Europe
Joined January 2009
slush retweeted
To the resellers who helped build Trezor: thank you, and Iโ€™m sorry ๐Ÿ’”
201
213
91
3,159
466,670
slush retweeted
Sorry, the video is in Portuguese ๐Ÿ‡ง๐Ÿ‡ท, but this is the first real demo of my Tropic Key project! ๐ŸŒด๐Ÿ” In the video I: โ€ข Unlock the password manager using the Tropic Key โ€ข Generate and display a TOTP code โ€ข Show the encrypted password storage โ€ข Connect the browser extension to the desktop app โ€ข Autofill a login and password โ€ข Log in using a passkey, similar to the Windows Hello experience The hardware, desktop app and browser integration are finally talking to each other. Still a prototype, but it works. ๐Ÿš€ @Trezor @tropicsquare
2
2
19
1,856
slush retweeted
vexl ๐Ÿ˜Ž
@vexlSep 16
Itโ€™s been 4 years of not knowing who our customers are. Vexl started as a gift to the Bitcoin community from @satoshilabs โ€” to bring Bitcoin back to its original idea: peer-to-peer currency, without centralized intermediaries. Since then, 20,000 people across 100+ countries have joined Vexl. And the numbers keep growing ๐Ÿš€ We know KYC sucks. So, just this once, weโ€™re rewarding you for the pain. ๐Ÿ‘‰Drop your worst or most ridiculous KYC experience below. Worst one gets a Vexl merch pack ๐ŸŽ๐Ÿ˜Ž
15
19
3
59
5,121
If an enemy wants you to panic to drive you into their flanking manouevre, the best move is to not panic and hold the position. Close the ranks, keep the line tight and dig in.
18
27
5
277
13,987
slush retweeted
vexl ๐Ÿ˜Ž
@vexlAug 6
You donโ€™t have to go through KYC to buy Bitcoin. Be like Ralph. No KYC. No pain.
4
13
3
61
5,535
Multiple entropy sources are only worth something if the code actually uses them. You can have four different sources of randomness in the device, but if it is using a test generator instead (code bug), none of those sources actually matter. Rolling dices doesnโ€™t imply the device will actually use it. The entropy is not the problem here, the problem is the device not using it. We already explained that Trezor does not use the affected code. Here are some examples of what we are already doing to make sure we do not accidentally bundle in testing RNG (random number generator): ๐Ÿ‘‰ย We do not use MicroPython's random module at all. It is disabled outright in our firmware config [1]. ๐Ÿ‘‰ rng_fill_buffer() reads the STM32 TRNG peripheral registers directly. No macro dispatch, no software path to fall through to [2]. ๐Ÿ‘‰ The software PRNG lives in a file literally named "crypto/rand_insecure.c", and compiling it emits "NOT SUITABLE FOR PRODUCTION USE!" warning [3]. ๐Ÿ‘‰ random.reseed() exists only under ifdef TREZOR_EMULATOR, and the C function behind it only under USE_INSECURE_PRNG. Two independent guards, and no reseed API in production firmware at all [4]. ๐Ÿ‘‰ rng_fill_buffer_strong() fills from the MCU TRNG, then XORs every byte with Optiga output (Safe 3, Safe 5) and, on Safe 7, Tropic output on top. If a secure element fails it returns false and the caller raises RuntimeError. Fail-closed, not fail-quiet on models with a secure element [5]. ๐Ÿ‘‰ Our Entropy check makes sure that the hostโ€™s (computer/phone) RNG is mixed in as an extra failsafe [6]. These are just some examples of how we protect from this kind of failure. That being said we never stop building and we always humbly learn from situations like these. So we are carefully studying what lessons can be learned from this incident and we are already drafting more safeguards on top [7]. You donโ€™t have to trust me on this, our code is open-source and you can see for yourself or use your favorite AI model. See the links below. And donโ€™t forget to ask your wallet if they can do the sameโ€ฆ [1] github.com/trezor/trezor-firโ€ฆ [2] github.com/trezor/trezor-firโ€ฆ [3] github.com/trezor/trezor-firโ€ฆ [4] github.com/trezor/trezor-firโ€ฆ [5] github.com/trezor/trezor-firโ€ฆ [6] trezor.io/learn/security-priโ€ฆ [7] github.com/trezor/trezor-firโ€ฆ
21
43
7
343
53,352
slush retweeted
vexl ๐Ÿ˜Ž
@vexlMar 17
Bitcoin was meant to be bought without taking a selfie.
57
146
11
3,133
78,577
So I don't know why more people don't scream about this but KYC does not prevent crime. I'm gonna lay out the numbers here because people do need to see this. The cost of pretending it works is measured in actual human lives now. follow along ๐Ÿงต 1/15
14
75
8
256
22,138
Finally... #TROPIC01 is happily placed on the circuit board of the ๐—ง๐—ฟ๐—ฒ๐˜‡๐—ผ๐—ฟ ๐—ฆ๐—ฎ๐—ณ๐—ฒ ๐Ÿณ hardware wallet. The latest flagship hardware wallet from @Trezor. It is the first open security element deployed in a globally available consumer device, created for those who believe that true trust can only be achieved when you can verify what's inside. As our CEO @jan_pleskac said: "๐˜ž๐˜ฉ๐˜ข๐˜ต ๐˜ธ๐˜ฆ ๐˜ฉ๐˜ข๐˜ท๐˜ฆ ๐˜ข๐˜ค๐˜ฉ๐˜ช๐˜ฆ๐˜ท๐˜ฆ๐˜ฅ ๐˜ธ๐˜ช๐˜ต๐˜ฉ ๐˜›๐˜ณ๐˜ฆ๐˜ป๐˜ฐ๐˜ณ ๐˜ช๐˜ด ๐˜ฎ๐˜ฐ๐˜ณ๐˜ฆ ๐˜ต๐˜ฉ๐˜ข๐˜ฏ ๐˜ซ๐˜ถ๐˜ด๐˜ต ๐˜ข ๐˜ฑ๐˜ณ๐˜ฐ๐˜ฅ๐˜ถ๐˜ค๐˜ต ๐˜ฎ๐˜ช๐˜ญ๐˜ฆ๐˜ด๐˜ต๐˜ฐ๐˜ฏ๐˜ฆ, ๐˜ช๐˜ต ๐˜ช๐˜ด ๐˜ข ๐˜ด๐˜ช๐˜จ๐˜ฏ๐˜ข๐˜ญ ๐˜ต๐˜ฐ ๐˜ต๐˜ฉ๐˜ฆ ๐˜ฆ๐˜ฏ๐˜ต๐˜ช๐˜ณ๐˜ฆ ๐˜ฉ๐˜ข๐˜ณ๐˜ฅ๐˜ธ๐˜ข๐˜ณ๐˜ฆ ๐˜ช๐˜ฏ๐˜ฅ๐˜ถ๐˜ด๐˜ต๐˜ณ๐˜บ." Are you interested in joining more than 300 attendees and thousands online who already know this, and see what exactly ๐—ง๐—ฅ๐—ข๐—ฃ๐—œ๐—–๐Ÿฌ๐Ÿญ does in ๐—ง๐—ฟ๐—ฒ๐˜‡๐—ผ๐—ฟ ๐—ฆ๐—ฎ๐—ณ๐—ฒ ๐Ÿณ? Check out our new case study page atย tropicsquare.com/applicationโ€ฆ #TROPIC01 #TrezorSafe7 #SatoshiLabs #OpenSecurity #Transparency #SecureHardware #CryptoSecurity #trezor #TS7 #tropicsquare #secureelement
26
7
1
45
5,337
With the new @Trezor Safe 7 and the open secure element #TROPIC01 by @tropicsquare, the fun is just taking off. The TROPIC01 is easily extended with a PKCS#11 wrapper, meaning it can easily be turned into a true smart card. It is even efficient enough to be powered by an NFC antenna, meaning we can start to build open smart/banking/credit/identity cards on top of it. We can build HSMs on top of the Safe 7 with a bit of firmware extensions, and we can build decentralized financial services with Trezor-to-Trezor transactions on top of the hardened Bluetooth stack and much more. Such a powerful platform waiting to be awakened.
9
16
1
81
7,227
The best thing about building something new is that every day sets a new all-time high. @vexl just crossed 17K users and I could not be more proud!
8
5
1
34
3,639
๐—ก๐—ผ๐˜ ๐—๐˜‚๐˜€๐˜ ๐—ฎ ๐—ฃ๐—ฟ๐—ผ๐—ฑ๐˜‚๐—ฐ๐˜ ๐—Ÿ๐—ฎ๐˜‚๐—ป๐—ฐ๐—ต: ๐—” ๐—ฃ๐—ฎ๐—ฟ๐—ฎ๐—ฑ๐—ถ๐—ด๐—บ ๐—ฆ๐—ต๐—ถ๐—ณ๐˜ย ๐Ÿš€ @Trezor Safe 7 is here. And at its core is TROPIC01, the first transparent, auditable secure chip integrated in mass-market consumer devices. This isnโ€™t marketing spin. Itโ€™s a validation of a paradigm shift from security by obscurity to hardware security you can actually verifyโœ…. ๐—ง๐—ฅ๐—ข๐—ฃ๐—œ๐—–๐Ÿฌ๐Ÿญ ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐˜€ ๐˜„๐—ต๐—ฎ๐˜ ๐—ผ๐˜๐—ต๐—ฒ๐—ฟ๐˜€ ๐—ต๐—ถ๐—ฑ๐—ฒ: โ€ข Digital design logic (RTL๐Ÿ–ฅ๏ธ) โ€ข Firmware ๐Ÿ“œ โ€ข Detailed documentation๐Ÿ“š โ€ข Attack surfaces and architectureโš ๏ธ For the first time, independent researchers, not just vendors, can inspect what your Secure Element is doing. ๐—ช๐—ต๐˜† ๐—ถ๐˜ ๐—บ๐—ฎ๐˜๐˜๐—ฒ๐—ฟ๐˜€ย : In systems that protect identity, data, and money, trust must be earned, not assumed. And verification is the only way to get there. This isnโ€™t just about crypto anymore. IoT, identity, and edge devices are next. Transparency isnโ€™t radical, itโ€™s long time overdue๐Ÿ•’. See how #TROPIC01 powers the @Trezor Safe 7 and where verifiable security goes next. tropicsquare.com/news-and-evโ€ฆ #TROPIC01 #TropicSquare #TrezorSafe7 #OpenHardware #SecureElement #TransparencyInTech
6
14
4
109
19,961
In 21 hours ... On 21st of October ... Can't wait!
Tomorrow unlocks a new era of crypto security. Weโ€™re thrilled to finally reveal what weโ€™ve been building. Get ready to experience what radical transparency truly means. content.trezor.io/trezor-revโ€ฆ
7
3
1
138
11,410
Freedom tech doesn't wait for permission! Freedom Store is @vexl's Foundation answer to Appleโ€™s gatekeeping. Launched at @BTCPrague with other tools that make you more sovereign! @BullBitcoin_ @vexl @SovranBitcoin @bitkitwallet @MinibitsCash @LNFlash
More BTC Prague 2025 talks just dropped on YouTube. This batch is all about freedom โ€” in speech, health, identity, and Bitcoin itself. Start with @LeaPetras Breaking the Chains โ€” a talk on how to fight Big Tech censorship in the digital age. ๐Ÿงต
6
15
2
49
13,253
We believe that once you start keeping secrets and limit the flow of information & knowledge, it stalls your innovation and product development. So โ€ฆ no matter where you read our first holiday blog post ๐ŸŒดโ€ฆย what's more important is what you learn from it. We are answering questions as: โ€ขIs transparency a guarantee of security? โ€ขHow does โ€˜security through obscurityโ€™ work in real life? โ€ขWhere does it end? โ€ขDoes open source mean secure? That's why we decided to develop TROPIC01, the first secure element based on open architecture and open design. We are convinced that security through transparency is the better alternative. Read now: tropicsquare.com/blogs/securโ€ฆ #TROPIC01 #OpenHardware #SecureByDesign #NoBlackBoxes #RootOfTrust
1
5
1
12
4,521
slush retweeted
vexl ๐Ÿ˜Ž
@vexl20 Jun 2025
On June 20th, Vexl Foundation introduced @FreedomStoreFTW. 2025 won't be like "2025".
18
47
10
196
49,260
๐Ÿ‘‹๐Ÿป Oh hello, world. Didnโ€™t plan on doing this, but here we are. Let's fight!
2
9
5
37
6,728
slush retweeted
vexl ๐Ÿ˜Ž
@vexl18 Jun 2025
๐ŸšจHard to believe now but 41 years ago, Apple told the world that 1984 wouldnโ€™t be like โ€œ1984.โ€ Fast forward 41 years. An App Store Dictatorship. Apple didnโ€™t stop Big Brother. Apple became Big Brother. The hypocrisy is staggering... youtube.com/watch?v=VtvjbmoDโ€ฆ
5
38
1
128
17,456
Replying to @BTC_for_Freedom
the long but hopefully honest as I can explanation as I see it so far: The real debate is less technical than it is philosophical in my opinion. To us who want the purpose of Bitcoin as a singular and focused monetary system, it seems like an explicit capitulation to "just put whatever you want in the blockchain, here's an official way to do it." While it likely wont make a significant difference from a practical standpoint, it feels like crossing an ideological line. There are tons of jpegs being put into the chain, and there are a few, low cost (mostly ineffective) measures that people have been putting into place for mempool policy to attempt to mitigate on their own nodes or block templates. However, IF those mitigations were the standard are done broadly across the node network (say core implemented them the way they are trying to implement this PR to remove the limit completely), then they actually would have some effect. Yes, its largely a cat and mouse game, but nonetheless it would do something, just like OP_RETURN being set at a strict limit has ensured that 99% of transactions have adhered to that limit. In addition, node runners who want the option to set this themselves, feel that prioritizing monetary transactions over jpegs is being a good steward. This PR started a pointless battle because it not only sets the default to infinity, but it removes the configuration option completely so a node runner cant change it. Those in support of removing the limit and configuration option, are saying that because no solution would be full proof, its a waste of time. There's a worthwhile addition that those who oppose have (imo fairly) noted that some in support have potential conflicts of interest working directly with taproot wizards, invested in NFT and VM tools, or other crypto adjacent persons or projects. I agree nothing is fully effective and don't believe that "everyone is malicious" here, but standards do matter, and more importantly, how we culturally treat what is a hack and exploit to input arbitrary nonsense into the chain matters. Cat and mouse or no, all of our focus and energy should be toward protecting and engineering Bitcoin to be the best and most secure money. And if we start embracing crypto culture, we will get crypto results. In other words, "a jack of all trades is a master of none." There are plenty of arguments on both sides that are being repeated that aren't accurate. These stand out, atm: - people who want to remove the limit saying inscriptions will use this instead, when they wont because its still more expensive in fees because inscriptions get the witness discount. - people opposed claiming this will make it harder to run nodes are wrong too, having explicitly unspendable UTXOs is technically superior than big, fake signatures, and the 4mb weight limit is the same regardless of what is happening. (plus, op_return falls under original 1mb still) My analogy defending my position against: -- Just because we can make money letting people rent out the courts for parties and concerts, doesn't mean we should. If the courts are exclusively designed and used for protecting people's rights and arbitrating conflict, then we lose a core foundation that "parties and concerts" are entirely downstream of and dependent on. Maybe people still manage to get parties in the courthouse, but how do we treat them culturally regardless of effectiveness at stopping them? - Put another way, sure I think drugs should be legal, but should we be handing out needles? My simplest steelman (hopefully accurate) of the support: -- If filtering is largely futile, then if we just open up the limit to a less costly (for node UTXO set not fees) way to use bitcoin to host arbitrary data, then at least people who want to be good stewards using NFTs or the like, have the option of not creating toxic UTXOs. And if we try to stop them, they are more likely to create private mempools that don't broadcast to the network but pay directly to a miner, which causes information discrepancies with the public network and fee predictions, as well as possible mining centralization concerns if this made out of band fees become popular.
12
11
3
82
11,604