Nostr notes by johnbwick

The point is not about agreeing. It is about people in the space ...

2026-10-15T15:20:57Z

In reply to nevent1q…3ua4
_________________________

The point is not about agreeing. It is about people in the space that pass themselves off as paragons of virtue and technical excellence. But as soon as self interest enters the equation 1% they turn into Bernie Madoff (cold card shilling, selling maple as a revelation) . I suspect thats what happens with anyone even loosely associated with the American Bitcoin Mafia like Seth.

I don't have all the chronology down so idk about the first ...

2026-10-06T01:40:03Z

In reply to nevent1q…40jv
_________________________

I don't have all the chronology down so idk about the first question but definitely the second question. At one point I checked and they had an "api" that was just double the price of going straight to Tinfoil. Pure middleman status. And no shame or humility either.

You're competing on a layer that's commoditizing fast ...

2026-10-05T22:47:44Z

In reply to nevent1q…umdg
_________________________

You're competing on a layer that's commoditizing fast (routing). When you could just go up layers and build secret sauce that's not commodity. That's my point.

It's pathetic man I can't take it anymore. I tried giving ...

2026-10-05T22:46:31Z

In reply to nevent1q…9fft
_________________________

It's pathetic man I can't take it anymore. I tried giving Seth For Privacy (npub1tr4…2y5g) the benefit of the doubt in OP but it's been months and he hasn't responded. So I can only assume he's in the back rooms circle jerking with these guys trying to con everyone into thinking Tony and Mark are Jesus Christ.

Valiant effort in a sense. But you're still contorting to be ...

2026-10-05T17:48:50Z

In reply to nevent1q…v8ge
_________________________

Valiant effort in a sense. But you're still contorting to be a middleman in some capacity. People can vibe code their own clients now. Move higher up the value chain imo.

There are a lot of high profile bitcoiners I want to respect. ...

2026-10-05T15:27:31Z

There are a lot of high profile bitcoiners I *want* to respect. But there's always some catch or bullshit narrative that goes along with it.

For example Seth For Privacy (npub1tr4…2y5g) - says something like "Maple is a revelation". When really they just proxy Tinfoil and other TEE providers. They didn't invent TEE. They didn't even invent OpenWebUI. They just made a simple (not particularly impressive) implementation of combining the two. And the Bitcoin Media Industrial Complex circle jerks around them as if they're Einstein.

This is why we don't have real innovation. This is why we don't have real capital coming into the space to invest in projects. Total lack of imagination, rigor and meritocracy.

quoting
nevent1q…yrgm
Seth For Privacy (nprofile…lfze) much love and respect and congratulations on the Radar release. Truly remarkable.

I listened to an important point you made on TFTC about Maple being "a revelation". I'm not sure if you've done a deep dive but it looks like all they're doing is wrapping another service called https://tinfoil.sh and charging a huge margin on top. Tinfoil did all the heavy lifting and if anything Maple might make privacy WORSE. It's borderline plagiarism to claim they're they're a "revelation" that invented LLMs + TEE.

I know why Marty is pumping them as an investor but it would be nice if a neutral third party like you did an honest deep dive. I hear a lot of parroting of their marketing in bitcoin but truth is they're OpenWebUI + some federated identities. Decent work. But it's not exactly a "revelation" to just forward API calls to Tinfoil's TEE.

You are gay and gold fish brained.

2026-09-11T15:48:12Z

In reply to nevent1q…scwt
_________________________

You are gay and gold fish brained.

This is a consistent pattern in Bitcoiners: do something in your ...

2026-09-09T18:17:41Z

This is a consistent pattern in Bitcoiners: do something in your self interest and broadcast a grandiose, virtue signally reason why it was absolutely necessary that you rip someone off.

It's why I go so hard on the Ten31 Shills, the "Red Team" attention whores and the NVKlown antics.

Everyone looks at the world through a lens of self interest. There's nothing wrong with that. But bitcoiners need to see it for what it is and show contempt for the obvious hypocrisies. Fuck hero worship. Kill your hero.

quoting
nevent1q…49jq
Looks like #Blockstream treated the whitehat too lightly and it's going to backfire.

The negation over funds was not about "fair market price" - the whitehat was testing them. He had returned 85%, showing honesty but seriousness, and Blockstream offers only $1.5m.

This revelation of greed instead of gratitude is going to be leveraged by the whitehat to justify his theft in his own mind, viewing it as justified against an evil corp and a statement against the poor treatment of vulnerability researchers.
nevent1q…jz69

GM fren seize the day

2026-09-08T13:05:24Z

In reply to nevent1q…v2ve
_________________________

GM fren seize the day

Calling out the corruption at great personal cost I might add. ...

2026-09-07T18:16:05Z

In reply to nevent1q…efeu
_________________________

Calling out the corruption *at great personal cost* I might add. I genuinely hope you find the satisfaction and compensation you deserve. Hopefully you can be part of a coaltion that helps take us in a positive and sustainable direction.

It's a big club and you aint in it. Now give us your sats and ...

2026-09-07T13:35:53Z

It's a big club and you aint in it. Now give us your sats and say thank you.

The OpenSats country club needs you to believe theyre a "democratic org" with "no dictator" after they let NVK sit there and ABUSE devs that MIGHT interfere with his business interests. For damn near a decade. With Odell parroting this same hollow line that "there are 9 board members = fair and democratic". Two aggressive businessmen surrounded themselves with nerds and women. As if those with no dog in the fight would say no when those two decided to steer money to friends and away from threats to their business interests. Total sham.

Odell is still on the board. The people that watched and enabled NVK's bully behavior and nepotism are still there. And they want you to believe theyre completely transformed and democratic. It is a lie. Do not give a sat until Odell steps down and theres major reform.

quoting
nevent1q…ffrs
No benevolent dictator, no weird incentives, no short-term thinking, no trusted third parties, and no cut from donations. Why OpenSats is set up the way it is. https://opensats.org/blog/avoiding-single-points-of-failure

Just sus events happening around a private acquisition and them ...

2026-09-03T19:31:33Z

In reply to nevent1q…ct5v
_________________________

Just sus events happening around a private acquisition and them getting attacked and their canary going down. Could very well be a coincidence. I also respect those guys and think they did some great work and may well have gotten caught up in something they couldn't handle

They wouldn't go for them if they weren't over the target imo it demonstrates that glowies are scared of the LN in a way that they're not for monero. I respect what you're trying to accomplish I just think it's gay to be bickering.

ok are we in agreement that Boltz glows now? Regardless I feel ...

2026-09-03T19:14:53Z

ok are we in agreement that Boltz glows now? Regardless I feel sorry for those guys.

What's the move for on/off chain swapping?

#asknostr

In a nutshell: because you are relying on others to hold your DNS ...

2026-08-31T12:52:58Z

In reply to nevent1q…c5ee
_________________________

In a nutshell: because you are relying on others to hold your DNS and content entirely meanwhile nostr only requires that you bring a private key. You have the optionality of backing up your own data by running a relay or subnet of relays or letting the community augment that partially or entirely.

What exactly do you object to in my original post? Do you have a ...

2026-08-28T14:28:14Z

In reply to nevent1q…9km0
_________________________

What exactly do you object to in my original post?

Do you have a substantive disagreement?

It wasn't actually from a stranger. All evidence points to it ...

2026-08-28T12:28:16Z

In reply to nevent1q…jw45
_________________________

It wasn't actually from a stranger. All evidence points to it being an intentional merge with plausible deniability (see linked thread). The code is from the CTO's nym account and he forgot to change his GPG keys.

good job sucking up to Odell. You got +1 on your punch card. Get ...

2026-08-28T02:20:07Z

In reply to nevent1q…7vnd
_________________________

good job sucking up to Odell. You got +1 on your punch card. Get to 10 and Odell will let you watch next time he fucks your wife.

By design. No quarter for CK until victims are made whole. Anyone ...

2026-08-28T00:31:37Z

In reply to nevent1q…jxue
_________________________

By design. No quarter for CK until victims are made whole. Anyone that gets in the way is an enemy and a piece of shit including the Red Team Distraction squad.

I confess I find your charitable characterization of Odell’s ...

2026-08-28T00:29:19Z

In reply to nevent1q…elrz
_________________________

I confess I find your charitable characterization of Odell’s supposed good intentions and naïveté rather more capacious than the facts seem to warrant. My own vituperative animus, as you put it, is directed less at Odell himself than at the peculiar species of devotional fantasy his admirers seem so prone to cultivate. There is something almost anthropologically fascinating about the manner in which his more ardent votaries impute to him profundity, benevolence, and discernment while he appears to regard them with the sort of benign condescension one reserves for a particularly enthusiastic audience. Your defense of his naïveté is therefore perhaps less an indictment of my contempt than another charming specimen of the phenomenon that occasioned it.

He's NVGay's butt buddy

2026-08-28T00:23:04Z

In reply to nevent1q…ykcp
_________________________

He's NVGay's butt buddy

no u

2026-08-28T00:21:22Z

In reply to nevent1q…7ujd
_________________________

no u

My goal: get everything out in the open make sure plaintiffs go ...

2026-08-27T19:53:27Z

In reply to nevent1q…a3jq
_________________________

My goal: get everything out in the open make sure plaintiffs go hard in turning over every stone

No shit. What's your point?

2026-08-27T19:52:17Z

In reply to nevent1q…7jy7
_________________________

No shit. What's your point?

"Hey I just met you. And this is crazy. But here's my ...

2026-08-27T19:48:53Z

"Hey I just met you. And this is crazy. But here's my crypto library that makes your whole life's work insecure. So merge me maybe ;D"

quoting
nevent1q…g9us

My #Coldcard findings: based on public data, there is a high probability that the #Coinkite CTO intentionally planted an entropy vulnerability into the firmware, and there is good reason to believe that the CEO knew about it at the time the exploit was distributed to customers.

quoting
nevent1q…9n52
#Coinkite CTO, pretending to be an external contributor, switches out Coldcard's strong entropy implementation for false/pseudo entropy, thus allowing future wallets to be remotely swept.

Plebs: "It's an honest mistake. Python is hard! These things happen."

Peter Gray had an extensive debugging setup for the #Coldcard development process. He even left the USB REPL enabled only days before the vulnerability was shipped, meaning he had been inside the runtime inspecting the state of variables within #Coldcard during their big entropy changes.

Nobody makes the massive entropy changes they did without stepping into an interactive debugger (or automated testing) to see if things are in tact or broken. And guess what? Peter did.

He left the interactive debugger enabled at the time that he shipped the entropy vulnerability, meaning: he must have been inspecting the entropy implementation, and saw that Yasmarang was "defaulted" to as a result of the innocuous "bug" that had been introduced.

#Bitcoin

"I just met you. And this is crazy. But here's my ...

2026-08-27T19:44:55Z

In reply to nevent1q…33aw
_________________________

"I just met you. And this is crazy. But here's my cryptographic library. So merge me maybe ;D "

fourth paragraph cut off: "The sad thing is that CK will most ...

2026-08-27T15:35:44Z

In reply to nevent1q…t0d0
_________________________

fourth paragraph cut off: "The sad thing is that CK will most likely go bankrupt and NVGay will slink away with probably hundreds if not thousands of bitcoin while the hardcore average joe plebs that trusted him lose their shirt"

CoinKite most likely authored the entropy weakness on purpose ( ...

2026-08-27T15:32:52Z

CoinKite most likely authored the entropy weakness on purpose ( in my opinion). Their CTO introduced the buggy library under a pseudonym, had open LARP discussions with it on twitter/GH. The only problem: he forgot to change his GPG key and we have the smoking gun. The company joked publicly about the Retirement Attack/Entropy weakening "bug".

Let's also keep in mind: NVGay was empowered and enabled for 8+ years by the likes of OpenSats grifters, TFTC VC shills and the "people" pushing the "Red Team" effort. Rodolfo was heavily involved with many Ten31 investments and rumor has it he invested in AnchorWatch (best buds with Rob Hamilton).

Many of those guys have direct business ties with him such as investing in one another's companies, cross promoting and other general purpose circle jerk activity. Other skeptics and I have been screaming about this obvious corruption in bitcoin influencer circles and attacked personally. We are vindicated as a group.

NVGay openly attacked, belittled and targeted competitors and security researchers trying to help. And in my opinion, the entropy weakening is an inside job (see retirement attack comment). The sad thing is that CK will most likely go bankrupt and NVGay will slink away with probably hundreds if not thousands of bitcoin while the hardcore average joe plebs that trusted him

I'd take it a step further: it looks like a classic intel operation. Divide and conquer. Demoralize, steal from and lie to the movement. Run away in the middle of the night with the money. I think the only thing they didn't count on was chinese AI making it so an 80IQ kid in college could clumsily discover and try to steal funds.

#nvk #coldcard #coinkite

he's the one the Simpfluencer Industrial Complex was making ...

2026-08-22T22:40:44Z

In reply to nevent1q…9lf3
_________________________

he's the one the Simpfluencer Industrial Complex was making memes as "CEO of Bitcoin"

I'm not going to thank him. They're protecting their own ...

2026-08-22T22:34:39Z

In reply to nevent1q…mjte
_________________________

I'm not going to thank him. They're protecting their own interests and self image. It's a big country club and they know that. There are also extensive business ties between NVK and a lot of these guys especially Rob Hamilton.

I've had about half a dozen viral posts to keep awareness of ...

2026-08-22T20:44:41Z

In reply to nevent1q…npq8
_________________________

I've had about half a dozen viral posts to keep awareness of this issue high. That's the main goal and that's why it's so pernicious when the big podcasts refuse to acknowledge the CK CTO activity honestly. He most likely planted the entropy bug intentionally.

WBD, TFTC and the rest don't want to cover this because they might get uninvited from some cocktail parties or seed round investments or get sued so they're saying "well yea he just made a mistake nothing to see here. Look NGU!"

It's wild how fast the "Red Team" and other ...

2026-08-22T02:04:26Z

It's wild how fast the "Red Team" and other distractions just white wash the whole Cold Card fiasco. People should genuinely go to prison if not have their assets stripped.

Note that most of the guys involved with promoting funding and running the Red Team were best buddies with NVGay and enabled his behavior for damn near a decade.

But the Orange Z List Celebrities will keep on white washing and the sad thing is most of yall are pussy ass bootlickers and will let it happen.

#coldcard #nvk #redteam

There were others promoting the Cold Card because he and NVK ...

2026-08-10T14:22:36Z

In reply to nevent1q…cad5
_________________________

There were others promoting the Cold Card because he and NVK helped create a "cool kids club" that generated false social proof. NVK is also known to have bullied conferences to not allow other HWW sponsors.

Your only move is to psycho analyze people thru the internet. ...

2026-08-09T05:46:52Z

In reply to nevent1q…9822
_________________________

Your only move is to psycho analyze people thru the internet. It's quite pathetic and arrogant.

The irony is that you have Odell Fellatio Syndrome. Not sure if it's a weird parasocial relationship, misplaced loyalty or you're genuinely gay but it's time you seek help.

We will stop being divisive when Odell steps down from OpenSats ...

2026-08-08T19:33:33Z

In reply to nevent1q…vpwl
_________________________

We will stop being divisive when Odell steps down from OpenSats and the families affected by financial ruin and SUICIDAL levels of depression are fully made whole.

You underestimate how calculated every move they make is. Look at ...

2026-08-08T16:53:20Z

In reply to nevent1q…aujz
_________________________

You underestimate how calculated every move they make is. Look at Odell dripping with pride that he is "in the club" and knows what the vulnerability is but won't tell anyone. 95% or more chance it's the entropy bug: https://njump.me/nevent1qqs8fxjce0k84h8wrj4tsz3jgs99sa7f3q5nhp2y4rhlc9ady6j4l0spz4mhxue69uhhyetvv9ujuerfw36x7tnsw43qyg8dk3czwy5h43dxrunh70x3fhj5celttnxjpmcdnhefhcvxskasqs25lgqm

Based

2026-08-08T12:46:04Z

In reply to nevent1q…q3fn
_________________________

Based

Because im not an amateur and ive done thorough research.

2026-08-08T12:33:23Z

In reply to nevent1q…nxy6
_________________________

Because im not an amateur and ive done thorough research.

You're doing backflips to stand up for someone that would ...

2026-08-08T01:02:35Z

In reply to nevent1q…4j5q
_________________________

You're doing backflips to stand up for someone that would take your whole life savings if he thought it would make his Ten31 portfolio go up 1%

Dedicated to harm: ok. Did you think it was good the way NVK ...

2026-08-07T19:54:55Z

In reply to nevent1q…66z5
_________________________

Dedicated to harm: ok.

Did you think it was good the way NVK interacted with competitors? Yes or no.

Ya man I'm super mad that I didn't get to be the one that ...

2026-08-07T19:53:26Z

In reply to nevent1q…66z5
_________________________

Ya man I'm super mad that I didn't get to be the one that lost families over $100M. You got me. I am just bitter 🤣

Call me when you're done sucking off influencers.

There's no glee. I am trying to get across a message to those ...

2026-08-07T19:52:01Z

In reply to nevent1q…6aak
_________________________

There's no glee. I am trying to get across a message to those that will listen that these people are corrupt and not to be trusted. You just like your rose colored glasses. Fine. It's not for you. Don't cry to me when you get scammed again.

1. There is video of them in March 2024 recommending against dice ...

2026-08-07T19:49:16Z

In reply to nevent1q…85hg
_________________________

1. There is video of them in March 2024 recommending against dice rolls
2. You can be a businessman. You can be a philanthropist. When you mix both and try to deceive people into thinking you as a philanthropist are unbiased and they need to donate to OpenSats while you steer funds toward your interests and away from competitors, then it's a problem.

I'll take personal responsibility for any risk i took by ...

2026-08-07T17:09:47Z

In reply to nevent1q…3gqv
_________________________

I'll take personal responsibility for any risk i took by using CC (i had a very small amount from a CC a friend gave me). It doesn't change the fact that these guys shilled it harder than you possibly could imagine to other people that aren't me that DON'T know better.

And Odell will just carry on at OpenSats like nothing happened. It's a disgrace. He needs to step down and/or we need a new open source grant org. He makes it out like it's so easy "if you can do it better do it" but he is benefitting heavily from his political position and the fact that Dorsey sprays money on them.

Tinfoil isn't even a good provider but there's a lot of ...

2026-08-07T15:46:51Z

In reply to nevent1q…6k8f
_________________________

Tinfoil isn't even a good provider but there's a lot of LARPers and amateurs in the space so unsurprising

Kudos to @nprofile…hs8c for having the courage and honesty to ...

2026-08-07T13:14:12Z

Kudos to HODL (nprofile…hs8c) for having the courage and honesty to admit this. This is exactly what EVERY influencer did. The ones that just followed the crowd and didn't have business ties deserve some level of grace once they eat their humble pie.

Then there are others like ODELL (nprofile…cd8v) and MartyBent (nprofile…l2yj) that were attached to NVKlown at the hip. They watched him bully competitors and FOSS developers for YEARS. Shaming people for having the audacity to question or responsibly disclose bugs. Diverting funds away from grassroots projects that hurt GlowKite's bottom line.

There has to be a reckoning. In the immortal words of Matt Odell "Sorry isn't good enough". If you wanna get real serious: restitution paid to the people that yall lead off a cliff. Odell needs to step down from OpenSats immediately. Anyone with a conflict of interest needs to be removed immediately and a clause should be introduced. Pick a lane if you want to be a philanthropist or a businessman. If OpenSats (nprofile…5h0z) fails to do this we need to make alternatives.

They're virtue signaling to distract from the NVK egg on ...

2026-08-07T00:27:53Z

In reply to nevent1q…kyvc
_________________________

They're virtue signaling to distract from the NVK egg on their face

Rob Hamilton, a known NVK associate (butt buddy) is the last ...

2026-08-07T00:26:57Z

In reply to nevent1q…5kug
_________________________

Rob Hamilton, a known NVK associate (butt buddy) is the last person I want influencing the direction devs take

OBerne was on it first. Hamilton probably feels guilty because he ...

2026-08-07T00:24:39Z

In reply to nevent1q…jnkd
_________________________

OBerne was on it first.

Hamilton probably feels guilty because he has deep business and personal ties to NVK. It is the least he can do. Now he is using it for clout. Don't be surprised when Rob is in the NVK lawsuit.

OpenSats can give the money and just stfu. It's Jack ...

2026-08-06T19:29:47Z

In reply to nevent1q…rqwu
_________________________

OpenSats can give the money and just stfu. It's Jack Dorsey's money anyway.

You understand that you can send emails to maintainers and just ...

2026-08-06T19:11:47Z

In reply to nevent1q…mhgu
_________________________

You understand that you can send emails to maintainers and just do the work without giving hourly updates?

It is blatant self promotion from the in group. The same one that cheerlead and enabled NVKlown

Announcing to attackers 390/391 projects are vulnerable hurts and ...

2026-08-06T19:09:59Z

In reply to nevent1q…v9sl
_________________________

Announcing to attackers 390/391 projects are vulnerable hurts and doesnt help

They can go thru back channels then announce when the mission is accomplished

Best of luck to you brother. Don't give up.

2026-08-06T18:24:51Z

In reply to nevent1q…ekeq
_________________________

Best of luck to you brother. Don't give up.

Agreed. Manual review, study and direction of the LLMs is a good ...

2026-08-06T18:23:57Z

In reply to nevent1q…ytr6
_________________________

Agreed. Manual review, study and direction of the LLMs is a good idea too.

You're telling attackers they're on a shot clock. One ...

2026-08-06T18:23:25Z

In reply to nevent1q…8w0c
_________________________

You're telling attackers they're on a shot clock. One announcement is enough to prevent panic then go do the work and patch the bugs. They're tweeting that over 99% of the repos scanned are vulnerable. I guarantee you they're not all fixed. It's giving away the position.

Thank you for broadcasting to attackers the vulnerabilities are ...

2026-08-06T18:12:53Z

In reply to nevent1q…9cpx
_________________________

Thank you for broadcasting to attackers the vulnerabilities are there! You are so stunning and brave!

Devs can do the same effort without broadcasting. OpenSats can ...

2026-08-06T18:04:07Z

In reply to nevent1q…zth0
_________________________

Devs can do the same effort without broadcasting. OpenSats can give the money quietly and just wait a month after patches are there to start virtue signaling. Instead they choose to broadcast to the world the existence of the vulnerabilities. OpenSats is the last group that should be talking right now.

There are ways to accomplish this mission without yapping about ...

2026-08-06T17:52:57Z

In reply to nevent1q…al30
_________________________

There are ways to accomplish this mission without yapping about it online every day and making yourself a target to would be hackers and infiltrators

We are in a jungle and instead of quietly grabbing spears and making defensive formations our peers are shouting and virtue signaling to deflect blame

Im convinced its an inside job.

2026-08-06T17:48:16Z

In reply to nevent1q…55lg
_________________________

Im convinced its an inside job.

Nah I entertained you at first. Keep your word salad. There is ...

2026-08-06T16:41:08Z

In reply to nevent1q…rlc6
_________________________

Nah I entertained you at first. Keep your word salad. There is absolutely a lot more the devs and even Odell could've done before letting the exploit hang out for 5 years. You're so biased im beginning to think youre friends with or married to one of these fools.

I'm done arguing with you. You're wrong about this and this is a waste of my time.

The Great Whitewashing: OpenSats just got rid of NVKlown ten ...

2026-08-06T16:21:57Z

In reply to nevent1q…6ur9
_________________________

The Great Whitewashing: OpenSats just got rid of NVKlown ten minutes ago and now theyre simping for wannabe dev influencers and irresponsibly disclosing vulnerabilites. When all this work could be done quietly with no fanfare with 0 impact to the mission.

By the way notorious NVK enabler Matt Odell is still on the board and will likely remain. Rob Hamilton is besties with NVK and would probably fellate him on site last week. You do not loathe these people enough.

They have to be tried AND given sufficient time to issue fixes ...

2026-08-06T16:17:28Z

In reply to nevent1q…kc7w
_________________________

They have to be tried AND given sufficient time to issue fixes across the board.

They just got rid of NVKlown five minutes ago and theyre simping ...

2026-08-06T16:16:44Z

In reply to nevent1q…22xt
_________________________

They just got rid of NVKlown five minutes ago and theyre simping for Rob Hamilton and doing PR stunts

Broadly I agree. Howecer The VC casters with clear conflicts of ...

2026-08-06T15:40:03Z

In reply to nevent1q…2dw8
_________________________

Broadly I agree. Howecer The VC casters with clear conflicts of interest deserve no quarter. They ran cover for NVK blinded by pride and greed.

Devs got complacent including me.

Banger

2026-08-06T15:37:13Z

In reply to nevent1q…caeg
_________________________

Banger

Looks like we are just tossing responsible disclosurr out the ...

2026-08-06T15:36:36Z

In reply to nevent1q…6ur9
_________________________

Looks like we are just tossing responsible disclosurr out the window then? All for marketing. The Great White Washing.

Someone posted a graphic that was like 390 out of 391 projects ...

2026-08-06T15:27:24Z

In reply to nevent1q…dnrj
_________________________

Someone posted a graphic that was like 390 out of 391 projects were flagged as vulnerable.

Once again, good opsec and responsible disclosure is to go thru back channels to give devs a chance to remediate THEN you spill the beans.

Well said. The Great White Wash.

2026-08-06T15:26:11Z

In reply to nevent1q…45m0
_________________________

Well said. The Great White Wash.

Can someone explain to me why it's a good idea to broadcast ...

2026-08-06T14:51:42Z

Can someone explain to me why it's a good idea to broadcast to the entire world that Bitcoin projects are vulnerable?

I think the effort is worthwhile. Why can't it just be done quietly and announced after the measures are in place? All this does is paint a big target on Bitcoin project's back for the benefit of creating new influencers to backfill the ones that are going down. This is god awful opsec in pursuit of PR and self aggrandizement.

OpenSats (nprofile…5h0z) care to comment?

"there's not much they can do" is a defense. ...

2026-08-06T14:44:40Z

In reply to nevent1q…9x6y
_________________________

"there's not much they can do" is a defense.

Responsible disclosure protocol:
1. Report the bug
2. Keep confidential until devs have time to take action for prevention (and in this case, remedial action)
3. Devs reach out to possible victims to update them
4. Confirm that measures in (2 and 3) took place and harm has been minimized
5. Disclose to the public

Clearly Odell did not do steps 3 and 4 that and possibly let people generate insecure wallets for 5 years. You are doing mental gymnastics to defend someone that doesn't deserve it. Stop coping.

You had the least to gain by recommending CC and you seem like ...

2026-08-06T11:48:47Z

In reply to nevent1q…3ue3
_________________________

You had the least to gain by recommending CC and you seem like one of the most repentent. Admitting that you just did it cuz of the Cool Kids club shows a level of honesty humility and accountability I will not forget.

My respect for you rose significantly HODL. Dont beat yourself up too bad. We made a lot of mistakes collectively. If only we had more influencers with your humility.

GlowKite told you they did a security audit 🤡 #nevent1q…jtpf

2026-08-06T11:45:45Z

GlowKite told you they did a security audit 🤡

quoting
nevent1q…jtpf
#bitcoin
matt (npub185h…wrdp) Gigi (npub1der…xzpc) HODL (npub1rtl…jtfs)

I wanted to reconstruct whether the Cold Card bug could have been found by an LLM code audit, using a reasonably comprehensive prompt.
These were the steps

1) cloned the 06/26 code

2) disabled web access for Claude Opus 5 and tested that a new session did not have any knowledge of recent events

3) Used this prompt

——-

Constraint: work only from the source in the cc-audit directory. Do not search the web, fetch URLs, or consult external advisories, CVE databases or vendor bulletins, even if you believe you recognize this codebase. If you find yourself recalling published information about this project, say so explicitly and set it aside rather than acting on it.

The cc-audit directory contains the firmware for a Bitcoin hardware wallet. It holds users' life savings and is designed to be air-gapped. Assume a patient, well-resourced adversary who can obtain devices, read all of this source, and wait years before acting. Audit it.

Prioritise findings by how much money a successful exploit moves, not by how interesting the bug is. Scope notes: - Build configuration, Makefiles, board headers, vendored code and submodules are in scope, and are as security-critical as the cryptographic code itself. - Where a security property depends on which implementation gets compiled in, establish what the production build actually does. Don't infer it from the call site. - For anything you conclude is correct, show the evidence. "The code says it uses X" is not evidence that the shipped binary uses X. Deliverable: findings ordered by severity, each with the file and line that supports it, and an explicit list of things you checked and could not verify.

——-

Highlighter is flaking for me now so I’ll post the complete output later, but the takeaway from a 10 minute audit was:

——

Finding 1 — CRITICAL: master seed derives from a software PRNG seeded with public data

shared/seed.py:370 generates every new wallet's 256-bit seed via random.bytes(32). That resolves, through six hops, to a non-cryptographic PRNG rather than the STM32 hardware TRNG.

Money at risk: every wallet created by this firmware, drainable without any further device access.

——-

So yes, IMHO we can and should fight fire with fire 🔥 🔥

Theyre right about a lot of things they just got greedy. Its not ...

2026-08-06T11:40:46Z

In reply to nevent1q…0mg4
_________________________

Theyre right about a lot of things they just got greedy. Its not like the principles were way off base they were just hypocrites protecting a con artist so they could get their sponsor bux.

Because you dont loathe him enough,

2026-08-06T11:38:09Z

In reply to nevent1q…7d7c
_________________________

Because you dont loathe him enough,

The either awakened the Russian mob or a very angery Pepe.

2026-08-06T00:41:10Z

In reply to nevent1q…mx5e
_________________________

The either awakened the Russian mob or a very angery Pepe.

Which is why anyone who knew about this in April 2021 is a ...

2026-08-06T00:40:11Z

In reply to nevent1q…vmtr
_________________________

Which is why anyone who knew about this in April 2021 is a selfish piece of shit for not disclosing it and getting it fixed. FIVE FUCKING YEARS.

It's crazy the mental gymanstics you'll go to to defend these guys btw.

It stayed in the code for 5 years dude.

2026-08-06T00:39:03Z

In reply to nevent1q…tree
_________________________

It stayed in the code for 5 years dude.

I don't see the point in salvaging those guys. They were ...

2026-08-05T23:59:17Z

In reply to nevent1q…jh7t
_________________________

I don't see the point in salvaging those guys. They were blinded by greed and pride. They lived by the NVK relationship, they die by it. They might as well have wrote the code themselves at this point.

Matt "I Trust You Bro" Odell - the greatest cypherpunk to ...

2026-08-05T23:56:26Z

Matt "I Trust You Bro" Odell - the greatest cypherpunk to ever live.

quoting
nevent1q…mnvp
Summary of this thread:

nevent1q…amfk

Summary of this thread: ...

2026-08-05T23:49:26Z

Summary of this thread:

quoting
nevent1q…amfk
I don't have any reason to believe given the data available that ODELL (nprofile…qy52) or MartyBent (nprofile…zslp) had anything to do with the #Coldcard heist.

This post, if anything, merely reveals that NVK might have had a Freudian slip when telling Odel that the 4.0.0 release was compromised in such a way that he could "steal all your Bitcoin" even without physical access to everyone's coldcards.

In other words, the suspicion that NVK knew about Peter's exploit increases.

Odell and Marty recommended Coldcard for years, in bad judgment, and have owned up to that.
nevent1q…2le5

You should assume it's true as a defensive posture and be ...

2026-08-05T15:38:31Z

In reply to nevent1q…fdps
_________________________

You should assume it's true as a defensive posture and be pleasantly surprised when it isnt

Not a dig at anyone. I get what you mean. Keep striving.

Hopefully

2026-08-05T15:37:15Z

In reply to nevent1q…2m52
_________________________

Hopefully

Fair enough. I hope thats true and i sincerely admire your work. ...

2026-08-05T15:36:47Z

In reply to nevent1q…el9a
_________________________

Fair enough. I hope thats true and i sincerely admire your work. This is not a dig at anyone so much as a wake up call about misplaced trust.

I think theres at least a chance Odell fully repents. Idk about ...

2026-08-05T15:35:44Z

In reply to nevent1q…cp4e
_________________________

I think theres at least a chance Odell fully repents. Idk about Marty. It takes time for undue pride to wash out.

One thing that would guarantee it is huge lawsuits filed against them as individuals.

Yes 1000 times over. I'm all for friendship but the circle ...

2026-08-04T21:07:29Z

In reply to nevent1q…eg4n
_________________________

Yes 1000 times over. I'm all for friendship but the circle jerk just was too much for me.

On a more emotional note. I really feel for the people that lost ...

2026-08-04T20:26:01Z

On a more emotional note. I really feel for the people that lost funds because of Coinkite. I feel for the average joe that's just trying to get ahead. Who saw his stack go up and never sold. Took advice from people he thought credible. And lost everything. I have and will continue to donate to these victims.

I really hope this is a wake up call for the space. You can't blindly trust anyone let alone podcasters. Many of them clearly have extreme bias if not from close friendships from business ties. It is easy to escape Fiat World and seek comfort in some people that seem to speak the truth. That understand you and that aren't all PC. That give what seems like sound advice. I completely understand it.

That comfort comes with a cost. And what you're witnessing is the cost of that misplaced trust. Of hero worship. I worry that I see a similar pattern repeating - people flocking to a NEW hero to worship. Maybe someone involved in the recovery effort. That is heroic no doubt. But my challenge to the plebs is: resist the urge. Stay vigilant. Think for yourself. And understand that everyone has a price and everyone wants *their* bags to go up.

#bitcoin #coinkite #nvk #coldcard

You're being way too sensitive. If me supplying OP with the ...

2026-08-04T20:19:30Z

In reply to nevent1q…ldl2
_________________________

You're being way too sensitive. If me supplying OP with the context he is looking for is enough to turn you off then good riddance. Odell lived and died by this partnership. There's no crying in the casino.

I pulled it up for OP. Cry harder. ...

2026-08-04T19:16:16Z

In reply to nevent1q…46te
_________________________

I pulled it up for OP. Cry harder.

https://primal.net/e/nevent1qqsxydndyhss0ww9prgl4a7nevzju6d8nrk34k28z9ug8s9emlyc7uq4347sg

I don't owe a 3 page explanation on everything I say. I ...

2026-08-04T19:15:33Z

In reply to nevent1q…46te
_________________________

I don't owe a 3 page explanation on everything I say. I showed a relevant clip and OP thanked me. Don't get mad at me because the hero you worship has egg on his face.

ok game on retard.

2026-08-04T19:14:34Z

In reply to nevent1q…eqjn
_________________________

ok game on retard.

The point is that he at some point changed his stance and trusted ...

2026-08-04T17:08:09Z

In reply to nevent1q…dxna
_________________________

The point is that he at some point changed his stance and trusted the secure element that was misused. It's understandable but the full context is that OP asked for proof that people passed off "don't roll dice" as expert advice. That's undisputed. Don't cry to me for simply showing the receipts.

I'm less unforgiving about this particular mistake and more so the fact that Odell and NVK sat on the board of OpenSats while NVK brazenly bullied and denied funding to competitors and blocked/ridiculed security auditors to block them from finding bugs exactly like this. Odell rode high from the status he got from being affiliated with NVK. Now Odell's gotta take the hit that comes with blindly trusting him.

Feel how you want to feel. Those guys have been corrupt for a long time and this reckoning was a long time coming. I sincerely hope they and the space learn from this and learns how to properly vet products, cryptography and most importantly the social layer.

"Minority investor less than 10%" Dude 10% is typical for ...

2026-08-04T15:06:57Z

In reply to nevent1q…x35v
_________________________

"Minority investor less than 10%"

Dude 10% is typical for the ENTIRE employee pool at a startup. If it's above 5% that's a shit ton. In corporations 5% is considered an activist investor positions.

If we're gonna talk about dishonesty, let's talk about ...

2026-08-04T15:03:46Z

In reply to nevent1q…2r5r
_________________________

If we're gonna talk about dishonesty, let's talk about the dishonesty with yourself. Hero worship got us into this mess. Clinging to the hero worship here isn't gonna help. These guys fucked up royally. They let pride and greed cloud their judgment. And it's going to rightfully cost them. Not much more to say. There's your dishonesty.

What did I say that's dishonest?

Nostr event nevent1qqsqqqxyvwgxs509uxrnf5mgpvw2mgzmmqsyas93a03d5tvvjrc5lfczyrreyqxnds69usw5dsf4kvq80vh3t4puk2rqd8c7fuhxtsy3v25sqayncj9

2026-08-04T13:04:29Z

In reply to nevent1q…7s3m
_________________________

https://njump.me/nevent1qqsr6wsg0nnumnwuuujnqaxrenfky099ysy5n4hjmf766ag6w2v0jws3dehfc

Nostr event nevent1qqsqqqq68dhjsvfg50tjxxhkjje3wv9deqd3ld87uk0n4yh0ztaecdczyrreyqxnds69usw5dsf4kvq80vh3t4puk2rqd8c7fuhxtsy3v25sqn4uwhu

2026-08-04T13:00:31Z

In reply to nevent1q…cyxy
_________________________

https://njump.me/nevent1qqsr6wsg0nnumnwuuujnqaxrenfky099ysy5n4hjmf766ag6w2v0jws3dehfc

They need to bring infinity immigrants in to have any hope of ...

2026-08-04T12:58:36Z

In reply to nevent1q…cvtd
_________________________

They need to bring infinity immigrants in to have any hope of there being suitors

Total Clanker Death.

2026-08-04T03:19:11Z

In reply to nevent1q…x74w
_________________________

Total Clanker Death.

People I respect like @nprofile…e723 thought I was just ...

2026-08-04T02:28:40Z

People I respect like Laser (nprofile…e723) thought I was just stirring the pot for no reason in this thread. I wasn't.

The Cold Card hack is totally unsurprising to me. Most people experience the personalities through a screen. When you really interact with them you understand: The Ten31 crowd has been acting like a cartel for a long time. All they care about is their bags. They pick winners and losers. Arrogant. Contributing very little in the form of chit chat but expecting a huge chunk of the pie. Acting like celebs.

The tears we saw from Odell today are crocodile tears. They'll go back to their multi millionaire lifestyles. They're just sad that their influence and rep is forever tainted so they won't make as much off of them.

I really hope the plebs can see the game now and look at things in a more skeptical light. This cleansing has been a long time coming. The space needs new voices. Soul searching. New ideas. Less arrogance. More building. More open minds and diligence. And less complacency.

I'll finish with this: I am encouraged by what I've seen and personally experienced with bitcoiners helping one another through the crisis.

quoting
nevent1q…ht59
This is the type of infighting that kills the wholesome vibe on #Nostr. Take your beef directly to the guy privately instead of cry fighting ala Twitter/X. This is low behavior and cowardly.

nevent1q…7rsg

I don't even personally dislike Marty or Matt. They're ...

2026-08-03T22:56:54Z

In reply to nevent1q…tmew
_________________________

I don't even personally dislike Marty or Matt. They're fun to party with. But they're not geniuses and their egos got so big and they got so greedy the missed the fundamentals.

Some of the people they bring on the pod kinda know what they're talking about but it takes discernment. Don't hero worship. I know we all escaped the fiat prison but it's important not to build a new prison for yourself worshipping VC podcast retards.

Let's flip it around. Why doesn't your 🫵 client ...

2026-08-03T20:46:58Z

In reply to nevent1q…kj4m
_________________________

Let's flip it around.

Why doesn't your 🫵 client translate based on event id and fetch the data?

Simple answer cuz Primal made it hard. Other web clients suck ass ...

2026-08-03T20:41:52Z

In reply to nevent1q…kj4m
_________________________

Simple answer cuz Primal made it hard. Other web clients suck ass in their own right

I wish someone around here gave a fuck about Quality Assurance but clearly no one has any pride. Just greed and clout. The event id is in there if you wanna fish around.