Software dev, life, science, and other random stuff. PGP: 2F5B 10B9 29CA C959 ₿ #bitcoin⚡️ 𓅦 npub14mgq3zmg7wc4g5exw6yztlfaypapcvee06quc5msdqujpa6e5d4sztw00t
The Netherlands
Joined March 2009
- Tweets1.7K
- Following827
- Followers355
- Likes2K
Remco retweeted
Ashigaru Desktop 1.5.1 is out.
On Oct 28 the Tor network stopped accepting older Tor versions, so 1.5.0 can’t connect. 1.5.1 bundles Tor 0.4.9.5 and fixes it.
The in-app updater needs Tor, so download manually and verify the signature:
github.com/linkinparkrulz/as…
Remco retweeted
Sparrow v2.5.6 has been released, removing the eMudhra root certificates and upgrading the bundled Tor to meet the client protocols now required by the Tor network.
It also brings extensive screen reader and keyboard accessibility improvements.
Changelog: github.com/sparrowwallet/spa…
Download: sparrowwallet.com/download
Sparrow v2.5.0 released with:
Silent Payments (SP) wallets
SP-capable Frigate public server @2140_dev
bitview.space fee rates source
sparrowwallet.com/download
Remco retweeted
🚨Scam alert: @build_on_bob is refusing to return my Bitcoin after a failed BTC->USDT swap, despite advertising its service as NON-CUSTODIAL. "Swap reverted. Your funds are safe." Except nothing arrived to the Bitcoin refund address I provided. And then this:
this is good UX
Scan all 99 dice into your @SeedSigner in one second. The new hardware (ESP32-P4 series) -- built-in touchscreen -- much easier to read and use than the Pi Zero.
You can buy a pack of 100 8mm dice from Amazon for $6, so the only constraints are waiting for them to arrive and not losing more than one. 🙂
Remco retweeted
an interview with the creator of the bitcoin reference client @rbitcoin_org
,,Max's Quest to Seraphis, A Tale About Monero's FCMP++ Privacy Upgrade''
Check it out 👇
expatriotic.me/fcmp/
Nice to hear @Bitonic is adopting silent payments!
Bitcoin is minder anoniem dan veel mensen denken en de privacy van het protocol ligt ook onder vuur. @DanielMol en @cryptotakkies gaan in gesprek met Niels van Groningen, medeoprichter en CEO van @Bitonic. Hoeveel blijft er over voor de bitcoingebruiker?
bnr.nl/podcast/cryptocast/60…
They literally did the meme
xkcd.com/221/
arstechnica.com/security/202…
The private keys for these certs are literally the numbers 4, 56, 66, 115, 155, 156, 230, and 237 (life imitates XKCD, again).
Holy Math.random fail... WTF
1/7
⚠️ 漏洞分析：Qubic 官方钱包弱 Seed 漏洞，苹果客户端 1,404 钱包批量被盗事件分析
10 月 17 日 至 18 日，攻击者利用 @Qubic 官方 Web 钱包在 Apple 平台（WebKit/JavaScriptCore）用 Math.random() 生成钱包 Seed 的随机性缺陷，离线枚举全部 2^32 个可能 Seed，碰撞出 1,404 个有余额的钱包私钥，并盗走 2,939,606,531,944 QU（约 $1.3M）。
攻击发生后，Qubic 进行了保护性停机，87.1% 被盗资金冻结在链上，12.9% 进入 MEXC 并被冻结账户。官方目前已发布 Web 钱包 v4.26.4 修复（改用 crypto.getRandomValues），请相关用户及时更新。
一、受害者范围
1,404 个钱包地址，这些地址的共同点：Seed 由 Qubic 官方客户端在下述环境中生成，随机性不足：
iPhone / iPad 上任意浏览器（Safari、Chrome、Firefox 等均被强制使用 WebKit 内核），2026-10-18 之前创建；
MacBook / iMac 的 Safari，2026-10-18 之前创建；
Qubic iOS App，2025 年 7 月之前创建；
二、漏洞根因：Math.random() 生成的密钥种子的随机性不足
Qubic 的 Seed 是 55 位小写字母串，理论空间 26^55（≈2^258），但实际安全性取决于生成它的 PRNG 的内部状态熵。
Remco retweeted
i rebuilt satoshi's 2009 bitcoin.exe byte for byte!
afaik nobody has been able to perfectly recreate the executable published in 2009 from source, because we didn't know the exact build environment that was used.
using opus 5.5, i reverse-engineered satoshi's build machine from the binary.
it now outputs an exe with the exact same sha256 as the 2009 release!
Remco retweeted
readme: fix typo
Co-Authored-By: GNU nano 9.0 (UTF-8, EDITOR and VISUAL, guidestripe=72) <[email protected]>
Co-Authored-By: Ghostty 1.3.1 (Metal renderer) <ghostty@localhost>
Co-Authored-By: zsh 5.9 (arm64-apple-darwin26.0) <zsh@localhost>
Co-Authored-By: Git 2.56.0 (Homebrew) <git@localhost>
Co-Authored-By: Secretive (SSH_AUTH_SOCK) <secretive@localhost>
Co-Authored-By: macOS Text Input (U.S. layout) <[email protected]>
Co-Authored-By: Apple Internal Keyboard (built-in) <[email protected]>
Co-Authored-By: APFS (sealed system volume, 4096-byte blocks) <[email protected]>
Co-Authored-By: MacBook Pro (Mac17,6, MGED4B/A, Apple M5 Max, 18 CPU cores, 36 GB RAM, macOS 27.0.1 build 26A434) <[email protected]>
A little fun project before Halloween: github.com/remcoros/spirits
