Rob | Bitsaga.be (@BitsagaRob) header
Rob | Bitsaga.be (@BitsagaRob) profile picture

Software engineer, bitcoin security consultant & hardware reseller. Once unbanked, now free. Multi-sig & seedsigner maxi. ∞/21M. https://nitter.cf/t.co/2veBfrhoer

Book a Free 30 Min Call 👉
Joined July 2022
Photo by Rob | Bitsaga.be (@BitsagaRob)Photo by Rob | Bitsaga.be (@BitsagaRob)Photo by Rob | Bitsaga.be (@BitsagaRob)Photo by Rob | Bitsaga.be (@BitsagaRob)Photo by Rob | Bitsaga.be (@BitsagaRob)Photo by Rob | Bitsaga.be (@BitsagaRob)Photo by Rob | Bitsaga.be (@BitsagaRob)Photo by Rob | Bitsaga.be (@BitsagaRob)Photo by Rob | Bitsaga.be (@BitsagaRob)Photo by Rob | Bitsaga.be (@BitsagaRob)
12 bitcoin security levels: - level 0: on an exchange. You don’t really own anything. - level 1: hot storage on a closed source shitcoin wallet (like @Ledger) - level 2: hot storage on an open source bitcoin only wallet (like @bluewalletio or @SparrowWallet) - level 3: cold storage on a usb hardware wallet with shitcoin support - level 4: cold storage on a bitcoin only usb hardware (like @COLDCARDwallet mk4 or @BitBoxSwiss) - level 4: cold storage on a bitcoin only airgapped hardware wallet without reproducible builds (like @KeystoneForBTC) - level 5: cold storage on a bitcoin only airgapped hardware wallet with reproducible builds (like @foundationhq Passport) - level 6: analog-only airgapped cold storage (Passport supports this) with self generated ephemeral seed - level 7: cold single seed + passphrase (protect against seed compromise) - level 8: Shamirs secret sharing cold single seed (protect against seed compromise & introduce fault tolerance) - level 9: hybrid 2/3 multi-sig with 1 hot key - level 10: full cold 2/3 multi-sig - level 11: hybrid 3/5 multi-sig with 1 hot key - level 12: full cold 3/5 multi-sig Could be split up further but might not make a lot of sense. Bonus points for connecting to your own node at any level. I’m sure many will disagree somewhere. What would you change? What would you remove or rank differently? Note higher security is not always the best fit for your situation.
202
218
41
1,470
270,558
Rob | Bitsaga.be retweeted
🚨 0.77€ de taxe pour regarder un film Netflix ! Ce vendredi, les députés viennent d'adopter un amendement socialiste visant à taxer les données qui circulent sur Internet à hauteur de 5,5 centimes par gigaoctet reçu en France. Ils ont complètement pété les plombs. Voici quelques exemples de ce que ça va désormais vous coûter : 🔴 Vous regardez un film Netflix de 2 heures en 4K ? Jusqu'à 0,77 € de taxe brute sur les données transmises. 🔴 Vous téléchargez un jeu vidéo de 150 Go ? 8,25 €. 🔴 Vous récupérez 200 Go de photos personnelles stockées chez Google ? 11 €. 🔴 Vous rapatriez 1 To de vos propres fichiers depuis Google Drive ? 55 €. 🔴 Vous restaurez 2 To de sauvegardes après une panne informatique ? 110 €. Ces taxes seront facturées aux plateformes américaines, qui vous vous en doutez bien, vous redescendront la facture ! Ils sont en train de construire une fiscalité qui pénalise le simple fait de transmettre de la donnée. Et ceci alors que nous sommes à l'aube d'une révolution technologique majeure avec l'IA ! Pour rester compétitifs, tous les pays doivent accélérer leur transformation numérique. Et nous en France, que trouve-t-on comme idée de génie ? UNE PUTAIN DE TAXE SUR LA DATA ! Et en plus ils ont le culot de nous la présenter comme une mesure écologique qui encouragerait à réduire les volumes de données échangées. Quelle bande de guignols. Il faut être totalement déconnecté des réalités économiques pour considérer qu'un pays peut retrouver sa prospérité en multipliant indéfiniment les prélèvements sur les activités productives. Cet amendement n'est pas encore une loi définitive, mais le simple fait qu'une telle proposition ait été adoptée à l'Assemblée nationale en dit long sur la manière dont nous sommes gouvernés. Ces fous du bus vont vraiment nous mettre au fond du ravin.
761
3,560
400
13,767
727,871
Rob | Bitsaga.be retweeted
After the past several months of folks claiming self custody is dead / too risky, a single exchange hack results in more losses than all the self custody failures this year combined. nitter.cf/lopp/status/2087892465…
Do you think bitcoin self custody is too risky? Truly I tell you, third party custody is just self custody with extra layers of risk.
53
40
7
321
13,645
Rob | Bitsaga.be retweeted
2026 has been the all time strongest case for mutli-vendor multisig. Everyone is trying to steal your Bitcoin. Plan accordingly.
27
21
5
259
11,728
Rob | Bitsaga.be retweeted
A quick primer on #Bitcoin multisig: Multisig allows you to take custody of your BTC in a way that eliminates any single point of failure. With multisig, you will not lose your BTC if you lose a key, or if your house is broken into, catches fire, or floods. The most common type of multisig setup is a 2-of-3, meaning 2 out of 3 keys (hardware wallets) are required to sign a transaction to move/spend the BTC. With a multisig setup, you need to keep track of your keys and a descriptor file. Keys: These are typically hardware wallets that come with a paper backup for the seed phrase. With a 2-of-3 setup, you can lose one of the keys and still be safe. Best practices are to (1) store all 3 keys in separate geographic locations, (2) use a different hardware vendor for each key, and (3) back up each hardware wallet's seed phrase on steel instead of just paper. Descriptor file: This is essentially a backup of the multisig wallet configuration. The descriptor file should be saved securely and/or printed out (as a QR code). If an attacker gains access to the descriptor file, they can recreate the multisig wallet and view the BTC balance, but they can't move the funds unless they actually have access to at least 2 of the keys. If the descriptor file is lost, it can be restored, but it requires gathering all 3 keys to recreate it.
27
40
3
249
23,193
Yes they do
the wild part is these prompts work
2
417
This turned into a more personal & longer post on AI, code & bitcoin: This is my custom agent dashboard. I'm burning through 3 Claude Max 20x accounts & a Cursor account on a weekly basis now. Switching between accounts is a hassle on Claude Desktop so I reworked my dashboard, here I can see weekly & 5h limits clearly, to more easily delegate work between accounts. I've tried @t3dotcodes and it's pretty great but we've entered the era where you can just spawn into existence whatever custom software you can wish upon which will beat any generic piece of software 9 times out of 10. My biggest jobs have an automatic load balancer, each account has a coordinator, it can delegate work to other accounts. Coordinator agents mostly don't do real work, they may check, verify, merge and well.. coordinate. Cross-agent memory & communication is mostly just files, mostly markdown, which need a lot of care and continuous cleanup. Managing context is not trivial and you want agents to be able to communicate through each other which means outside their own context. 2 of the Claude accounts are sponsored by corporate, yes I still have a freelance fiat job, and most work being done here is for corporate, currently working on migrating a codebase and an MCP server. I used to be a software engineer, I don't know what I am today but it's not that. I used to write code 8h/day for the past +10 years, now it's 0%. Code review is still a significant chunk of the job for the more critical work but more trivial tasks should get explicitly categorized as such and never suffer the burden of code review. Don't care about the title either, but I know I've never been more excited about my job than I have been today. Code quality matters much less these days. What does matter is building smth actually valuable, the usability, performance and of course.. security. And honestly, it's often much more exciting than bitcoin. Bitcoin moves slow and outside of some niche tribal echo chamber here on X, nobody gets it. I've used AI on bitcoin and built some pretty amazing things imho (check out the bitsaga website insights page) but I feel it's mostly an empty room I'm talking into. Within bitcoin what's the percentage that grasps musig2 or silent payments? And silent payments is the kind of shit that fires me up. Kill the fucking bitcoin address already, it's obnoxiously unusable. So you build shit but barely anyone cares. I guess that's what being early means. But I'm human, I also get distracted. AI is the crazy gorilla in the room right now and I'm having so much fun dancing with him. Lately there's been more silence from me on here as I've focused on AI itself and the fiat job more where the CTO of a +2k employees company is pointing me at problems to "go work your AI magic" over there. Make no mistake bitcoin is the vision, the moonshot, the revolution. Honestly I'm pretty proud to be in the vanguard charging into the fiat system. But it saddens me to see so many just go "It's all fucked, I'm outa here". I disagree so fucking much. Our ancestors where torn apart on the battlefield for the freedoms we are privileged with today and nowadays quite a lot seem to be willing to just flee before the battle of our time has even started... Rage, rage against the dying of the light A historic poem is just words on a screen, until we choose it's much more than that.
7
1
7
836
Cybersecurity is going through a phase shift. AI on the offense side, plowing through insecure human slopcode, should make it clear that AI will have to be on the defense as well. Agents are monitoring, and acting, on my server far faster and better than I ever will.
2
2
8
733
AI surgeons 👀
Last night an AI agent performed brain surgery on a mouse. We gave it 19 gene therapy vectors in a spreadsheet, a mouse model of epilepsy, access to a motorize surgery rig with cameras and one goal: reduce seizures. It picked the drug. It picked the brain region. It derived the coordinates from three papers. Then it drove the stereotaxic arms into the brain and injected 250 nanolitres while watching the entry site through the rig camera for bleeding. A licensed vet gated every irreversible step and held a physical kill switch to stop the AI agent. Thread on what it decided, what it saw, and the moment it refused to let me override it. [Writing this on the spot out of excitement, but I've been 18hrs in front of my laptop coding and coordinating this, so keeping it brief and descriptive, more cohesive thoughts on this soon...]
236
This is absolutely sickening: belgian inflation hits 5.25% which means in less than 14 years your euros will be worth HALF. Think about it: for every 10k you have in your bank account today that you still have by May 2040, the number on your screen will still be the same but it will be worth exactly half at that current inflation rate. Paying 50% in taxes is painful but at least we get quite a bit, however government inefficient it may be, in return. But that 50% loss in purchasing power is siphoned by those who own assets and the pain is for those who only save in euros (poor & middle class). This is not COVIDs fault. This is not Putins fault. This is not Trumps fault. This is inherent to the fiat monetary system that keeps creating money out of thin air to support unbridled government spending. This is not new. We've seen this time and time again across history. The Romans did it, the Chinese did it, we're doing it. History rhymes. This train doesn't stop. Got bitcoin?
2
1
13
651
Bitcoin Core v32.1 was released! It is available from: bitcoincore.org/en/download/ Release notes: bitcoincore.org/en/releases/…
23
88
11
264
24,630
Holographic sticker as tamper evident seal, very common in hardware wallets, are the worst in a pile of security theatre
1
335
Rob | Bitsaga.be retweeted
AI is a cheat code for ADHD brains. You can jump between 10 projects, follow every rabbit hole, and somehow still get shit done. I've never been more excited to build stuff.
199
471
74
5,301
137,481
Hey @AnthropicAI PLEASE add multi-account support to your desktop app, just like you did for the mobile app. THANK YOU
2
574
Rob | Bitsaga.be retweeted
ANNOUNCEMENT: SPAM EMAILS HAVE BEEN SENT THAT APPEAR TO HAVE COME FROM OFFICIAL FOUNDATION DOMAINS. We have traced this back to one or more compromised API keys on Cloudflare, and have already revoked all API keys. The malicious domain in the spam email has been taken down. Funds stored on Passport are safe and Passport hardware is not compromised. We are working nonstop to discover exactly what happened and will put out a report ASAP.
100
174
98
508
164,202
Rob | Bitsaga.be retweeted
No human will ever write code better than LLMs. Accept this fact, stop pretending, and move on.
505
1,069
232
15,713
531,058
Rob | Bitsaga.be retweeted
We believe voice is the most natural way to interact with intelligence, so we created Dessa, the most authentic full-duplex speech model ever built. Talking with it feels like talking with a person…full of emotion, nuance, pauses, and a natural cadence. block.xyz/dessa
4,194
7,141
4,747
69,126
13,586,463
Rob | Bitsaga.be retweeted
Over the past two days, we released new versions of StartOS, StartTunnel and 100+ services to patch the security issues from eMudhra, PHP, and Node.js and others. We recommend updating ASAP.
8
33
3
204
10,333