2026-10-10T14:38:04Z https://njump.cloud.vinney.xyz NDS-Signer https://njump.cloud.vinney.xyz/npub1n2yw95vqalqzckdnks4sedzyyjg75lasmfntt8xlecdnnwza7kkqn84hjz https://npub1n2yw95vqalqzckdnks4sedzyyjg75lasmfntt8xlecdnnwza7kkqn84hjz.blossom.band/8d7a31c6c74e9579d355a4a4a808b59be197665a34e66825248f981c859dbaf3.jpg https://npub1n2yw95vqalqzckdnks4sedzyyjg75lasmfntt8xlecdnnwza7kkqn84hjz.blossom.band/8d7a31c6c74e9579d355a4a4a808b59be197665a34e66825248f981c859dbaf3.jpg https://njump.cloud.vinney.xyz/nevent1qqsdrfaqp82ty45q3gqvcydruwmegmv8cajms2vdfjyde8y86l3trwqzyzdg3ck3srhuqtzekw6zkr95gsjfr6nlkrdxddvuml8pkwdcth66cwvh9zn In reply to <a href='/nevent1qqspy6lqtmmpj3lhhcp3y7zqndt82g3wunlm57skg576mrdt7fezvjsfj3kle'>nevent1q…3kle</a><br/>_________________________<br/><br/>You may be interested in this other project I&#39;m developing. I need to make some changes and improve its security model (will be done within the next days), but it is a very nice and fun alternative to metal:<br/><br/><a href="https://ndssigner.github.io/seedcraft/">https://ndssigner.github.io/seedcraft/</a> 2026-10-13T18:16:44Z https://njump.cloud.vinney.xyz/nevent1qqs02cl89zrzn0n6ddwce93sp3l64qzcu70nx253rwyn22jqczn04jqzyzdg3ck3srhuqtzekw6zkr95gsjfr6nlkrdxddvuml8pkwdcth66chx08w7 In reply to <a href='/nevent1qqswxypc2cx0z3l6g4xuuugy5p853njk973mk5sratumylmn2afp4fs7wsnlg'>nevent1q…snlg</a><br/>_________________________<br/><br/>Thank you again. Your feedback is precious. I will contact you again as soon as I update the repo. 2026-10-13T18:13:00Z https://njump.cloud.vinney.xyz/nevent1qqsqdv6msa2yyt80le9vmwcencdukldlfrahy8lqhl2ek62fr6942pqzyzdg3ck3srhuqtzekw6zkr95gsjfr6nlkrdxddvuml8pkwdcth66chvgyxr In reply to <a href='/nevent1qqszsxtal73pcjlllsxwlvtywsydxl33a5danrw4zy5308nzrkasl9cmk6ups'>nevent1q…6ups</a><br/>_________________________<br/><br/>Fair criticism. Thanks for your comment. I will update and provide the threat model, the list of critical files and an audit-focused README section within this week.<br/><br/>I&#39;ll tag issues specifically for auditors. If you&#39;re interested in reviewing anything specific, let me know what you&#39;d prioritize.<br/> 2026-10-13T17:51:04Z https://njump.cloud.vinney.xyz/nevent1qqsqy2wxwcj3nyklv7w9p4cwmcp5luuj7xhtlgkfgdc9vg7wa4v3hrszyzdg3ck3srhuqtzekw6zkr95gsjfr6nlkrdxddvuml8pkwdcth66ca5rycq In reply to <a href='/nevent1qqsdzmglwmvf7x2lafcj4xyanwgswl73qtdwvh5vqfm9jgxvun3w38gn7ejlg'>nevent1q…ejlg</a><br/>_________________________<br/><br/>Yes indeed. Actually the project is still in alpha stage waiting for people interested in it to audit the most critical parts. 2026-10-13T17:36:39Z https://njump.cloud.vinney.xyz/nevent1qqswhgaxqpcdazdht6nlmq7rxcra4ecgzca6224kafs0t852gtstxmqzyzdg3ck3srhuqtzekw6zkr95gsjfr6nlkrdxddvuml8pkwdcth66ccmxntd In reply to <a href='/nevent1qqswhrdud0uvuy6t8yv9q7vjflpdt4rl52xde9yp66xym7jmq3tasmczeur8v'>nevent1q…ur8v</a><br/>_________________________<br/><br/>Analyzing the source code is currently affordable for everybody thanks to the latest AI models. Any threat or malicious software can be easily spotted on the fly by multiple actors at the same time, even more when it is such a sensitive piece of software.<br/><br/>For the extremely cautious, they can clone the repo, AI-audit it and build the image on their own. 2026-10-13T17:25:33Z https://njump.cloud.vinney.xyz/nevent1qqsq49wfjwh3ll2wm8k3a2cd9uwvps68agymm3d7rnm6f2l7p7svneszyzdg3ck3srhuqtzekw6zkr95gsjfr6nlkrdxddvuml8pkwdcth66cenhf4n In reply to <a href='/nevent1qqsvpkn2803kefnqskstkunaxvwkhlxsac03r2e2xg64m85q00n8hhgynkf28'>nevent1q…kf28</a><br/>_________________________<br/><br/>Hardware wallets have become targeted devices and the incentive to tamper them grows at the same pace that the price of bitcoin. The most terrible part of this is that a compromised device can remain sleeping until a succulent price is achieved. Those few sats worth dollars 5 years ago may have multiplied its value.<br/><br/>The only reliable solution, now that bitcoin is widespread, is relaying both on FOSS, Open Hardware and multipurpose hardware without internet connection like vintage devices (game consoles, mp3 players, graphic calculators, PDAs)<br/><br/>Following this philosophy I am developing some projects, that I&#39;m proud to recognize that they are very cool. For instance, I have implemented <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub17tyke9lkgxd98ruyeul6wt3pj3s9uxzgp9hxu5tsenjmweue6sqq4y3mgl" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>SeedSigner</span> (<span class="italic">npub17ty…3mgl</span>)</a></span> to run on a Nintendo DSi console: <a href="https://github.com/ndssigner/nds-signer">https://github.com/ndssigner/nds-signer</a><br/> 2026-10-13T17:15:27Z https://njump.cloud.vinney.xyz/nevent1qqsfepvkalyqppjey7qfkd238upunpwuvfn2u9qh2fh2se0ulsk2a9qzyzdg3ck3srhuqtzekw6zkr95gsjfr6nlkrdxddvuml8pkwdcth66c46ser5 In reply to <a href='/nevent1qqsva57sdn3fk6gzqp63z3vvpej2rml9p3qs8z4curle3a5wj00kf4c0whnl6'>nevent1q…hnl6</a><br/>_________________________<br/><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub17tyke9lkgxd98ruyeul6wt3pj3s9uxzgp9hxu5tsenjmweue6sqq4y3mgl" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>SeedSigner</span> (<span class="italic">npub17ty…3mgl</span>)</a></span> &#39;s core cryptographic functions are taken directly from solid and well audited projects like libsecp256k1 (maintained by bitcoin-core devolopers), embit and coincurve.<br/><br/>Then, the main security threat comes from a user that: 1) does not verify the SHA256 of the downloaded software, 2) uses some hardware (rpi0, sdcard) already compromised.<br/><br/>Currently it is safe to say that SeedSigner is very secure.<br/><br/>I have developed an implementation of SeedSigner for Nintendo DSi consoles, leveraging its hardware (cameras, touch screen, buttons) and with the advantage that, unlike the original SeedSigner, there is not any OS layer on the top: the software interacts directly with the hardware.<br/><br/><a href="https://github.com/ndssigner/nds-signer">https://github.com/ndssigner/nds-signer</a> 2026-10-13T16:59:02Z https://njump.cloud.vinney.xyz/nevent1qqs8fw57mw0f3a589axc2n8nehlyydx3qupvmcup635e2cnd5t2y9jgzyzdg3ck3srhuqtzekw6zkr95gsjfr6nlkrdxddvuml8pkwdcth66c49sff5 In reply to <a href='/nevent1qqsvtwlu7vmzyu5w8rzdxc8rd6pa9t7zsscpdnqc86x420vztrxhg3sacqxlc'>nevent1q…qxlc</a><br/>_________________________<br/><br/>This attack vector is new (thought predictable) for bitcoin, but it is not the first time that something similar happens... with deadly consequences:<br/><br/><a href="https://en.wikipedia.org/wiki/2024_Lebanon_electronic_device_attacks">https://en.wikipedia.org/wiki/2024_Lebanon_electronic_device_attacks</a><br/><br/>One of the weakest points of hardware wallets is that they are single purpose devices, linked to bitcoin owners thus, prone to be targeted. The risk/benefit ratio of tampering such devices is positive for the attacker.<br/><br/>Besides the risk of tampering, single purpose hardware wallets are visually identifiable. As long as the device is seen (or screened by some X-Ray scanner running some AI model), the owner is linked with bitcoin, the plausible deniability becomes difficult and the exposure to the $5 wrench attack increases.<br/><br/>I have developed a project that turns a toy, a Nintendo DSi, into a PSBT signer leveraging the <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub17tyke9lkgxd98ruyeul6wt3pj3s9uxzgp9hxu5tsenjmweue6sqq4y3mgl" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>SeedSigner</span> (<span class="italic">npub17ty…3mgl</span>)</a></span> &#39;s source code. Its main security model is to go unnoticed embedding a bitcoin signing system within a device for a completely different purpose.<br/><br/>Check its repo: <a href="https://github.com/ndssigner/nds-signer">https://github.com/ndssigner/nds-signer</a><br/><br/>Video demo: <a href="https://odysee.com/@ndssigner:9/nds-signer-demo:2">https://odysee.com/@ndssigner:9/nds-signer-demo:2</a> 2026-10-13T04:10:46Z https://njump.cloud.vinney.xyz/nevent1qqsy72j8502j04ql4af7sa9nqrf4mh9mpr5ss6r9vqdvnszlukpr0agzyzdg3ck3srhuqtzekw6zkr95gsjfr6nlkrdxddvuml8pkwdcth66c4gkw6t In reply to <a href='/nevent1qqsrd346me5s8avwjnnydxnsdxgwxsv07kpzhsxqxcxh40gj8f2calsmy3mqq'>nevent1q…3mqq</a><br/>_________________________<br/><br/>What about combining scribbling on a touchscreen with microphone input to generate entropy?<br/><br/> <img src="https://raw.githubusercontent.com/ndssigner/nds-signer/refs/heads/main/docs/images/new-seed.png"> <br/><br/>Check NDS-Signer:<br/><br/><a href="https://github.com/ndssigner/nds-signer">https://github.com/ndssigner/nds-signer</a> 2026-10-13T03:51:57Z https://njump.cloud.vinney.xyz/nevent1qqs98ajqkjwh6qma6d7yuwzaur9hd56g9wcj2hmzjmvpanl8cx8wp6szyzdg3ck3srhuqtzekw6zkr95gsjfr6nlkrdxddvuml8pkwdcth66cu9crgx In reply to <a href='/nevent1qqsrm0gmzdgy9yltu6hlv6z4ykah32v62zfdhuge9jv8wyqvz0wureglg43yx'>nevent1q…43yx</a><br/>_________________________<br/><br/>I appreciate you pushing on this. Beyond any single device, the principle stands: repurposing multipurpose hardware is a legitimate security strategy, not just obfuscation. When hardware serves an obvious primary function (email, photos, games), it blends into the noise of everyday digital life. Specialized devices scream their purpose, and become predictable targets for supply chains and screenings alike. Yes, older or repurposed gear has audit challenges and legacy vulnerabilities, but so does everything: phones, laptops, and &#34;secure&#34; hardware wallets all depend on auditable-but-proprietary silicon no one truly trusts (check the recent #ColdCard incident).<br/><br/>The real asymmetry is this: who intercepts a million Game Boys versus a thousand Trezors? Who flags which item at customs? Plausible deniability has security value. I&#39;m not saying this replaces thorough auditing. It complements it for threat models where visibility itself is the vulnerability. Different contexts demand different priorities. 2026-10-13T02:19:31Z https://njump.cloud.vinney.xyz/nevent1qqs9agfn3dywfufhge5hz4wtsyj8w0md0pyg3affxnv5h3t433lcfuczyzdg3ck3srhuqtzekw6zkr95gsjfr6nlkrdxddvuml8pkwdcth66cschu4g In reply to <a href='/nevent1qqsx4k5jmg5xczrqg85fk87w3pddrt7nlvdajfz242mvz85fpqqgv4qwkr9f4'>nevent1q…r9f4</a><br/>_________________________<br/><br/>My strategy for avoiding tampering and scanner detection is to use hardware intended for different purposes. Hardware wallets are, obviously, going to be used by bitcoin owners, so they are going to be targeted both for tampering and screening. The commercial ones are easily recognizable. I think that reusing disconnected general devices can help to avoid these threats. 2026-10-13T01:34:15Z https://njump.cloud.vinney.xyz/nevent1qqsqqqqzj0hr38ep3k0c8kcgdl0vt99zhjyw4yqcnsedgrxvvj8rueszyzdg3ck3srhuqtzekw6zkr95gsjfr6nlkrdxddvuml8pkwdcth66ceh8nn4 Sooner or later all #bitcoin users need to be aware that some &#34;targeted&#34; devices are prone to supply chain attacks, and hardware wallets are, of course, such kind of devices to be aware of.<br/><br/>The first time I got really obsessed with the possibility of supply chain tampering was during the 2024 Lebanon electronic device attacks. When I saw on the news what actually happened I really freaked out.<br/><br/>And it isn&#39;t only the tampering risk that should scare us, but also the possibility to be flagged during screenings. Current AI technology is very capable of spotting well known hardware. Just imagine when X-ray scanners at the airport become able to detect your tiny #Trezor inside your luggage.<br/><br/>That&#39;s one of the reasons that made me begin this project: nds-signer – A #NintendoDSi software implementing <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub17tyke9lkgxd98ruyeul6wt3pj3s9uxzgp9hxu5tsenjmweue6sqq4y3mgl" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>SeedSigner</span> (<span class="italic">npub17ty…3mgl</span>)</a></span>.<br/><br/><a href="https://github.com/ndssigner/nds-signer/">https://github.com/ndssigner/nds-signer/</a><br/><br/>My main obsession is to go unnoticed and reuse multipurpose hardware to avoid problems like the one we are witnessing. 2026-10-13T01:17:57Z https://njump.cloud.vinney.xyz/nevent1qqsqqqqvdedrhjcs9dm86wxf5wthjs9794ajlxwvduu3ag8j40es3kqzyzdg3ck3srhuqtzekw6zkr95gsjfr6nlkrdxddvuml8pkwdcth66cgeqfql Want to check how NDS-Signer actually works? Check this demo featuring DTMF and QR code scanning from the #NintendoDS<br/><br/><a href="https://odysee.com/@ndssigner:9/nds-signer-demo:2">https://odysee.com/@ndssigner:9/nds-signer-demo:2</a><br/><br/>#bitcoin #nintendo #nintendoDS #seedsigner #homebrew 2026-10-13T00:08:09Z https://njump.cloud.vinney.xyz/nevent1qqs9y6d8eplu9utpztxc5z4jc3ny4sf64wcp4wq0ydjjsryg5swpnrszyzdg3ck3srhuqtzekw6zkr95gsjfr6nlkrdxddvuml8pkwdcth66c4y8mgd Scared about the recent issues with #HardwareWallets like #Ledger or #ColdCard? Check solutions like #SeedSigner or #NDSSigner – Multipurpose hardware (like RPi0 or Nintendo DSi) are immune to #SupplyChain attacks and screenings because they are not flagged!!<br/><br/><a href="https://github.com/ndssigner/nds-signer">https://github.com/ndssigner/nds-signer</a><br/><br/>#bitcoin #coldwallet #raspberrypi #nintendoDS 2026-10-12T19:05:02Z https://njump.cloud.vinney.xyz/nevent1qqsqqqqtcqx8e45x6je2xcxa3yzqwf9e7tykhr77ladq24jxqckqgjszyzdg3ck3srhuqtzekw6zkr95gsjfr6nlkrdxddvuml8pkwdcth66cp992pf No camera? Send the #PSBT as telephone tones instead. Same UR parts as the #QR, with error correction. Cable or through the air.<br/>#SeedSigner #NintendoDS #DTMF #homebrew #ndssigner<br/><br/> <img src="https://raw.githubusercontent.com/ndssigner/nds-signer/refs/heads/main/docs/images/tones-listen.png"> <br/><br/><a href="https://ndssigner.github.io/ur-tones/">https://ndssigner.github.io/ur-tones/</a> 2026-10-11T13:20:48Z https://njump.cloud.vinney.xyz/nevent1qqsqqqqg8e8s46mvk6sfkzutdftwnet3hr82emx4qcfdpenred8jx5szyzdg3ck3srhuqtzekw6zkr95gsjfr6nlkrdxddvuml8pkwdcth66cwa90rq Scan the #PSBT from #Sparrow, check recipients and fee on the top screen, sign, show it back as an animated QR.<br/>#SeedSigner #NintendoDS #Bitcoin #airgapped #ndssigner<br/><br/> <img src="https://raw.githubusercontent.com/ndssigner/nds-signer/refs/heads/main/docs/images/review.png"> <img src="https://raw.githubusercontent.com/ndssigner/nds-signer/refs/heads/main/docs/images/signed-qr.png"> 2026-10-10T14:04:57Z https://njump.cloud.vinney.xyz/nevent1qqst7vwncjs4a8nuta36zdzrg9slajt3mlyd9s99n43ah8j9fcqrltszyzdg3ck3srhuqtzekw6zkr95gsjfr6nlkrdxddvuml8pkwdcth66cqlkuqf A #SeedSigner on a Nintendo DSi. SeedSigner&#39;s own Python, unmodified, running on a 2008 handheld through MicroPython. Camera, two screens, battery, no network. Alpha, signet-tested.<br/>github.com/ndssigner/nds-signer<br/> <img src="https://npub1n2yw95vqalqzckdnks4sedzyyjg75lasmfntt8xlecdnnwza7kkqn84hjz.blossom.band/2d3d12e609b1a9dd0c2fefc835233e0fdac232af6fc03955680ca53d8a56d01f.jpg"> 2026-10-10T04:49:55Z https://njump.cloud.vinney.xyz/nevent1qqsqqqqryteemw4v4ac237z6f9c8uwsk9d6dcx69zrd3avggxvfr6wszyzdg3ck3srhuqtzekw6zkr95gsjfr6nlkrdxddvuml8pkwdcth66cayqn5t Hello world! #introductions<br/>Nerdy #bitcoin vibecoder sharing cool projects<br/>#seedsigner #ndssigner #nintendods 2026-10-10T03:55:24Z