What Bitcoin Did - What It Really Means to Be Sovereign | SeedSigner

Episode Date: November 12, 2025

SeedSigner is an open-source Bitcoin signing device. In this episode, SeedSigner breaks down why trustless hardware matters and why Bitcoin security is a journey, not a destination. He explains how ...hardware wallets have become a “cat-and-mouse” game of exploits and firmware trust, why he chooses to trust math over manufacturers, and how SeedSigner gives users a verifiable, DIY alternative to commercial wallets. We discuss the evolution of Bitcoin custody, from paper wallets to multisig, and how SeedSigner empowers users to hold keys without relying on opaque supply chains. SeedSigner also shares lessons from his years in digital forensics, why most people’s threat model is themselves, and how open-source sovereignty could become Bitcoin’s last line of defence against capture. THANKS TO OUR SPONSORS: IREN RIVER ANCHORWATCH BLOCKWARE LEDN BITKEY FOLLOW: Danny Knowles: https://x.com/\_DannyKnowles or https://primal.net/danny SeedSigner: https://x.com/SeedSigner

Transcript
Discussion (0)
Starting point is 00:00:02 I think it's important to think of security as a journey and not a destination. With Harbor Wallets, there's this, because they've created the easy button, you don't really understand what is going on behind the curtain, so to speak. Be skeptical and go into that with your eyes open and think around the corner as to the implications of some of the information you're sharing or the trust you're putting in a firmware update. The nature of security seems to be the sort of cat and mouse thing. I wanted to put my trust into the math that underlies the Bitcoin protocol rather than a third-party device.
Starting point is 00:00:44 It's just not quite the same. It's nice, looking into your glasses. How you do, Mr. Seatina? I am well today. Bitcoin's teasing all-time highs. I know. What are we at right now? Above 125, barely.
Starting point is 00:01:02 and I'm here talking to you, so if I'm nervous as shit, it's still a good day. There's no need to be nervous. This is a safe space. But yeah, Bitcoin's absolutely flying. It's great to see. I think we're in for a good end of the year. It's all the stars are aligning with the usual kind of, well, you probably follow this stuff more than me, but November and December are typically, October, November and December are typically pretty bullish.
Starting point is 00:01:28 So it's, even the shutdown, I guess, is bullish at this point. 100%. Bitcoin doesn't shut down, right, even if the US government does. No, I'm excited. October is real. I think cycles are broken, maybe, maybe. But we don't need to talk about price. That's not why you're here. I mean, we can talk about price. The views will be better if we talk about price. I'll never turn down some, yeah, bold child. But no, I think October's definitely a thing. I'm excited to see where it goes. But anyhow. So let's start off by, you've not been on the show before new or old and who are you so I am a NIM on the internet I go by initially I went by the NIM seed signer now a lot of people just refer to me as
Starting point is 00:02:13 seed when they seem in public but I was let's see been a bickoiner for about 12 years as a police officer for 15 years and I created this little open source software project called Seed Siner that's kind of been my introduction as a public bit corner so that's uh that's me so we're going to get into the seed sign of stuff today but i do want to talk about your background because it's pretty interesting um you were a police officer but not just a normal police officer by the end of your current at least um so why don't we start with with that whole journey like how did you go from being a police officer to working in forensics yeah so um my background you know bachelor's degree in english literature minor in philosophy when i studied management information
Starting point is 00:03:00 system some during my undergraduate career and kind of bounced around between a lot of jobs when I was younger. I was actually a flight attendant for a year in 2001, so I was in the air on 9-11, and after that was laid off. I worked for an airline called TWA that no longer exists. What was it like being in the air in 9-11? So we were, it was as crazy as you would think it be. We were close enough to St. Louis, which was where I'm domiciled out of, that we got to land in St. So I didn't end up stranded in another city, but I flew out of Atlanta that morning on the busiest airport in the country.
Starting point is 00:03:37 And then once we landed, I think one of the towers had been hit by the time we landed. And it was just more confusion after we got on the ground. At first they wouldn't taxi to the gateway. And then we did taxi to the gateway, but you weren't permitted to leave the plane. And then you had to leave the plane, but you couldn't leave the terminal. And it was the same confusion that,
Starting point is 00:04:00 everyone else, I'm sure, experienced. That's insane. That must have been pretty wild. Where were you meant to be going, or were you meant to be going to St. Louis? No, it was back to St. Louis. I probably had a turn to go somewhere else, too, that day, but, yeah, wasn't meant to be. That's pretty scary. Yeah. What a scary time to be in the air.
Starting point is 00:04:15 Sorry, I interrupted you there, though. No, not at all. So after laid off from TWA, I had worked some private security jobs when I was younger and ended up working at a university in St. Louis as a basically a campus security officer. And it occurred to me that it wasn't in a great neighborhood. It occurred to me I could make more money and have a safer working environment if I just went to the police academy. So I figured out how to do that and got admitted to the academy and got hired on by a local. I'm from St. Louis, so a small municipality in the county around St. Louis. And for the first three years,
Starting point is 00:04:54 I was just a road cop, like writing tickets, answering calls, you know, domestic fight in progress. that kind of stuff. And by virtue of my background in information systems, the chief of the department where I worked, knew that I was a little bit of a geek. And this would have been in, what, like 2006, 2007. So digital forensics was still a young and growing part of law enforcement. And there was a task force or a working group in the area
Starting point is 00:05:24 that was looking to add people. And they asked me if this is something that I would be interested in. and looking into or potentially joining at the digital forensic lab. So I worked over there part-time for a few months, just kind of learning the super basics about digital forensics and I guess perform well enough that they offered me a full-time, you know, a full-time assignment, I should say.
Starting point is 00:05:47 I stayed with the same police department the whole time, but was assigned, you know, every day from nine to five during business hours instead of driving a police car, I'd go to the forensic lab and was assigned casework where I'd take apart computers or try to obtain data acquisitions from cell phones and, you know, data recovery from thumb drives and all sorts of, like, digital media type stuff. Okay, so you're basically looking for information on a crime. What was it, what year was this? This would have been 2007. Okay, so you would have been working there, you did that for a few years,
Starting point is 00:06:20 I assume? The next 12 years, so until 2019. So you would have been working there during, like, the Silk Road days where people were sending drugs around. Did you ever encounter any? of those cases? So that was actually my introduction to Bitcoin was a case that, I guess, more than tangentially touched on the Silk Road. It wasn't actually my investigation. It was another examiner at the lab, who I was talking to, I don't know, in the break room or water cooler talk or whatever. And he had been assigned a case that involved a local high school kid who had been given a nice gaming computer for Christmas that had two decent GPUs on it.
Starting point is 00:06:59 And this, I don't remember if it was late 2012, early 2013, but you could still competitively mine Bitcoin with GPUs at that point. FPGAs were probably in play, and A6 were coming soon. But anyhow, this kid was mining a decent amount of Bitcoin, and he would buy marijuana on the Silk Road. It'd be shipped to his house, and then he'd break it down at a dime bags or whatever smaller divisions.
Starting point is 00:07:22 He'd take it to school and was making a nice little hustle as an entrepreneur selling weeks. at school. Of course, like a teacher or somebody found out and they called the police, and that's how his computer ended up at the forensic lab. But I had never heard of Bitcoin before talking to this coworker about it. So that's what sent me to Google and down the rabbit hole of just trying to figure out what was this thing, what did all the compute that was associated with it? What was that good for? Why did it need that? And, you know, the white paper, and I joined Bitcoin Talk and, yeah, just started learning about it.
Starting point is 00:08:00 You know when you have cases like that, it was like a young kid selling weed at school, like kids shouldn't do that because they're going to get in trouble. But do you also think, like, kind of cool. He's a bit of an entrepreneur. Yeah, I mean, I definitely didn't have that kind of sense of opportunity when I was, you know, a kid mowing wands at his age problem. Mowing lawns is a better option, kids.
Starting point is 00:08:19 No kids listen to this, but if you do, don't sell weed, mow lawns. So that's the first time you found. Bitcoin. Like if I think given the context, if I was you in that situation, police officer, find this through a guy who's selling weed at school, I would probably, especially back in 2012 whenever it was, I would jump to the assumption that this was just money for criminals. Like many people are even still falling into this pit trap. What did you think of it? No, that was probably becoming the predominant narrative at the time. I think Bitcoin was probably transitioning from quirky nerd money to
Starting point is 00:08:54 a tool for money launderers and drug sellers on the darknet. But they say, I don't know if it was D++ or somebody else, I think it was heard of who said Bitcoin kind of hits you where you're at at a given stage in your life. And at that point, you know, I was a young father with a big mortgage and I was, you know, trying to pick stocks and make investments in different things. I was looking for a way to make the money that I earned through my employment work harder for me. And so I tended in the beginning to see Bitcoin as an investment. I saw the permissionlessness of it.
Starting point is 00:09:34 And what really resonated with me was the scarcity of it, the hard cap on supply. And so as I started to think about the market cap of Bitcoin, it really seemed like it could potentially be significantly undervalued. So that was probably, you know, number go up. in that day and age is what drew me into it. But at the same time, that was, you know, the original generation of alt coins, you know, light coin, feather coin, all that kind of stuff. And so it wasn't, Bitcoin was the top dog, but it wasn't, Bitcoin only wasn't a thing back then. And so it was this opportunity to speculate and make money that probably first brought me in. This episode is brought to you by River, and they've just launched a very cool new product
Starting point is 00:10:16 where you can automatically buy every price dip. Their zero fee recurring buys are a proven way to build wealth with Bitcoin, and you can now supercharge them and buy up to 100% more Bitcoin if the price is dipping at the time of your order. It's a great tool to buy more Bitcoin at lower prices, and while your cash is waiting to be deployed, you earn 3.75% interest on it, paid in Bitcoin. River is built to last with security at its core and is the only Bitcoin exchange in the US with proof of reserves. To open an account, go to river.com forward slash WBD and earn up to $100 in Bitcoin when you buy. That's river.com forward slash WBD.
Starting point is 00:10:53 What if you could lower your tax bill and stack Bitcoin at the same time? Well, by mining Bitcoin with blockware, you can. New tax guidelines from the Big Beautiful bill allow American miners to write off 100% of the cost of their mining hardware in a single tax year. That's right, 100% write off. So if you have $100,000 in capital gains or income, you can purchase $100,000 of miners and offset it entirely. Blockware's mining as a service enables you to start mining Bitcoin right now without lifting a finger.
Starting point is 00:11:21 Blockware handles everything from securing the miners to sourcing low-cost power to configuring the pool, they do it all. You get to stack Bitcoin at a discount every single day while also saving big come tax season. Get started today by going to Mining.blockware Solutions.com forward slash WBD. Of course, none of this is tax advice, speak to your accountant or tax advisor to understand how these rules apply to you, and then head over to Mining.blockware Solutions.com forward slash WBD and you'll get one week of free hosting and electricity with each hosted miner purchased. What Bitcoin did is brought to you by the massive legends, Iron, the largest Nasdaq listed Bitcoin miner using 100% renewable energy.
Starting point is 00:12:02 Iron are not just powering the Bitcoin network. They're also providing cutting-edge computing resources for AI, all backed by renewable energy. We've been working with their founders Dan and Will for quite some time now and have been really impressed with their values, especially their commitment to local communities and sustainable computing power. So whether you're interested in mining Bitcoin
Starting point is 00:12:20 or harnessing AI compute power, Iron is setting the standard. Visit iron.com to learn more, which is iri-n.com. I mean, I think that gets everyone, right? It's number go up first. Everyone thinks it's a get-rich-quick scheme, and then you learn it's a don't-get-poor-slow scheme.
Starting point is 00:12:34 Right, but you, so, but I also had those misgivings, given, you know, my role in law enforcement and stuff, And somebody, the majority of my work in forensics dealt with crimes against children. And so the possibility of Bitcoin being used to sell illicit material online. And that sort of thing. Like that was a part of how I viewed it. And there were like, I remember being a bit conflicted about it.
Starting point is 00:13:01 There was a Bitcoin podcast at the time called Let's Talk Bitcoin. And it was, I think Adam B. Levine was the host. And Andreas into like a network of podcasts, right, I think. It grew into a network. But originally it was that Adam B. Levine, Andreas Antonopoulos and another person, Stephanie Murphy. And they were actually a daily Bitcoin podcast for a while. And I remember Andreas bringing up the whole boogeyman factor of child sexual assault material being sold for Bitcoin. And I really wrestled with that a lot early on.
Starting point is 00:13:39 because Bitcoin is permissionless and to a degree depending on how you use it private. And so it was something that you eventually realize like cars are dangerous too and cars kill a lot of people around the world. But the value we get from cars above people dying in car crashes dramatically exceeds, you know, the number of sad deaths that occur. So the possibility of it is just so much bigger than the people who misuse it or, you know. I think I actually saw this stat recently.
Starting point is 00:14:12 I think it's 40,000 Americans die every year through traffic accidents. And like as society, we've decided to accept that that's a worthwhile trade-off. Obviously, people are doing everything they can to bring that number down as much as possible. But it is a harsh reality that you have to face when you actually understand what Bitcoin is. Bitcoin is freedom money. It's permissionless. It's money for enemies. People are going to use it in ways you don't like.
Starting point is 00:14:33 And you have no ability to stop that. You just have to come to terms with it. And again, weigh up the benefits against the negatives and realize that it's a worthwhile tradeoff. Yeah, same story with firearms. Obviously, that's an analogy that people make a lot of the time. But, yeah, guns are dangerous and they kill a lot of people. But they also protect a lot of people's homes and serve as a deterrent and help people defend themselves. And yeah.
Starting point is 00:15:00 So when you discovered Bitcoin, you saw it as an investment first. Obviously, I'm sure that's changed since then. Well, it is still an investment, but it means certainly more to me, and I think more to you than that. Did you manage to hold on through all the hype mania phases? Yeah. Yeah, I alluded to this briefly when we were talking the other day in preparation for this. So I had a severe weekend's incident in 2017. Not that I was a Bitcoin barren or anything by any means, but I had in early 2017, so
Starting point is 00:15:36 the majority of the Bitcoin I acquired early on were like in 2013 and 2014. I remember buying Bitcoin for as little as like 65 bucks on Coinbase in the summer of 2013 as they were was kind of crashing before the run up in the end of that year. But after the peak in 2013, the Mount Gawks incident happened and there was just a long, brutal bear market through 2014 and 2015. And that was, I think everybody's first bear market is like the worst one. And that was a bad one. Yeah. And you don't, you don't have the experience of Bitcoin resurrecting itself after it falls. You know, it comes back up. So you think like maybe I'm the idiot and I bought close to the top and, you know, I'm, you know, I'm the greater full. So I'm dealing with all this kind of uncertainty through
Starting point is 00:16:32 2014, 2015, 2015, 2016. And in late 2016, I don't remember the timeline exactly, but the price started to perk up. And it got past the peak of 1,200 or in that neighborhood. And then the Bitcoin price is approaching like $2,000, $2,000 and $2,500. And with the mortgage we had on our house, if at that particular moment I sold all of the Bitcoin and legitimate, paid the taxes, which were a gut punch, I was at a point where we could pay off the mortgage of our house and be completely out of debt and kind of have a fresh start financially in life. And at the same time, in early 2017, what's going on is actually remissant of what we're going through now.
Starting point is 00:17:22 There was the four cores were kind of in full swing or coming to it at that time. And I had this anxiety or worry or whatever you want to call it that. You know, the conventional wisdom is that Bitcoin forks, no big deal. You just hold all the forks. And eventually, when everything sorts itself out, you know, which one the winner is. You're, you're, you know, you're not hurt. But I was concerned with the number of forks that were happening that if the network fragmented too much, the whole concept would lose, lose its perceived value. So people might actually not remember the history of that.
Starting point is 00:18:00 But that would that have been things like Bitcoin Unlimited and Bitcoin Gold? Bitcoin gold. And Bitcoin Cash. Yeah. And, you know, all of those at the time. And another factor of it is like I'm a modest means coming from the middle class kind of guy. And when you've put, you know, I don't know what I put into my initial investment of Bitcoin, whether it was like probably between $10,000 and $20,000 of money that we had saved up when we were bringing in his revenue. My wife, God bless her was very understanding about.
Starting point is 00:18:30 buying Bitcoin and some of the, like, I was on the, like early on when A6 were just becoming available, if you wanted to buy one, it was never just like buy it off the shelf and they ship it to you. It was always some kind of like pre-release or funding campaign where you sent in money and it was a pre-order for something that would hopefully come through a few months later. And then when you got it, it wasn't efficient. Yeah, and because so much new hash is coming online, it didn't produce maybe what you'd expected it to when you'd initially ordered it. So at one point, went to my wife and I was like,
Starting point is 00:19:03 I'd like to buy this magic machine that makes Bitcoin for $3,000 or something like that. And she's like, oh, okay. Anyhow, so in 2017, given what the Bitcoin I was holding, what it was worth, and what did it started from, I think people who have, are from modest financial means, they're just not mentally equipped
Starting point is 00:19:25 for that kind of financial gain. In your mind, you start to second guess, whether it's real, and there's this huge temptation to very binary thinking where you don't sell a little bit. If you're going to sell, you just get out and sell it all. And there's, I was, I guess the best way to say it is I was very financially unsophisticated. At that point in my life, not that I'm super sophisticated now, but even more so back then. And so one day I remember being in the forensic lab and it always seemed like I had on my computer that was connected to the internet, which is a separate computer. had like a price ticker or a exchange chart or something up.
Starting point is 00:20:02 And I see the number kind of like fluttering around my magic number of like get out of debt. And I remember that day very clearly. Like I just got up told my boss I was going home for the day. It was still like mid-morning. And I went home and I was started, I just started pulling out. I didn't have a hardware wallet at that point. We can talk more about that. Was that paper wallet area?
Starting point is 00:20:26 It was still paper wallet. When I set it up initially, it was definitely still the paper wallet era, but Harder wallets had subsequently come out. But it was... Yeah, Trezor must have been around then, and Ledger probably was in its early form. I don't know when... Trezor, I think, was like late 2013 or late 2014,
Starting point is 00:20:43 if my timelines right. But when I had set things up initially, hopefully I don't blank on the... I had used a web wallet, but it was like a web paper wallet. It was an open source project, and I'll think of the name of it. It wasn't like a lectern wallet, something like that was it. No, no, no.
Starting point is 00:21:05 So it was basically a website. And it was a GitHub repo. All of the code that underlied the website was published in the repo. And what you would do is basically download the HTML, you know, an associated code that makes up the website from the repo, and they provided an authentication hash. So you could, if you're trusting the person who publishes, you know, that website, what they was supposed to be, and you would, this was actually a forensically sound process, you would boot up a separate computer offline, not connected to the internet, with a fresh Linux
Starting point is 00:21:37 installation, and you would use that to generate new private keys, and it's called bitadress.org, people who have been around in Bitcoin, I'm sure, recognize it. The guy who created it, his first name is Peter. I won't say his last name because he's kind of private, but super great Bitcoiner. He's actually known as Bici Curacao, who's promoting Bitcoin adoption there. But anyhow, went through this very methodical process using an offline computer that was completely in line with my forensic training and bought an inkjet printer
Starting point is 00:22:13 that I used to print out the private keys for the paper wallets. Never used that inkjet printer again for anything else. It was a USB-connected one, so it never touched the internet. Went through this very carefully thought out process. But in the end, what am I doing? I have a list of private keys printed on eight and a half by 11 computer paper, you know, that's in my underwear, I drew at home. Yeah. Because when I first put it in there, it was worth like a few thousand dollars, you know, and over time as Bitcoin started, appreciate more.
Starting point is 00:22:42 You know, my security setup, I think is eventually what was part of the genesis of Seed Center because of all of the contributing factors to this, you know, weak hand experience, which, you know, you know, I'm not in the league of Laslow, the guy who bought pizza for Bitcoin way back when. But when you think about the amount of Bitcoin you previously owned before you sold everything, it's not an easy memory. And so to tell this story in 2017, like, and I awkwardly sold the Bitcoin. It wasn't even like set a sell order. Like there's probably, I was, I had an account on Gemini that day, and there's probably this awkward like blip on the chart of Gemini that day from me just market selling.
Starting point is 00:23:27 a bunch of Bitcoin. I didn't even know Gemini was around by then. 2017, yeah, they were still pretty small. But yeah, it was on Gemini. And so went home, you know, started sweeping all of these paperwallets, awkwardly dumped everything on Gemini and then had this big dollar balance, which I didn't really believe it was real until I'd moved it, you know, did the wire transfer into my personal bank account and was making preparations to pay off the more
Starting point is 00:23:58 but but boy did I not want to hear about Bitcoin for the rest of the year I bet like in 2017 because like the the price rise you know was pretty dramatic from 2200 or whatever that I sold that up until 18 or 20,000 so I mean even in that year alone you could have basically 10xed it yeah and it's like you know even if I hadn't held on to the Bitcoin if I had had better timing when I sold it would have meant a much bigger. Like I said, I wasn't very financially sophisticated, so it is what it is. And for the rest of the year,
Starting point is 00:24:32 I didn't want to hear about Bitcoin. Like I decided me, being able to pay off our mortgage was kind of the first step to me thinking about stepping away from my career in law enforcement. And so I started focusing on that. My wife has always been better at bringing money home than I had been as a cop. So we started to talk more about me being
Starting point is 00:24:53 stay-at-home dad with our kids. And I kind of went on this self-improvement spree. I started reading a lot of self-help books and trying to improve things about myself that I thought were suboptimal. So I'm, you know, I deleted Twitter. I got off a Bitcoin Reddit and, you know, all the other ways I'd been following Bitcoin at the time. And I just started to focus on making sure that I was a good enough person to retire early from my job and not end up. like Mr. Mom where I'm sitting on the couch, like watching TV and drinking wine at 2 p.m. Yeah, exactly. So for the rest of 2017, like I'm reading myself help books, getting up in the morning and, you know, going through my miracle morning routine and stuff like that. And in 2018,
Starting point is 00:25:43 I don't remember what the catalyst was, but as painful as it was sometimes, I started peaking at the Bitcoin price. And in 2018, you know, it started to come down. I bet you were the only person happy to come down that you. One of the few. And like Bitcoin gets its hooks in you. It's like the meme from the godfather. Like once you think you're out, they pull you back in. I don't know if that's good fellow is the godfather. And so I started paying attention to the price again. I probably created a new Twitter account because I deleted the old one. And as the Bitcoin price got to like, I didn't catch the absolute bottom, but I was like kind of good. I started buying more around $4,000 as it had come down from 20.
Starting point is 00:26:27 And this is like in 2018 and in 2019. So I started accumulating more Bitcoin and this is like Bitcoin's different for me now. It's not, it's still an investment to some degree. But if you think about 2017, 2018, 2019, that is really the time when the US national debt starts to ramp up. And my kids are getting a little bit older and maybe I'm maturing a little bit, but I'm I'm starting to think about what world am I leaving for them? Where is this debt going?
Starting point is 00:26:57 What kind of country are my kids going to be left with? And so Bitcoin took on additional significance beyond just being an investment for me as I was starting to re-buy it. Again, still love number go up, especially relative today to where it was then. But my Bitcoin journey was different at that time. And after I'd started buying more Bitcoin, I started. started to think about cold storage. And I was still at work in the forensic lab.
Starting point is 00:27:27 And I started to think about the reasons why I just so awkwardly had the lettuce hands experience. Well, I understand it, though. I think one thing that's probably true for almost all Bitcoin is, well, there's a few things in what you said that's true. One that it gets at its hooks in you. Probably from the first day I ever read about Bitcoin, there's likely not been a single day since that I've not read more about Bitcoin.
Starting point is 00:27:52 But the thing that I think people aren't prepared for and never can be when you first buy Bitcoin is the fact that you have to consider what you will do when it 10X is because at some point it's going to 10X on you. And that comes down to both psychologically what you do with getting that much wealthier. But also, when you're thinking about
Starting point is 00:28:13 how you secure your Bitcoin, you need to think about securing 10X the value of today. Right. And like, luckily I've had no mistakes that meant I've lost Bitcoin in that way, but I've had very janky setups compared to what I should have had. So I guess for you going from using paper wallets back then, like it's interesting just to hear, like it's easy to think since 2017 to now, not that much has changed. But when you actually think about the infrastructure side of Bitcoin, the hardware that's available,
Starting point is 00:28:42 it's a world apart. So when you were thinking of like your initial paper wallet setup and you came back to Bitcoin, How did you view sort of the hardware wallet market at that time? Right. So I had consciously avoided the hardware wallet market. And part of it, you know, to be candid, was that I already had a setup that I was reasonably comfortable with. It turned out like I think as I bought Bitcoin and started to think about what I could, what
Starting point is 00:29:18 my preferred setup for long-term cold storage was. I started to think about my background in forensics and what about my background might inform an approach or a strategy that would make sense for me and kind of calm my unique sort of anxieties. One thing I can say about my time in forensics is I grew up in forensics during a very unique period in time where initially when I started doing forensics,
Starting point is 00:29:48 it was all what's called deadbox forensics, where you take a computer that's been powered down, you basically remove the hard drive from it, and that's your primary, almost your only exclusive source of information about that computer and what it was used for. But early on in my career, you know, at first we started seeing flip phones,
Starting point is 00:30:07 and then, you know, the rise of cell phones occurred. The iPhone, I think, came on in 2006 or seven. Maybe it was a little bit before that. And so I got to watch mobile phones start from these awkward devices that you flip open and press the number three, eight times to get a lowercase E or whatever it is, grow into these supercomputers that we all carry in our pocket and we rely on for not just being able to call people, and not just browsing the internet, but like personal authentication and accessing our bank accounts and all sorts of, you know, payments and other things. I mean, they've replaced computers for a massive amount of the population.
Starting point is 00:30:46 Yeah, and over that time, like forensics in terms of the workload that the average, digital forensic examiner sees, it was actively transitioning from desktop computer to laptop and then to phones and tablets. Mostly phones, but you still see some tablets. And so the mobile phone industry, the first kind of smartphone you can think of is a Blackberry.
Starting point is 00:31:11 You can remember when President Obama took office, it was like he kind of said something effective, you can pry this Blackberry out of my cold dead hands, because iPhones were becoming more popular, but we're all creatures that happen. People like the buttons. He really liked his Blackberry. And Blackberry had some pretty crude security measures
Starting point is 00:31:36 in terms of what's baked into the device. And so some of the earliest forensic challenges that we had in the forensic lab were getting a device like a BlackBerry and trying to figure out if it was pin enabled. How do we get into this to observe, you know, observe, you know, at that point, there weren't apps per se. You're just trying to get into somebody's call history and Blackberry. You could get some emails off of it potentially. But shortly after
Starting point is 00:31:57 Blackberry came the iPhone and then Android, not too long after that. And as the smartphones grew up, you know, Apple and Samsung and the other companies, they want to sell more smartphones. And they They really wanted to get access to government and corporate markets. And government and corporate markets had a certain threshold of security requirement that they needed Apple to be at before Apple could, you know, before they would buy, you know, 5,000 iPhones for distribution to government employees or whatever it was. So Apple started adding security features that were basic and clumsy at first, but that got increasingly sophisticated.
Starting point is 00:32:42 And what I observed as someone doing forensics over that time period was this ongoing cat and mouse game between Apple trying to up its security game and then an increasing number of researchers and then startups who would examine, you know, the underpinnings of iOS and Android and come up with security exploits that could be used to get around the gold standard, or what you really try for is being able to. to authenticate to log into the device, whether that's, now it's face ID, but at the time, you know, it was a lock pattern or a pin code or whatever it was. And so Apple would implement a new security feature. Six months later, an individual who's doing research or as it became more likely,
Starting point is 00:33:30 a company that contracts with federal government and other local governments would develop an exploit to get around what Apple had done. Apple would do something new, six or nine months later. And it's this cat and mouse game. So with my experience with mobile phones, you know, I got a lot of phones that were locked when they arrived to me at the forensic lab. And as a rule of thumb, if you could either turn the phone off or keep it powered and offline for a lot of phones within 12 to 18 months, if you just waited it out, you know, and court cases take a long time anyway. the criminal justice system isn't fast.
Starting point is 00:34:12 So if you were willing to wait it out, a lot of times, an exploit would be developed that could defeat a given security mechanism that was in place on a phone that you were starting to work with. So to circle back around the Bitcoin, harder wallets, as I saw them emerging with the mobile phone industry and then harder wallets, when I saw harder wallets, I thought I've seen this movie before. I kind of understand how this is going to work.
Starting point is 00:34:37 And when you consider, you know, the, Apple has, you know, it's a, I don't know, is it a trillion dollar company or whatever the market cap of Apple is, the amount of money that they spend on these security exploits and they're still not practically able to keep government contractors out of their phones. I don't know if that's contrived, if that's a real thing or if it's, but the nature of security seems to be the sort of cat and mouse thing. And so number one, I just had ambivalence about hardware wall. It's because of that that cat and mouse game that I observed with mobile phone security. And then at the time, it's changed since then. But at the time, most harder wall, it's required that you connect them to your laptop. Yep.
Starting point is 00:35:22 And those USB connections, I just never felt comfortable with that. Because if you have the wrong software conditions in place, like, you know, bad things can happen over that wire. So never trusted USB. And so I just, that during that period of my time as a Bitcoin, and that's why I stuck with the paper wallets. If you already self-custody of Bitcoin, you know the deal with hardware wallets, complex setups, clumsy interfaces, and a seed phrase that can be lost, stolen, or forgotten. Well, BitKee fixes that.
Starting point is 00:35:52 BitKee's a multi-sig hardware wallet built by the team behind Square and Cash App. It packs a cryptographic recovery system and built-in inheritance feature into an intuitive, easy-to-use wallet with no seed phrase to sweat over. It's simple, secure self-custody without the stress, and time named Bitkey one of the best inventions of 2024. Get 20% off at bitkey.world when you use the code WBD. That's B-I-T-K-E-Y. Dot World and use the code WBD.
Starting point is 00:36:21 This episode is brought to you by Anchor Watch. The thing that keeps me up at night is the idea of a critical error with my Bitcoin cold storage, and this is where Anchor Watch comes in. With Anchor Watch, your Bitcoin is insured with your own A-plus rated Lloyds of London insurance policy, and all Bitcoin is held in their time-locked multi-sig volts. So you have the peace of mind known your Bitcoin is insured while not giving up custody. So whether you're worried about inheritance planning, wrench attacks, natural disasters,
Starting point is 00:36:47 or just your own silly mistakes, you're protected by Anchor Watch. Rates for fully insured custody start as low as 0.55% and are available for individual and commercial customers located in the US. speak to Anchorwatch for a quote and for more details about your security options and coverage. Visit anchorwatch.com today. That is anchorwatch.com. Do you wish you could access cash without selling your Bitcoin? Well, Leeder makes that possible. They're the global leader in Bitcoin back lending and since 2018 they've issued over $9 billion in loans with a perfect record of protecting client assets. With Leiden, you get full-costly loans with no credit checks or monthly repayments, just easy access to dollars without selling a single sat.
Starting point is 00:37:28 As of July 1st, Ledon is Bitcoin only, meaning they exclusively offer Bitcoin back loans with all collateral held by Ledden directly or their funding partners. Your Bitcoin is never lent out to generate interest. I recently took out a loan with Ledden. The whole process was super easy. The application took me less than 15 minutes and in a few hours I had the dollars in my account. It was really smooth. So if you need cash but you don't want to sell Bitcoin, head over to leaden.io, forward slash, WBD,
Starting point is 00:37:55 and you'll get 0.25% off your first. loan. That's leaden.io forward slash WBD. This episode is brought to you by Bitcoin Meena. On December 8th and 9th, I'll be in Abu Dhabi for Bitcoin Mina along with 10,000 other Bitcoiners. There's an amazing lineup of over 200 speakers sharing Bitcoin insights and innovation from all over the world. And if you're looking for the ultimate VIP experience with exclusive networking plus premium food and drink, then grab the whale pass and the whale night party even include surfing, so you know I'm going to be there. Tickets are on sale now. Use code WBD to get 10% off at checkout on all past types. The website is mina.b.t.c and use code WBD for 10% off.
Starting point is 00:38:36 So what do you think then of the hardware wallet industry now? Because as far as I know, all the major companies don't require you to plug your hardware wallet into a device physically. And I wish I had someone who was more technical on this than me. Maybe you can explain. But like, I don't know the implications of like the secure elements on all of these devices and what that means in terms of the cat and mouse of security. So this is, for me, this is disclaimer time. Yes, I was a forensic examiner for 15 years, but I am not super deep into security research where I'm the person who's evaluating secure platforms and a secure element platform in terms
Starting point is 00:39:12 of being able to develop exploits for it. I was someone who learned and executed exploits that other people did. So in terms of the harder world industry right now, I can't comment on specific modules that one company's using versus another one. It's more kind of the general adversarial landscape and my experience with mobile phones who are able to spend, even at this point, a lot more money on security audits and stuff
Starting point is 00:39:38 than the hardware wallet makers are. So maybe then, like, just for context, I've used basically all the major hardware wallets. I feel very secure in my setup using them. Do you necessarily have an issue with the hardware wallets today? Because I can believe that this is going to be a cat and mouse game. There's no way that people aren't going to be trying to exploit these. And like Ledger, for example, have their dungeon where they continually test all the devices,
Starting point is 00:40:10 trying to find exploits and then disclose them. And they found, like, a number of them. But even still, even with the cat and mouse game that will happen with this, that's the place that I feel comfortable to store in my Bitcoin. fine. Why do you not? Because you can assume that maybe you have to update your hardware every few years. Like there is going to be improvements and changes and things that need addressing. And when you say update, you mean refresh to hardware. It's not just a firmware. Yeah, well, yeah, maybe both. I mean, definitely the firmware. And I think at some point,
Starting point is 00:40:40 hardware is going to get better and you might want to upgrade to superior security. So part of it for me is, well, to tell, you know, a little bit of about my time in forensics. So very frequently when you're dealing with people who are storing and accessing contraband information, and they know that there is some possibility of them being caught by law enforcement, their computers being seized, like people take countermeasures, whether it be activating Bitlock or on their computer or using some kind of software encryption or whatever. So when I think about the two sort of, two sort of avenues you can go down.
Starting point is 00:41:25 One is trusting a hardware device and physically some sort of access controls that are on a hardware device, like a pin code or like facial recognition or a fingerprint or whatnot. I would call that you're putting more of your trust in the hardware. And in my experience in forensics,
Starting point is 00:41:44 if I let that hardware sit there for 18 months, there's a good chance I may be able to get into it. However, I also had a number of cases where, you know, people in an attempt to secure information that could have led to their, you know, indictment and prosecution, read child porn into that, they would use encryption, like, you know, some of the kind of gold standard encryption tools that are out there that are software encryption, but still, so I had some of the gold standard encryption tools that are software encryption, but still, so I had. certain cases that someone used true crypt, say, just to throw one out, someone using a good version of true crypt with a sufficiently complicated password unless something happens with quantum computing, like, it's going to be the heat death of the universe before I'll be able to guess the password that they set up with their particular version of true crypt and the
Starting point is 00:42:51 encryption algorithm they used versus this iPhone that's totally, you know, supposedly secure that if I wait 24 months, I'll probably be able to get into. So I can appreciate what you're saying about the harder wallet industry. I think a lot of that comes through as marketing. And I think they're absolutely, I don't want to be a complete naysayer. I think there are absolutely use cases and places where harder wallets can deliver value. But for me, I wanted to put my trust into the math that underlies the Bitcoin protocol rather than a third-party device.
Starting point is 00:43:25 Okay, I do want to get into that because I have questions around that as well. But just to be fair here, like you're talking about the most adversarial environment possible. This is like law enforcement having access to your devices. And you also, like this is assuming there's a reason they want access. Like if you have just lawful Bitcoin on a hardware wallet, your risk isn't really, isn't that. It's a different risk.
Starting point is 00:43:48 Well, to me, the number one risk is always used. screwing yourself in terms of... Yes. I totally agree. I think I would imagine that's the most likely way that anyone ever loses their Bitcoin. So there's one part of it, which is you want to keep these things as simple as possible while retaining as much security as possible.
Starting point is 00:44:04 But also, like, what's the real risk? It's that someone breaks into your house and steals the device, if the device is at your house, or breaks into wherever the device is and steals it. And it's not necessarily thinking about law enforcement having access to it. No, not law enforcement. akin to law enforcement, we could also think of, you know,
Starting point is 00:44:23 a dedicated adversary who knows how much Bitcoin you own and has some amount of resources to spend on that. Someone breaking your house is definitely a concern, but what I worry more about is, let's say I set up a hardware wallet and I use it,
Starting point is 00:44:40 I set it up using a private key that wasn't generated with sufficient entropy that was somehow guessable or predictable by someone else, and you think you've got X number of sets in your wallet, and then one day you wake up and go to check your balance. And because someone else owned your key before you did or was able to guess it somehow, your Bitcoin's gone.
Starting point is 00:45:02 That is a nightmare scenario and something that some people have experienced. This is escaping me right now, but you may know. Isn't there a case of that happening right now with a wallet, like an old Bitcoin wallet that was generating stuff with poor, entropy in Bitcoin is being taken. Was it, it's something
Starting point is 00:45:22 Bleed, is the name of the exploit. I don't know if it was key bleed or something similar. I can't think of the name, but it was some sort of online software wallet where it wasn't anything malicious, just technically there was not enough entropy. It was using like a poor random number generated. The RNG was
Starting point is 00:45:42 insufficient or who knows what. But that sort of thing. But it also, For someone who's not sophisticated, that problem can manifest itself with harder wallets. With some harder wallets, you can roll dice a number of times to create a private key. And there have been sadly instances where some of the platforms did not require enough dice rolls. And people not really understanding what they're doing, they might roll the dice a half dozen times and think that's great for a private key. only to, you know, as soon as they make a deposit, there's some bot out there looking to sweep
Starting point is 00:46:21 a particular number of known addresses and poof, the money goes. I mean, this is one of the things that I think is really important for everyone to, like, have a good understanding of is that, like, I love that these devices have products like that, and you can do, you know, 100 dice rolls to create your entropy. But done poorly, it's more dangerous than just not doing it at all. And I think people sometimes overcomplicate their setup when they don't really have to. And I know Odell's on this all the time, but like the idea of multi-sig is great for people, especially if you're like maybe a public figure in Bitcoin or you're a corporation or
Starting point is 00:46:54 whatever. But for a lot of people, just a simple single-sig setup is okay. It's okay. But I think it's important to think of security as a journey and not a destination. So maybe we were talking before about your Bitcoin 10xing, you know, from where it is now. So maybe right now you're comfortable a single-sig. but after a three or a four X, you know, it's like that meme where multi-sig
Starting point is 00:47:21 is walking down the street looking pretty hot and single-sig's like, where you checking him out. Yeah, I think of security as a journey, and I also think we need to be careful about addressing those nagging concerns in the back of our minds. Things that, you know, when you're laying in, in bed at night, you think about your sats and what you hope they're going to be worth and how you're storing them.
Starting point is 00:47:51 What are the little things, if any, that make you a little uncomfortable that maybe you haven't thought through or maybe you don't understand completely about your setup? I think it's important to pay attention to those. And multi-sig, for me, so admittedly my vantage point is a little bit different. Having been someone who's actually helped execute search warrants and gone into people's houses and businesses looking for things on behalf of government, I just naturally have a more adversarial take on things. But multi-sig was like a through-the-looking glass moment for me when it finally started to be available to everyday Bitcoin. Originally it was like BitGo and some institutional service providers.
Starting point is 00:48:31 But when Specter wallet came out, was really, to my knowledge, the first bit-coiner, average-bit-corner-facing tool that made Multisig possible. Because if you have a single-sig wallet, like you got to keep that wallet at your house. And then of course you have to, you know, back up your seed phrase, right? So it wouldn't make sense to keep that with a wallet. So you got to find a second hiding place whether that's a bank deposit box or your best friend's gun save for under a tree in your grandma's backyard or wherever it is.
Starting point is 00:49:01 And if someone finds the seed phrase, you know, if they know what it is, game over. If they find your harder wallet, like there's also the issue of people are really bad at choosing pins. Like, I've got into more mobile phones than I think I should have just by, you know, there's like five or ten things that you go through last four of Social Security number, birthday, spouse's birthday, you know, the numerics of the street they live on and all this kind of stuff. People are just bad at choosing pin numbers. So if you can get into that person's house and either find their backup or they're hard a lot, I mean, they could be cooked.
Starting point is 00:49:42 But with multi-sig, like even if you have a nation-state level adversary who has significant resources and it turns it from just going to your house and finding that one thing and potentially trying to exploit that one thing to maybe, first of all, you don't know, is it a two of three? Is it a three of five? Is it a six of seven? Who knows? And then it becomes this treasure hunt of figuring out where the pieces to the puzzle are hidden and how many of them you need to be able to get access.
Starting point is 00:50:18 So Malteseek was really when I had reaccumulated some Bitcoin, I was looking for that level up for my cold storage. Multistake for me was where it was at. And that is a big part of the journey that I took eventually to Seed Center, but just my initial journey and trying to resecure, you know, the business. Bitcoin that I bought. Yeah, the thing that I would, like, reiterate there is we kind of touched on it already is the fact that you're most likely to lose your Bitcoin, not have it stolen from you.
Starting point is 00:50:46 And like, the thing that people need to be fully, fully confident in is that they can access that Bitcoin if anything goes wrong. And sometimes I think multisig maybe is a step too far for right now for some people. But like you say, this is a journey, not a destination. It's one of those, for me, with great, with great power, with great power comes great responsibility. And it's the same with even with your single SIG harder wallet, you know, if you choose to add BIP 39 passphrase to it. So you're effectively with that creating a two of two multi-sig because if you lose either the passphrase or the seed phrase without the both of them, you don't
Starting point is 00:51:26 have access to your funds. So same with multi-sig. And we talked about this a little bit beforehand as we were discussing, you know, this conversation that there are tools like cars and firearms and knives that if you're going to use and you're not going to cut yourself or shoot yourself, you have to invest a basic level of training into understanding what is powerful about that tool and what's dangerous about that tool and how to properly use it. And multi-sig is definitely a level up from single-sig in terms of, the information storage requirement because you have to, I don't want to get too technical,
Starting point is 00:52:12 but you have to keep versions of all of the public versions of the private keys. You have to have those on hand to be able to make the threshold spend, unless you have all the private keys. But to dumb it down a little, there's some additional information that you have to keep. That information, I think, can be classified as private but not secret, which is confusing
Starting point is 00:52:33 because we say private keys and not secret. keys, but if someone gets the information about your wallet set up, they can see your money, they can see your balance in the transactions you made, but without the private keys, they can't steal your money. So enhanced information storage threshold, but it's a diminished requirement in terms of the private versus secret thing, so you can secure that a little differently. Like I think for a wallet descriptor, maybe we're getting a little technical here, but for a wallet descriptor, you know, encrypted in cloud storage is potentially okay if you're, you're if you're comfortable with the trade-offs,
Starting point is 00:53:06 or keeping multiple copies of it. But anyhow. But I think it obviously is getting a little technical there. I think the important thing for people to know, though, is that, like, there are different products out there for people who have different needs. And so, Bickie, your response to the show. But I think that's a perfect sort of entry-level thing
Starting point is 00:53:23 for people to be using who may not, this might all be going over their heads. But something like that is a great option. And then if you want to do multisigigmite, there's, like, a ton of hardware out there. And obviously, the seed signer, which we can talk about now. So when did you first come up with C-Signer? Can I take a step back?
Starting point is 00:53:41 Absolutely. So in terms of, I do think Bikki is potentially a great solution. And I think what people, kind of the paradigm is how much of the easy button do you want? If you, I keep going back to this Knives metaphor, but if you want to dice an onion, you can use one of these auto dicing things that you just tap on it a few times in it. But you may not like the way it dices your onion. So you may want to invest in learning how to use a knife properly and how to dice an onion properly. And it's always this trade-off in security of, we'll probably keep coming back to this, but in security, it's always a trade-off.
Starting point is 00:54:19 And so that easy button means that you're giving up a certain amount of trust with the people that create the easy button. So for people or privacy. Yeah, yeah, or privacy. So for people who are comfortable with the increased trust or privacy threshold, those kinds of solutions maybe are great for them. But for people who aren't comfortable with the tradeoff, there are other options for them as well. But to jump back to your question about Seed Siner. And just one thing on that, it's like I think the important thing as well is that, like, in my opinion, at least, everything's a step in the right direction as opposed to just keeping it
Starting point is 00:54:56 on an exchange or with an ETF or anything like that. At least, at least you're making a step in the chain. Yeah, no. Even, you know, you wouldn't want to put a huge amount of money on a hot wall. But even a hot wall is better than Coinbase or, you know, BlackRock. Yeah, 100%. Okay. Let's go on Seediner. So Seed Siner came about as I was reestablishing my new cold storage setup. And like I said before, I became aware of a wallet called Spector Desktop. And I don't know if you're familiar. If people listening would be familiar. It was very similar to what Sparrow. is right now if people are familiar with Sparrow. Sparrow is kind of the gold standard of
Starting point is 00:55:39 wallet coordinators that you can use on a laptop or desktop computer. So I discovered Spector desktop and Spector had kind of a companion project that is called the Spector DIY, which is kind of a single board computer device. It's a handheld computer that's microcontroller based that you build from off-the-shelf parts. And with this one device, you can actually use it to create and manage multiple private keys. And so as I was really enthusiastic about Spector desktop and Spector desktop supports multiple hardwallets, even not at the very beginning, but after on, Keith McKay did a bunch of work to implement Harder Wallets and Spector Desktop. This Spector DIY was this super powerful tool that, resonated with me because it applied some of the foundational concepts that I'd learned about
Starting point is 00:56:42 while using digital forensics. Like it was completely offline, you know, didn't connect to Wi-Fi, didn't connect to Bluetooth. And you could use it in such a fashion that it didn't store your private keys after you'd use it to create one or more private keys. It didn't persistently store them, which is a technique that we often use in forensics to conducting an examination of a computer. And so I'm enchanted with Spectre desktop. I build one of these Spectre DIYs, and I'm getting my new multi-sig setup, and it's so awesome. I started interacting with his name Stepan Snigerev, who was the primary architect of Spector. And I also dabbled in 3D printing. And at the time, they didn't even have, like it was just a circuit board that you bought and you held in your hands kind of
Starting point is 00:57:31 awkwardly with a scanning module attached to it. So I had done a little bit of stuff with 3D printing, so I designed a very simple, rudimentary enclosure for this thing and offered to send them one, and I started interacting with some of the people who were behind that project. And that also put me in touch with a Bitcoiner called Michael Flaxman, who's, I guess he would call himself a cryptographer. But he wrote this. this guide for Bitcoin Cold Storage called the, I believe it's called the 10X Bitcoin Security Guide. It's actually, it's hosted on GitHub. You can just Google that, and it's evergreen.
Starting point is 00:58:08 It's still completely applicable. But it's about making upgrades to your security posture in different ways where you get the most bang for your buck. And I started interacting with him, and he was telling me about an idea he had to use a Raspberry Pi, a specific version of a Raspberry Pi that didn't have Wi-Fi, didn't have Bluetooth, as basically. a private key generator. It's this naturally very isolated environment where you could create private keys and then you'd write down the seed words and you wouldn't have concerns that the key was leaked or had a chance to be on any other device. So it's a very secure way to create private keys. And I stepped away from work. I don't have a background as a programmer, but I like projects. And so I bought this hardware that he had told me about the Raspberry Pi and just a simple screening.
Starting point is 00:58:57 controls to put on it. And this is before, you know, AI or chat GPT or anything. So I had to U-D-Me Python videos for a week just to relearn enough programming to be able to do it. But I wrote this very simple proof of concept that showed with this Raspberry Pi setup, you could do basically what the Spectre DIY thing could do. But it, you know, a fifth of the cost or something. It was a super cheap thing, like less than 30 bucks. And I started sharing that on Twitter. And then I realized if I attached, you know, $5 camera to it, I could fully replicate all of the functionality, again, from the Spectry DIY. And so being a cheap skate, that was satisfying to me. And I started posting about it on Twitter and people seem interested. And it was in, let's say, April or May, I guess,
Starting point is 00:59:49 of 2021 Bitcoin Conference in Miami. Not sure if that was the first year they had or no. Anyhow. They had this fostome in the tent that Medodale had done a great job of organizing. And I contacted them ahead of time and asked if I could have 20 or 30 minutes to talk about Seed Siner. And just as serendipity kind of happened, there were a few people in the audience that day who listened to my kind of high-level explanation what Seed Senter was and subsequently began contributing to it. So in the beginning, it was just me with this horrible spaghetti code proof of concept thing. And then shortly thereafter, other people started discovering the project, people who are much better programmers than me.
Starting point is 01:00:36 And it just kind of started to take on a life of its own. It really started to improve rapidly, both in terms of the security assurances and the user interface and the usability of it. And so that was kind of, that's how seeds. are kind of be. So I've never actually used a seed signer. I was given one about six months ago, but I've never,
Starting point is 01:01:00 never used it. So maybe it's worth explaining how they actually work. Because you're creating your private keys on there and then presumably incentivizing people or asking people to put them on steel and then you put them away safely somewhere. Right, right. And you can differentiate a seed signer
Starting point is 01:01:19 is I refer to it as a signing device rather than a wallet or a harder wallet. because it doesn't persistently store the private keys. You can use it to create keys. Once it's powered on, you can load keys onto it. But when you remove power from it, all of the software is running in RAM. And the nature of computer memory,
Starting point is 01:01:36 at least random access memory, is that when you remove power from it, it loses its state. That's where the term stateless comes from. So it loses its state, and it resets to its natural beginning point. So that's kind of the basis of seed signers, instead of obtaining a device that is used as kind of this mini digital Fort Knox
Starting point is 01:02:01 that puts access restrictions around your private key and tries to keep it stored persistently over time as well as tries to keep prying eyes away from it, we kind of flip that on its head with Seed Siner and intentionally operate the device in such a fashion that it doesn't store the keys at all. So that, as you allude, puts onus on the user to really take ownership of the analog copies of their keys and think very carefully about do I use this in, do I use this in the context of a multi-sig? Is this a wallet that I'm going to be spending from multiple times a month or maybe a long-term
Starting point is 01:02:39 savings wallet that I'm only going to visit once or twice a year? If that, am I storing my keys in paper or metal? And am I keeping them, where am I keeping them in terms of who has access to them? Am I going to use a bit 39 passphrase? And so it encourages you because you're not relying on the security assurances of the device. It really encourages you to lean into the game theory around your cold storage setup, especially, I can't say this enough with multi-sig in mind, because that's a key part of the whole project.
Starting point is 01:03:14 So where my hesitation from that would come from and where a lot of the criticism at Seed Sainer comes from is the fact that you do have to be able to constantly access your private keys if you want to spend. Like with a normal hardware wallet, you can put your backup in a safe in a different location, in a safety deposit box, wherever it might be. And you don't have to access that unless you lose access to the wallet. With this, you need to have them on hand to spend. So why is that trade-off worthwhile to you? Because it allows you to forego all of the trust that's wrapped up in the commercial hardware wallet sort of space. Do you sell these devices whole built like this?
Starting point is 01:03:51 I do. So how do people who buy it not know you know that you've not tampered with it? So there's this, again, we talk about tradeoffs all the way down, and that's another tradeoff. So all of the information to build a seed signer is published in the repo, all the software, even the designs for the 3D printable enclosures. If someone is going to purchase a seed signer, I always encourage them to buy it as a kit. And when they receive the devices, you know, just compare them with photos online. A Raspberry Pi 1.3 has a small amount of firmware that's permanently etched into the board of the factory.
Starting point is 01:04:27 But if you compare the device that I or someone else who resells seed signers has sent you with what you've seen online, you can get a pretty good degree of assurance that the device hasn't been tampered with because as we've yet to discover anyone who has or can describe a way to change the firmware that's burned in at the factory on those Raspberry Pi's. Now, what I think is in terms of, we're kind of jumping forward to what if you bought a seed center from somebody else, but what I think is more of a risk when you buy a seat center particularly from another person is them steering you in a direction that would cause you to allow them to exploit your wallet in terms of pointing you to an unofficial software repo, because that's another thing with the seed signer that, you know, is dangerous like a knife is dangerous. It's off-the-shelf hardware that does not have software authenticity assurance built into it so that you can run any code you want to on there.
Starting point is 01:05:28 And so if someone tricks you into going to, you know, a counterfeit software repository that doesn't contain our sanctioned version of a given release that contains something potentially with malicious code in it, you can get hurt that way. And that's why, you know, this is this constant process of people who are interested in seed signer. It has to come with a good degree of education in terms of the risks and the parts of the process that you absolutely have to pay attention to. So I think somebody who buys a seed center, buys a seed signer kit is more likely to be tricked via the documentation into doing something stupid rather than I'm sending you malicious hardware kind of a thing.
Starting point is 01:06:15 Obviously, if someone's selling seed signers, we never recommend that the software that gets loaded onto the microSD card is shipped with the device. People need to be absolutely comfortable sourcing software from the right place and then verifying cryptographically that it's a sanctioned release. So they need to be going to your GitHub and getting the official open source release. They either go to the SeedSenter GitHub repo or this is drifting into technical. but the seed center releases are what's referred to as reproducible software. So if you don't download it from us, it's actually a more simple process than you'd think. But you can build the software release yourself from source code and open source repositories within a few hours with a laptop computer.
Starting point is 01:07:06 But again, because it will run any code that you load onto it, you just have to make sure that you're loading good code. And once you learn that process, you realize it's not that big of a deal. And anytime you want to deploy new software to it, you can, but it's all comes back to that educational process. Okay. So that makes sense. And like you say, security in any capacity like this is tradeoffs.
Starting point is 01:07:31 But I kind of interrupted you on your point there about having the private keys like in an easily accessible place and what the tradeoff there is. So we know. that there's going to be a backup with harder wallets, I won't say no matter what, but with most people with a harder wallet, either whether they're using it a single sig or a multi-sig, they're going to want to do a backup casa, I think, gets around this a little bit by doing health checks to make sure that, you know, the devices that are storing keys still have them. But most people are going to want to absolutely put their seed phrase, which for people
Starting point is 01:08:07 aren't aware, your seed phrase is just a human readable version of your private key. You're going to want to keep those in paper or metal. Metal. Yeah. Metal. Although with multi-sig, like you can make an argument for paper storage because they're in different geographically distributed locations, but we'll go too far down that road. So with a harder wallet, you're going to be storing your key in an analog format somewhere else.
Starting point is 01:08:31 So if this is a long-term cold storage use case, like this is the money I'm setting aside for my kids' tuition or to buy a house in 10 years, or just to leave to my heirs. You're not going to be touching those private keys very often. You can get around the trust that's tied up in harder wallets and all those copies of private keys that you have to keep around with instead of instead of, instead of, so if you have a harder wall with a backup, you have two copies of your private keys. You have the analog version that's stored at the safe deposit box will say, and then you have a digital version that is on the harder wallet that's in your desk drawer, your gun safe at home, or wherever it is. But you still have two copies of the private keys.
Starting point is 01:09:14 So even with a simple two of three setup, you kind of have to come up with six hiding places, right? Because you have for each member of the quorum, you have the digital copy that's on the harder wallet, and then you have the analog copy. For long-term cold storage, we're not going to be accessing the keys, especially in multi-sig. I think it makes sense to just forego the digital copy of the keys and just focus on those analog copies of the keys and keeping them private, safe, redundant, tamper evident, protected in whatever ways you think are appropriate. Because you're going to have to store the backups anyway for your long, long term savings. I think that got to your original question, did it not?
Starting point is 01:10:00 Yeah, yeah. No, that makes sense because if you are putting Bitcoin away for 10, 20, 30, 40 years, It's like, who knows if the device even going to turn on in that time. So that does make sense. But you do still have the additional redundancy. I don't know if that's the right word of the actual physical hardware wallet. So if you're thinking of this as like a multi-sig solution, do you still need six hiding places, essentially?
Starting point is 01:10:23 You want a backup of a backup? Well, I mean, the alternative is, and like a lot of, this is another whole avenue that we can talk about, but a lot of people don't even understand what those seed words represent. Like when I do talks or, you know, individual walkthroughs of seed center, I'll say, you know, most, not most people, but a lot of people end up keeping their, because when you set the device up, write down these 12 words, write down these 24 words, or whatever it is. And most people end up writing them on the card and then storing that card with the harder wallet, not even understanding that those are, that's the holy grail. That's what the whole device exists to protect. So a lot of people don't even understand that anyway. But with what you allude to, so if we're going to store the analog version of the private keys, the seed words with the device, and the devices over the long term, let's say, you know, two, five, 10 years, the device just by virtue of it being a digital storage medium is more prone to failure anyway. Like, why are we even messing with it? When, you know, there are some tradeoffs that I'd like to talk about that a lot of people sign up for that maybe they don't realize they're signing up for when they decide to use a retail hard wallet.
Starting point is 01:11:40 So I probably break those down into three broad categories, like supply chain risk, trust, and then privacy. So when you use a retail harder wallet, there's this issue of supply chain risk, meaning that from the earliest time that the subcomponents that are going to go into that thing, it becomes known that they're going to be used in a Bitcoin product. That is where risk begins, and risk lasts the entire time until that device is delivered to you in your home or you buy it from the store, wherever you take delivery of that device. At each point in the journey, there's the potential for exploits to happen. And I think, you know, exploits at the hardware level are sophisticated, they require a sophisticated actor.
Starting point is 01:12:31 But as Bitcoin 10xs, I think we're going to see some wild stuff. If presumably the Moss can get into the supply chain of Hamas and make a bunch of pagers explode in someone's pocket all at once, all over, you know, different geographic locations, I think infiltrating the hardware at supply chain. is well within the bounds of reason, given how much money that the hardware wallet ecosystem is intended to safeguard. So there's this issue of supply chain risk. There are ways that some hardware wallet companies have got, at least in my knowledge, around that.
Starting point is 01:13:10 So with Cold Card, for example, it comes in a tamper-proof bag, which has a string of numbers and letters that has to match the hardware wallet. So you know that it's not been interfered with between Cold Card and you. Right. And what you're describing is what some people refer to as a fake Rolex sort of challenge with hardware wallets.
Starting point is 01:13:30 And there are some ways that you can authenticate the hardware. But I would argue that if you've taken delivery of a box in the mail and you've opened this up and you're following the documentation that's come with a device, like the opportunity to capture you has already happened. Because if you're reading the instructions that are packaged with a cold card, they can say, scan this QR, are and go to this website and now enter these digits and will help you determine that this is, you know, truly a genuine device. That's obviously a social engineering attack, but that's frankly like probably a more likely attack than someone, you know, being able to infiltrate the supply chain. I mean, yeah, you've probably seen them on Twitter, the Trezer devices that show up and they're completely fake on the inside. Like they crack them open and compare them to a standard
Starting point is 01:14:21 treasure and it's very obvious that it's just different hardware components. That's like the classic fake Rolex thing. But I think they're also nuanced exploits that, like there are hardwoods that show up with a seed phrase, you know, printed on a card and people don't understand what they're doing. And it says enter the seed phrase during the initiation process to set up your card. And of course, someone else already owns that seed phrase. Yeah, I think though with things like that, I don't mean to minimize it, because that is a risk. But people who are, as you said earlier, an example, putting their seed words with the hardware wallet
Starting point is 01:14:57 or are going to fall for a trick like there being a card in there with your 24 words ready for you. Like, they're the people that should be using Bikki. And I don't mean this as a shill, but they've obviously pushed this seedless version of hardware. They don't want you to know your seed word. And I think for people who are that, you know, early in their journey of learning about this,
Starting point is 01:15:17 it's just a better option than trying to overcomplicate it too quickly if you don't already understand the very basics like that. It's a better option. But when you're when you're just starting out, I would tend to agree with you. It's a better option. If you're that desirous or needing the easy button and the trust issues aren't as important to you and you just want to get it done, that's fair. But Bitcoin works on you as you own it.
Starting point is 01:15:45 You probably experience this too. there's a certain amount of cypherpunk ethos that's embedded in Bitcoin. And so as you buy some Bitcoin, you put it on your BitKee, you start to think about, like, who has access to these different shards of my private key? What if, or you see something online about what if the BitKee app no longer becomes available? Am I going to be able to recover my funds? And I don't remember the circumstances exactly. I'm not super versed in Bikki, but Bikkii has.
Starting point is 01:16:17 acknowledged that at some point the recovery process may require an on-chain transaction. So for somebody like me, if the recovery process of me taking custody of the coins requires an on-chain transaction, like that's already a deal breaker. But I'm someone who has, you know, a more advanced view of the environment, I guess. I won't argue with you that for a beginner, it's a great onboarding tool and it's a first step, but I hope that it's a first step in a larger journey. I don't want to get too far because of the three things I initially brought up, there's the supply chain risk that Seed Center helps you get away from. Then there's the overarching issue of trust. So when you purchase a retail harder wallet, you're putting a fair
Starting point is 01:17:06 amount of trust that, say, Bitkey has implemented their system in such a way that sophisticated attackers won't be able to, when you get into keys being stored online or remotely accessible, which as I understand it, they are with Bitkey, that opens the doors up to larger scale exploits where not just somebody coming into your house and stealing your harder wallet, but like lots of private keys could be potentially stolen all at once. Now the Big Key people would argue that they have a belt and suspenders model and that this is not possible, but I mean, unless you're super versed in the underlying mechanisms and have a thorough understanding of them, we've heard that story before that it's just not possible until it becomes
Starting point is 01:17:55 possible. Yeah, I think this all comes down to, like, it's come up over and over again, but it's tradeoffs. Because I think the, don't get me wrong, I'm not trying to have a go at C-Syton here in the slightest, but like I think it's where you put your trust. And do you trust, you know, Ledger and Trezor and Coinkai or Bikki or whoever? to build this in a more secure way than you could yourself. And there'll be a lot of people, and I'd include myself in that, that would say, yeah. But if you feel, you know, confident in yourself to go out, verify everything, build this yourself.
Starting point is 01:18:27 Then, like, it seems like a worthwhile trade-off. It's just the access to private keys, it obviously can't be a spending wallet in that way. I wouldn't imagine. What do you mean that? You know, so I have a hard world that I use multiple times a month. I wouldn't want my private keys lying around in the sense that I could access them to send Bitcoin, you know, 10 times a month or whatever it is. And in that particular use case, I would argue that it's a fabulous use case for a conventional retail harder wallet because you want the accessibility of the keys nearby. You're not going to be storing your life savings on there.
Starting point is 01:19:00 So the trust tradeoff makes sense. And you have the convenience of the access controls in place in the device that are going to restrict, you know, if it does fall into someone's hands at home, regardless of where you're going to. keeping it unless, you know, they have a knowledge of the credentials that you put in place. I'm not going to argue with you that that's a perfectly valid use case. Again, which is why we frame Seed Siner as this is for your long-term life savings, the money you're going to hand down to your kids or that you're saving for something on the horizon. That makes sense. Okay, so I interrupt you before you got to your third point there.
Starting point is 01:19:34 Yeah, yeah. So supply chain risk, trust, and I do want to say a little bit more about trust. you're trusting that they've implemented the secure modules or whatever's baked into their particular hardware device. You're trusting they've implemented that in a secure way, that there are no low-hanging fruit kind of exploits to it. You're trusting that whatever firmware updates that they deliver are going to be authentic and that no one has gotten access to the firmware signing keys that are associated with that company because malicious firmware could be released and properly signed
Starting point is 01:20:10 and it would still run on the device and it could be released in such a way that no one knew it was compromised until months or years later. I mean, then there's another reason to not necessarily rush to upgrade firmware in any device. Yeah, 100%. And that's a good segue in terms of the trust that's baked into
Starting point is 01:20:31 this trust is linked in with the third reason privacy. So let's just say offhand, most people who purchase a harder wallet probably do it the exact wrong way. So they go to the manufacturer website or some sort of authorized reseller. There's not a big problem with that. But then when they order the device,
Starting point is 01:20:53 they typically will enter, a lot of people aren't sophisticated. They'll use their real name. They'll have it shipped to their home. they'll enter payment information and they'll enter some sort of email address that's their regular email address. And then when you give that information
Starting point is 01:21:12 to the company, you're trusting that they'll behave responsibly with it and safeguard it, which we found not always the case, especially with Ledger, but some of the other not just hard-to-wallet companies, but service providers have gotten themselves into trouble with this because then the motivation, Motivations of that company are to sell you as many devices as they can sell you.
Starting point is 01:21:35 They're a for-profit company, and that's just their natural inherent motivation. So they're going to email you about firmware updates, but they're also going to send you marketing emails about their latest products and new features that they've implemented in the latest versions of their software or trying to potentially point you to partners that they work with and this kind of stuff. So you just don't know who that information is going to get handed off to. and especially with the ledger disclosure that, you know, myself and a lot of others, I mean, like, people's real home addresses got out in there. And there was trust in that company to, you know,
Starting point is 01:22:12 keep your private details private. So if you do buy a harder wallet, and I can acknowledge there are absolutely some legitimate use cases for them, do it the right way. The best case scenario is go to a Bitcoin conference or some other event and buy it from the vendor's booth so you can, in the easiest possible way, just hand cash over or buy it with lightning and not have to provide any personal details whatsoever. But if you do have to buy it through the mail, you know, consider using a disposal email address. P.O. box. Right. Use a P.O. box to have it shipped to buy with lightning or use some other enhanced, you know, privacy with your wallet. And yeah, do it in a more, a more secure private way.
Starting point is 01:22:56 So that's one element of the privacy issue. The other aspect of harder wallets that I have a challenge with is a lot of them try to, as the default, if you get that device and you start to set it up, a lot of them try to channel you into their companion app. So with Ledger, it's Ledger Live, with Passport, I think it's Envoy, with Treasor, it's Treasor Suite. They all kind of have their own thing. And first from just a theoretical security perspective, that's just bad practice. Because the company that makes the device and software that's interacting with your private keys really shouldn't be the company that's also making the software that interacts with the larger Bitcoin network and, you know, the internet itself. It's theoretical, but there is this opportunity for collusion if someone who has fingers in both of those different aspects of the tech stack wanted to exploit.
Starting point is 01:23:55 something enough said about that. But the other thing is, and we've especially seen this with Ledger. The important thing to point out there, though, is that you don't have to use Ledger Live or Treasure Suite or any of these things. Like, you can go and use Wasabi Waller or Sparrow or any of the other, like, completely separate desktop apps.
Starting point is 01:24:10 You don't have to, but as you've pointed out, a lot of people are looking for that easy, but they're going to do what the recommended workflow is. I have no idea what the percentages would look like, but I wouldn't be surprised it with 90 plus percent. Yeah, which is, you know, as Bitcoiners should rail against that. And then the other thing is when you use something like Ledger Live, and this is something that's been documented, there's ways in which Ledger has sought to surveil balances and transactions and they do the sharding thing with the private keys. They don't do that by default, I don't think.
Starting point is 01:24:44 So I don't own a ledger so I can't. But I have been told by multiple people that if you were using your ledger with Ledger Live, you got to a point where you could not use the device anymore. unless you updated the firmware. And the update of the firmware included the new sharding feature. Oh, interesting. I didn't think that was the case, but I actually don't know. I apologize, I'm wrong, but... I'll put something on screen if that's not correct.
Starting point is 01:25:09 Right, right, right. But anyhow, so I have to give props to Coin Kite in that they claim to delete customer information, even if people buy it the wrong way and give them personal information, information. They claim to delete it. You're still trusting them to delete it, but at least they're- You get the email saying it's been, provenably deleted things hard, but if you trust the company, you can trust that. I don't hear any other companies making that noise, so I have to
Starting point is 01:25:37 give them props for that. And I also have to give Coincut honestly props for they haven't to date produced a companion app, whereas all of the other big wallet companies appear to have. So I always said for a long time, if I had to use a harder wallet, if Seed Center wasn't a thing, it would be a cold card or a coin kite product. So, yeah, props to them for those decisions. Yeah, they, I mean, MVP is great. I know you guys don't necessarily get along, but he's built some cool stuff.
Starting point is 01:26:12 They've actually, they've just brought in a couple of new features. I don't know if you've seen this, but you now can use like a traditional authenticator with your cold card. Oh, like a UBK or something? Or, yeah, or like an authenticator on your phone. which I think is quite cool. And as far as I know, I actually don't 100% know how this works,
Starting point is 01:26:32 but I can only assume that if you lose access to that authenticator, you can just restore the wallet from the seed, and that won't be the case. But I think that's kind of an interesting additional security feature. Yeah, I wouldn't argue with that. I think, you know, if I'm going to critique Cold Card where they get themselves into trouble, is sometimes that, like, feature creep,
Starting point is 01:26:54 that unless you're a supervisor, sophisticated Bitcoin and you truly understand the features that you're using. Like there's a guy in our telegram chat for Seed Siner who was using, I think BIP 85 is the one I'm thinking of where you can create child keys from a parent key. And they, you know, one night they were setting some working on their Bitcoin setup and got two generations deep into BIP 85 derivation. and like could not, and they were doing, you know, not just the first child, but some subsequent child derivation and somehow lock themselves out of their Bitcoin. So I think keeping it simple, yeah, there's, you know. I agree with that.
Starting point is 01:27:43 I don't think that's CoinCite's fault. I think it's cool that they give you access to as many advanced features as possible. People just need to be aware of what they're actually doing. And they do hide a lot of those features in the advanced settings. I think there's like, you have to be careful with guardrails. Like where I was talking about before where someone, you know, rolled the dice five times and set up a wallet with that, that was on a cold card. Yeah.
Starting point is 01:28:07 And so you can give people a lot of power, but I also think there's, you know, it would be, it's very simple to require a minimum number of roles that would prevent that from happening. And you can say like, ah, you know, the person has to know what they're doing. But at the same time, as someone who is architecting that defined, advice, you also can put some reasonable guardrails in place to, you know, help people out if they come to own themselves. I obviously can't speak for MVP, but I'm pretty sure he's said numerous times that, like, these features aren't for everyone. Like, maybe don't use them unless you absolutely know what you're
Starting point is 01:28:41 getting yourself into. I mean, like, this is cyphopunk technology, right? I think people should be able to do everything possible if they want to. And understand that in general, for most people, just keeping things simple is the best way of doing it. Simple. Well, we have different versions of simple. Like simple and bit key or simple in terms of, I personally think. I mean like if you're using a cold card,
Starting point is 01:29:06 like just understand where your technical limits are. You should know the consequence of every action you take on it. And sometimes like things like creating your own entropy with dice rolls might be to advance some people and just know what you're getting yourself into. Right. Yeah. There's a balance, I think.
Starting point is 01:29:23 there's a balance. Yeah, there's a balance. I don't want to get into too much. It's too much tradeoffs. I don't want to get into too much nanny stuff because I do believe that people should have the freedom to burn their hand on the stove. Yeah.
Starting point is 01:29:40 You know. I mean, it's the best way of learning, that's for sure. Yeah, painful as it is sometimes. Okay, so with Seed Siner, like, what do you want people to know about it? So Seed Siner, again, DIY cold storage. We, the kind of secret sauce of seed signer is that we take a very careful selection of hardware components and then a very kind of thoughtful selection of software features to create a highly secure system using very inexpensive off the shelf. components. Do you have the components? Can I see that? I do. So I have some assembled here and then I have
Starting point is 01:30:28 the components. I can kind of just show you. The version I got looked nothing like the ones you have here. Well, that's another part of the beauty of open source is that, you know, all the sort of, they're all kind of the same skin or the same core components with different skin around them. So that is just the simple display screen and buttons. There's... It's funny, the guy who gave me, I mean, first of all, shout out, I don't know if he... I'm curious to know who, like, gifted you a seat. I don't know if he's private, so I wouldn't want to necessarily say.
Starting point is 01:31:07 But he, like, the reason that I wouldn't use it, though, is because, like, it was the first time I'd met him. I'm sure he's a lovely person. I have no malintent, but it makes me a little bit nervous to use anything like that. Maybe I should just play around with it with like a little bit. I mean, just as a matter of like, I'm curious and open to learning about this. It would be a good test. I'll put some Bitcoin on there and see if he robs me. But anyhow, the components you have there are that's just a simple Raspberry Pi compatible camera.
Starting point is 01:31:36 There's the Raspberry Pi, the green board that you're holding in your hands, which is a very specific version of Raspberry Pi called a 1.3. And all that designation means is that it doesn't have wireless. communication capability baked into it. So no Wi-Fi, no Bluetooth, no NFC. And then the display hat on it is just how you interact with the device. The USB ports on there, one of those ports, which with most of the enclosures is the port that we leave exposed, is hardwired for power only.
Starting point is 01:32:07 So you could even plug it into your laptop and have assurance that it's not leaking any information because data can't even travel through that port. But so it's this very simple, very isolated, private little environment where the only way that it can receive input from the outside world is through the camera and then the buttons on the front of it. And the only way it can output data to the world is through the screen. So it creates this very naturally constrained protocol by which you can move data in and out of it, which is intentionally so. because it would be really challenging to move enough data to execute some sort of exploit if you're doing it with QR codes. You just can't pack a lot of binary data into them. So that's a natural part of the kind of almost friction of the device.
Starting point is 01:33:00 It forces you to slow down and think about what you're doing. Okay, cool. If I received this from you, like looking at it, apart from comparing it to another one, Like, there's, the only way to know this hasn't been tempted with is by comparing it to another one. Is that correct? Right. For me, at least physically. The bar is pretty high to add some sort of, you know, hidden or undesirable functionality on that device without changing the way it looks in some way.
Starting point is 01:33:31 Like adding an additional module or something would be out of place. And it's a very simple board with a minimal amount of firmware on it. So that's relatively trivial. Right. And then this, I assume here, the SD card runs the firmware. The SD card runs the firmware. Which you load yourself. To be precise with the language, it's a combination of firmware and software.
Starting point is 01:33:57 Okay. So running on that device, it's basically a small handheld single board computer. You've heard how some core developers have talked about, people are initially going to think of Luke, of course. But people talk about I wouldn't use a hardware wallet. I would just have a Linux laptop that I have removed the communications, the wireless communications capability from, and I would just keep that in a safe. This is kind of a version of that because it's a simple handheld computer
Starting point is 01:34:27 that we're using it in such a way that it doesn't remember anything. So there's high-level firmware and software on the memory card. When you apply power to it, you turn it on. And then as soon as the user interface comes up, you can actually remove the microSD card because as I said before, all the software and firmware is running in RAM. Okay, so everything's loaded as soon you turn it on,
Starting point is 01:34:49 then you can pay that out. You remove the memory card so you can have that additional assurance. Of course, our software doesn't run anything but settings information to the memory card, but because you're physically removing it, you're going to have that assurance that my seeds aren't somehow being leaked onto this thing.
Starting point is 01:35:05 And at some point, I should probably talk about, like, there's probably four target audience. for Seed-Signer in terms of the type of bit-o-o-o-ointers who it makes sense for. Because I'll grant you like it's not for everybody. And it's probably not even for most people. But one group is just geeks like me, people who like to build and tinker with things, people who might want to experiment with a new feature or a new aspect of the protocol
Starting point is 01:35:35 and they're savvy enough to be able. Our code is highly, most of the, our app level code is written in Python and it's a very simple language to work with. So you can prototype things and there are other forks of our project that implement different features that we choose not to implement. So it's a device that you can, you know, play with if you're a technologist kind of person. Second would be people who live in parts of the world that are less free and that for whatever reason, like in Russia right now because of the Ukraine war, because most of the harder wallets come from countries that are associated with the West
Starting point is 01:36:20 that are, you know, manufacture and ship them, it's really hard to get a harder wallet in Russia right now. But I'm in contact with people there who can get the parts to build a seed signer, and there are some number of Bitcoiners who really like seed signer and use it because they they don't have access to commercial harder wallets. In other parts of the world, let's say, and I've been in contact with Bitcoiners in Iran, there's a Bitcoiner called Zia Sedir, who was in the custody of the Iranian regime,
Starting point is 01:36:53 and he's, I think, in exile now. Bitcoiners in that part of the world may not even have access just because of commercial restrictions to hardwaltz. Or if you wanted to get a harrow wallet, you'd have to buy it from a black market source, which... And you really can't verify what you're getting in.
Starting point is 01:37:07 which is really like not the way you want to buy, kind of a security critical piece of hardware. And then in some place like China, where harder wallets are legal, you can get them. But if you're going to buy one through the mail, it's like, males routinely searched, as I understand it, in China.
Starting point is 01:37:26 And you're not worried about the Chinese Communist Party like coming and taking to the Gulaug because you're using Bitcoin. There you're more worried about, so I've been told local police departments, that are to some degrees corrupt and might know that you're using Bitcoin because you ordered a treasurer in the mail or something. And with that information, they would come to you and try to invent some sort of crime
Starting point is 01:37:48 that you'd committed to try and shake you down to seize your Bitcoin. So Seed Center allows you to have secure Bitcoin cold storage with parts that are not, you know, if you order these parts, you could be building a mini retro gaming console or you could be doing any one of, you know, other sort of DIY. software projects. So it helps people who can't get access to harder wallets or who, for whatever reason, are trying to fly into the radar. So that's like group two.
Starting point is 01:38:18 And then group three, I would say are people who are really concerned with, as I've already talked about, the amount of trust that goes into using a retail hardware wallet. You know, maybe we're wired a little bit differently. maybe we're like freedom and sovereignty maximalists or whatever tinfoil hat types or or whatever. But the model of using a seed center, the mental model of understanding what the components do is something that once you've learned it, for whatever reason, it's very grockable for people. With hardware wall, there's this, because they've created the easy button, you don't really understand what is going on behind. and the curtain, so to speak. So I've heard this from multiple people
Starting point is 01:39:09 to where when they're looking to make a spend using their harder wallet and they set the transaction up, they've entered the recipient address in and the fee and the amount they're going to send in everything. Right before they click the send button, there's this apprehension
Starting point is 01:39:22 because they don't know what they're going to do if it doesn't work. Because they don't have confidence that they understand what's happening under the hood or that they would be able to reconstitute their wallet and get access to their funds if they were just, just had the source material, the seed words in their hands. With Seed Center, the way we take you through the process of setting up a Bitcoin wallet
Starting point is 01:39:46 and because every time you make a spend, you are dealing with the seed material, you have a much higher understanding of what the process looks like and if something were to go wrong with your laptop where you had Sparrow. Or if you're using Nunchuk or Blue Wallet on your phone and your phone you dropped it in the pool or it got stolen from you on the street or whatever. You have just a higher degree of confidence that with the key material and your wallet backup, you'd have access to your funds much more quickly. That makes sense.
Starting point is 01:40:20 I think this is cool. I need to have a play around with the one I've got and see what I think of it. Like I say, what I don't want this to sound like is an attack on hard all this. Because I think, like you say, I can understand why someone want to use this. I can understand the reasoning. I think the audience is not everyone. It's not every Bitcoin. And I think people should still feel confident in using hardware wallet.
Starting point is 01:40:45 So I don't want anyone to go away from this, like freaking out that their hardware wallets compromised. But it's a cool project. And I would, just to push back on that a little bit, because I don't want to deter people from solutions that could potentially do them good. But I would encourage people just to go into that relationship of purchasing a hard of while and using because that's what it is. It's a relationship.
Starting point is 01:41:10 Be skeptical and go into that with your eyes open and think around the corner as to the implications of some of the information you're sharing or the trust you're putting in a firmware update or any of that kind of stuff. Just trust don't verify. We talk about that in Bitcoin, I think, right? Absolutely. Trust don't know. Don't trust verify.
Starting point is 01:41:31 Yeah. We do talk about that in Bitcoin. I think the key theme of this interview is probably it's just all trade-offs, figure out what works for you best. That's fair. You should think adversarily and make your own decision on this stuff. But it's been cool. Anything we didn't talk about that you want to? One kind of aspect that's sort of squishy is just my experience with Seed Siner
Starting point is 01:42:02 and being the lead and the facilitator of an open source software project and experiencing kind of this as a community-driven project of how I referenced before as I started out early on, not being a coder and writing this horrible code, but producing enough of a proof of concept that other people stepped in and built it, it has just been for me super satisfying to interact with Bitcoiners in that kind of way,
Starting point is 01:42:37 building something together that provides real value and something that, because we have to have different strokes for different folks, we have to have tools for everybody. And we don't want to have a Bitcoin ecosystem where we only have just one thing, not the other. We don't want everything to be a DIY, and we don't want everything to be just commercial
Starting point is 01:42:58 and retail solutions that are available. So we serve, Seed Center serves as this kind of ideological counterbalance to some of the other things, not just, you know, Harvard Wallet Boogiemen, but just in terms of what if there was some sort of aggressive nation state maneuver to co-opt Bitcoiners and attempt to maybe not go full out 60102 and seize Bitcoin, but to try to just start to encourage people to register and declare whatever amount of Bitcoin that they own. It's been important to me to be involved in something that kind of is a bulwark to tyranny and pushes back at all of that. And just the camaraderie of, I would be remiss if I did not give shoutouts to some of the people that have helped build Seed Siner to what it is. Like our lead maintainer who was the first external contributor to Seed Sinder and I love how he found it. Like I, when I made this proof of concept and I'm all on Twitter, like posting videos of how it works and, you know, the richness of the concept or whatever, like he just goes on to GitHub and searches Bitcoin wallet and is not active on social media. And that's how he found our project and started contributing to it to our lead software developer who's called Keith Mukai, who's a good friend of mine as well, who I mentioned before is the one who his initial open source. contributions were to Spector Desktop and integrating Harder Wallet support into Specter Desktop
Starting point is 01:44:30 because it didn't exist. And he was a technical guy and wanted to have it there. And so he just stepped up and built it. And then I mentioned people who saw that initial presentation I made at Bitcoin Miami, there's an amazing UI-U-X designer. He's a NIM who goes by Easy or Easy UXD. and he was one of the people that saw that first presentation and then circled around and contacted me. And his daytime job is a UIUX designer for, I don't want to give the field he works in, but he works on a national level with products that millions of people have their hands on. And in his spare time with no expectation of financial reward has leaned into seed signer and really turned it from this clunky thing
Starting point is 01:45:24 that feels like an almost DOS-like interface to once you build it, it's kind of one of those, the sum is greater than the parts kind of thing because of the magic and the software and the UI. We really have a first-class UI if you haven't worked with a seed signer. After you've built one,
Starting point is 01:45:38 it feels more like something you've bought than what you've built. And that's feedback that I consistently get from people all the time is just the beauty of the UI, the simplicity of it, the graphic-driven nature of it, and we've really put a lot of thought into the decision tree of using a seed signer in terms of what we give access to and what we, as you talked about with Coin Kite, what you kind of hide and make available under advanced settings.
Starting point is 01:46:08 But we really try to pare down the decision tree and make it to where using the device is as much of a process of securing your Bitcoin as, you know, when you're initially using it, it's also an individual. education process because it teaches you how to, you know, how you collect entropy to create a private key and then how you create the public version of that private key that you need to set up a wallet. And then when you import a partially signed Bitcoin transaction, what the elements of that are and what you need to pay attention to to verify that your coordinator's not trying to trick you into doing something you don't want to do. So I just encourage anybody who hasn't
Starting point is 01:46:48 used one. Seatineers a grassroots thing. And that's okay because it's generally passed along from one Bitcoin or to another, primarily at meetups. And it's like you, people who build one and use it gets so excited about it that they want to build one and give it to a random podcaster that they've never met before. Like it's just, it's one of those very Bitcoiny Bitcoin things that you get excited about. So I'd encourage people to, maybe it doesn't end. up being your go-to cold storage device. Maybe you keep using harder wallets, and that's totally fine. But if one day you wake up and you plug in your hard wallet and says bricked,
Starting point is 01:47:29 you're going to be super glad you have that seat turn around that you can type your seed words into and prove you have access to your funds still. So yeah. Very cool. I mean, Bitcoin is building things is always good. So where do you want to send anyone to find you on Twitter or find out more about seed trainer, contribute to the project, anything? Yeah, no, just at SeedSiner on Twitter is kind of our marquee social media presence.
Starting point is 01:47:52 We're on Nostra as well, and you can find a verified seed signer account on Noster. SeedSigner.com, please don't go to any.edu.edu. That variance, just SeedSigner.com. And from there, you can find a link to the GitHub repo, which is where we provide documentation. We've also, within the GitHub repo, I've written an independent custody guide that kind of explains in probably a much better, well-thought-out format, some of the issues that we've been talking about throughout this conversation and lays it all out in terms of making a case for our vision of cold storage. Yeah, through the, and we also have on the dot-com website
Starting point is 01:48:31 a link to all sorts of explainer videos made from everyone, from BTC sessions, to all sorts of other people who do educational Bitcoin content in a variety of languages that feature Seed Siner and explain the value of one and how to use it, how to build one, how to set it up and all that kind of stuff. Yeah, I've not seen it, but I can be almost positive that Sessions Setup Video is probably the best one out there. He just did a refreshed one within the last couple months. So, yeah.
Starting point is 01:49:02 Nice. Well, thank you for this. It's been great. Appreciate the time. Yeah. Appreciate the invite. Thanks so much. No, thank you.

There aren't comments yet for this episode. Click on any sentence in the transcript to leave a comment.