BitcoinReview
Bitcoin.Review

https://Bitcoin.Review

A Podcast and Newsletter review of Bitcoin Software updates and related topics with NVK and guests.

Public Key

npub1qdcakl75gd7wv0nqmmwrz09ddm5tzl7xj8lq2gclng2qzd8up5yqjpzclt

NIP-05 Address

_@bitcoin.review

NIP-57 Address

br@primal.net

Profile Code

nprofile1qqsqxuwm0l2yxl8x8esdahp38jkka6930lrfrls9yv0e59qpxn7q6zqpr3mhxue69uhkummnw3ezumt4w35ku7thv9kxcet59e3k7mgpzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhg38g7cv

Publishing to

nostr.mutinywallet.com

relay.primal.net

relay.damus.io

Author Public Key

npub1qdcakl75gd7wv0nqmmwrz09ddm5tzl7xj8lq2gclng2qzd8up5yqjpzclt

Show more details

Last Notes

2024-09-07 22:06:25

In light of the recent successful extraction of Intel SGX Fuse Keys, is it time to steer clear?
@npub1mxr…0htc and @npub1az9…m8y8 give their take, and stress the importance of combining various security measures in BR074.
https://m.primal.net/Kikw.mov

2024-09-03 20:07:26

Ever wondered what it takes to build a #bitcoin hardware wallet?
@npub1az9…m8y8 and Lloyd Fournier go into some of the logistics involved, in BR073.
https://m.primal.net/KckL.mov

2024-08-28 20:21:37

🚀 BR074 - Fountain Podcasting 2.0 on Nostr, SGX Key Extraction, Nunchuk, Mempool, Floresta, + MORE ft. @npub1unm…d0j2, @npub1mxr…0htc & @npub1az9…m8y8
Listen to the episode:
➡️ Fountain: https://fountain.fm/episode/meY9nyt70HnirLta6MZC
➡️ Spotify: https://tinyurl.com/57c7fzpc
➡️ Amazon: https://tinyurl.com/mtjx7svh
➡️ Apple: https://tinyurl.com/bde34hx6
➡️ YouTube: https://youtu.be/V990d0q62bU
Shownotes:
➡️ Website: https://bitcoin.review/podcast/episode-74
➡️ Substack: https://substack.bitcoin.review/p/br074-fountain-podcasting-20-on-nostr
Oscar discusses with NVK how Fountain is seeking to onboard the podcasting industry to nostr, bringing cross app comments and boosts to podcasting 2.0. 👇
https://m.primal.net/KSMW.mov

2024-08-25 18:33:09

The most successful #bitcoin attacks remain the simplest: social and phishing attacks designed to get you to reveal your seed.
@npub1az9…m8y8 and Lloyd Fournier discuss these common attacks in BR073.
https://m.primal.net/KMfk.mov

2024-08-23 20:10:43

🚀 BR073 - Security Challenges in Bitcoin Hardware Wallets: A Technical Overview ft. Lloyd Fournier, @npub1hea…g9v2 , @npub1emd…c9aw , @npub1r4y…uwud & @npub1az9…m8y8
Listen to the episode:
➡️ Fountain: https://fountain.fm/episode/EFkCsswzEAnxNwEcbUjJ
➡️ Spotify: https://tinyurl.com/mrnf2c74
➡️ Amazon: https://tinyurl.com/2z7e5bmu
➡️ Apple: https://tinyurl.com/wn99nbxn
➡️ YouTube: https://youtu.be/ORFc8CjTjns
Shownotes:
➡️ Website: https://bitcoin.review/podcast/episode-73
➡️ Substack: https://open.substack.com/pub/bitcoinreview/p/br073-security-challenges-in-bitcoin
Craig shares his thoughts around improving security without compromising usability. 👇
https://m.primal.net/KJqT.mov

2024-08-21 08:40:38

A security breach at Indian crypto exchange WazirX resulted in a $230m loss - 45% of their holdings.
The payload is suspected to have been altered to grant the attacker wallet control.
What lessons can we learn from the this latest hack? @npub1az9…m8y8 & @npub1emd…c9aw give their take.
https://m.primal.net/KGWU.mov

2024-08-20 08:46:35

A security breach at a bank linked to Coinbase compromised the personal information of 154 customers, revealing names, bank account numbers, and routing numbers.
Could lawsuits against companies lead to a changing of KYC laws?
@npub1az9…m8y8 , @npub1p4k…cxf8 and @npub1emd…c9aw discuss.
https://m.primal.net/KFZN.mov

2024-08-19 09:26:08

Could some of the 'solutions' to Dark Skippy result in worse security tradeoffs?
Using anti-kepto with the current solution requires exposing the signer to USB, the hardware may not be able to verify the nonce, and there's no Core implementation.
@npub1az9…m8y8 breaks down the issues.
https://m.primal.net/KENx.mov

2024-08-18 18:15:08

What's the next benchmark of security regarding nonces? And how do Schnorr based MPC systems like musig and FROST affect what systems we can and should build?
@npub1az9…m8y8 , @npub1mxr…0htc and @npub1emd…c9aw discuss this in BR072.
https://m.primal.net/KDZD.mov

2024-08-17 21:29:29

Dark Skippy has revealed some legitimate security issues which need to be addressed.
That said, we don’t need to freak out. There are already a number of mitigations in place (and more on the horizon).
@npub1az9…m8y8 and @npub1emd…c9aw discuss some of these mitigations in BR072.
https://m.primal.net/KCdM.mov

2024-08-16 18:01:58

Could there be a way to leverage the fact that the signer and the desktop have BI32 keys pre-shared, in order to defend against attacks like Dark Skippy?
Developers are already discussing this potential. @npub1az9…m8y8 and @npub1emd…c9aw share their thoughts.
https://m.primal.net/KBgN.mov

2024-08-15 15:33:49

- reply

We're on Podverse👇
https://podverse.fm/podcast/8Vm5zo-c5o

2024-08-15 09:33:53

How do bad nonces function between computers and hardware wallets? And what are the mitigations on the signer side?
@npub1p4k…cxf8 , @npub1az9…m8y8 & @npub1emd…c9aw discuss this question in BR072.
https://m.primal.net/KAJE.mov

2024-08-13 09:46:03

If signing devices want to be evil and have the signing device sign malicious transactions, there are simpler ways than leaking keys through maliciously chosen nonces.
@npub1mxr…0htc explains with @npub1az9…m8y8 and @npub1p4k…cxf8 why signed firmware matters in BR072. #DarkSkippy
https://m.primal.net/JyHa.mov

2024-08-12 16:53:28

Are hardware wallets perfect? No.
But #bitcoin security today is still better than at any point in history.
@npub1az9…m8y8 , @npub1emd…c9aw & @npub1mxr…0htc discuss the main considerations for hardware wallets in defending against malicious firmware attacks like Dark Skippy in BR072.
https://m.primal.net/JxSo.mov

2024-08-11 21:03:48

The risk of hidden malicious code is why general purpose computers aren’t suitable for #Bitcoin security.
With embedded hardware, you can have much more confidence that the device has not been tampered with, reducing the risk of attacks like Dark Skippy.
@npub1az9…m8y8 explains in BR072.
https://m.primal.net/JwSq.mov

2024-08-10 15:46:38

When it comes to #Bitcoin, verifying the integrity of your signing device is essential. If you can’t trust the firmware, you’re taking a big risk with your private keys.
@npub1mxr…0htc gives the lowdown in light of the recent Dark Skippy attack revelations, in BR072.
https://m.primal.net/Juvb.mov

2024-08-09 23:12:14

When it comes to #Bitcoin, keeping your private key secret is critical.
The Dark Skippy attack demonstrates how the nonce, which is required for signatures, could potentially reveal the master secret.
@npub1emd…c9aw breaks down the attack in BR072.
https://m.primal.net/JuFK.mov

2024-08-08 21:57:47

🚀 BR072: Dark Skippy Attack, Proton Wallet, Mutiny Sunsets, BDK, Nunchuk +MORE ft. @npub1p4k…cxf8 , @npub1emd…c9aw , @npub1mxr…0htc & @npub1az9…m8y8
Listen to the episode:
➡️ Fountain: https://fountain.fm/episode/HZcDSZ8cuSmBeSpwvFBs
➡️ Spotify: https://open.spotify.com/episode/6s6VrUymh7S0baQetEBoOG?si=9f77b8841ce54841
➡️ Amazon: https://music.amazon.com/podcasts/2e6729fd-6d66-4d74-8cd7-6d7e8e036542/bitcoin-review-podcast-with-nvk-guests
➡️ Apple: https://podcasts.apple.com/us/podcast/br072-dark-skippy-attack-proton-wallet-mutiny-sunsets/id1632017958?i=1000664761167
➡️ YouTube: https://youtu.be/Cy_0d8BiZiI
Shownotes:
➡️ Website: https://bitcoin.review/podcast/episode-72
➡️ Substack: https://substack.bitcoin.review/p/bitcoin-review-podcast-br072-dark?r=2tlln9
Rijndael gives the TLDR on Dark Skippy - an attack that can exfiltrate secret keys from compromised signing devices using malicious firmware. 👇
https://m.primal.net/Jsqp.mov

2024-08-07 08:40:27

The Great Script Restoration aims to restore old #Bitcoin opcodes with Taproot analogs.
Could this allow us to solve problems like L1 custody? @npub1mxr…0htc thinks so.
What do you want to see improved in Bitcoin? Could The Great Script Restoration offer a solution? [BR069]
https://m.primal.net/JqyT.mov

2024-08-06 15:48:17

There are a lot of strong opinions out there about OP_CAT. But what does it actually DO?!
@npub1mxr…0htc takes it back to basics, discussing with @npub1az9…m8y8 what CAT does, and crucially, how previously unresolved risks are mitigated against. [BR069]
https://m.primal.net/JqHN.mov

2024-08-06 11:13:25

- reply

Hey Root, wanna come on the pod and talk about some of this stuff with @npub1az9…m8y8 and guests? We're putting together a panel and we want your brains!

2024-08-05 11:57:02

Ordinals & inscriptions have prompted us to ask questions about how the economics of non-financial transactions could evolve.
Could it disrupt the financial use case of #Bitcoin? And should we/can we mitigate it?
Adam Gibson, Poelstra and @npub1az9…m8y8 debated this very topic in BR029.
https://m.primal.net/JokM.mov

2024-08-03 13:45:32

How do we prevent small UTXOs from being useless due to miner fees outweighing the UTXO?
@npub1az9…m8y8 , @npub16fh…n62p and @npub1hea…g9v2 weigh in on this important question, discussing best practices for UTXO management in BR071.
https://m.primal.net/JmmG.mov

2024-08-02 17:44:32

Speedy Trial? UASF? What would be the best approach to activate OP_CAT?
@npub1az9…m8y8 , @npub1mxr…0htc and Andrew Poelstra discuss the most practical and safe method of potential CAT activation in the future [BR069].
https://m.primal.net/JmEZ.mov

2024-07-23 21:51:59

The intersection of #nostr and #ecash is becoming extremely exciting.
@npub16fh…n62p discusses the efforts of @npub1l2v…ajft in tying your ecash balance to your npub, which offers both huge opportunities as well as raising some important questions about opsec. #BR071
https://nostrcheck.me/media/0371db7fd4437ce63e60dedc313cad6ee8b17fc691fe05231f9a140134fc0d08/a83a6a75f78908979d513297471b96e0f682e482c39e2612e8c33fecbf169f8d.mp4

2024-07-21 23:52:04

v24.07.0 of #Krux brings:
✅Maix Cube Support
✅Frozen Code - Speed & Security Improvement
✅More Single-sig Script Types Support
✅Accounts Support
✅Wallet Customization Options
✅BIP85 Support
✅Wallet Sans Key
✅BBQr
+more
@npub132e…zmdh @ @npub1hea…g9v2 discuss the big update.
https://nostrcheck.me/media/0371db7fd4437ce63e60dedc313cad6ee8b17fc691fe05231f9a140134fc0d08/e11539a6ef16b16554193dfa2f6951b0fbac1d498d8c7d49d902afb88997a331.mp4

2024-07-17 23:43:34

BR071 https://x.com/bitcoinreviewhq/status/1813709901702566085

2024-06-27 00:47:08

🚀 BR070 - Nunchuk, Bitcoin Core, Push Tx, COLDCARD, BDK, RGB, Kraken Hack, Fedimint DNSOutage, Spending Condition Verification + MORE ft. Schmidty, @npub1mxr…0htc & @npub1az9…m8y8
Listen to the episode:
➡️ Fountain: https://fountain.fm/show/ErU0F484HhsaEf8GGobb
➡️ Spotify: https://open.spotify.com/episode/1gLjftI9ApxaTwn6vCbcue?si=0q61ozYAShWUH_RL3Bypkw
➡️ Apple: https://podcasts.apple.com/us/podcast/br070-nunchuk-bitcoin-core-push-tx-coldcard-bdk-rgb/id1632017958?i=1000660372999
➡️ Amazon: https://music.amazon.co.uk/podcasts/2e6729fd-6d66-4d74-8cd7-6d7e8e036542/episodes/f2de082d-e9d4-43f3-ba3c-e44ab5393b7e/bitcoin-review-podcast-with-nvk-guests-br070---nunchuk-bitcoin-core-push-tx-coldcard-bdk-rgb-kraken-hack-fedimint-dnsoutage-spending-condition-verification-more-ft-schmidty-rijndael
➡️ YouTube: https://youtu.be/cgxBvWyLniw
Full shownotes:
➡️ Website: https://bitcoin.review/podcast/episode-70/
➡️ Substack: https://open.substack.com/pub/bitcoinreview/p/br070-nunchuk-bitcoin-core-push-tx?r=2tlln9&utm_campaign=post&utm_medium=web&showWelcomeOnShare=true
👇 NVK discusses with the guests the exciting potential of the new COLDCARD feature - Push Tx.
https://m.primal.net/IzKI.mov

2024-06-22 01:26:33

🚀 BR069 - Cat is out of the bag? OP_CAT ft. @nvknvk , Andrew Poelstra, @Rob1Ham & Rijndael
Listen to the episode:
➡️ Fountain: https://fountain.fm/episode/yqj4ouCyEv6n24nIO7ej
➡️ Spotify: https://open.spotify.com/episode/745hp9L2L7So9i9B3neDHB?si=E1s3hiSQSW-ZRH9BLsZeNA
➡️ Amazon: https://music.amazon.co.uk/podcasts/2e6729fd-6d66-4d74-8cd7-6d7e8e036542/episodes/f55942a7-385a-4892-951f-e9c002bff030/bitcoin-review-podcast-with-nvk-guests-br069---cat-is-out-of-the-bag-op_cat-ft-nvk-andrew-poelstra-rob-hamilton-rijndael
➡️ Apple: https://podcasts.apple.com/us/podcast/br069-cat-is-out-of-the-bag-op-cat-ft-nvk/id1632017958?i=1000659830876
➡️ YouTube: https://youtu.be/4hfQYas5j8c
Full shownotes:
➡️ Substack: https://open.substack.com/pub/bitcoinreview/p/br069-cat-is-out-of-the-bag-op_cat
Andrew lays out a comparison of OP_CAT to other opcodes, making the case for how it results in fewer conflicts with other opcodes which are designed for more specialised use cases.
(Client video upload broken, twitter link instead) https://x.com/bitcoinreviewhq/status/1804292590990430222?s=46

2024-05-09 01:58:18

🚀 BR066 - Mutiny, Secp256k1, Sparrow, COLDCARD, Microstrategy DIDs, NIP-104, FOSS Dev Funding, Mining Centralisation + MORE ft. @npub1ug8…d9ry , @npub1p4k…cxf8 , @npub1qny…95gx , @npub1mxr…0htc & @npub1az9…m8y8
Listen to the episode:
➡️ Fountain: https://fountain.fm/episode/cuIdDQ7quYhoGjvTTxOt
➡️ Spotify: https://open.spotify.com/episode/65NLVoWHuNO1IDxT8Pdqd9?si=Qwreb4eCQ1qcQXTJ7PnyKg
➡️ Amazon: https://music.amazon.co.uk/podcasts/2e6729fd-6d66-4d74-8cd7-6d7e8e036542/episodes/7e37427f-ac9a-41de-b07c-f81e54e88285/bitcoin-review-podcast-with-nvk-guests-br066---mutiny-secp256k1-sparrow-coldcard-microstrategy-dids-nip-104-foss-dev-funding-mining-centralisation-more-ft-steve-lee-future-paul-odell-rijndael
➡️ YouTube: https://youtu.be/tKX6d2nPSkE
Full shownotes:
➡️ Website: https://bitcoin.review/podcast/episode-66/
➡️ Substack: https://open.substack.com/pub/bitcoinreview/p/bitcoin-review-podcast-br066-mutiny

2024-04-27 01:25:15

🚀 BR065 - Samurai Arrests, New BIP Editors, Block Template Centralisation, CATVM, Juice Jacking Attack, OpenJS takeover attempt, BadUSB vulnerability, FixedFloat exploit, + MORE ft. @npub1emd…c9aw @npub1mxr…0htc @npub1u8l…turz @npub1az9…m8y8
Listen to the episode:
➡️ Fountain: https://fountain.fm/episode/iOGOk5lzJIpDWtfXhnkc
➡️ Spotify: https://open.spotify.com/episode/3fl7iqdQJFBrMXsz90fSAy?si=5JWaKIoOTpalGEbGQubycw
➡️ Apple: https://podcasts.apple.com/us/podcast/br065-samurai-arrests-new-bip-editors-block-template/id1632017958?i=1000653732805
➡️ Amazon: https://music.amazon.co.uk/podcasts/2e6729fd-6d66-4d74-8cd7-6d7e8e036542/episodes/54c36be2-df5b-4347-bae6-0f0ebacfc782/bitcoin-review-podcast-with-nvk-guests-br065---samurai-arrests-new-bip-editors-block-template-centralisation-catvm-juice-jacking-attack-openjs-takeover-attempt-badusb-vulnerability-fixedfloat-exploit-more-ft-rob-ben-rijndael
➡️ YouTube: https://youtu.be/YZq-zUTu6Y0
Full shownotes:
➡️ Website: https://bitcoin.review/podcast/episode-65/
➡️ Substack: https://open.substack.com/pub/bitcoinreview/p/br065-samurai-arrests-new-core-bip
👇🎧 NVK and the guests discuss the phenomenon of "valuable" testnet coins. (How does a coin worth nothing end up having a market value?!)
https://m.primal.net/IARD.mov

2024-04-10 02:20:55

🚀BR062 - Sparrow, Mutiny, COLDCARD Q, Bisq, Krux, OP_CAT Vault Prototype + MORE ft. Paul, Craig & Rijndael
Listen to the episode:
Youtube: https://youtu.be/at7eG6KABnU
Fountain: https://tinyurl.com/m4tx784u
Spotify: https://tinyurl.com/2s3w5chv
Google: https://tinyurl.com/4r3tuj2k
Amazon: https://tinyurl.com/3wvu38t6
Full shownotes:
Notes: https://bitcoin.review/podcast/episode-62/
Substack: https://tinyurl.com/4a57pdjk
Paul discusses nostr's potential to bring social network effects to lightning, and how it is allowing for the development of "people oriented wallets".
https://m.primal.net/HtEM.mov

2024-03-30 00:00:50

🚀BR063 - Mutiny, NDK, Phoenixd, Alby, Cashu multinuteral payments, Casa Inheritance, Unchained, GoFetch & ViaBTC Vulnerabilities + MORE ft. @Rob1Ham, @benthecarman, @pablof7z & @nvk
Listen to the episode:
Fountain: https://fountain.fm/episode/HjmqrZTRZR4Qo7jMDpdI
Spotify: https://open.spotify.com/episode/3zt3btcZJVAnft7Ukc2X15?si=1oCuYDqNSsOiwjneqX4Daw
Apple: https://podcasts.apple.com/us/podcast/br063-mutiny-ndk-phoenixd-alby-cashu-multinuteral-payments/id1632017958?i=1000650886824
Google: https://podcasts.google.com/feed/aHR0cHM6Ly9hbmNob3IuZm0vcy85NTAwZmFkOC9wb2RjYXN0L3Jzcw/episode/MWQ2YmY3MTQtZDRkNS00YWJkLWFkZmItOThlNzI2NDZjNjM4?sa=X&ved=0CAUQkfYCahcKEwjIn-icypqFAxUAAAAAHQAAAAAQAQ
Amazon: https://music.amazon.co.uk/podcasts/2e6729fd-6d66-4d74-8cd7-6d7e8e036542/episodes/756e5713-3b3f-48ae-8548-cd14afc61276/bitcoin-review-podcast-with-nvk-guests-br063---mutiny-ndk-phoenixd-alby-cashu-multinuteral-payments-casa-inheritance-unchained-gofetch-viabtc-vulnerabilities-more-ft-rob-ben-pablo
Full shownotes:
Website: https://bitcoin.review/podcast/episode-63/
Substack: https://substack.bitcoin.review/p/br063-mutiny-ndk-phoenixd-alby-cashu
🎧👇 NVK and the guests talk about the recent #MARA block by @PortlandHODL on @mempool
https://m.primal.net/HpfX.mov

2024-03-16 02:57:36

🚀BR062 - Sparrow, Mutiny, COLDCARD Q, Bisq, Krux, OP_CAT Vault Prototype + MORE ft. @npub1mxr…0htc @npub1p4k…cxf8 @npub1hea…g9v2
Listen to the episode:
Youtube: https://youtu.be/at7eG6KABnU
Fountain: https://tinyurl.com/m4tx784u
Spotify: https://tinyurl.com/2s3w5chv
Google: https://tinyurl.com/4r3tuj2k
Amazon: https://tinyurl.com/3wvu38t6
Full shownotes:
Notes: https://bitcoin.review/podcast/episode-62/
Substack: https://tinyurl.com/4a57pdjk
Paul discusses nostr's potential to bring social network effects to lightning, and how it is allowing for the development of "people oriented wallets". 👆
https://m.primal.net/HlVR.mov

2024-02-22 13:59:38

Release post text for nostr:
🚀BR061 - COLDCARD Q, SimpleX, Nutshell, #npub.cash, NDK, Primal, #Nsec.app +MORE ft. @npub1az9…m8y8, @callebtc, @npub1l2v…ajft & @npub1u8l…turz
Listen to the episode:
Youtube: https://youtu.be/aSULfLw_lk8
Fountain: http://tinyurl.com/yku4m6mh
Spotify: http://tinyurl.com/2jnxtuf7
Apple: http://tinyurl.com/vas7y93d
Google: http://tinyurl.com/5dwzurmr
Amazon: http://tinyurl.com/ycxy69aa
Full shownotes:
Notes: https://bitcoin.review/podcast/episode-61
Substack: http://tinyurl.com/228nv29s
Calle, Pablo and NVK talk about the magic of sending lightning and receiving #ecash over #nostr.👆
https://m.primal.net/HeMT.mp4

2024-02-09 13:32:25

- reply

✌️

2024-02-08 22:55:59

🚀BR060 - Sparrow, Tor Connect, NDK, AQUA Wallet, Linux vulnerability, Faketoshi trial + MORE ft. @Rob1Ham, @npub1hea…g9v2, @npub1l2v…ajft & @npub1qny…95gx and @npub1az9…m8y8
Youtube: https://youtu.be/SRwpssg0Gjk
Notes: https://bitcoin.review/podcast/episode-60/
Substack: http://tinyurl.com/bdat6pyy
Fountain: https://fountain.fm/episode/VcP6JRXbUzKpCZHdkpsj
Odell suggests how to speed up CISA. 👇👀
https://video.nostr.build/441758bb391d0a745a00e9bde2f626b76e07b911b5be00e7797306eee7b3f392.mp4

2024-01-26 01:19:44

🚀 BR059 - Quantumcats, Bitcoin Truths, COLDCARD, Mercury Layer, Statechain, nsecbunker, Trezor Hack + MORE ft. Harry, Pablo & Rijndael
Youtube: https://youtu.be/IDdcIDyq4L8
Notes: https://bitcoin.review/podcast/episode-59/
Substack: https://substack.bitcoin.review/p/br059-quantumcats-bitcoin-truths
👆 In this episode the guests share some #Bitcoin truths
Links:
Fountain: http://tinyurl.com/2wth2tr7
Spotify: http://tinyurl.com/32jebd6f
Apple: http://tinyurl.com/mr3axtkr
Amazon: http://tinyurl.com/mr3u343c
Google: http://tinyurl.com/2z64z77x
https://video.nostr.build/3186223cae443af103d08048551f91ac386b22f2fb89ac33059fa6562ab87f70.mp4

2023-03-02 15:42:26

Hello World
https://Bitcoin.Review Nostr account.
Pod announcements, show notes and eventually show feed will be on Nostr.