BR091 - AnchorWatch Trident Vault, Ledger Co-founder Kidnapped, Blue Wallet, M17, The Case for Multi-vendor Setups, Tails removes HWW Support + MORE ft. Craig & Rob

Update: 2025-01-24

Description

I'm joined by guests Craig Raw and Rob Hamilton to go through the list.

Housekeeping
(00:01:11 ) Ross Ulbricht receives a pardon from President Trump
(00:03:44 ) New Marketing Manager opening at Coinkite
(00:03:48 ) Exchanges added to BitcoinSecurity.guide
(00:04:15 ) Olas - new nostr app
(00:04:48 ) Call for guests

Urgent Vulnerability Disclosures
(00:05:58 ) Ledger co-founder David Balland released after kidnapping
(00:12:28 ) AxeOS CSRF Vulnerability

Bitcoin
• Software Releases & Project Updates
(00:12:58 ) AnchorWatch
(00:47:28 ) Bitcoin Core
(00:48:10 ) Wasabi Wallet
(00:48:15 ) BDK
(00:48:27 ) Nunchuk Android
(00:48:37 ) Specter Desktop
(00:49:02 ) Bitcoin Keeper
(00:49:18 ) Blue Wallet
(00:50:32 ) BTC Pay Server
(00:55:39 ) Liana
(00:55:58 ) Blockstream Green QT
(00:57:58 ) BoltzExchange
(00:58:00 ) Live Wallet
(00:58:11 ) Kyoto
(00:58:19 ) ESP-Miner
(00:58:21 ) Bitcoin Safe
(00:58:40 ) BTC Map

• Project Spotlight
(00:58:44 ) Bitaxe Touch
(00:58:51 ) Coinswap
(00:59:20 ) Scure
(00:59:28 ) Bitcoin Is Data
(00:59:43 ) Qoinstr
(00:59:53 ) TollGate

Vulnerability Disclosures
(01:01:27 ) 0-click deanonymization attack targets Cloudflare-backed apps
(01:02:00 ) UEFI secure boot vulnerability allows malicious bootkit deployment
(01:02:23 ) Google Ad directs users to malicious homebrew clone
(01:03:01 ) Critical rsync vulnerability on Linux and Unix systems
(01:03:31 ) January 2025 Patch Tuesday
(01:03:48 ) Unsecured tunneling protocols expose 4.2 million hosts
(01:03:58 ) Apple's CUPS printing system vulnerable to spoofing attacks
(01:04:11 ) Thomas Roth demonstrates code execution on Apple's ACE3 USB-C controller
(01:05:32 ) Five dollar wrench attacks

Privacy & Other Related Bitcoin Projects
• Software Releases & Project Updates
(01:07:17 ) Tails
(01:09:52 ) Module_17

Boosts
(01:12:29 ) Shoutout to top boosters Anonymous, manbyt, agichoote & btconboard

Links & Contacts:
Website: https://bitcoin.review/
Substack: https://substack.bitcoin.review/
Twitter: https://twitter.com/bitcoinreviewhq
NVK Twitter: https://twitter.com/nvk
Telegram: https://t.me/BitcoinReviewPod
Email: producer@coinkite.com
Nostr & LN: ⚡nvk@nvk.org (not an email!)
Full show notes: https://bitcoin.review/podcast/episode-91

Comments

In Channel

BR097 - Cove Wallet, Harbor, ecash, Sparrow, Liana, Bull Bitcoin, JoinMarket, Hardware Wallets, Coinbase Breach, BitLocker Vulnerability, Lightning Phoenixd, LSP Legality + MORE ft. Praveen, Ben, Paul

2025-06-0501:12:48

BR096 - OP_RETURN Debate, Bitcoin Core Governance, Alternative Implementations, Future Soft Forks, CTV Prospects, Core Vulnerabilities, COLDCARD Hardware Design, Testnet vs Signet + MORE ft. Rob, Odell & Craig

2025-05-1501:06:24

BR095 - OP_NEXT Recap, COLDCARD, Bitcoin Core, Ephemeral Dust, Ephemeral Anchors, Pay-to-Anchor outputs, Taplocks, Electrum, Cove Wallet, Mempool.space, Liana, Bitcoin Privacy Accounting, ESP32.Review + MORE ft. Rob & Rijndael

2025-04-2301:37:00

BR094 - COLDCARD KeyTeleport, Harbor, Ark, Cove Wallet, Zaprite, Bitcoin Core, OMEMO, Knots, Vibe Coding, Trezor Safe 3 Attack Vector, Coinbase Phishing Campaign, Bitcoin Business Software + MORE ft. Rob & Paul

2025-04-0201:28:49

BR093 - ECDSA Key Extraction, ESP32 Security Concerns, COLDCARD, Cove Wallet, Krux, Nunchuk, Invalid Mining Jobs, Javascript Injection Attack, CTV Back on the table? + MORE ft. Rob & Vivek

2025-03-1301:28:17

BR092 - Nostr Wallet Connect, DeepSeek, AI Coding, Sparrow, Bitcoin Keeper, Maple AI, Calculating Tx Sizes + MORE ft. Future Paul

2025-02-1101:29:06

BR091 - AnchorWatch Trident Vault, Ledger Co-founder Kidnapped, Blue Wallet, M17, The Case for Multi-vendor Setups, Tails removes HWW Support + MORE ft. Craig & Rob

2025-01-2401:16:21

BR090 - COLDCARD, BullBitcoin, Bitcoin Safe, miningpool-observer, Zero Fee/P2PK Playgrounds, Tangem Private Keys Exposed, Proton Wallet Vuln, Signatures Explained, "Not Enough UTXOs!" + MORE ft. Rob

2025-01-0301:23:15

BR089 - Lark, Security Tradeoffs Masterclass, Bitcoin Quantum Risks, WabiSabi Deanonymization, Core Txn Broadcast, Better Wallet Migration, Scaling Bitcoin, Bullish Sentiments + MORE ft. Craig & Rob

2024-12-1302:03:22

BR088 - AnchorWatch, Bitkey, Krux, Primal, Proton Wallet, Kagi, Debifi, Namecheap $73M bitcoin revenue + MORE ft. Livera, Rijndael & Ben

2024-11-2701:07:39

BR087 - ColliderScript, BTCPay Server, OpenSecret, Matrix, Lottie player JS Attack, the Bullish Case for Vaults, LN Payment Censorship , EmailBTC, secp256k1-node vulnerability + MORE ft. Justin & Paul

2024-11-1301:30:36

BR086 - Electrum, Wasabi, Bitkey, Bitcoin Safe, Spark, Bitcoin Keeper, OP_CAT Privacy, FROST X nostr, btcd FindAndDelete bug + MORE ft. Rijndael & Ben

2024-10-3101:12:39