Café Bitcoin | Guy Swann and Yan Pritzker on Coldcard, the Asymmetry of Defense, and Privacy | Day 16 of 50

Guy Swan on learning the wrong lessons. The takeaway circulating is "go with the biggest company," which forgets Mt. Gox and FTX and everything else proving size is not safety. His analogy: when a libertarian politician betrays you, libertarianism didn't break, you got scammed.
He wants a rule that works forward. His sharpest point: "I don't want a rule that only works in hindsight." Anyone can now point at the source-available license. The useful question is what indicator predicts the next failure before it happens.
His own heuristic broke in both directions. He had trained himself not to dismiss builders for being abrasive, and now concludes that for security specifically, a maintainer who attacks people reporting problems is telling you something. Yan Pritzker paired it with the engineering version: without a culture of safety, people stop surfacing mistakes.
James O'Beirne's tripwires. He seeded wallets on-chain carrying graduated entropy over broken Coldcard seeds, five dice rolls, ten, fifteen, one and two-word passphrases, as bait. The bare seed was swept within an hour and nothing else has moved, mapping attacker capability live.
The red team's numbers. Rob Hamilton and Calle have scanned over 300 repos and spent roughly $40,000 on tokens in two days, finding critical vulnerabilities at about one per person per hour. OpenSats is now funding most of that budget.
Every company needs an agentic security pipeline. Yan's argument: agents are non-deterministic, so one scan proves nothing. The real work is harnesses that find, test, distill and reproduce on a loop. Swan has been building this for six to twelve months.
The asymmetry is the whole problem. Attackers need one vulnerability, defenders need all of them, and the economics favor the attacker. Some have been paying up to 90% of stolen funds in fees to get transactions mined quickly.
A fake Coldcard desktop app is circulating. No such application has ever existed. Trezor reported a phishing spike since disclosure, and a counterfeit Wasabi wallet reached an app store. Nobody legitimate asks for recovery words, and unsolicited migration instructions are always hostile.
Yan's read on whether this repeats. He calls the bug exotic: entropy wasn't weak, it was switched off entirely. Scans across the popular hardware wallets show correct and consistent entropy use, so he thinks this specific failure is unlikely to recur elsewhere.
Government overreach, the other half of the show. Suz on Liechtenstein's beneficial ownership register, roughly 31,000 entities, built in 2021 for EU anti-money-laundering compliance and now breached and offline. Yan on the Bank Secrecy Act's 1970 threshold, never inflation-adjusted, capturing dramatically more data for near-zero measured effect.

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(661)

Café Bitcoin | Slay Your Heroes, the Fourth Turning, and Certainty Lowers Your Guard | Day 17 of 50

Suze's Forbes piece, and the question under it. Her Telegram reporting found a persistent identifier that survives restarts, network changes and borders, with the credible risk being targeted surveill...

6 Aug 1h 25min

Café Bitcoin | Self-Custody Is Not Dead, the Custody Spectrum, and Owning Is Not Operating | Day 15 of 50

Dice rolls are now confirmed safe. Portland HODL published a full verification, independently cross-checked by James O'Beirne, Block's engineering team and Rob Hamilton: the Coldcard did use dice entr...

4 Aug 1h 17min

Café Bitcoin | The Coldcard Timeline, Joe Nakamoto on the Fallout, and Open Source Must Win | Day 10 of 50

A full forensic timeline. Brady traced it end to end: a 2018 MicroPython software fallback sat harmless for three years until March 2021, when Coinkite moved to Bitcoin Core's math library and silentl...

3 Aug 2h 30min

Café Bitcoin | Coldcard Emergency: What Happened, Who's Affected, and What To Do Now

The event. A firmware flaw in Coldcard seed generation, disclosed the night before, let an attacker recompute private keys outright. By airtime, 594 Bitcoin, put at roughly $38 million on the show, ha...

31 Juli 5h 10min

Café Bitcoin | Day 8 of 50: Telegram's Device Fingerprint, Getting Debanked Over Three Letters, and Where Retail Went

Swan's Phillip Alexander and Brandon Quittem host Day 8 of 50 Days for Freedom: Telegram's auth key ID and the Russian server question; getting debanked for the word Bitcoin, from Wise to Bitcoin Pol...

30 Juli 1h 15min

Café Bitcoin | Day 7 of 50: Daniel Batten on Bitcoin and Energy, Britain's Curtailment Bill, and Wealth Is Energy

Cory was out for a family wedding, so Brady and Philip hosted from his handle. Also new: a weekly recap song in a different genre each week, covering everything from the previous weeks of the show. D...

29 Juli 1h 23min

Café Bitcoin | Day 6 of 50: Lawrence Lepard on the Big Print, the AI Credit Crack, and The Math Ain't Mathing

Lawrence Lepard on bear market psychology. Everyone is short-term, negative, and attacking each other over BIP110 and Saylor. His read: we are winning, this is the moment to get friends buying, and he...

28 Juli 1h 25min