The Bitcoin Brief Goes LIVE

Bitcoin is close to becoming worthless.

Now what's the Bitcoin? Bitcoin's like rat poison. Yeah. Oh. The greatest scam in history. Let's get it. Bitcoin will go to fucking zero.

Welcome

back to the Bitcoin Brief, the show where me and q and a catch up every two weeks to talk about Bitcoin, privacy, open source, keeping your Bitcoin secure, and the news and software updates that matter.

I just wanted to say a massive thank you to everyone who's been supporting Ungovernable Misfits, and a big thank you to Foundation Devices for supporting the show. If you haven't already checked them out, go to foundation.xyzed.

They make cipherpunk tools for fuckwits, and anyone can use this, even me. If you have any questions or you want to reach out, feel free, and I'll be happy to go through things with you. For anything super technical, I'll pass you on to queue. If you wanna buy one of these incredible passports, use the code ungovernable.

It will get you a discount, and it will let them know that I'm shilling. I'd also like to say a huge thank you to the Cake Wallet team. Not only are they supporting this show, but they're also bringing out some incredible features.

For those of you who actually use Bitcoin and actually care about their privacy and security, Cakewallet make it incredibly simple for you to live outside of the traditional financial system.

You can use Cake Pay within the app to buy gift cards for food, petrol, and whatever else you might need day to day. You can use silent payments, and, of course, you can use Monero. You can connect both Bitcoin and Monero nodes, use coin control, and this team are constantly innovating.

And I'm really excited to be working with them. If you have any questions, you can reach out to me, but check them out at cakewallet.com. Download the APK or start using this today on Mac, Windows, Linux, iPhone, or, of course, your Android device.

Enjoy the show. Said three two one, and then there was another 54321? Yes. I did notice that. I didn't know whether you were gonna call it out, but yeah. So we're we're testing well, it's not new software, is it? It's a free Internet Friday software, but we're using it to record record the brief, hence the the additional countdown. But

yeah. How are you, mate? Very good. Very good. A bit nervous about this this setup. I don't know what the hell has happened to my my other one. It's pretty fucked me off. But other than that, very good, mate. Good to catch up you. Are we going are we going for unedited?

You're just gonna we're just gonna ship it and see what happens? We're gonna have to. Yeah. We're gonna have to because I can never ever edit after we record with this software on now because it just does everything into one track or it does multiple tracks, but nothing aligns.

So, yeah, this is gonna be I I think we've done one other, like, unedited brief, haven't we? The the the listeners are used to it now. They hear us rambling on on Ed's dot feed and set Friday. So That's true. That's true. It's normally Seth, though, that they really hear rambling. So Yes. We'll keep it to a minimum.

Things good to your end? How's the North Pole? Freezing, mate. I'm sat here with a puffer jacket and thermals and woolly socks, but other than that, it's very good. How is it in your shithole country?

Well, the weather's pretty good, actually. I've got sitting here with a very red sunburnt face yesterday. It was a it was a weird day. Went to watch some car racing with my dad. And it was one of those days where I didn't I couldn't take the hoodie off all day, but I got sunburnt.

Okay. So it wasn't hot, but the sun was out and there was no clouds. Like a veal going against the sun for the first time. Sunglasses on all day, and now I have panda eyes and a very red forehead.

I have to say, I talk shit on The UK nonstop. But one thing I say all the time to our missus is you cannot beat you actually cannot beat a good day British summer. And I don't know if that's because you get such little good weather that when you do have the good weather, you really make the most of it. But, like, a 22,

23 degree, not too hot, bit of a breeze, summertime, few drinks in a pub garden, Like, that I don't think is as good anywhere else in the world, but you only get it, like, I don't know, ten, fifteen days of the year.

Well, yeah. It's like it's like giving a crack addict a a bag of drugs when they're going through withdrawal. They're gonna jump by it. Right? So it's the same as scripts in the sun. That's true. That's true. Yeah. Anyway, I was I was just trying to throw The UK a bone there. You're not you're not completely

dead to me yet. You have about ten days in you that are that are reasonable. Glad to hear it. Glad to hear it. Anything else been going on, mate? Any any announcements or any anything to make listeners aware of?

Nope. Nope. It's all Fiat world stuff at the moment, which none of it I can talk about, but some of it might bleed into our weird little world in the next sort of, I don't know, eighteen months. But until then, no. All very boring.

Just plodding along. What about you? Still drowning in work and just just nonstop? Much. Just twenty five hours day. You know, Cube does twenty five hours a day, listeners. I've got a special watch.

And I press it when it gets to 5PM, and it it it, like, pauses everybody else for an hour. Mhmm. You squeeze that extra hour in. That's why it's so productive. Yeah. Yeah. Yeah. Busy. Busy. Busy. Busy.

Lots going on. Obviously, still going through, like, the the hype cycle of the prime launch. Mhmm. Prime time going on. We've done week two last Tuesday and Freedom's out Friday listeners also got a repeat of that so that you can see you, you know, I did a a guided onboarding of passport prime with Envoy

just to show you guys what that's all about and got another four weeks of that. Week three sorry. Yeah. Another four weeks. Week three starts tomorrow and that's gonna be all about the the Bitcoin Wallet app on Passport Prime. You can come and visit us in our virtual

office in the auditorium, and I'll give you a full showcase. You can ask questions and get involved. Quite enjoying doing those, actually. It's a lot of work to prep for it, but they are good fun, and it's great to to get to interact with with the the users. So enjoying those.

And what else is oh, Vegas. Going to Vegas on Sunday. That's the big one. Meet half of the team out there. We've got a booth. So if you are listening to this and you're heading in to Vegas for the madness, please do stop by and say hello. Would love to meet some of the misfits.

Yeah. Vegas last year was one where they had all of the midget boxing and all that kind of stuff, wasn't it, with the Bugle Boys? That was the the side event that the Bugle Boys put on. Yeah. Yeah. Well, I think you you could probably say that that was the main event, wouldn't you?

That is true. That is true. Yeah. I was on a I was on a panel there as well. That was good fun. And, yeah, they know I spot on a good show, the Bugle Boy, so I'll, hope be listening to them again.

Do you know what? I've not actually, paid much attention to what's going on outside of the conference yet, so I normally will do that last minute and see see what side events there are, but we'll see.

What's it been like this time around new device doing,

like, all the walk throughs and answer any questions that people have. Like, is it about where you thought it would be?

Is there any, like, weird quirks or questions that people are asking? Because it does a lot more, this new device. Like, what's what's the normal? Because it's not just like, oh, how do I stamp my words into still? How do I do a backup? It's like all these other features and stuff. Do you have some, like, insight on that?

Two main insights, one of which didn't surprise me in the slightest, and that is I've been doing concierge calls for years now to help, you know, like a white glove service to onboard people.

With Passport Core, our now discontinued Airgap device that would take, with explainers and and chatting back and forth would take a full hour. With Passport Prime, obviously, I know it depends on the user a little bit, but, like, I've had some of them done in, thirty minutes with intros, with explainers, with full backups.

I get to, like, halfway through the call, and I'm like, right. Well, I've I've shown you everything that I wanna see. Like so it's it's a a

demonstration of how easy this is to onboard. And again, refer you back to last week's Freedom Tech Friday if you wanna see that live and in action. That didn't surprise me because I knew, you know, obviously, I was part of building the thing in the you know, from from scratch with the team.

I knew it was gonna be much easier to use, but to to to the extent that it is, especially for newcomers, did surprise me a little bit. And then the other one, which in hindsight probably shouldn't have surprised me, is

we obviously, the the first people to get their hands on it are generally the early adopters. They tend to be people that listen to this show and people that listen to Freedom Tech Friday. They tend to be more advanced. They tend to be more privacy focused, more sovereignty focused.

And they've got hold of the device, dove straight in and, like, really started to push its limits immediately and quickly identified where we can make changes. So there's been loads of great feedback on the community forum through the support inbox and stuff like that where people who have

no. I wanna say niche use cases, but have, you know, more specific use cases that they're fed back to us to help us hone the product. So that's been really good, and I've really enjoyed kind of having those interactions.

But on the flip side to that, because the device can do so much more, we're running into loads more edge cases of, like, for for example, the two FA codes where you think, oh, it's dead simple. You just scan a QR code, prime looks after the secret and then start showing you the the six digit code on a thirty second cadence.

Generally speaking, that is true. But because everybody like pretty much any online service ever now that allows you to log in also offers two FA codes. Some of them implement them in very slightly different ways.

And if passport prime is not, there is a standard to be clear. Like, the COTP is a standard, but people have like added extra little bits of information into the QR code and stuff like that, which kind of can break compatibility in some

niche use cases. So we just run up against like loads of those things where it looks like Passport Prime is broken, but in reality, it's just trying to scan a QR code that's good. It's just got, like, an extra bit of information there that we just need to make sure the device knows how to handle. So lots of, like, minor things that have

that we've never seen before because we've only ever been inside the Bitcoin sphere, which is very strict in terms of, you know, we have a few core standards like bit 39 and multisig and that sort of stuff, which are, you know, tried, tested. Now we're going into this brave new world where there's, you know, a lots more edge cases and

lots of different ways to implement the same sort of thing. So I think that's probably gonna continue, and it's just something that we we kind of have to have to deal with. But it's a difficult one because, like, you know, when when we're going through quality assurance for, like, the two FA app, for example, we're not you know,

there's a there's a limit to how many different accounts you can sign up for and physically test it with before you just, like, well, it works now. Yeah. I get that. Well, it can do more. It can break more. Just wait until I get my hands on it, carve out a couple of weeks, and I'll do some testing.

Nice. Looking forward to that. I'll make sure the support inbox is clear before you get your hands on it. Alright. Well, we've got a tight hour this time around. So should we jump into news, or is there any other

any other business? I guess public apology for for the three people that may have noticed that we missed the last show. It's been four weeks since we recorded this one. Hey. Hey. Hey. Hey. Hey. Don't do yourself down. It's not it's not That's well, that's on me, by the way, listeners. Just like I say Yeah. Been very busy at the moment.

Had a bit of time off with some, you know, breaks with work and family holidays and stuff like that. So it was just difficult to to find some time to record, so we missed the last show. But we are back, baby. We are back, baby. We're back and we're live.

Live and direct. Alright. Let's hit the news.

First one is Roman Storm. Some advancements in his hearing. Quick background recap. He was convicted on one count of conspiracy to operate an unlicensed money service business, But his lawyers filed what's called a rule 29 motion, which basically asks the court to throw out the conviction if the evidence doesn't hold up legally,

and that's what the most recent hearing was was about. Mhmm. We should also note here that the for all of the other counts that it was I think it's what what's called a a hung is it called a hung jury?

Where they basically couldn't reach a reach a decision. So it's been kind of up in the air for a long time now and weighing over his head, unfortunately. So, yeah, there was a a hearing last Thursday, and it seems as though the the the fight is over, like, the jurisdiction.

Like, did the crime actually happen in the Southern District District Of New York where this is being tried? The defense says no. And it says here, Storm paid the hosting service in Fiora and crypto not through New York bank accounts,

and that the service only ran the user interface, not the underlying protocol, which is immutable and decentralized and still running to this day. The government is saying that they didn't really distinguish between the two at all, and that became a problem.

But here's where it gets a little bit more weird is that the prosecution argued that Storm lied to a lawyer for the crypto exchange BitMart when he said he couldn't control the protocol, claiming that Roman Storm actually could control it.

But then in the same hearing, they also said that operating tornado cache itself isn't illegal. So which is it? The judge literally stopped the prosecutor mid argument and said, I'm paraphrasing here, quote, I might argue you were doing a doing better before you started talking.

And so the judge was confused as were many other people in the room about what exactly Storm's action what when exactly Roma Storm's action became criminal. The government's answer to that basically was that every step he took after knowing criminals were using the platform was a crime, even making improvements to the software.

What we got what else we got? The defense dropped the key stat. Illicit funds represented maximum of 15% of Tornado Cash's total transaction volume over the entire charge period. And the judge literally stopped to confirm one five, 15%, because that's the foundation that the government is building their case on essentially.

So again, we've got no decision. Dates for a potential retrial on the remaining two charges where the jury previously couldn't reach a a verdict, which are for sanctions violations and money laundering. I've been floated at the moment for October or November or maybe even as late as January next year.

And the judge said, quote, not not to read too much into the hearing. So another kind of kick the can down the road, but it seems like, you know, if the rage article, which I'm quoting from here, is anything to go by that the

prosecution is making a few own goals here in terms of, like, how they're presenting the case. So maybe you could look at it as a bit positive. But again, we're just gonna have to wait for, you know, maybe up to another eight months before we get any form of of closure here.

Yeah. It is positive in the sense that it's still not a done deal, and there's still Yeah. Hope for him. So, you know, I'd I'd take that as a little mini win, I guess. Yeah. And and I'm pretty sure we always, in the show notes of these shows, have his defense funds linked in the show notes. If you do wanna go support

in any way you can, please do so. Just scroll down and share what you can. Alright.

This one flew completely under my radar until I had had my bot doing some research for me, probably because I'm spending less time on Twitter these days. But there's been yet another new bit announced or proposed, should I say.

BIP three six one was drafted early this year by a group of contributors including Jameson Lop. The proposal is called post quantum migration and legacy signature sunset, and it's arguably one of the most significant and controversial proposals in Bitcoin's history.

That was a quote, by the way, not my personal opinion. Okay. Here is the core of the issue. As of March 2026, more than 34% of all Bitcoin in existence has its public key exposed on the blockchain.

Why does this matter? Well, quantum computers, once they're powerful enough, can reverse engineer a private key from a public key. And if 34% of Bitcoin's addresses, public addresses, their public keys have been exposed

due to the different signature schemes used, then that means those funds could theoretically be stolen. Obviously, this is completely arbitrary at the moment because we don't know whether quantum computing as a real threat is two weeks away or twenty years away.

However, academic roadmaps now put, quote, cryptographically relevant quantum computers arriving as early as 2027 to 2020 sorry. 2027 to 2030. So within the next five years, four years. Mhmm.

Alright. So what the hell does bit three six one actually propose? Well, it's a three phase soft fork. The first phase kicks in about three years activation, if it gets activated, obviously.

Starting from then, you can no longer send funds to an old style quantum vulnerable address. You can still send from them, but there are no new deposits. So think of it as closing the door to legacy addresses, which is what comprises of most of those, that 34% I mentioned earlier. Why the it's

should I just ask my questions at the end? I'll let you I'll let you go through all of it. Phase two is the bigger one. Two years after the first phase, at a preannounced block height, spending from those old ECDSA and Schnorr signed addresses becomes invalid.

Full stop. Your funds are not gone, but they're frozen unless you've already migrated to a post quantum address type within the, you know, after the activation. So to be clear, that is a two year window between phase one and phase two.

And then phase three, which is still being researched, but the idea is a recovery mechanism, excuse me, potentially using zero knowledge proofs tied to your BIP 39 seed phrase. So people who missed the deadline could still prove ownership and somehow recover their funds, But that part sounds very wishy washy to me. Now, obviously,

you you'll probably listen to this and your mind is running wild thinking, hang on a minute. What about this? What about this? Well, yes. This is kind of where it gets a bit spicy. This proposal is basically saying migrate your funds or lose access to your coins,

which is a colossal departure from Bitcoin's traditional ethos of your key your keys, your coins forever even if you're in a coma for twenty years. Yep. And understandably, this has received quite a lot of pushback on the idea of a kind of protocol enforced migration.

And to flip the coin over, guess, authors are arguing that the alternative is potentially worse and that a somebody with, you know, enough quantum computing power could do a covert attack that could essentially bleed while it's dry over the course of weeks or months before anybody even realizes that there's a large scale attack going on.

And by the time that the attack may or may not be visible, the damage could presumably be done. There is also a pointed economic argument here as well. Every stakeholder, so miners, exchanges, big bag holders, or even just individuals have a direct financial incentive to upgrade.

The proposal flips quantum security from a vague collective concern into a personal time sensitive deadline. So, yeah, this is well, I wanna I'll pause and get your thoughts and take your questions because this is very controversial.

Yeah.

Sounds worrying to me, something like that being pushed because, like you said, there already is an incentive to make sure that you are secure, your coins are secure. And this whole, like, you can maybe recover your funds if you go through some sort of process that whoever writes this bit probably

makes up, feels to me like you're not really in ownership, and that's a problem. Like, the man in the coma thing is a massive and important point. And if you start to take that away, I think that takes a lot of Bitcoin's value away.

And I think that most people, if there is a threat, will start moving and and changing to make sure they're secure as they as we always do with every threat and every potential problem, things change.

Security practices change. So I don't know how they would do this technically. I don't know whether there's any potential issues with moving to, like, a post quantum address type or anything like that, but I don't like the idea of anything forced.

And I'd rather personally just on the face of it that someone could choose inaction which would cost them potentially rather than not having a choice at all. Yeah. I mean, I'm broadly aligned with that.

This obviously, the elephant in the room here is that that, know, there's a million Satoshi coins sitting there. Almost all, if not all, are all in the old style pay to public key Mhmm. Or public key hash one or the two addresses.

What happens to those? Presume presumably, they're they're just gonna get frozen forever. Like, who it's a weird one. But, yeah, I mean, I'm broadly aligned with you, and I've just double checked while while you were chatting there on which addresses are considered at risk by this that would be forced to be upgraded within the window.

And the bit specifically highlights pay to public key, which is like the oldest address type from the very, very early days. I would argue that One at the beginning, like legacy. Well Is that right?

Yeah. Well, that's paid to public key hash, I think. But those are also considered to be

at risk, but less so because I believe with those, the public key is only revealed when you spend. So if the UTXO hasn't been spent from so if the address hasn't been spent from at all, then the public key is not exposed.

So then you get into loads of edge cases of, well, if it's in an old address type but it's never been spent from, is that one gonna be

forced to be upgraded? So then you have, you know, if you've got long term users where some of their funds are in, quote, non at risk addresses and so or and others aren't, how do they know what they need to do to to migrate? Could do they do half of the stack? Do they do all of it? Like, it it seems to be forcing or pushing people into

maybe making mistakes or or rash decisions or something like that. Interestingly, the other highest risk category under this BIP is taproot addresses, pay to taproot addresses because their public keys are exposed by construction, not just upon spending.

So the first phase of this proposal would essentially stop new deposits to all of these address types, which and Taproot is obviously the newest address type that's been introduced to Bitcoin.

Yeah. That seems seems a bit crazy. Yes. It it does. I don't have much context in terms of, like, the the technical pushback from detractors here.

You could argue it's good that people are pushing forward with solutions irrespective of whether you think they're good or bad. Like, I think, you know, raising the the awareness of the risk here is not necessarily a bad thing.

I just don't know whether this field feels like the right approach. Well, it's the forced nature of it. If someone says, right. We've, you know, made this new address type and we think that it'd be quantum safe for whenever that becomes a real threat.

And we would suggest we are moving our funds across, and we suggest you do the same, and there's some testing around it. So, like because someone told me, oh, there's this new address type, and we're using this new type of cryptography and blah blah blah. I'd be like,

cool. I'm not moving my funds, like, now. I'm waiting until there's potentially a problem and it's been tested properly because what if there's a fuck up? You know? What if there's something we've here?

So so there's that. And then it's just the forced it's just the forced nature of it. It's like if Lop and whoever does this or writes this proposal wanna move theirs and have theirs as a test test case and Mhmm. People can see and and, you know, make sure there's no issues, then fine.

That's cool. But I just don't like I don't like anything that's forced in Bitcoin. It feels it feels weird. It feels wrong. And I I think maybe what they're thinking because in the same way that everyone has an a financial incentive to move their coins and secure their coins,

I think there's also this financial incentive to protect the network and protect the possibility that there could be a major hack if someone got quantum. And if someone gets quantum, let's be honest, it's gonna be a government, and it's gonna be one of the country ones. Well, they all are, really, aren't they? But

the what people are gonna be thinking is like, okay. Well, what if there's a hack and ten, twenty, 30% of all coins suddenly are owned by one entity, then what? Because they're probably thinking, oh, well, if they then dump all of those somehow on the market and just absolutely fucking tank it,

And then with those funds buy up an even larger proportion, even though they don't have control over the network, they probably have a decent control over pricing. And that is potentially quite a serious attack on its usability even if we're interested in the tech.

It actually does help being able to spend it and it having value. And, I guess maybe that is part of their thinking there, and it's not unreasonable to think like that because what would I do if I, like let's just say if I was America and I haven't like, my biggest competition against the dollar is Bitcoin.

And I'm worried about trade being settled in it, and I'm worried about, like, losing control, this would be a very nice win to win the quantum race, take control of a large percentage of the coins, and now have the ability to control price.

That's kind of like a one shot win, potentially. Yeah. Yeah. I I I see both sides, I think. But but I don't like I don't like it. Yeah. I lean I lean, basically, towards what you said. Seems seems pushy, but, you know, I guess they would say, well, we need to

we think the risk is higher than you do, so we are trying to be pushy. Yeah. So we'll see. Yeah. You you and Claude are gonna have to step up your game, mate, and solve this quantum thing.

So you do the hack and then redistribute across to, like, mainly to the ungovernables, but also anyone who listens to this show. Make sure it goes into the right hands, people who use this stuff, and then we'll be fine. It's not fair. If I can maybe if I can get my hands on the the new Mythos model, maybe that's capable of doing it.

Let's see. Yeah. Well, tune in next next time, two weeks from now to see if Q and Mythos have cracked it. If we were very well If I have if I have cracked it and I've got all the Satoshi coins, I won't be able to You won't be back.

Cheers, mate. Just throw just throw us under the bus.

Alright. Next on the list, we have a $3,600,000 hack or $3,600,000 worth of Bitcoin stolen in Bitcoin Depot hack. A hacker has transferred more than 50 Bitcoin from the Bitcoin ATM wallet operators after stealing credentials.

The company disclosed in an SEC filing that detected an intrusion to its its systems on March 23. The attacker obtained credentials for digital asset settlement accounts enabling them to steal roughly 50.903 worth approximately $3,900,000 from the Bitcoin depot wallets.

The company furth oh, this is a quote. The company further believes that the incident was contained to the company's corporate environment and did not affect the company's customer platforms, division, system data, or environments.

Ouch. Doesn't say how they got in, unfortunately, but seems like they they had too much Bitcoin on a hot wallet, essentially. Jeez. That's painful. Very painful. But they should make it back quickly because these ATMs charge an absolute fucking disgraceful amount on top. So They

certainly do. I I've heard reports of, like, up to 25% on top, which is, I mean That's ridiculous.

That's that's a lot. Like, even 10. I remember, like, in The UK, it was, like, 10. And I was like, well, somewhere eight and somewhere 10. I was like, yeah. It sort of, like, comes out in the wash over the years. Like, okay. It's it's kind of like

okay. It's a bit of it's a bit of a smack, but you can take that. But but when it starts getting into, like, twenty, twenty five and up, it's like, come on. Fucking hell.

Yeah. I agree. It's

abhorrent, essentially. Yes. Quick additional note on this. This is this is apparently the the second hack this this company's had. Back in mid twenty twenty five, they notified over 26,000 individuals of a data breach involving names, phone numbers, addresses, and dates of birth, and driving license numbers.

A breach that had actually happened the full year before that and was delayed in disclosure to a due to a law enforcement investigation. Fuck. Lovely. Yeah. Lovely jubbly. Yeah. Not nice.

Okay. What else have we got on the list? Next on the list we have crypto exchange Kraken has been targeted in an extortion attempt, but says there was no breach and no client funds at risk.

The firm said a criminal group is attempting to extort it over limited insider related data access affecting 2,000 accounts. Kraken says it will not pay and is working with law enforcement.

So crypto exchange Kraken is facing an extortion attempt. The Wyoming based firms had identified and shut down two instances of inappropriate access tied to individuals within its support team, each involving limited client data.

It sounds like they've had some compromised employees that are leaking information and they've plugged the gap.

I believe

yeah. That's all I've got here. Kraken has millions of customers and the security events only affected 0.02 of their client base. A person a person with knowledge of the matter told CoinDesk, Nice. Protecting your sources.

Okay. Another one. Every single time we record, some some sensitive information is taken and leaked. Mhmm. Unfortunately, this one's a bit more serious. A fake ledger app managed to make its way onto the Apple App Store and drained $9,500,000 in crypto

across dozens of victims and across multiple blockchains in a week long phishing campaign.

So one victim posting under the handle at glove says he lost 5.9 bitcoin. His entire savings accumulated over a decade after downloading what he believed was the official Ledger app while setting up a new computer.

Jesus. Blockchain investigator, Zac XBT, later traced the stolen Bitcoin showing it was rapidly funneled through a series of transactions into KuCoin deposit addresses consistent with a broader laundering pattern identified across the incident.

Yeah. This is this is pretty rough. I guess just the the the answer here is just make sure that you, you know, follow download links from the official the official websites. And wherever possible, wherever they're published, check make sure you're checking the signatures and the hashes of the

of the software that you downloaded, especially if it's private key holding software. Mhmm. Because, this is the ramifications of of not doing that and being a bit carefree and just feeling that you're safe because you downloaded it from the App Store.

How it made it into the App Store, I've got no idea because in my experience, the App Store is absolutely ridiculous in terms of requirements to get just an update published as a legitimate company. So how they're letting these types of things through, which are clearly phishing attempts, is is beyond me.

Well, sorry to the victims. That's shit. Yeah. Absolutely. So please check your check your signatures, use the official links from the official websites. And if in doubt, reach out to the company direct and say, look. Hey. Is this your app?

Especially if it goes anywhere near your seed words. If it's a watch only wallet, then, you know, you can I don't wanna say be a bit more lax, but, you know, you can

well, you can be a bit more lax, I guess? Alright. On to the boosts. I will just rattle through these, mate. We're on the time scale. User one three six five zero six three eight at fountain fm stream four thousand eight hundred sats. Thank you, sir or madam. Thank you. Versimus@fountain.fmStream531 sats.

Oh, no, they didn't stream. They gave us a strong-arm emoji. A robot one. Nice. Oh, nice. Nos the gang, no comment, just 222 sats. Thank you. Used to read a lot at fountain.fmstream 200 sats.

Eric p p streamed a 172 sats and mad hatter at fountain f m. Sent us a 121 sats and said, cheers mates, always ungovernable. And the last one is more of an announcement. Friend of the show, WebWipe, sent in 0.011 XMR, presumably via XMR chat.

And they said WebWipe is hoping hosting a privacy meetup during Consensus Miami on May 5. We'll be discussing atomic swaps, wallets, Nim VPN, OPSEC best practices, flock cameras. What the fuck? A flock camera?

And much more. Let's bring privacy to Miami. Find the details on our x account at web wipe me down. Do you know what a flock camera is? No. I've got I've got no idea. I I assume you have like a flock of cameras and they work together. It's probably some sort of security.

I'm gonna Google it now. Security a flock cameras. Let's have a look. Flock safety Flock cameras. Flock safety is a Georgia based company operating a nationwide network. Nice thousand AI powered cameras,

automated license that's not it. Like, automated license paper readers, blah blah blah. It's not can't be it. Let us know, WebWire. Is it maybe it's how to cut them down? Maybe. Creepy surveillance.

Why some system shutting down? Don't know. Yeah. Let us know. Let us know. On the fountain staff and boost, nice to see we have had a massive climb back up in terms of active users on oh, not on Noster, on Fountain.

Because remember me whinging a while ago, a couple of months ago, about they'd done some update, and then they just fucked off a load of our listeners. They did something so that it unsubscribed and wipes anyone who was on there and that they were donating, which is really annoying. And it brought us right down to, like,

400 or something like that. And over the last couple of months, we've gone straight back up to, like, 850 people actually sending Sats or streaming or interacting on there just on that platform, which is quite nice.

Nice. Sounds like they've obviously fixed something. Well, they haven't fixed it. People have had to manually go back and follow-up, and that's new that's new people. They haven't fixed anything, unfortunately.

They just fucked us, and then now we've got new people back. So, welcome to all the new people, and, thanks for participating. Thanks for listening. Yeah. We we do appreciate it. We love it when you get involved, so thank you for all the boosts.

Okay. Updates and releases. Nice long list. I'm gonna rattle through, and you can jump in whenever you want, Max. Aqua Wallet version zero point four point two added Craig Rawls, BIP three twenty nine transaction notes, import and exports, fee amount entry for lightning payments, and SATs as a unit display option. Yes. Nice. Okay.

BTC Pay server version two point three point seven has been released using first release using dot net 10. I have got no fucking idea what lies. They've added transaction comments into the send view and add admin editable subscription dates and amountless all 11 invoices for top ups.

BullWallet version six point eight point two. Hybrid Flutter secure storage implementation with four back to version nine for incompatible devices. No idea. K quality version 6.1 o, smoother performance and USDT bridging.

So they've got USDT bridging between chains and performance optimizations and wallet stability improvements. Envoy two point two point one three is more of a maintenance release addressing a couple of Passport Prime onboarding issues like iOS share sheet bugs and stuff like that. So minor release, but a quality of life one.

First software update for for Passport Prime, KeyOS version one point two point one is now available. You can trigger that update through the settings app, and it will happen automatically over the Quantum Link connection with Bluetooth. And, the I spoke about this a little bit on

Freedom Tech Friday, but we just made it easier essentially for you to be able to choose whether or not you want a manual or a magic backup during the onboarding. Previously, it was a it was a little bit hidden, and now it's a bit more prominent behind an advanced button during the onboarding.

Nice. Liana version 14. Didn't know they had that many releases. Major UI rework, redesigned homepage, menu, payment history, sidebar. We've added export x pub imports, bit box pairing code display for Taproot devices and reduced the dust output limit from 5,000 to 500 sats.

I wonder why they had a 5,000 sats dust output limit. It's an interesting decision. I have absolutely no idea. I like Liana though. Yeah. It's it's always difficult when you're the the first piece of software to kind of do a new thing like mini script, but I think they did a pretty good job considering it's still pretty

new in terms of availability. And I like the team behind it as well. Didn't you have Kevin on? Not so long ago. Yeah. Yeah. Seemed like a really nice guy, actually. Very very aligned. Yeah. Definitely.

LNbits version one point five point four release candidate one. No release notes. Do better. Oh, That is that is classic classic of that team. Haven't we got Coffee and Ben on next week? I need to confirm, but I'm pretty sure yes.

Is it next week? It may not be. I I thought we had said that. But I need to double check the dates. I can't Freedom Tech Friday and and all of the planning between all of us has been hideous the last few months. We're all busy in our own weird and wonderful ways, even that Canadian,

everyone is. And so it's been a bit all over the place. But I think Yeah. It is this Friday. It is this Friday. So we can say to them, come on. Can you guys just do better? Yes. When when actual release notes.

Okay. Mempool version three point three point zero, major release, Coinbase transaction previews from Stratum jobs, Taproot script tree visualization, SIG hash icons, stale block comparisons, and sub one sat per v byte support.

PSBT signature display, simplicity support for liquid, and angular 16 to 20 upgrade. What the fuck is that? Okay. Nice. And decimal fee recommendations because nobody is transacting. Okay.

Maestro version zero point seventeen point three. Bug fixes, nothing interesting. Nunchuck version two point four point zero has been released. Adds Nunchuck API support with bug fixes and improvements.

Didn't I see here that haven't they done some form of, like, CLI wallet for robots with for your for your you can give, like, your OpenClora a wallet now through Nunchuck in, like, a two of two multisig setup?

Maybe. I haven't heard that personally, but it's a good idea if it works. Just scamming their Twitter now to give you the details. Did I tell you while we're talking about fucking bots that I was banned from Claude?

You did offline, but let's let's talk Because about I just find this remarkable. I mean, I know I can break shit, but I paid them money and I did everything in the normal above board completely fucking fiat way.

Used it for, like, two days. It was really useful. And then it they just fucking banned me, refunded my money, banned me. And I just feel this is proper, proper racism. You know, like, I don't know what has happened here. I've done nothing wrong, and I've been unfairly judged, and it's like my money isn't good enough for them.

And now I'm gonna drown with everybody else because I don't have these tools at my disposal, and I just think it's sickening.

Yeah. I I don't know how you do it, mate. I really don't know. I honestly, mate. I honestly do not know. I'm even polite to AI, which no one else seems to be. I'm like, well, thank you very much. Yeah. That's great. I'm, like, really pleasant with it. You've gotta be on some list somewhere or multiple lists. I

would think so. I I don't know what the fuck is going on. So and I think they log what computer you've used and all that kind of stuff. So soon,

my missus is gonna get a computer, a new one because that's fucked. And then and we've gotta go to America to go get it because I was gonna get one from The UK, but I wanna be able to do this advanced data protection shit and blah blah blah. So I've got a way to do that. And then once that's done on a separate computer,

I'll try with her name and just, like, redo it and use it. But, you know, then that's my last shot. Because once you're banned, you're banned. And I did, an appeal, and apparently, you just, like, they they never they didn't tell you what you've done. They don't fucking tell you how to get it back.

You can do an appeal, but it's basically pointless. And it's just like, oh, cheers overlords. Did you use that that coupon code that I gave you? Did did you try that? The free the free thing? Yeah. Yeah. Yeah. I used that.

Used it. It was like, great. This is good. Right. Did some fiat world stuff I had to get done. I was like, oh, okay. This is good. It's pretty useful. And then hit a load of limits. I was like, cool.

Upgrade, paid whatever it was. And then within, like, another day of use, it was like, yeah. Fuck off, mate. Your money's no good here. Have you been asking it how to make a nuclear bomb or something? No. No. No. No. No. No. Honestly, like, the most fiat like, I was doing them I cannot tell you how boring and normal what I was doing was.

No questions about anything to do with Bitcoin or freedom or anything. It was, like, proper boring office work, dull shit. If I wanted to start a marijuana grow in the North Pole, how would I know about I think it's a friend.

It definitely wasn't that. It was, like, boring corporate fucking, like, snooze fest shit that, like, no one would bat an eye eye. Like, it was I couldn't be more boring. Weird. Yeah. I wonder whether it's something like they've got a policy where if your the location of your payment

Difference from where your VPN is? Exactly. Yeah. Like, if you've got your your VPN set to, like, Nigeria and then you're paying from the North Pole, like, is that is that gonna switch on a red light in their office and be like, yeah. Fuck this guy off.

I don't know. I don't know, mate. But, anyway, it's quite annoying. So now I've I've gone with their main competitor. And I I hear good things about codecs and stuff like that. I don't know whether your use case is is right for codecs, but I'm thinking people in the team that have used it. I've not tried it, though.

It's it's I've got the codex subscription. I've not really used it, but, like, most of what I'm doing is, like, not like, not really code heavy. Like, it's a little across an application stuff.

Yeah. Basically, it's like, teach me how to count to five. For for my use cases, Claude was better at the time I was using it or or preferable for my use case and, like, how I use things. But yeah. I mean, we'll see. We'll see.

Okay. Alright. Back to the Nunchuck stuff. Yeah. They they I've released the blog post and some open source code on this. Today, we're releasing two MIT licensed repos. Nunchuck CLI and agent skills for Nunchuck CLI. Nunchuck CLI is a command line tool that lets agent AI agents operate Bitcoin wallets safely

inside group wallets and miniskrip wallets where your keys stay in control and anything above the policy limit still needs your explicit sign off. The agent skills repo gives AI agents a ready made interface to the CLI covering setup, wallet creation, invitations, policy configuration, and transactions.

Having an agent and a hot wallet and hoping budget setting holds is not a custody model. It's wishful thinking. I like that. The Nunchuk model looks like this. Your key, an agent key, a policy cosigner, and a shared Bitcoin wallet.

The agent authenticates, picks a network, creates a wallet sandbox, invites participants, adds signer keys, and finalizes the wallet. From there, the platform key policies define what gets auto signed and what still requires you.

The CLI supports enabling the platform key, setting spending limits, configuring the delays, inspecting policy state, and handling approval flows for policy related transactions. All that sounds like really technical and wanky, but, like,

this is gonna become so common in the next, like, three to four years as as more and more of our, like, online tasks are handled automatically. And when you need payments, like, that is a tricky situation to get yourself into if you you wanna go and give your bot a little budget.

So, you know, this is a new and novel take on that. What I what I also like is that they have unapologetically used AI to write and publish this blog post as well because it's littered with em dashes. And I love that they're just standing by that to be like, yeah, I'm what?

Mhmm. Why do they do that? Why do AI The em dashes. Oh, it's like, I I don't I've never even seen or used it ever in my entire life. It's weird because because my dyslexic brain likes reading with them. I find it spaces things out in a way that I find things more pleasant to read.

But at the same time, I know that it's obvious that AI has written it. So any any, like, copy and things that I'm writing in Fiat world stuff, I'm like, remove all them dashes. That's normal punctuation.

And so, like, I I I let it help me write stuff, and then I'm like, right now, let's d a I u because, yeah, it's too obvious. But I like it. Like, if wasn't if it wasn't frowned upon where people are like, oh, you just fucking AI ed this, have you? Like, you haven't written this yourself.

If it wasn't for that, I'd be like, ugh. I prefer it. Yeah. Yeah. It's just I think it's weird how they just popped up now randomly. It is weird. Anyway, back to the list. Peach Bitcoin versions. I feel like I've said 0.69 for quite some time. Are they are they trolling me here?

I think, yeah, I think they probably are. Or is it a release candidate and they're just going through all the point notes? I don't know. I don't know. Let me just quickly check on my GitHub.

Strange. Can't find it. Okay. Unique hash ID for iOS key chains for identity persistence. Next on the list, start nine version 0.4 beta five has been released. Check out the Freedom Tech Friday we did with Crypto Squid on that a couple of weeks ago. That was a good one. Looking forward to upgrading mine

when I have more than two minutes spare to do something other than breathe. And last on the list, Zeus version thirteen point zero point zero dash beta two. A major version 13 cycle. LDK node as a new embedded node option.

Nice. Updated onboarding, cashew improvements with offline mode, embedded LND version zero point two point one beta, enhanced payment UI, and Android stealth mode. Oh, yeah. They've added the samurai feature where you can change the Zeus icon to like a calculator. Yeah.

Probably the best thing to hide behind these days is the Claude app or something like that. Yeah. Yeah. Yeah. Very good. The end of the list. Very tight rip. I

apologize again to the listeners for my my absence. Things are just very busy at the moment. So, yeah, thanks for sticking with us. Thanks for showing your support. And Before we looking forward to to shaking some hands in in Vegas. Sorry, mate. Go on.

Before we jump off, I did wanna mention we don't normally talk about, like, finance stuff or price or anything like that, but I did think it was interesting to hear reports of Bitcoin being used for trade at the moment with Iran. I thought that was quite obviously, we heard that this was happening with Russia

and getting around sanctions and this kind of stuff. But as the world gets a bit more crazy, it seems at the moment and uncertain to see Bitcoin being used in the wild and circumnavigating some of the systems and controls and everything is just quite interesting to see.

And, like I said, it's not something we normally talk about, but but what is that change in terms of if the rest of the world starts looking at it and saying, okay.

This is actually a useful tool. It's not just something that's like a Wall Street thing at the moment and, like, people buying fucking ETFs and stuff. But what if I can settle trade with this thing and flee my country, which is hyperinflating with this thing? Like, I just thought it was something interesting to know. Yeah. No. I I agree.

On on that subject, what's the what's the Dorsey company where they just enabled all of the the payment terminals to accept it? Oh.

Square, Stripe? Square. Square. Square. Square. Yeah. They as part of this thing, they they prompt people to go onto their website and tag where you can use Bitcoin through one of their terminals

so that people can can easily find it within all of the various block apps and stuff. I presume they've got, a shared map so you can see where to go spend Bitcoin at one of the terminals.

When it got announced that Iran was taking Bitcoin payments to to scrub to cross the the straight of whatever it is, Homo Homo's or however you say it, somebody tagged that exact location right in the middle of the of the of the ocean where at that pinch point,

Somebody tagged it there, and I think it was Miles That's good. Who's one of the the big, like, guys at Block who does all the Bitcoin stuff where he was tweeting about it saying it was, you know, very funny.

That is that's very, very good. Yeah. It's very good. I'm not sure Iran will be using a Square terminal, but it was funny nonetheless. That is funny. Yeah. Interesting to see. I I don't know whether that's something that

continues or hots up or more people do. I also don't know how you would possibly really track something like that and how much it's really happening, but it does seem to be something that should be used by people who want to circumnavigate and have something that they can trust. So I don't know. I we like, part of me says, oh,

more and more people are gonna see this businesses, organizations, countries, individuals, and see like, okay, that's a real use case beyond, like, speculation. But also, we've been saying that for such a long time that I'm just like, I won't have my breath.

Yep. I agree. I think what what probably is the more likely one is it's another one for the Western media to be like, look, Bitcoin bad. Bad people using Bitcoin. Of course. Of course. Yeah. Well, we shall see.

Alright, mate. I'll let you get back to fixing problems and helping people and holding hands and wearing your white gloves and all the stuff you do. And, yeah, no editing for me this time, so I'll get this out. Alright. I will catch you on Friday, my friend.

Alright, mate. Bye. Before you go, mineinbox.io help keep your online presence hidden. They provide anonymous server hosting solutions, virtual, private, and dedicated servers, domain registration, and DNS parking. They don't require any of your personal information, and you can purchase using Bitcoin,

Lightning, or Monero. No personal information required. None. Zero. Minenbox.io. Stay ungovernable.