BR087 - ColliderScript, BTCPay Server, OpenSecret, Matrix, Lottie player JS Attack, the Bullish Case for Vaults, LN Payment Censorship , EmailBTC, secp256k1-node vulnerability + MORE ft. Justin & Paul

BR087 - ColliderScript, BTCPay Server, OpenSecret, Matrix, Lottie player JS Attack, the Bullish Case for Vaults, LN Payment Censorship , EmailBTC, secp256k1-node vulnerability + MORE ft. Justin & Paul

Released Wednesday, 13th November 2024
Good episode? Give it some love!
BR087 - ColliderScript, BTCPay Server, OpenSecret, Matrix, Lottie player JS Attack, the Bullish Case for Vaults, LN Payment Censorship , EmailBTC, secp256k1-node vulnerability + MORE ft. Justin & Paul

BR087 - ColliderScript, BTCPay Server, OpenSecret, Matrix, Lottie player JS Attack, the Bullish Case for Vaults, LN Payment Censorship , EmailBTC, secp256k1-node vulnerability + MORE ft. Justin & Paul

BR087 - ColliderScript, BTCPay Server, OpenSecret, Matrix, Lottie player JS Attack, the Bullish Case for Vaults, LN Payment Censorship , EmailBTC, secp256k1-node vulnerability + MORE ft. Justin & Paul

BR087 - ColliderScript, BTCPay Server, OpenSecret, Matrix, Lottie player JS Attack, the Bullish Case for Vaults, LN Payment Censorship , EmailBTC, secp256k1-node vulnerability + MORE ft. Justin & Paul

Wednesday, 13th November 2024
Good episode? Give it some love!
Rate Episode

Episode Transcript

Transcripts are displayed as originally observed. Some content, including advertisements may have changed.

Use Ctrl + F to search

0:01

Hello and welcome to the Bitcoin.review podcast, where we explore developments

0:06

and projects with the people who actually make them happen.

0:09

The show is supported by Pod 2.0, SaaT Streaming and Coinkite.

0:13

If you're a new listener, I'm NVK. I run Coinkite, where we've been helping people secure their Bitcoins for over

0:19

a decade. We make the cold card and fun products like the Block Clock.

0:23

You can find more information about it on Coinkite.com.

0:29

Hello and welcome back to the Bitcoin.review, the podcast about the price.

0:35

We're going to be talking about the Bitcoin price for two hours and 45 minutes.

0:40

And today with me. Finally, somebody to tackle the hard conversations.

0:45

There you go. Somebody already tackled my opening.

0:48

Nobody knows anything is the quote of the day.

0:53

Very appropriate. Mr. Justin, Unemployed Justin, welcome back to the show.

1:00

It's great to be back. It's been a while.

1:02

I haven't paid attention to Bitcoin at all in a couple of months.

1:05

So I'm curious to hear what the price is these days. Mr. Paul, Future Paul.

1:13

Hello. Thank you for having me.

1:16

I have also pivoted. This is the unemployment show.

1:23

So I have two great candidates here.

1:25

They're going to fight to the death for a job at doing some web design for

1:30

Bitcoin.review. Yes.

1:36

What a time to be unemployed.

1:38

Perfect timing, guys. I really nailed it.

1:42

It's great. I love it. I guess, I mean, where do we even start after an opening like that?

1:51

Do you guys want to address any of your current gigs or previous gigs or do

1:57

we move on? I can talk a little bit about what we're doing now.

2:02

I do like it. Mutiny, we'd always talk about how we're going to have the best wallet right in

2:07

time for the bull run. We got one part right.

2:15

But yeah, so the pivot where we are kind of coming a little out of stealth

2:19

now. We're doing this thing called OpenSecret.

2:22

You can go to OpenSecret.cloud. Basically, it's like an encrypted backend.

2:27

So trying to kind of improve the UX of like private key management and

2:31

encrypted data storage for app developers.

2:34

So and we also have like a demo product called Maple, which is an encrypted AI

2:39

chat. So if you go to OpenSecret.cloud, you can find stuff about that.

2:43

So now it's very cool. What is an encrypted AI chat, Paul, could you explain that?

2:48

Well, it's like there is a coin and you buy the coin.

2:51

I asked Paul, this hairy guy keeps interrupting.

2:56

It's encrypted from the browser to our server, which is running in a AWS

3:03

Enclave to the GPU.

3:07

So nobody in that whole chain can see what you're chatting.

3:10

And we also store your history and we also can't see that.

3:14

So thanks to the power of cryptography, that puts the crypto in crypto.

3:21

We can we even have attestation that you can verify from your web browser that

3:26

we aren't looking at your chats.

3:28

So it's pretty cool. It's pretty cool stack.

3:31

And it's basically a demonstration of what OpenSecret is going to make possible

3:35

for regular devs. We should get you to implement that on Unleash.chat. Hmm, yeah, there's some

3:43

users there. Yeah, stop spying on your users.

3:47

Yeah, no, we can't see their stuff either. Like we architected so we would have to build tooling.

3:52

If we build tooling, you could see it. Because like you still can't encrypt on the GPU side, right?

3:57

No, this is encrypted through to the GPU.

4:00

But then the GPU can see it. If you can see it, you can see it.

4:08

No, the H100s have the same kind of secure enclave thing all the way to it.

4:14

So it goes all the way to the end. So it's operating on encrypted memory.

4:17

So, yes, if you are literally a transistor inside of the GPU, you might see

4:23

something spicy go by. Just like what's SGX.

4:28

No backdoors. Yeah, yeah, exactly.

4:30

We promise. Very similar trust model.

4:34

No, but it's already a huge leap. Like, listen, you're not going to you can't run shit on servers and think that

4:40

people can't see it. It's just that, like, it's great when the people working at the company can't

4:44

see it. It's a huge improvement.

4:48

Right. You're making it making this the default.

4:50

Yeah. Like don't don't store your life savings in this kind of system.

4:55

But this is a lot better than your average, like unencrypted Postgres database.

5:00

You know, that would be great. It's like ChattyPT, how many bitcoins are there in these 12 words?

5:05

And money gone. All right.

5:10

So where's my list? It disappeared here.

5:13

Justin, do you want to pitch anything? No, these days I'm mostly making pizzas and chicken wings.

5:23

I basically have opened up a restaurant in my apartment at this point.

5:28

My entire porch is just full of Weber grill accessories, just like from floor

5:33

to ceiling. Nice. Pretty unbelievable.

5:36

I do it. I do have a fatty sticker and a few pieces of luggage I have.

5:40

It's like a nice little circle, shiny circle.

5:43

It's a great it's a great circular sticker, as you said, in a circle.

5:47

It's a circular sticker in a circle. And it's shiny.

5:50

Yeah. The shiny should have given away.

5:53

All right. Housekeeping.

5:59

Well, there's some new tutorials for cold card.

6:02

And if people want to buy one, I highly recommend not waiting too long because

6:07

the price pump makes the inventory disappear.

6:11

And if you're only changing your security when the Bitcoin price pumps, man,

6:14

good luck. You know, do it in calm when the price is down.

6:19

But, you know, it's still not too late. All right.

6:23

Urgent vulnerability disclosures.

6:26

Critical severity, private key extraction, vulnerability in SecP256k1 node

6:31

affecting ECDSH.

6:35

This was a node library.

6:37

Of course, it's the JavaScript people who fucked it up.

6:40

And it's really bad, like really, really, really, really, really bad.

6:46

The attackers can retrieve private keys using low order curve points through

6:50

only 11 ECDH sessions.

6:55

Math can be a bitch. Right.

6:58

So they re-implemented. Of course, in JavaScript.

7:02

SecP in JavaScript. And deliver through node.

7:07

Because there is nothing safer than going out, NPN, update my crypto library

7:13

and sign. It says it's a binding.

7:17

It's probably the glue, right?

7:21

Like how we have Libndu for cold card. OK, so not a full re-implementation, but somehow the binding still was bad.

7:30

Yeah, but how are they leaking the keys if they're not doing some math there?

7:34

They must be doing a bit more than just the bindings.

7:38

The low cardinality curves.

7:41

So there's some check that they don't have that allows the attacker to use

7:46

public keys on low cardinality curves.

7:49

So if someone knows what that means, they can probably have my money.

7:54

It's the wrong group. Where's Rendell when you need him?

7:58

Yeah. Medium severity disclosure of hindered block propagation due to stalling peers.

8:09

Another Bitcoin Core vulnerability allows attackers to delay block downloads by

8:14

stalling peer nodes. So this one is more like the same sort of, not the same type, but the

8:23

same effect as the previous one. I think essentially it can kind of like crash some Bitcoin Core nodes.

8:29

Again, it's only a problem for people like running like Lightning and stuff

8:32

like that. Normal users, not a big deal.

8:37

All right, Bitcoin software releases and project updates.

8:40

Bitcoin Core version 27.2 netfix, race conditioning, self-connect, detection,

8:47

init, change shutdown order of load, block, thread, and scheduler.

8:52

RPC fix causes of calls to field PSBT errantly returning complete equals true.

9:00

PSBT check non-witness UTXO output early.

9:05

Test fix constructor of message TX.

9:08

A few other things. Electris version 0.10.7, support testnet 4, enable LTO in release build, don't

9:19

sync mempool when Bitcoin D mempool is not yet loaded.

9:25

Electris is now like one of the main users of Electrum servers, right?

9:31

I think so. Yeah, there's a whole bunch of different like forks.

9:35

Like, I think mempool uses something like either a fork of this or this one.

9:41

Right. I think it's for those two.

9:44

There is also, what's it, Fulcrum.

9:47

Fulcrum is supposed to be the high performance one, I think, or no longer true.

9:51

I don't know. Yeah, the B-caches are cornering the market on Electrum servers at this point.

9:58

Well, they have a concern about catching up with blocks, right?

10:02

They're more invested in Bitcoin research, right?

10:06

This is what you call a motivated developer.

10:09

That's right. It's amazing what's possible.

10:11

That's right. Here's your one terabyte block.

10:14

Now eat all that data and index it before 10, 20 minutes.

10:20

All right. BTC pay server version 2.0.2, critical vulnerability disclosure for Nostr or

10:28

Blink plugin users. Without it, an attacker with access to a pool payment could drain the Lightning

10:36

wallet without limit. What is a pool payment?

10:40

It's like, I think those like LNERL invoice types, like you just tell the node

10:45

to pay whatever if you're using one of the cards.

10:49

Wouldn't anyone with access to a pool payment be able to drain the wallet

10:53

regardless, unless maybe there are limits or something?

10:56

Oh, yeah, that's right. Yeah, that's that's how the pool card works.

10:59

Pool payment sounds kind of terrifying. Yeah, it looks like the bug was they were incorrectly marking the payment as

11:06

canceled, even though it actually went. So you probably already had a you had a valid one, I'm guessing.

11:12

And then you know, I see. And then we're not checking the limit or something like that.

11:17

Well, it's fixed. I haven't I haven't played with BTC pay in a few years.

11:21

I would love to see where it is these days. They've they've come along, like I'm just waiting for the Python version, the

11:31

version 2.0 was out recently.

11:35

Interface localization, sidebar navigation looks like a bunch of updates.

11:39

This is huge. Yeah, I mean, they've been working on this saga for like six years now, right?

11:44

Like they started in like 2018. So they've I bet it's I mean, it was it was usable in like 2019 or

11:50

20, you know, when I was using it. Imagine it's pretty impressive now.

11:55

For sure. Libsac 256k1 version 0.6.0, add a new module for Moosig, implements the Moosig

12:06

2 signature scheme according to BIP 327 specifications.

12:10

That's pretty awesome. At long last. At long last.

12:14

New CMake variable, 256k1 append LD flags for appending linker flags to the

12:24

build command. And they made a few changes.

12:28

This is the GOAT crypto library.

12:32

Not the Node version, sorry. When, you know, when was Taproot, two, three years ago?

12:42

And Moosig was one of the big selling points of it.

12:48

And it's amazing that it takes like three years for that.

12:51

This is a good example of how hard cryptography is.

12:54

You're like, oh, we have a new cryptographic primitive. Now we can do this thing called Moosig.

12:58

Three years later. Right. And then like, you know, Persian cat meme comes about, you know, it's like,

13:03

yeah. And it's not because the people working on it are not working on it or, you

13:07

know, you have the brightest people in Bitcoin working on it diligently.

13:10

And it still takes three years. Like that's a good, that's a good example of how difficult cryptography is.

13:17

But that's the difference between Bitcoin and Ethereum, right?

13:19

And Ethereum did have just like push the server on Friday.

13:23

Like, fuck it, the day after. Yeah.

13:26

And money gone, right? Yeah. Yeah, no, it's kind of a big deal, especially like, you know, the guys do the

13:32

hard work of building the math and then you have to implement it on the library

13:35

and then you have to create the bindings. And then you have to create like the actual client software that uses the shit.

13:41

I mean, security proof and stuff like that.

13:43

And then, yeah, it's a lot. And these things are like, you know, a huge fucking deal for the wallets to

13:50

also implement, too. Somebody has to write those tests.

13:54

Speaking of Ethereum, have you seen that price of Ethereum, like Ethereum's

13:59

price action in the last six months where it's just like in a band relative to

14:03

Bitcoin, just going like straight down? It's pretty brutal.

14:06

It's the most beautiful graph I've seen in years.

14:09

You know, it's the only price for that shit thing is zero.

14:17

Bitcoin Keeper mobile version 1.2.18, selected Electrum servers during app

14:24

setup, add support for 22s, support USB option enabled for cold card and Jade

14:31

via the desktop app, tap signer, verify initial status and backup count.

14:37

Received screen now enables multi multiple addresses and a bunch of other

14:41

things. The tap signer support is kind of cool.

14:44

They do the other operations like changing the pin and doing other things, too,

14:48

which is nice. Ben is injected like a lot of life into the project there and they're doing a

14:54

lot of stuff. Liana version 8.0, template heaven, Liana daemon library, a new field for last

15:04

full time stamp was added to the.

15:07

It's pronounced daemon. I know.

15:09

I can't. I can't. I'm too ESL, dude.

15:13

Just too ESL. Respect the immigrants.

15:18

Was added to the wallet table.

15:21

About two weeks too late for that, NVK, I'm sorry.

15:25

I know, right? Shit, you know, like I can't cross the border anymore.

15:31

They're going to ship everybody out. The new Bitcoin D28 version is now downloaded by the GUI and a bunch of other

15:41

updates. I got to say, this is just a catastrophically long list, NVK.

15:46

You guys have really been doing your homework here.

15:49

Oh, dude, you have no idea. You haven't been in the show.

15:51

This is like a 15 page list. You came to the first, second or third episode of the show and then you got

15:58

employed and then you disappeared so that you wouldn't put your foot in your

16:03

mouth during air. And then you come back and we're professionals now, dude.

16:09

Like, look at this. We got lists and shit.

16:11

It's really amazing. I'm really proud of you.

16:15

Rudolfo, is that how you say it? It's Rudolfo, with the H, right?

16:22

Brazilians can't pronounce R as I was reading.

16:24

Oh, my God. Chances of employment at CoinKite dropping to zero fast here.

16:30

Yeah, I mean, if I was, it would only last about six months, though, right?

16:35

Dude, not even. It tends to be how it goes.

16:38

It'd be like, you know, first thing he does is create a water cooler channel

16:42

and says, good morning. It's like, fired. I asked Peter one question in a GitHub issue just immediately terminated.

16:52

It's like, it's like, get close and fire, you know, like it literally drops.

16:58

There's a script to watch for that. It kills all your access to everything.

17:02

I post a screenshot with a color scheme on my Vim and then Peter just

17:06

terminates. That's right.

17:09

I mean, he is on green and black and green.

17:12

There is no coloring. Yeah, I know. Black and green.

17:14

Like one. Yeah, I know. That was the joke. I was just, you just explained the joke.

17:18

Yes. It was not clear. You know, when it's not a good joke, right?

17:22

Then you have to explain. Yes.

17:26

Rudolph. Rudolpho. I think I say version 1.0.0 B3.

17:35

They updated a bunch of stuff. It's a little nice, interesting project.

17:39

They help you set up your multi-sig and also seems like a fork of Electrum

17:47

in the GUI. It's beautiful to see how many of these little multi-sig kind of coordinator

17:52

projects. There's like 10 of them at this point, almost.

17:55

It really shows how multi-sig is nearly unusable.

18:00

When's Junction coming out, Justin? Yeah, me and Paul did a little work on a multi-sig thing a couple of

18:05

years ago. And I kind of was like, Jesus, I don't want to try to convince people to

18:10

use this. This is the problem, right?

18:12

Like, it's like, there's always those people on Twitter.

18:15

They're like, you know, no multi-sig is the solution. And I'm like, dude, have you ever looked under the hood at the amount of like

18:23

room there is to like completely foot gun yourself?

18:28

It's really bad. I mean, I still love it.

18:30

Yes. No, I use it. I set one up and it is very, like, if you can get it, it is

18:35

very, gives you a lot of peace of mind.

18:38

Yeah. But it was kind of overwhelming for me who knew every nut and bolt of what

18:42

was happening to get it, you know, to get the whole thing to work.

18:46

It's terrifying. But you can ease into it, right?

18:49

You can set it up and put some money in and kind of try and test

18:52

that a couple of times. I think the best thing for most people is like, you know, use single sig

18:58

passphrase. Once you're comfortable with that, very comfortable with that.

19:03

Then you go and you set up, you know, like you go on Sparrow or something,

19:06

you set up a two out of three, you know, do it all yourself.

19:10

Get used to that, send and receive some money, test some shit, figure out where

19:14

you're going to put three backups. And then slowly, right?

19:19

Like, because the thing is, a lot of these protocols or this sort of like

19:22

assisted multisig set up, they're very custom.

19:27

It does sort of like, you know, it could hurt you if you don't know what

19:31

you're doing. Yeah, it was funny. I tried, I opened Sparrow a while ago and it hit the import wallet button and

19:39

import wallet gives you a menu of 30 different wallet formats that you can

19:45

import. It was almost comical.

19:47

Every one of these wallets has their own format.

19:51

Yeah. Yay. EBSMS was going to fix everything you didn't.

19:56

Yay, open source. Yeah.

19:58

Open source is going to take over the world, Rudolfo.

20:02

It is. It is. Open source is great.

20:06

Protocol should be open source. RoboSats, version 0.7.2, improved recovery robot form and a bunch of other

20:16

updates. What are Nostr order books?

20:20

Yeah, so I think they're using Nostr to do the whole bids and asks.

20:26

That's pretty fun. The way it should be, hopefully with ephemeral keys, but otherwise all your

20:32

bids and asks are public on your Nostr Twitter.

20:37

Yeah, that's really neat. RoboSats seems like one of those ones where a community really developed behind

20:41

it and they're really moving forward.

20:46

Excited to see. I mean, they have some volume stats, I think, on their website.

20:51

I remember seeing that at a bit test.

20:54

It seemed like it's been growing. I mean, they've been around, like we've been covering them now for at least a

21:00

couple of years. Yeah, if you go to learn.robosats.com stats, you know, it's pretty consistent

21:06

up and to the right. Great. BitKey firmware, version 1.0.91, faster transaction signing, hardware now signs

21:17

transactions up to five times faster. Rust Blitz version 1.11.3, optimized to run on plain Debian 12 Linux for Prox,

21:28

Mox, VM. Rust Blitz, Rust Blitz is cool, by the way, people should check it out.

21:37

ESP Miner version 2.3.1b1, we work how we publish artifacts, use the same ESP

21:46

expressive IDF release for GitHub and VS Code.

21:53

ESP Miner is an ASIC miner for ESP 32.

21:58

That's kind of extinct. Yeah, the BidAxe thing, right?

22:02

Yeah, it's like a lottery mining, you know, like you barely make it through

22:08

like one round. Bolts Exchange, the client in the web app got updated.

22:19

All right, Project Spotlight, Frost, a flexible round optimized threshold

22:24

signature library for BIP 340 taproot.

22:29

Isn't this Frost, Frost? Or is this some implementation of Frost?

22:36

This looks like a different implementation to CMD Druid, it's not like, it's

22:40

just in his personal GitHub. It's the same name.

22:42

Yeah. Great, that's definitely not going to cause confusion.

22:45

Oh, wait, is this CMD Druid? Who is this?

22:49

Is this Topher? Feels like it's Topher, yeah.

22:52

I think that's, yeah, maybe we know him.

22:55

Yo, is this, is it in JavaScript?

22:57

Yeah. No, it's TypeScript.

23:00

Sorry, TypeScript. Yeah, because he was doing, he was doing BidEscro stuff.

23:05

And he was telling me that his like next project, he wanted to do something

23:09

like this. So, yeah. ColliderScript, Covenant in Bitcoin via 160-bit hash collisions.

23:19

The paper introduces a method for enforcing covenants on Bitcoin outputs using

23:25

hash collisions in SHA-1 and RIPEMD 160, allowing covenants without Bitcoin

23:32

protocol changes. That's nuts. This is like insane.

23:36

Oh, yeah. This is weaponized autism right here.

23:39

This is, if you've ever seen it, this is weaponized autism.

23:42

Carmen's been warning me about this. Basically, Polster got inspired by BitVM and basically is trying to see if he

23:51

can like implement like opcodes that we don't currently have by just colliding

23:58

the shit out of hashes. I don't, I don't really understand the cryptography and Ben won't read the

24:03

paper for me yet to explain it to me. So I don't know what's really going on.

24:07

But the idea is like, can we do enough work and make a script under four

24:12

megabytes so that we can actually put it on the blockchain that emulates

24:16

opcodes? And then basically, it kind of in a kind of a weird way, it sort of

24:21

pushes along some of the software discussions.

24:24

Like, well, you know, we could emulate some of this stuff like really

24:27

inefficiently. So just, you know.

24:31

Yeah, so the basic thing is like, we might already have opcodes or covenants,

24:35

but like. You know, all this shit never fucking goes anywhere.

24:40

It's like BitVM. None of this shit goes anywhere because nobody that is sane puts real money in

24:45

any of this shit. I mean, I think as Bitcoin matures, it's good to have these people exploring

24:52

the solution space. Oh, absolutely.

24:55

No matter how stupid or crazy it sounds, because you can, you know, maybe they

25:00

find something. So I think it's a it's a great thing that people are, you know, people do

25:04

these crazy, these crazy research experiments.

25:07

But yeah, I don't know how practical. Most of them don't turn out to be practical.

25:12

You know, I see like, yeah, the research side, absolutely.

25:16

I love that. It's the problem is like when people start then selling the thing as if it's

25:23

like, you know, BitVMs is coming tomorrow.

25:25

Look at my shitcoin on BitVMs, you know, like it's kind of triggering.

25:31

But, you know. One thing I like about this one, the work to spend our covenant is about 33

25:37

hours of the Bitcoin mining network.

25:41

But to break our covenant requires 450,000 years of the Bitcoin mining network.

25:47

So, OK. OK, so this is so impractical you couldn't even use it, really, unless you were

25:52

right, unless you were like riot mining or something.

25:56

But like to put it into context, like maybe, I don't know, six months ago, you

26:01

know, when Polster started like explaining this to people, he's like, I don't

26:05

know if I can do it. So the fact that he's got it to the point where you can do it in

26:08

33 hours of the Bitcoin mining network is like it's progress in his terms.

26:12

How much hashrate does Riot have?

26:15

Like 10 percent, 5 percent? I think it's something like that.

26:20

So so if we extrapolate that, say times 20, so like if he employed Riot, it

26:29

would be 660 hours.

26:33

I just asked Pierre, maybe Pierre can put the word in, you know.

26:38

Guys, can we like use your mining facility for 660 hours?

26:45

That'd be a fun bounty. You just lock something up with this and then.

26:50

Hey, Pierre, I'm looking for a little proactive security.

26:52

Do you think I could have your entire hash array for a week?

26:57

That's right. Before we move on, I do think that Polster needs to get back to his true

27:03

mission of onboarding the Amish onto the Bitcoin network, you know, as you said

27:07

earlier this weekend, VK. Yeah.

27:10

Did I? Yeah. OK.

27:12

You responded to me on Twitter.

27:15

Oh, right. You remember this paper wallet stuff?

27:21

Yes. The Amish, the Amish delivered Pennsylvania to Generalissimo Trump.

27:26

So, you know, we have to pay them back.

27:30

Kind of like what a brilliant move. Let's pick up those people.

27:35

Those people, who forgot about them?

27:40

Don't fuck with raw milk is the lesson.

27:42

Yes. Great RSI, the Great Script Restoration Interpreter, a repository contains

27:49

experimental potential interpreters for great script restoration.

27:53

A proposal aimed to re-enabling the refining Bitcoin script opcodes.

27:58

Oh, man, I have love and hate for this project.

28:02

It's like, you know, of course, us nerds love it.

28:07

Of course, the economic actors are probably going to hate it because it's like

28:11

changes and risk. So it's going to be interesting.

28:17

Boltzmann, TS, Monero Repo, TypeScript Library Computing, the Entropy of

28:22

Bitcoin Transactions and the Likeability of their Inputs and Outputs.

28:26

Like linkability. Yes.

28:31

So de-anonymization project, I guess, for testing.

28:36

Hmm. It's just lovely to watch, to be able to participate and listen to NVK

28:42

Practices reading. Right. It hasn't changed much since K-12.

28:52

And this is me reading fast. Bitcoin Hackerspace and Community Accelerator, BleepLab, launches BleepDev and

29:01

a new Bitcoin developer education platform built on Lightning and Noster.

29:07

So this is kind of fun. So Austin is the guy behind PlebDevs and he's been going to PlebLab for a

29:16

while. He works for Voltage and he's basically making his own like online education

29:20

platform where you kind of learn to code, but also learn how to build on

29:24

Bitcoin. And we went over his UI in Austin Bitcoin Design Club.

29:31

And also PlebLab just moved onto the same floor.

29:35

So now we have Bitcoin Commons, we have PlebLab, and we have Unchained all

29:40

basically on the same floor in Austin.

29:43

So it's kind of fun. I feel like there's some nice like community consolidation going on.

29:51

SetSale, a Lightning Bitcoin payment processor with the option of connecting to

29:57

your own Bitcoin node or Lightning network node.

30:02

Lightning Bitcoin payment processor written easily deployable in Python.

30:07

There you go. That's what we like to hear, Python, that's just great.

30:12

That's right. All the Rust hipsters, they don't understand that all new languages come and

30:18

go. It's by Nick Farrell, but the last commit was in May, but it's by Nick Farrell.

30:26

So it's good provenance. Nice.

30:28

Yeah, he's been doing this one for a couple of years. He's now doing the FrostSnap hardware wall.

30:35

Yeah. Yeah, they're moving in on you, all these hardware walls.

30:39

Yeah, any day now. No, it's a very cool project.

30:43

I really like the little snapping thingies. Let's see if they can make a clock.

30:47

I think the challenges with things like that is it's going to be using like

30:54

ESP32 is not a fantastic platform and USB is a problem.

31:00

But there is nothing like, I mean, if they can prove the concept of that script

31:06

type, right, like in that sort of use of it, it shouldn't be hard to move

31:11

that into something more usable, like an NFC sort of tapping dance thing

31:16

between different devices and more conducive to phone use.

31:22

Imagine like, I mean, not hard to imagine Google or Apple deciding, hey, you

31:25

know what? Do you know that USB command you are using?

31:28

Yeah, it's not available in this new update. You know, like Apple broke the rights to FAT32.

31:38

They were like breaking the SHA256, so they were breaking any rights really

31:45

that were going to cards. So when you had things that had to be checked, like you checking the signature

31:49

of your code card firmware on a micro SD card.

31:52

Oh yeah, it doesn't check. So code card says no.

31:57

Anyways, email BTC, send Bitcoin to anyone that has an email address.

32:05

That's cool. How does that work? It is a very good pitch, you know, I think we need more of these things

32:11

that are like, you know, an idiot can do.

32:14

Right. So that's kind of UX we all want.

32:18

Do they hold the Bitcoin in transit or something for somebody?

32:21

No, it says it says non-custodial.

32:23

There's something called Near Signatures, which I've never...

32:27

Near Chain Signatures. Near Chain, the word chain, that's terrifying.

32:33

Yes, as soon as there's chain, there's a shit going on.

32:35

Oh, I don't like the word chain. They're using multi-party computation.

32:40

Oh, OK. Dude, but MPC with VCDSA is like really asking to be like, you know, owned.

32:48

Yeah, but this is this is for payments, you know, like.

32:51

Yeah, if you're just like doing Venmo, you don't need like world-class

32:55

security, you know, like, yeah, you can just get a really easy user experience.

33:00

It might be worth it. Like people love finding addresses, right?

33:04

And a lot of those aren't terribly secure, but it doesn't really matter.

33:10

Yeah. Yeah. And then and then, you know, people say, no, but this is the solution for all

33:14

your Bitcoin. And then, you know, it's like a classic.

33:19

All right. Cross-script attack.

33:23

Looty Player JS, a popular open source NPM package for web players, was

33:30

compromised with a wallet drainer. Oh, man.

33:34

Amazing. I wonder what exactly this means, like in what context can it drain stuff?

33:41

Oh, it's a mobile. It's a mobile library. Interesting.

33:45

Oh, Lottie. I've heard of Lottie. Yeah, it's like for it's like for fancy animations.

33:51

So it's like I think it's for a React Native because Airbnb does a lot of

33:54

React Native. Yeah. Always run your phone in lockdown mode, guys.

33:58

There's Lottie players for like every single like front-end you can imagine.

34:04

So like Web, React, Native.

34:08

Yeah, could be. Swift. So, yeah, like if you have if you use this library to give a nice flashy

34:15

little animation when your app loads up while it's loading the data, if you did

34:20

a bad update, then if you updated it, now all your users could be gone.

34:27

Right. If it's a hot wallet. So it is. Yeah, it is.

34:30

It speaks to that is a big problem in software development is the supply chain

34:34

attacks. It's a it's pretty terrifying.

34:37

Any any real non-trivial software project ends up with so much code that isn't

34:41

audited. Yeah, I mean, you know, the solution is like, see, when us cranky people go and

34:49

say on Twitter, you know, like the UX can't be too nice, can't be too easy.

34:54

You know, it's because the other people that make the stuff be too nice and too

34:58

easy always end up using fucking libraries that they don't audit.

35:01

Then people get on, you know, like ugly and simple goes a long fucking way.

35:07

So it looks like somebody compromised a developer who had an access token to

35:15

publish to NPM. Always.

35:18

Yeah. So it wasn't in the source code. They didn't they didn't get a bad thing into the source.

35:21

Right. Lottie didn't have anything wrong in their code, but somebody pushed an updated

35:26

version of the package using a compromised access token to NPM.

35:31

And then everybody who uses the package updated.

35:34

That's exactly what happened to to Ledger Live when they had somebody took over

35:41

either the CDN or some other package releasing thing of JavaScript that I don't

35:47

fully understand. And they replaced the library there.

35:51

And then they managed to to take money off of, you know, some fucking weird

35:55

smart contracts or whatever that people had on their Ledger Live.

35:58

But but this is the thing, right? Like it's man.

36:01

This is also this is also the same thing that happened on Ubuntu.

36:05

Like there was this big vulnerability like six months ago in Ubuntu where it

36:08

was just it was mostly a build environment problem.

36:11

Right. So this is an example of why open source isn't, you know, the cure all right.

36:15

Because you're in this case, the vulnerability, you know, there's nothing wrong

36:20

with the code, but the artifact that was built that went into projects was not

36:25

was tampered with. But, you know, reproducible builds, deterministic builds will fix this, right?

36:30

Like totally deterministic. Well, kind of, because you don't know where the phone is loading, right?

36:35

Because it's still like the phone is still like the app still go through the

36:39

walled garden closed from the MacBook.

36:42

I mean, that is true. If they're if they're doing if you have a React Native app that's hot loading

36:46

your JavaScript bundle, right? Dude, if you run like I highly recommend people run your phone on lockdown mode

36:52

and see how many apps don't even load.

36:54

Like it's just blank because you're just loading everything from the web.

37:00

You know, I bang on this on almost every show, like hardware wallet developers

37:04

should not have a fucking wallet.

37:07

OK, it's like you are either the signer or you are the transaction creator.

37:12

You should not have both parts, because if you have both parts, you can make

37:17

some very bad transactions that the people may not notice and sign it.

37:22

So you really want the two vendors to be part of this dance, especially when it

37:27

comes to to like this and this and money.

37:29

And, you know, we all know that when SACs today is a million dollars tomorrow.

37:33

Right. So, you know, it's man, it's it's so fucking annoying.

37:39

It's you know, I also think it's interesting in their incident report.

37:44

They like list the SHA-512 of a known good version.

37:49

It's like, how nice would it be if, you know, JavaScript dependencies involved

37:55

hash and signing during normal course of events, not just during an incident

38:01

response. Talking about dependencies, I went to take a quick peek at one of this very

38:07

common DIY hardware wallet projects.

38:11

And Jesus fucking Christ, there is even Vim there.

38:14

Like it's like the full Linux stack, like the whole thing is just sitting in

38:22

your hardware wallet. Amazing.

38:26

There is even a user table. Fascinating.

38:30

It's OK. People need to get rekt to learn.

38:34

There is there doesn't seem to be another way.

38:37

All right. Hackers misuse emergency data requests to access user data at TechCrunch.

38:44

Hackers gain access to user data by exploiting emergency data requests using

38:48

hacked law enforcement email accounts by bypass user warrant requirements.

38:54

Very interesting. So all you have to do is you just email YouTube and say, this guy is

38:59

a terrorist. It's like, here's his password.

39:04

Pretty insane. The attacks will continue until the backdoors are removed.

39:10

Yeah, I love that. I think it was on, I think it was JD Vance on Rogan talking about how

39:16

his phone and Trump's phone both got hacked.

39:19

Yeah. I don't know if you already talked about this, but I thought that was

39:22

interesting that he specifically said that he was told that the compromise.

39:27

So like, it's not just like those in the know, but like the actual victim was

39:32

told the compromise is based on like NSA requested backdoors.

39:37

Yeah. Yeah, involved from the Patriot Act.

39:41

Yeah. Yeah, no, totally. I mean, you know, if you if you put a door, it's like it depends on

39:50

which thug is in power and which thug is going to have access to, but some

39:54

thug is going to get in. The Chinese have had doors for thousands of years.

39:59

They know their way around the door. It's just been so hard to get this through, like into like mainstream political

40:07

understanding, I feel like. And so it's kind of nice to see that level of understanding reach like the, you

40:15

know, vice president elect. It's not going to get there.

40:18

It's like the phone, right? It's like people advocating for using the phone for real money, like or for

40:23

actual like, you know, do or die privacy things.

40:26

It's like, no, your phone is remote accessible by the spooks.

40:29

Just just know that, you know, can you prove it?

40:33

Yeah, probably not. So just the fact that they allow you to use encrypted apps now that they don't

40:39

have the keys for it, just so that they can see it some other way.

40:44

JD Vance also believes that his signal was not compromised.

40:47

I don't think the signal protocol has been broken.

40:50

I just think that is, you know, the signal servers, the signal, the phone that

40:56

you're using for your signal, everything else is compromised.

40:59

Yeah, or they're just they're just reading your entire screen, right?

41:02

Yes, exactly. Totally, right. And your face while you read it, too, because they, you know, these guys are

41:08

all creeps. So like they want to see all the angles.

41:12

You know, it's it's it's pretty brutal. So store relays target in IP spoofing campaign causing widespread disruption.

41:22

Critical zero click flaw exposes Synology storage devices to ransomware and

41:31

data theft. You know, ransomware I'm OK with because if you have another backup, it's not a

41:37

big deal. It's just like, fuck it. Synology is normally your small business's backup.

41:45

Yeah, totally. It's a backup should be on a couple of drives via USB-C and then you

41:54

put them away and that's it.

41:57

And you just do that once in a while and you're probably good.

42:00

All right.

42:03

Hidden risk. North Korean hacker group BlueNoroth deploy a new MacOS malware campaign

42:12

targeting cryptocurrency firms. The attack uses phishing emails disguised as crypto news.

42:20

It's like you're double your Bitcoin.

42:22

Click here. BritneyUsePeers.exe. Don't click on anything.

42:29

I mean, it's funny they modify your ZSH file.

42:32

So they modify like your terminal shell.

42:38

That's pretty funny. I know, right.

42:41

And but here's the thing, like Wessex doesn't ship with ZSH.

42:46

Yeah, it does. It does? Oh, shit.

42:49

Really? Yeah. I'm still running my own.

42:52

Like, because, you know, I just keep on inheriting new systems, right?

42:55

Just bringing it over. So, like, I'm running my own.

42:58

OK, Boomer. I did not know that.

43:02

It's funny that they're doing this to bypass, like, MacOS, like, alerting, you

43:06

know, MacOS, people complain about these alerts, but I love this.

43:10

Like, you launch an app and it's like, hey, this app wants access to your

43:13

documents folder. And it's like, hey, thanks for letting me know.

43:16

Like, I'm really great. I like that. I like the copy and paste one.

43:19

That's my favorite. It's like, why does this app want copy and paste access?

43:24

It's like it's an app to change the color of the screen.

43:26

Yeah. Also, run your laptops, your Mac computers on lockdown mode.

43:33

It is surprisingly good. It's also kind of cool how many less ads I get on stuff.

43:41

Yeah, the really frustrating thing is that they don't let you.

43:45

We had this problem in Mutiny is that, you know, lockdown mode disables

43:50

WebAssembly and WebAssembly is getting used more and more on the web.

43:54

And it makes really cool things possible.

43:57

And a nice compromise is being able to like add an exception.

44:01

No, see, WebAssembly is essentially a remote code execution throw jam.

44:06

It's like it's really brutal. OK, in my opinion, it seems relatively trivial to be sandboxed.

44:13

But let's say you don't trust it, but you can still theoretically add an

44:17

exception per site. But there's some bug that they added to Safari where you can't even add an

44:23

exception. It's not a bug.

44:25

It's because, you know, the celebrity goes and adds an exception and boom, all

44:29

their nudes are on the Internet. No, it's a it's a bug.

44:32

I filed it as a regression and they labeled it as a bug.

44:36

So I have proof. That's your list.

44:41

You should submit it to the producer. All right.

44:46

Five dollar ranch attacks. They keep on increasing.

44:48

Target break-in, Bitcoin host and narrator.

44:51

Geist one. Yeah, I saw that one. So Geist one was at the Lugano Plain B conference.

44:56

Some guy entered his hotel room. It really goes to show that evil maids are real.

45:03

You know, use devices.

45:06

First of all, don't travel to Bitcoin conferences with your main devices.

45:10

Second, don't stay in the hotel conference. Already a huge improvement.

45:13

Don't use your real name to book hotel rooms. Yeah, I think the golden age of Bitcoin conferences for real Bitcoiners is

45:22

pretty much over. Now it's like, you know, just meet your friends.

45:27

I'll just go fishing with the boys, you know. That's right.

45:30

Just go fishing with the boys. MVK, we need to go walleye fishing someday up in Canada.

45:37

No, I'm not there. I don't know, man, maybe the communists are not going to let us do that there

45:47

at some point. I don't know. But yes, I don't like fishing.

45:50

I only like shooting food. Like fishing for food, I've tried.

45:55

You could shoot a fish. Yeah, I've tried.

45:58

I've succeeded. But it is totally possible, I might say.

46:05

But the main problem is, yeah, fishing is boring as fuck.

46:11

It's so fucking boring, man.

46:16

And he calls himself a Canadian.

46:18

Yes. I was not compatible.

46:23

All right. What else?

46:26

Here, a 23-year-old Ukrainian tourist visiting Puckett was ambushed in his

46:32

friend's hotel by our man.

46:35

And then they threatened to break his fingers.

46:38

The minute he said 500,000, he did.

46:41

He said 200,000, so he negotiated it down.

46:45

What a great way to start your day. I mean, these things always have a backstory, you know.

46:52

Like, it's never that simple.

46:55

You know, this dude was probably bragging at a bar about something or he pissed

46:59

off somebody he didn't like that knew he had coins.

47:02

It's always like that. Toronto cryptocurrency CEO Dean Skurka was kidnapped and held for ransom in

47:12

daylight incident. I saw this one on the news there.

47:16

And they paid one mil in ransom and the guy got released.

47:21

I mean, stay classy, Toronto. Now you have taxes and crime.

47:25

Wow. Winning. Pick one.

47:31

You can't have both. Gunman family shot, shoots Antonio Vinicius López Griezbach, cryptocurrency

47:41

businessman and injures three others.

47:44

Sao Paulo International Airport. Jesus.

47:47

I thought it was. Wow. That's bad when it's at an international airport.

47:51

I know. Right. Like on the parking lot. It's like the one place, you know, like everything's a felony.

47:57

Like anything you do there is a felony. Remember the shit really escalated with Escobar when they decided to kill some

48:04

guy in the in the airport. It's like the airport is like one of those places where you don't fuck with,

48:09

even if you're a sanctioned mobster.

48:12

That happened the day I flew out of Mexico City.

48:14

Really? You were there for the Escobar? I was spending the year off the Internet and I was in Mexico City for a

48:21

robotics conference. I got on a plane, flew to New York.

48:25

And the next day I pick up a newspaper and I start reading about the shooting

48:28

that happened in Mexico City at the airport. So it happened like probably a couple of hours after I left.

48:33

Wow. Yeah. The world's going to get very interesting.

48:38

I mean, like, you know, the most soluble money in the history of humankind is

48:42

also great to take it from people because it's soluble.

48:48

Is this a good argument for covenants?

48:51

Yeah, absolutely. We need covenants.

48:53

We need on-chain enforced vaults because then there is like literally nothing

48:59

you can do. And it's provable too.

49:04

I mean, you know, like we have all those trickpins and duress systems and plus

49:08

that plus multi-sig, you know, you can slow down a lot.

49:11

But, you know, sometimes the push will come to a shove and, you know, it's a

49:16

problem. Enrique, of all the proposed benefits of covenants, would you rank the vault

49:22

use case as the most important? Oh, absolutely.

49:25

Everything else is just a waste of time. You know, sure, you can improve Lightning a little bit, can do this stuff.

49:32

But like, realistically speaking, it's like, you know, when you have like UTXOs

49:37

that are worth like everything, right, like people's life savings and shit, you

49:42

know, we got there with gold, right?

49:45

And then because gold was so soluble and reasonably portable, your chariot, you

49:51

know, people were stealing the gold and then people outsource the risk, right,

49:56

to the banks, like to people who did IOU banks so they could travel or pay

50:00

remotely or whatever. But like somebody has to have the guns, right?

50:05

When be your own bank means also be your own gun holder, right?

50:10

And most people don't want that. Most people want to outsource the risk, the liability and, you know, at the

50:17

expense of their sovereignty. So you can see you can see a similar thing happening with ETFs, right?

50:22

Was it like 19 out of 20 just use Coinbase?

50:25

Yeah. Yeah. Right. No, they don't have a choice.

50:27

Like you can't just have a dude. Yeah.

50:29

You can't just have a, you know, the board of keys and shit like it doesn't

50:32

work like that. Right. So we need we need on-chain solutions.

50:37

Yeah. It's almost like separation of responsibilities for institutional custody.

50:41

Right. Like you have you have the guys that can sign and the guys that can say

50:44

you weren't allowed to sign. Right.

50:47

Yeah. I mean, you know, cryptography, all cryptography does is just creates a key

50:52

issue. You know what I mean? It makes all this cool shit, but now it's a key protection problem.

50:57

Right. Every solution introduces another issue.

51:00

That's right. And, you know, like what we need is Bitcoin to be protected by math, not by

51:06

guns. Right. And that that truly, truly takes us to a whole other level.

51:11

Because can you imagine like, you know, the best way to secure Bitcoin is just

51:15

simply not be able to sign it. Right. So like somebody comes to me like there's nothing I can do.

51:19

There's no coin. There's nothing really.

51:23

Like, you know, it's going to take me months to go to different countries and

51:27

all kinds of shit to be able to get something.

51:29

In addition to that, that's a good step.

51:35

But ideally, that is the common case.

51:39

So not just that some people can't sign, but that it's typical for high net

51:44

worth holders to not be able to sign.

51:46

It becomes it becomes known that there is no point in physically attacking

51:50

people because one, you're going to get shot back.

51:53

And two, you know, they can't sign.

51:56

That's it. Like it really is. That's why they don't go after high net worth people who have money in the

52:01

bank, because like the bank won't let them take the money out.

52:06

It really is like if you tell the bank teller that you're paying a ransom,

52:10

they're going to say, no, you can't have it. You know, and we need to get there with math and covenants do give us that.

52:19

So, yeah, I think if the current trends continue, you know, you're going to

52:22

have a lot of new parties participating in consensus and everything.

52:25

Right. Maybe the vault use case is the one thing that would, you know, they're not

52:31

going to be convinced by ARK probably, you know, they don't care.

52:34

But a better, more secure custody, maybe they'll get behind.

52:38

Right. Yeah, no, it's we can't we can't escape that.

52:43

Anyways, software releases and project updates for privacy and other related

52:48

projects. Reticulum MeshNet got updated at bandwidth and spreading factors for 2.4

52:54

gigahertz. So that's cool. I got to get get this set up.

52:58

Yeah, dude, it's like it's super easy if you want to just do it over the

53:01

over the Internet to get started. Right.

53:04

And then slowly add other comm methods.

53:07

Yeah, exactly. It's just there's just a file.

53:09

You just keep on adding more comms set up as you add them.

53:12

That's sweet. Matrix version 2.0, instant login, instant launch, instant sync, aka simplified

53:23

sliding sync. Man, Matrix is one of those projects I want to love it, but I fucking hate

53:28

it. It's so difficult. Like, it's such a fucking pain in the ass.

53:31

And you have once you're stuck with one server, you're kind of stuck with that

53:34

server. I'm curious what it's like now.

53:37

I haven't used it in a while, but it sounds like they've kind of rewrote a

53:42

lot of their core stuff and they're trying to address like the some of the pain

53:46

in the ass that's like kind of it would take a while to load a room

53:49

because it's like basically decrypting everything. Great.

53:52

So it sounds like they've addressed that with like sliding sync, but I don't

53:56

quite know. Yeah, the sliding sync is kind of a big deal.

53:59

It's like you got, you know, I remember seeing demos of the old old electron

54:03

app and this new one with sliding sync, you know, from some developer who's in

54:06

like five thousand rooms. You know, the old one would take five minutes to open.

54:10

The new one would open in like one second.

54:12

Right. So it helps performance a lot, but only, you know, only for heavy users, mainly

54:17

for heavy users. Nice.

54:21

I mean, I think MLS and like I said, I think as soon as Signal adds

54:28

big room support, I think a lot of these problems get resolved.

54:34

Now that you don't have to dox your phone number anymore, the ratcheting system

54:39

that Signal uses, I think, is way more reasonable.

54:43

They did add multi-people calls now for video calls.

54:48

Lightning plus L2 plus project spotlights, podcast boost dashboard, convert

54:54

core lightnings, list invoices, output to a podcasting 2.0 dashboard.

55:00

That's cool. I hope the Podhome guys start hosting that because that would be helpful.

55:06

Zpay.live monetize virtually any digital content of lightning paywalls.

55:14

Bullish Nuts, a bullish cashew PWA wallet, Athene Nut, a privacy preserving web

55:23

search powered by Kaji and cashew.

55:27

Oh, I guess it's like a Kaji wrapper that you pay with cashew.

55:31

Cool. Tiny Pine, a simple LN and cashew e-cash POS system for merchants.

55:41

Any updates or things with the FedEment?

55:46

Yeah, I mean, they're just kind of marching along, making things more robust

55:50

and reliable. They had a new release, I don't know if they've cut it yet, 0.4. I

55:56

don't pay enough attention, I'm just very curious.

56:00

What happened to the smart contract thingy so that you could do mining pool

56:06

payouts? No one's implemented it, still, you know, an idea.

56:11

There was a developer who was very interested in the idea, Kitman, who has

56:18

taken a little break. So hopefully Kitman returns and implements it.

56:23

There's a couple other people who are interested in talking about it.

56:26

See what happens. Very cool.

56:30

Software releases and project updates for L2+, Zeus version 0.9.2-RC, activity

56:39

export transactions, history spreadsheets, improved BIP 3.5.3 and BOLT 12

56:45

support, spooky theme, settings payments and add slide to pay thresholds.

56:53

Evan, if you're listening, can you make the default view be the balanced view?

56:58

That would be nice and make it a little easier to swap between wallets or see

57:02

all the different wallets in a multi-wallet view.

57:06

So like, kind of like cards or lists for each of the different wallets you're

57:12

connected to. That would be nice. You could NVK just stacking Lightning wallets now, just layers upon layers of

57:18

Lightning wallets. Yep. There is no other way, right?

57:23

Like nothing works in Lightning, so like you have to have multiple choices.

57:26

You have to keep trying. Trying to pay this one.

57:29

Oh, it didn't go. Try this other one. Oh, didn't go.

57:32

Try this other one. Oh yeah, that one go. And that one charged me 10%.

57:38

The self-custodial Lightning wallets, man, the fees are just so fucking brutal.

57:43

But it works, you know, it's one of those things. It's like it's a lot of pain.

57:47

But at the same time, it's quite magical, right?

57:49

Like it really is. Like, especially when you're sending zaps on the Auster, man, it really is

57:53

fantastic. Or like when you use like BullBitcoin to pay people in South American stuff,

58:00

like it's crazy that you just pay, you know, Bitcoin Jungle or whatever.

58:04

It just goes from there to the other thing, to the other thing.

58:07

And the guy gets like it straight into his bank account.

58:09

Like it's a poof and it is kind of instant.

58:14

It's yeah, it's cool.

58:16

Living the cypherpunk dream. I'll be go version 1.7. Withdrawal support, improve currency selection,

58:24

postagram, info in transaction details, write the Lightning, add support, send

58:31

payments for AMP invoices on Lightning, on L&D, a few other things.

58:37

CLBOSS updated. Nutshell version 0.16.1. Add support to L&D via gRPC for LN-RPC wallet,

58:50

NUT15 Mutiny payments for LN-REST wallet, stability improvements.

58:55

Multi-NUT payments. Yeah.

58:58

Thank you. Geyser, November 2024, email enhancements, creators can now choose between nine

59:07

different types, link posts to rewards and goals, link posts to goals and a

59:12

bunch other stuff. Geyser from Geyser. I tried to give Open Timestamps a sizable donation there and there was no

59:20

liquidity to receive it. So fix it.

59:24

Clams, remote version 2.4.0, add UI for both 12 prism plugin.

59:31

Noster, I'm not going to read. Oh, the Noster Project Spotlights, let's read those.

59:36

Snap Noster, create clean, customizable screenshots of Noster posts for

59:40

seamless sharing. Open Librarian, a website for tracking and sharing a lot of books.

59:48

Jumbo, yet another Noster desktop client.

59:54

Honeypot, a multiple wallets, multiple currencies project by Pablo.

1:00:00

Mutester, Noster, Live Noster, muted list, live monitor.

1:00:07

That's nice. Noster Gadgets, high level utils for developing Noster clients based on Noster

1:00:14

tools, Noster tools, TypeScript, Noster library for developing Noster clients.

1:00:22

Noster is moving, man. Things just work. I've been testing the Primo 2.0, really enjoying the builds.

1:00:29

It needs more Bitcoiners. I find that like there's not enough Bitcoiners there.

1:00:33

We need more Bitcoin talk there.

1:00:36

I also really would love to have like an Instagram type Noster experience in a

1:00:42

different app. Nobody provides that.

1:00:45

You know, sharing photos, that would be cool. That's a good idea.

1:00:48

Yeah, like, but like more sort of, you know, photos that you feel like, OK,

1:00:52

posting publicly like Instagram was way back then.

1:00:56

It's kind of fun for people who like photos. Yeah, I do.

1:00:59

I do think it's, I'm sure this has been talked about a lot.

1:01:01

A lot of the problems that people had with Twitter have gone away, you know, in

1:01:07

the last year. So the market, the market landscape in the last couple of years has changed

1:01:12

dramatically. And during the election or even like right now, it's felt like very vital.

1:01:19

It's like, hey, we're starting a Twitter campaign or an X campaign to, you

1:01:26

know, make Trump do this nomination instead of this nominate, you know, like.

1:01:30

Yeah, I mean, X is like the media, political and cultural center of the

1:01:34

universe right now, which is kind of insane.

1:01:38

And if something gets censored on YouTube, it like ends up on X.

1:01:42

Yeah, it's how you complain about censorship on other apps.

1:01:46

So I would tell myself what's like this election kind of thing blows over.

1:01:49

I can kind of like either go off of social for a while or just go

1:01:53

on Noster. But I think I think there is a few mistakes that like the Noster folks are

1:01:58

making. First of all, it's thinking the competition is static or thinking you don't

1:02:02

have competition, right? Like most people don't care how the technology works.

1:02:07

If it feels like it's what they want to feel like, for example, people want to

1:02:11

feel like there's less censorship, they will go for the one that has the most

1:02:16

amount of people. That's how networks work, right?

1:02:18

I mean, it does seem like I notice on my X now, like a handful of

1:02:24

people who are leaving, probably because they think it's become too right wing

1:02:28

and political or stuff. Yeah, the liberals are fleeing the blue sky.

1:02:31

They're all going to blue sky and freds. There's a lot of them on freds as well.

1:02:35

Blue sky is fully centralized, too, which is retarded.

1:02:37

They post like sneaky like references to blue sky, like they like, oh, don't

1:02:43

look too hard, but you might see a butterfly in this picture.

1:02:46

Right. I mean, see, like I don't have any of those people in my feeds, like I

1:02:51

don't know them. Yeah, I mean, I follow a handful of them who are just really good software

1:02:55

engineers, right, who are tend to be like very left.

1:02:58

And you can tell they're sort of upset about what has happened to Twitter.

1:03:04

Yeah, it's I mean, like this is kind of like it really feels like it's a

1:03:10

public square. It's the normal public square, right?

1:03:12

Like there is a dude vomiting, there is a dude screaming crazy shit, and then

1:03:16

you're trying to have a conversation about where you're going to go for dinner,

1:03:19

right? Like that's what the public square literally is like.

1:03:22

But, you know, like I think most people don't want free speech.

1:03:26

Most people want like, you know, they want just a nicer sell.

1:03:31

Right. They want just like they want their censorship, which is very fair.

1:03:36

I mean, that's what filters are for. I just want the protocol to be open.

1:03:39

And I think Elon is going to make even more closed.

1:03:42

I mean, like I mean, the best thing that could happen to Nostra is if they

1:03:45

start censoring people on Twitter, but I don't think that's going to happen for

1:03:49

a long time. That's exactly my point.

1:03:51

It's like the reverse has happened, right?

1:03:55

There's all these accounts that were banned, you know, years ago that are

1:03:58

coming back. Yeah. And also, like I think what the lefties have a hard time with is that like

1:04:06

they're not funny, right? Like it's like commies don't have a sense of humor, right?

1:04:11

Like and they are very thin skinned.

1:04:13

So like it's always going to sound like the free side or the people who are

1:04:21

more righty are like louder and bigger on these things because they just

1:04:26

they're just funnier. It's like the left kid meme, right?

1:04:32

Like that was the meme. And so, yeah, like, yeah.

1:04:37

And I mean, I really hope that Nostra doesn't become like a commie shithole

1:04:40

because then I'm going to need to I'm going to need to censor that on my

1:04:45

relay. I was having a similar conversation with someone who works on Erbit.

1:04:50

And they were like, you know, our whole idea was that the Internet was going to

1:04:54

become like a censored ghetto. You wouldn't be able to have any rights or freedoms on it.

1:04:59

And so you needed this whole operative system as their thesis.

1:05:03

And they're like, well, the premise has been proven totally inaccurate the last

1:05:06

year. So now they're like really reevaluated.

1:05:09

This is always like the safety in line.

1:05:12

Like, how do you kill Bitcoin? It's like, well, you make the US dollar really good.

1:05:16

Right. Yeah. I mean, the worst thing that can happen to privacy tools is when the non that

1:05:23

the centralized tools become more free, even though the underlying attack is

1:05:28

still very closed because you attract people, because, you know, centralized

1:05:33

systems are more efficient, period. Like you can't compete with centralized system inefficiency.

1:05:37

Right. And they already come with, you know, the lindy of the network effect.

1:05:43

Now, I feel like right now that I'm just getting to this point in my life

1:05:48

where I'm just so sick of logging into things.

1:05:52

Right. And like the off, especially if you like to use lots of different services and

1:05:58

especially if you like to like work things together, like connect things

1:06:02

together. Like the fact that everything in the world is a SaaS that has a separate

1:06:08

database and a separate logon is really retarded.

1:06:12

And I do think that's possibly the edge that Nostra could have still in the

1:06:17

future of like by being public key based and and trying to have standardized

1:06:22

data formats. I think there's still a lot of opportunity there, but maybe I don't feel right

1:06:28

now like I need a social media alternative.

1:06:30

You know, we did this whole series, right? Nostra Rising series.

1:06:34

There were like one hour episodes with about 10 of them.

1:06:36

They're really good. People should go listen to them if you want to understand Nostra.

1:06:40

And, you know, I was talking to Fiat Jaff. He made this point because, you know, like people say, yeah, but I don't see

1:06:45

all the replies. And he made this point where it's like, you know, you know, Twitter is one

1:06:50

relay. Facebook's another relay. You don't see other replies because, you know, you don't see the replies on

1:06:55

Facebook on your Twitter. Right.

1:06:57

And the big myth that these large companies are having is that like they could

1:07:03

greatly gain from opening their networks.

1:07:06

It's very counterintuitive. Right. Because imagine if you have a way to see like for companies go and they post

1:07:13

in every fucking network. Right. And it's the same post.

1:07:18

Right. The same marketing posts in every fucking network.

1:07:21

And imagine if you could see all those replies in the same place.

1:07:23

Right. Imagine you as an artist, you post your art and then all the replies from all

1:07:27

these places come and show and you choose how these things play out.

1:07:30

Right. So like if Twitter like exposed their content out, I think it would have even

1:07:36

more reach than they have now. It'd be pretty crazy.

1:07:41

I mean, Zucco probably wants some of that because Facebook seems to be dying.

1:07:45

They make all their money from Instagram and WhatsApp is the common carrier

1:07:49

outside of North America. Right. Like you cannot exist in Latin countries without WhatsApp.

1:07:55

Like you talk to your lawyer over WhatsApp.

1:07:57

There's no email. It's just WhatsApp. WhatsApp everything.

1:08:00

You order food over WhatsApp and all the segregated things depending on phone

1:08:05

numbers. It all feels like a house of cards.

1:08:08

Right. But it's also I can see it. Right. Like why would you open your network if you're a top dog and have the risk

1:08:14

of losing that monopoly on a network?

1:08:17

It's very hard for you to be incentivized to open it.

1:08:21

But I do miss the Twitter APIs used to be really nice when they had them.

1:08:25

All right.

1:08:28

Yeah. So a bunch of Nostra updates to every single client.

1:08:33

Oh, by the way, there is now the feed marketplaces are really growing, which is

1:08:39

really cool. That's common for most of the clients that are on this list that we would talk

1:08:43

about updates. You can actually load different feeds like a marketplace, like you can create

1:08:50

feeds and post them and then people can subscribe to those feeds.

1:08:54

That's super power. What else?

1:08:58

Boosts. Thanks for everyone who stream stats and shout out to the top boosters.

1:09:02

Ape me friend here. Not long enough.

1:09:05

Was still awake at the end. Man, I'm going to disappoint you again.

1:09:08

This seems to be that we got to the list fairly efficiently.

1:09:12

Odell is not here to take massive tangents.

1:09:15

So the show does run faster.

1:09:19

It's cute. BTC on board.

1:09:22

Great pod. Von Photo, thanks for the stats.

1:09:26

Average Gary. Red, green, colorblind, wrecked from NVK trading advice.

1:09:33

So yes, guys, you sell on red and you buy on green.

1:09:38

This is not trading advice. Did you guys see that funny post about the chicken that makes trading calls?

1:09:49

The guy figured out like he uses the chicken and he puts food like in the

1:09:53

different calls and then the chicken makes the call and the chicken apparently

1:09:57

outperformed like most traders on Twitter.

1:10:02

It's really good. I was like the anecdote that like traders in comas often outperform.

1:10:11

I saw a funny one that somebody tracking all the different stock portfolio

1:10:15

things. And like Nancy Pelosi's stock portfolio is like up like 50, 60 percent this

1:10:20

year. Like the only mainstream one that was beating her was Inverse Kramer.

1:10:27

I mean, the Kramer one, it is amazing.

1:10:30

Like I mean, his inversity consistency is remarkable.

1:10:36

Like nothing like it. Right. He's like an oracle.

1:10:38

He even called the US election. Right. He said Trump wasn't going to win.

1:10:43

It is amazing. Tech tips of the day.

1:10:45

Local send an open source cross-platform alternative to airdrop.

1:10:50

Go slow with this kind of stuff. You never know what kind of holes is there.

1:10:54

Disable 2G mobile connectivity for iPhone devices using lockdown mode to help

1:10:58

you protect against downgrade attacks from IMSI, cachers or FIC.

1:11:03

Yeah. So 2G doesn't have a lot of security.

1:11:07

And same with GPRS. And that's how a lot of those spoofing cell towers are used in hacker

1:11:14

conferences and things. Yeah. Interesting. So, yeah, lockdown mode is good for everything.

1:11:19

Just fucking run it on lockdown mode and then keep on annoying the developers

1:11:22

of apps to fix their app to work with lockdown mode.

1:11:25

That's the correct path. I didn't know 2G was still in these phones.

1:11:29

That's wild. Yeah, it is. GPRS is used in payment terminals all over the world still.

1:11:34

Maybe in third world shitholes like Europe.

1:11:38

Like many American states.

1:11:42

Nice. You know, like Mississippi and Europe.

1:11:46

That's the only one. No, dude.

1:11:48

Like, have you ever been to O'Hare Airport?

1:11:51

Jesus Christ. It's like I just arrived in like Bratislava or something during the, you know,

1:11:57

the Cold War or something. It's pretty brutal. Yeah.

1:12:00

And the politeness of the staff really makes you feel at home.

1:12:03

Yeah. Makes up for the lack of 21st century amenities.

1:12:08

Right. Exactly. Like walls.

1:12:15

It's like essentially like a rusting hut.

1:12:20

Man, US airports are brutal. Highlights from recent Bitcoin Optec newsletters.

1:12:26

Disclosure vulnerability we talked about. Timeout 3 channels, factories.

1:12:31

DraftBip4D lack proofs. I think we talked about this a little on the last episode.

1:12:36

I can't remember. Andolo and Florian.

1:12:41

I can't say those names, man. Payment censorship in Lightning Network despite encrypted communication.

1:12:48

This came up a bit, Devs. I don't know this specific paper, but the kind of the idea, a lot of these

1:12:53

new payments, the Bolt 12 is based on this idea that we're going to communicate

1:12:58

over the Lightning Network. Right.

1:13:02

This works going forward. But basically, Bolt 12 is enough information to send a message over the

1:13:08

Lightning Network to get the actual invoice from the node.

1:13:12

So there's some nice privacy aspects to that.

1:13:14

There's also kind of a newfound reliance on Lightning as the communication

1:13:19

medium. Right.

1:13:22

I mean, you know, Lightning communication should really be done over Nostra.

1:13:28

You know, Lightning messages are brutal, very inefficient and cost money.

1:13:32

I don't think messages should go over a carrier to cost money.

1:13:36

It's just not aligning incentives. Well, these messages are not, they don't cost money.

1:13:41

That's kind of almost potentially the problem. Really?

1:13:44

Yeah, it's like the same way that you kind of do gossip and stuff.

1:13:48

Oh, OK. These are the unpaid communication that Lightning nodes do between each other.

1:13:53

And now you can, part of Bolt 12 is to use that for requesting the actual

1:13:58

invoice. OK. Blockstream opens its newest research center in Lugano.

1:14:04

OK, that's marketing. Caso S integrates Albi Hub, a self-studio Lightning wallet and Lightning

1:14:10

Network node. Caso S is a community-driven open source platform focused on delivering a

1:14:16

simple home cloud experience. Cool.

1:14:19

I had a double take of that one. That was Caso's, like, four or five years ago.

1:14:23

I know, right? They're bringing back the Raspberry Pi. And that was their original pitch, was like, this is the sovereign computing of

1:14:30

the future. It's a different project.

1:14:32

It's a different Caso. Not me Caso, it's you Caso.

1:14:37

Very good. Johnny, where's the gong?

1:14:43

We need the gong, yes. Block refocuses on Bitcoin mining equipment and BigKey reduces investment in

1:14:51

Tidal, Shutdowns, TBD, Block, Decentralized Web 5 projects.

1:14:55

I mean, TBD, TBD, TBD was the DID stuff and all those

1:15:04

things. TBD got replaced by Noster.

1:15:08

Yeah, I mean, that's a big, that's a pretty big announcement, right?

1:15:11

Like, that was a whole business. I mean, like Block had like seven business units and this was one of them.

1:15:15

So it's... TBD was going to be some sort of like decentralized exchange too.

1:15:22

Yeah, they were going to do remittances and have a big decentralized exchange

1:15:26

and all these things. This is the problem. Like, if you hire a bunch of like researchers, you come out to research.

1:15:34

You hire business people, you come out to the business.

1:15:37

This is like the DID stuff.

1:15:39

Yes. They like, they like standards and like committee meetings about standards.

1:15:45

And they don't ship enough. Yes.

1:15:49

Fold app introduces insured deposits.

1:15:53

That's cool. Fold has a, Fold went public, man.

1:15:56

You can buy Fold FLD. What exchange was it on?

1:15:59

Was it on like Canadian owners? Yeah, I think, but I think they listed on NASDAQ too or something.

1:16:05

I don't know. Oh, really? Yeah. And I mean, I've been trying to convince Will, the CEO of Fold, to become a

1:16:12

meme CEO, like GameStop or something, you know.

1:16:16

He can do a stock split because the stock is right now at $11.

1:16:19

So it goes like sub-dollar. So he has a penny stock and then he changes his mind on TV and brings

1:16:25

it back. Like all kinds of crazy shit.

1:16:29

Yeah. That'd be pretty funny. They are offering a lot of banking services now.

1:16:34

Strike introduces Bitcoin on withdrawals.

1:16:36

That's good. I think they're kind of running the sailor playbook too, or at least it sounded

1:16:40

like that's one of the things they wanted to do to start becoming a publicly

1:16:45

listed, you know, Bitcoin treasury.

1:16:47

There's that company in Japan that's doing the same thing as well.

1:16:50

Yes, Metaplanet. Dylan did that one.

1:16:53

Dylan convinced some people there. Yeah, I mean, it's like it really is amazing if you have like access to cheap

1:16:58

credit. I mean, it's a money printer. It's surprising more companies haven't gotten on board.

1:17:03

It's like it's quite shot. Like when you think of all these Fortune 500 CEOs with their thumb up their ass

1:17:09

watching, watching Saylor being the third.

1:17:11

Are you like surprised? Remember when Bitcoin was starting out, like people would not buy Bitcoin

1:17:15

because it's clearly for drug dealers. You know, it's just like it's hopeless.

1:17:18

I mean, I've been I've been thinking about this a lot in the last couple of

1:17:21

days because at least it seems like, you know, like it's changing too early.

1:17:25

Well, it's too early to say, but it seems like the nation states may be

1:17:29

actually biting on Bitcoin, right? Like that's what these, you know, David Bailey and stuff is telling us.

1:17:34

Who knows if it's true, but I have a friend.

1:17:37

I have some rumors. Yeah. So but I mean, like the price action is like, you know, seems to somewhat

1:17:42

support it. So who knows? Like probably probably be us.

1:17:45

But we do have sitting senators and the president saying it's going to, you

1:17:49

know, the U.S. is going to do it is kind of is interesting, you know,

1:17:53

like maybe it seems like corporations are much more conservative when it comes

1:17:57

to Bitcoin than potentially states are kind of thought provoking.

1:18:01

I mean, it's nobody wants to lose their job making the proposition and the

1:18:05

price goes down. Yeah. I mean, that's the thing is like these people that get to the top of companies

1:18:10

are extraordinarily conservative, you know, like they are.

1:18:14

They did everything according to the book, especially the finance guy.

1:18:18

It's like the most conservative guy. And I think maybe the people that get this top of states had to make some,

1:18:25

you know, some more some bigger moves.

1:18:27

Right. Like have a guy killed.

1:18:30

Well, hearing the back story of the whole Biden thing is like funny.

1:18:34

It seems like they tried to, you know, replace Biden and have an open primary.

1:18:39

And Biden is just like decides to blow the whole thing up by endorsing Kamala.

1:18:42

Right. It's like you get a sense of how that guy accumulated so much power.

1:18:45

I mean, he's just like a brutal, you know, player.

1:18:50

Yeah. 1031 launches Bitcoin Alpha, a new podcast.

1:18:55

I can't tell if it's a joke or not because I'm getting 404.

1:18:58

Oh, no. Bitcoin Alpha. There you go.

1:19:02

I've seen Marty posting about it. This is Marty's fifth or sixth podcast at this point.

1:19:07

OK, I listened to one of the episodes.

1:19:10

Very, very good stuff. OK, I'm going to listen to it.

1:19:13

Clean Spark finalized acquisition of grid infrastructure.

1:19:16

Bitcoin mining. Yeah, this guy's grid got acquired or merged.

1:19:25

Nosto Show is now live in Australia and New Zealand.

1:19:29

Not interested in this shit for this show.

1:19:32

Funding OpenSats announces eighth wave of Nostra grants.

1:19:37

Farmster Group's coop, not coop, co-op, Nostrability and NIP44 libraries audit.

1:19:46

NIP44 is not DMs. That's something I really want.

1:19:50

Yeah, that could be Nostra's killer app if it just had a good open protocol for

1:19:55

DMs. Yeah. So there is a better that NIP44 is broken.

1:19:59

It's like don't don't use Nostra DMs as they are.

1:20:02

Jeff G is working on an MLS integration with Nostra that is like fully native

1:20:08

to Nostra. It's great. It's really progressing.

1:20:13

So that's moving along. Many ratchets, all kinds of ratchets.

1:20:20

We had a whole episode on it. Mining Dutch telecom subsidiary MMS collaborates with blah, blah, blah, blah,

1:20:28

blah, blah, blah, blah. Moving on.

1:20:31

The Dutch have telecoms? I know, right?

1:20:36

With a K. Privacy.

1:20:38

British activist and journalist Tommy Robbins was sentenced to 18 months in

1:20:42

prison for failing to unlock his phone. Police. This is all so fucked up.

1:20:47

TD Bank anti laundering money employee is indicted for unlawful distribution of

1:20:54

customer's personal information.

1:20:57

Classic. The KYC is the crime.

1:21:02

Kenya to require incoming passengers to declare phone IME.

1:21:06

Jesus Christ. Talk about tracking people when they come into the country.

1:21:09

Apple adds inactive inactivity timer feature to iOS 18.1 that reboots iPhones

1:21:16

after prolonged inactivity. Why is that?

1:21:19

That was the NSA remote remote watching getting hung up.

1:21:24

It says researchers confirm the feature shifts iPhones from after first unlock

1:21:28

to the more secure before first unlock state.

1:21:31

So it's harder for forensic tools to extract your data if you go to a before

1:21:36

first unlock state. That's cool. Like with an iPhone, when you restarted, it always asks you to, you know, your

1:21:44

passphrase again. Yep. The whole chain of stuff they do.

1:21:47

Like it makes it harder to break into. Yep.

1:21:50

Always turn off your phone to cross borders. Ren Crypto.

1:21:54

Oh, you know, phones really need is a decoy pin, right?

1:21:57

You type that pin, it closes down the other session and then shows some some

1:22:02

normie. Everything can be fixed with a decoy pin.

1:22:06

Everything. Seriously, like plausible deniability is your friend.

1:22:10

Yeah. So is Candy Crush. Every phone needs a Candy Crush pin.

1:22:15

That's right. Ren Crypto Fish, Steve Lee and Lynn Alden publish analyzing Bitcoin consensus

1:22:20

risks in protocol updates.

1:22:24

I'm really excited to so that there's a Citadel Dispatch episode about this

1:22:29

now, too. I want to listen to that and I want to read through this.

1:22:32

But they're trying to, as far as I can understand, they're trying to just paint

1:22:37

a picture of how Bitcoin consensus actually works and the actual risks.

1:22:43

Like just people have a lot of half formed ideas about these things.

1:22:49

And then we have conversations and debates that are typically, you know, are

1:22:56

often ill-informed or just partially this.

1:23:01

There's a lot of misunderstandings. It's a huge surface area to understand.

1:23:04

So I respect them for, like, trying to trying to tackle this and excited to

1:23:09

actually check it out. I think the problem is every time somebody tries to do this, they get something

1:23:13

like brutally wrong and then people are even more confused.

1:23:17

I actually like that. I don't think there is like a fixed way of looking at Bitcoin consensus.

1:23:22

I think it's like sort of like it varies a little bit depending on what's

1:23:25

happening in Bitcoin because the players change and the players sort of power

1:23:30

change, too. And that changes the dynamic itself.

1:23:32

And I think they even say that like this is not a roadmap for how to

1:23:36

change Bitcoin. It's just they're trying to be descriptive of how Bitcoin has been changed in

1:23:44

the past. Why? Let's leave it confusing so nobody can attack Bitcoin.

1:23:47

Yeah, I mean, I think it's not a roadmap.

1:23:50

Oh, I see. But any any greater understanding, you know, does inform people how to change

1:23:56

it. Well, you don't want security through obscurity.

1:23:58

Then just somebody smarter than you is going to figure it out.

1:24:02

No, like I don't buy that. You know, I bet that most systems that are closed source became open source.

1:24:09

You'd immediately find so many bugs that were just not visible for you to

1:24:12

attack before. You know, some obscurity does help.

1:24:16

You can't depend on it. It's not really obscurity, though.

1:24:18

It's disagreement, too, right? There is that, too.

1:24:21

If I was trying to propose a soft fork in a year, I would maybe want

1:24:26

to get everyone to agree on how soft forks are agreed upon and deployed before

1:24:31

I attempt my move. Well, isn't that kind of what happened with Taproot?

1:24:35

Like everybody, we like, the moment there was like an agreement on how to do a

1:24:40

soft fork, there was like. I mean, I guess because we wanted Taproot, maybe Taproot was the cause of that.

1:24:47

Yeah, you know, again, it's one of those things that it's not clear cut.

1:24:55

And I think when people try to create a description of it that is like that's

1:24:59

fixed, they get it wrong.

1:25:01

I mean, I'd love to read it.

1:25:03

I should read it. You know, I'm not trying to criticize them.

1:25:07

I'm very curious about what they wrote. I'm sure it's a lot of good in there.

1:25:10

But Bitcoin is still one of those things. It's like it's going to keep on changing.

1:25:14

The dynamics change. Well, they also said PR is welcome.

1:25:19

It's a living document. There you go.

1:25:23

Somebody's going to make a PR there for Neil.

1:25:28

And force push. BIP 1676 updates the status of BIP 85 to final as it's now widely deployed.

1:25:38

Oh, this was such a shit show. It's nice to see it.

1:25:43

That is getting marked as final.

1:25:48

LDK issue 3207 adds the ability to include invoice requests in the async

1:25:55

payments and messages when paying static bill 12.

1:26:00

Government and political stuff.

1:26:02

Anything actually interesting here?

1:26:05

Or it was just charges. Outum exchange operator of laundering funds linked to the Silk Road.

1:26:12

Bitcoin Fog alleged operator Roman Sterlingov has been sentenced to 12 years

1:26:19

prison for money laundering. Money laundering is like just they just invent whatever charges, right?

1:26:24

It's like it's like a random sort of like, oh, you're sending the money this

1:26:28

way. Jail.

1:26:31

It's the new tax evasion. Yeah, totally.

1:26:35

Argentina's central bank hosts a live Bitcoin mining art exhibit.

1:26:39

That Argentina one is kind of cool. It's like they're doing it like an art installation with running ASICs.

1:26:46

That's kind of cool. That's cool.

1:26:49

The Bank of International Settlements exits cross-border payments project

1:26:55

Enbridge. Sovereignty concerns arise over euro as European Union and European Central

1:27:03

Bank debate control. Jesus, Europe is such a fucking communist shithole these days.

1:27:09

Man, I feel I feel so bad for my European friends.

1:27:13

Like, man, it's weird how bad it goes there.

1:27:17

Like, it makes Canada look like fucking like Disneyland of freedom events.

1:27:22

BTC Hell, the first ever large scale Bitcoin conference in Nordics, Helsinki.

1:27:30

BTC Hell, interesting name for a conference.

1:27:35

With an E for Helsinki, but it doesn't it doesn't pronounce right.

1:27:39

This is this is where they're going to hash out all the consensus mechanisms,

1:27:43

BTC Hell. That's right.

1:27:46

A list of reads, ossification by Jameson Lobb, quantum computing between hope

1:27:50

and hype by Scott Arson, Erson.

1:27:57

You can do it, Enrique, you can do it.

1:28:00

One more try, one more try. Erson, Erson.

1:28:03

Oh, there we go.

1:28:07

Analyzing Bitcoin consensus risks in protocol upgrades by Redfin, Steve Lee and

1:28:13

Lee Alden. Why I'm betting big on Nostra by Hive Mind Ventures.

1:28:19

The case against Edits by PHF, that's a good one.

1:28:23

Digital Gold, evaluating strategic Bitcoin reserve for the United States by

1:28:28

Bitcoin Policy Institute. That's what I'm talking about.

1:28:31

There you go. I don't want countries to have Bitcoin.

1:28:35

Like, I don't want governments to have anything. I don't want other countries to have Bitcoin, I don't want my country to have

1:28:40

Bitcoin. Well, there is that. Yeah, that is one way of looking at it, for sure.

1:28:44

Hey, guys, did we miss anything?

1:28:47

Anything you guys come to mind?

1:28:50

I think we covered a lot today, very, very efficiently.

1:28:54

A lot. I believe this is the longest list that has ever been, pushing the limits of

1:28:58

GitHub Gists, I believe. Dude, no, we had lists that were almost three hours long.

1:29:03

The lists are short right now. They get, let's see, they get, Johnny's talking here, they get longer, much

1:29:10

longer, see? Yeah, it's just that Justin, Justin is, it's not used to hard work now for a

1:29:16

while. So, like, you know, it's OK.

1:29:19

Now that, now that he's got a lot more free time, he's going to, he's going

1:29:21

to be on the show more often. He can read his resume at the beginning of the show.

1:29:26

I'm a co-founder of the show, I believe.

1:29:28

That's right. You were, you were. That's at the beginning of my resume.

1:29:32

Yeah. MVK had his tail between his legs at the beginning.

1:29:35

He was just so frightened by the microphone.

1:29:37

So we needed to, you know, to bring in some courageous alpha males like me and

1:29:41

Odell to just help him, help him get going at the beginning.

1:29:45

Wow. Justin and Odell are the alpha males here.

1:29:48

Like, we're really a bottom show. Oh, guys, listen, thank you so much for coming on and being helpful here with

1:29:59

all this commits and all this updates.

1:30:02

Justin, any final thoughts? Yeah, I mean, see you next time.

1:30:07

Yeah, I enjoy your, your cretin binge.

1:30:11

Yeah. Future Paul, any final thoughts?

1:30:14

Bullish on the great script restoration.

1:30:17

Let's do it. Awesome, guys. Thank you, buddies.

1:30:23

Thanks for listening. For more resources, check the show notes.

1:30:26

We put a lot of effort into them. And remember, we don't have a crystal ball.

1:30:31

So let us know about your project. Visit Bitcoin.Review to find out how to get in touch.

Rate

Join Podchaser to...

  • Rate podcasts and episodes
  • Follow podcasts and creators
  • Create podcast and episode lists
  • & much more

Episode Tags

Do you host or manage this podcast?
Claim and edit this page to your liking.
,

Unlock more with Podchaser Pro

  • Audience Insights
  • Contact Information
  • Demographics
  • Charts
  • Sponsor History
  • and More!
Pro Features