Bitcoin.Review Podcast with NVK & Guests

Bitcoin.Review

A review of Bitcoin Software updates and related topics with NVK and guests. read less
TechnologyTechnology
ScienceScience
Start Here
BR087 - ColliderScript, BTCPay Server, OpenSecret, Matrix, Lottie player JS Attack, the Bullish Case for Vaults, LN Payment Censorship , EmailBTC, secp256k1-node vulnerability + MORE ft. Justin & Paul
13-11-2024
BR087 - ColliderScript, BTCPay Server, OpenSecret, Matrix, Lottie player JS Attack, the Bullish Case for Vaults, LN Payment Censorship , EmailBTC, secp256k1-node vulnerability + MORE ft. Justin & Paul
I'm joined by guests Justin Moon & Future Paul & to go through the list.Quote of the Day 00:00:48 Nobody knows anythingHousekeeping 00:06:00 New COLDCARD TutorialsMajor/Urgent Vulnerability Disclosures 00:06:26 Vulnerability in secp256k1-node affecting ECDH 00:08:01 Stalling peers cause disclosure of hindered block propagationBitcoin • Software Releases & Project Updates 00:08:40 Bitcoin Core 00:09:11 Electrs 00:10:22 BTC Pay Server 00:11:57 libsecp256k1 00:14:18 Bitcoin Keeper 00:14:56 Liana 00:17:30 Bitcoin Safe 00:20:08 RoboSats 00:21:10 Bitkey Firmware 00:21:20 Raspiblitz  00:21:37 ESP-Miner 00:22:14 BoltzExchange• Project Spotlight 00:22:21 Frost 00:23:12 ColliderScript 00:27:44 GreatRSI 00:28:16 Boltzmann TS monorepo 00:28:55 PlebDevs 00:29:51 SatSale 00:31:58 EmailBTCVulnerability Disclosures 00:33:21 Lottie player JS hacked, affecting Primal and 1inch 00:38:38 Hackers abuse emergency data requests 00:41:15 Tor relays targeted in spoofing attack 00:41:22 Synology devices exposed to zero-click flaw 00:42:03 North Korean hackers BlueNoroff target crypto firms with new macOS malware 00:44:45 Five dollar wrench attacksPrivacy & Other Related Bitcoin Projects • Software Releases & Project Updates 00:52:50 Reticulum MeshChat 00:53:14 MatrixLightning & L2(+) • Project Spotlight 00:54:52 Podcaster Boost Dashboard 00:55:06 zPay.live 00:55:14 BullishNuts 00:55:19 Athenut 00:55:33 TinyPine• Software Releases & Project Updates 00:55:41 Fedimint 00:56:34 Zeus 00:58:19 Alby Go  00:58:28 Ride-The-Lightning 00:58:37 CLBOSS 00:58:40 Nutshell 00:59:00 Geyser 00:59:24 Clams RemoteNostr • Project spotlight 00:59:36 SnapNostr 00:59:42 OpenLibrarian 00:59:49 Jumble 00:59:54 Honeypot 1:00:00 Mutestr 1:00:08 Nostr Gadgets 1:00:16 Mostro ToolsBoosts 1:08:57 Shoutout to top boosters @Ape Mithrandir, @btconboard, @VonPhoto & @AVERAGE_GARYTech tip of the day 1:10:45 LocalSend 1:10:54 Protect iPhones from downgrade attacks by disabling 2G in Lockdown modeNews & Noteworthy • Lightning + L2+ 1:12:38 Ndolo and Tschorsch publish Payment Censorship in Lightning Network 1:14:01 Blockstream opens its newest research center in Lugano 1:14:05 CasaOS integrates Alby Hub• Business & Finance 1:14:46 Block refocuses on bitcoin mining equipment and Bitkey 1:15:49 Fold App introduces insured deposits 1:16:33 Strike introduces Bitcoin auto-withdrawals  1:18:52 Ten31 launches Bitcoin Alpha 1:19:13 CleanSpark finalized its acquisition of GRIID Infrastructure• Nostr 1:19:25 Nos.social is now live in Australia and New Zealand• Funding 1:19:32 OpenSats announces its Eighth Wave of Nostr Grants• Mining 1:20:23 MMS and Metzler partner on Bitcoin mining for grid stability• Privacy 1:20:38 Tommy Robinson sentenced to 18 months for not unlocking phone for police 1:20:47 Ex-TD Bank employee indicted for sharing customer data on Telegram 1:21:02 Kenya to require phone IMEI declaration from 2025 1:21:09 Apple adds "inactivity timer" feature in iOS 18.1 • Protocol 1:22:16 Ren Crypto Fish, Steve Lee, and Lyn Alden publish Analyzing Bitcoin Consensus: Risks in Protocol Upgrades 1:25:30 BIP85 updated to final status, now widely deployed 1:25:47 LDK #3207 adds invoice requests to async payments• Government & Political 1:26:05 US DOJ charges AurumXchange operator with laundering Silk Road fund 1:26:12 Roman Sterlingov sentenced to 12.5 years for money laundering 1:26:34 Argentina's central bank hosts a live Bitcoin mining art exhibit 1:26:50 BIS exits cross-border payments platform Project mBridge 1:26:56 EU and ECB debate digital euro control, raising sovereignty concerns• Events 1:27:22 Btc Hel: The first ever large scale bitcoin conference in the Nordics.• Reads 1:27:46 Top recently published readsLinks & Contacts:Website: https://bitcoin.review/ Substack: https://substack.bitcoin.review/ Twitter: https://twitter.com/bitcoinreviewhq NVK Twitter: https://twitter.com/nvk Telegram: https://t.me/BitcoinReviewPod Email: producer@coinkite.com Nostr & LN:⚡nvk@nvk.org (not an email!) Full show notes: https://bitcoin.review/podcast/episode-87

Episodes

BR087 - ColliderScript, BTCPay Server, OpenSecret, Matrix, Lottie player JS Attack, the Bullish Case for Vaults, LN Payment Censorship , EmailBTC, secp256k1-node vulnerability + MORE ft. Justin & Paul
13-11-2024
BR087 - ColliderScript, BTCPay Server, OpenSecret, Matrix, Lottie player JS Attack, the Bullish Case for Vaults, LN Payment Censorship , EmailBTC, secp256k1-node vulnerability + MORE ft. Justin & Paul
I'm joined by guests Justin Moon & Future Paul & to go through the list.Quote of the Day 00:00:48 Nobody knows anythingHousekeeping 00:06:00 New COLDCARD TutorialsMajor/Urgent Vulnerability Disclosures 00:06:26 Vulnerability in secp256k1-node affecting ECDH 00:08:01 Stalling peers cause disclosure of hindered block propagationBitcoin • Software Releases & Project Updates 00:08:40 Bitcoin Core 00:09:11 Electrs 00:10:22 BTC Pay Server 00:11:57 libsecp256k1 00:14:18 Bitcoin Keeper 00:14:56 Liana 00:17:30 Bitcoin Safe 00:20:08 RoboSats 00:21:10 Bitkey Firmware 00:21:20 Raspiblitz  00:21:37 ESP-Miner 00:22:14 BoltzExchange• Project Spotlight 00:22:21 Frost 00:23:12 ColliderScript 00:27:44 GreatRSI 00:28:16 Boltzmann TS monorepo 00:28:55 PlebDevs 00:29:51 SatSale 00:31:58 EmailBTCVulnerability Disclosures 00:33:21 Lottie player JS hacked, affecting Primal and 1inch 00:38:38 Hackers abuse emergency data requests 00:41:15 Tor relays targeted in spoofing attack 00:41:22 Synology devices exposed to zero-click flaw 00:42:03 North Korean hackers BlueNoroff target crypto firms with new macOS malware 00:44:45 Five dollar wrench attacksPrivacy & Other Related Bitcoin Projects • Software Releases & Project Updates 00:52:50 Reticulum MeshChat 00:53:14 MatrixLightning & L2(+) • Project Spotlight 00:54:52 Podcaster Boost Dashboard 00:55:06 zPay.live 00:55:14 BullishNuts 00:55:19 Athenut 00:55:33 TinyPine• Software Releases & Project Updates 00:55:41 Fedimint 00:56:34 Zeus 00:58:19 Alby Go  00:58:28 Ride-The-Lightning 00:58:37 CLBOSS 00:58:40 Nutshell 00:59:00 Geyser 00:59:24 Clams RemoteNostr • Project spotlight 00:59:36 SnapNostr 00:59:42 OpenLibrarian 00:59:49 Jumble 00:59:54 Honeypot 1:00:00 Mutestr 1:00:08 Nostr Gadgets 1:00:16 Mostro ToolsBoosts 1:08:57 Shoutout to top boosters @Ape Mithrandir, @btconboard, @VonPhoto & @AVERAGE_GARYTech tip of the day 1:10:45 LocalSend 1:10:54 Protect iPhones from downgrade attacks by disabling 2G in Lockdown modeNews & Noteworthy • Lightning + L2+ 1:12:38 Ndolo and Tschorsch publish Payment Censorship in Lightning Network 1:14:01 Blockstream opens its newest research center in Lugano 1:14:05 CasaOS integrates Alby Hub• Business & Finance 1:14:46 Block refocuses on bitcoin mining equipment and Bitkey 1:15:49 Fold App introduces insured deposits 1:16:33 Strike introduces Bitcoin auto-withdrawals  1:18:52 Ten31 launches Bitcoin Alpha 1:19:13 CleanSpark finalized its acquisition of GRIID Infrastructure• Nostr 1:19:25 Nos.social is now live in Australia and New Zealand• Funding 1:19:32 OpenSats announces its Eighth Wave of Nostr Grants• Mining 1:20:23 MMS and Metzler partner on Bitcoin mining for grid stability• Privacy 1:20:38 Tommy Robinson sentenced to 18 months for not unlocking phone for police 1:20:47 Ex-TD Bank employee indicted for sharing customer data on Telegram 1:21:02 Kenya to require phone IMEI declaration from 2025 1:21:09 Apple adds "inactivity timer" feature in iOS 18.1 • Protocol 1:22:16 Ren Crypto Fish, Steve Lee, and Lyn Alden publish Analyzing Bitcoin Consensus: Risks in Protocol Upgrades 1:25:30 BIP85 updated to final status, now widely deployed 1:25:47 LDK #3207 adds invoice requests to async payments• Government & Political 1:26:05 US DOJ charges AurumXchange operator with laundering Silk Road fund 1:26:12 Roman Sterlingov sentenced to 12.5 years for money laundering 1:26:34 Argentina's central bank hosts a live Bitcoin mining art exhibit 1:26:50 BIS exits cross-border payments platform Project mBridge 1:26:56 EU and ECB debate digital euro control, raising sovereignty concerns• Events 1:27:22 Btc Hel: The first ever large scale bitcoin conference in the Nordics.• Reads 1:27:46 Top recently published readsLinks & Contacts:Website: https://bitcoin.review/ Substack: https://substack.bitcoin.review/ Twitter: https://twitter.com/bitcoinreviewhq NVK Twitter: https://twitter.com/nvk Telegram: https://t.me/BitcoinReviewPod Email: producer@coinkite.com Nostr & LN:⚡nvk@nvk.org (not an email!) Full show notes: https://bitcoin.review/podcast/episode-87
BR086 - Electrum, Wasabi, Bitkey, Bitcoin Safe, Spark, Bitcoin Keeper, OP_CAT Privacy, FROST X nostr, btcd FindAndDelete bug + MORE ft. Rijndael & Ben
31-10-2024
BR086 - Electrum, Wasabi, Bitkey, Bitcoin Safe, Spark, Bitcoin Keeper, OP_CAT Privacy, FROST X nostr, btcd FindAndDelete bug + MORE ft. Rijndael & Ben
I'm joined by guests Rijndael & Ben Carman to go through the list.I'm joined by guests Rijndael & Ben Carman to go through the list.Housekeeping 00:00:51 Nostr Rising 00:01:36 New COLDCARD Tutorials 00:01:40 Coinkite is opening an office in LATAM 00:01:50 Bitcoin per Share 00:01:54 Grumpy Surfer SATSCARDMajor/Urgent Vulnerability Disclosures 00:02:08 Disclosure of CVE-2024-38365 00:05:32 Disclosure of CVE-2024-35202 00:06:54 Krux BIP85 password generationx 00:07:32 Coracle unintentionally sending user session dataBitcoin • Software Releases & Project Updates 00:11:00 Electrum 00:14:31 Nunchuk Android 00:14:46 Bitcoin Keeper 00:16:49 Bisq2 00:16:58 Wasabi Wallet 00:22:32 Fully Noded 00:22:59 Krux-installer 00:23:14 BoltzExchange Client 00:23:31 Utreexo  00:23:42 Bitcoin Safe 00:27:06 Joinstr App 00:27:13 Bitkey App 00:28:30 Bitcoin Jungle Mobile 00:29:26 DATUM Gateway 00:30:28 ESP-Miner 00:30:42 Braiins Toolbox 00:30:46 Blockstream Green iOS 00:31:07 Defibi App 00:31:45 Nirvati 00:32:08 BTCmap-android 00:32:18 Kyoto• Project Spotlight 00:33:17 2140.dev 00:34:24 Localhost Research 00:34:49 Rewind Bitcoin 00:35:30 bitcoinutils.dev 00:35:46 Standalone Bitcoin Consensus Engine 00:35:54 Fabric 00:36:06 l402_middleware 00:36:19 NodeWatch 00:36:32 Bitcoind Quick 00:36:44 Chorly 00:36:53 Satoffee 00:37:00 Koinvote 00:37:14 Bitcoin Prediction Market 00:37:24 LiquiSabi 00:37:34 Coin DemoVulnerability Disclosures 00:37:42 GoldenJackal specialized toolsets for targeting air-gapped systems 00:38:03 Radiant Capital hack 00:38:25 Locate X 00:38:38 Qualcomm zero-day vulnerability 00:39:03 Research discovers flaws in five end-to-end encrypted cloud services 00:39:20 Security analysis reveals weaknesses in WeChat 00:39:34 Imprompter 00:39:46 Tails 00:39:56 Critical "use-after-free" vulnerability (CVE-2024-9680)Privacy & Other Related Bitcoin Projects • Software Releases & Project Updates 00:40:38 SimpleX  00:40:41 SideBand 00:40:48 Reticulum MeshChat 00:40:52 Tor Browser• Project Spotlight 00:40:56 Pubky CoreLightning & L2(+) • Project Spotlight 00:42:00 Simplicity & Simfony by Blockstream 00:42:09 Spark 00:44:39 Blockbuster• Software Releases & Project Updates 00:44:45 Core Lightning 00:44:54 LDK Node 00:44:58 Phoenix 00:45:01 Zeus 00:45:06 Breez SDK Core  00:45:12 Alby 00:45:15 CashuMe 00:46:11 Microbolt 00:46:18 Geyser 00:47:08 LN Markets 00:47:14 Zaprite introduces SandboxNostr • Project spotlight 00:47:20 Pokey 00:47:25 White Noise live demo 00:47:41 Nostrastic 00:49:14 AlgoRelay 00:49:22 ppe-relay 00:49:27 Search Relay 00:49:31 Flotilla 00:51:40 nosweet.net 00:51:54 Docstr 00:52:13 Translator 00:52:18 rx-nostrBoosts 00:52:39 Shoutout to top boosters @Ape Mithrandir, @tdub, @btconboard, @AVERAGE_GARY, @VonPhoto & @BrightSatsTech tip of the day 00:54:16 DeArrow 00:54:26 EarthoNews & Noteworthy • Business & Finance 00:58:48 River now offers 3.8% interest• Art 00:59:46 Bitcoin illustrator NoGood releases The art of NoGood• Funding 00:59:58 Research firm 1a1z releases on how Bitcoin Core development is funded 1:00:06 OpenSats announcements 1:00:13 Spiral announces grant renewals• Privacy 1:00:51 SimpleX publishes Wired's Attack on Privacy• Protocol 1:01:09 Libsecp256k1 adds musigLinks & Contacts:Website: https://bitcoin.review/Substack: https://substack.bitcoin.review/Twitter: https://twitter.com/bitcoinreviewhqNVK Twitter: https://twitter.com/nvkTelegram: https://t.me/BitcoinReviewPodEmail: producer@coinkite.comNostr & LN:⚡nvk@nvk.org (not an email!)Full show notes: https://bitcoin.review/podcast/episode-86
BR085: Nostr Rising 08 - Nostr Funding ft. Lyn Alden, Max & Odell
30-10-2024
BR085: Nostr Rising 08 - Nostr Funding ft. Lyn Alden, Max & Odell
I'm joined by guests Lyn Alden, Max & Odell to discuss nostr funding.Chapters- (00:00:00) Introduction to Nostr funding concepts- (00:01:04) Importance of decentralized funding in tech- (00:02:07) Discussion on Nostr’s scalability and funding potential- (00:06:17) Analysis of community-driven funding models- (00:12:01) Benefits of open-source funding approaches- (00:18:02) Comparison of Nostr's funding capabilities with traditional platforms- (00:19:00) Potential challenges for funding in decentralized systems- (00:28:32) Exploration of funding solutions using Bitcoin- (00:33:17) Incentives for developers in the Nostr ecosystem- (00:41:34) Role of privacy in funding models- (00:46:22) Future of funding mechanisms in Nostr- (00:49:01) Community engagement and its impact on funding success- (00:53:33) Scalability of Nostr vs. traditional funding platforms- (00:54:14) Announcement of a bounty related to Nostr funding- (00:54:26) Optimism about the future of funding in the Nostr communityLinks & Contacts:⁠⁠⁠⁠Website⁠⁠⁠⁠: https://bitcoin.review/Podcast⁠⁠⁠⁠Substack⁠⁠⁠⁠: https://substack.bitcoin.review/⁠⁠⁠⁠Twitter⁠⁠⁠⁠: https://twitter.com/bitcoinreviewhq⁠⁠⁠⁠NVK Twitter⁠⁠⁠⁠: https://twitter.com/nvk⁠⁠⁠⁠Telegram⁠⁠⁠⁠: https://t.me/BitcoinReviewPod⁠⁠⁠⁠Email⁠⁠⁠⁠: producer@coinkite.comNostr & LN:⚡nvk@nvk.org (not an email!)Full show notes: https://bitcoin.review/podcast/episode-85
BR084: Nostr Rising 07 - Long Form Content ft. DK & Miljan
28-10-2024
BR084: Nostr Rising 07 - Long Form Content ft. DK & Miljan
I'm joined by guests DK & Miljan to discuss long form content.Chapters:- (00:00:00) Introduction to long form content on Nostr- (00:03:15) Challenges of content distribution on Nostr- (00:06:42) Nostr as a decentralized platform for creators- (00:11:20) The role of relays in content storage and competition- (00:15:47) Building user-centric tools for long-form content- (00:19:33) Balancing short-form and long-form content on Nostr- (00:22:58) Algorithmic feeds and user-controlled algorithms- (00:28:40) Primal's focus on algorithm marketplace development- (00:34:15) Human-curated algorithms and user-selected feeds- (00:39:48) Ethical advertising and user choice in ads- (00:43:22) Importance of competition in relays, clients, and algorithms- (00:46:58) Creating customizable algorithms for users- (00:48:09) Potential for ethical, non-intrusive advertising- (00:50:26) Nostr as a global town square for nuanced discourse- (00:51:34) Learning from torrents: the importance of better UX- (00:52:24) Closing thoughts on Nostr’s future and appeal to creatorsLinks & Contacts:⁠⁠⁠⁠Website⁠⁠⁠⁠: https://bitcoin.review/Podcast⁠⁠⁠⁠Substack⁠⁠⁠⁠: https://substack.bitcoin.review/⁠⁠⁠⁠Twitter⁠⁠⁠⁠: https://twitter.com/bitcoinreviewhq⁠⁠⁠⁠NVK Twitter⁠⁠⁠⁠: https://twitter.com/nvk⁠⁠⁠⁠Telegram⁠⁠⁠⁠: https://t.me/BitcoinReviewPod⁠⁠⁠⁠Email⁠⁠⁠⁠: producer@coinkite.comNostr & LN:⚡nvk@nvk.org (not an email!)Full show notes: https://bitcoin.review/podcast/episode-84
BR083: Nostr Rising 06 - Zap the Planet and Nostr Money ft. Calle, Pablo & Miljan
25-10-2024
BR083: Nostr Rising 06 - Zap the Planet and Nostr Money ft. Calle, Pablo & Miljan
I'm joined by guests Calle, Pablo & Miljan to discuss zaps and nostr money.Chapters- (00:00:00) Introduction- (00:05:12) Building a permissionless public square on Nostr- (00:12:25) Challenges in decentralized social media and privacy- (00:18:43) Cashu protocol integration with Nostr- (00:22:50) Role of ecash in relays and wallets- (00:28:16) Nostr as an open social graph for applications- (00:31:42) Innovation in digital payments and Zaps on Nostr- (00:35:14) Open-source culture and project monetization- (00:39:23) Bitcoin integration in social media platforms- (00:42:38) Scaling challenges and user adoption- (00:47:06) Nostr's impact on new market designs- (00:48:25) Future of Zaps in expanding Bitcoin user base- (00:49:24) Social feedback and micro-transactions- (00:50:20) Infinite innovation potential with Nostr and Zaps- (00:51:57) Nostr’s role in enhancing app social features- (00:54:29) Regulatory challenges and JavaScript as a platform- (00:55:12) Closing thoughtsLinks & Contacts:⁠⁠⁠⁠Website⁠⁠⁠⁠: https://bitcoin.review/Podcast⁠⁠⁠⁠Substack⁠⁠⁠⁠: https://substack.bitcoin.review/⁠⁠⁠⁠Twitter⁠⁠⁠⁠: https://twitter.com/bitcoinreviewhq⁠⁠⁠⁠NVK Twitter⁠⁠⁠⁠: https://twitter.com/nvk⁠⁠⁠⁠Telegram⁠⁠⁠⁠: https://t.me/BitcoinReviewPod⁠⁠⁠⁠Email⁠⁠⁠⁠: producer@coinkite.comNostr & LN:⚡nvk@nvk.org (not an email!)Full show notes: https://bitcoin.review/podcast/episode-83
BR082: Nostr Rising 05 - Podcasting 2.0 ft. Kieran, Odell, Hodlbod & Oscar Merry
23-10-2024
BR082: Nostr Rising 05 - Podcasting 2.0 ft. Kieran, Odell, Hodlbod & Oscar Merry
I'm joined by guests Kieran, Odell, Hodlbod & Oscar Merry to discuss podcasting 2.0.Chapters- (00:00:00) – Introduction and overview of the discussion on Nostr and podcasting.- (00:01:10) – Importance of Nostr in decentralization and censorship resistance.- (00:10:30) – Integrating Bitcoin and Lightning Payments with Nostr.- (00:19:12) – Value-for-value model and podcast monetization using Nostr.- (00:26:50) – Challenges of onboarding new users and improving user experience on Nostr.- (00:35:15) – The future of podcasting with Nostr and potential for listener engagement.- (00:41:20) – The potential for creating decentralized, censorship-resistant content.- (00:48:30) – Vision for integrating games with Nostr and Lightning Payments.- (00:59:18) – Opportunities in gaming and Nostr’s role in gaming's future.- (01:00:19) – The importance of owning your social graph on Nostr.- (01:01:10) – Discussing podcasting analytics and user platforms.- (01:02:27) – The need for more apps and users in the Nostr ecosystem.- (01:03:25) – Audience breakdown by platform, including Spotify, Fountain, and Overcast.- (01:04:06) – Issues with Spotify’s closed analytics and data control.- (01:05:17) – Simplifying Nostr onboarding and improving the user experience.- (01:06:41) – Challenges of niche adoption and the importance of positive feedback loops.- (01:07:42) – Nostr’s future growth driven by censorship on other platforms.- (01:08:09) – Optimism for Nostr’s long-term success despite short-term challenges.Links & Contacts:⁠⁠⁠⁠Website⁠⁠⁠⁠: https://bitcoin.review/Podcast⁠⁠⁠⁠Substack⁠⁠⁠⁠: https://substack.bitcoin.review/⁠⁠⁠⁠Twitter⁠⁠⁠⁠: https://twitter.com/bitcoinreviewhq⁠⁠⁠⁠NVK Twitter⁠⁠⁠⁠: https://twitter.com/nvk⁠⁠⁠⁠Telegram⁠⁠⁠⁠: https://t.me/BitcoinReviewPod⁠⁠⁠⁠Email⁠⁠⁠⁠: producer@coinkite.comNostr & LN:⚡nvk@nvk.org (not an email!)Full show notes: https://bitcoin.review/podcast/episode-82
BR081: Nostr Rising 04 - DMs and Groupchats ft. Fiatjaf, Hodlbod & Jeff G
21-10-2024
BR081: Nostr Rising 04 - DMs and Groupchats ft. Fiatjaf, Hodlbod & Jeff G
I'm joined by guests Fiatjaf, Hodlbod & Jeff G to discuss DMs and groupchats.Chapters(00:00) - Introduction to the discussion(02:32) - Overview of MLS Messaging Layer Security and its role in group chats.(10:03) - Addressing spam and impersonation in group communications.(14:16) - Managing group keys and group membership.(21:10) - Security concerns and potential vulnerabilities.(26:58) - Relays and group management.(30:50) - Importance of secure client implementations.(35:25) - Handling bad actors in group chats.(43:15) - Integration of payments in group chat dynamics pay-to-post model.(50:25) - Exploring broadcast model for private groups.(55:16) - Proof of concept for a secure group chat client.(59:27) - Conclusion and final thoughtsLinks & Contacts:⁠⁠⁠⁠Website⁠⁠⁠⁠: https://bitcoin.review/Podcast⁠⁠⁠⁠Substack⁠⁠⁠⁠: https://substack.bitcoin.review/⁠⁠⁠⁠Twitter⁠⁠⁠⁠: https://twitter.com/bitcoinreviewhq⁠⁠⁠⁠NVK Twitter⁠⁠⁠⁠: https://twitter.com/nvk⁠⁠⁠⁠Telegram⁠⁠⁠⁠: https://t.me/BitcoinReviewPod⁠⁠⁠⁠Email⁠⁠⁠⁠: producer@coinkite.comNostr & LN:⚡nvk@nvk.org (not an email!)Full show notes: https://bitcoin.review/podcast/episode-81/
BR080: Nostr Rising 03 - Relays & Scaling ft. Fiatjaf, Mike Dilger & Pablo
18-10-2024
BR080: Nostr Rising 03 - Relays & Scaling ft. Fiatjaf, Mike Dilger & Pablo
I'm joined by guests Fiatjaf, Mike Dilger & Pablo to discuss relays and scaling nostr.Chapters(00:00) – Introduction to Nostr protocol and event signing(02:15) – Relay management and costs in Nostr ecosystem(05:30) – Scaling concerns and misconceptions about relay overload(09:11) – Importance of public key identity management(12:18) – Challenges in moderation and decentralized governance(15:40) – Defining the roles of clients and relays(20:19) – Lightning integration for payments in Nostr(25:00) – Need for better developer tools for relay management(29:45) – Cross-platform interoperability between Nostr and Mastodon(35:20) – Censorship on Mastodon and the Fediverse(40:05) – Scalability and reliability improvements during user influxes(44:10) – The idea of creating more experimental and niche relays(47:25) – Vision for integrating specialized relay functionality into clients(49:31) – Concept of Yahoo Pipes for Nostr relays data aggregation tools(50:09) – DVMs and the evolution of decentralized systems(51:00) – Closing remarksLinks & Contacts:⁠⁠⁠⁠Website⁠⁠⁠⁠: https://bitcoin.review/Podcast⁠⁠⁠⁠Substack⁠⁠⁠⁠: https://substack.bitcoin.review/⁠⁠⁠⁠Twitter⁠⁠⁠⁠: https://twitter.com/bitcoinreviewhq⁠⁠⁠⁠NVK Twitter⁠⁠⁠⁠: https://twitter.com/nvk⁠⁠⁠⁠Telegram⁠⁠⁠⁠: https://t.me/BitcoinReviewPod⁠⁠⁠⁠Email⁠⁠⁠⁠: producer@coinkite.comNostr & LN:⚡nvk@nvk.org (not an email!)Full show notes: https://bitcoin.review/podcast/episode-80/
BR079: Nostr Rising 02 - Communities ft. Rabble, Alex Gleason, Hodlbod & Pablo
16-10-2024
BR079: Nostr Rising 02 - Communities ft. Rabble, Alex Gleason, Hodlbod & Pablo
I'm joined by guests Rabble, Hodlbod, Alex Gleason & Pablo to discuss nostr communities.Discussion Topics- 00:00:00 – Introduction to Nostr and its evolving landscape- 00:01:35 – Comparison between TCP/IP and Nostr as flexible protocols- 00:05:45 – Nostr’s decentralized development and innovation without permission- 00:12:20 – User experience challenges in decentralized systems- 00:18:10 – Importance of experimentation and building tools for Nostr- 00:21:55 – Differences between digital and physical communities- 00:25:10 – Discussion on the long tail of communities in Nostr- 00:29:00 – How Nostr helps niche groups and the growth of communities- 00:32:50 – Balancing decentralization and user experience- 00:38:10 – Ham radio community’s adoption of Nostr- 00:42:55 – Importance of building discoverable and easy-to-join communities- 00:47:30 – Nostr as an open, super-app platform similar to early Facebook- 00:52:00 – Final thoughts on Nostr’s role in fostering decentralized communities- 00:57:55 – Nostr’s network effect and social graph integration- 01:00:04 – Future potential and excitement about Nostr communities expanding- 01:01:28 – Nostr’s organic growth and fostering more community engagement- 01:02:07 – Closing remarks and thanks to the guestsLinks & Contacts:⁠⁠⁠⁠Website⁠⁠⁠⁠: https://bitcoin.review/Podcast⁠⁠⁠⁠Substack⁠⁠⁠⁠: https://substack.bitcoin.review/⁠⁠⁠⁠Twitter⁠⁠⁠⁠: https://twitter.com/bitcoinreviewhq⁠⁠⁠⁠NVK Twitter⁠⁠⁠⁠: https://twitter.com/nvk⁠⁠⁠⁠Telegram⁠⁠⁠⁠: https://t.me/BitcoinReviewPod⁠⁠⁠⁠Email⁠⁠⁠⁠: producer@coinkite.comNostr & LN:⚡nvk@nvk.org (not an email!)Full show notes: https://bitcoin.review/podcast/episode-79/
BR078: Nostr Rising 01 - Permissionless Algos ft. JB55, Hodlbod & Miljan
14-10-2024
BR078: Nostr Rising 01 - Permissionless Algos ft. JB55, Hodlbod & Miljan
I'm joined by guests JB55, Hodlbod & Miljan to discuss Permissionless Algos in the first episode of Nostr Rising.Discussion topics- 00:00:00 – Introduction to decentralized algorithms and Nostr's open network- 00:01:01 – Users’ control over algorithms and content feeds- 00:03:01 – Challenges of building permissionless systems without tracking users- 00:05:01 – Feed marketplace concept and its impact on content discovery- 00:08:01 – Importance of user feedback in developing decentralized platforms- 00:12:01 – AI agents and bots assisting with content curation- 00:15:01 – The value of human-created content versus bot-generated content- 00:17:31 – AI's role in building decentralized apps on Nostr- 00:20:01 – Future of algorithms and personalized content on decentralized networks- 00:24:01 – Curation and community-driven feeds as an alternative to centralized platforms- 00:28:01 – Nostr’s potential to disrupt big tech and centralized institutions- 00:30:01 – Open network and emergent properties of user-driven content- 00:33:01 – Role of lists and curated social clusters in enhancing user experience- 00:36:01 – Encouragement for users and developers to participate in Nostr- 00:40:01 – Final thoughts: the power of decentralized networks and AI collaboration- 00:42:31 – Closing remarks and a call to action for Nostr’s growth and adoptionLinks & Contacts:⁠⁠⁠⁠Website⁠⁠⁠⁠: https://bitcoin.review/Podcast⁠⁠⁠⁠Substack⁠⁠⁠⁠: https://substack.bitcoin.review/⁠⁠⁠⁠Twitter⁠⁠⁠⁠: https://twitter.com/bitcoinreviewhq⁠⁠⁠⁠NVK Twitter⁠⁠⁠⁠: https://twitter.com/nvk⁠⁠⁠⁠Telegram⁠⁠⁠⁠: https://t.me/BitcoinReviewPod⁠⁠⁠⁠Email⁠⁠⁠⁠: producer@coinkite.comNostr & LN:⚡nvk@nvk.org (not an email!)Full show notes: https://bitcoin.review/podcast/episode-78/
BR077 - BIP85 Drama, Bitcoin Core, secp256k1, DATUM, Jam, Krux, Twelve Cash, NomadNet, Salt Typhoon Hack + MORE ft. Rob & Paul
10-10-2024
BR077 - BIP85 Drama, Bitcoin Core, secp256k1, DATUM, Jam, Krux, Twelve Cash, NomadNet, Salt Typhoon Hack + MORE ft. Rob & Paul
I'm joined by guests Rob Hamilton & Future Paul to go through the list.Housekeeping 00:00:59 Nostr Rising dropping soon! 00:02:32 COLDCARD Tutorials 00:02:35 European Coldcard reseller ColdhodlMajor/Urgent Vulnerability Disclosures 00:02:50 BIP85 Drama 00:13:35 Delving Bitcoin 00:14:46 Bitcoin CoreBitcoin • Software Releases & Project Updates 00:19:57 Bitcoin Core 00:24:03 secp256k1 00:33:04 BDK 00:34:23 Electrs 00:35:53 Nunchuk 00:36:26 Mempool 00:36:42 Blockstream Green 00:37:15 Krux 00:38:58 Coinbase 00:39:17 BoltzExchange 00:39:22 Jam 00:42:57 libwally core 00:43:02 Simple Bitcoin Wallet 00:43:13 Braiins Toolbox 00:43:20 LiveWallet  00:43:30 The RoboSats Federation• Project Spotlight 00:43:46 DATUM 00:47:31 BDK Swift Example Wallet 00:48:29 Decoding Bitcoin 00:48:42 Twelve Cash 00:51:29 Kyoto Bitcoin Light Client 00:51:48 Bitcoin script editor & visualizer 00:51:53 WeSatoshis 00:52:19 UtxoPocket 00:52:28 Simple ProofVulnerability Disclosures 00:52:43 Supply chain attack 00:53:29 Backdoored backdoors 00:56:37 Decade-old Linux vulnerability 00:58:14 Perfctl 00:59:05 Google raises privacy concerns 00:59:34 Americans' personal information leaked Privacy & Other Related Bitcoin Projects • Software Releases & Project Updates 1:00:19 SimpleX 1:00:48 Sideband 1:01:05 reticulum-meshchat 1:01:16 NomadNet• Project Spotlight 1:11:18 Privacy Index 1:11:25 DarkIRCLightning & L2(+) • Project Spotlight 1:11:46 Diamond Wallet 1:11:53 LNUnit 1:11:58 PLEBNET-Wiki 1:12:03 Matrix-Lightning-Tip-Bot 1:12:14 Predyx 1:12:18 Fedimint Web SDK 1:12:21 Fedimint Observer 1:12:23 NWC Tester• Software Releases & Project Updates 1:12:38 Ark 1:13:17 Lightning Terminal 1:13:33 LNDg 1:13:43 BTCPay 1:13:45 Shockwallet 1:13:51 minibits 1:13:55 clboss 1:14:01 LNMarket 1:14:12 Star9LabsNostr • Project spotlight 1:14:23 Khatru 1:14:29 Nostr Mixer Relay 1:14:36 Comet 1:14:44 Dart Nostr Development Kit 1:14:48 Nostr-fetch 1:14:49 ONOSENDAI 1:14:56 Nowser 1:15:03 Route96 1:15:06 Ghost relay 1:15:09 Grain 1:15:14 Chronicle 1:15:16 Notestack 1:16:14 Atomstr 1:16:24 Nostr Metadata Updater 1:16:28 Minestr 1:16:36 GM Relay 1:16:44 NostrSMSAudience Questions 1:19:25 - "Can you explain why the usage of libsecp256k is one of the most important choices in writing Bitcoin code, for this of us who are not cryptographers and do listen to the end? And answer in as non-engineery a way as possible?" -drianmalcolmBoosts 1:25:53 Shoutout to top boosters drianmalcolm, Ape Mithrandir, Chris, seedor_io, podconf, vake & btconboardTech tip of the day 1:31:21 ChangesetsNews & Noteworthy • Bitcoin 1:31:56 Bitkey partners with Robinhood• Tradfi 1:32:33 BlackRock• Security 1:34:44 NIST• Government & Political 1:35:08 Bank of Canada pauses plansReads 1:35:29Links & Contacts:⁠⁠⁠⁠Website⁠⁠⁠⁠: https://bitcoin.review/Podcast⁠⁠⁠⁠Substack⁠⁠⁠⁠: https://substack.bitcoin.review/⁠⁠⁠⁠Twitter⁠⁠⁠⁠: https://twitter.com/bitcoinreviewhq⁠⁠⁠⁠NVK Twitter⁠⁠⁠⁠: https://twitter.com/nvk⁠⁠⁠⁠Telegram⁠⁠⁠⁠: https://t.me/BitcoinReviewPod⁠⁠⁠⁠Email⁠⁠⁠⁠: producer@coinkite.comNostr & LN:⚡nvk@nvk.org (not an email!)Full show notes: https://bitcoin.review/podcast/episode-77
BR076 - Sparrow, AnchorWatch, Exploding Pagers, Bitcoin Core Spam Attack, Ark goes mainnet, NBitcoin Secp256k1 Vulnerability + MORE ft. Craig, Rob & Ben
25-09-2024
BR076 - Sparrow, AnchorWatch, Exploding Pagers, Bitcoin Core Spam Attack, Ark goes mainnet, NBitcoin Secp256k1 Vulnerability + MORE ft. Craig, Rob & Ben
I'm joined by guests Craig Raw, Rob Hamilton and Ben Carman to go through the list.Housekeeping 00:01:34 Big COLDCARD Q news 00:01:46 Understanding The COLDCARD Mk4 Security Model by Guy Swann 00:02:02 Coinkite Reseller Program 2024 updateMajor/Urgent Vulnerability Disclosures 00:02:26 Bitcoin Core Disclosure 00:04:15 NBitcoin library 00:06:55 Supply chain attackBitcoin • Software Releases & Project Updates 00:33:55 Bitcoin Core 00:34:14 Sparrow Wallet 00:42:55 BDK 00:43:11 HWI 00:43:22 Nunchuk Android 00:43:28 Liana 00:43:55 Keeper Desktop 00:44:11 RoboSats 00:44:19 Wasabi Wallet 00:51:53 SwissBitcoinPay 00:51:57 BoltzExchange client 00:52:02 Padawan Wallet 00:57:25 LiveWallet 00:57:33 BIP39-XOR 00:59:06 ESP-Miner• Project Spotlight 00:59:32 Mutation Core 00:59:45 Dana Wallet 00:59:52 BitVore 1:00:13 SwapMarket 1:00:20 NOIST 1:09:14 Shielded CSV 1:09:46 Vinteum introduces Bitcoin Dev Launchpad 1:09:57 The Bitcoiner's Intro to Rust 1:13:23 Silent Payment Faucet 1:13:29 Ashigaru 1:14:42 Bitcoin Scoresby 1:14:50 BConfVulnerability Disclosures 1:15:14 PIXHELL Attack 1:15:49 Marko Polo 1:16:42 Five dollar wrench attack 1:16:56 Social engineering attack 1:18:28 German law enforcement agencies 1:19:13 The Tor project addresses concerns over a law enforcement attack 1:19:21 Supply chain attackPrivacy & Other Related Bitcoin Projects • Software Releases & Project Updates 1:20:37 SimpleX 1:20:40 Tails 1:20:44 SideBand 1:21:59 reticulum-meshchat 1:22:01 NomadNet• Project Spotlight 1:22:07 rPGP 1:22:13 Discord introduces the DAVE protocolLightning & L2(+) • Project Spotlight 1:22:22 Brick wallet 1:22:27 lnrecc• Software Releases & Project Updates 1:24:53 Phoenix Wallet 1:25:02 LNbits 1:25:13 minibits-wallet 1:25:23 LNDg 1:25:40 Lightning Terminal 1:25:43 Aqua Wallet 1:25:50 SecondNostr • Project spotlight 1:27:01 Nostr-social-graph 1:27:08 Wherostr 1:27:16 gitworkshop.dev 1:27:26 ngit 1:29:52 SatShoot 1:29:57 Known Nostr Attack 1:30:04 Foro.Wiki 1:30:16 Whitenoise 1:31:34 Pollerama 1:31:41 ZapD (Zap Delivery) 1:31:46 Nostr Personality Analyzer 1:31:59 Alphaama releases 3 micro-appsBitcoin • Software Releases & Project Updates 1:32:19 AnchorwatchBoosts 1:54:55 Shoutout to top boosters @Ape Mithrandir, @vake, @user54549358 , @tac_btc, @LITTLE & @btconboardLinks & Contacts:⁠⁠⁠⁠Website⁠⁠⁠⁠: https://bitcoin.review/Podcast⁠⁠⁠⁠Substack⁠⁠⁠⁠: https://substack.bitcoin.review/⁠⁠⁠⁠Twitter⁠⁠⁠⁠: https://twitter.com/bitcoinreviewhq⁠⁠⁠⁠NVK Twitter⁠⁠⁠⁠: https://twitter.com/nvk⁠⁠⁠⁠Telegram⁠⁠⁠⁠: https://t.me/BitcoinReviewPod⁠⁠⁠⁠Email⁠⁠⁠⁠: producer@coinkite.comNostr & LN:⚡nvk@nvk.org (not an email!)Full show notes: https://bitcoin.review/podcast/episode-76
BR075 - Bitcoin Core, COLDCARD, BitKit, RAMBO Attack, Chinese Hardware Backdoors, Nostr Censorship? + MORE ft. Future Paul & Rijndael
11-09-2024
BR075 - Bitcoin Core, COLDCARD, BitKit, RAMBO Attack, Chinese Hardware Backdoors, Nostr Censorship? + MORE ft. Future Paul & Rijndael
I'm joined by guests Future Paul & Rijndael to go through the list.Full shownotes on the link below.Housekeeping00:03:17 Coinkite launches a dedicated partners pageVulnerability Disclosures00:18:54 The RAMBO Attack00:27:50 YubiKeys vulnerable to sophisticated cloning attacks00:29:05 SpyAgent00:30:16 Hardware backdoors detected in Chinese key cards00:34:41 sedexpBitcoin• Software Releases & Project Updates00:36:53 Bitcoin Core 00:41:58 COLDCARD00:48:06 Utreexod00:48:44 BlueWallet00:49:02 Nunchuk Android00:49:16 Bitkey App00:49:32 Bullbitcoin-mobile00:51:49 SwissBitcoinPay00:51:56 BoltzExchange client• Project Spotlight1:07:26 Bitcoin Good First Issues1:09:22 StashPay1:09:30 LiveWallet1:09:42 dlc dev kit1:09:50 OrqestraPrivacy & Other Related Bitcoin Projects• Software Releases & Project Updates1:11:19 SimpleX1:12:04 NomadNet1:12:51 Sideband1:13:19 Mullvad VPN adds support for DAITA• Project Spotlight1:16:47 Cypherpunk Tools1:16:59 RACE: The Resilient Anonymous Communications for Everyone1:17:47 Katzenpost mix network1:18:03 NymVPNLightning & L2(+)• Project Spotlight1:19:41 Full Phoenixd Stack1:19:49 Zapin.me1:20:03 lnwCash• Software Releases & Project Updates1:25:53 CLN1:25:58 rust-lightning1:26:03 BlixtWallet1:26:07 Phoenix Android/iOS1:26:10 lnbits• Boosts1:30:52 Shoutout to top boosters @Ape Mithrandir, @bradmillscan, @Marcellus, @qxotk & @vake Nostr• Project spotlight1:38:33 Notepush by Damus1:39:01 Nostrize1:39:07 Wikistr1:39:10 WoT Relay1:39:17 Fren Relay1:39:27 Anonostr1:39:53 The Wired1:40:05 Yeghro Unfollow Tool1:40:11 Gif Buddy1:40:18 Why Nostr1:40:30 Bitcoin.Review nostr mini series• Tech Tip of the Day1:50:38 Don't use TelegramNews & Noteworthyr• Bitcoin1:51:03 Launch of the Bitcoin Dev Project1:51:07 The BDK Foundation invites proposals 1:51:16 WasabiWallet backend servers are down • Lightning1:51:24 Strike now supports BOLT 12• Business & Finance1:51:27 Canadian bitcoin broker Bull Bitcoin expands to France 1:51:37 Zaprite introduces a Point-of-Sale app1:51:43 Blockstream Mining launches third round of hashrate-backed BMN2 note• Hyperbitcoinization1:51:52 Mastercard launches euro-denominated non-custodial Bitcoin debit card1:52:39 Nasdaq seeks regulatory approval• Cryptography1:53:06 Discovery• Funding1:53:36 OpenSats announcements• Mining1:54:55 Launch of the Bitcoin Mining Development Mailing List1:56:30 Bee Evolved launches M.O.E.M.• Privacy1:56:40 Pavel Durov, founder of Telegram, faces 12 criminal charges in France1:57:09 U.S. appeals panel questions the Treasury’s sanctions on Tornado Cash• Reads2:00:52 Here's a list of our top recently published readsLinks & Contacts:⁠⁠⁠⁠Website⁠⁠⁠⁠: https://bitcoin.review/Podcast⁠⁠⁠⁠Substack⁠⁠⁠⁠: https://substack.bitcoin.review/⁠⁠⁠⁠Twitter⁠⁠⁠⁠: https://twitter.com/bitcoinreviewhq⁠⁠⁠⁠NVK Twitter⁠⁠⁠⁠: https://twitter.com/nvk⁠⁠⁠⁠Telegram⁠⁠⁠⁠: https://t.me/BitcoinReviewPod⁠⁠⁠⁠Email⁠⁠⁠⁠: producer@coinkite.comNostr & LN:⚡nvk@nvk.org (not an email!)Full show notes: https://bitcoin.review/podcast/episode-75
BR074 - Fountain Podcasting 2.0 on Nostr, SGX Key Extraction, Nunchuk, Mempool, Floresta, + MORE ft. Oscar Merry & Rijndael
28-08-2024
BR074 - Fountain Podcasting 2.0 on Nostr, SGX Key Extraction, Nunchuk, Mempool, Floresta, + MORE ft. Oscar Merry & Rijndael
I'm joined by guests Oscar Merry & Rijndael to go through the list.Full shownotes on the link below.Housekeeping00:01:15 Calling for Ham radio guests00:01:35 Getting a US Ham Radio License by HR4BTC00:01:47 Who would you like to see on another Bitcoin security panel?00:02:11 What other panel topics would you like us to host?00:02:29 Send us your opinions to improve our content Vulnerability Disclosures00:03:45 Security Researcher Extracts Critical Intel SGX Root Keys00:12:52 Researchers found security flaws in 5G basebands00:14:59 Rust-miniscript vulnerability disclosure00:20:55 New MacOS malware Banshee Stealer00:21:36 Hacker develops open-source infrared laser tool00:23:51 Sinkclose00:25:42 Five dollar wrench attacks00:26:26 McRug00:26:48 1Password security vulnerability00:26:55 Verizon demo app poses security risk00:27:14 Massive data breach exposes 2.7 billion records00:27:25 Bitcoin stolen in $238 million breachBitcoin• Software Releases & Project Updates00:27:49 Nunchuk00:28:29 Mempool00:30:49 Nix Bitcoin00:31:24 Blue Wallet00:31:45 Krux00:32:46 Floresta 00:36:19 Bisq 2 00:36:30 Bitkey00:37:11 boltz-client00:37:29 Boltz Exchange00:37:39 Nodeyez 00:37:50 ESP-miner00:37:54 Robosats• Project Spotlight00:38:06 Pushtx00:39:06 BitVault00:39:30 SwissKnife00:39:41 MineOps00:39:53 Bitcoinfees00:40:06 Payjoin Flutter00:40:10 Jippi00:40:16 PlebLab 00:40:35 Sovran00:40:50 Buttcoin-priceAudience Questions00:41:59 “What is to stop bitcoin on the main chain from being..."00:43:35 “If you’ve got 3 mk4s(or 3 separate vendors) all running..."00:46:30 "Thoughts on using mnemonic phrases for address verification ..."Privacy & Other Related Bitcoin Projects• Software Releases & Project Updates00:50:06 SimpleX00:50:35 reticulum-meshchat• Project Spotlight00:51:03 Module_17Lightning & L2(+)• Project Spotlight00:51:35 Voltage Tipper00:51:45 Bankify00:51:52 Voltz Wallet00:52:04 2nodeschillin• Software Releases & Project Updates00:53:04 FountainBoosts:01:35:09 Shoutout to top boosters @Zero-Knowledge Goof, @wotsit, @apemithrandir, @vake,  @wartime, @qxotk & @loishodlsLinks & Contacts:⁠⁠⁠⁠Website⁠⁠⁠⁠: https://bitcoin.review/Podcast⁠⁠⁠⁠Substack⁠⁠⁠⁠: https://substack.bitcoin.review/⁠⁠⁠⁠Twitter⁠⁠⁠⁠: https://twitter.com/bitcoinreviewhq⁠⁠⁠⁠NVK Twitter⁠⁠⁠⁠: https://twitter.com/nvk⁠⁠⁠⁠Telegram⁠⁠⁠⁠: https://t.me/BitcoinReviewPod⁠⁠⁠⁠Email⁠⁠⁠⁠: producer@coinkite.comNostr & LN:⚡nvk@nvk.org (not an email!)Full show notes: https://bitcoin.review/podcast/episode-74
BR073 - Security Challenges in Bitcoin Hardware Wallets: A Technical Overview ft. Lloyd Fournier, Craig Raw, Rob Hamilton, odudex & NVK
23-08-2024
BR073 - Security Challenges in Bitcoin Hardware Wallets: A Technical Overview ft. Lloyd Fournier, Craig Raw, Rob Hamilton, odudex & NVK
I'm joined by guests Lloyd Fournier, Craig Raw, Rob Hamilton and odudex to discuss bitcoin wallets and signers.HousekeepingCalling for guests to join a ham radio panel. Email producer@coinkite.com if you are interested.Keep the audience questions coming! Send boosts or email questions to producer@coinkite.com.Check out the previous episode if you want to understand more about Dark SkippyDiscussion Topics00:04:40 KRUX/DIY Frost devices00:17:39 DOS ware/Hardware wallets00:29:53 PSBT Protocol 00:40:57 UX Security Tradeoffs00:48:09 Hardware Signers00:54:52 Battle between Push for better UX & More Security01:16:35 Key generation protocol01:53:53 Feature Request to Sparrow walletAudience Questions"Geographically distributed multisig is probably the best self custody model today. But specifically what kinds of places are suitable for storing private key material internationally or even just away from your home territory? Many people do not have high trust family/friends that live in different areas and I am skeptical of the privacy and security bank safety deposit boxes." - Densest_Sprite0R"How have best practices evolved as we migrate from ecdsa to Schnorr it terms of interactivity / uptime that then therefore reshapes UX? e.g concurrent sessions, nonce counters, etc" - Vivek"Are you aware of any known attack methods to add malicious code to an sd card with out any physical access to it? Like with some type of radio frequency attack etc…?" - Kidwarp"Explain if you could why the anti exfil protocols don’t work air-gapped." 🙏🏻 - @basisbtc"Ask your esteemed panel what the solution to all these problems is and why it is miniscript." - Coinjoined Chris ⚡"How does the seed leak stuff work - the nonce signature stuff was not explained easy / detailed enough for us noobs? Is it just publishing encoded information somehow? Would it make any kind of difference if you use a passphrase?" - M4v1"If you’ve got 3 mk4s(or 3 separate vendors) all running same compromised darkskippy software but in a 2 of 3 Multisig? Still same risk / elevated risk or multisig set up negates? How about a single sig with weak passphrase" - wimI'd love to hear some of your favorite ways that a pwned hardware signer can steal funds that do not involve DarkSkippy (or similar). - ReardenLinks & Contacts:⁠⁠⁠⁠Website⁠⁠⁠⁠: https://bitcoin.review/Podcast⁠⁠⁠⁠Substack⁠⁠⁠⁠: https://substack.bitcoin.review/⁠⁠⁠⁠Twitter⁠⁠⁠⁠: https://twitter.com/bitcoinreviewhq⁠⁠⁠⁠NVK Twitter⁠⁠⁠⁠: https://twitter.com/nvk⁠⁠⁠⁠Telegram⁠⁠⁠⁠: https://t.me/BitcoinReviewPod⁠⁠⁠⁠Email⁠⁠⁠⁠: producer@coinkite.comNostr & LN:⚡nvk@nvk.org (not an email!)Full show notes: https://bitcoin.review/podcast/episode-73
BR072: Dark Skippy Attack, Proton Wallet, Mutiny Sunsets, BDK, Nunchuk +MORE ft. Paul, Rob, Rijndael
08-08-2024
BR072: Dark Skippy Attack, Proton Wallet, Mutiny Sunsets, BDK, Nunchuk +MORE ft. Paul, Rob, Rijndael
I'm joined by guests Future Paul, Rob Hamilton & Rijndael to go through the list.Housekeeping:00:02:31 Entrepreneurial editor wanted00:03:11 New COLDCARD website00:03:18 COLDCARD Q is now available in the EU00:03:32 Updated Docs at coldcard.com/docs00:03:46 Call for People to get into amateur radio00:03:59 New boost email for questions - questions@bitcoin.reviewVulnerability Disclosures:00:04:35 Dark Skippy attack00:38:32 "Free Relay" attack 00:39:35 Mac Malware posing as popular apps00:46:03 Five dollar wrench attacks00:48:27 Accessing deleted and private repository data on GitHub00:49:44 Telegram allows malicious APKs to be sent as videos00:51:27 Data breach at bank linked to Coinbase00:53:08 Fractal ID data breach00:53:23 WazirX confirms $230 million loss00:56:07 Exchange dYdX website hacked in DNS hijack attackBitcoin:• Software Releases & Project Updates:00:57:18 secp256k100:58:25 BDK1:04:51 Nunchuk1:06:02 Libwally-core1:07:18 Bitcoin Keeper1:07:48 Boltz Exchange1:08:02 Blockstream Green1:08:26 Bitkey1:09:51 Padawan Wallet1:11:14 ESP-miner• Project Spotlight:1:12:04 ProtonWallet1:20:56 lastseed1:21:17 Dictionnaire de Bitcoin1:21:24 Octojoin1:21:35 Argon BWG1:21:41 BitForge Nano1:21:51 Bitaxe Satellite1:23:50 PyBLOCK1:24:15 RoxomPrivacy & Other Related Bitcoin Projects:• Software Releases & Project Updates:1:24:54 reticulum-meshchat1:25:28 M17-Project Module_17• Project Spotlight:1:28:36 El TorLightning & L2(+):• Software Releases & Project Updates:1:30:33 Mutiny Wallet is shutting down• Project Spotlight:1:44:15 Fedi1:44:32 Alby Hub1:45:13 Nutlife.lol• Software Releases & Project Updates (cont.):1:45:55 Phoenix1:49:48 taproot-assetsBoosts:1:28:53 Shoutout to top boosters @seedor, @ez21, @vake, @apemithrandir, @garykrause_, @dubravko, @bencoin, @cantillionaire & @plebhodlLinks & Contacts:⁠⁠⁠⁠Website⁠⁠⁠⁠: https://bitcoin.review/Podcast⁠⁠⁠⁠Substack⁠⁠⁠⁠: https://substack.bitcoin.review/⁠⁠⁠⁠Twitter⁠⁠⁠⁠: https://twitter.com/bitcoinreviewhq⁠⁠⁠⁠NVK Twitter⁠⁠⁠⁠: https://twitter.com/nvk⁠⁠⁠⁠Telegram⁠⁠⁠⁠: https://t.me/BitcoinReviewPod⁠⁠⁠⁠Email⁠⁠⁠⁠: producer@coinkite.comNostr & LN:⚡nvk@nvk.org (not an email!)Full show notes: https://bitcoin.review/podcast/episode-72
BR071 - Krux, Mutiny, COLDCARD, BlueWallet, BinaryWatch, Linksys Vuln, Silent Payments, BOLT12 + MORE ft. Alex, Craig & Ben
17-07-2024
BR071 - Krux, Mutiny, COLDCARD, BlueWallet, BinaryWatch, Linksys Vuln, Silent Payments, BOLT12 + MORE ft. Alex, Craig & Ben
I'm joined by guests Alex B, Ben Carman, and Craig Raw to go through the list. Bitcoin • Software Releases & Project Updates 00:52:03 Bitcoin Core00:55:12 COLDCARD00:56:16 Nunchuk00:56:48 Liana00:57:38 Rust Payjoin00:58:00 Blue Wallet01:07:04 Bitcoin Keeper01:07:28 Krux01:10:27 Bisq01:10:39 RoboSats01:10:43 WasabiWallet01:10:48 Bitkey01:11:29 Trezor01:11:59 Blockstream QT01:12:35 FullyNoded Project Spotlight 01:14:01 WE HODL BTC01:14:42 Satso01:15:16 Mempool Accelerator01:15:51 Brollup v201:17:22 Bails01:17:36 B2P Central01:17:51 Wabisator01:18:01 Wasabist01:18:12 Lava Wallet Privacy & Other Related Bitcoin Projects • Software Releases & Project Updates 01:29:36 SimpleX Project Spotlight 01:29:41 Reticulum MeshChat01:29:44 Nomadnet01:30:26 Entropyseal01:30:40 Proton Docs01:30:48 FUTO Keyboard Lightning & L2(+) • Project Spotlight 01:31:35 Cashu01:31:56 Payto01:32:09 Lampo01:32:15 Blitz Wallet01:32:22 Lendasat01:37:02 Chamberlain01:37:08 Phoenixd-Server-Ui01:37:13 Bitcoin Mints • Software Releases & Project Updates 01:51:40 Phoenix01:51:51 Breez01:51:58 Mutiny Node01:52:40 eNuts01:52:44 Boltz Exchange01:52:46 validating-lightning-signer01:52:47 scaling-lightning Nostr • Project Spotlight 01:59:13 NIP proposals01:59:31 Noteguard01:59:39 Npub.pro01:59:49 Keychat02:00:19 Lowent02:00:31 Tracking Token Disrespector02:00:42 Quotestr02:00:48 HiveTalk02:00:56 FanFares.io02:01:06 NostrApps • Software Releases & Project Updates 02:02:45 Primal Boosts 02:04:19 Shoutout to top boosters @spottysea, @vake, @qxotk, @apemithrandir & @zdoxed Audience Questions 02:06:46 What are some more examples of these two different types of cryptography?02:08:04 What small projects in bitcoin or nostr could someone learn more technicalities?02:10:40 How to prevent small utxo's from being useless due to miner fees outweighed the utxo?Links & Contacts ⁠⁠⁠⁠Website⁠⁠⁠⁠: https://bitcoin.review/Podcast⁠⁠⁠⁠Substack⁠⁠⁠⁠: https://substack.bitcoin.review/⁠⁠⁠⁠Twitter⁠⁠⁠⁠: https://twitter.com/bitcoinreviewhq⁠⁠⁠⁠NVK Twitter⁠⁠⁠⁠: https://twitter.com/nvk⁠⁠⁠⁠Telegram⁠⁠⁠⁠: https://t.me/BitcoinReviewPod⁠⁠⁠⁠Email⁠⁠⁠⁠: producer@coinkite.comNostr & LN:⚡nvk@nvk.org (not an email!) Full show notes: https://bitcoin.review/podcast/episode-71
BR070 - Nunchuk, Bitcoin Core, Push Tx, COLDCARD, BDK, RGB, Kraken Hack, Fedimint DNS Outage, Spending Condition Verification + MORE ft. Schmidty & Rijndael
26-06-2024
BR070 - Nunchuk, Bitcoin Core, Push Tx, COLDCARD, BDK, RGB, Kraken Hack, Fedimint DNS Outage, Spending Condition Verification + MORE ft. Schmidty & Rijndael
I'm joined by guests Mike Schmidt & Rijndael to go through the list. Housekeeping 00:01:10 Check out previous episode on OP_CAT00:02:42 New Hardcase for COLDCARD Q00:02:53 Coinkite looking for a Sales Rep & Social Media Specialist Vulnerability Disclosures 00:04:18 Security researcher leveraged flaw in recent UX on Kraken00:10:08 LockBit Threatens to Leak Fed Data00:10:50 Fedimint DNS issues00:17:08 Bitcoin Core vulnerability disclosure policy discussions report00:21:32 DoS disclosure: LND Onion Bomb00:25:06 BitcoinLink critical vulnerability00:27:40 DISGOMOJI: Linux malware controlled through emojis00:28:11 Physical attack in London00:29:36 Cryptocurrency influencer and three other people kidnapped in Montreal00:30:16 Compromised address: 0.5 bitcoin lost to fees • Software Releases & Project Updates 00:31:40 COLDCARD WIP release00:43:40 bbqr-ffi00:45:31 Nunchuk00:54:30 Bitcoin Core00:57:27 BDK00:59:06 Rust Payjoin00:59:25 Umbrel00:59:28 Bisq00:59:32 WasabiWallet01:00:11 Joinstr01:01:21 Seedhammer01:03:02 Labelbase01:04:47 Blockstream Green01:05:33 Peach01:05:43 ESP-miner Project Spotlight 01:06:40 Brollups01:07:02 Stratum.work01:07:33 Satonomics01:07:45 Volt01:08:11 Mempool Research01:08:59 Moosig01:09:22 SLIP-39 Wallet "Seed" Generation & Backup • Software Releases & Project Updates 01:10:42 SimpleX01:10:45 Tails01:11:05 Tor Browser Project Spotlight 01:11:11 OpenCoordinator01:11:23 Librechat • Software Releases & Project Updates 01:11:36 Core Lightning01:11:44 LDK01:11:49 Phoenix01:11:50 Mutiny Node01:11:53 RGB01:13:07 Lightning Terminal01:13:10 Ride-The-Lightning01:13:15 minibits-wallet01:13:20 Clams Remote01:13:24 BitBanana Project Spotlight 01:13:30 Storm.pub01:13:39 Ecash by sound01:16:02 Nutmix01:16:07 DotNut • Software Releases & Project Updates 01:21:12 rust-nostr01:21:13 Primal01:21:15 Damus01:21:18 Amethyst01:21:19 Coracle01:21:20 nos.social01:21:22 Oxchat01:21:24 Voyage01:21:25 Mostro01:21:26 Citrine Project Spotlight 01:21:29 Notedeck01:21:37 Keypub01:23:00 Relay Runner01:23:04 Nostr Pay Boosts 01:23:56 Shoutout to top boosters @vake, @pippellia, @wotsit, @apemithrandir, @bencoin & @zdoxed Audience Questions 01:25:34 "When we have covenants, is the address type different depending on the spending conditions?" Bitcoin Optech Newsletter 01:30:44 Highlights from recent Bitcoin Optech Newsletters News & Noteworthy • Bitcoin 01:33:46 Grokking Bitcoin is now open-source • Protocol 01:33:52 Bitcoin Core #29325 • Lightning 01:34:00 Multicoin app Cake Wallet to integrate Lightning payments • Business & Finance 01:34:09 Blink Wallet Vouchers01:34:13 RobinHood to acquire Bitstamp • Funding 01:34:38 Open Cash Association01:34:42 OpenSats announces support for Calle01:34:48 Brink's grant committee welcomes Cory Fields01:34:55 Invincible Privacy Group • Mining 01:36:36 Wilson Mining announced the opening of its own FPPS01:36:43 Foundry Hardware01:36:48 Bitdeer to acquire Desiweminer01:37:02 Bitmain announces Antminer S21 XP Hydro01:37:15 Marathon Digital Holdings launches 2-megawatt project in Finland • Privacy 01:37:22 Proton transitions to non-profit01:37:26 Nigerian financial institutions to request customers social media handles as part of KYC • Government & Political 01:37:34 Vote postponed for EU regulation Chat Control 2.0 • Events 01:37:42 Adopting Bitcoin Cape Town Reads • 01:37:51 Top recently published reads: The emerging Bitcoin modular ecosystem by Alex BergeronCashu: a vision for a Bitcoin powered ecash ecosystem by ShinobiMircea Popescu and MPex by Beautyon Links & Contacts ⁠⁠⁠Website⁠⁠⁠: https://bitcoin.review/Podcast⁠⁠⁠Substack⁠⁠⁠: https://substack.bitcoin.review/⁠⁠⁠Twitter⁠⁠⁠: https://twitter.com/bitcoinreviewhq⁠⁠⁠NVK Twitter⁠⁠⁠: https://twitter.com/nvk⁠⁠⁠Telegram⁠⁠⁠: https://t.me/BitcoinReviewPod⁠⁠⁠Email⁠⁠⁠: producer@coinkite.comNostr & LN:⚡nvk@nvk.org (not an email!) Full show notes: https://bitcoin.review/podcast/episode-70
BR069 - Cat is out of the bag? OP_CAT ft. NVK, Andrew Poelstra, Rob Hamilton & Rijndael
21-06-2024
BR069 - Cat is out of the bag? OP_CAT ft. NVK, Andrew Poelstra, Rob Hamilton & Rijndael
I'm joined by guests Andrew Poelstra, Rob Hamilton, and Rijndael to discuss OP_CAT. Discussion Topics 00:00:50 Guest introductions00:01:13 Overview of OP_CAT00:02:47 History of OP_CAT00:08:48 Technical explanation of OP_CAT01:00:31 Issues with existing complexity01:02:05 OP_CAT versatility and product market fit01:06:07 Complexity of interactive protocols01:10:05 Analogies, historical challenges and solutions01:19:27 Risks and safe engineering of OP_CAT01:24:03 Bitcoin economics and technicals vs Ethereum01:38:39 Drivechain history, economic incentives and attacks01:51:59 What you can do with OP_CAT02:00:59 Script restoration2:09:40 Activation strategies02:23:00 Closing remarks Links & Contacts ⁠⁠⁠Website⁠⁠⁠: https://bitcoin.review/Podcast⁠⁠⁠Substack⁠⁠⁠: https://substack.bitcoin.review/⁠⁠⁠Twitter⁠⁠⁠: https://twitter.com/bitcoinreviewhq⁠⁠⁠NVK Twitter⁠⁠⁠: https://twitter.com/nvk⁠⁠⁠Telegram⁠⁠⁠: https://t.me/BitcoinReviewPod⁠⁠⁠Email⁠⁠⁠: producer@coinkite.comNostr & LN:⚡nvk@nvk.org (not an email!) Full show notes: https://bitcoin.review/podcast/episode-69
BR068 - Casa, Harbor, Wasabi, NFC Push Tx, Wrench Attacks, BBQr + MORE ft. Lopp, Paul, Rob & Ben
06-06-2024
BR068 - Casa, Harbor, Wasabi, NFC Push Tx, Wrench Attacks, BBQr + MORE ft. Lopp, Paul, Rob & Ben
I'm joined by guests Rob Hamilton, Ben Carman, Future Paul, and Jameson Lopp to go through the list. Housekeeping 00:01:01 Coinkite is looking for a Production Manager00:01:39 BBQr reminder Vulnerability Disclosures 00:04:53 Flaw in password manager RoboForm00:08:24 Japanese exchange DMM hacked00:11:34 GitHub warns of SAML auth bypass flaw00:16:35 Whatsapp vulnerable to traffic analysis00:17:21 Surveilling the Masses with Wi-Fi-Based Positioning Systems00:18:12 Lopp's list of known physical bitcoin attacks Bitcoin • Software Releases & Project Updates 00:41:36 Casa wallet descriptors00:51:47 BTCPay Server00:51:52 Specter00:53:07 Electrum00:53:35 Nunchuk Desktop00:58:24 Bitcoin Keeper00:58:32 Green QT00:58:42 Bisq200:58:45 Wasabi Wallet1:01:24 Labelbase1:03:39 ESP-miner • Project Spotlight 1:03:45 Satsie Zines1:06:28 NFC Push Tx1:10:44 Meshtastic BitcoinCore Bridge1:14:30 Ginger Wallet1:15:11 cargo-checkct Privacy & Other Related Bitcoin Projects • Software Releases & Project Updates 1:15:23 SimpleX • Project Spotlight 1:15:50 Pushtx1:16:15 lofextra Lightning • Software Releases & Project Updates 1:17:27 Mutiny node • Project Spotlight 1:17:27 Harbor Nostr • Software Releases & Project Updates 1:25:17 Primal iOS • Project Spotlight 1:26:00 SIGit1:27:14 git-remote-nostr1:27:35 Corny Chat1:28:11 Tidal Nostr Login News & Noteworthy • Business & Finance 1:32:22 HodlHodl blocks access to Lend • Funding 1:33:16 Peer-to-Peer Rights Fund Launched1:33:28 Unchained and the University of Austin launch first long-term endowment fund held in bitcoin1:33:35 Human Rights Foundation bounties1:33:40 Spiral supports newest grantee Sean Giligan in building ValidiTEE1:33:45 Bitcoin Design Foundation grants support to two more contributors • Mining 1:34:05 Concept for solderless ASIC chip modules Links & Contacts ⁠⁠Website⁠⁠: https://bitcoin.review/Podcast⁠⁠Substack⁠⁠: https://substack.bitcoin.review/⁠⁠Twitter⁠⁠: https://twitter.com/bitcoinreviewhq⁠⁠NVK Twitter⁠⁠: https://twitter.com/nvk⁠⁠Telegram⁠⁠: https://t.me/BitcoinReviewPod⁠⁠Email⁠⁠: producer@coinkite.comNostr & LN:⚡nvk@nvk.org (not an email!) Full show notes: https://bitcoin.review/podcast/episode-68