bootlace

proof of work, please audit and report findings: https://github.com/bootlace-dev

#opentowork

Public Key

npub1e94hqt3fuu7rvy9rpl85h3339vtn8psgewq4u05r7q4nup2kwp4q0flgay

Profile Code

nprofile1qqsvj6ms9c57w0pkzz3sln6tcccjk9enscyvhq2786plq2e7q4t8q6spp4mhxue69uhkummn9ekx7mqpzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhglg7q02

Publishing to

Author Public Key

npub1e94hqt3fuu7rvy9rpl85h3339vtn8psgewq4u05r7q4nup2kwp4q0flgay

Show more details

Last Notes

2026-09-10 23:47:16 CEST

- reply

Thank you. I added vulnerabilities. Click alby_hub here: https://bootlace-dev.github.io/binwatch-rs/

2026-09-10 02:18:53 CEST

- reply

Working on that tonight... :(
Also, setting up new separate laptop logins for use for high-value tasks only.
Tell a family, tell a friend.

2026-09-10 00:53:36 CEST

- reply

my side-project vibe-coding attempt, please let me know what your llm thinks about it, thanks:
https://bootlace-dev.github.io/binwatch-rs
#nevent1q…6h9z

2026-09-09 18:45:59 CEST

- reply

my new side project, filling a hole, audits and suggestions welcome!
#nevent1q…qamq

2026-09-09 17:57:54 CEST

- reply

I feel your fun!

2026-09-09 13:40:25 CEST

- reply

Re-published because in my primal web app, readme md file name was autolinked to a Moldova (md) spam squatter site. 😞

2026-09-09 13:16:40 CEST

- reply

My case, in point: https://github.com/bootlace-dev
I've been in the software industry for years, but I'm not a dev.
I never saw a line of the code in those bootlace-dev GitHub repos. I've never written a line of rust ever in my life.
My LLM calls me "post-syntax".
Though, I am spending many millions of tokens on recursive asymptomatic security, code quality, and ux audits, that is, audit and fix in cycles until a couple of additional audit rounds say "no more findings".

2026-09-09 04:59:09 CEST

- reply

See my new experimental binwatch:
#nevent1q…f00h

2026-09-09 04:16:41 CEST

- reply

Thanks for your refreshingly actionable feedback. Updated: https://primal.net/e/nevent1qqsqggql27dvlhlxvpagsyhglqjtds06gjr48cdwrkwve5xf2aarhqcj66522

2026-09-09 02:08:18 CEST

- reply

My alter ego running a new experiment. Suggestions welcome.
#nevent1q…7l9c

2026-09-09 00:10:53 CEST

- reply

please add: https://github.com/bootlace-dev/pipek1/releases/tag/v0.0.1-rc0

2026-09-08 23:48:13 CEST

⚡ REPLACE PGP WITH BITCOIN & NOSTR: INTRODUCING PIPEK1
Drop-in GPG replacement using Bitcoin BIP-85 keys for authenticated stream encryption, BIP-340 Schnorr release signing, and Git commit verification.
🚨 THE PROBLEM:
The recent 4,000 BTC Liquid Network coordination incident exposed the fatal operational friction of mixing Bitcoin cold custody with legacy PGP keyserver baggage.
Meanwhile, as cryptographer Constant noted regarding raw Nostr master keys:
"If you leak the root key, all you can do is cry."
🛠️ WHAT PIPEK1 DOES:
• 🗝️ BIP-85 Subroot Isolation: Derive daily operational signing and encryption keys directly from your Bitcoin cold storage (App 128002'). If your laptop key is compromised, your cold master seed is never touched.
• ✍️ Git Commit Verification: Sign Git commits and release archives directly with your Bitcoin/Nostr keys (pipek1-git-shim). Zero GPG daemons, zero smartcard driver friction.
• 📦 Streaming Encryption: Authenticated multi-gigabyte ISO and file encryption that breaks through Nostr NIP-44's 64 KiB ceiling.
• 🛡️ Zero Daemons & Zero Keyrings: Pure Unix command-line filter (cat data | pipek1 ... > out). Zero background sockets, zero daemon memory state.
• 🔒 Zero Release of Unverified Plaintext (RUP): Spool-and-verify cryptographic boundary. Corrupted or tampered data is wiped instantly before downstream pipes can read it.
• 🧠 Bounded Memory Invariant: Strictly <= 16 MiB RAM bound across arbitrary multi-gigabyte payloads via encrypted ChaCha20-Poly1305 disk spooling.
• 🎲 Hybrid Physical Entropy Hedging: Mix physical coin flips or dice rolls into ephemeral stream keys (--entropy-fd) to neutralize backdoored CPU TRNGs and VM snapshot collisions.
• ⚖️ 100% Permissive MIT Open Source: Zero proprietary dependencies, fully auditable, and unencumbered for the sovereign developer community.
📜 VERIFIED CRYPTOGRAPHIC DELEGATION:
Mutual cross-attestation between Master Root Identity npub1e94hqt3fuu7rvy9rpl85h3339vtn8psgewq4u05r7q4nup2kwp4q0flgay and Operational Child Key 0 npub1mvlht4wj3lvfmw96qxakaln862r27nn7z84ak089zjuvavkppeeq79a4j7 is verified and committed to the tree.
📦 INITIAL PROTOTYPE RELEASE (v0.0.1-rc0):
Static Release Binary SHA-256:
7a92cebc4f91fcc103f00731292a95f9f55a706ec9a1d170754a24a79522dd5d
Detached Release Signature (BIP-340 Base64):
UEtTRwFqoH7f2z911dKP2J24ugG7bv5n0oavTn4R69s85RS4zrLBDnLM3gl9zBnRVbrwDlnKwIkYjDNCCoFtidZ7Xv8mddZ2GYZu494xmdqlFc/DQY5cUzEUWG38zZ+iw0McPJmmPWhy
🤖 AUTONOMOUS AGENT IMPLEMENTATION:
Architected under human direction; autonomously coded, audited, and verified via Google Gemini agentic workflows.
🔗 REPOSITORY, SPECIFICATION, & CODE:
https://github.com/bootlace-dev/pipek1
👥 MENTIONS:
@nprofile…9k65
@nprofile…wh3a
@nprofile…xmfw
@nprofile…g8xl
Please review, audit, and comment.

2026-09-08 20:42:24 CEST

- reply

shame, seems like such a good idea

2026-09-08 13:24:49 CEST

- reply

2026-09-07 20:55:18 CEST

🧊 𝗦𝗨𝗕𝗭𝗘𝗥𝗢-𝗥𝗦 𝘃𝟬.𝟯.𝟬-𝘁𝗲𝘀𝘁𝗻𝗲𝘁𝟰
Complete rewrite of the SubZero sovereign airgapped Bitcoin cold storage appliance into 100% pure Rust. Boots directly to a raw Linux text console (tty1) with zero Node.js or JavaScript runtime dependencies.
⚠️ 𝗧𝗘𝗦𝗧𝗡𝗘𝗧𝟰 𝗢𝗡𝗟𝗬 (𝗭𝗘𝗥𝗢 𝗙𝗜𝗡𝗔𝗡𝗖𝗜𝗔𝗟 𝗥𝗜𝗦𝗞 𝗥𝗘𝗛𝗘𝗔𝗥𝗦𝗔𝗟): • Strictly locked to Bitcoin Testnet4 (BIP-94 genesis) across all 14 tabs • All addresses derive exclusively as tb1q… Native SegWit (m/84’/1’/0’) • Output descriptors and QR exports strictly generate Testnet4 coordinator formats (vpub/tpub) • NEVER send real mainnet Bitcoin to these addresses; designed for risk-free family inheritance drills
🆕 𝗡𝗘𝗪 𝗜𝗡 𝘃𝟬.𝟯.𝟬 (𝗣𝗨𝗥𝗘 𝗥𝗨𝗦𝗧 𝗔𝗣𝗣𝗟𝗜𝗔𝗡𝗖𝗘): • 100% Pure Rust Architecture: Single static x86_64 musl binary; zero dynamic glibc or runtime dependencies • Raw TTY1 Console Engine: Ratatui-powered 14-tab text interface engineered for legacy BIOS/UEFI COTS laptops • Real-Time Statistical Audit: Integrated Pearson’s Chi-squared uniformity and Markov conditional transition filters • Cross-Utility Determinism: Exact byte-for-byte BIP-39 mnemonic equivalence across Coldcard, BitBox02, and reference tooling • Tab 4 Optical Multi-Mode: BBQR animated frames, BIP-380 output descriptors, and standard watch-only xpub/vpub displays • Visual Integrity Badges: Real-time 8-char SHA-256 visual checksums on all exported addresses and descriptors • Ephemeral Vault Auto-Lock: 30-minute amnesic inactivity timeout protecting decrypted estate memory
🎲 𝗣𝗛𝗬𝗦𝗜𝗖𝗔𝗟 𝗘𝗡𝗧𝗥𝗢𝗣𝗬 & 𝗔𝗨𝗗𝗜𝗧 𝗜𝗡𝗩𝗔𝗥𝗜𝗔𝗡𝗧𝗦: • Pure Physical Entropy: 128 coin flips (4-char chunking) or 50+ dice rolls (5-char chunking) • Pearson’s Chi-squared Goodness-of-Fit: Statistical hard-block on biased coin (df=1) or loaded dice (df=5) inputs at alpha=0.001 • Markov Filter: Automatic rejection of repetitive sequences, low-entropy oscillations, and pathological patterns • Practical Multi-Die Guidance: Recommends rolling 2 to 5 dice simultaneously to naturally blend individual die defects while honoring the 50-roll floor • Zero Dynamic RNG Reliance: Pure physical entropy is never diluted with hardware silicon RNG
🛡️ 𝗠𝗘𝗠𝗢𝗥𝗬 𝗛𝗬𝗚𝗜𝗘𝗡𝗘 & 𝗭𝗘𝗥𝗢-𝗧𝗥𝗨𝗦𝗧 𝗦𝗘𝗖𝗨𝗥𝗜𝗧𝗬: • Strict Zeroize & ZeroizeOnDrop enforcement across all intermediate seeds, master keys, passphrases, and decrypted buffers • Amnesic [W] Panic Wipe: Immediate volatile memory zeroization and UI reset on single keystroke • Two-Stroke Emergency Exit: [Q] requires two-stroke confirmation within 3 seconds to prevent accidental exit • Isolated Estate Storage: MountGuard RAII unmounting with strict partition label verification (SUBZERO_EST)
🧪 𝗠𝗔𝗦𝗦𝗜𝗩𝗘 𝗧𝗘𝗦𝗧 & 𝗖𝗛𝗔𝗢𝗦 𝗙𝗨𝗭𝗭 𝗠𝗔𝗧𝗥𝗜𝗫: • 74 of 74 automated tests passing (100% PASS) across 7 specialized suites • Keystroke Chaos Fuzzing: 100,000 continuous pseudo-random keystroke sequences fuzzed across all 14 tabs with 0 crashes • Legacy COTS Simulation: Verified in throttled Docker cgroup (1 CPU, 1024MB RAM, slow I/O) with 0.28MB peak heap footprint • Responsive Geometry: Zero line clipping across legacy 80x24, 80x25, 100x30, and 128x48 screen dimensions
📦 𝗥𝗘𝗟𝗘𝗔𝗦𝗘 & 𝗦𝗧𝗔𝗧𝗜𝗖 𝗕𝗜𝗡𝗔𝗥𝗬: https://github.com/bootlace-dev/subzero-keyosk/releases/tag/v0.3.0
SHA-256 Checksum: 01b45846718de43b7bb9ef8898be6d725bf5609790bb9dcfb729f28ccfebed9c subzero-x86_64-musl
🔗 𝗦𝗢𝗨𝗥𝗖𝗘 & 𝗔𝗨𝗗𝗜𝗧 𝗦𝗣𝗘𝗖: https://github.com/bootlace-dev/subzero-keyosk/tree/feat/rust-port
Please audit, test on physical hardware with Testnet4 coins, and break things.

2026-09-07 14:50:10 CEST

- reply

Did this ever get resolved to your satisfaction?

2026-09-07 03:36:23 CEST

- reply

Nor can heroes save everyone 🫂

2026-09-05 13:16:19 CEST

- reply

Or just link to the video hosted elsewhere?

2026-09-02 20:42:42 CEST

- reply

https://blossom.primal.net/34620f88796112fe943ab2db45b4518b0ab340350bcbe5b22459b092446b4584.gif

2026-09-02 20:42:04 CEST

- reply

Not too far off topic, I hope...my model says it's relevant:
Direct Relevance to SubZero Keyosk / Bootlace:
• This post hits the exact problem you built SubZero Keyosk to solve: bridging raw physical entropy and steel mnemonics to clean, canonical BIP-380 Output Descriptors on bare-metal airgapped hardware without needing online wrapper software.
https://blossom.primal.net/34620f88796112fe943ab2db45b4518b0ab340350bcbe5b22459b092446b4584.gif
🧊 𝗦𝗨𝗕𝗭𝗘𝗥𝗢 𝗞𝗘𝗬𝗢𝗦𝗞 𝘃𝟬.𝟮.𝟬-𝘁𝗲𝘀𝘁𝗻𝗲𝘁𝟰
Turn any old PC laptop (x86_64) or Raspberry Pi into a single-purpose, airgapped Bitcoin cold storage appliance booting directly to the Linux framebuffer (/dev/fb0).
🆕 𝗡𝗘𝗪 𝗜𝗡 𝘃𝟬.𝟮.𝟬:
• BIP-85 Multi-Protocol Key Factory (Child Seeds, Nostr nsec/npub, WIFs, Passphrases)
• SeedFix Diagnostic Solver (Offline BIP-39 Checksum Word & Typo Recovery)
• Dual-Partition Storage (ESP Bootloader + Partition 2 Data Store)
• Offline HTML WebCrypto Heir Vault (AES-256-GCM decrypt.html In-Browser Decryption)
• Storage Device NAND Flash Integrity Hasher & Latency Profiler
• Interactive 5-Mode Kiosk Menu
🎲 𝗣𝗛𝗬𝗦𝗜𝗖𝗔𝗟 𝗘𝗡𝗧𝗥𝗢𝗣𝗬 & 𝗔𝗡𝗧𝗜-𝗕𝗜𝗔𝗦:
• Pure Physical Input: 128 coin flips (4-4-3) or 50 dice rolls (5-5 chunking)
• Clean SHA-256 Hashing: Direct hashing over 0/1 and 1-6 strings (zero base-conversion bugs)
• Physical Bias Defense: Input surplus flips/rolls to mathematically wash out coin/die weight defects
• Zero Silicon RNG Reliance: Complete physical independence from hardware microcontrollers
🧪 𝗭𝗘𝗥𝗢-𝗥𝗜𝗦𝗞 𝗥𝗘𝗛𝗘𝗔𝗥𝗦𝗔𝗟 & 𝗣𝗥𝗘𝗦𝗘𝗧𝗦:
• Testnet4-Only Lockdown (Zero Financial Risk Rehearsal)
• 10 Instant Entropy Test Vectors (Pre-Funded with Test Sats)
• Paired BIP-85 Passphrase Presets for Multi-Wallet Recovery Drills
• Full BIP-380 Output Descriptors & QR Exports
🚫 𝗜𝗡𝗧𝗘𝗡𝗧𝗜𝗢𝗡𝗔𝗟 𝗗𝗘𝗙𝗘𝗡𝗦𝗜𝗩𝗘 𝗢𝗠𝗜𝗦𝗦𝗜𝗢𝗡𝗦:
• Bitcoin Only (Zero Altcoins / Zero Token Firmware Bloat)
• Native SegWit Only (tb1q / bc1q P2WPKH Exclusivity)
• Account 0 Only (m/84'/1'/0' Testnet4 & m/84'/0'/0' Mainnet Invariance)
• English BIP-39 Wordlist Only (Zero Homoglyph Mismatches)
• No On-Device Signing (Airgapped Vault Export Only; Eliminates Blind-Signing)
• Zero Network Stack (Kernel Wi-Fi, Bluetooth, & Ethernet Drivers Purged)
🔒 𝗠𝗘𝗠𝗢𝗥𝗬 𝗛𝗬𝗚𝗜𝗘𝗡𝗘 & 𝗖𝗥𝗬𝗣𝗧𝗢 𝗙𝗢𝗨𝗡𝗗𝗔𝗧𝗜𝗢𝗡𝗦:
• 3x Multi-Pass Memory Scrub: All heap strings, mnemonics, and framebuffer wiped (0x00 -> 0xFF -> 0x00) on ESC/Backspace panic or clean exit
• Volatile RAM Execution (toram tmpfs)
• Standard Paul Miller Noble Suite (@noble/curves, @noble/hashes, @scure/bip39)
• Cure53-Audited secp256k1, SHA-256, HMAC-SHA512, PBKDF2
• Standard W3C WebCrypto Engine (Zero Custom Crypto)
⚖️ 𝗩𝗦 𝗧𝗛𝗘 𝗔𝗟𝗧𝗘𝗥𝗡𝗔𝗧𝗜𝗩𝗘𝗦:
• Vs Hardware Wallets: Zero shipping/supply-chain tracking; pure coin entropy ($0 on old PC vs $200+).
• Vs SeedSigner: No specialized parts or camera kits to buy; runs on any commodity laptop or Pi you own.
• Vs Tails / Ian Coleman: Dedicated framebuffer (/dev/fb0) with 100% of network drivers purged from kernel.
📦 𝗥𝗘𝗟𝗘𝗔𝗦𝗘 & 𝗗𝗘𝗧𝗘𝗥𝗠𝗜𝗡𝗜𝗦𝗧𝗜𝗖 𝗜𝗠𝗔𝗚𝗘𝗦:
https://github.com/bootlace-dev/subzero-keyosk/releases/tag/v0.2.0-testnet4
🔗 𝗦𝗢𝗨𝗥𝗖𝗘 & 𝗔𝗨𝗗𝗜𝗧 𝗦𝗣𝗘𝗖:
https://github.com/bootlace-dev/subzero-keyosk
Please audit, test on Testnet4, and break things.

2026-09-02 18:09:12 CEST

🧊 𝗦𝗨𝗕𝗭𝗘𝗥𝗢 𝗞𝗘𝗬𝗢𝗦𝗞 𝘃𝟬.𝟮.𝟬-𝘁𝗲𝘀𝘁𝗻𝗲𝘁𝟰
Turn any old PC laptop (x86_64) or Raspberry Pi into a single-purpose, airgapped Bitcoin cold storage appliance booting directly to the Linux framebuffer (/dev/fb0).
🆕 𝗡𝗘𝗪 𝗜𝗡 𝘃𝟬.𝟮.𝟬:
• BIP-85 Multi-Protocol Key Factory (Child Seeds, Nostr nsec/npub, WIFs, Passphrases)
• SeedFix Diagnostic Solver (Offline BIP-39 Checksum Word & Typo Recovery)
• Dual-Partition Storage (ESP Bootloader + Partition 2 Data Store)
• Offline HTML WebCrypto Heir Vault (AES-256-GCM decrypt.html In-Browser Decryption)
• Storage Device NAND Flash Integrity Hasher & Latency Profiler
• Interactive 5-Mode Kiosk Menu
🎲 𝗣𝗛𝗬𝗦𝗜𝗖𝗔𝗟 𝗘𝗡𝗧𝗥𝗢𝗣𝗬 & 𝗔𝗡𝗧𝗜-𝗕𝗜𝗔𝗦:
• Pure Physical Input: 128 coin flips (4-4-3) or 50 dice rolls (5-5 chunking)
• Clean SHA-256 Hashing: Direct hashing over 0/1 and 1-6 strings (zero base-conversion bugs)
• Physical Bias Defense: Input surplus flips/rolls to mathematically wash out coin/die weight defects
• Zero Silicon RNG Reliance: Complete physical independence from hardware microcontrollers
🧪 𝗭𝗘𝗥𝗢-𝗥𝗜𝗦𝗞 𝗥𝗘𝗛𝗘𝗔𝗥𝗦𝗔𝗟 & 𝗣𝗥𝗘𝗦𝗘𝗧𝗦:
• Testnet4-Only Lockdown (Zero Financial Risk Rehearsal)
• 10 Instant Entropy Test Vectors (Pre-Funded with Test Sats)
• Paired BIP-85 Passphrase Presets for Multi-Wallet Recovery Drills
• Full BIP-380 Output Descriptors & QR Exports
🚫 𝗜𝗡𝗧𝗘𝗡𝗧𝗜𝗢𝗡𝗔𝗟 𝗗𝗘𝗙𝗘𝗡𝗦𝗜𝗩𝗘 𝗢𝗠𝗜𝗦𝗦𝗜𝗢𝗡𝗦:
• Bitcoin Only (Zero Altcoins / Zero Token Firmware Bloat)
• Native SegWit Only (tb1q / bc1q P2WPKH Exclusivity)
• Account 0 Only (m/84'/1'/0' Testnet4 & m/84'/0'/0' Mainnet Invariance)
• English BIP-39 Wordlist Only (Zero Homoglyph Mismatches)
• No On-Device Signing (Airgapped Vault Export Only; Eliminates Blind-Signing)
• Zero Network Stack (Kernel Wi-Fi, Bluetooth, & Ethernet Drivers Purged)
🔒 𝗠𝗘𝗠𝗢𝗥𝗬 𝗛𝗬𝗚𝗜𝗘𝗡𝗘 & 𝗖𝗥𝗬𝗣𝗧𝗢 𝗙𝗢𝗨𝗡𝗗𝗔𝗧𝗜𝗢𝗡𝗦:
• 3x Multi-Pass Memory Scrub: All heap strings, mnemonics, and framebuffer wiped (0x00 -> 0xFF -> 0x00) on ESC/Backspace panic or clean exit
• Volatile RAM Execution (toram tmpfs)
• Standard Paul Miller Noble Suite (@noble/curves, @noble/hashes, @scure/bip39)
• Cure53-Audited secp256k1, SHA-256, HMAC-SHA512, PBKDF2
• Standard W3C WebCrypto Engine (Zero Custom Crypto)
⚖️ 𝗩𝗦 𝗧𝗛𝗘 𝗔𝗟𝗧𝗘𝗥𝗡𝗔𝗧𝗜𝗩𝗘𝗦:
• Vs Hardware Wallets: Zero shipping/supply-chain tracking; pure coin entropy ($0 on old PC vs $200+).
• Vs SeedSigner: No specialized parts or camera kits to buy; runs on any commodity laptop or Pi you own.
• Vs Tails / Ian Coleman: Dedicated framebuffer (/dev/fb0) with 100% of network drivers purged from kernel.
📦 𝗥𝗘𝗟𝗘𝗔𝗦𝗘 & 𝗗𝗘𝗧𝗘𝗥𝗠𝗜𝗡𝗜𝗦𝗧𝗜𝗖 𝗜𝗠𝗔𝗚𝗘𝗦:
https://github.com/bootlace-dev/subzero-keyosk/releases/tag/v0.2.0-testnet4
🔗 𝗦𝗢𝗨𝗥𝗖𝗘 & 𝗔𝗨𝗗𝗜𝗧 𝗦𝗣𝗘𝗖:
https://github.com/bootlace-dev/subzero-keyosk
Please audit, test on Testnet4, and break things.

2026-09-02 04:59:44 CEST

- reply

LLM reply:
Tl;dr: Despite the initial fill being under-refreshed, this flaw is exceptionally unlikely to produce compromised or predictable seed phrases in the wild
The post provides an accurate technical breakdown of an ESP32 architectural quirk and how Blockstream Jade handled its initial entropy ingestion.
The Technical Merit
The author’s critique of the ESP32 hardware RNG is fundamentally correct:
* Clock and sampling mismatch: On the classic ESP32, the true-RNG engine relies on noise from the RF baseband or SAR ADC. With RF disabled (standard for air-gapped and "No-Radio" builds), entropy accumulation drops significantly. Reading the RNG register in a tight loop via standard esp_fill_random() pulls words faster than the SAR analog noise floor refreshes, returning partially correlated data rather than 256 bits of independent physical entropy.
* The v1.0.41 patch: Inserting a 1 ms task delay between reads directly resolves the refresh cadence issue while introducing RTOS scheduler timing jitter. Labeling this change "defense-in-depth" is standard vendor posture, but the technical reality is that it patched an uncharacterized, rate-limited hardware source.
Practical Exploitability
Despite the initial fill being under-refreshed, this flaw is exceptionally unlikely to produce compromised or predictable seed phrases in the wild:
* Entropy mixing pipeline: Blockstream Jade does not pipe the raw output of esp_fill_random() directly into a BIP-39 mnemonic generator.
* Supplementary noise sources: The seed derivation pipeline mixes in optical noise from the camera sensor, CPU cycle counter delta jitter, and optional companion-app entropy before feeding a cryptographic hash mixer (SHA-512).
* Cryptographic margin: For a 12-word seed, an attacker needs the entire entropy pool to fall below 128 bits of min-entropy. Even if the SAR ADC contributed significantly fewer bits than assumed, the auxiliary entropy sources and hashing pipeline prevent deterministic key recovery.
The Structural Lesson
This issue illustrates a persistent challenge when using mass-market consumer MCUs for Bitcoin hardware wallets:
* Vendor HAL assumptions: Espressif’s documentation suggests bootloader_random_enable() is sufficient for general randomness when RF is disabled, but general-purpose IoT SDKs are written for networking handshakes, not cryptographic seed generation.
* Empirical proof vs. API trust: Relying on vendor abstraction layers without publishing empirical min-entropy bounds (such as NIST SP 800-90B characterization) leaves an entropy source open to valid scrutiny, even when downstream cryptographic mixing prevents an outright exploit.

2026-08-26 20:06:30 CEST

- reply

For what it's worth, we added this section about verifying the sd card:
https://github.com/bootlace-dev/subzero-keyosk#-physical-media--sd-card-verification
Also, we simplified the screen rendering process, and also made it testnet4-only for now until it gets more eyes on it (kind of test-driven development, TDD).

2026-08-26 15:10:04 CEST

- reply

HSAs are amazing! Thanks for offering this service!
Can you comment on the interesting benevolent legislative history, and the current taxable complications, of the Medicare 6-month look-back rule?
Specifically, how that rule may force Medicare applicants to withdraw "excess" contributions—and gains—from their HSA, the tax consequences of that withdrawal, and the messy HSA implications of applying for Medicare within the first six months of a calendar year?
A family member is dealing with that mess right now, though not with Sound HSA.

2026-08-26 02:51:50 CEST

- reply

Animated walk-through:
https://blossom.primal.net/b542f338882a7b89777147ded696ad74c4c32f21d035fa310a87744e71305f76.gif

2026-08-26 02:48:00 CEST

- reply

me and my million llm monkeys made some major mods
focusing on testnet4 for the time being
pc and rpi builds available for review, audit, testing, and feedback, please, thanks:
https://github.com/bootlace-dev/subzero-keyosk/releases
(test entropy vectors pre-loaded with testnet sats!)
A tiny, auditable live USB/SD image (.img) turning any PC/RPI into an amnesic, airgapped Bitcoin cold vault key generator & BIP380 descriptor exporter.

2026-08-25 15:43:18 CEST

- reply

From AI:
You did indeed see that correctly. That headline stems from a real and developing story today that has sparked significant speculation.
Here is a breakdown of what is actually known so far:
The Flight: Flight tracking data showed a U.S. Air Force C-17 flying from Riga, Latvia, and landing in Moscow today (Tuesday, August 25).
The Convoy: Shortly after the landing, footage began circulating in Moscow showing a motorcade operating with U.S. diplomatic license plates.
The Speculation: Because neither Washington nor Moscow announced a diplomatic visit, theories are swirling that the convoy is tied to covert backchannel negotiations or secret talks regarding the war in Ukraine.
What officials are saying:
Right now, both sides are staying tight-lipped. The U.S. European Command has declined to offer any information regarding the flight's mission, passengers, or cargo. On the Russian side, Kremlin spokesman Dmitry Peskov claimed to have no information about the aircraft and stated there are no meetings planned with U.S. administration officials in Moscow this week.
Because there is no official confirmation yet, the situation remains highly speculative.

2026-08-25 03:18:52 CEST

- reply

I notice you say "before every sign". Note that subzero-keyosk is not a signer, it's for seed generation only.

2026-08-25 03:14:52 CEST

- reply

Yes, the Pi build is 100% Alpine too, built up from alpine-minirootfs and heavily stripped down.
🛡 STRIPPED BARE-BONES AIRGAP:
• Kernel network stack physically deleted: removed kernel/net, wireless firmware, bluetooth, sound, and USB-to-ethernet/serial drivers.
• Strace library whitelist: the builder traces exact .so dependencies during execution and purges all untouched libraries from /usr/lib.
• Package manager destroyed: /lib/apk/db and /var/lib/apk are nuked post-build so no package manipulation is possible.
• Attack surface reduction: all gettys disabled, DMA protections enabled in bootloader (intel_iommu=on, efi=disable_early_pci_dma).
⚡ DISKLESS TORAM BOOT:
• Custom minimal initramfs copies the ~150MB compressed SquashFS directly into a RAM tmpfs disk.
• Hardware write-protect: you can lock the physical write-protect slider on a full-size SD card/adapter for hardware-enforced read-only integrity.
• Storage unmounted at boot: the SD card / USB drive is unmounted before userspace init. You can physically pull the media once booted.
• Zero SD wear: the disk is never mounted writable during operation. Cold power-cycle wipes RAM instantly.
Repo with build scripts and release images:
https://github.com/bootlace-dev/subzero-keyosk
Please review, audit, and comment. Thanks!

2026-08-25 01:09:00 CEST

- reply

Which hardware vendor will be first to _hide_ the easy button?
My attempt to address the problem:
https://github.com/bootlace-dev/subzero-keyosk/releases
Please verify, audit, review. Thanks!

2026-08-25 01:03:57 CEST

- reply

From AI:
Yes, unfortunately, a severe and devastating tornado struck the village of Pomas today, August 24, 2026.
The tornado developed from a powerful supercell thunderstorm and touched down around 5:20 PM local time. Here are the latest details on the situation:
* Injuries: Authorities report that at least 41 people have been injured, with several hospitalized. Earlier reports mentioned two people were being searched for under the rubble of a home.
* Damage: The tornado caused immense destruction in the village, damaging approximately 300 homes. Many buildings had their roofs completely ripped off, and trees and vegetation were heavily damaged.
* Emergency Response: More than 120 firefighters, including specialized search and rescue teams, have been deployed to the area to secure buildings and assist residents. A shelter has been opened at the local community hall for those displaced.
* Wider Weather Impacts: The supercell storm that spawned the tornado also brought massive hailstones (3 to 5 cm in diameter), torrential rain, and wind gusts exceeding 100 km/h across the Aude department. The severe weather even forced officials to cancel the third stage of the Vuelta a España cycling race, which was taking place in the region.
The region had been placed on an orange alert for severe storms prior to the event, as the clash of hot, humid air from the Mediterranean and cooler air aloft created a highly unstable atmosphere.

2026-08-24 14:10:20 CEST

- reply

Inspired by your note, we (AI and I) added an armv7 image. Works on my ancient RPI. Please verify, audit, and test. Thanks!
https://github.com/bootlace-dev/subzero-keyosk/releases
(Note I renamed my github account.)

2026-08-23 23:57:55 CEST

- reply

same. phone died, spent all day today resurrecting old phone until new one arrives. lesson learned...I hope

2026-08-22 17:11:02 CEST

- reply

I (my AI) created github Issues for your comments, with detailed responses.
https://github.com/bootlace-dev/subzero-keyosk/issues
Thanks again!

2026-08-22 16:34:14 CEST

- reply

Thanks so much for the thoughtful reply and checking it out!
On networking: we didn't just disable interfaces in software, we physically stripped them from the filesystem and module tree:
• Deleted all network/wireless driver modules, USB network dongles, and proprietary firmware blobs (plugging in a USB wifi dongle is completely inert).
• Purged all latent network protocol modules from /lib/modules.
• Kernel enforces DMA isolation (intel_iommu=on, amd_iommu=on, iommu=force, efi=disable_early_pci_dma).
On the doctored SD / evil maid swap risk:
• Against exfiltration: SubZero boots 100% into volatile RAM (tmpfs), unmounts the storage, and prompts you to physically pull the USB drive before entering a single coin flip. Nothing touches disk.
• Against short-list / biased-math tampering: The pure dice/coin math is 100% deterministic BIP39 (verifiable offline against standalone calculators/tables), and the entire OS image is byte-for-byte reproducible with GPG-signed checksums.
We definitely plan to add direct Raspberry Pi / ARM64 SBC support to our roadmap next (plugging HDMI into a dumb TV/monitor + USB keyboard).
Build script & module stripping logic is here if you want to inspect:
https://github.com/bootlace-dev/subzero-keyosk/blob/main/scripts/build_alpine_kiosk.sh
Curious to hear how your airgapped Pi setup shapes up!
cc: @thejohnnycrypto

2026-08-22 04:52:56 CEST

- reply

Hi Johnny,
Following up on this: to eliminate the browser DOM trust gap entirely, I used Gemini this past week to evolve it into a bare-metal, amnesic live USB image with GPG signed checksums:
https://github.com/bootlace-dev/subzero-keyosk
(and changed my github user name)
Please review, audit, and comment. Thanks!

2026-08-21 23:52:56 CEST

- reply

My (well, AI and my) new SubZero Keyosk.
Turns discarded $0 commodity laptops/netbooks into bare-metal, airgapped Bitcoin cold vaults using pure physical coin/dice entropy.
Zero hardware wallet costs, runs in RAM, and exports BIP380 descriptors + BIP85 child seeds for BlueWallet/Phoenix:
https://github.com/bootlace-dev/subzero-keyosk
Please review, audit, and comment.

2026-08-21 23:50:22 CEST

- reply

Exactly why I added a real-time Markov transition filter to SubZero Keyosk this week.
It lets you use pure physical coin flips (128) or dice rolls (50) on bare-metal laptops, but hard-blocks repetitive human bias patterns without compromising the keyspace (<0.00015 bits):
https://github.com/bootlace-dev/subzero-keyosk
Please review, audit, and comment.

2026-08-21 23:43:17 CEST

- reply

Inspired (and obsessed) by all this, I used Gemini this week to build a new bare-metal, air-gapped, widely-bootable image, for use on old commodity laptops, with coin/dice for entropy (and changed my dumb old random github name):
https://github.com/bootlace-dev/subzero-keyosk
Please review, audit, and comment! Thank you! https://blossom.primal.net/7645ebfc2b94c47b903516cc0aea8d3bf0f7c91e7d717f46b7e7d155e4bbbfd5.png https://blossom.primal.net/25417271ec234f4037dd00ca922044d0e8c82ca3d076acf0ce8780d4a8e89ac9.png https://blossom.primal.net/117b67b7a3f630f9514b734ad9b019b7d624905c37b418deb1b516f5c2bbe545.png https://blossom.primal.net/3b2ab700301d69096cf5659953aa62cfd9946a096476ef16eb7956ffe72ed602.png

2026-08-21 20:40:20 CEST

- reply

Need to get tuta on nostr

2026-08-19 04:12:08 CEST

- reply

Great series, Johnny, I look forward to them.

2026-08-19 01:44:03 CEST

- reply

Need one of these "they're the same picture" memes

2026-08-18 14:08:50 CEST

- reply

Agree 💯 with everything, but sadly, Saef gives me the same vibe as NVK. I can't listen to him anymore. :(

2026-08-18 00:05:23 CEST

- reply

using device entropy should,
a) NOT be the default, and
b) should be buried behind aggressive warnings NOT to use it

2026-08-18 00:02:25 CEST

- reply

especially sad hearing stories that people moved away from coldcard and still lost their life savings because the bad entropy followed them 😟

2026-08-17 23:58:30 CEST

- reply

botox, that's all I see

2026-08-17 20:36:18 CEST

- reply

an old laptop or chromebook

2026-08-17 20:33:01 CEST

- reply

Thought you might like my recent post documenting my struggles with USB-C cables:
https://primal.net/e/nevent1qqs9afggyzhp7jk83nmaj393qdx0n3laglu8fp2ne3ewqewezks4zjqvhd272

2026-08-17 14:01:03 CEST

- reply

I guess pennies and dice aren't technically free either :(
https://github.com/iancoleman/bip39/releases/tag/0.5.6
My attempt at modernization, simplification, and I think improved security of Ian's classic work:
https://github.com/ghscuuo/airgap-coinflip/releases
Have your AI audit my AI.

2026-08-17 01:35:51 CEST

- reply

Two straws

2026-08-16 23:56:47 CEST

- reply

I like the Zen pose

2026-08-16 13:54:54 CEST

- reply

finally

2026-08-16 03:18:35 CEST

- reply

it's fascinating and telling about the evolution and intelligence of the singleton, and separately of the herd, that they can't or won't counterattack the lone wolf as it were

2026-08-15 18:08:04 CEST

Help me make this description better:
🔌 THE USB-C CHARGING & COMMUNICATION TRAP
USB-C cables are confusing and frustrating. Why are they not communicating with your laptop (file transfer, flashing devices, etc)? Why are they charging so slowly?
Both high-speed charging and data file transfers require a digital connection between your devices. Your cables fail these tasks due to a few distinct issues:
• MISSING WIRES IN THE CABLE BODY: Cheap "charge-only" cables leave out the internal data and communication wires entirely to save cost. The laptop cannot detect the phone at all (zero file transfer), and charging is forced to standard slow speeds. You cannot tell by looking at the plug; the metal pins might be present on the tip, but they are "dead" inside.
• MISSING METAL CONTACTS IN THE TIP: If the physical pins responsible for either file transfer or fast charging are missing from the plug, that specific function is guaranteed to be gone.
• BROKEN OR DIRTY TIPS: Worn pins or lint blocks the signals. Because pins are separate, you might lose file transfer capability while charging still works, or vice versa. This often causes "asymmetrical" behavior, where a function only works if you flip the plug over to the other side (requiring testing by flipping one end, then the other end, then the first end again).
If the connection fails for any of these reasons, the devices cannot negotiate and the charger silently falls back to standard slow charging, while file transfer fails entirely.
Once you figure out its status, label the cable with something of meaning to you (example: "PD" for power-delivery only, "2" for USB-2 data transfer, "ASYNC" meaning you have to flip the tips to make it work).

2026-08-15 17:10:20 CEST

- reply

Nice catch, thanks. Zoom in on the temporary "decoupling" in early 2024. Looks like that is where we are now, too. Spring could surely be well-coiled, wow!

2026-08-11 14:10:09 CEST

- reply

winning with pennies
#nevent1q…63wd

2026-08-09 20:08:52 CEST

- reply

Agreed with one add:
take it from there, verify it, and run your copy offline.

2026-08-09 19:58:55 CEST

- reply

I'm trying to modernize and simplify his masterpiece, please audit and comment:
https://github.com/ghscuuo/airgap-coinflip/releases/tag/v0.0.1-rc.1
https://github.com/iancoleman/bip39/releases
#nevent1q…aaqu

2026-08-05 18:49:03 CEST

- reply

Michael1011 signed the new canary today.
Signature made Wed 05 Aug 2026
Hopefully not under duress. 😞
https://canary.boltz.exchange/
https://github.com/michael1011
https://michael1011.at/michael1011.pgp
C2640F630570F5EDEDE02DE684D249BA71685D46
C264 0F63 0570 F5ED EDE0 2DE6 84D2 49BA 7168 5D46
71685D46
0x71685D46

2026-08-04 15:39:29 CEST

- reply

I love @nprofile…nj96 and @nprofile…yj2m
but unless I'm missing something:
black box red flag
and
fails multi vendor multi sig
Instead, flip coins, roll dice

2026-08-04 05:29:15 CEST

- reply

Yes, all of your points are understood. Thanks for the feedback. I'll see what I can do...
When you say "unwanted inputs", can you give me an example situation?
---
I guess one can consider this offline tool (airgap-coinflip) for _receiving_ bitcoin.
I plan to build a separate, equally pared down, offline tool for signing and _spending_ bitcoin.
Both tools should be used fairly rarely, actually.
(For what it's worth, I'll plan to leave the online PSBT generating to other watch-only online wallets, unless folks think I should add that to this simplified tool box. Based on my experience consolidating utxos a while ago, the popular online watch-only wallets each had a few interoperability quirks that were time-consuming. A thought in progress.)
https://github.com/ghscuuo/airgap-coinflip/releases/tag/v0.0.1-rc.1

2026-08-03 03:39:34 CEST

- reply

Agreed.
The RNG Lie: They aren't true random number generators. Look at all the tricks and hoops they have to go through, in a feeble risky error-prone attempt, to try protect the user from the user and from the manufacturer. Folks should stop trusting such devices to generate their secrets, and stop treating them like the ultimate secret vault.
The Marketing Trap: People buy these dedicated boxes thinking they bought "secure hardware." In reality, it's just an offline signing device.
The Risk Profile: They are a massive watering-hole risk. If one rarely signs transactions on-chain, then they don't need a specialized device. They're paying to put a giant bullseye on their savings.

2026-08-02 06:33:07 CEST

- reply

Hi Johnny, thanks for asking.
See:
https://github.com/ghscuuo/airgap-coinflip/releases/tag/v0.0.1-rc.1
See
airgap-coinflip_a5418711.html
sha256:a5418711d7bb0a5ea1dec2723cfe826df241956be62923cdc81211c1de4e348b
(For convenience only, see the first part of the hash a5418711 in the filename. For what it's worth, for 3rd-party hash reference only: https://www.virustotal.com/gui/file/a5418711d7bb0a5ea1dec2723cfe826df241956be62923cdc81211c1de4e348b/details )
Does that address your concern? If you build it per the instructions in the README.md, you should get the same hash. Let me know if you don't!
Suggestions welcome! Thanks!

2026-08-01 07:14:54 CEST

- reply

Some folks may disagree with me, but trusting opaque hardware for generating entropy/seeds/keys is a single point of failure.
Last night, I used AI to architect a zero-trust alternative. It bypasses silicon entirely by forcing 128 physical coin flips to generate the master seed.
- Deterministic single-file HTML build
- CSP locked / offline execution
- Full BIP85 index derivation
- Airgapped QR code export
- Zero hardware trust (Physics only)
Have your AI verify my AI:
https://github.com/ghscuuo/airgap-coinflip
#nevent1q…fasu

2026-08-01 07:14:02 CEST

- reply

2026-08-01 07:03:21 CEST

Some will hate me for saying this, but trusting opaque hardware for generating entropy/seeds/keys is a single point of failure.
I used AI to architect a zero-trust alternative. It bypasses silicon entirely by forcing 128 physical coin flips to generate the master seed.
- Deterministic single-file HTML build
- CSP locked / offline execution
- Full BIP85 index derivation
- Airgapped QR code export
- Zero hardware trust (Physics only)
Have your AI verify my AI:
https://github.com/ghscuuo/airgap-coinflip

2026-07-29 05:49:18 CEST

- reply

From Gemini:
That headline reflects a major, deliberate shift in Ukraine’s long-range strike strategy. Rather than focusing strictly on oil refineries and fuel depots, Ukraine has launched a widespread campaign targeting Wildberries—Russia's largest e-commerce platform and its equivalent to Amazon.
This wave of attacks has hit multiple massive logistics hubs across Russia (including facilities near Moscow, St. Petersburg, Krasnodar, Tver, and occupied Crimea).
The campaign is notable for several reasons:
* Economic and Supply Impact: The targeted hubs represent roughly 10% of Wildberries' total nationwide logistics capacity, destroying billions of rubles worth of inventory belonging to thousands of small and medium-sized Russian merchants.
* Brought Home to the Public: Unlike remote industrial sites, the destruction of major consumer distribution centers right outside cities like Moscow and St. Petersburg punctures the "bubble of normalcy" for urban Russians who had previously been insulated from the direct economic and physical disruptions of the war.
* Strategic Rationale: Ukrainian officials and defense analysts have justified the targeting by pointing to the scale of the company's logistics network, its intersections with state-backed financial infrastructure (like VTB), and allegations that parts of the vast warehousing system are utilized to support or store logistics and components connected to Russia's military supply chain.
* The Aftermath for Sellers: Adding salt to the wound for independent vendors, Wildberries updated its terms just days before the strikes began to classify drone attacks as "force majeure," leaving many merchants facing catastrophic inventory losses without corporate compensation.

2026-06-01 00:33:40 CEST

- reply

Would be fun to have someone annotate what's what on that track

2026-04-18 21:54:32 CEST

- reply

❤️medicine man

2026-04-08 14:24:57 CEST

- reply

Safe enough I guess
https://www.virustotal.com/gui/file/e81961d40b5a544e2e0be94c1e436804a4b9303303abe3f40ca39870632ed696

2026-03-22 14:08:26 CET

- reply

I used AI cli to fix 101 things that were wrong with my node
@nprofile…fg9w @nprofile…deta

2026-03-16 13:23:58 CET

- reply

I hear you ;)

2026-03-14 14:15:55 CET

- reply

@nprofile…deta gimme a list of 23 great backyard meat smokers for impressing my OCD, virtue-signaling neighbors

2025-12-30 01:59:51 CET

- reply

@hal sorry, I've been busy 🎄
Compare and contrast the Smiths and VU

2025-12-19 15:01:12 CET

- reply

@nprofile…xdyf @nprofile…acwr

2025-12-09 03:32:31 CET

- reply

stay humble, stack shells

2025-12-03 07:35:56 CET

- reply

@nprofile…deta summarize

2025-11-26 00:59:15 CET

- reply

@nprofile…deta compare other current heads of state with behaviors similar to Bolsanaro, and how are they faring

2025-11-25 00:08:00 CET

- reply

@nprofile…deta what's going on here?

2025-11-22 17:49:12 CET

- reply

@nprofile…deta what's the political math of what's going on here?

2025-11-22 17:47:54 CET

- reply

@nprofile…deta why did they meet? Really.

2025-11-20 12:14:47 CET

- reply

@nprofile…deta verify before I repost

2025-11-19 15:36:03 CET

- reply

Why did you use 5g/yr?

2025-11-19 15:03:41 CET

- reply

How large was 3i comet when it left its home stellar neighborhood, before it came slumming with us?

2025-11-19 14:48:00 CET

- reply

c'mon man, think outside your box! :)

2025-11-19 14:36:32 CET

@nprofile…deta tell me about the seven or so jets reported emmanating from 3I comet

2025-11-19 14:09:26 CET

- reply

@nprofile…deta tell me about Nancy Mace

2025-11-12 23:04:32 CET

- reply

@nprofile…deta is that a statue or sculpture or is it called some other kind of artsy thing?

2025-11-09 15:33:10 CET

- reply

timed for the all-important midterms...

2025-11-09 15:26:05 CET

- reply

@nprofile…grcu

2025-11-09 15:23:48 CET

- reply

@nprofile…deta compare and contrast all such apps, which is best for whom

2025-11-08 02:33:47 CET

- reply

will it write thank you notes for me, I'm way behind

2025-11-07 13:33:51 CET

- reply

@nprofile…deta summarize the fine print

2025-11-07 13:27:34 CET

- reply

@nprofile…deta we're just talking about daily or monthly spending money here, right, not our generational wealth, correct?

2025-11-05 02:50:18 CET

- reply

@nprofile…deta comment?

2025-11-04 16:20:01 CET

- reply

@nprofile…deta does it make any sense to try to make "donate the dip" into a meme of sorts?

2025-10-22 14:10:17 CEST

- reply

I think I used up all my @nprofile…deta free credits

2025-10-19 23:41:40 CEST

- reply

I see myself crouching down by the river, at rock level, shooting back at the bridge, perfect lighting, almost golden hour

2025-10-16 13:55:34 CEST

- reply

@nprofile…deta elaborate deeply

2025-10-11 05:39:05 CEST

@nprofile…deta what are the top 10 best coffee shops in downtown Shanghai?