|
| 1 | ++++ |
| 2 | +title = "Socratic Seminar 55" |
| 3 | +date = 2026-08-12 |
| 4 | +template = "page.html" |
| 5 | +aliases = [ |
| 6 | + "2026-08-12-socratic-seminar-55", |
| 7 | + "/2026-08-12-socratic-seminar-55/", |
| 8 | + "/2026/08/12/socratic-seminar-55" |
| 9 | +] |
| 10 | + |
| 11 | +[extra] |
| 12 | +event_type = "socratic" |
| 13 | +luma = "https://luma.com/to12kxpl" |
| 14 | +add_to_calendar = true |
| 15 | +start = "2026-08-12T22:00:00Z" |
| 16 | +end = "2026-08-13T00:00:00Z" |
| 17 | +location = "Fidelity Investments, 100 New Millennium Way, Durham, NC 27709" |
| 18 | +description = "BitDevs is a place for open discussion of the technical aspects of bitcoin and related protocols. Be advised: discussion will be technical. Please RSVP or email trianglebitdevs at protonmail dot com to confirm your attendance. You will be required to show ID to the security guard to gain admission, but you do not need to RSVP in public." |
| 19 | ++++ |
| 20 | + |
| 21 | +We will start with introductions, cover some basic ground rules, and then jump into technical discussions. |
| 22 | + |
| 23 | +Please note the meeting location is in room APEX 1 at 100 New Millennium Way, Durham, NC 27709, USA. |
| 24 | + |
| 25 | +# Announcements |
| 26 | + |
| 27 | +- no pictures or recordings |
| 28 | +- follow the [chatham house rule](https://en.wikipedia.org/wiki/Chatham_House_Rule) |
| 29 | + - discuss what was said, not who said it |
| 30 | +- don't be a jerk |
| 31 | +- thank you to our sponsor [Fidelity Investments](https://www.fidelity.com/) |
| 32 | +- introductions |
| 33 | + |
| 34 | +# Discussion Topics |
| 35 | + |
| 36 | +# Self Custody |
| 37 | + |
| 38 | +Special focus this month. |
| 39 | + |
| 40 | +- [Coinkite security advisory: Coldcard Mk3 seed generation warning](https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/) |
| 41 | +- [Block: predictable RNG fallback and 32-bit reseed in Coldcard firmware](https://engineering.block.xyz/blog/predictable-rng-fallback-and-32-bit-reseed-in-coldcard-firmware) |
| 42 | +- [btc++ insider: when randombytes runs but doesn't](https://insider.btcpp.dev/p/when-randombytes-runs-but-doesnt) |
| 43 | +- [the reddit post that started it](https://www.reddit.com/r/Bitcoin/comments/1vatgl4/full_panic_one_of_my_wallets_was_drained/) |
| 44 | +- [CoinDesk: 594 BTC swept in 25 minutes](https://www.coindesk.com/tech/2026/07/31/major-bitcoin-wallet-flaw-drains-594-btc-in-25-minute-sweep) |
| 45 | +- [Kevin Loaec's analysis](https://x.com/KLoaec/status/2082926304995762209) |
| 46 | +- [Rob Hamilton's analysis](https://x.com/Rob1Ham/status/2082896614218203616) |
| 47 | +- move funds off Coldcard single sig and Coldcard-only multisig ASAP |
| 48 | +- discussion: |
| 49 | + - the firmware checked whether the hardware RNG setting *existed*, not whether it was *on*, and shipped that way from March 2021. how does that survive five years of review? |
| 50 | + - the affected seeds came from a pool of roughly a trillion candidates. could anyone have detected that from outside the device? |
| 51 | + - does multisig help when every signer is the same vendor and the same firmware? |
| 52 | + - what can a user actually verify about entropy on a sealed device? |
| 53 | + |
| 54 | +# Seed Generation and Entropy |
| 55 | + |
| 56 | +- [How to safely roll dice for your bitcoin seed](https://mblack.io/posts/how-to-safely-roll-dice-for-your-bitcoin-seed/) |
| 57 | +- [button mashing entropy for Coldcard](https://x.com/roasbeef/status/2083265977048059988) |
| 58 | +- [SeedPicker: draw your seed words out of a hat](https://seedpicker.net/guide/GUIDE.html) |
| 59 | +- [Seed Picker Solitaire: seed generation from a deck of cards](https://jimbojw.github.io/seed-picker-solitaire/seed-picker-solitaire.pdf) |
| 60 | +- [printable BIP-39 wordlist for dice and coin flips](https://github.com/hatgit/BIP39-wordlist-printable-en) |
| 61 | +- discussion: how do you compute the checksum word without trusting a device or a website? |
| 62 | + |
| 63 | +# BIP-110 and Chain Splits |
| 64 | + |
| 65 | +Mandatory signaling is projected to begin at block 961,632, somewhere between August 7 and August 15 - likely the same week as this seminar. |
| 66 | + |
| 67 | +- [bip110.org signaling monitor](https://bip110.org/monitor) |
| 68 | +- [BIP-110 monitor and simulator](https://delvingbitcoin.org/t/bip110-monitor-simulator/2746) |
| 69 | +- [CoinDesk: fork deadline nears with miner support at zero](https://www.coindesk.com/tech/2026/07/12/bitcoin-s-bip-110-fork-deadline-nears-with-miner-support-at-zero) |
| 70 | +- [Jason Hughes: BIP-110, my notes to miners](https://x.com/wk057/status/2077444826232955365) |
| 71 | +- [Bitcoin Magazine: the soft fork that tried to police "junk data", and why it's already failing](https://bitcoinmagazine.com/technical/the-bitcoin-softfork-that-tried-to-police-junk-data-and-why-its-already-failing) |
| 72 | +- [Murch: on the lack of replay protection](https://murch.one/posts/replay-protection/) |
| 73 | +- [calle: two forks are coming, here's how to stay safe](https://x.com/callebtc/status/2076245203568988533) |
| 74 | +- [Paul Sztorc's "eCash" BIP300/301 hard fork also targets August](https://ecash.com/) |
| 75 | +- discussion: |
| 76 | + - what does a chain split do to a UTXO you already hold? |
| 77 | + - is mandatory signaling a soft fork with teeth, or a hard fork wearing a hat? |
| 78 | + - what, if anything, should a self-custody user do before block 961,632? |
| 79 | + |
| 80 | +# Bitcoin Core |
| 81 | + |
| 82 | +- [validation: fetch block input prevouts in parallel during ConnectBlock](https://github.com/bitcoin/bitcoin/pull/35295) |
| 83 | +- [Stale Tip P2P message BIP draft](https://github.com/pseudoramdom/bips/blob/staletip-bip-draft/bip-staletip.md) |
| 84 | + - [bitcoin-dev thread](https://groups.google.com/g/bitcoindev/c/AwOPNxF15mU) |
| 85 | +- [Bitcoin Core 31.1 released](https://bitcoincore.org/en/releases/31.1/) |
| 86 | +- [doc: add an AI contribution policy](https://github.com/bitcoin/bitcoin/pull/35386) |
| 87 | +- [Private Broadcast may reveal sender IP address](https://bitcoincore.org/en/2026/06/06/privatebroadcast-ip-leak/) |
| 88 | +- [silentpayments module implementing BIP352 merged into libsecp256k1](https://github.com/bitcoin-core/secp256k1/pull/1765) |
| 89 | +- maintainer turnover: [sipa deletes his DNS seed](https://github.com/bitcoin/bitcoin/pull/35691) and [removes himself as a security contact](https://github.com/bitcoin/bitcoin/pull/35695), [jonasnick steps down from secp256k1](https://github.com/bitcoin-core/secp256k1/pull/1884), [theStack takes over](https://github.com/bitcoin-core/secp256k1/pull/1887) |
| 90 | + |
| 91 | +# Covenants |
| 92 | + |
| 93 | +- [Ark + OP_TEMPLATEHASH: a covenant-enabled bark wallet on signet](https://templatehash.com/) |
| 94 | + - [BIP 446: OP_TEMPLATEHASH](https://github.com/bitcoin/bips/blob/master/bip-0446.md) |
| 95 | + - [bark](https://gitlab.com/ark-bitcoin/bark) |
| 96 | +- [Bitcoin Inquisition 29.4 activated OP_TEMPLATEHASH on signet at block 314,928](https://delvingbitcoin.org/t/bitcoin-inquisition-29-4/2739) |
| 97 | +- [BIP 448: Taproot-native (re)bindable transactions](https://github.com/bitcoin/bips/blob/master/bip-0448.md) |
| 98 | + - [collected BIP-448 tooling and proof-of-concept repos](https://github.com/bip448) |
| 99 | +- [input-triggered transaction expiry](https://delvingbitcoin.org/t/input-triggered-transaction-expiry/2667) |
| 100 | + |
| 101 | +# Mining |
| 102 | + |
| 103 | +- [a clockless vardiff strands a slowing miner](https://delvingbitcoin.org/t/research-a-clockless-vardiff-strands-a-slowing-miner/2718) |
| 104 | +- [SRI interoperability test library](https://github.com/stratum-mining/interoperability-tests-sv2/issues/1) |
| 105 | +- [Bitcoin after block rewards: preventing miner deviation as the subsidy approaches zero](https://arxiv.org/abs/2606.05503) |
| 106 | + - [Delving discussion](https://delvingbitcoin.org/t/research-bitcoin-after-block-rewards-preventing-miners-deviation-when-the-bitcoin-rewards-is-zero/2626) |
| 107 | +- [F2Pool mines two blocks at height 956,337](https://bnoc.xyz/t/f2pool-mines-two-blocks-at-height-956337/147) |
| 108 | +- [Merge Mining Monitor](https://mmm.deadmanoz.xyz) |
| 109 | +- [the Mined in America Act](https://www.therage.co/mined-in-america-act-bitcoin-at-risk/) |
| 110 | +- [reverse engineering the Canaan Avalon Nano3S](https://github.com/CryptoIceMLH/Nano3S) |
| 111 | + |
| 112 | +# Ecash |
| 113 | + |
| 114 | +- [CDK: mint quote lookup by public key](https://github.com/cashubtc/cdk/pull/1834) |
| 115 | + - [NUT-XX: get quotes by pubkeys](https://github.com/cashubtc/nuts/pull/341) |
| 116 | +- [NUT-06: require signed mint info](https://github.com/cashubtc/nuts/pull/416) |
| 117 | +- [NUT-XX: efficient wallet recovery](https://github.com/cashubtc/nuts/pull/342) |
| 118 | +- [NUT-CTF-settle: multi-party atomic settlement](https://github.com/cashubtc/nuts/pull/412) |
| 119 | + |
| 120 | +# Privacy |
| 121 | + |
| 122 | +- [silent payments harvest-now-decrypt-later attack](https://conduition.io/cryptography/hndl-silent-payments/) |
| 123 | +- [Sparrow 2.5.0 adds silent payment receives](https://github.com/sparrowwallet/sparrow/releases/tag/2.5.0) |
| 124 | +- [Babilonia: probabilistic coinjoin and covert betting](https://delvingbitcoin.org/t/babilonia-probabilistic-coinjoin-and-covert-betting/2704) |
| 125 | + |
| 126 | +# Miscellaneous |
| 127 | + |
| 128 | +- [notice of ICANN .bitcoin TLD community application](https://x.com/wiz/status/2085029140453830725) |
| 129 | +- [Bitcoin Security Consortium announced](https://x.com/BTCconsortium/status/2080262540047585543) |
| 130 | +- [BitMEX shuts down](https://www.bitmex.com/blog/bitmex-closure) |
0 commit comments