How did we integrate Lightning into our hardware wallet? @douglasbakkum is talking about it in @bitcoinconfams 🚀
3
2
37
9/ This distinction applies inside the BitBoxApp too the new Lightning wallet is a hot wallet, as its keys are stored on the phone.
A BitBox-derived backup helps recovery; the Lightning keys stay on the phone.
A BitBox-derived backup helps recovery; the Lightning keys stay on the phone.
1
1
3
8/ A hardware wallet reduces reliance on your phone by handling transaction signing on a separate device.
That separation only works if your backup stays separate too.
That separation only works if your backup stays separate too.
1
1
4
7/ For funds still being held on an exchange, an attacker does not need your Bitcoin private keys. They need sufficient access to the exchange account.
Logging in is not the same as staying logged in. Services often remember an authenticated session using a session token.
Logging in is not the same as staying logged in. Services often remember an authenticated session using a session token.
1
2
3
5/ A malicious message doesn't always need to be opened. A zero-click exploit can strike while your phone processes it automatically.
A zero-day exploits a flaw before it is known and a fix is available. An attack can be both. Updating helps once a fix exists.
A zero-day exploits a flaw before it is known and a fix is available. An attack can be both. Updating helps once a fix exists.
1
1
4
3/ Annual CVE disclosures, reports of software vulnerabilities, have risen sharply.
AI-assisted research is finding flaws in everyday apps as well as hardware wallets.
AI-assisted research is finding flaws in everyday apps as well as hardware wallets.
1
3
8
2/ You enter your exchange password, get a code from your authenticator and use email if you need to recover access.
Those safeguards may all live on one phone. An attack that crosses app boundaries can affect several at once, along with your phone wallet.
Those safeguards may all live on one phone. An attack that crosses app boundaries can affect several at once, along with your phone wallet.
1
3
10
1/ Your phone can hold your wallet, your exchange and bank logins, and the 2FA codes meant to secure your accounts.
Several layers... all on the same phone.
What happens if that one device is compromised?
A thread 🧵👇
Several layers... all on the same phone.
What happens if that one device is compromised?
A thread 🧵👇
4
9
43
Things I was sure were in the whitepaper but none of them are 👀
Happy Bitcoin white paper day, it’s eighteen today!
Happy Bitcoin white paper day, it’s eighteen today!
8
11
81
A screen isn’t an extra.
It’s part of your security.
Your hardware wallet should protect your keys.
And show you what you’re signing.
It’s part of your security.
Your hardware wallet should protect your keys.
And show you what you’re signing.
4
10
159
“What was that payment for again?” 🤔
Pizza with friends. A birthday gift. That thing you were sure you’d remember.
Add notes to your bitcoin transactions in the BitBoxApp, then find what you’re looking for with a simple search.
A few words today. Less guesswork tomorrow.
Pizza with friends. A birthday gift. That thing you were sure you’d remember.
Add notes to your bitcoin transactions in the BitBoxApp, then find what you’re looking for with a simple search.
A few words today. Less guesswork tomorrow.
7
0
168
We'll be speaking at @bitcoinconfams on Nov 5–6, so we've got passes to hand out.
Reply with why you want to go. 5 winners on Oct 28.
We'll DM you.
Reply with why you want to go. 5 winners on Oct 28.
We'll DM you.
4
3
19
Some of us switch to dark mode and never look back. Others like to keep things light.
With light and dark mode in the BitBoxApp, there’s no wrong choice. Just the look that feels right for you.
Which side are you on? ☀️🌙
With light and dark mode in the BitBoxApp, there’s no wrong choice. Just the look that feels right for you.
Which side are you on? ☀️🌙
8
3
49
The BitBox plugs into your computer. We get asked about this a lot.
It's a UX choice. An air gap adds a second barrier, but it's also a friction. USB makes the checks automatic, and automatic is what keeps it simple.
We believe simple is secure.
It's a UX choice. An air gap adds a second barrier, but it's also a friction. USB makes the checks automatic, and automatic is what keeps it simple.
We believe simple is secure.
6
4
115
Looking for a setting? Start typing in the search bar and jump straight to the option you need.
0
2
28
Most people who set up a Lightning wallet on the BitBox pick their own name within a minute.
yourname@bitbox.cash = it works like any other address but it's easier to read out loud.
yourname@bitbox.cash = it works like any other address but it's easier to read out loud.
8
3
42
7/ The goal is simple: your wallet should be generated from randomness that’s extremely difficult for anyone else to reproduce or predict.
And you don’t have to trust a single source to get there.
And you don’t have to trust a single source to get there.
1
0
6
6/ Rolling your own entropy is possible, but it comes with an important question:
How do you know your source of randomness is actually random?
That’s why BitBox uses multiple independent sources.
How do you know your source of randomness is actually random?
That’s why BitBox uses multiple independent sources.
1
0
5
5/ The BitBox takes a different approach: it combines multiple independent sources of entropy.
During normal wallet creation, the BitBox combines 5 inputs:
• 2 independent hardware TRNGs
• A factory-installed random value
• Randomness from your computer or phone
• A hash e password
During normal wallet creation, the BitBox combines 5 inputs:
• 2 independent hardware TRNGs
• A factory-installed random value
• Randomness from your computer or phone
• A hash e password
2
0
6
4/ Computers are deterministic: given the same inputs, they produce the same outputs.
So how can a computer generate randomness?
Software can use a pseudo-random number generator (PRNG), which uses an algorithm to turn an initial value into a sequence of random-looking numbers.
So how can a computer generate randomness?
Software can use a pseudo-random number generator (PRNG), which uses an algorithm to turn an initial value into a sequence of random-looking numbers.
1
0
5
3/ A number can look random without actually being random.
A 256-bit value can still have very little entropy if its possible values are severely limited.
What matters is how it was generated.
A 256-bit value can still have very little entropy if its possible values are severely limited.
What matters is how it was generated.
1
1
10
2/ Entropy is a measure of uncertainty.
1 fair coin flip = 1 bit of entropy.
2 independent flips = 2 bits.
The more independent possibilities there are, the harder a secret is to guess.
1 fair coin flip = 1 bit of entropy.
2 independent flips = 2 bits.
The more independent possibilities there are, the harder a secret is to guess.
1
1
12
1/ How does a hardware wallet actually generate a Bitcoin wallet? 🔐
It all starts with entropy: randomness that makes your wallet extremely hard to guess.
Here’s how BitBox generates yours.
It all starts with entropy: randomness that makes your wallet extremely hard to guess.
Here’s how BitBox generates yours.
3
10
60
Okay @BULLBITCOIN_ has the coolest merch but making an instant bitcoin transaction with the same app as your hardware wallet isn't that bad either
1
10
77
Same hardware wallet, different app 👀
The @BULLBITCOIN_ mobile wallet now pairs with the BitBox: send from your phone, confirm on the device.
Testing it with the one and only @francispouliot_!
The @BULLBITCOIN_ mobile wallet now pairs with the BitBox: send from your phone, confirm on the device.
Testing it with the one and only @francispouliot_!
6
24
146
Two booths, two countries!
Markus at Finance26 in Frankfurt 🇩🇪, Pako and Laura at BTCHEL in Helsinki 🇫🇮 If you're around, go to say hi!
Markus at Finance26 in Frankfurt 🇩🇪, Pako and Laura at BTCHEL in Helsinki 🇫🇮 If you're around, go to say hi!
1
6
78
Here's a talk about why a screen saves your (financial life) from @BTCPrague!
Because a hardware wallet without a screen is not a hardware wallet.
youtube.com/watch?v=OkTgW5…
Because a hardware wallet without a screen is not a hardware wallet.
youtube.com/watch?v=OkTgW5…
1
0
15
Who better to test our Lightning integration than @coinjoined ?
100€ in sats at the @blocktrainer event, here's what he came home with!
Thanks to @aprycotmedia, @beerofsatoshi, @copiaro, @vexl, @21energy_com, @coinsnap_io and @seedor_io for taking his sats 🧡
100€ in sats at the @blocktrainer event, here's what he came home with!
Thanks to @aprycotmedia, @beerofsatoshi, @copiaro, @vexl, @21energy_com, @coinsnap_io and @seedor_io for taking his sats 🧡
14
14
102
We used the opportunity at the @blocktrainer event last weekend to battle test our Lightning integration! All Bitcoin sales at our booth were accepted with the BitBoxApp.
Fast payments, no hickups - everything went smoothly and was sent back to cold storage afterwards
Fast payments, no hickups - everything went smoothly and was sent back to cold storage afterwards
7
6
88
Our colleague @Laurastacksats bought her first item straight from the BitBoxApp 🚀
5
3
84
To spend bitcoin you'd open a second app, with a second seed phrase, backed up in a second place, so you could buy a coffee.
That's over. Lightning is in the BitBoxApp.
One backup. Both wallets.
That's over. Lightning is in the BitBoxApp.
One backup. Both wallets.
10
13
116
Your hardware wallet doesn't need to come with you to pay for a coffee.
Lightning is now in the BitBoxApp. Public beta, for every BitBox user.
One backup. Both wallets.
Lightning is now in the BitBoxApp. Public beta, for every BitBox user.
One backup. Both wallets.
36
57
376
Ready for a day between vintage cars and stock investors. We're the booth talking about Bitcoin.
We're at Anlegertag Düsseldorf with @bitsurance_ 🚀 if you're around, come to say hi!
We're at Anlegertag Düsseldorf with @bitsurance_ 🚀 if you're around, come to say hi!
2
5
86
Everyone's moving to multisig this month.
Worth knowing: 7 of the 10 largest bitcoin addresses use a single signature. Published by a company that sells multisig.
Not an argument against it. An argument against copying.
Worth knowing: 7 of the 10 largest bitcoin addresses use a single signature. Published by a company that sells multisig.
Not an argument against it. An argument against copying.
11
15
117
Small enough to take with you without thinking about it, and it opens on any device you happen to have.
5
11
89
Can you still trust hardware wallets?
The BitBox co-founder @douglasbakkum answered it properly: entropy sources, dice rolls, firmware updates, and the design decisions behind USB and Bluetooth.
Thank you @The_CryptoDad!
Watch it here 👇
youtube.com/watch?v=m6XBiI…
The BitBox co-founder @douglasbakkum answered it properly: entropy sources, dice rolls, firmware updates, and the design decisions behind USB and Bluetooth.
Thank you @The_CryptoDad!
Watch it here 👇
youtube.com/watch?v=m6XBiI…
3
8
62
Did you know we have a blogpost?
It's worth a scroll: years of writing on Bitcoin and self-custody, updated when things change.
blog.bitbox.swiss/en/
It's worth a scroll: years of writing on Bitcoin and self-custody, updated when things change.
blog.bitbox.swiss/en/
0
4
25
