Rob Hamilton
@Rob1Ham
CEO @AnchorWatch, Bitcoin Custody & Insurance
You can't stop Math, molon labe.
2.3K Following 26.3K Followers
So proud of @coinjoined putting in the proof of work in his new role as CMO of @ocean_mining.
Achieving greatness in business means checking your ego so you can win for your shareholders.
Chris did this by pivoting his look from a rough neck to a serious business person.
Show more
A new look.
The same mission: 100 EH/s at @ocean_mining by next year and putting block construction back into the hands of miners.
High-level meetings in Lugano, coordinating with the Red Team to put @ocean_mining DATUM Prime's server-side infrastructure through its paces ahead of its planned 2027 release.
Find the bugs before the attackers do. 🛡️
Show more
This has been a long held thesis of mine as treasury companies started forming.
Custody is foundational to any other financial service, treasury companies included.
A Bitcoin treasury company (@Datavault_ai $DVLT) just crashed because they informed investors that they haven't been able to withdraw BTC from the exchange (@BiconomyCom) that is holding all their treasury funds after 4 months of transfer requests.
Show more
A Bitcoin treasury company (@Datavault_ai $DVLT) just crashed because they informed investors that they haven't been able to withdraw BTC from the exchange (@BiconomyCom) that is holding all their treasury funds after 4 months of transfer requests.
Show more
📣 We’re hosting a panel about Privacy, Custody, Risk, and Securing Corporate Bitcoin at the BFC Symposium. 🟠
Catch everyone on November 4 at Pakhuis de Zwijger during Bitcoin Amsterdam 🇳🇱
Show more
Day 9 of Plan ₿ Week is in the blocks!
The grand finale of @cypher_tank is done! The finalists took the stage to win prizes from the Honey Badgers and secure funding. Stay tuned: applications for the next Cypher Tank will open soon!
We also had a Red Team session with @Rob1Ham, and @coinjoined unboxed a bunch of Seedor goodies.
@sbaaaam21 as always hosted this amazing Plan ₿ TV.
Explore the full programme:
Show more
Excited and honored to welcome some of the most prominent names in the industry to join us on the Luxor journey.
Congrats to all - we’re just getting started
This man is locked in for @ocean_mining, he is so prompt answering customers questions, quality service!
It looks like @coinjoined has hit the ground running as CMO of @ocean_mining!
Chris is doing a great job staying focused on the mission of Ocean and not getting too lost in all the mechanics.
You asked, we answered.
OCEAN has no official position on any future Bitcoin software proposal.
Our mission is to empower miners with the freedom to choose, not dictate what they should support.
Got more questions about OCEAN, Bitcoin mining, or decentralization?
Drop them in the comments. We'll answer them!
Show more
Just a thought, maybe Frontier AI models aren't breaking cryptography because lockheed martin is using 1 byte private keys.
🤷🏻♂️
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
Show more
PubKey CEO @tpacchia explains why he built a bar for terminally online people, and why AI could make it more important than ever:
"It’s a media company with a hospitality wrapper. The idea is to create a physical space for digital communities."
"It’s kind of the internet’s dive bar. A lot of these people are seeking physical contact, particularly coming out of COVID. I think it’s gonna get a lot worse with AI psychosis as that continues to ramp."
“You can solve a lot of problems with two beers, even if you disagree with the folks that we have at PubKey."
@PubKey
Show more
We've just published 15 security advisories across BitcoinJS libraries (14 High and one Medium), with patched releases available on npm.
This follows work with @junderwood4649 and the reporters to investigate the issues, prepare fixes and provide backports for the maintained release lines.
The findings cover areas including transaction and block parsing, PSBT fee calculations, proof verification, mnemonic handling and elliptic-curve operations. Their impact depends on the affected version and how an application uses the library. Each advisory explains those conditions and the required remediation.
If you maintain an application using BitcoinJS packages, please check your direct and transitive dependencies and upgrade affected versions.
For bitcoinjs-lib, the patched releases are 7.0.5, 6.1.10 and 5.2.3, depending on your release line. Both tiny-secp256k1 and bitcoin-js/tiny-secp256k1-asmjs have fixes in 2.2.5.
The other patched releases are bip39 3.1.2 and 2.6.1, bip38 3.1.2 and 2.0.4, bolt11 1.4.2, merkle-lib 2.0.11 and bip32-utils 0.11.2.
Some fixes require changes in the application as well as a dependency update.
You can find the affected ranges, technical details and upgrade guidance here:
Thanks to the researchers and reporters: the Bitcoin Red Team (@Rob1Ham, @callebtc and @danielabrozzoni), @0xaudron, @real_a_kalout and ARSB (
Show more
NGU At All Costs.
Don't you feel offended when labs and governments tell you what type of intelligence you're allowed to use?
We live in a world of forbidden thoughts and ideas. Nobody should be able to limit your ability to seek information or share knowledge.
Free all minds.
Show more
3 minutes to impress these tough judges.
Check out @cypher_tank to see how I did!
There's been a big Ark announcement at @LuganoPlanB
CAN AI BREAK BITCOIN'S CRYPTOGRAPHY? 👀
Rob Hamilton and Brian Hirschfield are putting Bitcoin's elliptic curve cryptography to the test, examining 6 potential attack vectors and the math standing in their way.
📅 Nov 6 | 3 PM | Orange Stage
Show more
Strive acquired 6,182 $BTC for $511.4M at an average cost of $82,732 per bitcoin, bringing total holdings to ₿43,000.
- Cash and marketable securities increased by $187.7M to $554.6M.
- Established a $1B $SATS ATM program.
$ASST $SATA $SATS
Show more
Interesting post from Gregory Maxwell on Hackernews.
He claims that about a month ago he (with a friend) burned a lot of credits on Anthropic trying to solve the exact questions Anthropic announced today in their blog regarding ECDSA seeds.
Show more
