dylan couldn't be bothered to think about how to dress for the office and definitely didn't want to spend her money on clothing. Her colleagues assumed she had multiple versions of the same hoodies, and she let them believe it.
Once ready, she made her way to the office. She swiped her card at the door of the clinically looking entrance hall and found a space in the open-plan office. As usual, the fluorescent lights hummed a monotonous tune, the official soundtrack to Dylan's five-year sentence at 'Black Solutions'.
The hoodie she was wearing today, with its bold, orange Bitcoin logo, was her small, silent rebellion. It was like a little flag planted in corporate soil, a reminder that a world of decentralised, voluntary value existed beyond these corporate walls. A world she believed in. A world she was actively helping to create, while accepting one paycheck at a time from Black Solutions. At least, she thought, until she paid down the loan she'd taken out for 'home furniture' a few years ago - just after Michael Saylor announced he would leverage the fiat system to buy Bitcoin for MicroStrategy.
Today, her manager called her into a team meeting. They had secured a new contract for a project called 'Titan', a new project for a US bank. "Dylan," said the manager, David, gesturing to a seat. "Glad you could make it. We're excited to use your expertise for this project."
A man from Titan, a senior VP named Thomas, began a presentation. "Our customers need to be protected," he stated, his voice flat and cold. "They are moving increasingly large amounts of funds outside the regulatory space. We require an automated solution." A slide appeared on the screen. At its heart was a module: "Financial Transaction Monitoring & Flagging System."
Dylan's blood ran cold. David beamed at her. "Dylan, you'll be leading the development of the AI agents. We need your expertise in building resilient, autonomous systems."
Thomas from Titan looked directly at her, his gaze dropping from her face to the orange logo printed on her hoodie. A flicker of something - amusement? - crossed his features before being smoothed away. "Your agents," he continued, "will need to identify, analyse, and recommend for immediate blockage any transaction originating from or destined for known blacklisted accounts, as well as flag suspicious patterns in real-time."
Dylan believed in censorship-resistant money, in the idea that a transaction, once broadcast, was final. And she was being asked to build the digital equivalent of a border guard, an AI sniffer dog trained to hunt down and destroy the very thing she held sacred.
Dylan looked at the screen and at the expectant faces around the table. She looked down at the orange Bitcoin Logo on her hoodie, a symbol of freedom in a room full of architects for a new kind of prison. The project was starting next week.
Dylan nodded slowly, the motion mechanical. "Of course," she heard herself say. "We'll get on it."
The humming of the lights seemed to grow louder, filling the space in her mind. As she stood to leave, she realised the entry to prison was the debt. Her loan had been the first wall, and every compromise since had been another brick, mortared with fear and wrong rationalisation. @nprofile…dz72

2026-02-03 14:23:35 UTC

- reply

Or if the government confiscates your precious metals again and threaten to jail you otherwise...

2026-02-03 12:48:11 UTC

Does anyone has a link a German translation of the book "Fiat Food" by Matthew Lysiak?

2026-02-03 12:43:12 UTC

People think Bitcoiners are taking huge financial risks, when it's the opposite. I'm terrified of what's happening in the world, and I know Bitcoin is the asset that will protect me, there is no better asset to own.
If you're the most risk-averse person on the planet, you should only have Bitcoin. If you're still worried, run a node, and if you want absolute certainty, run a few miners to give Bitcoin heartbeats. 🧡🧡

2026-02-01 16:55:32 UTC

- reply

I believe in Bitcoin the same way I believe in evolution.

2026-01-30 17:28:08 UTC

- reply

https://blossom.primal.net/c2521d52cbd7f0aaf846819bfffdb28d5f3b1217c1c247dfe4cb2a8689f68c6e.mp4

2026-01-30 14:36:03 UTC

- reply

I guess Bitcoiners have an higher threshold for frustration... So they can bundle up their energy to rebel more 🙌🙂💪

2026-01-30 13:06:57 UTC

- reply

Oh cool - I'll check him out :-) Thanks for sharing the name.

2026-01-30 13:05:18 UTC

- reply

Yes, the "Bullshit Jobs".

2026-01-30 13:01:36 UTC

- reply

Private giant close the the money printer (government)

2026-01-29 18:01:39 UTC

This story is based on real events in the finance/tech world. Names, companies, and details have been changed to protect everyone involved. I used AI to make it more entertaining. Just so you know. 🙂
The email from Finance landed with the soft chime of opportunity: "Project Genesis - £2.8M Approved." Alistair stared at the screen, the numbers swimming before his eyes. 2.8 million pounds. For agentic AI. He leaned back in his ergonomic chair, the one they'd bought during the "Quantum Leap" restructuring two years ago, and let out a slow breath.
His team of six, huddled in the designated "Innovation Pod" (a glass box with a dying ficus), looked to him for direction. They were the "Agentic AI Research Division," a title that sounded impressive until you remembered they'd never actually built an agent.
"So," said Priya, their lead engineer, breaking the silence. "We have the money. What's the business problem we're solving?"
Alistair felt the familiar knot tighten in his stomach. This was the ritual. The grand inversion of how things were supposed to work. The board, seduced by white papers and breathless articles about "autonomous digital workforces," had allocated the capital. Now, it was on them—the tech team—to reverse-engineer a reason for its existence. It was like being given a coffin and being told to find a worthy corpse.
"We're exploring the frontiers," Alistair said, the corporate-speak tasting like ash in his mouth. "The mandate is to research and develop a proof-of-concept for an agentic system that can... uh... dynamically optimize business workflows."
Priya didn't blink. "Okay. Which workflows? For which client?
And there it was. The question that could not be answered. They had no clients. They had no workflows. The ROI was a fictional number in a PowerPoint deck that had secured the funding. Their job wasn't to solve a problem; it was to build a problem sophisticated enough to fit the solution they were now forced to imagine.
For the next three weeks, the Innovation Pod became a factory for problems. They brainstormed. They whiteboarded. They drank endless lukewarm coffee. They came up with "Agent-based supply chain reconciliation," "Autonomous customer sentiment analysis," and "AI-driven contract lifecycle management." Each idea was a magnificent, gleaming edifice of jargon, built on a foundation of nothing.
They finally settled on "Nexus," an agentic system that would supposedly manage complex, multi-departmental project dependencies. It sounded plausible. It sounded expensive. It sounded like something that could burn through £2.8 million in research and development without ever needing to prove its worth.
Alistair presented it to the steering committee. He used words like "synergistic," "paradigm," and "cognitive orchestration." He showed them a slick UI mockup that their one designer had whipped up in a week. The UI was a lie, a beautiful, interactive fiction. The agents it depicted were lines of code in a git repository that didn't exist yet.
The board loved it. They approved the next tranche of funding for "Phase 2: Agent Simulation."
That night, Alistair stayed late. He walked through the empty office, past the desks of the "Quantum Computing Team" (who were now the "Blockchain Synergy Group" after the last company reshuffle). He thought about the tax money that flowed from his paycheck into the government's coffers, only to be routed back to them as grants for initiatives like this. It wasn't a company; it was a money laundering operation for incompetence, a perfectly circular system where public funds were transformed into private salaries for solving problems that didn't exist.
He sat back down at his desk and opened a new terminal window. He typed mkdir nexus_project and hit enter. The cursor blinked on the empty line, a tiny, digital heart waiting for a pulse. He had the money. He had the team. He had the mandate. All he needed now was a business case.

2026-01-24 15:33:13 UTC

- reply

Strong lifting skills create strong minds 🙂 💪

2026-01-24 15:20:44 UTC

And the next service 😔 Venice AI isn't available to UK without surveillance either...
https://blossom.primal.net/b954abe1a502e7eaee48ffb86bef0764a999817010d3f9a3289cb0077d00cb37.jpg

2026-01-23 15:47:39 UTC

- reply

Yes that's an option 👍
It would be easier for them to use the store, every additional step is an adoption barrier 😶

2026-01-23 15:17:27 UTC

Currently traveling.. So I'm visiting many new places including gyms. This super cool gym was happy to try accepting bitcoin payments 🧡 and received their first payment today! 🙌
Unfortunately, @nprofile…jv3w seems to be blocked by Apple and Google Store in the United Kingdom👎 Can we do something about that?
We instead downloaded @nprofile…p5z2, worked fine - only the channel size management is not ideal.
https://blossom.primal.net/573f8ceb53667e2312457c212e0c540860c609f2c0e86063717d5ec8645dc633.mp4

2026-01-20 12:01:51 UTC

- reply

Thank you for coming 🧡🧡🧡🤗

2026-01-16 21:12:31 UTC

Reminder for everyone who wants to join the next online session titled "Demystify Bitcoin - The History of Money"
We will start at 10 AM GMT!
(Saturday, 17th of January)
See you 🙌🧡
Join here
https://talk.brave.com/x2n1h_lCIV2zk20xWmMgrqcqd4Nto7MlM5cyr5C55D4

2026-01-15 21:54:08 UTC

- reply

Amethyst has a button called "edit", but seems it doesnt update the post 😔

2026-01-14 20:26:39 UTC

- reply

Yes I saw it 🫣 typo! Unfortunately, I can't edit it.

2026-01-14 17:09:18 UTC

- reply

Correction:
The time is 10-11 GMT! (Not GST)

2026-01-14 15:59:49 UTC

Hi,
Please feel free join the next online session this weekend! 🧡☀️
Title: Demystify Bitcoin - The History of Money
When: Saturday 10AM - 11AM GST
Where: Decentralized :) just click the link: https://talk.brave.com/x2n1h_lCIV2zk20xWmMgrqcqd4Nto7MlM5cyr5C55D4
We'll talk about the story of money - from the first gold coins in ancient Lydia, to the inflation problems that hurt the Roman Empire, the crazy hyperinflation in Weimar Germany, Nixon's big 1971 decision that created our modern money system (slavery system), and how Satoshi Nakamoto's pushes back against it all. This session also uncovers the hidden problems in today's money system: how it makes the rich-poor gap bigger and quietly eats away at what your money can actually buy.
!!! To protect your privacy, please avoid sharing your real name, keep your camera turned off, and refrain from disclosing any personal or sensitive information during the session. 😊!!!

2026-01-06 20:22:49 UTC

- reply

Meanwhile, feel free to look into the slides :)
https://bitroot.me/self-study.html

2026-01-06 20:22:06 UTC

Download Slides: "21 Million Bitcoin?"
https://bitroot.me/self-study.html
Here you can slides the slides from my talk titled "21 Million Bitcoin?", which I have presented at @nprofile…5dnm , @nprofile…f2j9 and in a recent online webinar.
The supply cap is often cited, few understand the technical and social safeguards. I walk through parts of the Bitcoin code and show how consensus rules are enforced by nodes, miners, and Bitcoin holders, demonstrating that no single entity - and yet everyone collectively - controls the bitcoin supply!
@nprofile…tlj9

2026-01-03 13:22:40 UTC

- reply

😁 it's quite useful to have a word for it. People are more receptive to stopping verschlimmbessern when they hear that it's actually a recognised mistake.
Very happy to share the slides. Will share a link here on nostr later today.

2026-01-03 10:51:35 UTC

- reply

😁😁😁 💜

2026-01-02 16:44:17 UTC

Please feel free to join my talk: "21 Million Bitcoin?"
When: Tomorrow morning - Saturday, January 3rd - at 10:00 AM GMT (ending at 10:30)
I'll walk you through parts of the Bitcoin source code to explain exactly how the supply is capped at ~21 million BTC.
We'll also cover why this cap cannot be changed (people have tried before!).
To protect your privacy, please avoid sharing your real name, keep your camera turned off, and don't share any personal sensitive information about you. 🙂
Just dial in here:
https://talk.brave.com/x2n1h_lCIV2zk20xWmMgrqcqd4Nto7MlM5cyr5C55D4

2025-12-24 11:41:15 UTC

BitRoot is soon launching sales of easy-to-use Bitcoin home miners based on the open-source NerdQAxe++ (rev. 6.1).
These are your continuously running lottery tickets – they work quietly 24/7, giving you a genuine chance to win the full Bitcoin block reward (currently ~3.125 BTC + fees), all while helping keep the Bitcoin network decentralised and strong. No need for huge industrial setups – just plug in and run from home!
Two simple air-cooled models at launch:
1. Magpie Basic Model:
Super silent and compact, with a premium low-profile copper cooler – perfect for running in your living room or office without any noticeable noise.
2. Magpie Performance Model:
Upgraded with powerful dual fans, custom airflow guides, and premium thermal paste for more the mining power and better lottery odds 😁
The photo shows work in progress on our first Performance prototype – it's coming together beautifully!
In the future, we also plan to offer advanced water-cooled models for even higher performance and whisper-quiet operation.
Pre-orders opening soon – stay tuned 🙌🧡
https://blossom.primal.net/60c3d77efface5091da9d5ecd81745b4038d0caca54a4ca42046c937ff118a40.jpg

2025-12-04 20:46:10 UTC

- reply

😃🙌

2025-12-04 18:31:16 UTC

- reply

Nice! 👍🙂

2025-12-04 14:28:38 UTC

Just gave my first webinar last week on Bitcoin’s core mechanism - had such a lovely audience! 🧡 So I’m doing more!
The next one will be on January 3rd: I’ll explain how Bitcoin’s supply is capped at 21 million.
It’s free - check out my site and register :)
https://bitroot.me/group-sessions.html

2025-12-04 10:18:51 UTC

- reply

Good catch, its not by jack. Its still a good service.

2025-12-03 15:18:03 UTC

Cool service to get a VPN and eSim:
https://lnvpn.net by @nprofile…nj96
- No KYC
- No Email
- No Account
- Instant Delivery
Payments accepted:
Bitcoin, Lighting, Monero and more 🧡
I have tested it for multiple countries 👍
https://blossom.primal.net/0989b0d11f4dca1e82e44b0fbcac3088d1aaf48501485602becfc7ed5e9e5cda.jpg

2025-11-28 13:35:58 UTC

This is the statue created by @nprofile…9828 to honor Satoshi Nakamoto, forever anonymous. In his hands he holds his square heart: the gift he left for humanity.
It beats steadily… and every time a new Bitcoin block is mined, the entire statue glows in radiant color. A silent, beautiful celebration for every single block.
We are all holding that heart now. ₿ 🙂🧡
https://blossom.primal.net/187e52d366ee2c44038212a9a8918263a170780bfd32f0c2cb8624bc49729658.jpg

2025-11-23 10:14:12 UTC

What a beautiful representation of the Bitcoin Block History 🙂 by @kitchen Mishap
https://blossom.primal.net/f8284a96ffac228d8173607b2af52ddb5394bfaf276e6b0bf882ff7dd0c0b5d7.jpg

2025-11-22 20:24:32 UTC

https://blossom.primal.net/0e4a4c2419befcd75453e70c451335e8b3c1b12ccc59a30b53500e0e49310066.jpg
https://blossom.primal.net/e3bc639e9fdfa026c553280eebbe90acfdda33470382fada8909013df32a5a8c.jpg

2025-11-20 11:40:20 UTC

- reply

🤣🤣🤣

2025-11-09 22:25:38 UTC

- reply

😄🤩

2025-11-09 15:28:23 UTC

- reply

¯\_(ツ)_/¯

2025-11-02 12:57:51 UTC

https://blossom.primal.net/0dffaf8c7904d6293f8f26333f18965ca115fe73bf65c6fdabb16b2d19952b57.jpg