nick

https://frostsnap.com

nostr=neonet
utxo.club

Public Key

npub1j8d6h8mzvc8f2fvysrf09nlkmn7m2ylj32zl5na4tm5e8fd5dqysrg26k2

NIP-05 Address

nick@frostsnap.com

NIP-57 Address

warlikesarah97@walletofsatoshi.com

Profile Code

nprofile1qqsfrkatna3xvr54ykzgp5hjelmdeld4z0eg4p06f764a6vn5k6xszgpzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtcpr4mhxue69uhkummnw3ezucnfw33k76twv4ezuum0vd5kzmp07nv0ca

Publishing to

relay.primal.net

nostr.bitcoiner.social

nostr-pub.semisol.dev

Author Public Key

npub1j8d6h8mzvc8f2fvysrf09nlkmn7m2ylj32zl5na4tm5e8fd5dqysrg26k2

Show more details

Last Notes

2024-08-13 08:42:03

oh yeah i forgot to bring this up, it's very easy to scrape every image uploaded to primal
#note1c5m…gqzn

2024-08-13 08:35:11

- reply

need proof of home address before image rights

2024-08-06 18:17:54

- reply

In that case the attack could simply exfiltrate the master xpriv

2024-08-05 18:03:29

Today we disclose Dark Skippy - a powerful new method for a malicious signing device to leak secret keys.
With a modified signing function, a device can efficiently and covertly exfiltrate a master secret seed by embedding it within transaction signatures
https://darkskippy.com/demo.mp4
If an attacker manages to corrupt a signing device, Dark Skippy can deliberately use weak & low entropy secret nonces to embed chunks of the seed words into transaction signatures.
It takes just two input signatures to leak a 12 word seedphrase onto the Bitcoin blockchain.
The attacker can watch on-chain until they spot an affected transaction, unblind and invert the low entropy nonces using an algorithm like Pollard's Kangaroo algorithm to learn the master secret seed.
Then the attacker can wait and steal the funds whenever they decide best.
Despite this attack vector not being new, we believe that Dark Skippy is now the best-in-class attack for malicious signing devices.
- The attack is impractical to detect
- Requires no additional communication channels
- Effective on stateless devices
- Exfils master secret
Beyond ensuring your device firmware is genuine and honest (opensource), mitigations include anti-exfil signing protocols and we present some new ideas for additions to PSBT specifications to disrupt this attack.
We encourage mitigation discussion and implementation exploration.
This attack highlights the importance of verifying and securing your device's firmware, and the danger of sharing stateless signing devices with other people.
We will be publicly releasing our code later this year.
Authors: @npub1xh8…gst6 (follow him so he gets onto nostr), Robin Linus, and myself.
If you have any concerns or questions we recommend checking out the FAQ page on our website:
https://darkskippy.com

2024-08-05 05:13:49

Check out our latest prototypes for the next generation of Bitcoin self-custody!
https://m.primal.net/JoTk.png
https://frostsnap.com

2024-07-10 10:59:38

cool post from @npub1l6u…zvtg
https://conduition.io/coding/ticketmaster/
My friend sent to me,
"Wait I know this person, they wrote some incredible FROST posts and are on nostr!"

2024-07-08 12:17:32

1996 pepsi website background https://m.primal.net/JKcu.png

2024-06-08 14:45:55

- reply

attention span is fucked gm

2024-06-08 11:00:36

it's completely insane that FOSS Android OSs only work on pixels

2024-05-29 06:57:24

- reply

pasta + lao gan ma chilli oil

2024-05-29 04:52:57

melbourne tap water undefeated taste dont care what is in it

2024-05-20 17:34:12

Unveiling the latest frostsnap devices sometime this week 🔜
A small step in our radical shift for bitcoin self-custody tech.
Nostr gets to see it first

2024-05-13 05:53:11

- reply

(i also own this tshirt)

2024-05-13 05:45:36

signs uniqlo has topped:
- founder became the wealthiest man in japan without anyone knowing.
- every guy in asia owns the same damn tshirt.

2024-05-07 15:25:10

do clients embed mp3 players like they embed mp4s?
https://utxo.club/assets/ForgoneDestruction.mp3

2024-05-04 08:52:26

- reply

hi my name is
hi my name is
hi my name is
chk chk 26k2

2024-05-01 04:10:23

Someone in the apartment above decided to start hammering out their seedphrase at 6am

2024-04-24 02:26:38

- reply

sponsored location pizza and beer? must be nice

2024-04-23 14:50:28

- reply

need to keep collecting these
https://m.primal.net/HyzZ.png
https://m.primal.net/HyzZ.png

2024-04-23 14:45:43

the most retarded bitcoin security advice can be found on reddit

2024-04-22 11:11:03

- reply

BUSHBASH CONTENT?!

2024-04-21 04:06:06

who tf drinks canned water.. liquid death should be 20%abv+

2024-04-18 05:14:26

If you want to clear up space on your linux btw machine, run
ncdu /
https://m.primal.net/Hwgd.png

2024-04-16 04:41:50

- reply

https://bchblockexplorer.com/address/1SendNickBitcoin777777777778j1LcQ

2024-04-16 04:39:51

bitcoin cash is a testnet

2024-04-15 05:45:29

really wish i made a vanity npub before i got started with nostr

2024-04-14 10:34:21

- reply

it's called Love on the Spectrum

2024-04-13 02:52:04

Frostsnap is bringing improvements to the entire Bitcoin experience.
For the digital gold HODLers, and the P2P cash enjoyers,
For the new bitcoiners, and the shadowy super coders.
For those who need simplicity, and for those who always verify.
https://frostsnap.com/introducing-frostsnap.html

2024-04-12 18:57:28

something needs to be done about Hello from Rust Nostr Python bindings posters
https://m.primal.net/HuPC.png
https://m.primal.net/HuPE.png

2024-04-09 06:04:49

- reply

what monty python does to a mf

2024-04-09 02:56:37

they were so real for this
https://m.primal.net/HsnO.png

2024-04-08 08:22:09

https://utxo.club/assets/12_trans2.png

2024-03-15 14:41:46

- reply

True definitely makes sense there!

2024-03-15 14:37:43

- reply

that makes it less cash-like imo, what if i want to redeem it without my pubkey? Or forward it to someone else without redeeming

2024-03-15 08:56:43

- reply

Great question! One of the (extremely few) downsides with FROST is that you have to choose which signers will be participating at the start of the signing session.
The signing quorum signs under an agreed set of nonces belonging to the signing participants:
In this case, {nonce from device "Stay", nonce from device "Frosty"}
and you can't change this halfway though the signing session.
You elude an interesting idea though, the app could auto-detect at least the first signer and only make you select the other t-1 signers.

2024-03-13 08:57:16

- reply

Oh yes absolutely! I'm working on paper backups as we speak!
https://m.primal.net/HZAZ.gif

2024-03-13 08:40:01

- reply

You could in theory do this offline. The device firmware itself and the interactiveness benefits (with phone/laptop coordinator) with FROST are more important for security!

2024-03-13 05:02:51

- reply

Yes! Such an exciting prospect
https://gist.github.com/nickfarrow/64c2e65191cde6a1a47bbd4572bf8cf8/

2024-02-13 04:04:16

- reply

Great point they can just interpolate existing keys, but yes i believe the security is weakened - maybe ok in certain contexts. By omitting the commitment round, you allow for a misbehaving participant to bias the distribution of key generation outcomes by selectively complaining/failing (mentioned in FROST paper sec 2.3).
@npub1l6u…zvtg thanks again for these great posts , @npub160t…yjc9 you might be interested in checking them out:
https://conduition.io/cryptography/shamir/

2024-02-11 14:36:58

- reply

You can't really take an existing secret key and "join" with that key being your secret share in FROST. Your secret polynomial is only an input to key generation and not what you sign with.
Undertaking key generation with the other parties will give you a secret share that depends on their (and your own) contributions

2024-02-02 14:24:30

🐔🐔🐔🐔🐔🐔🐔🐔🐔🐔🐔🐔🐔🐔🐔🐔
🐔NOSTR IS THE REAL BIRDAPP🐔
🐔🐔🐔🐔🐔🐔🐔🐔🐔🐔🐔🐔🐔🐔🐔🐔
🐥 CHICKEN LIVESTREAM AVATARS - ONLY ON NOSTR 🐥
https://utxo.club/uploads/clucked_up_nostr.mp4

2024-02-02 03:37:49

- reply

rip i think it is only working on primal desktop

2024-02-02 03:17:27

reply with 🐔 or 🐀 if you see one move in my nostr avatar

2024-01-12 02:40:34

- reply

pretty sure it was!

2023-12-12 15:14:30

Check out our latest Frostsnap prototypes.
Hardware wizardry @npub164h…9e55
App ingenuity @npub1xh8…gst6
Welcome to the future of #bitcoin self-custody ❄
https://frostsnap.com/demo.mp4
Frostsnap is a mobile-first hardware wallet 📲
Begin your self-custody journey by plugging Frostsnap devices into your phone and naming them via the Frostsnap app.
Choose a security threshold and begin key generation to easily set up a multisig wallet in a matter of seconds.
In this demo we create a 2-of-3 multisig between the devices. A threshold of two means we need any two of the three devices to sign in order to spend funds from the wallet. ❄️🔒
Daisy-chained Frostsnap devices participate in distributed key generation, each contributing entropy to a joint secret shared across multiple devices.
No single device knows the overall secret, only a fragment.
You, the user, can easily verify the key was created securely ✅
After creating a new key, you can hide your Frostsnap devices in different locations or share them among people you trust. 🏘️🏝️👨‍⚖️
When it comes time to make a bitcoin transaction or sign a Nostr post under your Frostsnap key, you must sign on multiple devices.
Frostsnap is crafting a whole new Bitcoin experience,
And we're fixing the problems of self-custody today:
security, accessibility, cost, and privacy.
Frostsnap is making #bitcoin ownership easy, personalized, and secure.
Stay Frosty ❄️

2023-11-30 13:17:50

- reply

refollowed a lot of ppl, best i can do without digging into event logs..

2023-11-30 13:16:21

- reply

was wondering my feed was not loading..

2023-11-30 13:11:08

oman I somehow lost everyone I was following while using primal

2023-11-21 04:03:32

Initially, Frostsnap started out as scientific research for our own use.
However, along the way we've realised that the cryptography not only allows for much better multisig security and privacy,
But Frostsnap can provide major improvements to the **entire Bitcoin custody experience**.
https://utxo.club/assets/frostywizard.png
And not just for multisig, but even for users with just a single device ❄

2023-07-04 10:13:11

- reply

Does pheonix give you lightning addresses 👀?

2023-07-03 18:27:53

- reply

+1 only thing I have enjoyed on my friend's VR so far... And some "Bar fight simulator" is a good laugh

2023-07-02 13:50:59

I don't have a lightning address at the moment because I haven't implemented lightning addresses on core lightning for SatSale. Not going custodial