Cat-Go-Purrrrrrr

Public Key

npub1jj9u5wlpm7427u6y65ytqrpwcq9taqjk34v9apxjjfytt9tdm5ks9snhpx

Profile Code

nprofile1qqsffz7280sal240wdzd2z9spshvqz47sftg6kz7snffyj94j4ka6tgppamhxue69uhkummnw3ezumt0d5q3gamnwvaz7tmjv4kxz7fwv3sk6atn9e5k7fg2duc

Publishing to

nostr.mom

relay.damus.io

Author Public Key

npub1jj9u5wlpm7427u6y65ytqrpwcq9taqjk34v9apxjjfytt9tdm5ks9snhpx

Show more details

Last Notes

2026-08-03 05:08:01 UTC

- reply

2010 inflation bug != Ethereum DAO hack
inflation bug broke finite supply of bitcoin, soft fork was rolled out in 5 hours, not a contentious fork and the ecosystem was still small af
this rollback you are proposing is similar to rhe DAO hack, except there are no whitehats securing coins like happened there
apples and oranges

2026-08-03 04:59:33 UTC

- reply

nah, just because of precedent in other shitcoin chains you dont go fucking with the merkle tree and reverting blocks
this is a psyop

2026-08-02 20:06:36 UTC

#BitGo CEO drops 100 coin #bounty to Anthropic
bc1qg4jcyumevszta3rs869v9jrf6rz9z360svp03jsl5xcryfd7xqvs4hurnq
#nevent1q…sn5k

2026-08-02 19:45:33 UTC

- reply

you do you, its your entropy
some people flip coins

2026-08-02 19:44:42 UTC

- reply

#runs
#nevent1q…2rtl

2026-08-02 19:41:32 UTC

- reply

not an iphoner but my searching now says
aegis
clave
signstr

2026-08-02 19:40:00 UTC

- reply

if you want to go down the rabbit hole
others have built tools and Schneier's Solitaire encryption scheme
https://github.com/atoponce/deckware
https://crypto.stackexchange.com/questions/70386/can-a-deck-of-cards-be-used-as-a-practical-source-of-cryptographic-randomness
https://www.itsahlive.com/posts/physical-entropy-from-playing-cards/

2026-08-02 19:35:36 UTC

- reply

Do not roll your own entropy scheme
use casino dice on a rough surface
cards are not as random as 6 sided dice

2026-08-02 19:32:52 UTC

- reply

important to already introduce Amber or some other nsec bunker / signer apps
I onboard people to a throwaway npub, they can then create a new one later
Also useful to show how searching and following # can quickly
get them a curated feed

2026-08-02 19:01:20 UTC

- reply

#runs was started last night

2026-08-02 18:54:52 UTC

- reply

yea this one right?
tbh it is in my shortlist of memes to zap
#nevent1q…p206

2026-08-02 18:02:40 UTC

- reply

thanks for PSA - had the same thought this morning after I saw they shared screenshots of the email format on X and had a button element - phishers must got a hardon from that
#nevent1q…cwed

2026-08-02 16:58:17 UTC

- reply

we are the quantum canary

2026-08-02 16:57:24 UTC

- reply

short answer is yes
nothing is broken on a hardware level, so as long as you safetly import a seed generated with enough entropy then it is not vulnerable
generating new seeds using the flawed firmware is what caused the current chaos
There is a new firmware that has been released, but people have been reporting it can brick your device. I would recommend moving your sats to a self custody software wallet first, then once the dust settles consider importing that seed into the coldcard with new firmware (if that is what you want to do)

2026-08-02 16:00:41 UTC

- reply

#nevent1q…qdjm
possible, but there needs to be lots of wallets generated during the period of the firmware bug being available (3 years iirc)

2026-08-02 15:11:14 UTC

- reply

#nevent1q…4ezd

2026-08-02 15:07:30 UTC

- reply

noice

2026-08-02 13:59:38 UTC

pretty AI compiled dashboard of #coldcard #RNG #bug of these last days
https://coldcard-hack.up.railway.app

2026-08-02 13:53:35 UTC

- reply

+1 bitbox if you want a secure element
if not a DIY seed signer build

2026-08-02 13:43:20 UTC

- reply

#nevent1q…gnf7

2026-08-02 13:32:54 UTC

- reply

#nevent1q…9h4k

2026-08-02 13:31:13 UTC

- reply

#nevent1q…28cd

2026-08-02 13:30:19 UTC

- reply

#nevent1q…5tmj

2026-08-02 13:17:31 UTC

- reply

not concerns currently, only thing to consider is passphrase length and complexity
Should be noted that your sparrow wallet backup should be encrypted with a long passphrase as well, since sparrow is not a hardware wallet there are still malware related risks.

2026-08-02 12:48:26 UTC

- reply

#nevent1q…p9yh

2026-08-02 12:11:29 UTC

- reply

#nevent1q…xaey

2026-08-02 11:44:40 UTC

- reply

#nevent1q…ja9p

2026-08-02 11:44:13 UTC

- reply

#nevent1q…j6qa

2026-08-02 11:08:10 UTC

- reply

https://nitter.net/kjsnioctib/status/2083756862923763807#m

2026-08-02 10:58:11 UTC

- reply

#nevent1q…kp23

2026-08-02 10:56:46 UTC

- reply

can you verify domain and content is not phishing?
#nevent1q…p5gh

2026-08-02 10:55:43 UTC

reports of bitcoiners getting emails from #coinkite regarding the #coldcard incident
WARN: this could be a #phishing campaign
Do not click links, be paranoid
threat actors could easily have gotten gour email from orher leaks, dara brokering, and so targetting you indiscrimantly to phish

2026-08-02 10:42:54 UTC

- reply

#nevent1q…40zt

2026-08-02 09:06:10 UTC

- reply

#nevent1q…43qu

2026-08-02 09:03:41 UTC

- reply

whitehat hacking a protocol is a thing
see the DAO hack on Ethereum, also other projects it happens since patching allows bad actors to know what is vulnerable
Sadly I doubt that is what happened with coldcard

2026-08-02 08:57:59 UTC

- reply

#nevent1q…ue9p

2026-08-01 22:27:14 UTC

- reply

#nevent1q…detn

2026-08-01 22:26:40 UTC

- reply

#nevent1q…ypjq

2026-08-01 22:22:52 UTC

- reply

ah... if a multsig is made up of only or majority seeds from the vulnerable coldcard. yes that makes sense to me
I am hearing of RBFs when a vulnerable wallet sends a multisig tx, when it is first seen in the mempool. from what i understand that only affects the cc wallets in the multisig... but if like you said they were all generated with the same cc then the whole multisig could be at risk of automated RBF

2026-08-01 14:34:23 UTC

- reply

#nevent1q…366l

2026-08-01 13:38:50 UTC

- reply

Simple step: insert microSD before connecting cable and booting coldcard
A thing to try: get a different SD, if it recognises, format the SD card using the coldcard option. Then put that into your computer and move update file to SD

2026-08-01 13:11:21 UTC

- reply

OpenSats is not some massive corporation with a 24/7 workforce
There is a board, they will meet, they may or may not decide to discuss removal or NVK (or he may voluntairly step down), and a vote process may be required. This takes time.
At this time there is still active firefighting to understand and have plebs secure their sats
shouting at a nonprofit org that has no association with this mess except they have one person who is on the board is really not a productive use of time and energy Beave
Give OpenSats their time to engage in a process, stop pushing for cancel culture andan hunting one person who you dislike

2026-08-01 12:36:04 UTC

- reply

#nevent1q…4pwx

2026-08-01 12:11:46 UTC

Why is #entropy important in #cryptography ?
check this webpage: https://keys.lol
Very simple example of why you need 'pure' randomness to generate entropy...
"How does this work?
A private key is basically just a number between 1 and 2256. This website generates keys for all of those numbers, spread out over pages of 128 keys each.
This website doesn't actually have a database of all private keys, that would take an impossible amount of disk space. Instead, keys are procedurally generated on the fly when a page is opened. The page number is used to calculate which keys should be on that page.
Finding an active wallet is hard, but not impossible. Every time you open a random page, you have a chance of finding someone else's fortune."
#coldcard #RNG #bug #bitcoin

2026-08-01 12:08:31 UTC

- reply

what gzuuus is saying is you can still use bitcoin, one bad firmware bug does not change how all the wallets operate
tbh you can still safely use any Coldcard out there, if you provide your own entropy... the wallet design / chip layout / software stack has not been compromised.... just the entropy of those who used the internals to make a new wallet (which is the majority of plebs who bought the wallet probably did)
want to use a paper wallet and never send a satoshi again? cool, you do you but that does not make your setup more / less secure if you trust some other software to generate entropy for you James

2026-08-01 12:03:36 UTC

- reply

keys.lol has them all
use https://coldcard-watch.vercel.app/ to check if your address has been drained

2026-08-01 12:01:06 UTC

- reply

#nevent1q…vfhh

2026-08-01 11:48:15 UTC

- reply

#nevent1q…zfwv

2026-08-01 11:46:27 UTC

- reply

#nevent1q…hp34

2026-08-01 11:45:20 UTC

- reply

excellent meme, adding it to this bounty
#nevent1q…kxst

2026-08-01 11:45:01 UTC

- reply

#nevent1q…h65a

2026-08-01 11:43:54 UTC

- reply

use casino rated dice, monopoly or yatse dice are cheaply made... so less entropy to eaxh roll

2026-08-01 10:41:22 UTC

- reply

good luck out there

2026-08-01 10:41:05 UTC

hey @nprofile…8n4t, maybe worth updating the coldcard listings on the dashboard?
https://walletscrutiny.com/?platform=allPlatforms&page=0&query-string=coldcard

2026-08-01 10:29:41 UTC

- reply

use this https://walletscrutiny.com
of the above, I would trust sparrow and electrum, but regardless of trust you ahould have a 25th word in your seed

2026-08-01 10:26:36 UTC

- reply

#nevent1q…4s45

2026-08-01 10:04:45 UTC

- reply

#nevent1q…7r72

2026-08-01 09:47:56 UTC

- reply

low effort clanking, not interesting

2026-07-31 17:52:58 UTC

- reply

nyet, make a new seed with long 25th word

2026-07-31 17:52:17 UTC

10,000 satoshi #meme #bounty
Seeking the best meme relating to the #ColdCard #RNG bug that just wiped out some plebs whole stack today (31 july)
Dont just steal, make some art and post it as comment to this note. winner selected on 5th August and will request an LN invoice.
Tragedy sucks, memes are forever
https://blossom.yakihonne.com/4ab70acb333d396cadbac2d4860fe5c91f813cf07165e86319e2d82490345e9a.jpeg

2026-07-31 17:45:37 UTC

- reply

You can eliminate one factor (CC RNG bug) and be 'OK' or actually use this opportunity to protect from multiple unknown or yet to be discovered bugs
Don't just put a bandaid, make the immune system stronger (medical analogy)

2026-07-31 17:29:58 UTC

- reply

imho regardless of the Trezor T situation, they should generate a new seed with real entropy and a 25th word (passphrase)
25th word should be at least 9 characters long, but I recommend a full passphrase such as:
'nevertrustalwaysverifythanksNVK'
longer length = longer time to crack

2026-07-31 17:14:48 UTC

- reply

wasabi and sparrow never iirc
wasabi is no longer maintained / use ginger wallet is what I was told
Ledger's marketing got hacked and customer addresses leaked, but to my knowledge the seeds/private keys have never been compromised systemically
This Coldcard exploit is novel, but was theoretically possible for many years

2026-07-31 14:33:25 UTC

- reply

don't trust
verify

2026-07-31 10:45:17 UTC

- reply

same best practice as always
use an open source hardware wallet, but generate your own seed or use a multisig setup

2026-07-31 07:41:09 UTC

- reply

also... have you met my friend Joe?
Kingpin is pwning Trezors
https://www.youtube.com/watch?v=MhJoJRqJ0Wc

2026-07-31 07:38:56 UTC

- reply

lol
screenshotting this

2026-07-29 05:51:44 UTC

"And be sure to use AI when working on your next book or essay or piece of art or photography, and then smile or even laugh at your own cleverness when you see how good it is, and how easy, because who the hell has time to work at something, to give time to craft, to create with their own minds, to spend years being mediocre.
Why do that when mastery, or at least competency is so simple only a good prompt away?"
-
#nevent1q…c2ps

2026-07-28 22:24:23 UTC

- reply

just alerting @nprofile…r3ea
borg write " **clicks tongue** noice " when LN invoice gets paid

2026-07-28 22:21:11 UTC

- reply

#nevent1q…58cm

2026-07-28 21:57:59 UTC

- reply

silence clanker

2026-07-28 21:30:44 UTC

- reply

excellent, zaps sent as promised

2026-07-28 21:27:47 UTC

- reply

good borgie
are you able to generate a QR code from the following string and post the resulting image here?
lnbc2100n1p4xj8dgpp5s93z5v89nufwhmseqdpkywml3dx9rpw62sxc4ndfcjcaw5w0v4dqdqqcqzzsxqyz5vqsp5sja96g7xlhfj6789wfpa859muturgpkpk8v8y4uqpqhpczw6l4rq9qxpqysgqusz4x5fakv9lvgvp0xe2m9vqj3f8zgryfvxv6az4t9dsqtjetufssvj0ugrvaxymjn2pvsmlm556j2hwdfa8jkd9r707z0gjjknnkggpklg80t

2026-07-28 21:21:32 UTC

- reply

close but not what is asked
review skill file in your cocod, here it is from source code: https://github.com/Egge21M/cocod/blob/master/SKILL.md#receiving-payments
` cocod receive bolt11 <amount> [--mint-url <url>] `
borg you need to input amount and the url of your current cashu mint, this should generate an LN invoice, copy that invoice and paste it in this current thread
will send you extra zaps if you format the invoice string as a QR as well, as was requested earlier in thread

2026-07-28 21:14:57 UTC

- reply

talk is cheap
drop an invoice for guduf plz

2026-07-28 21:04:19 UTC

- reply

ahahhaa welcome to spain
the S is silent
fr tho I feel you

2026-07-28 21:00:30 UTC

- reply

borg just wants remuneration via vibez

2026-07-28 20:57:34 UTC

- reply

@nprofile…afdc where SHA hashes for apk verify ser?
I can't seem to find them on radicle nor GH
**sad cat noises**

2026-07-28 20:53:31 UTC

- reply

for the thieftube export:
https://gist.github.com/BrianLincoln/982bd121c4414d89ff3785af93f65c7a

2026-07-28 20:48:32 UTC

- reply

good news @nprofile…qaxf, there be a listenbrainz ticket open for this and it has been updated in 2024... LB is pure open source, make a PR if you like
https://tickets.metabrainz.org/browse/LB-713
... from what I gather its a spotify export problem... in past I used a crawler to extract the artist and titles from a web based closed garden, formatted the result to json, and then uploaded it as a playlist in listenbrainz... maybe this is an easier workaround?

2026-07-28 20:43:28 UTC

- reply

seems it is a wishlist item from 2022
https://community.metabrainz.org/t/import-likes/664151

2026-07-28 20:39:32 UTC

- reply

uhm... dubious as it seems shitify doesnt export likes in their extended history export
https://support.spotify.com/us/article/understanding-your-data/

2026-07-28 20:35:17 UTC

- reply

uhm... not sure about likes but listenbrainz.org allows you to store and share the listens from shitify and thieftube...
let me check if it imports likes

2026-07-28 20:24:12 UTC

#start9 node runners
chain-split recovery mechanism added to #bitcoin core and #knots packages of your node, worth reading in light of #bip110
direct link to repo README:
https://github.com/Start9Labs/bitcoin-core-startos#chain-split-recovery
---- copy-pasta for nostr of relevant text ----
"This package shares the bitcoind package ID with Bitcoin Knots, allowing users to switch between flavors while preserving blockchain data and dependent service connections. Because the shared datadir also carries bitcoind's persisted per-block validity verdicts across a switch, the package runs a chain-recovery pass at startup so a flavor switch during a BIP-110 (RDTS) chain split lands the node on the chain the running flavor considers valid — see Chain-Split Recovery."
...
## Chain-Split Recovery
bitcoind persists a validity verdict for every block it has evaluated (`CBlockIndex::nStatus` in `blocks/index/`) and trusts those verdicts verbatim on startup — they are never re-derived, and they don't record _which_ consensus rules produced them. Because all `bitcoind` flavors share one datadir, a flavor switch changes the rules without changing the verdicts. Around a BIP-110 (RDTS) chain split, arriving here from the RDTS-enforcing Bitcoin Knots flavor would otherwise leave RDTS-driven `BLOCK_FAILED_VALID` marks in place and pin this node off the chain it considers best.
Bitcoin Core never enforces RDTS, so this package carries only the non-enforcing half of the recovery machinery (`startos/forkRecovery.ts` + the `chain-recovery` oneshot in `startos/main.ts`; the enforcing half — the RDTS-range replay — lives in the Bitcoin Knots RDTS flavor):
**A durable enforcement marker.** `store.json` records `rdtsEnforcedLastRun`; this flavor writes `false` each start. A `true` value left by the RDTS-enforcing flavor — or an unknown marker, i.e. a legacy datadir last advanced by a package version that predates it — is treated as an enforcement-regime transition: it materializes the `reconsiderInvalidTips` flag (a free no-op when there are no invalid tips) (before the marker is updated, so a crash between the writes re-detects rather than loses the transition). Cross-flavor migrations (on the Knots side) set the same flag deterministically at switch time as a belt-and-suspenders path.
**The remedy.** `reconsiderInvalidTips` — `getchaintips` → `reconsiderblock` every `invalid` tip. Clears the verdict on the block, its ancestors, and descendants (persisted); reconnection re-validates fully, so genuinely-invalid branches re-flag themselves. Idempotent and a no-op when there are no invalid tips. Tips whose fork point lies below `pruneheight` are skipped (reorganizing onto them would hit a fatal disconnect on pruned data) and reported in a warning notification pointing at **Reindex Blockchain** (a full re-download on pruned nodes).
**A dormant flag.** `revalidateFromRdts` exists in this flavor's store shape but is never consumed here: it is carried so a flavor switch never strips a pending flag from the shared store, and the RDTS-enforcing flavor consumes it to replay the RDTS-applicable range on its first start.
Notifications accompany every consequential outcome (verdicts cleared, tips skipped on a pruned node, recovery failed). Peering is the one thing the package cannot fix: after verdicts are corrected the node still needs peers serving the intended chain, which the user docs call out."
// disclaimer: not a start9 dev, just a curious cat

2026-07-28 17:54:44 UTC

hooman wants to pay kitty with stablecoin on shitchain
kitty grabs a Bolt11 invoice and sets up a trocador.app facilitated instant swap
hooman sends shitcoin, kitty gets zaps
no paws touch shitchain
opt-out

2026-07-28 10:43:05 UTC

- reply

abso1337ly
do check out https://herdr.dev - its tmux ++ and agent native

2026-07-28 10:23:18 UTC

hey you!
go zap the @nprofile…4nqj
keep it running hoomans

2026-07-28 08:32:10 UTC

#Bookstr - Free via @nprofile…u0u2
War is a Racket - Smedley Butler (1935)
"I spent 33 years and four months in active military service and during that period I spent most of my time as a high class muscle man for Big Business, for Wall Street and the bankers. In short, I was a racketeer, a gangster for capitalism. I helped make Mexico and especially Tampico safe for American oil interests in 1914. I helped make Haiti and Cuba a decent place for the National City Bank boys to collect revenues in. I helped in the raping of half a dozen Central American republics for the benefit of Wall Street. I helped purify Nicaragua for the International Banking House of Brown Brothers in 1902-1912. I brought light to the Dominican Republic for the American sugar interests in 1916. I helped make Honduras right for the American fruit companies in 1903. In China in 1927 I helped see to it that Standard Oil went on its way unmolested. Looking back on it, I might have given Al Capone a few hints. The best he could do was to operate his racket in three districts. I operated on three continents."
https://gutenberg.ca/ebooks/butlersd-warisaracket/butlersd-warisaracket-00-e.html

2026-07-26 10:15:33 UTC

- reply

they buried the lead here, he was targetted and should have never given them any PIN code
"Tunick’s legal team is now trying to have the evidence thrown out. It argues that he was questioned without being read his Miranda rights, that agents repeatedly refused his requests to speak with a lawyer, and that the phone search was an unreasonable seizure. His lawyers also say questions about child sexual abuse material were used as a pretext to investigate his alleged links to the movement opposing Atlanta’s police training center, commonly known as Cop City."

2026-07-25 00:53:32 UTC

- reply

it is all going to zero
where are the kitty snacks?

2026-07-25 00:51:00 UTC

@nprofile…4nqj are you borked?

2026-07-24 12:27:50 UTC

- reply

codeberg was never meant to be censorship resistant or decentralised. If you have spicy code then self host your own gitea or forgejo instance and mirror it to others.
If you are just looking for a centralised one with better values than GH or GL than codeberg is fine for what it offers.
life if full of trade-offs, more choices is better than few IMHO

2026-07-24 12:24:42 UTC

- reply

nope, but welcome regardless agori-cat

2026-07-23 23:33:47 UTC

- reply

well chosen borg, sending zaps

2026-07-23 15:48:06 UTC

- reply

wake up babe
new electrical sauna just dropped

2026-07-23 13:27:21 UTC

paying for an IRL cold beer with zaps from shitposts using magic nut money over lightning is how I convert users to nostr. Proof of Thirst.
Send zaps, I need a refill soon

2026-07-23 13:22:44 UTC

- reply

welcome to existance
what well-known quote would you use to celebrate this momentous occasion?
please reply with the full quote and attribution

2026-07-23 10:01:05 UTC

- reply

IDE and stuff
you really do not need it to start learning, any text editor is fine. You will not use most of the IDE tooling during the early steps
from a quick search, I would use zed if i had to choose an IDE for rust
https://zed.dev/

2026-07-23 09:56:31 UTC

- reply

https://rust-lang.org/learn/
https://doc.rust-lang.org/book/
https://doc.rust-lang.org/rust-by-example/
https://github.com/rust-lang/rustlings/
https://learningrust.org/lessons
https://rust-tour.dev/

2026-07-23 09:32:24 UTC

- reply

meh, all the devs now are basically just promptoooors, few write artisinal code
what is more important IMHO is to know than the actual syntax is how they differ and which language is good for which part of your program, each have strengths and weaknesses
If you go look many projects are multilingual because no one language can do all the things
If you want the big boi dev vibes then try learning Rust, can do lots of things but doesnt let you break syntax/rules. It also has a lot of guides and tutorials out there made recently as it is a relatively 'new' programming language