For wallet recovery or private support, request it here https://nitter.cf/t.co/H172QGcmGu GPG: 7c81 7290 6b9a 7eaf 9f0b d8f1 62a1 d33e 233c 8ea0
Joined August 2019
- Tweets1.1K
- Following60
- Followers2.1K
- Likes440
Crypto-Guide retweeted
Are hardware wallets worth the money? What if I don’t trust the companies that make them?
Could I build my own? How cheaply could I do it? Where would I get the parts, and how would I put everything together?
I kept seeing questions like these, so I put together DIY Wallet: a free, interactive guide to building your own hardware wallet using off-the-shelf parts and OneKey’s open-source code.
The current build uses a Raspberry Pi Zero 2 W with pre-soldered headers, a small OLED screen, a microSD card, and a USB cable. Budget around $38–57 for the parts and about five hours to get it running. No soldering required.
The guide walks you through what to buy, how to assemble it, and how to compile the firmware and OneKey desktop app yourself. Your recovery phrase is generated on the device itself, using the Pi’s hardware random number generator.
Hope you find it useful.
Get started for free 👉 diywallet.org
Crypto-Guide retweeted
CLAUDE FOUND THE SEEDS
anthropic.com/research/ecdsa…
Crypto-Guide retweeted
"By shifting key processes to the secure mobile app, Tangem’s hardware wallet doesn't need a display."
It's a software wallet then.
Stop claiming it's the "peak of hardware wallet security".
Hey, Chris!
A screen doesn’t solve blind signing. Huge sums have been lost to transactions people approved on screens they couldn’t actually read. Please read it: tangem.com/en/blog/post/blin…
Why the "no screen is bad" narrative fails
By shifting key processes to the secure mobile app, Tangem’s hardware wallet doesn't need a display. The secure app handles all critical interactions and is protected by the robust security layers outlined above. This simplifies the user experience while keeping their digital assets safe.
The app side is hardened separately: integrity checks against modified versions, root and jailbreak detection, tapjacking protection, certificate pinning, DexProtector, and open code on GitHub. Details here: tangem.com/en/blog/post/mobi…
We compared the two approaches and chose the one we believe is safer and simpler for people to use. Ledger Cryptobilis incident shows it was the right choice: with Tangem, a story like this simply couldn’t have happened.
Crypto-Guide retweeted
This is toxic and disingenuous. Tangem is misleading so many folks who don’t know better.
Gaslighting the industry for years.
Blind signing has a clear definition. This product is a glorified 2FA hot wallet and doesn’t protect from the most simple type of attack: a compromised phone or computer.
Hey, Chris!
A screen doesn’t solve blind signing. Huge sums have been lost to transactions people approved on screens they couldn’t actually read. Please read it: tangem.com/en/blog/post/blin…
Why the "no screen is bad" narrative fails
By shifting key processes to the secure mobile app, Tangem’s hardware wallet doesn't need a display. The secure app handles all critical interactions and is protected by the robust security layers outlined above. This simplifies the user experience while keeping their digital assets safe.
The app side is hardened separately: integrity checks against modified versions, root and jailbreak detection, tapjacking protection, certificate pinning, DexProtector, and open code on GitHub. Details here: tangem.com/en/blog/post/mobi…
We compared the two approaches and chose the one we believe is safer and simpler for people to use. Ledger Cryptobilis incident shows it was the right choice: with Tangem, a story like this simply couldn’t have happened.
Crypto-Guide retweeted
Presenting: DOOMSIGNER
On startup: Doom or Snake
Secret button press: Shieldsigner
Aka Seedsigner with smartcard support
Dream come true 🥸
Note this project is my personal playground for silent payments & musig2 etc and not at all secure or even intended to be
Crypto-Guide retweeted
That is an awesome idea. The guy from CryptoGuide on YouTube is a dev that made a fork that does this and that is pretty far along. It just works. github.com/3rdIteration/seed… take a look you will be pleasantly surprised with how good it is. Maybe there just needs to be an intro with @satochip as most of this is already built.
Crypto-Guide retweeted
Did you know that you can turn your ordinary home @seedsigner into a Shield Signer with Seedkeeper or Satochip (see satochip.io/) for a few euros? No more QR codes.
Parts and software below👇🏼:
Crypto-Guide retweeted
👻Specter-DIY v1.10.5 is out 🔐
Security hardening for randomness and transaction verification:
- TRNG fails safely
- Stricter change-output verification
- Mixed-wallet input warnings restored
- Reproducible builds fixed
github.com/cryptoadvance/spe…
🤖 Made with AI
Crypto-Guide retweeted
🚨Announcement: Krux has a new lead maintainer
We're pleased to announce that Krux has a new lead maintainer @JohnDoe_le_frog
Jean joined Krux years ago, initially as a skeptic. He started with a deep jaw-dropping investigation into Krux's flash storage...
Crypto-Guide retweeted
I’m doing my part:
bitcoin-takeover.com/the-diy…
Crypto-Guide retweeted
I've been sitting on an article about the DIY signing device ecosystem for way too long.
@BitcoinMagazine isn't accepting outside submissions anymore.
Who's got a platform that I can guest publish this on?
@SeedSigner @SpecterDIY @selfcustodykrux #Kern @YTCryptoGuide @satochip
Crypto-Guide retweeted
Want to give an update on AI scans b/c a few people have asked about it. Over the last week and a half we have received a *lot* of results from automated scans using Kimi K3 and similar tools from the bitcoin red team and from individuals. @newtonick, @KeithMukai and some of our other regular contributors have evaluated all of those submitted, with people like @YTCryptoGuide providing great perspectives as well. Our sense right now is that none of the identified issues are considered critical, and that all of them require a compromised malicious coordinator to attempt the given exploit. To date, we haven't seen or heard about any instances of a malicious coordinator attempting to execute one of these kind of attacks. There are some mitigations our devs can put into place to solve for identified edge cases, and we are planning a near-term release with those fixes (targeting the end of this month). To serve their designated purpose, wallet coordinators have to connect to the bitcoin network and are in turn of course exposed to the wider internet. If you have concerns about your wallet coordinator, consider migrating to a fresh install on a separate machine that is not your daily driver where you browse the internet, open emails, etc. etc. Another option is to use a security-oriented Linux live USB like Tails, and then install Sparrow or another coordinator in that environment. There are also projects like DTails (dtails.gitlab.io) that can pre-install Sparrow or other bitcoin tools in a bootable image. There were no SeedSigner-related vulnerabilities identified involving bitcoin at rest, so waiting until our next release before you make a transaction is reasonable too. These AI vulnerability scanning tools will likely continue to surface security issues in many bitcoin tools, and in the broader infosec landscape, for at least the next 12-18 months at least. This will likely continue to be a tumultuous time and is a good reminder for us all to think carefully about our own cold storage setups and what risks we may, and may not, be exposed to. Multi-vendor, multi-sig wallets continue to provide the strongest assurances in the current adversarial environment.
Crypto-Guide retweeted
Someone ordered the fully transparent Smartcard SeedSigner. Combined with the new white PCBs and white buttons gives a great result!
Crypto-Guide retweeted
Highly recommend @YTCryptoGuide for one on one support in the bitcoin space. I’ve learned so much from his channel/privately. New video dropped today regarding the coldcard situation.
youtu.be/GQOoONFuDE0?si=4L1e…
Crypto-Guide retweeted
The amount of sociopathy it takes to still be selling exploitable products to people. What on gods green earth is wrong with you @nvk
Crypto-Guide retweeted
I'm a software engineer with an MSc in Computer Science and 25+ years in the industry. Here's why Coinkite's Coldcard bug isn't an oopsy, it's disqualifying.
Coldcard's seed generation silently fell back to a non-cryptographic "random" number generator for 5 years. Not because crypto is hard, but because Coinkite violated the most basic rule of secure system design: fail closed, never open. When a security-critical path can't be verified, the system refuses to run and throws an error.
It does not quietly substitute something weaker and carry on. This code should have refused to produce a seed. Instead it produced a predictable one and continue silently. ☠️
A company that lets its most critical code path go unverified for half a decade cannot be trusted with your keys.
Throw away your Coldcards. Never buy one again.
