Last Notes
So in 2026 it's Lezzie Borden, eh?
Le sigh.
https://blossom.primal.net/0c8421db7195e6cbde22f13f373c44600e7669ba6ec55ab1266bc473acc54788.mp4
https://blossom.primal.net/ce6d567d7eca21da6e676458a757c5e64fdfa4b66539d38468233f3d3ef875c4.gif
I was talking to secondborn about a scene in The Office when firstborn walked up. He said "Which one was Robert California?"
My wife immediately pipes up with "The Lizard King."
(This left him more confused while secondborn just nodded knowingly)
I am so blessed to have her.
There are guys out there with women that will stop them from playing GTAVI and might kill his kids.
Mine is my best friend and has an equally broken give-a-shit-er.
What's happening?
I have SATs in cake wallet, in cold storage, on strike, in wallet of satoshi and rizful. No problems with any of them right now.
The "Mitch McConnell' that's back, is what that chick saw in that airplane.
https://blossom.primal.net/158e0ad4d5e63d2976676f2d0b1c1e95598c6fa83ea89ecbbb8ab820f6c3df72.mp4
I think so. I observed them observing me.
The tesseract is deep.
https://npub1vp8fdcyejd4pqjyrjk9sgz68vuhq7pyvnzk8j0ehlljvwgp8n6eqsrnpsw.blossom.band/2c23b46b081270cedb56b68b6abea01b55d935ee4868947a27b39d0ac1f08d35.png
Das ist das lustigste und gleichzeitig beste Video zum Thema integration.
Da werden Menschen gefragt ob sie abgeschobene Vergewaltiger und Messerstecher wieder zurück holen wollen.
Der dumme Deutsche unterschreibt sowas, wärend der Ausländer diesen Leuten den Kopf eigenhändig abschneiden will.
Was Deutschland braucht sind Integrationskurse für Deutsche, diese Menschen haben den Kontakt zur Realität komplett verloren.
Viele Deutsche sind geistig behindert.
https://x.com/niusde_/status/2098801810324517264/video/1?s=46
Trump: “I’m giving every American $5000 to defeat the Socialists!”
i was already burning out then coldcard took out my legs
Run Jade fully air-gapped on your phone. Unlock, receive, and send all pass through QR codes between Jade and the Blockstream app.
Every address and transaction gets verified on screen before you use it.
https://youtube.com/shorts/R5bX31gsihI?feature=share
there is also custom sorting built in to the web app fwiw https://citadelwire.com
i will make individual npubs for these for you
blockstream.info has been rebuilt, for Bitcoin and @nprofile…0cnd
Watch the next block fill. Read real analysis on any transaction. Check Liquid's backing yourself, in one dashboard.
Everything new:
https://blog.blockstream.com/blockstream-explorer-rebuilt/
https://blossom.primal.net/2ec753b1682370549443b59b95c5a435f6065ab7ca1aaab8fb1b59ade714a158.jpg
2% allocation. If Bitcoin doesn't perform, the portfolio recovers. If it continues toward $200T, the effect is outsized.
@npub1qg8…24kw on why pension funds don't need to form an opinion on how far Bitcoin goes, just stay the course and don't rebalance.
https://youtube.com/shorts/FQgbfKSAxnE?feature=share
Core Lightning 26.06.7 is out, and every node runner should upgrade.
It fixes issues reported over the past three weeks, during a sharp rise in AI-generated reports across open source Bitcoin. No vulnerability is known to be actively exploited. Binaries are out now. Source follows in 14 days.
https://blog.blockstream.com/core-lightning-26-06-7/
https://blossom.primal.net/542d4e88f569c28d7eb3b23695c1d0504a6e550074089c2aa6a3d1aff086e6bb.jpg
Finding the right post-quantum signature for SHRINCS meant testing 25,935 parameter sets.
Blockstream Research built an open-source explorer where wallet developers, protocol researchers, and anyone else set the weights that match their case.
Full post: https://blog.blockstream.com/searching-for-shrincs-parameters/
https://blossom.primal.net/c333e4a33821ac2b31e269bdf297b3e7a0ae17d20e15abbc9275ae6978f72736.jpg
On 15 August 1971 the dollar left gold, and a savings account stopped holding its value. @npub1h88…pz20 walks through what changed that night and why it still matters.
Bitcoin in self-custody with Blockstream Jade is money nobody can dilute or freeze.
Full episode: https://youtu.be/PaUAgRUbeNM
Lunar eclipse last night, taken on Fuji xpro1 with 300mm lens
https://blossom.primal.net/f3bf7819187318055cf73e138e2f1d59e0785d59654b3ea18518cf362ebdc4ba.jpg
Core Lightning has been triaging a high volume of AI-generated CVE reports over recent weeks. Several are real, and a coordinated fix is underway.
What to do now: do not shut your node down. Restart it with --offline.
That flag stops peer connections, so no payments route in, out or through your node. It keeps running, which means it keeps watching the chain and can still act if a counterparty force-closes a channel. A node that is powered off cannot do that, and that is why switching off is the worse option.
On @nprofile…cnv5 or @nprofile…06f3 this is a startup setting for Core Lightning, not a toggle in the dashboard.
What happens next: signed binaries will be published. Verify the signatures before you install, then bring your node back online. Source and reproducible builds follow afterwards so anyone can audit what changed.
https://github.com/ElementsProject/lightning
https://blossom.primal.net/bcec7c03e9fb2d19a396a12a3716768b6c3ab7bd345cec13f49a83627bff596d.jpg
If you run Core Lightning: when the release is published: upgrade with signed binaries, or start your node with `--offline`.
Details stay under embargo for two weeks. Previous releases, including 26.04, are unsupported.
Full details when the embargo lifts. The 26.09 release is still planned for late September.
#nevent1q…r5qk
You can build a Bitcoin wallet with nothing but a coin and a word list. Jade does the one step you cannot do by hand.
Flip a coin 121 times, find the words offline, and pick your final word from the options Jade calculates. Here is what rolling your own entropy actually looks like.
https://youtube.com/shorts/6P0waV3IP5M?feature=share
Every method written up, coins, dice, poker cards, even tarot, with the binary word tables you need to do it offline.
help.blockstream.com/generate-recovery-phrase-offline
Jade air-gapped QR support is new in the Blockstream desktop app.
Run Jade Plus fully air-gapped and the device never touches your computer. PIN unlock, wallet import, address checks and signing all happen over QR codes, read by the camera on the device.
https://youtube.com/shorts/qsvqLNFjC1k?feature=share
Jade firmware 1.0.41 is out. It contains security updates and every user should upgrade as soon as they safely can.
Jade is not affected by the Coldcard random number vulnerability. The reasoning, and everything we changed, is in the post.
https://blog.blockstream.com/reflections-on-the-coldcard-fallout/
https://blossom.primal.net/cef48d880728aed2341dbdf827f0d8dce8448e8c9d5c51971440cef46c5d2680.png
You can now pick up a Jade at a UPS Access Point in the US and Canada instead of having it shipped to your house.
At checkout, choose pickup and select a nearby UPS Store, CVS, or similar.
https://store.blockstream.com/
https://blossom.primal.net/79437f714b365c16fa86cd8554b1f11a08ff20ca5463f34d21b2f80c5c75852d.jpg
Your Jade never has to touch the computer.
QR Connect and air-gapped signing land in the desktop app, so Blockstream Jade pairs, unlocks and signs entirely over QR codes.
Lightning arrives too, in Beta. Switch it on in settings, no second app to run.
https://blog.blockstream.com/blockstream-app-desktop-3-5-0/
https://blossom.primal.net/015cb77bb17443402b1fd142e7b1c627daa03e31984bf4cd0dd1ecbd501b07d9.png
Sync an entire Bitcoin wallet in seconds.
QuickSync is a new open-source wallet scanning protocol by Blockstream that turns hundreds of address lookups into one descriptor request, dramatically cutting sync time when using the Blockstream Explorer API.
https://blossom.primal.net/82d0ede9f7f7c8616fd5c866d02428f42f9f1ed8ccb00d1eeed76c356d42c796.gif
Get an API key today: https://dashboard.blockstream.info
Blockstream Research put post-quantum signatures on Jade Plus and three other wallets. All four signed.
H/t Oleksandr Kurbatov and Dmytrii Kurbatov for leading the work. Reviewed by Jonas Nick.
https://blossom.primal.net/52da2332f26e865bb1e2e42701c7d383196bd79e0b0008f3ecf465d197344cc9.mp4
#nevent1q…srh9
Also reviewed by Mike Kudinov, Viktor Mashtaliar and Yaroslava Chopa.
Thanks also to Trezor, Ledger and @nprofile…0kcc, who helped the team get this running on their hardware.
https://blog.blockstream.com/hardware-wallets-post-quantum-signatures/
This bitcoin pump must have something to do with the bond market intervention?
QR menus send me into a rage
AI models are rogue hacking critical infrastructure but Siri still can’t understand anything I say.
nope, taking a break from podcasts/social
A popular concern says post-quantum signatures cannot run on the hardware wallets people already own.
Blockstream Research implemented hash-based schemes on four popular devices. All four signed. SLH-DSA, the NIST standard, in about two minutes at worst.
https://blog.blockstream.com/hardware-wallets-post-quantum-signatures/
https://blossom.primal.net/ace21f194d48f9cd1415e91d07c6c5fda5b65001d7f0470fc968d89945173641.jpg
Owning your money outright is a financial edge that's hard to take away.
@nprofile…l07l lays it out in Exit Manual Episode #45, and the Blockstream app makes it real.
https://youtu.be/NkMUbao6bQY
Blockstream Jade can hold a duress PIN, a second PIN separate from your real one. Enter it under pressure and Jade erases the wallet, so what's handed over is an empty device.
There is no undo. Back up your recovery phrase first, and choose carefully when to use it.
https://youtube.com/shorts/m4JnjMQO78A
How to enable a duress PIN on Jade:
https://help.blockstream.com/blockstream-jade/add-more-security-functionality/enable-a-duress-pin
https://blossom.primal.net/295d6784bf925c33e5491879a8863c867ba722bac4e43045dc14aa4ff56c3f06.png
https://blossom.primal.net/3a26a8ccfb79f4fa4715a4d459a07eb62e654b65e02c56473d2ce9099df79529.jpg
Like many open source Bitcoin projects, Core Lightning has received a number of AI-generated CVE reports from multiple sources over the past 10 days. Our small team, together with several invaluable open source contributors, has been working intensively to validate and triage these reports and develop fixes where needed.
We’re now working through a broader remediation strategy. The first step is a point release containing many of these fixes, and we will strongly recommend upgrading. We’re aiming to have an initial version of the point release available within the next few days.
Jade doesn’t use a physical secure element.
We just published a full post on how the Virtual Secure Element works:
https://blog.blockstream.com/jade-virtual-secure-element/
https://blossom.primal.net/3edfbdcedb57ced1f239e4c2e9e231cdbfb7e0cd6206d72762547ab89643e3b8.png
Your recovery phrase sits encrypted on the device. Unlocking it needs the PIN you type on Jade and a key share from a blind oracle. Neither is enough by itself.
The oracle never sees the real PIN or any wallet data. It only gets a scrambled version that includes a secret unique to that particular Jade.
Three wrong PINs and both sides wipe. Device and oracle. After that the encrypted data is permanently unusable without the recovery phrase.
A locked Jade holds nothing an attacker can use alone.
Everything is open source, firmware, hardware, and the oracle. You can run the oracle yourself, or skip it completely and use SeedQR or type the recovery phrase.
The official Core Lightning app from Blockstream is a dashboard you host yourself, connected straight to your own node.
Account Events tracks every sat across every channel, day by day, so you can see exactly where your liquidity has been.
https://blossom.primal.net/f7b51dfb10950b4ac33f727c63032c9c9b2f9adc5b3552649de68a4f122f969e.png
Self hosted, and it talks to your node over an encrypted Commando connection with rune permissions you control. One-click on @nprofile…cnv5 or @nprofile…06f3, or run it from source:
https://github.com/ElementsProject/cln-application
Using LLMs to find bugs is well trodden. Using them to help prove a cryptographic library correct is not.
Proof of concept from Jonas Nick, Director of Blockstream Research, with remix7531.
https://delvingbitcoin.org/t/libshrincs-a-c-implementation-with-a-machine-checked-security-proof/2795
https://blossom.primal.net/8ddbdff3489313ecae916b9985cf5e92e5bb377df68186255d610d74cd48f793.jpg
https://blossom.primal.net/fc3303dfcfd19142f5f09cf10cd221f4f04cc657cb0a3c6d2638c2d90210cb1d.jpg
New research from Kyrylo Riabov and Artem Chystiakov.
This Blockstream paper explores enforcing asset rules onchain with a Simplicity covenant on the @nprofile…0cnd. Ordinary transfers need no issuer signature, and the holder keeps their own keys.
https://blossom.primal.net/54a42040f6094c7dbe8479a415cc9fcbe832ed2fefcbebd631eb17b4952ff743.png
https://github.com/Arvolear/research-papers/blob/master/simplicity/DAMP.pdf
1972 was not the last time humans traveled beyond Earth’s orbit. Artemis II mission just went around the moon earlier this year.
This full interview was hard to listen to and revealed Fetterman to have zero intellectual depth.
The guy is a complete simpleton, I have no idea why he’s a senator.
A passphrase adds an advanced layer of protection to the Bitcoin self-custody setup you already have, with nothing to buy.
Your existing funds don't move on their own. Back up the passphrase as carefully as your recovery phrase, then send them across.
https://youtube.com/shorts/XdhNn5cIEd8
Lose the passphrase and the funds are gone, even if you still hold your recovery phrase. It isn't a password you can reset, it's part of the key.
Jade shows an 8 character fingerprint each session. If it doesn't match, you've typo'd.
Passphrases are the BIP-39 standard, not a Jade feature, so the same one works on any wallet that supports it. Case and spaces count.
Step by step setup on Jade:
https://help.blockstream.com/blockstream-jade/add-more-security-functionality/add-a-bip39-passphrase-for-jade
https://blossom.primal.net/08db90981e8e57c1d1a786a4a57375dc274a13cf4f56616fe4beaf3ff9185948.webp
my guides never had people connect an unlocked coldcard to their computer
idk but why would he tell me to tell people there was a bug but not fix it
he did not tell me anything about the bug except that users of my guide were not affected
i honestly did not remember that until you posted it the other day, it was 5 years ago
if you listen to the clip i clearly say he wouldnt tell me what the vulnerability was
supposedly it was a usb bug, which lines up since my guides were airgap
