p2p electronic cash enthusiast || 🏴🦔 @light__nh || ☿ he/they
Joined February 2013
- Tweets49.7K
- Following320
- Followers14.1K
- Likes64.2K
light 📜 retweeted
Happy to finally publish this! BitVM has come a long way, and now permissionless bridges can finally be practical with Argo. Credit to @therealyingtong for the implementation. Almost certainly the last all-natural, organic, AI-free project we will work on.
Excited to open-source Argo!
The most practical trust-minimized Bitcoin bridging:
• Setup time: ~100ms
• Offchain cost: ~10MB
• Onchain cost: ~$8
🤖 Throw your clankers at it and help us harden it
github.com/idealgroup/argo?_
I would like to have a word with whoever decided to redefine the word "vault" from "super secure place where your money sits and does nothing" to "super promiscuous liquid account where anyone can take a piece of your stack in exchange for a few bps"
Kraken (@krakenfx) offers APY on your Bitcoin and they call it their "Vault"
It's actually less safe than just using their regular account:
"Kraken's Vault actually uses wrapped Bitcoin, decentralized lending protocols, borrowed stablecoins, and leverage to generate yield."
🧐
light 📜 retweeted
Our new research moves us closer to letting anyone help secure BTC deposited on Alpen.
We survey permissionless challenging on Bitcoin & introduce polynomial soldering: a more scalable, efficient component for challenging the validity of proofs.
HackMD: hackmd.io/@alpen/Skc1C7Rizg
Introducing LayerTree, a non-custodial scaling solution on bitcoin that connects to Lightning.
Using covenants, one UXTO can be shared by a million users. Any user can leave at any time in a single transaction. Users don't need to be online to receive. Funds never time out.
LayerTree is the next step in bringing bitcoin to billions.
Learn more: layertree.tech
ad blockers are self-care 🤗
NEW @citizenlab report We uncovered an Israeli firm using online ads to run vast spy operation
This is the first-ever public confirmation of zero-click mercenary spyware delivered via targeted ads.
45 devices at @AJEnglish confirmed infected
citizenlab.ca/research/how-d…
🚨NEW INVESTIGATION: zero-click mercenary spyware hacking via targeted ads.
A normal-looking ad loads. If you're a target, you're infected. No click needed.
To protect yourself, block ads now.
First time it's been confirmed in the wild. We call it #AdFection.
Candiru spyware infections at @AJEnglish. 45+ devices infected.
Same ad pipeline operated by Israeli company Discover-Tech reached NATO, European Parliament, dozens of gov networks & critical infrastructure incl US nuclear giant Westinghouse.
Confiant, which worked with us, found signs ads were displayed at US @DeptofWar, IAEA & ICC.
Investigation ongoing 1/
READ our report by @billmarczak @WolfieChristl, me Astrid Perry, Siena Anstis & Ron Deibert : citizenlab.ca/research/how-d…
Confiant's blog: blog.confiant.com/p/adint-we…
light 📜 retweeted
Following recent supply-chain incidents, we decided to reduce the number of resellers so we can more effectively check those we work with.
Let us be very clear: there is not a single piece of evidence that Trezor devices have been compromised.
This is a preventive step, taken out of an abundance of caution. We also want to thank everyone involved for the cooperation, and for the years of work putting Trezor in people’s hands.
light 📜 retweeted
Stoked to announce this!
Zark is a transfer-of-ownership protocol that collapses offchain histories into compact zero-knowledge proofs.
Previous bitcoin l2 implementations have shown that co-signers can be blinded and unaware of what they’re signing. In some designs, users validate the history of offchain coins they receive.
Zark compresses these histories into recursive zero-knowledge proofs. A side effect is that this removes the need for users to learn who a coin’s previous owners are.
Zark is based on the statechain paradigm. It enables users to transfer ownership of bitcoin UTXOs offchain with the help of a co-signer. In Zark, users can also engage in offchain coinswaps to transfer ownership for bitcoin UTXOs for other bitcoin UTXOs. We’re looking at adding support to swaps against tokens on alternative networks, like we did in our bitcoin dark pools demo with @mercurylayer.
Current research areas for us:
- Leaf splitting while retaining privacy for branches
- Scalability!
- Optimizing zk-circuits and proving system
Circuits are written in @noirlang.
👀
It passes the check. Only way to detect the implant is to open your Ledger.
More details: support.ledger.com/article/4…
context:
xitter.cf/Ledger_Support/status/…
Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis. As a precaution, and pending the results of our investigation, we have asked CryptoBilis to pause all sales and shipments of Ledger devices. We recommend Ledger users who purchased from this reseller in the last 90 days to not initiate set up if you have not done so yet. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with new seed). We will continue to inform customers of updates as the investigation progresses.
Reach out to Ledger customer support through official channels with any questions: support.ledger.com/
Europe supply chain appears compromised as well 👀
xitter.cf/0xJohannes_/status/210…
UPDATE: I can confirm that the Ledger supply chain is compromised in Europe as well. @Ledger should initiate an immediate product recall to protect users.
I just purchased a second device from a different Mediamarkt location today, recorded the unboxing process, and discovered spyware once again (video linked in the second tweet).
The device was compromised in the exact same manner, featuring identical modifications (such as additional cables and an LTE module). This indicates its a widespread issue rather than an isolated incident, potentially affecting Ledger inventory across MediaMarkt and Saturn stores throughout Europe (comprising over 1,000 stores across 11 countries).
My initial hypothesis was that these devices were returns that looked unopened to the employees and were just sold again as new however, a MediaMarkt employee confirmed that the device I purchased was not a return, and that returned Ledgers are sent directly back to the manufacturer rather than resold.
Store records show the inventory originated from Aqipa GmbH. While Ledger's CTO was unsure if Aqipa serves as the direct distributor between Ledger and MediaMarkt, it appears to be the case. Given that Aqipa distributes across Europe, any physical retail store receiving stock through them may be at risk.
I sent the first ledger to mark and the second one is going to ledger now, so that they can analyse it.
If you purchased a ledger from anyone other than the official ledger store, make sure to check your device!!
light 📜 retweeted
Since Math is in the news this week as it relates to Bitcoin, I sat down with @Fundamentals21m to do an episode of Magic Internet Math.
Today we Red Teamed Elliptic Curve Cryptography and discussed how math COULD break Bitcoin. In short, its very hard.
also: if you have significant value in self-custody (say, 5-10x the value of hardware for this setup) it's best to use multi-vendor (which we should emphasize also implies multi-source...) multisig. at least 2-of-3. look at nunchuk, casa, unchained managed and diy solutions.
Implanted devices mean your seed phrase is known by an attacker. The attacker may decide to steal your assets today, or in a year.
If you find out your seed phrase was generated or imported in a device containing an implant, you MUST generate a new seed on a safe device and move your assets asap. Do not trust the old seed anymore, consider it compromised.
light 📜 retweeted
Dear Satoshi,
The first BitVM dispute, the SHA2-ECDSA polyglot, the Binohash madness—all just fan mail written in Bitcoin Script.
None of it matters until I fulfill your original vision.
So I finally finished the poker client you left unfinished in Bitcoin v0.1.
Hit me up for a few hands
— Robin Linus
poker.bitvm.org
