Search content
Sort by
Showing 20 of 383 results by nvK
Another interesting update ergarding Coldcard Q crap wallet,
First they lied about having open source code, but later they changed it to source viewable, but even that is not exactly true.
Coldcard is using called Boot ROM, according to them this is piece of code stored in ROM, but they are hiding the fact that this code is totally closed source, you can't even view it.
If you ask them about this issue they will avoid the answer and block you on social media, like they have been doing for all other issues.
This is another confirmation how Coldcard and NVK continues to deceive everyone including their own customers.
Not Open Source!
Not Verifiable Source Code!
STOP using Coldcard devices!
First they lied about having open source code, but later they changed it to source viewable, but even that is not exactly true.
Coldcard is using called Boot ROM, according to them this is piece of code stored in ROM, but they are hiding the fact that this code is totally closed source, you can't even view it.
If you ask them about this issue they will avoid the answer and block you on social media, like they have been doing for all other issues.
This is another confirmation how Coldcard and NVK continues to deceive everyone including their own customers.
Quote
Boot ROM is a piece of code stored in a Read Only Memory (ROM). It is the very first code executed by the CPU when it is powered on. This code contains critical instructions to configure the system-on-chip (SoC) and allow the SoC to execute legitimate applications.
https://coldcard.com/docs/glossary/#boot-rom-securityNot Open Source!
Not Verifiable Source Code!
STOP using Coldcard devices!
Answer here https://github.com/Coldcard/firmware/tree/master/stm32/mk4-bootloader
Re: Have you tried TAPSIGNER and SATSCARD yet? What are your impressions?
I will try to revive this topic.
I have never used TAPSIGNER.
I am curious to know:
1. since it is an NFC card that stores your private keys, can it be demagnetised? If so, then there is no way to recover it, correct?
2. has anyone used it as a part of a multi-sig vault? Like one of the keys being this NFC card, in a RFID protection sleeve.
I have never used TAPSIGNER.
I am curious to know:
1. since it is an NFC card that stores your private keys, can it be demagnetised? If so, then there is no way to recover it, correct?
2. has anyone used it as a part of a multi-sig vault? Like one of the keys being this NFC card, in a RFID protection sleeve.
1. You can backup the key
2. yes! with nunchuk
Just a updated on the new firmware option for devs/experiments.
New large and breaking features will be released (signed) on a separate release to avoid normal users from making mistakes and being exposed to more buggy things.
Due to limitations on how firmware versioning is checked in the SE, we are doing it as 6.0.0X
This one has Taproot (with limitations) and BSMS
Learn more here https://blog.coinkite.com/edge-firmware/
New large and breaking features will be released (signed) on a separate release to avoid normal users from making mistakes and being exposed to more buggy things.
Due to limitations on how firmware versioning is checked in the SE, we are doing it as 6.0.0X
This one has Taproot (with limitations) and BSMS
Learn more here https://blog.coinkite.com/edge-firmware/
Yes, we are still making a few tweaks but some good info here https://coldcard.com/docs/coldcard-q1
Are you going to paint the plastic in different colors like you did with Coldcard mk4? 
I can't find model Q1 in Coinkite store except for reservations, and I see release was planned for Q4 this year, that means it could happen even in 2024.
After the product is validated, so likely only by Q v2
I couldn't find a thread so here it is.
1. The BLOCKCLOCK OG https://getblockclock.com/info.html
2. The BLOCKCLOCK Mini https://blockclockmini.com/
3. The BLOCKCLOCK Micro https://blockclockmicro.com/
1. The BLOCKCLOCK OG https://getblockclock.com/info.html
2. The BLOCKCLOCK Mini https://blockclockmini.com/
3. The BLOCKCLOCK Micro https://blockclockmicro.com/
ColdCard Mk4 is now available for purchase directly, without reservations and extra waiting time.
Price is around $158 plus shipping, but I think you can get free shipping if you spend $499 or more in Coinkite shop.
There is %5 discount with promo code CKBTC, and it would be interesting to see some independent reviews for this new mk4 Coldcard.
I think there are better hardware wallets than Coldcard Mk4 in market today for this price, but others like ledger or safepal are worse and inferior in my opinion.
https://store.coinkite.com/store/mk4
Price is around $158 plus shipping, but I think you can get free shipping if you spend $499 or more in Coinkite shop.
There is %5 discount with promo code CKBTC, and it would be interesting to see some independent reviews for this new mk4 Coldcard.
I think there are better hardware wallets than Coldcard Mk4 in market today for this price, but others like ledger or safepal are worse and inferior in my opinion.
https://store.coinkite.com/store/mk4
$149 and in colors too
Coinkite just released some infos about their new product, the ColdCard Q1: https://coldcard.com/docs/coldcard-q1
Seems like it is basically a tuned version of the CC Mk4, with some feature that people requested (like QR Scanner, Battery, etc.)
Seems like it is basically a tuned version of the CC Mk4, with some feature that people requested (like QR Scanner, Battery, etc.)
Yes, we are still making a few tweaks but some good info here https://coldcard.com/docs/coldcard-q1
That wouldn't be possible there are thousands of contributors, all would have to agree. CC is largely single source (us), the very few external contributors had no objection.
You cloned and used parts of original Trezor open source code, and that is ok because they are the first original hardware wallet, and now you are bitching that someone else used and changed your open source code.I found that extremely egoistic and hypocritical, but you can do whatever you want, it's your product.
Passport released everything including hardware as open source, and they used totally different hardware than Coldcard, so you are obviously going in totally different directions.
Good luck to both of you.
There was not Trezor "clonning", you maybe unware that we also contributed to mod-crypto. That was the only lib shared with trezor, many share that lib few years back. It is the norm in any industry to share the same crypto libs, we have since moved to libsec256k1 maintained by core.
Quote
Would you care to elaborate about that cloned product?
I heard rumors about a wallet that I really like, so looked into that, compared code bases and didn't find them to be identical or similar at all.
Also lots of changes and features that ColdCard doesn't even have, so that can't be it. I'm intrigued to see who actually made a CC clone.
I heard rumors about a wallet that I really like, so looked into that, compared code bases and didn't find them to be identical or similar at all.
Also lots of changes and features that ColdCard doesn't even have, so that can't be it. I'm intrigued to see who actually made a CC clone.
Lots of git trickery to confuse the diffs, removal of comments, etc... heck their Ad image is all the code we wrote
Anyways, waste of time. Good luck to them.
Quote
Imagine Bitcoin developers started changing BTC open source code to CC after first shitcoin forks showed up 
That wouldn't be possible there are thousands of contributors, all would have to agree. CC is largely single source (us), the very few external contributors had no objection.
The cloners were very careful with their github tricks, but regardless think what you want.
Quote
Someone could correct me if I am wrong, but I think that you also didn't release your Seed XOR (version of Shamir Secret Sharing) as open source, just showing how wrong your thinking is.
But hey, do whatever you think is best for your product, if you are selling better than ever like you say, you have nothing to complain about.
But hey, do whatever you think is best for your product, if you are selling better than ever like you say, you have nothing to complain about.
We have a ton of FOSS work done, funded and contributed, under many different licenses.
Regarding the SeedXOR, XOR is standard computer operation not much to license not license. Within 2 minutes I was able to find implementations on github https://github.com/Marcaday/SeedXOR
All the instructions for you to implement are here https://raw.githubusercontent.com/Coldcard/firmware/master/docs/seed-xor.md
You and I are free to choose your licenses for your project.
⭐ Merited by hZti (1)
However, if someone gets physical access to your unit and there is another security issue, if the chip is active or not or even there or not makes little difference.
Correct; cutting the trace will protect you against a 'remote' attacker that will have 0 attack surface to try anything on. But a hardware attack directly on the PCB (connection to buses & probing side-channels) is much more likely to be successful than exploiting NFC. So an attacker with hardware access won't probably bother reconnecting the antenna.
Maybe its a kindness attack, you wife thinks you accidentally broke it solder it back.
Quote
I don't presume to speak for Nvk, but I doubt he would get bent out of shape over forking for personal use or in an attempt to improve the code; i.e. add features or enhance security. Sure, there's no financial incentive to do so, but that doesn't stop people from donating their time for open-source projects that also don't offer incentives. I'm not a coder, but if someone were to fork the firmware to include support for XMR, I'd be all over that. 
We found a balance with MIT+CC, you can indeed fork, change it, sell it, the intention is Commercial Limitation; ie cloning the whole code base and starting a competing product as it was done. Funny enough little on the hard stuff we built that was clone has changed on the fork.
Quote
I've been reading up on Common Clause licensing, and it seems many knowledgeable folks are predicting it's days are numbered. I still don't know how it differs from Creative Commons, but one article suggested that'll be the preferred licensing in the near future for developers that want to be transparent, but restrict the competition from monetizing their work.
If that came to be (which I don't), we would seek a different license or write a new one with strong user rights and creators protections against fiat maxis.
For hardware wallet manufacturers the FTX debacle might be the biggest boost in business that they will ever experience. The good thing is that the community will profit if this, since more volume means cheaper prices and more money for innovation in that market.
It was indeed quite the high demand, really amazing to see how much bitcoin left the exchanges these last few weeks.
Quote
Thanks for the information about Nunchuk, I never heard of that one before. I will definitely give it a try, since NFC was the reason to get the MK4 and not the MK3.
It's a cool project, it's advancing well.
Quote
Honestly I think NFC is not a necessary feature and will probably even scare people away from buying the MK4, but since it is there I want to give it a try.
Maybe, but probably due to FUD combained with ignorance. I think we can overcome this with eduction. As a hint, Mk4 is selling incredibly well so still unaffected.
Quote
What I dont really understand is, why you can scrape away the NFC link on the PCB, since it seems like an attacker could easily replace this link if he has physical access to the coldcard.
This is not a very realistic or practical attack. 1 there is nothing to really do with that trace, it's part of the antenna network. 2 if you have physical access and the device is off, you are back into PIN dynamics. No thus far proposed a actual attack via that trace probably because indeed there is not much advantage to have access to the antenna network.
Quote
In any case I like the coldcard so far and use it regularly.
Glad to hear it, and thanks for the feedback.
⭐ Merited by hZti (1)
Thanks for the update! Is there also news about an application that can actually support ColdCard in an easy way with NFC signing?
I don't really know much infiormation about that, but you can ask NVK and coldcard team.There are few videos Coinkite-Coldcard released on their youtube channel explaining how NFC feature works, showing address via NFC, and signing a text message using NFC.
BTC Sessions also released full 30 minute tutorial how to use Coldcard with NFC feature, so you can check out both of this channels.
https://www.youtube.com/watch?v=eLG8Atcd-l4
https://www.youtube.com/channel/UCqMPBcyg_wemgvC1jDI3EIw
There are a few of "App Wallets" working on NFC support for both COLDCARD Mk4 and TAPSIGNER/SATSCARD. Like the years we had to push PSBT to be adopted, we expect NFC will take its time too. Not in a hurry. Nunchuk has integrated it well for both COLDCARD and TAPSIGNER/SATSCARD. It's working fairly well with the latest version and they keep on improving it.
Our approach to NFC is simple, almost anything you can do with the MicroSD/USB you can do with the NFC (signing, exporting data, etc...)
Cheers.
How repairable is the SATSCARD going to be?
I had an opendime die and had to send it to be repaired to get the BTC off of it.
As you go to a creditcard sized thing if it dies will there be any repair available?
I know it's NFC and no exposed electronics unlike the dime but it's still an electronic device and it can still die.
-Dave
I had an opendime die and had to send it to be repaired to get the BTC off of it.
As you go to a creditcard sized thing if it dies will there be any repair available?
I know it's NFC and no exposed electronics unlike the dime but it's still an electronic device and it can still die.
-Dave
Like OPENDIME it will be on best effort basis, these NFC cards are fairly resilient and we do have the means of extracting the micro and re attaching to a new antenna. We have tested a variety of scenarios. However, we just never know what folks will do in the wild and are looking forward to trying to help those who damage it.
(The TAPSIGNER has backup capability so this is not an issue)
Hello,
It's been a while since a posted here. I know we have a lot of OPENDIME fans here so I figure I'd share the new projects.
Coinkite launched 3 new projects based on NFC JavaCards.
Cheers,
NVK
It's been a while since a posted here. I know we have a lot of OPENDIME fans here so I figure I'd share the new projects.
Coinkite launched 3 new projects based on NFC JavaCards.
- TAPSIGNER - The simple Bitcoin wallet in your pocket: as the tagline states this is a very simple, affordable and generic hardware wallet. Like a blind signer, it takes a message digest and signs without your Bitcoin pk if the PIN matches (The PIN is user definable). It has a capability of exporting the PK AES encrypted with a key etched on the back. The usage models we initially see for this is, single sig for medium to small amounts, this is a great solution to avoid PKs on phones. Multi-sig co-signer where the amounts could be quite large depending on the security level of the other keys. Authentication; this could be used to authenticate into other applications/locks/etc... using Bitcoin's signature. Message signing with your Bitcoin pk. checkout the FAQ https://tapsigner.com/faq
- SATSCARD - Like cash in hand, pass physical Bitcoin along multiple times. Gift. Anonymous. Trust no one. Non-custodial.: This is the evolution of OPENDIME, 10x reusable, very easy to sweep on phones, flat, etc... . checkout the FAQ https://getsatscard.com/faq
- SATSCHIP - Add #Bitcoin authenticity to your artwork: This product is meant to function like a real "NFT", you can sign a message digest with the phical artwork information, pictures, etc... This was born out the OPENDIME Rare Pepe uses. This product can't be backed up. checkout the FAQ https://satschip.com/faq
- You can find their info here https://Coinkite.cards and SDK here https://Coinkite.cards/sdk
- We plan on making many-many designs as we partner with more artists.
- Price is also planned to progressely decrease through the years as we test the market and scale production
Cheers,
NVK