When playing around with these tools (Which I know you should not use for your phrase to store funds), it seems to me the entropy field which can be made visible by checking off the "Show entropy details" box in the BIP39 tool and the master secret field in the SLIP39 tool are the same. They are both hexadecimal values and can be 128 or 256 bits.

Is the SLIP39 master secret also generated by entropy when generating a SLIP 39 Shamir Backup? How is the master secret generated?

I found this article explaining step by step how a BIP39 phrase is generated and it starts with entropy, wouldn't SLIP39 be the same by starting with entropy?

https://medium.com/coinmonks/mnemonic-generation-bip39-simply-explained-e9ac18db9477

https://iancoleman.io/bip39/ https://iancoleman.io/slip39/

cross-posted from: https://lemmy.blahaj.zone/post/46601369

The post explains the background behind the recently discovered random number generator bug in a COLDCARD bitcoin hardware wallet.

What mistakes were made, when, and why.

TLDR:

After a competitor has introduced a "clone" of a COLDCARD, Coinkite, the maker of COLDCARD has overreacted by dropping all the GPL licensed code from its codebase, including a certain cryptographic library.

Coinkite managed to replace it with another publicly available library (libngu), allegedly written by unaffiliated anonymous author, who was later identified as a sockpuppet of the Coinkte's own CTO.

After a mistake has been introduced into the code and a faulty check did not detect it at compile time, the knowingly bad software RNG fallback by the libngu, instead of the hardware RNG, have been combined with the software random number generator included in the MicroPython interpreter, producing bitcoin wallet keys with low enough entropy to be guessed by the attacker.

Lessons learned:

1. Do not make rush decisions when dealing with cryptography.
2. Avoid creating a sock-puppet accounts when you're already a public figure, unless you want to look like a criminal when the shit hits the fan.

Archive link, because I feel like the shit has not hit the biggest fan yet : https://archive.is/JvlLf

cross-posted from: https://lemmy.blahaj.zone/post/45777708

cross-posted from: https://lemmy.blahaj.zone/post/45151140

cross-posted from: https://lemmy.blahaj.zone/post/44435008

Looks like testnet5 plans to remove the difficulty exception entirely, i hope this works

pogolo will be one of the furst self-hostable pools to support it btw :3

cross-posted from: https://lemmy.blahaj.zone/post/43857273

cross-posted from: https://lemmy.blahaj.zone/post/43857137

cross-posted from: https://lemmy.blahaj.zone/post/43671275

Now with SV2 support! https://fxtwitter.com/StratumV2/status/2062892299579691266

cross-posted from: https://lemmy.blahaj.zone/post/43562191

cross-posted from: https://lemmy.blahaj.zone/post/43380341

this also means theres a docker release :3 have fun mining!

Trading was halted by the Bisq team, by raising the minimal required trading protocol version.

Only active trade offers could've been affected. The local wallet is safe

How did the exploit happen?

In short, the exploit was caused by a missing validation that should have rejected negative input values provided by the taker.

The maker and taker must use the same miner fee. That fee value is provided by the taker.

The attacker supplied a negative miner fee.

When the maker calculated the multisig output amount — which includes the miner fee for the payout transaction — the negative value reduced the multisig amount to 0.001 BTC, while the remaining funds were redirected to the taker’s change output.

cross-posted from: https://lemmy.blahaj.zone/post/41562511

cross-posted from: https://lemmy.blahaj.zone/post/41550753

Notable changes:

• mempool clustering is released, and removed the CPFP carveout in previous versions
• RBF validation has been tightened (see https://delvingbitcoin.org/t/an-overview-of-the-cluster-mempool-proposal/393#rbf-can-now-be-made-incentive-compatible-for-miners-11)
• -privatebroadcast added to sendrawtransaction RPC, to broadcast over tor/i2p only
• an asmap has been embedded and can be enabled with -asmap or -asmap=1
• default dbcache has been upped to 1024 on systems with more than 4096MiB of ram

other changes in the linked release notes

cross-posted from: https://lemmy.blahaj.zone/post/41456180

2026 is the year of mining decentralization, mark my words

only 5th/s on the miner that won as well! buy a bitaxe/nerdaxe, its great :3

cross-posted from: https://lemmy.blahaj.zone/post/40960337

cross-posted from: https://lemmy.blahaj.zone/post/40835127

"Who Hijacked Bitcoin? Steve Patterson and Aaron Day on DarkHorse"

As a fan of BTC I found this episode very interesting. I wish I had know this stuff earlier as it would have changed my perspective on BTC, such as the ideological differences between BTC and BTC Cash.