
The Brief Goes Weekly
Discussed in this episode
Boost this Episode
Send sats directly to the creators. Value for Value.
Plus 1% to Podcast Index.
Show Notes
A weekly news show informing you on the latest in Bitcoin, privacy and open source tech, hosted by Ungovernables, Max and Q.
AOB (Any Other Business)
- KeyOS v1.4.0 now available to test
- Envoy 2.3.2
- New website is live: https://ungovernable.network
- Great AI chat with Seth on FTF
- Talk about the brief going weekly??
NEWS
9/11 Families File Claim Over US Government's 127,271 Seized Bitcoin
Published: 2026-08-23 | Source: The Rage
Trezor Shipping Provider Breach Leaks Data on ~14,000 Customers
Published: 2026-08-13 | Source: Bitcoin Magazine
Chainalysis Sues US Gov Over $95M ICE Blockchain Surveillance Contract
Published: 2026-08-18 | Source: The Rage
LND Reorg Vulnerability Disclosed: Channel Funds Drainable Before v0.20.0
Published: 2026-08-21 | Source: Bitcoin Optech Newsletter #419
Iceberg Paper: Threshold Custody on Lightning Without Protocol Changes
Published: 2026-08-22 | Source: ePrint 2026/1757
RELEASES
Bisq 2 v2.1.12 — 2026-08-22: Mandatory security update addressing vulnerabilities from a recent audit. Adds reputation privacy via nullifiers and day buckets, strengthens bonded-role registrations with oracle validation, and improves bridge reliability. Updating is required to continue trading.
Bisq 1.10.6 — 2026-08-21
Hotfix for critical trade failures introduced in v1.10.5. Mandatory update for anyone who took the security patch.
Zeus 13.2.0 — 2026-08-22
Stable release adds LDK support for 24-word seed phrases, upgrades embedded LND to v0.21.2-beta, upgrades Cashu CDK for Minibits compatibility, and lets users set custom Mempool instances for improved privacy. Security hardening and bug fixes included.
Frostsnap v0.4.0 — 2026-08-23
Major update with 142 commits. Adds firmware downgrade protection, secure-boot signer verification at build time, descriptor checksum generation, 1-of-N threshold warnings, and unique device name enforcement during keygen.
Flint v0.1.5.2 — 2026-08-23
Seth for Privacy's BTCPay Server plugin for nodeless Lightning via the Breez Spark SDK. v0.1.5 addresses findings from a third external security review: fixes negative fee wrapping, restores the sweeping opt-in toggle, and gates token write-offs on balance. v0.1.5.2 hides stored API keys from the admin UI.
Bull Bitcoin Mobile 6.13.0 — 2026-08-18
Adds Payjoin support across wallet and exchange flows with configurable minimums and session lifetimes. Introduces a temporary swap service while Boltz is unavailable, Liquid UTXO consolidation warnings, and BTC Map integration.
QUICK MENTIONS
Mostro 0.18.5 -- Aug 2026. NIP-44 default encryption for P2P exchange over Nostr.
Peach Bitcoin 0.69.0 -- Aug 2026. Nym VPN integration for no-KYC P2P trading.
Fulcrum 2.1.2 -- Aug 2026. ARM64 Docker support for the high-performance Electrum server.
BTCPay Server v2.4.2 -- 2026-08-10. Critical security patch fixing actively exploited TOTP 2FA bypass. Basic auth now disabled by default. (News angle covered last episode.)
Fedimint v0.11.2 -- 2026-08-13. Security release preventing a gateway from losing funds to malicious counterparties, binding Lightning contracts more strictly to offers, and hardening request handling. Backported as v0.10.1 same day.
RoboSats v0.8.6-alpha -- 2026-08-15. Security hardening, removes three coordinators (Bitcoin Venetto, WhiteEyeSats, OverTheMoon), adds encrypted image uploads in chat and visual warnings for low-bond orders.
Aqua Wallet v0.5.2 -- 2026-08-16. Warning messages for temporarily unavailable Lightning swaps, shows swap provider per transaction, requires TLS with domain verification for custom Electrum servers.
Cake Wallet v6.4.1 -- 2026-08-12. Zcash performance after Ironwood shielded pool migration. AnyPay auto-detects address types and routes correctly.
Ride The Lightning 0.15.11-beta -- 2026-08-18. Establishes vulnerability disclosure channel, closes credential-crossing race in LND controllers, reduces dependency tree.
Coldcard Firmware 5.6.1 -- 2026-08-20. New firmware for Mk3/Mk4 line. (Context: follows the entropy bug disclosure from last episode.)
Coldcard Q1 Firmware 1.5.1Q -- 2026-08-20. Q1 model firmware update.
Trezor Suite 26.8.2 -- 2026-08-20. Adds BIP-321 URI support for QR payments, redesigns activity page, adds profit/loss tracking. (Context: arrives alongside the shipping breach disclosure.)
Arkade TS SDK Swap 0.0.7 -- 2026-08-18. SQLite and Realm storage backends, swap failure reporting improvements.
EDUCATION
BTC Sessions Launches "Sovereign Sessions"
Mid-August 2026 — Ben Perrin — youtube.com/@SovereignSessions
Ben Perrin has spun off all tutorial content into a dedicated channel covering Bitcoin, self-hosted AI, privacy tools, and sovereign computing. Planned content includes GrapheneOS, ZAP Store, Start9, Parmanode, self-hosted Fedimint, and Blockstream Wallet walkthroughs. A significant move from one of Bitcoin education's most recognisable creators; the expanded scope reflects where freedom tech is heading.
Bitcoin Lightning Node Setup: 12 Steps in 45 Minutes
August 16, 2026 — Daniel Roth — https://shattered.io
Step-by-step LND v0.21-beta Lightning node setup guide, claiming the process now takes about 45 minutes. Fresh, practical self-sovereignty content; the "45 minutes" framing makes Lightning node operation feel accessible.
C.A.S.I.N.O. Dice Roll Protocol
August 9, 2026 — Orange Surf
A proposed standard for using physical dice to generate seed entropy: rate-limited entry, input validation, minimum 100+ rolls, offline-only operation. Emerged following the Coldcard entropy incident. A practical, opinionated standard for the most fundamental self-custody operation.
Ark Protocol: VTXOs and the Virtual Transaction Tree
August 21-23, 2026 — Elle Mouton — https://ellemouton.com
A detailed technical walkthrough of Ark's Virtual UTXO design: how multiple users share a single on-chain UTXO with individual custody via pre-signed exit trees. A clear explainer from a respected developer.
TO DONATE TO ROMAN'S DEFENSE FUND: https://freeromanstorm.com/donate
HELP GET SAMOURAI A PARDON
- SIGN THE PETITION ----> https://www.change.org/p/stand-up-for-freedom-pardon-the-innocent-coders-jailed-for-building-privacy-tools
- DONATE TO THE FAMILIES w/ USD ----> https://www.givesendgo.com/billandkeonne
- DONATE TO THE FAMILIES w/ BTC ----> https://pay.zaprite.com/pl_JpxtkLv95T
- SUPPORT ON SOCIAL MEDIA ---> https://billandkeonne.org/
VALUE FOR VALUE
Thanks for listening you Ungovernable Misfits, we appreciate your continued support and hope you enjoy the shows.
You can support this episode using your time, talent or treasure.
TIME:
- create fountain clips for the show
- create a meetup
- help boost the signal on social media
TALENT:
- create ungovernable misfit inspired art, animation or music
- design or implement some software that can make the podcast better
- use whatever talents you have to make a contribution to the show!
TREASURE:
- BOOST IT OR STREAM SATS on the Podcasting 2.0 apps @ https://podcastapps.com
- DONATE via Monero @ https://xmrchat.com/ungovernable
- BUY SOME STICKERS @ https://ungovernable.network/shop/
FOUNDATION
https://foundation.xyz/ungovernable
Foundation builds Bitcoin-centric tools that empower you to reclaim your digital sovereignty.
As a sovereign computing company, Foundation is the antithesis of today’s tech conglomerates. Returning to cypherpunk principles, they build open source technology that “can’t be evil”.
Thank you Foundation Devices for sponsoring the show!
Use code: Ungovernable for $10 off of your purchase
CAKE WALLET
Cake Wallet is an open-source, non-custodial wallet available on Android, iOS, macOS, and Linux.
Features:
- Built-in Exchange: Swap easily between Bitcoin and Monero.
- User-Friendly: Simple interface for all users.
Monero Users:
- Batch Transactions: Send multiple payments at once.
- Faster Syncing: Optimized syncing via specified restore heights
- Proxy Support: Enhance privacy with proxy node options.
Bitcoin Users:
- Coin Control: Manage your transactions effectively.
- Silent Payments: Static bitcoin addresses
- Batch Transactions: Streamline your payment process.
Thank you Cake Wallet for sponsoring the show!
MYNYMBOX
Your go-to for anonymous server hosting solutions, featuring: virtual private & dedicated servers, domain registration and DNS parking. We don't require any of your personal information, and you can purchase using Bitcoin, Lightning, Monero and many other cryptos.
Explore benefits such as No KYC, complete privacy & security, and human support.
(00:00:00) INTRO
(00:00:57) THANK YOU FOUNDATION
(00:01:38) THANK YOU CAKE WALLET
(00:02:44) Still on the Wagon
(00:10:24) Updates @ Foundation
(00:29:52) New Website!
(00:33:43) Nerd Out on Home AI with Seth
(00:44:51) NEWS
(01:04:34) BOOSTS
(01:07:11) UPDATES & RELEASES
(01:09:39) EDUCATIONAL PIECES
(01:10:57) THANK YOU MYNYMBOX
Bitcoin is close to becoming worthless.
Now what's the Bitcoin? Bitcoin's like rat poison. Yeah. Oh. The greatest scam in history. Let's get it. Bitcoin will go to fucking zero.
Yeah. Know.
Welcome back to the Bitcoin Brief, the show where me and q and a catch up every two weeks to talk about Bitcoin, privacy, open source, keeping your Bitcoin secure, and the news and software updates that matter. I just wanted to say a massive thank you to everyone who's been supporting Ungovernable Misfits,
and a big thank you to Foundation Devices for supporting the show. If you haven't already checked them out, go to foundation.xyzed. They make cypherpunk tools for fuckwits,
and anyone can use this, even me. If you have any questions or you want to reach out, feel free, and I'll be happy to go through things with you. For anything super technical, I'll pass you on to queue. If you wanna buy one of these incredible passports, use the code ungovernable.
It will get you a discount, and it will let them know that I'm shilling. I'd also like to say a huge thank you to the Cake Wallet team. Not only are they supporting this show, but they're also bringing out some incredible features.
For those of you who actually use Bitcoin and actually care about their privacy and security, Cakewallet make it incredibly simple for you to live outside of the traditional financial system. You can use CakePay within the app to buy gift cards for food, petrol, and whatever else you might need day to day. You can use silent payments,
and, of course, you can use Monero. You can connect both Bitcoin and Monero nodes, use coin control, and this team are constantly innovating, and I'm really excited to be working with them. If you have any questions, you can reach out to me, but check them out at cakewallet.com.
Download the APK or start using this today on Mac, Windows, Linux, iPhone, or, of course, your Android device. Enjoy the show.
Good morning, mate. How are we doing? Doing well, mate. Doing well. Had a nice quiet weekend. Still off the beer. Two months in now. Feeling pretty good for it. Do you look less puffy and disgusting in your face?
Yeah. By my standards, I'm pretty shredded at the moment. Oh, you've always been pretty shredded. I've never seen you with any fat on you. Yeah. Well,
definitely more than my usual fighting weight. Sorry. Less than my usual fighting weight, should I say. Well, we're both on track. I'm coming up to nearly a year now. Well, actually, that's not true. From January 1 till now. What? You haven't touched a drop? Nope.
Wow. Literally not a single drop. Like, not even I was offered what's it? What do they call it? Liqueur chocolate the other day. I was like, no. Impressive. It is boring, though. I found this really good replacement.
Yeah. I know. I'm pretty sure you're gonna be like, oh, no. That's fucking disgusting. I'll just have no alcoholic beers. But they do this thing called mother root, and it's like a ginger and a bit of chili and apple cider vinegar, and it's, like, fermented.
So when you drink it, it gives you, like, a kick, like, you'd get from, like, a rum or a whiskey or something. You know, you get that, like, a harder kick, and that's where I'm like, oh, I'm drinking alcohol.
That with, like, tonic or something like that and some ice and a bit of lime, it it makes me feel like I'm having a drink and it, like, kicks me in the back of the throat. Oh, that's something.
And it's quite good and it's got no shit in it. So it's like having these little because, you know, everyone else is like, oh, yeah. I have a gin and tonic or I have a this or I have that. And I'm like, oh, I feel like at least I I'm sort of involved. Because otherwise, for ages, I was like, I have a water, please.
Do you want bottled water, sir? No. I'll have tap because I'm fucking tight. I have some tap water, please. So at least you feel a bit different.
Yeah. I well, you're not a beer drinker, are you? So I'm I'm well catered for whilst I'm off the beer because nonalcoholic beers come on a long way in the last couple of years. I'm quite partial to a 0% corona.
Yeah. Yes. Nice. Very good. Well done, mate. Well done. Well done to any listener who's doing the same. It does seem to be getting quite common nowadays, especially around where I live. Like, a couple of my friends are doing it and everybody's, like, feeling the benefits Yeah. Of
Yeah. Not not to be too racist, but from my knowledge of where you live, there's a lot of fucking absolute scummy drug addicts everywhere, like, just crawling under There's of those. Illegals. Okay. I was gonna say You you could argue that they're also not drinking if they're just doing a smack. That's true.
What's new in your world, mate? Is there a what's going on before I hit my my AOB? We've got lots of AOB today, actually. Probably take us longer to get through this than it will the actual news, but I don't think Yeah. Very true.
What is new in my world?
Yeah. As usual, mate, nothing of interest. Just loads and loads of fixing of house and garden and bits and pieces. Almost died the other day. Like, genuinely could have fucking really, really been bad. I was taking kitchen cabinetry out.
Whoever put it in, it was all, like, handmade carpenter had done it, but it was shit. I mean, it was, like, well built but fucking ugly. It was all, like, glued and pinned and screwed in all sorts of weird different ways. And so as I was taking the cabinetry off or standing on a chair, solid wooden chair, and then
taking off the last screws, and it just collapsed. Like, the whole run of one side of the kitchen collapsed inwards on me with hardwood. And I don't know what that weighed, few 100 kilos.
And it fell on me, and then the weight was so heavy that the chair legs all just snapped. And it wasn't like a flimsy chair. They just fucking snapped. And then I fell back onto the hard floor, somehow didn't hit my head just like my shoulders and upper back took the brunt,
and the thing collapsed on me. Sliced up my arms, sliced up on my stomach, all, like, fucking cuts everywhere, like, proper deep cuts. And I was just lying there for about five minutes, like
that's fucked. That's why my missus came back. I was just, like, bleeding everywhere, all over the floor. She's like, what the fuck have you been doing? What the hell did you ask me? Like, you asked me to take the kitchen out. So, anyway, almost died. Luckily, my head didn't smack onto the floor.
Otherwise, that would have been game over. Other than that Well, I'm glad you didn't die. Thanks, mate. I appreciate that. No no near death experiences for me in the past couple of weeks.
Just as always, lots of work going on at Foundation HQ. KeyOS version 1.4 beta is now public, and this is a big one. We have oh, click the link please, Mark, by way, I wanna get your thoughts on the the new launcher.
Mhmm. So first off, we've got a new launcher, a new dashboard, or a new homepage, I guess, is the the better way to put it. Any thoughts, Mark? Have you loaded it? I need to actually click some I thought you're gonna say I need to actually open the show plan. No. The show plan's in front of me. It it where where would I see it?
AOB. First link where it says available. Ah. All our listeners can hopefully do the same now as well to follow along. We'll take them on a journey. The first loading bit is gay. I'll give you that bit of feedback. The what? Sorry? When I first went on it, there's, like yeah. It was, like, one, two, three, four, five blue
bubbles that were, like, waggling around like a load Oh, that's just that's just the community forum. Don't worry about that. Okay. Okay. Look at the image at the top of the page. Passport.
New launcher and side loading apps. We like that. Connect on there. Just just just hold What should we just say? I wanted to look at the user interface and tell me if you like the changes.
Okay. And you just wanna see the actual the design. The design is very nice, cute. I like the coal coloring against that nice blue. Layout looks clean. I like that you've got different colored tabs.
Nice. Okay. Well, thank you for giving me a feedback. Just no. Let me just see if I can give you any mean feedback. That's what true friends do. Nope. I like it. It's very nice. Good. Okay. So new user interface. We have light mode as well. Don't worry, psychopaths.
You can also let you order on your iPhone, reorder the apps if you want to. If you, you know, you don't want specific ones in the dock, can switch them all around now. Still got the price feed at the top for the number go up enjoyers.
Mhmm. We also now have side loading of apps available. So you've heard me vibe coding like a maniac for the past couple of months. And I'm not the only one. There's been lots of external contributors that have been building their own apps on the simulator, has been available basically since Passport Prime has been available.
And everybody's been waiting. They built all these apps and they're like, great. Yeah. I've got it on the simulator, but obviously the simulator is not the physical device in your hand. Well, no. You don't have to wait any longer.
You can now sign your own apps or install apps from other people via the side loading method just like you do on Android. You just put it onto a file, put the file into Passport Prime with the file manager and load the application.
If you wanna see some examples, can go to the app showcase on the foundation website. But yeah, it's it's now a reality. You can we are no longer the gating factor for what is on your Passport Prime. Build your own apps, sign your own apps, install your own apps. If you don't like Vibe coding or you're not a developer,
have a look at the app showcase and install other people's apps if you want to. Wanna be very clear that the third party apps, none of them have been vetted by us, so you do so at your own your own risk. And obviously, if you're not a technical user, I would exercise extreme caution.
But with that said, the whole point of KeyOS is that even if you did install, you know, malicious app number one, the idea behind the sandboxing and the isolation is that that app is the only vulnerable thing on your on your device. It cannot access the master key.
It cannot access your two FA codes, your secrets in the vault, your Bitcoin app. Everything's completely walled off. So even if you did zero due diligence and you said you emailed an attacker and said, hey, compromise my device, send me an app, and you installed it,
they ain't gonna be able to get anything out of the device from any of the existing applications, or more importantly, obviously, the master key for the device, which, you know, is the the the keeper of your of your kingdom when it comes to Passport Prime. I was just about to talk about that because
I got not dragged into, but I saw quite a lot of messages from people who are like, oh, this device isn't for me and why the hell would anyone want this, and I won't be buying, you know, just that type of fucking knob, basically.
I wanted to write in there a part of me did, like, do you understand that these things are separate? These sandbox stuff, blah blah blah. And then I thought,
I should never be arguing in a technical way because that is not my strong suit. So I just didn't bother. But that was always my understanding with this. And the same, like, the same with the phone.
You do have the sandboxing, which is why I prefer using phones than than laptops personally for this kind of stuff. So can you talk through because we have had a lot of listeners who have reached out to me personally and in the groups and stuff who have started using Passport.
Either they didn't have a hardware wallet before or they were using cold card. Unfortunately, people within our groups have have lost their savings, which is very sad to hear. We've also had people who have used foundation and didn't lose their savings. I don't know if you heard that lovely
message from the lady at Lakeshore. To hear. It was that really you know, I was I sent it to Zach as well, and I was like I listened to it probably, I don't know, like, 15 times
through the day because it just made me feel I was like, you know, sometimes you think, what the fuck are we doing in our life like it? It's sat. Do you wanna give a bit of context? Yeah. So we got sent the other day from our dad, John, a recording from was it from Otis Bitmire's what's it called? Coffee pods?
Not sure on the name or the origin, to be honest. I just I know that John sent it through. Recorded from Lake Satoshi, and there was a lady there speaking to John, and I think Otis as well. She'd said, shout out to
everyone in the ungovernable crew because they're talking about, obviously, the cold card stuff. Because it happened over that weekend. Like, people were there being swept and
didn't get home in time, some of them. She was just saying, you know, I'm I'm just grateful that I'd listened to the Uncomfortable Crew who had pushed hard against cold card and suggested using foundation. And
she was for a second, she's like, oh, no. You know, because they're cloners, so they've stolen all the code. And so they're just literally a clone, so I'm still gonna get done.
And and then she was like, oh, no. Because, obviously, that's what made him go close source, and that's where the problems happened after that point. And so I realized I was safe and just wanna say thank you.
And it really it's I I've shared the actual m p three. I haven't got it pulled up in my sound board, but it was just a really nice, like I do sometimes because I never tell anyone what I do for work or whatever, like, normally people.
And I sometimes just think, like, what do you actually fucking do? Like, is there any point to what you do in life? And then there's moments like that where I'm like, actually, that could be someone's life savings.
And because we talk about things, I think, honestly, I always try and be honest even with our own shortcomings, and I think that has maybe helped some people. And that's a really
not many jobs where you can do something and be like, fuck. We actually made a difference and we potentially save someone their life savings. It's pretty cool. Yeah. Yeah. Absolutely.
Completely agree. It's very nice to hear that. And and just so we don't lose sight of the the previous point because I too have been battling with the many, many comments around Yeah. That's how we started.
Yeah. Like, I'm scared. Basically, it boils down to I'm scared of this device because it does more than what my call card used to used to do. Yes. Yes. I completely understand the 3,000 level view, that rationale. Completely understand it. And and we at Foundation are partially to blame for that viewpoint.
So for quite some time, people have been indoctrinated into the thought process that less is more secure. Foundation, you know, myself, we've we've spoken about that. We've seen air gap is the ultimate.
Less code is the ultimate. Anything that, you know, outside of Bitcoin is inherently insecure because more code equals more things to go wrong.
Now there is some truth to to some of that, you know, air gapping does provide some level of protection against specific attack attack vectors that you can't protect against with say a wired connection.
And if you have more code, then generally speaking, more code means there's more potential things to go wrong. I'm not gonna sit here and gaslight people to, you know, to the opposite of that. It's it's pretty obvious even if you're not a developer like me to work that out.
But the problem is that everybody that's been perpetuating that thesis or that mindset has been fond of or a user of one of the most sophisticated hardware wallets on or was on the on the market, the the cold card, which was deemed as the pinnacle of Bitcoin security.
It was offline. It was air gapped. It was, you know, it was like the gold standard that everybody was saying, yeah, this is it. This is how you secure your Bitcoin. But in the same vein, everybody lost sight of the fact that this thing had like 40 or 50 different Bitcoin ish features, passwords, notes, cdexor, bip 85, vault capabilities,
key teleport. I could go on there. I did count it up. There was like 40 or 50 different features. Not all of them are Bitcoin only and they're all in in the same code area, the same monolithic code block as all of the important stuff. The Bitcoin signing, the seed generation, it's all in one piece of firmware with no isolation.
So I've quickly come to the realization that like, what we used to perpetuate, Airgap, Bitcoin only, isn't a panacea. Like, as we've clearly seen, the what was argued to be the most secure device
had a gaping hole in it that nobody saw and despite everybody perpetuating it as the most secure because it was Bitcoin only, because it was air gapped. It had this massive code base that did arguably more than a lot of other devices that support multi currency.
But it's all in the same monolithic code base and Passport Core is exactly the same here by the way. I'm not just pointing
fingers at at CoreCard. Like, all of the hardware wallets all have this similar type of like one big code base where there's no isolation. So if something goes wrong, theoretically, there's something that can go wrong that can access the the important stuff, the seed generation or the master key signing.
Which brings me back to the thought process of, well, it's just not true that more code automatically equals less secure. Because the devil really is in the detail here and it's how is that code secured and how are the accesses and permissions for the different features handled.
In the old world with the kind of legacy code bases, it was all in one. So if in theory, if something went wrong, it could access the important stuff.
And that's why I'm very, bullish on KeyOS. And I know I'm tooting my own horn here because like, obviously, I work at foundation, so I I do have a bias on it. I should clearly state that. But I wanna try and get people outside of the mindset of it does more, therefore it's less secure because that is just strictly not true.
And you absolutely do not have to take my word for it or the engineering team has worked for it because one of the pillars that we stand on at Foundation is open source and reproducibility.
So if you think I'm talking a load of shit, feel free to go and point your your agent at our code base. Hundreds of people have done it in the last, you know, couple of weeks alone based on the feedback that we've had. And and draw your own conclusions as to whether you think the isolation
is sufficient, think it's good enough. Try and attack it. Many, many people have. But yeah, that was a long rambling statement just to say, look, my thought processes have changed slightly.
And I'm not I'm not I wanna be clear here, I'm not saying that air gaps are useless because that's absolutely not true. And I'm and I'm not saying Bitcoin only firmware is also useless because there is grains of truth and protections
against specific attack factors that, you know, less code or a physical air gap does undoubtedly give you protections against. But you have to look at the whole thing holistically to see how every part of a system is implemented before just jumping to the conclusion
of the legacy mindset of, oh, it doesn't just do Bitcoin, therefore, I'm not touching it with a barge pole. Agreed. And would just round it out from my opinion, at least, if you are worried about having extra applications and that this device can do more, You don't actually have to install every app available,
and you don't have to side load apps and build your own or take them from other people and test every single thing on your device that holds your keys for your whole life savings. Like, you can either just not do it at all
or you could have more than one device. So you could have one for testing and playing around with things that aren't absolutely mission critical. If you're really concerned and you don't trust KeyOS and you don't trust Q and you don't trust the vetting program and you don't trust people throwing their clankers at this stuff,
you can do that. And, actually, I'm one of those super paranoid people who
even though we're friends and, like, I trust in what you guys build, I sort of put all my eggs in one basket. I don't trust any cunt because I can't verify things myself to the point where I go, oh, I'm I'm a 100% sure. So I'd have multiple devices. I wouldn't put all my eggs in one basket.
Like, maybe you have some on a hot wallet in Ashigaru, and maybe you have some on your passport, and maybe you have not all your savings in Bitcoin anyway. Like, maybe you have some different assets. So if you get swept, you don't you're not absolutely lost.
Because there's been points in my life, just speaking honestly, where I've been, like, a 110% in. Mhmm. If I had then had a cold card and hadn't used a passphrase and I'd been swept, I'd be so fucked.
Like, everything I'd worked for for, like, twenty years would would be gone. And, like Yeah. No house, no car, no savings, massive credit card debt, debt everywhere just to try and you know what I mean? And it's like, at that point, that's the type of thing that completely destroys lives. And so Yeah. I think diversification
of things that we don't fully understand, and none of us fully understand all of this with the new AI world and things developing as they are Mhmm. Even though foundation's a sponsor, and like I say, we're friends. Trust you guys. I don't think anyone should put all their eggs in one basket. I really don't. Mhmm. I agree. Yep. Well said.
So some other tidbits to to round this off. People have clearly seen a void now that CoinKite is, you know, blown up the whole self custody industry.
Everybody's obviously jumped ship. Many, many people have jumped over to us, which we're you know, is awesome to see. But the more hardcore users that don't want ties to a phone application or don't want additional applications, like, we are working hard to cater to those people as well,
where we had a bit of a void left by Passport Core. These are very two different devices, obviously. We have had some people jump in shit from Call Card expecting Passport Prime to be a Call Card Q with a touchscreen, and it just not it just is not that device. Like, it's it's 10 times better for a staff,
but it intentionally comes with additional connectivity and additional features. However, we want people to be able to choose their own journey.
So coming in the next couple of releases, and I'm being vague there with timelines intentionally because anybody that's worked in and around software and hardware companies knows how hard things are to predict. But coming up, we have the ability to onboard without using Envoy at all.
We also have the ability to uninstall any of the five preinstalled apps that you get when you buy the device. Those are two FA codes,
files app, security keys app, a vault app for your passwords and your additional seats, and of course, the Bitcoin Wall app. So as well as being able to add additional apps soon, you will be able to remove existing apps as well. So you can choose your own attack surface.
You can remove any additional code from the device that you don't want or you don't have a use case for. All that's to say is very soon you will be able to have a Passport Core like experience on Passport Prime if you want to buy that device and use it in a very simple way, Bitcoin only via QR codes with Sparrow,
then you'll be able to do that if you want to. Mean, you'll admittedly
doing the device a bit of a disservice because it's like taking a bazooka to a knife fight. But if you wanna do that, by all means, go ahead. And you'll have a great experience with it because, you know, none of these other signers have got the same sort of user experience
that Passport Prime can offer. Just not even close. Yeah. Agreed. Alright. And just to round out version 1.4, which started off this conversation, is in beta. Click the link in the in the show notes if you wanna go ahead and download that. Is improved battery life, mass import for more to FA providers.
So if you use Proton or if you use Google or something like that on your phone, you can now do a mass import just by exporting the the kind of export file from those providers, throwing it straight into Passport Prime, and it'll handle it all in one fell swoop.
And then finally, connection flows for Casa and for Unchained as well. So if you are a collaborative multisig enjoyer, Passport Core version sorry, Passport Prime version 1.4 is for you. And just don't forget, it's still in public beta.
So you have to go through the kind of beta process. Again, that link will be in the show notes if you wanna get your hands dirty. But in terms of timelines for public release, depends how the beta process goes, but probably within the next two weeks.
Can you have a word with your clankers at Foundation and tell them to stop doing releases immediately after I update? I hate updating. And then every time I fucking update, the next day, I can almost guarantee it's like,
one point three point nine point one is now available. But ah, fucking hell. To be clear, you never have to update if you don't want to. No. I know.
I was having a bit of a glitch, and and that's why I thought, well, I'll just I'll do the update. I hadn't updated in a very long time, so I was like, it's probably about time. And and the reason I bring this up is I wanted to talk about the verifying app that you guys suggested.
That app is really fucking good. Like, it was so simple to to do the verifying compared to what I've been fucking around with before. Verifying Envoy? Yeah. There was, like, a second app. Talking about dead hash. Dead hash. Yeah. That's it. It was excellent.
Like, so many times I've been like, oh, I gotta verify this software. I'm fucking out. I'm, like, trying to do it in command line and fucking around. How do I do that again? I read this guide. Oh, fucking out. I know, like, all of you are like, oh, verifying software is well easy. I've always found it a pain in the ass.
Always like, oh, that didn't work. Oh, it's because you didn't put this in. And I've downloaded this dead hash thing. It was fucking great. I really, really liked it. So whoever builds that works on that. Well done. Yeah. We
should put the link to that documentation in the show notes as well, Jordan. Please remind me. Yeah. It's on our docs website. Fun fact, Seth actually wrote that guide.
Okay. Well done, Seth. Well, yeah, anyone who's like, oh, yeah. You know, I don't know how to verify or, like, I'm you know, I haven't done it before or I know I should, but I kind of don't because let's be honest, a lot of people just don't.
Try this dead hash thing. Download the app on your phone, and it's so simple. Download the two bits that you need from wherever it is you're downloading,
and then it would just say paste in here and then attach the file. It's like two things. Yeah. Tick tick. And and then you look down, it's like sha two five six green tick. If you got a green tick, you're good to go. That's it. Like, I did it in thirty seconds, and it worked. And I was like, oh, that's fucking lovely.
So, yeah, there's no excuse for anybody not to be verifying. Yeah. Agreed. An apology ahead of time, but regarding
KeyOS and Passport Prime, you if you don't like releases and updates, you're gonna have a hard time because we we got a lot of shit to do. Okay. Alright, mate. Well, I'll what I'll do is I'll just lag and I'll just do it every, like, week or two.
Next on the list, just a quick one. Envoy two point three point two, the one Max has just verified, is now out maintenance release with some bug fixes and some reliability improvements. So I won't go into the details because it's pretty boring.
But just know that that is available. Next on the list, the new website is now published, Max. We we covered it two Fridays ago, but that would have been after we last recorded the brief. So Mhmm. For the Bitcoin brief only listeners, we've got a new website, ungovernable.network.
If you have no desire to go and check out yourself or or you wanna get under the hood and see it all live, obviously, you can just go straight to the domain and click around yourself. Or check Freedom Tech Friday fifty two, where we did a full showcase, talked about how we built it, went through all the features.
And then, yeah, long time coming, but I'm very happy that this is out there. Especially happy with the value for value wall where people can go and boost all of the shows.
They can see all of the other boosts and it's all in one place. And I know this is the Bitcoin brief, but we do have many XMR enjoyers, so you can also boost via on chain, lightning, and, of course, XMR as well. And it's all there in one nice wall in a chronological order with lots of filters.
Yeah. It's so nice because nothing gets lost like with some other apps, and you can just see everything on there. And it's there forever, And I really like that. I like the
that this site isn't just like a static site that just says, like, this is us. This is what we do, and that's it. It's like, here's different ways you can interact with us. Here's the things that we sell. Here's our partners.
Here's other sites and things that we suggest that are through the show notes. It links you out to other things. Here's the mesh economy I really like. We've had two requests on the mesh economy.
One for soap. If you're listening to this soap 21, I think it was, or something like that. I haven't had time to respond to your email yet, but yes is the answer. So people will be able to buy soap through them.
But Miner's gonna be having his jerky on there as well. He's just emailed me this morning. That's good stuff. Yeah. Everyone raves about that. So that's gonna be available on there. So I just love those type of things where we really do have communities built around ungovernable, and
they're fucking awesome. And some of the stuff that they sell and some of the things that they do are amazing. And at first, I was like, I just don't wanna have anything listed on my website because then when anything goes wrong, like an order gets held at customs or there's whatever. There's some bullshit that happens with posting.
I'm gonna be the one that people message. But, actually, because it's so clear and you're dealing directly with them, it's just a showcase to say, like, look. Look. There's some cool people who do some amazing stuff.
We just wanna show them. And I love that about the mesh economy thing. I want that to grow. I want people to be able to list all sorts of bits on there. So the moment is gonna be Otis Bitmire with his coffee.
We're gonna have barn, and we're gonna have I think it was soap 21. So you can make it your tallow soap and stuff like that. So if anyone's listening and they've got smaller businesses or even big businesses and you you wanna sell something,
we don't take a cut. We don't take anything. We just want people to see what you're doing. So unless you're a prick and then you're not going on there. Just just be clear about that. Excited for that bit, and you've absolutely knocked the the website out of the park. So many people have complimented us on that and
the general feel of it and what it can do and and also the admin stuff that we talked about where I can make these clips and things is is excellent. Really is. Yeah. Very happy with it. So, yeah, everybody go check it out. Click around. Test out the boost wall, and we will, of course, read out your any of your boosts
the next time we record, which may be sooner than you think. More on that very shortly. If you missed last Friday's Freedom Tech Friday, good one with Seth. I really got to nerd out on this one. He's gone arse over tit for AI and well, more specifically, local AI. And I think at the time of recording,
him and Vic have spent something to the tune of, like, $40,000 on these Nvidia DGX sparks to do some local I say some, to do a a fuck ton of local inference. We're all soon going to have subscriptions to to KAI, I think. Yeah, that was a good one. So if you're you're into AI or specifically
using AI more privately and doing it locally, admittedly, most of us are probably not going to do it on the scale that Kate that Seth and the team at Cake are doing. But there's still some great tidbits in there around like how you can get started, which models to use, that sort of stuff. Yeah.
Because it seems like the boy's been bitten hard. He's such a fucking nerd, and I say that with love, Seth. But you're such like, there's levels to this shit, and that's what I realized. You're a fucking nerd. And so much more stuff gets checked out by you than I could ever even imagine. Like, the stuff you'll work out in a weekend.
Like, I would never even go that deep in a whole year of fucking around. And then Seth sometimes just comes in and goes full I don't know what it is. Like, not even robot. Just goes autistic. He's like an AI that's had too many jabs and gone fully autistic.
He's a he's a fully autistic AI.
And, yeah, eight sparks on the desk within Did you see his tweet? Like, the the minute we stopped recording on Friday, he tweeted and he's like, yeah, just bought another four. Yeah. He's we obviously hyped him up there then. That's good. That's what we need. I think so. Did you like my artwork with the little set Yeah. The
You're you're knocking it out of the park with this artwork. It's so visually pleasing now to go to ungovernable.network and then click on browse shows. And listeners, just just do that. While you listen to this, just go to ungovernable.network slash listen, and just scroll through that grid. It's beautiful.
I love that for AI made me made me chuckle out as I was making it. I did wonder, because normally you message me to say, oh, I need a top title for the show, but like, I had nothing this time. Was like, that was just a given. Yeah. Well, I just think that's his new name now. We do have one more important business on air topic.
Okay. And listeners, this is where we really, really want. I know we we request your input quite a lot. We do. But this is the one, if you respond to anything on this show, respond to this one because we wanna know what you think. We are thinking about, strongly, making the brief weekly,
every Monday. Obviously, that will mean that the shows will probably be slightly shorter because we're recording more frequently. Mhmm. And basically, yeah, we wanna know, number one, have you got enough hours in your forty hours per week
schedule to fit in another hour from from Max and from Q on the brief. And then the other thing that we wanna hear from you on is we're contemplating doing it live, just like we do with Freedom Tech Friday, probably at the same time, but on a Monday. So it'll be 9AM Eastern, 2PM London.
Now there are some trade offs to to that. Number one, it means that there will be zero editing. So would you rather a live show so that you can tune in and interact with us and it's like slightly less polished, so you can hear me do all my lots of wonderful ums and ahs and oh, Max, I need to go for a piss.
Or would you rather it be recorded and have slightly more polish but you then don't have the the ability to to interact with us live and to to comment on Twitter or on Noster or ZapStream or whatever it is.
So yeah, I mean, we we pretty much decided we are going weekly. It's just that the format is yet to be seen. So we are very keen to hear what you think, but we think that the time is now. There's enough content out there for us to talk about. Yeah. I just think, like, when all the cold card stuff was kicking off,
obviously, we had the Freedom Tech Friday, and we did, like, an emergency two back to back. But I felt, like, weird not doing a brief for, like, two weeks
because it's, like, a whole year of, like, Bitcoin stuff had happened in, like, a couple of days, and then we're, like, waiting two weeks to do it. Obviously, the show started as a monthly. It was the Bitcoin monthly. It was what we originally did. And
and then we're like, we we kinda need to do this a bit more. We've got more to cover. We've got the brief. And my strong feeling in my gut is with AI, with everyone having clankers, with all these different attacks, with everything developing fast everywhere.
Like, it's it's very different to that sort of low period that we had for the last sort of, like, eighteen months or whatever it's been. I just have this feeling that people are gonna need to hear these updates, are gonna need to hear about real bugs and real problems.
And I think, yeah, it'd be fun to do it. And I think that we can also cover some of the stuff that's a little bit more what some of the hard core and, like, long term listeners might find a little bit more
basic, I guess. But things that we don't cover as much as we used to, and I think we should because we've got a lot of new listeners and things like UTXO management, things like where to store your seeds, how to do encryption, how to verify, like, running through things like that,
which I just kinda think we take as a given now. It's like, yeah, obviously, you do that. But but it's not obvious. It's still not like, yeah, Bitcoin hardware and software is a million miles further ahead now than it was when we got involved.
But it's still definitely not obvious if you get someone who's just like, oh, this Bitcoin thing seems cool. I'm gonna give it a go. I'd like us to be able to try our very best to keep that person safe. Just talk through the basic stuff.
I just lost connection. Hello, Max. He's gone offline. Well, listeners, if we go live, you can expect more of this.
Motherfucker. Oh, you're back. Yeah. I'm back. Fucking prick. It was my connection today. Anyway, I was rambling there probably, but my point is new listeners, we're gonna have you covered.
It's important. Yeah. Absolutely. Perfect opportunity for the boost wall as well. Like, you, you know, you want us to talk about something, if you don't know how to do a specific thing,
let us know. If we do go down the live route, I can do live demos, you know, screen share like we do on Freedom Tech Friday, that sort of stuff. Yes. Yes. But more dialed in to to Bitcoin and and, like, what the brief is really about.
That would be ideal. There's a lot of merit to to doing the live stuff. I've just found you might have heard it kick in. I just found the Lake Satoshi and it's sound coffee as the podcast that Otis Bitmire does. Do you mind if I just play it? Because I just think it's so nice and heartwarming. Let's do it.
It's through my phone into the into the mic because I know. Listen. There has to there has to be a balance here. You and Seth going off the deep end authentically and me
just low IQ ing it to to bring things down to While you do it, I'm gonna quickly run to the bathroom and see if I can get back in time so you don't have to edit. Oh, okay. Alright. Let's have a go.
So I got one quick little follow-up cold card story. So because of last year in meeting everybody, it was the ungovernable crew that I I was looking into self custody, and that's the reason I went with a with a foundation versus a cold card because those are at the top of my list of A testimony.
Yes. Yes. I'll to I'll have to tell Q. He'll be excited. So I had one quick moment of, like, oh, shit. Wait. This thing was built on cold card Yeah. Code. And then I, like, you know, backtrack just long enough to be like, oh, that's when they decided to stop being open source, and that's where all the problems came. Mhmm.
So anyway, thank you. Beautiful. Your piss or the Both. Yeah. Honestly, like, I really feel good, and I I know that she's not gonna be alone in that. So, yeah, it's a good feeling, and I'm I'm glad that we could help. And I I just want that's my point is I wanna help more people avoid the many, many pitfalls.
One more point on this before we move on is, obviously, we've we've pushed hard on privacy for such a long time here. Privacy and security is kind of been the the two main threads. But again, with AI, I really worry about how most people use Bitcoin, and it's difficult enough to protect your identity and stop
from causing yourself problems down the line. With AI and everything being on chain forever, people have to be particularly careful, and I just wanna help guide people through that and have them before they get into heavy use, have a sort of structure and a set of tools and
a thought process of, okay. I'm interacting with something that's gonna be here forever, and people are gonna be able to audit this forever. Let me go through these couple of steps that Q and Max have explained, and I'm just hopeful that that helps them in in the long run.
Yeah. Absolutely cosign that. We're here to help. The network
is not just a new part of the domain. Like, it's been a pinnacle of everything ungovernable for years and years. We are a network of people. We share ideas. We share references to each other's businesses, and you you guys share the show, we wanna help showcase your businesses, and we give people advice,
and we help people, you know, level up. So Mhmm. It's just a big family
a big network, and we're here to help. So give us some ideas for content. We we're happy to to help and get people to take that next step. Because like you say, once you've been here and you're considered a Bitcoin grey beard, it's easy to forget what you already know. Yeah. And and we can because we have that group of people around us.
You can throw some pretty weird and wonderful questions at us, whether it's, like, a really confusing maths problem, we've got the man for that, whether it's something extremely techy, we've the man for that. You know? Whether it's electrical issues
or whatever it like, literally anything through our Meshtadel group. If it helps your family be more free, throw at us. We will answer it. Don't worry about that. Agreed. Alright. Let's go on to the news because we've been going for, I'm 45 gonna skip the first one because it's not that big of a news item. First one on the list, a breach
with a company that's affiliated with Trezza. We did cover this briefly on Freedom Tech Friday, but for those who don't listen to that show, Trezza's one of Trezza's shipping logistics providers exposed 13,689 customer personal information documents, names, emails, phone numbers, and unfortunately shipping addresses.
Treasure were quick to say that no seed phrases or funds were at risk. Although, I guess you could argue that they are if somebody knows where you live. But obviously, the the leaked personal information is gonna enable targeted phishing and unfortunately physical attacks against
known hardware wallet owners, which, you know, we talk about all the time, particularly in places like France. It's just the the number of these attacks seems to be going exponential.
So whilst on the surface of it, these kind of breaches might seem slightly benign because it's like, oh, yeah, another breach. But it's it's not just another breach. It's another breach that identifies you as a treasure treasure user that's undoubtedly got some Bitcoin or crypto, probably stored somewhere in their house,
which is, you know, terrible, terrible news. Yeah. I I mean, I don't know what there's not much else to say on this really. I feel a bit for Trezza because it's kind of not directly in their control.
Obviously, I I work at a company that sells Bitcoin hardware. And as part of that Bitcoin hardware, you have to get things to people all over the world. So you have to have a relationship with some form of shipping provider at a minimum.
And when you do that, you have to share certain levels of information. Like, you can't deliver something without finding out where somebody lives. Like, that's how it works. It's tough though.
So it's a tough one. Like, Trezza could have had all of their ducks in a row internally and be erasing information. But if it's if they have to share this information on the normal business operations with a third party to get things shipped globally, which is is true, then you also open yourself up to how that third party then manages
that exact same data. You cannot have multiple single points of failure. And it's a very difficult problem to fix for somebody who needs to fit to ship sensitive hardware to, you know, b to c, business to customer.
There's kinda no two ways around it. So all I would say is if you are listening to this and you are buying Bitcoin or security related hardware from people like Trezor or us at Foundation or anybody in the industry,
and you care about your privacy, even if well, even if you don't care about your privacy, you should still be following the best practices. Pay in Bitcoin or crypto if you can, so you're not tying it to your your card provider.
If you have access to ship to a PO box or to a business or to a pickup point, all of those are great options so that it if that information is leaked, then all they see is, you know, some funds coming from a Bitcoin address if the payment information is leaked.
And the fact that it got delivered to a a PO box somewhere in, I don't know, Denver, Colorado. Yeah. That is the best practice. That's the best of both worlds. And you should just kind of use that as your first option when you're buying this type of hardware to protect yourself against these types of data breaches.
Definitely. Yeah. And and I like that you haven't just taken the opportunity to shit on Trezor Nope. Because obviously they are a competitor and, like, just being honest about
these issues and not being like, oh, yeah. Well, they're just fucking idiots because it, you know, it can happen to anyone who has a trust in a third party. But is there a way I mean, I completely agree with everything you've said in terms of PO boxes boxes or or a business address or collection point
or send it to someone you really don't like and they can get attacked or whatever. You know, there there's ways around it. My preference is if you do ever find yourself at a conference, that would be a great option to go and, yeah, pay in lightning, little little bit of extra protection, and get the device physically there.
That's a great way, obviously. But if you can't do that, follow those other steps. But is there anything that you can do, like, looking at it as foundation? Obviously, having your own shipping network is fucking like, that is a real, unless you're an enormous business, like, you can't even think about that. Logistics is a real
pain in the ass. So outside of that, is there anything that can be done, like, clever cryptography or, like, some sort of way to ensure the information is safer? As you were saying, I was thinking about what was that buzzword that, like, everyone was fucking talking about? It was,
you know, when, like, you have a secret, you don't have to share knowledge proof. Z k snarks. That was what everyone used to say. Yeah. Zero knowledge proofs or I know it's all a bit techy for, like, shipping, but is there anything that we can do technically to you can't prove some information has been deleted,
but you have to share less or, like is there anything that can be done, or do we just have to rely on listen. Don't fucking ship at your house. Like, let's just say that. Do not ship it to your house. Whoever you're using.
Yeah. I'm sure there's probably some additional protections you could have, but the problem is you you have to
have the third party adopt whatever it is that you're suggesting. Right? And the likes of UPS and DHL, like, they're all too big to care whether or not we do business with them. And they're the only ones that are remotely competitive. Right? Yes. So if we go to them and say, you know, we wanna ship,
I don't know, 10,000 units a year through your business. Yeah. They're gonna be oh, and we want you to jump through all these extra hoops so that when you make your 2 to $3 on each parcel, we can be you know, we can tell our customers that their their their data is more protected. They're just gonna be like, fuck off. True.
I've got a good one. I think everyone has a friend in the military and someone who lives in barracks. Fucking send it there. Just say, listen, mate. Can I can I
I have something sent to you? Don't worry. It's it's not anything illegal. Blah blah blah. And then can I just collect it from you at some point and send it to a barracks? Because then at least if someone wants to go and attack and go and knock on the door, they're gonna have a real fucking issue.
Yeah. Yeah. It's a it's a good option if you've got it available to you. Yeah. Alright, next on the list. This is a funny one. Our good friends over at Chainalysis are suing the US government for a $95,000,000 Immigration and Customs Enforcement, also known as ICE, contract, who is awarded to one of their rivals known as TRM Labs.
I know this isn't strictly Bitcoin related, but I just wanted to throw it in to be like,
Yeah. You fucker. You're on the other side now. Yeah. Exactly. So Chet Channelysys is saying that this is unfair. Through the majority of the case, including the original complaint, are filed on a protective order for trade secret safekeeping.
The contract makes up for about three quarters of all contracts ever awarded by The United States to any blockchain surveillance firm, with Chainalysis lying at a total of $35,000,000 and TRM Labs now significantly ahead with a total of a $128,000,000 in US contract obligations.
I'd just love to see it. I mean, I'm sure TRM Labs are no better, but it's just nice to see them getting a bit butthurt. Right? Yeah. Oh, yeah. It certainly is. Next on the list, quick sorry to say quick. Another vulnerability.
This one is a reorg vulnerability in LND. So Bastian Tianturia, sorry if I butchered that. I mean, I don't mean if. Sorry that, I butchered that. He posted to the Delvin Bitcoin a responsible disclosure of a vulnerability that affected affected LND versions prior to zero point two o,
which was fixed in February 26. So there's no cause for alarm if you're running an up to date LND node. Operators running an older version should obviously upgrade. But to his knowledge, nobody was affected by the vulnerability.
The vulnerability was actually discovered in February 2025 and subsequently fixed thereafter. The patch makes a node wait for more conversate conversations confirmations before considering a channel close final, which is now at least six.
So just a PSA, I guess. Most people aren't gonna be completely unaffected. But the the basically, in a case of a chain reorg, which is unlikely, an attacker could publish an old revoked commitment transaction
for the channel. And because the node had already forgotten about the channel due to the reorg, it would publish the penalty transaction, letting the attacker drain all of the funds. Oh. So it's pretty niche, and it needs, you know, a lot of stars to align to even become possible, but good that it's been fixed nonetheless.
Certainly is. And then the last one on the list is a new paper that's come out. Again, as I always say about these papers, give it ten years and it might become something. But I thought it was interesting, and it's titled enabled threshold custody for lightning network with nested threshold multisig signatures.
So I know straight away, Max, you know exactly what that means, but for those that don't, I'm going to just spell it out a little bit. So basically, every lightning payment needs a signature.
And the way that that's achieved currently is that the signing key has to sit on an always online machine, like your Umbrella node or your Start Nine node. You get one key, you have one hot server,
and it's guarding all of the funds within that Lightning node. If you steal that key, you can take all the money, as we've seen with the recent BTCPay vulnerabilities. Yes, we have. Obviously, with on chain Bitcoin, this is solved because, you know, you have you already have
different types of threshold signing or just offline signers where the key is not online. If you compromise, you know, node, you don't get anything because the keys generally speaking for on chain stuff don't live on the node.
Obviously that's So so with this new new threshold scheme called Iceberg, one side of a Lightning channel can become a committee of key holders needing a threshold of signatures while appearing to the channel counterparty as being perfectly, ordinarily traditional kind of Lightning node signer. So it seems like
singular Lightning node just as it would look today. All the messages are the same. It's the same order. Nothing's kind of additionally visible from the outside. And the general technique is nesting
a threshold scheme inside a multi signature protocol. So basically it's multi sig for your lightning signer. So that what that means basically is that you could have a two of three on one end of a lightning node. And that means that if your singular Lightning node becomes compromised,
today that would mean that all the funds are gone. Under this scheme, it would mean that the additional or one other additional node that's in this kind of interconnected network that backs the two of three for one side of the Lightning channel would also need to be compromised. So you get that exponential
improvement in security basically, where instead of having to kill or to take over one node, you now need to take over two because of the threshold signatures required to move any of the Lightning funds within the primary node. Does that make sense?
I mean, yeah. Obviously, it's very complex. It's very early. Most people who run their own Lightning node are probably never gonna use this. But where this becomes powerful is exchanges, obviously as you would expect, where they have Lightning rails. Like if you can have the same kind of MPC
multi signer security that you got for your on chain reserves and also offer that on Lightning, it's a net benefit for big players like that. Yeah. Talking of big players, is it a good time to talk about Flint and Ungovernable?
We have that in the I know we got it later. Notes, but sure. We're we're at the end of the news anyway, so so hit us with it. Take us on on the journey, and take me on the journey because I have put the Flint stuff in the show notes, but I haven't read any of it yet. You can educate me.
Flint, I've now started using on our BTC pay server for ungovernable. We got off a call the other day, and it was just after the BTC pay lightning drain attack the foundation got hit with and a few other people got hit with as well. We somehow avoided it. I don't know how,
but I did have all of my Lightning nodes sorry, all my Lightning channels closed. So I was about to start setting the thing up again because you kind of need it when you've got a shop. Even if you don't wanna use Lightning, you kind of have to. Most people will find this. A lot of people prefer to pay with it. So
I was like, alright. I'll, I'll start setting all of that up again. And then q u actually said to me, I'll speak to Seth, and he's been working on something that might be of use. And so yeah. Here's my note here, actually. It just says spark dot speak Seth.
And so that's what I did. And Seth sent me a lot of information, a lot little mini walkthrough, and I gave it a go. And I have to say it's been really, really good. Like, it took me maybe twenty minutes of, like, reading through the techy sort of way that things are written and then verifying the downloads, uploading it onto
BTC Pay because it's not a plug in that you can get through there, like, store or, you know, whatever it is. You have to site load it. And once I've done that, it was install, write down 12 words or 24 words, can't remember which one it was now, and accept terms.
That was it. It was done. So I've tested it. I did a few payments through our website as as tips, and it seems to work absolutely flawlessly, which is not really that surprising because it's the same under the hood, it's exactly the same as Cake has been using for their lightning stuff. And if you've used that,
you'll know that just works. And so this just works. And if you're looking for lightning on your BCC pay, but you're worried about these hacks, you're not sure if you wanna manage it yourself, you don't wanna manage your own node,
whatever the the reason is, if you just want something that just works, I think this is a really good option. And, q, I'm sure you can jump in here and give some, like, yeah. Well, you could, but maybe you wouldn't in this case or whatever. But for me, we don't do massive volume.
I always have found lightning to be a bit of a pain in the ass. I get by it. Like, works. We've had we've obviously had it on the store forever. But for my preference, something that just works, I don't have to fuck around with.
When it comes to lightning, especially, I trust this team more and Seth more than I trust myself with this stuff. I just you know, we never have more than maybe a few $100 on there at any one time. I'm not like, if we got done, it wouldn't destroy ungovernable.
So it's not as mission critical as my own self storage that I deal with myself. Yeah. No. You'll get no pushback from me. I mean, it was me that kind of push you towards this this type of solution just for for simplicity, especially for low volume.
I am curious, like, what's well, two things. Number one, if somebody sends us a boost on ungovernable.network/v4v, is that now powered by this if they pay in Lightning? Yeah. Yeah. Yeah. Beautiful.
And the the the other question is, like, does it have a user interface? Is it just like a simple send, receive, that sort of shit? Hold on. I said, yeah. Yeah. Yeah. Is it? I think so. Yeah. I think I I think I tested it with
I think I did one where I paid an invoice directly in BTCPay, and I think I did one from the support page, I'm pretty sure it does. Okay. I'm pretty sure, like, not, like, 99% sure. I I'm only questioning myself because I think our Nosta stuff runs on something different.
The point for anyone is you could do that. I'm 99% sure we do, but you could do that. And also, it just works, and it's really simple. And if you just wanna accept Lightning on your store, it's very useful for that.
And the other thing is if you wanna Seth will probably go into more details than I have to on this. But if you want to do it so it automatically swaps to stable coins or any of that sort of stuff, if you wanna hold funds not on Lightning,
wanna hold it on stable coins for, like, re upping on stock or anything like that so you're not exposed to volatility either way. You can do all that kind of stuff as well. We don't, but it it might be useful for larger stores.
Yeah. I just had a click around as well. And and, yes, it is on our BC pay server. And also, like this automatic sweeping so that you can set limits so that Mhmm. When you hit, you know, the the spark while it gets to a certain balance, you can just sweep it to the on chain wallet so it can go straight to to to your passport.
Yep. That's very nice. Yeah. Good job, slick. Yeah. It's it it's really nice, and it's slick. And I think at some point, this will probably just be in BTC pay server as a plug in. You know, you don't have to do the the extra steps. But, yeah, it was it I'll put it this way. It was the least stress I've had on Lightning outside of Phoenix.
Praise indeed. Yeah. It's it was the slickest. The only hard part was that only for me, it was like, oh, how do I verify this on my Mac? And how do I now get this onto the b c like, outside of that, piss easy.
Good. Good. Good. Good. Alright. Let's quickly hit some boost, then rattle through some releases and wrap this thing up because I got work to do. Yes. And this may be a reason why this might be the reason we don't do the lives because this has been the the the worst technical issues show we've had in,
I don't know, at least a year. Quite some time. Yes. And thankfully, it seems that I'm not to blame. But Yeah. It's me. It's me. Yeah. Welder Ian, top of the shop as always. 2,222 sats, no comment.
Cas Peland streamed 826 sats. User one four two zero two nine seven one at fountain.fm streamed 610 sats. Anonymous boosted 500 sats with no comment. Rev huddle boosted 430 sats and said, reminder,
don't forget to check the links in the show notes. Good point because there's a lot of effort that goes into them. Agreed. Michael Anke worked very hard on them. Yes. T y m at fountain sent 250 sats. Eric p p streamed 249 sats.
Chad Farrow streamed 221 stats. And just very quickly, I know we've got a long show here, but Chad Farrow has actually started his own podcast. I can't remember the name, and I'm sorry. I haven't yet listened to it. But go and listen to that podcast. He's if anyone knows about this stuff, it is him. And
definitely go and listen and support him because he's given support to us and so many others over the years. Mad Hatter sent a 121 sats. Cheers, gentlemen. Thank you. Gnostic Gang, a 111 sats. Luke Jim Jones.
Yeah. That reference is lost on me. Although lost on me. This is one of the downsides of recording every every fortnight is I completely forget what we talk about. Luke Jim I think it's probably about Luke Dash junior.
Jim Jones is probably, like, some sort of celebrity person, but it's probably, like, an old like, what old people would get or young people would get. We're in the middle, and it's lost on us. But, anyway, I'm sure it's funny. Thank you, Nostagang.
Anonymous 69 sats ungovernable.network test. I'm guessing that was one of us. Was it? Oh, anonymous. Yeah. Probably. That's probably me. Don't know. Thank you for your support everybody as always. And just as a quick reminder, if if you are gonna boost, just consider testing out the boost via the website instead.
Alright. I'm gonna rattle through some releases. Bisk two and Bisk one both have hotfix releases that contain mandatory security updates. So if you are a Bisk user, make sure you're running the latest version. Otherwise, you could be at risk.
Zeus 13.2 has been released. That's added support for LDK 24 word seed phrases and some other various cache related updates. And you can also use custom mempool instances as well, which is very cool.
Ashigaru desktop one point four point one. First release in the 1.4 line. He's added installers for RPM and MSI. A new startup splash screen, fixes preventing duplicate instances, and some networking fixes as well.
But the headline there is proper Windows and Linux installers to lower the barrier to entry for for people who wanted to get their coin join on. Nice. FrostNap version 0.4 o adds firmware downgrade protection, secure boot signer verification at build time, descriptor generations, various other warnings and fixes.
Included in that because I just think it's a very cool concept. I just like the frost snap guys. I like them as Flint, we've talked about rewind ten minutes if you missed it or skipped it.
Bull Bitcoin mobile six point one point three adds pay join support across the wallet and exchange flows. Very cool. Introduces a temporary swap service whilst Bolt is unavailable.
Not sure who they're using on the back end. They've added consolidation warnings for UTXOs on the liquid network, and they've added BTC map integration as well. Very cool. Shout out to the Bull Bitcoin guys. Been working with them in the background on mini script stuff.
They've been testing some of our test builds and vice versa, and just a great team to work with. Very enjoyable. Mister Ben Kaufman, you're a you're a rock star. What a legend. I remember doing an interview with him really early days when it was still bit by bit, and he was, like,
very I think he was still a teenager at the time or something like that. You know, like this guy. Knows his shit. Well, I think he was working on Spectre at the time. That's right. Desktop.
And I remember just being, like, blown away with this guy and, yeah, still incredible. We should get him on again. Yeah. Yeah. Definitely. Yeah. It's been a long time. Absolutely. And then to wrap us out, some education pieces, BTC sessions has got a new YouTube channel called Sovereign Sessions.
Basically, it's kinda like all of the stuff that we talk about on Freedom Tech Friday. It's, you know, him branching out from Bitcoin, basically. So I'm sure it'll be great as it's all of his content.
A friend of the show, Orange Surf, has released the CASINO, which is an acronym, c a s I n o, dice roll protocol. And l mooten mooten mooten mooten mooten mooten as released well, she announced that she's stepping away for a little bit from development on bitcoin.
But before she did, she has released some arc protocol v t x o's and transaction tree explainers which are very very good. I'll be checking those out. Thanks.
Right. Let's wrap this baby up. If you got this far, thank you. And don't forget to give us your feedback on the weekly shows and to check out the new website and give us your feedback on that as well.
Yeah. Definitely do. Alright. Thanks, everyone. Appreciate, every sat, every comment, every time you share the show. It really does make a difference. And, love you all. Stay ungovernable.
We will see you in one week, not two. Yeah. Exciting stuff. Before you go, mindenbox. Help keep your online presence hidden. They provide anonymous server hosting solutions, virtual, private, and dedicated servers, domain registration, and DNS parking. They don't require any of your personal information,
and you can purchase using Bitcoin, Lightning, or Monero. No personal information required. None. Zero. Minenbox.io. Stay ungovernable.
Machine transcript; expect the odd mishearing. Click a passage to play from there.




