Laser

Ordinary Christian Saint. Reformed Baptist. Head of Household. On pilgrimage at #ToChristAlone.

Public Key

npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q

NIP-05 Address

Profile Code

nprofile1qqsxft85q406sf4u4wz90cjwlra6wjg2hv08dkatd25822jn5r456jspr3mhxue69uhkummnw3ezucnfw33k76twv4ezuum0vd5kzmqpzfmhxue69uhk7enxvd5xz6tw9ec82cspzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhgqgcwaehxw309aex2mrp0yh8xmn0wf6zuum0vd5kzmqzjv0xf

Publishing to

nostr.bitcoiner.social

offchain.pub

relay.primal.net

relay.snort.social

Author Public Key

npub1vjk0gp2l4qnte2uy2l3ya78m5ays4wc7wmd6k64gw5498g8tf49qtkd33q

Show more details

Last Notes

2026-08-02 13:26:29 UTC

- reply

"Because everything lands in the same hash, one weak source can't collapse the pool"
This is what purely additive (accumulative) entropy looks like.

2026-08-02 13:18:11 UTC

"Your recovery phrase is only as strong as the randomness behind it, so Jade never relies on a single source. Every Jade hashes together:
- Timing from user interaction
- CPU counters
- Uninitialized memory
- The previous state of the entropy pool
- A built-in hardware random number generator
- Entropy from the Blockstream companion app
Jade Classic and Jade Plus add battery readings and multiple camera images captured during boot, and Classic adds on-die temperature. Before any randomness is used, Jade samples raw radio noise and spends a full second hashing over its own output.
The pool works the way Bitcoin Core's does: SHA-512 over the previous state plus every source, the last 32 bytes becoming the new state, the first 32 returned as the entropy requested and fed to the standard BIP39 recovery-phrase function.
Because everything lands in the same hash, one weak source can't collapse the pool."
#nevent1q…w4el

2026-08-02 13:11:23 UTC

- reply

They reported it and Coinkite blocked them.
#nevent1q…pur8

2026-08-02 12:04:36 UTC

I recommend migrating to @nprofile…qxwz for your primary exchange. They have proven to be trustworthy guys who get #Bitcoin and aren't selfish ***holes.
In-house multisig, 2FA account protection, new device protection, and their new send limit feature (Forcefield). Good common sense security you'd expect for a login-based system and nothing else.
No I don't have a promo code. Never have and never will.
#Bitcoin
https://river.com/security

2026-08-02 03:08:49 UTC

- reply

🫠🫠🫠

2026-08-02 02:39:25 UTC

- reply

😂

2026-08-02 02:25:53 UTC

@nprofile…5yt6 are you still available to host Coinkite CTO and entropy extraordinaire DocHex for a #Bitcoin Hardware Security talk?
https://blossom.primal.net/bbe91b729d6493ff584a4a447aaca5a90665d333cd9bbbcb20737991f4bea302.jpg
#nevent1q…2755

2026-08-02 02:16:24 UTC

- reply

(Peter just flipped his LinkedIn to private. It was public about an hour ago.)

2026-08-02 01:57:56 UTC

- reply

They = Coinkite CTO
Peter D. Gray (@DocHex)
[email protected]
[email protected]
NVK referred to him by name a handful of times on X and pod appearances.
https://blossom.primal.net/ae0e2c6e6afa34726bf7f3e33166b9769a795016aef61408f001bc8e96fc5f12.jpg

2026-08-02 01:35:04 UTC

- reply

That won't be good in the least.

2026-08-01 20:08:33 UTC

- reply

Yes.

2026-08-01 19:13:44 UTC

Sparrow allows you to BYOE (bring your own entropy) using dice rolls. 🎲
Using precision casino dice, roll 100 (256-bit entropy) or 200 (516-bit entropy) times when creating a seed in Sparrow by selecting "Manual or dice" on the seed creation screen.
#SovereignStack
https://www.amazon.com/Bescon-Professional-Precision-Corner-Random/dp/B0C3LXSCMJ
https://blossom.primal.net/47ad44fff3d03856672d64f5dd38d4b4feac1766399acc5a44ab8c90254f6b6b.jpg
#nevent1q…5rvt

2026-08-01 18:29:35 UTC

- reply

Using dynamic scripting languages like Python/JavaScript for do or die cryprography... 🪦🪦🪦

2026-08-01 16:59:48 UTC

- reply

No offense!

2026-08-01 16:16:44 UTC

- reply

You think $70M is being consolidated into new wallets for the benefit of noone?

2026-08-01 15:00:54 UTC

- reply

The latter.

2026-08-01 15:00:35 UTC

1. Admit fault for bad entropy code that failed open instead of closed.
2. Suspend all sales on Coinkite, begin internal investigation.
3. Direct all employees not to delete evidence, including their tweets.
4. Step down from Coinkite and OpenSats.
5. Cooperate with authorities, don't leave town.
Take the honorable path, @nprofile…32sk.
#nevent1q…fh2p

2026-08-01 14:51:28 UTC

- reply

Yes it was. Just because someone used a computer tool to search for weak code doesn't mean it wasn't a person.

2026-08-01 14:27:18 UTC

- reply

Precisely.
#nevent1q…cvuv

2026-08-01 12:50:32 UTC

- reply

Random is a concept that applies to man. Like physics and gravity. Who is claiming that they can make a wallet God can't crack? Nonsense.

2026-08-01 12:47:34 UTC

Coldkite founder scrubbing his Twitter. 👀
https://blossom.primal.net/54ba3d10ecfd94769c691f89317bf3eba3831ed4c41b8ff86e0b41f0e68cffec.jpg
#nevent1q…6pm2

2026-08-01 12:44:04 UTC

"and if that randomness isn't available, the app refuses to create a wallet."
🎯🎯🎯
Wallets that are unable to generate strong entropy must fail with a fatal error.
#nevent1q…dswf

2026-08-01 04:04:48 UTC

- reply

Maybe.
#nevent1q…chpu

2026-08-01 03:53:02 UTC

- reply

cc @nprofile…xgga

2026-08-01 01:27:01 UTC

- reply

AI can discover projects with false/pseudo entropy, but AI cannot cause projects to ship false/pseudo entropy.
Coinkite did that all by themselves.

2026-08-01 01:11:48 UTC

- reply

The real attack was social. Coinkite sold us the idea of being "badass bitcoiners" who "use the tools", and people bought into it. Pride before the fall for everyone involved. #Bitcoin Core? That's for old people! We are young and cool. We got too cute as a space. This is the cost.
#nevent1q…4rkl

2026-08-01 01:09:11 UTC

Don't let the Coinkite crew gaslight you.
Coldcard had a silent fallback to false/pseudo entropy IN THE MOST CRITICAL PATH of their firmware.
This was not a "sophisticated AI attack", but (best case) morons larping as edward snowden and succesfully fooling the entire #Bitcoin space.
The real attack was social.

2026-07-31 23:43:51 UTC

- reply

Those hiking boots are iconic.

2026-07-31 21:54:55 UTC

"Bitkey’s 2-of-3 security model is designed to limit the impact of a problem isolated to one key. An attacker would still need access to a second key before they could move #bitcoin from a Bitkey full account."
#nevent1q…3rf7

2026-07-31 21:24:25 UTC

- reply

Jade also viable, although purchasing directly from Blockstream incurs supply chain risk. Able to flash onto generic hardware (M5Stack).
#nevent1q…v4kn

2026-07-31 21:00:22 UTC

- reply

Fundamentally, hardware devices have always had the ability to check and reject poor overall entropy.

2026-07-31 20:47:18 UTC

Coldcard? No.
#Bitcoin Core.
Knots? No.
#Bitcoin Core.

2026-07-31 20:37:59 UTC

- reply

I wonder if people make the NVK -> Luke connection.

2026-07-31 20:27:46 UTC

Laser's #Bitcoin Non-Negotiables.
✅ Accumulative entropy only.
✅ Open source (FOSS) only.
✅ Multisig/multifactor only.
✅ Dedicated hardware only.
✅ Non-scripting languages only.
✅ Core/Blockstream orbit only.
1. #Bitcoin Core setup with #YetiCold on dedicated #Secureblue machine.
2. @nprofile…6av2 Green+Jade on dedicated #GrapheneOS device.

2026-07-31 20:09:17 UTC

- reply

It was a mass hallucination.

2026-07-31 20:08:05 UTC

Stop being cute and just roll the 🎲
#nevent1q…mdpm

2026-07-31 19:29:48 UTC

- reply

It's the same thing. The person sweeping funds exploited bad code, which is identical to what "hackers" do when they "attack" a target.

2026-07-31 19:27:10 UTC

- reply

Very little difference.

2026-07-31 19:15:46 UTC

- reply

A real supply chain attack, orchestrated by intel agencies, could compromise many tens of thousands of households.

2026-07-31 19:14:58 UTC

- reply

Do you know what machine info they use to create a unique identifier?

2026-07-31 19:12:52 UTC

Very possible that a Coinkite dev(s) produced an innocuous weakness into the entropy path and had been watching balances for a long time, before finally acting out the heist yesterday. Or perhaps they used AI tools to discover the weakness, and instead of patching, they helped themselves. Either way, pay attention to employment changes over there. Red flag would be people disappearing to some tropical island. 🏝️
#Bitcoin

2026-07-31 19:00:46 UTC

- reply

Some of us recommend plain ol' #Bitcoin Core / Blockstream orbit setups the entire time.

2026-07-31 18:50:29 UTC

- reply

He's trying to be helpful. You are seething.

2026-07-31 18:45:43 UTC

- reply

Nobody who was on Coinkite is going to be able to sleep until they exit, IMHO.

2026-07-31 18:44:55 UTC

- reply

Not open source does not equal closed source. Coldcard's firmware may not be open for use, but it's open for viewing.

2026-07-31 18:43:00 UTC

Remote theft is far more likely than in-person theft. Prioritize accordingly.
#Bitcoin

2026-07-31 18:05:12 UTC

- reply

Suggest waiting a couple weeks before making conclusions about the future.

2026-07-31 18:04:11 UTC

- reply

BYOE, when it can be verified, is not undesirable.

2026-07-31 17:44:30 UTC

- reply

And not just from NVK, but the entire space. Think how many people laughed JW (and myself) out of the "cool kids club" because CDRs didn't feel cYpHeRPunK enough.
#nevent1q…t4z9

2026-07-31 17:36:11 UTC

I do not recommend leaving #Bitcoin Core/Blockstream orbit for your cold storage setup.
#nevent1q…zywt

2026-07-31 17:31:16 UTC

- reply

Also thinking:
✅ Core/Blockstream orbit only.

2026-07-31 16:00:43 UTC

Laser's #Bitcoin Non-Negotiables.
✅ Accumulative entropy only.
✅ Non-scripting languages only.
✅ Open source (FOSS) only.
✅ Multi Sig/Factor only.
✅ Dedicated hardware only.
1. #Bitcoin Core setup with #YetiCold on dedicated #Secureblue machine.
2. @Blockstream Green+Jade on dedicated #GrapheneOS device.

2026-07-31 15:23:10 UTC

Never trust a scripting language in your #Bitcoin setup. Coldcard uses Python. Specter Desktop uses Python and JavaScript. This is a deal breaker. 🚨

2026-07-31 14:38:06 UTC

- reply

See here.
#nevent1q…umnd

2026-07-31 14:36:44 UTC

Jade's entropy accumulator adapts #Bitcoin Core's approach to an embedded device.
Both use a 32-byte state updated by folding the previous SHA-512 hash output back in, mixing in a counter and fresh entropy.
Core pulls from OS sources, hardware instructions, timing, and events. Jade uses its own hardware sensors like power and temperature, CPU counters, stack data, esp_fill_random, plus user input and camera noise at boot.
I would flee from anything that does not replicate this pattern of accumulative entropy.
https://help.blockstream.com/blockstream-jade/faqs/how-does-jade-generate-my-recovery-phrase
#nevent1q…rlyh

2026-07-31 14:25:10 UTC

Multisig with #Bitcoin Core on dedicated hardware, backed up to CDRs and geographically distributed.
Unsexy. Unpopular. Trustworthy.
JW's YetiCold makes it foolproof.
https://yeticold.com/
#nevent1q…9exd

2026-07-31 14:18:05 UTC

- reply

Pride before the fall.

2026-07-31 14:11:51 UTC

#Bitcoin Core uses OS-level entropy. Relying on language or library-level entropy is massive red flag and should be shamed and shunned across the space.

2026-07-31 14:09:13 UTC

Multisig not optional.
#Bitcoin

2026-07-31 14:08:37 UTC

Timeless #Bitcoin meme.
https://blossom.primal.net/4e0a8ecbf17f6f68ba3bbcb5a033b15a35c8e7f957c42343ab2dae15afe110cc.jpg

2026-07-31 13:00:53 UTC

Every single #Bitcoin company should be triple checking their codebases and ensuring the latest #AI tools are auditing them for each proposed code change.

2026-07-31 12:42:23 UTC

- reply

Yes.
Running Core on dedicated hardware via Secureblue is probably viable.
Just don't install extra stuff.

2026-07-31 12:41:15 UTC

- reply

Rust, Go, CPP, Java, Swift, TypeScript...
Luckily, #AI tools themselves can make such a transition possible.
Most likely, new startups will make better choices in light of the new risk environment, and old companies will slowly die out.

2026-07-31 12:25:52 UTC

Python is a terribly unsafe language to implement firmware in. Rust would be much safer overall, although that ecosystem might still be too nascent to do all the #Bitcoin things well.

2026-07-31 12:24:22 UTC

In software, good integration/unit tests of your most critical path is not a "nice to have".
"Existing review confirmed that the intended TRNG implementation was present in the firmware binary, but did not verify which rng_get() implementation the wallet seed-generation path actually reached across the two submodules."
#Bitcoin
#nevent1q…g07t

2026-07-31 02:08:52 UTC

- reply

👋

2026-07-31 01:08:20 UTC

Consider a dedicated #GrapheneOS device running @nprofile…6av2 Green (installed directly via Obtainium) paired with the Jade Plus.
Green can be configured to forget the Jade Plus, so the install will remain stock once you disconnect.
#Bitcoin #SovereignStack

2026-07-30 18:11:18 UTC

- reply

The client provides parameters into relays. I am suggesting that clients pass a protocol-level parameters to signal to relays that it wishes to reject/drop messages.

2026-07-30 18:09:36 UTC

- reply

Yes I know that looking at messages is not mandatory.

2026-07-30 14:38:46 UTC

I want to disable #Nostr private messages. This should be possible at the protocol layer.
cc @nprofile…cy6q

2026-07-30 13:59:35 UTC

- reply

Only useful thing glycemic load/index ever accomplished was revealing undisclosed starch sugars in HFCS.

2026-07-29 17:55:52 UTC

- reply

Longer colonic residence time increases bacterial fermentation -> higher endotoxin (LPS) absorption -> elevated serotonin, estrogen, inflammation, and metabolic stress. Faster transit keeps the toxin load low.
Auto-intoxication is a process; there is no threshold. The colon is constantly exposed to endotoxin, and during normal motility and expulsion, it is minimized/managed. Metabolic fitness is the underlying mechanism.
Anything less than reliable daily BM (preferably more frequent) is a problem that raises stress hormones and aging load.
Among Turks, three bowel movements a day is the universal habit. When a Turk’s bowels move less than three times a day, he consults a physician.
Among many “primitive” peoples, bowels typically moved after every meal (often 3×/day).
After autointoxication science was abandoned, medicine shifted to a statistical range drawn from surveys of contemporary Western populations: roughly 3 times per day down to 3 times per week is labeled "normal."
In other words, constipated Westerners are told they aren't in order to repurpose their symptomology into more lucrative treatment industries (like colon cancer).
https://blossom.primal.net/970a718d4c5df46eb0d1ef66b7de8a810d7554bcc034550a94bd73143cef5c48.jpg
https://blossom.primal.net/a79a0c202bb7670d2e71816c7687fc6c29f6f6a8fe3265a6fbf92d7576c51a66.jpg

2026-07-29 15:37:47 UTC

- reply

Yes.

2026-07-29 14:49:45 UTC

- reply

Hard life.

2026-07-29 14:45:26 UTC

- reply

Enjoy some icecream, you earned it.

2026-07-29 13:19:17 UTC

You can't be lean or healthy if you aren't pooping 1-2 times a day. 💩
Coffee, eggs, raw carrots, antiseptic mushrooms, trivala tincture, coconut oil, and plenty of natural sugars. ☕🥚🥕🍄‍🟫🥥🥝🍎🫐🍇
Get things moving. If you don't have at least an epic dump after breakfast there is something seriously wrong.
#Peatstr

2026-07-29 12:53:39 UTC

Switching to 2% or even no fat milk can really accelerate fat loss because cream is an epic mass builder, which most gain fat on.
You can skim it yourself with a bottom spout pitcher, or if lazy, I think Alexandre's 2% A2A2 is a good option.
#Peatstr
https://blossom.primal.net/b7fe022bdae53def8e44eb290cc1dc872d4d3cd6156ea3028e32afe9299244a0.jpg

2026-07-29 12:48:00 UTC

1. Audit diet to remove all seed oils, ensure only saturated fat intake from butter/ghee, tallow, cream, and coconut oil.
2. Migrate carb consumption to natural sugars: fruit, potatoes, rice, sourdough.
3. Eat enough animal foods: eggs, ground beef, collagen powder, oysters, liver, shellfish.
4. Get enough sun, walk, and play.
5. Get "in the cut" by reducing total calories just until body begins to burn fat. Dial back fat intake, increasing carbs. Play more.
6. Have coffee with meals.
#Peatstr

2026-07-29 03:14:44 UTC

Imagine how many people are dropping multiple apps as a result of #AI, and it's only going to accelerate. App hyperinflation.
#nevent1q…kfx6

2026-07-29 01:54:05 UTC

The primary source of vain pressure for women comes from other women.
The primary source of vain pressure for men comes from other men.
Intra-sex competition is a much more potent force in sexual selection dynamics than many appreciate.
#nevent1q…2ccv

2026-07-28 23:31:28 UTC

He died condemned for our sin.
He rose vindicated; crowned in glory.
#ToChristAlone

2026-07-28 19:59:33 UTC

- reply

Someone in AZ can top this.

2026-07-28 19:58:32 UTC

- reply

👋🌞
https://blossom.primal.net/26b6f3165936b69c41a1816b39e4354750a08552fc8cadbed6b35024df54f65e.jpg

2026-07-28 18:26:46 UTC

Person: <hair-brained, ridiculous path of inquiry>
LLM: "Yeah, that makes alot of sense."
Person: This thing is... INCREDIBLE. 😮
#AI

2026-07-28 14:59:30 UTC

Let freedom ring. 🎆🎆🎆
#nevent1q…7swr

2026-07-28 14:25:58 UTC

My kids have never had a needle put in them. No vaccihes. They are healthier than the other kids.
Does that surprise you?
#VaccineTemple

2026-07-28 14:22:24 UTC

All the ways they'll give you AIDS. 🌈
#VaccineTemple
#nevent1q…03xm

2026-07-28 04:10:27 UTC

Chopin & Bach @ 528hz 💤💤💤

2026-07-28 02:40:09 UTC

Progressives always shame others into their cause without actually committing to it themselves.
How many #BIP110 coiners are going to dump their #Bitcoin and ape into Luke's airdrop?
#Bitcoin is anti-progressive, ultra conservative money.

2026-07-28 02:36:57 UTC

#Bitcoin conservatism is the only way.
Making protocol changes because we are bored and morally indignant is not a way to build a thousand year money.
#BIP110
#nevent1q…559z

2026-07-28 01:32:32 UTC

A project that's worth watching. I wonder if they'll ever get their BIOS freed so that management engines can be neutered.
#Privacy
#nevent1q…7mkh

2026-07-28 01:24:57 UTC

Dark @nprofile…4k44 was a battery guzzler on #GrapheneOS until I disabled background usage. Much better now.

2026-07-27 23:50:49 UTC

#BIP110 failing proves that the instinct for self preservation is far greater than the desire for revolutions of purity.

2026-07-27 21:02:11 UTC

- reply

Insanely insecure device.

2026-07-27 20:47:45 UTC

- reply

Desktop mode is new. Pixel only for now.

2026-07-27 20:37:18 UTC

- reply

I run Secure Blue on classical desktop, but currently trying to see how long I can run #GrapheneOS using mobile + desktop mode.

2026-07-27 20:13:49 UTC

Many of you are going to get pwned by the inherent insecurity of Linux. 🐧
#SovereignStack
#nevent1q…ew4c

2026-07-27 19:22:03 UTC

Fork around and find out.
#Bitcoin #BIP110
#nevent1q…l976

2026-07-27 18:04:08 UTC

- reply

You can spend alot of money on a bad bed.

2026-07-27 17:50:14 UTC

#BIP110, a project for bored people channeling their liberal activism, simply does not meet that threshold.
#nevent1q…juw5