Podchaser Logo
Home
SLP462 Bitcoin Multi-signature with Craig Raw

SLP462 Bitcoin Multi-signature with Craig Raw

Released Sunday, 26th February 2023
Good episode? Give it some love!
SLP462 Bitcoin Multi-signature with Craig Raw

SLP462 Bitcoin Multi-signature with Craig Raw

SLP462 Bitcoin Multi-signature with Craig Raw

SLP462 Bitcoin Multi-signature with Craig Raw

Sunday, 26th February 2023
Good episode? Give it some love!
Rate Episode

Episode Transcript

Transcripts are displayed as originally observed. Some content, including advertisements may have changed.

Use Ctrl + F to search

0:08

Hi. You're listening to Stephan Livera podcast

0:10

to show about Bitcoin and Austrian Economic

0:13

Sprottu by Swan Bitcoin. Use

0:15

Swan dot com and the Swan app for

0:17

safe and easy Bitcoin buyers. With

0:19

one, it's really easy to set up a recurring

0:21

purchase plan. So whether that's

0:24

daily, weekly, monthly, you can accumulate

0:26

just a set amount of Bitcoin and

0:28

just automatically stack it into your own

0:30

self custody. Now swan dot com

0:32

also offers one time buyers, also

0:34

known as smash buyers. So this can

0:36

be useful if the price is just dipped and

0:38

you really feel like taking a little charcoal,

0:40

buying lump sum. Also, swan

0:42

dot com offers free custody in your own

0:45

legally owned trust account. But of course,

0:47

not your case, not your coins. There is also

0:49

free automated withdrawals to self custody.

0:52

So if you go to swan dot com, there's all kinds

0:54

of free resources that you can use to learn

0:56

about Bitcoin. One favorite of mine

0:58

is inventing Bitcoin by Jan Pritzka.

1:00

You can get this by going to swan dot com

1:02

slash free book and you'll get a copy.

1:04

It's a really easy one short book

1:07

to read and it explains a little bit about

1:09

Bitcoin and how it works. Are you ready

1:11

for something big? BTC Prague is coming

1:13

up June eighth to tenth. It's going

1:15

to be in Prague, in Czech Republic, This is

1:17

going to be the biggest Bitcoin event in Europe,

1:19

and you've got to come and check it out. Make sure you

1:21

check your calendar, put it in your diary,

1:24

check out out the flights and hotels for it, Prague

1:26

is a beautiful city also so you can build

1:28

in some time for tourism. But I'm

1:30

really looking forward to BTC Prague. I'm be

1:32

one of the MCs. There's gonna be an awesome lineup

1:34

of speakers. There is going to be a range

1:36

of experiences available. There'll just be the standard

1:39

tickets available. Or the industry ticket

1:41

with an extra one day business conference, it'll

1:43

be more b to b focused, and there'll

1:45

be industry leaders presenting tools, ideas,

1:47

and experiences or for the whales.

1:49

Those of you who want access to unique

1:52

whale zones with the stylish environment, there'll

1:54

be chances for networking and meetings

1:56

as well as premium food and drinks an

1:58

exclusive party event. So to get your

2:00

ticket, go to BTC prague dot com,

2:02

use code Lavera for a discount. When

2:04

it comes to bitcoin, block explorers,

2:07

mental dot space, is the place to go.

2:09

I use my pulled up space when I'm about to send

2:11

an on chain transaction just so that I can check

2:13

what kind of fee I need to assigned

2:15

with my transaction. Now, mental dot space

2:17

shows you a range of things. It can show you

2:19

where this is mental. It can show you the blockchain.

2:22

It can show you second layer networks like liquid,

2:24

and recently the Lightning Network. With BAMPLE

2:26

dot Space, you don't have to trust a third party. It's

2:28

free and open source. You can host it yourself.

2:31

Now if you're with an enterprise, mental dot space

2:33

offers customized mental instances, you

2:35

can have your company's branding, increased API

2:37

limit, and more. Go to mental dot space

2:40

slash enterprise. So for today's

2:42

show, my friend, Craig Raw of SparrowWallet

2:45

rejoins me on the show. We chat a little bit

2:47

about Multisignature, security,

2:49

and privacy as well as Bitcoin

2:51

developments in the

2:52

space. Craig, welcome back to

2:54

the show.

2:55

Great, Stephan. It's it's really good to be

2:57

back. Yeah. There's been so many updates

2:59

going on with Spiro Wallet, and I thought it'd

3:01

be great to have you back to chat about

3:03

the space, whether it's multi signature or

3:06

privacy or import and export

3:08

of transactions. I think there's lots of things to

3:10

add. So, yeah, I'm just curious

3:12

as you look at the space now, what

3:14

are some of the big things on your

3:17

mind just kind of more

3:18

broadly. Well, I think, you know,

3:20

the last month has been pretty much consumed

3:23

from certainly from my point

3:25

of view with all of the sort of

3:27

ordinal stuff -- Right. -- particularly, I

3:30

don't think it's a mass of really

3:32

impact on Bitcoin itself, to be honest,

3:35

apart from the fee rate being

3:37

a little bit higher. But for myself, personally,

3:39

Sparrow has being recommended

3:42

as the sort of go to wallet for many

3:45

of the ordinals users. So it certainly

3:47

changed my world a little

3:48

bit. But that said, you know,

3:50

it is what it is. And, yeah,

3:52

we go on. Yeah. Right. And

3:54

as I understand, that's because well,

3:56

probably because Firstly, Spiro is easy

3:59

to use, but also I think it it might be the ease

4:01

of being able to freeze a particular UTXO,

4:03

which is useful for the ordinals

4:06

people where they if they've got a rare

4:08

satoshi or an inscription tied

4:10

to a particular

4:11

sat. I presume from their point of view that's

4:13

why Sparrow is being recommended for them.

4:16

Yeah. I think that that's definitely part of

4:18

it. I think also just the ease of being able

4:20

to create a taproot wallet is I think a

4:22

big part of it. That's the required

4:24

wallet to be able to to use it.

4:26

So I think that it was just sort of

4:28

a ease of use thing and became an early

4:31

recommendation for that

4:32

reason. Yeah. I see. I see.

4:34

Well, I mean, it's it's a cool thing for you. Obviously,

4:36

seeing your product be used

4:39

by more more and more people. Like, I guess,

4:41

you know, it's kind of like, you know, if you look

4:43

at Joe Hogan or things like people,

4:45

they might have multiple audiences. Right? Like, he

4:47

might have the people who follow him for comedy than people

4:50

who are into MMA and all the other stuff

4:52

or general. So maybe for yourself, it's like

4:54

Sparrow is there for people who are, let's say,

4:56

Multisignature and then you've got privacy

4:59

people who wanna use the coin joint

5:00

feature, and now you've got the ordinal prescription

5:03

people. Yeah. I I think

5:05

that you know, I certainly have no

5:07

issue with people using Sparrow for these

5:09

different use cases. I will say that ordinals

5:11

is not particularly my interest in the world.

5:14

And I don't intend to be building

5:16

Sperry along those lines. And I'm seeing

5:18

a number of other new wallets

5:21

coming to the fore now who are going to try and cater

5:23

towards that. And that's great. You know, people should

5:25

build stuff and they should use the

5:27

stuff that caters towards the

5:29

particular use case that they're trying to

5:31

address. But Sparo remains

5:34

very much, you know, focused on

5:36

financial self sovereignty. It

5:38

remains focused on, you know, making

5:41

your making it easy to self cast

5:43

of your funds and keep your

5:46

funds private as you spend. So

5:48

that's going to remain what Sparo

5:51

does. And if people want to use it for

5:53

other things, that's great as well. Excellent.

5:55

And so I think the other cool thing with Sparo

5:57

is that you can really start

5:59

basic and then work your way up. Right? And I think

6:01

that's a really interesting and important thing for people

6:04

out there when you're getting started.

6:06

think it can be very overwhelming. And

6:09

I've seen this even with listeners

6:11

or followers who DM me at times and I'm

6:13

I'm sort of coaching them through saying, okay,

6:15

take this step now. Take this step. And I

6:17

think that's useful thing. So

6:19

I'm curious how you're seeing

6:21

that journey for a new bitcoin or

6:24

let's say the person who is just learning

6:26

about self

6:27

custody, can you talk through a little bit of

6:29

maybe any insights you're seeing in

6:32

users of Sparrow who are going on that

6:34

journey? Sure. So, you

6:36

know, it's it's actually quite

6:38

interesting having the ordinals users

6:40

come in because they really don't read

6:42

anything at all that looks like they've literally

6:44

spent five minutes, you know, on

6:46

the entire thing and then, you know, committed

6:48

money to it, which which is quite a remarkable

6:51

thing actually. It's quite different from your

6:53

average Bitcoin user who generally

6:55

spends quite a bit more more time

6:58

thinking about things before they they

7:00

kind of make the first plunge even

7:03

with much less funds at

7:05

stake. So I think that that's been quite an interesting

7:08

thing. But certainly, it's

7:10

been okay to see how Sparrow

7:13

has handled that. You know, it it hasn't,

7:16

you know, always been straightforward. I

7:18

mean, you know, there's a little toggle at

7:20

the bottom of the sparrow status bar

7:22

where you can connect and just disconnect

7:24

from whatever server you are configured

7:27

for. And, you know, there's a

7:29

three screen dialogue when

7:31

you first install store it, which kind of

7:33

explains what this thing does. And

7:36

that is not even being read or or

7:38

seen by some. So I mean,

7:40

you know, there is sort of a level to

7:43

which you actually can't really

7:45

improve things. You can only you

7:47

know, guide people to a certain extent.

7:50

And then you need to rely

7:52

on them kind of reading some degree

7:54

of documentation or the

7:56

help presented by the application.

7:59

So III think from from that point of

8:01

view, the sort of most basic point of view, I'm reasonably

8:03

happy with things things are. From

8:05

the more advanced point of view, you know,

8:08

a lot of the last year has been spent building

8:10

out the the more advanced use

8:12

cases. And that continues to be the case,

8:14

you know, just trying to make sure that

8:16

people trying to do various, I would

8:19

say, less common, but nevertheless

8:22

valid use cases are catered

8:24

for. You know, just trying to fill in

8:26

all the sort of gaps one

8:29

of them the the the most recent ones

8:31

that I've actually been working on this this

8:33

week is being able to do remote

8:35

Multisignature ups. So

8:38

when you're not in the same room, you can

8:40

still set up a Multisignature there are

8:42

formats that cater towards

8:44

that. Yeah. So let's talk a little bit about that.

8:46

So I guess, you know, users who are just

8:48

getting started, you might start with a single signature

8:50

wallet. Maybe you'd, you know, you just start

8:52

with that with no pass phrase and just basic,

8:55

and then maybe some uses are deciding, okay,

8:57

I'm gonna go single signature with a pass phrase. And

8:59

of course, I think the more advanced level

9:01

is to get to Now I'm a big fan

9:03

of multi signature. I, you know, I use multi signature

9:05

myself. And so

9:07

there can be some practical difficulties

9:10

or things you have to learn to deal with when you're in

9:12

a Multisignature context. And as an example,

9:15

that may mean you have some

9:17

hardware device in

9:19

a different location. And if you're

9:22

going to, let's say, a vault and maybe

9:24

the key you're trying to do QR

9:25

scanning, these are some of the practical

9:28

difficulties, I guess. So can you talk to us

9:30

little bit about what that looks like if

9:32

you're doing a sparrow and you've

9:34

got keys in different locations? Yeah.

9:36

Sure. So, I mean, look, that's generally not

9:38

too hard. You know, I think, you know,

9:41

you might need to if it's a QR code, you'll obviously

9:43

need to take a laptop in Sparrow's

9:46

case to be able to scan

9:48

from that device. In terms

9:50

of some of the other ways you can

9:52

do it, for instance, if you have a cold card and

9:54

using it in air gap fashion, you

9:56

can walk in without anything really

9:59

just a sort of SD The

10:01

micro SD card. Yeah. Correct. Yeah. And

10:03

then just sign with that. So there are a few

10:05

different options, and I think it's quite interesting

10:07

to be able to consider which

10:09

ones might be better. But mean, they're not

10:11

really impactful. I don't think if you have

10:14

a safe custody location

10:16

walking in with your laptop

10:19

is necessarily a

10:21

difficult thing to do. I think the

10:24

the the most key thing around multi seg and

10:26

this is nothing new, is that

10:28

apart from the backups of the seeds

10:30

of all the individual devices

10:32

or at least a quorum of them. So

10:35

two of the three, if you're in a two or

10:37

three, You also need a

10:39

description of the wallet. You need

10:41

to have all of the public keys,

10:43

and this is because you need to be able to recreate

10:46

the spending script whenever

10:48

you want to spend, and that contains

10:51

the public keys to

10:53

that address. And that means

10:55

basically that you need to do this

10:57

in one of two ways, either create

10:59

backups of your wallet file. So

11:01

in this case, your spare a wallet file

11:03

or you need to have the output descriptor,

11:06

which is something that Spiro now

11:08

presents to the user when they

11:11

first create their Multisignature. So

11:13

there's a dialogue that pops up

11:15

and it shows you the sort of long string.

11:18

And then the idea is you can either print this

11:20

out as a PDF, you can

11:22

write it down, whatever means you feel

11:24

is most secure and caters towards whatever

11:26

you need. And then if you need to restore

11:28

your wallet, you can basically just plug

11:30

that in and your entire wallet will

11:33

then pop up. All of the phones will then come

11:34

in. So long as you still have a quorum of

11:37

the devices, you'll be able to sign and

11:39

send. Right. And so, yeah,

11:41

as you mentioned, this output

11:43

descriptor, this wallet back

11:45

up, it's a crucial step, and it's important to

11:47

have multiple copies of that.

11:49

Of course, there is a privacy consideration with

11:52

where and how you save that.

11:54

For example, if you keep getting the cloud, you might

11:56

want to encrypt that first if you are having

11:58

it maybe on some USB sticks along

12:01

with your devices, maybe you wanna be careful

12:03

which places you keep that because obviously

12:05

there's privacy ramification. But

12:07

it's also important from a redundancy point of view

12:09

to have it so that you don't lose access

12:12

to your clients, of course. So what

12:14

are some of the, I guess, other

12:17

practical aspects of offline

12:20

signing in a context. I

12:22

I know, for example, QR signing

12:24

can be a little difficult. Depending on

12:26

the lighting in the room, the devices that

12:28

we are using. Are you seeing any

12:31

innovation or developments on that

12:33

front? Yes, I mean, I think the

12:35

most interesting one recently

12:37

in terms of the QR stuff is

12:40

the launch of the new –

12:42

well, the upcoming launch, I should say, of

12:44

the new coin cut,

12:46

the Q1. Yes. Q1, yes.

12:49

Which I think is going to be interesting,

12:52

still uncertain exactly

12:54

what format that's going to use. Most

12:57

devices in the industry now

12:59

use a format called UR, which

13:02

is sort of a compact format

13:04

that we use to send data back

13:06

and forth. So we'll just have to see

13:08

how that goes. In terms of

13:11

devices being able to scan.

13:14

Yes. There are definitely times where

13:16

it is easier. I've heard one trick is

13:18

actually to, you know, hold up a

13:20

sheet of white paper behind the device.

13:23

don't know how much mileage you

13:25

might get out of that, but that is

13:27

certainly something that I've held The

13:29

reality is that some devices and here

13:31

are all mentioned the jade are just their

13:34

their screens are just very small, and

13:36

it's always going to be difficult for

13:38

a laptop camera, which is usually

13:40

not as proficient as a

13:42

phone camera to be able to scan such

13:44

a small screen. So there

13:47

are some devices which are better

13:49

than others. And, you know,

13:51

devices like the passport have

13:53

really been designed for it. You know, that's that's

13:55

their kind of primary means. So with

13:57

those kind of divide buses, particularly

14:00

if you're using the sort of newer, the sort

14:02

of version two, it's

14:04

much, much, much better. So, you know, it really,

14:06

I think, depends to some extent on device

14:08

that you

14:08

use. The seed sign are also generally

14:11

tends to be pretty good. You don't really have any issues

14:13

there. Yeah. I see. And as I

14:15

understand, there's also some

14:17

development and discussion around changing the

14:19

density of that QR code. So

14:22

I presume that instead means

14:24

if you have it as a lower density QR,

14:26

it just needs to do more different

14:29

QRs in a in a gif format

14:31

or something similar to

14:32

that. So that's also something we've

14:34

seen as well. Right? Yeah. I mean, that's

14:37

that's right. You know, it's basically the

14:39

way that these animated q r's work

14:41

is that you have this sequence of

14:43

QRs and you can

14:46

pick up a stream of them and

14:48

then the application can

14:50

then figure out from that stream,

14:52

you know, all of the information that it needs.

14:54

And if you decrease the density,

14:57

you're gonna have a longer stream. In other words,

14:59

you're gonna have to scan for more more time that

15:01

you will have you will need less resolution

15:04

in the actual scan in every image

15:06

that that you scan because the actual

15:08

blocks in the QR code will of course

15:10

be bigger. So it's it's sort

15:12

of trading off the speed of being able

15:15

to scan versus

15:16

the, really, the ability to

15:19

recognize the QR codes. And

15:21

one other thing I've seen is

15:23

general ongoing debates in the community

15:26

online discussion, people saying, Anna,

15:28

don't push people into It's too complicated.

15:30

A lot of people going to shoot themselves in the fort.

15:32

Just do a single signature wallet with a pass

15:35

phrase. And then there are others who

15:37

are in the more pro Multisignature camp

15:39

where they're saying no, actually it's a big improvement

15:41

in your security. It's worth it. You

15:43

just have to remember, okay, keep it simple.

15:46

Don't do anything too complex. I'm

15:48

curious if you have any view on that. Do you see

15:50

that as is a

15:52

real necessity above a certain

15:55

value, a certain number of

15:57

coins, or how are you

16:00

how would you advise somebody to whether they

16:02

are deciding on just single signature with

16:04

a passphrase versus actually take the

16:05

time, learn to do Multisignature.

16:08

So I think that first

16:10

of all, let me talk about the pass

16:12

phrase. I think the pass phrase, I

16:15

would still consider an advanced feature

16:18

The reason I say that is

16:20

because the pass phrase is something

16:23

you bring. So looking

16:25

at the security paradigm of something

16:27

that I own, plus something that I bring

16:30

is, you know, generally a good

16:32

way of seeing things. And the pass phrase,

16:34

of course, is something that as human beings, we

16:36

need to recall and enter in.

16:38

Now we may have made a record of it.

16:41

But really, you know, if you've just

16:43

written it down underneath your seed words, you

16:45

haven't really achieved anything because your

16:47

seed words are already enough to

16:49

create a seed

16:52

with enough entropy in it. So

16:54

it's really some something that you at least meant

16:56

to store in a different case if you do store

16:58

store it. But otherwise, you need

17:00

to really recall it in your head. And of course,

17:02

as human beings, we have tendency

17:04

to forget, get things or enter

17:06

them in wrong. And that's really

17:09

the reason behind a recent Sparrow feature,

17:11

which essentially does play is not only

17:13

the master fingerprint, but also little

17:15

image, which is unique to

17:17

that. And that kind of allows you as

17:19

you type your pass phrase in to

17:21

be able to see and kind of match

17:23

up in your in your mind both from a

17:26

a fingerprint recognition but also from

17:28

a visual cue whether

17:30

I've entered the right pass phrase. Because again,

17:33

if you forget whatever pass phrase

17:35

it is, you have lost

17:37

access to those friends. And I think that that's

17:39

a very real, you know, thing that

17:41

a lot of the people who use and recommend

17:43

the pass phrase, you know, that

17:46

that to many beginners seems like a

17:48

a Livera different

17:51

paradigm from the normal

17:53

one where you enter in a password. And if you

17:55

get it wrong, you get told that

17:57

you entered it wrong. Whereas with a pass

18:00

pass phrase, you enter it in, and whatever

18:02

passphrase, you enter creates a valid wallet. And

18:04

I think that that's a big difference that a lot of people

18:06

don't fully understand Right. It can

18:08

be confusing. Correct. Yeah. So so

18:11

that's the way that the standard is designed,

18:13

and that's the way that it works, you know. So

18:15

so we're all following it. But I think lot

18:17

of people don't fully understand it and

18:19

and and how that sort of impacts them.

18:22

For example, they will create a wallet

18:24

into their pass phrase, have a typo in

18:26

it, and then send funds to

18:28

that and then close the wallets. And then when they get

18:30

get back, they they don't obviously reenter

18:32

the typo, but then those funds that

18:34

they sent are gone. And that's a common thing that

18:37

you might see, and that's really what this this

18:39

kind of life hash, this little visual cue

18:41

is helpful for. So you should be checking

18:43

that every single time and saying yes,

18:46

that was a little sort of yellow with some gray

18:48

lines lines on it. That looks like the one

18:50

that I have. So that's, I think, you

18:52

know, just talking a little bit about past phrases,

18:54

getting to the thing. You

18:57

know, I would say you'll do multi sig

18:59

when you feel you need it.

19:01

And there's no feeling like

19:03

the security in my mind of

19:05

knowing you have a Multisignature you've

19:07

got multiple port devices

19:09

in different areas. And

19:12

you can deal with the fact that

19:14

one or more of them can be lost,

19:16

can be completely destroyed, and

19:18

you can still have access to your funds.

19:20

So you know, when do you get

19:22

to that point? I think it's when you

19:25

are worried about it when you are

19:27

lying awake at night thinking, you know,

19:29

I need to do better the value

19:31

of this to me. Whatever the amount is, the value

19:33

of this to me is high enough that

19:36

my cold card sitting in the in the

19:38

sort of cupboard or the safe plus the

19:40

passphrase in my head just doesn't feel

19:42

like a secure enough answer

19:45

for me, I need something a little bit better. And

19:48

that for me is when the sort of Multisignature

19:51

in. And it it is, I think,

19:53

easier. You know, there are people out there

19:55

who will say it's hard. And I think

19:57

that, you know, if you if you

19:59

don't do the the the correct

20:01

backup then you are getting yourself

20:03

into trouble, you know. But I think that it's as long

20:05

as you have, you know, backups of

20:07

the seed seed words for each device,

20:10

plus you have a backup as we were saying

20:12

of the output doctor or the Sparrow

20:15

Wallet file in different locations. And

20:17

you have a good obviously, a good password on

20:19

that file, then I think that it's actually

20:22

a relatively easy thing. You know? And certainly,

20:24

you know, it's not like they are

20:28

hidden pitfalls beyond

20:30

what we are talking about here that

20:32

I can say. Those

20:36

are the kind of key things to get right.

20:38

And if you have that right, I think you're

20:40

in a very good place because it allows you

20:42

to be relatively flexible with

20:44

where you store store things and how

20:46

you manage the entire

20:49

setup. I think it's a it's a good step forward.

20:51

Yeah. And I think there's a few things I wanna

20:53

dig into here, but I think one point that is

20:55

worthwhile pointing out is that multi signature

20:58

with different devices, device types,

21:00

also helps you versus what's known

21:02

as the chosen nonsattack. Whereas

21:05

many devices in a single signature context,

21:07

even with a passphrase, are not

21:09

safe particular not necessarily

21:12

safe against the chosen nons attack. Now,

21:14

I think it gets a bit complicated here because there

21:16

are some devices So for example, off

21:18

the top of my head, I believe BitBox o two

21:21

and the blockstream j'd have this

21:23

anti Xfil or anti Klepto.

21:25

Protocol, which is there to help you against that.

21:27

But there are all kinds of trade offs with

21:29

that too because that those devices you

21:32

get the anti Excel when you are using USB.

21:34

You don't get that when you're in QR code.

21:36

So think that's another reason

21:38

to think about multi signature as opposed

21:40

to just single signature in a passphrase because

21:43

it's possible that you without knowing

21:46

I mean, it's kind of theoretical risk,

21:48

but it, you know, it could be a thing

21:50

if, you know, the value bitcoin got big enough

21:52

and you were unknowingly

21:55

purchasing a wallet that had been compromised

21:57

by maybe somebody in the factory where

21:59

those wallets are made or those devices

22:01

are made. As an example, whereas

22:04

if you have multi signature with multiple device

22:06

types, now you're just so much more

22:08

protected against that. Right? So I think

22:10

that's an interesting point that people have to

22:12

just consider that path phrases can help

22:14

you against some types of

22:16

attacks, but they don't help you against everything. That

22:18

multicycle can help you against? Yeah. I mean,

22:20

I think that the chosen nonstop

22:23

attack, you know, the the best way

22:25

that I would, you know, protect

22:27

myself against that is with, you know,

22:29

upgrade your firmware to the most recent

22:31

version when you have your

22:33

new device. You know, that

22:35

way you can kind of do

22:38

at least some degree of it's

22:41

not sort of a perfect answer,

22:43

but I think it does certainly ensure that

22:46

at least you're doing that degree of check

22:48

because when you upgrade the firmware, the

22:51

device should have to check it. And

22:53

while that check you store, to

22:55

some extent, trusting the device to do it,

22:57

you at least can also check and you can check,

22:59

yes, the download that I have made

23:01

matches the fingerprint on the site. So

23:04

that I think is a good sort of approach.

23:06

In terms of all of the

23:08

devices now, they should be creating

23:11

the same signatures as

23:13

Bitcoin core or ASPARO.

23:16

So there's a sort of RFC

23:19

which details how you choose

23:21

the non a specific approach, and

23:23

everyone should be following that approach.

23:25

And if you follow that approach, then

23:28

the actual signature bytes are the same.

23:30

And I've kind of gone through a

23:32

process with many of the vendors

23:34

to make sure that they

23:36

are actually doing this. So we

23:39

Multisignature, which are not only

23:41

looking the same, but also of the

23:43

smallest size, which is obviously important

23:45

if we want to keep our fees low.

23:48

So there's, as I say, a

23:51

sort of approach, which allows us to then choose

23:53

the nonsense. And if it ends up with a larger

23:55

Cigna signature size, because the nonsense is

23:57

just a random thing, then you

23:59

can then go on and choose the next notes. Right?

24:02

And then that allows you to then see, okay,

24:04

the signature that I now get out is

24:06

smaller than the one that I got before, and

24:09

therefore, I'm gonna use that one. So

24:11

that's is called grinding for

24:13

low r. It's kind of a technical

24:15

thing, but the

24:17

upshot of all of this is that if all of these

24:19

devices are literally creating the same bytes,

24:21

then obviously we can say that

24:24

unless everything is compromised,

24:28

we can be reasonably sure that we are

24:30

not leaking additional information in that

24:32

segment. One other area that I think

24:34

would be great if you could help clear up. I

24:36

commonly run into this and often explain this

24:38

for people, but it will be great to hear you explain

24:40

it for people as well. So If you could explain

24:42

the difference between these concepts. Right? So I'm

24:44

just gonna listen out. So we have your

24:47

seed. You know, like, you can think of it

24:49

like your twelve or twenty four words are a representation

24:51

of that. You have the pass phrase. You

24:54

might have a pin on the device. And

24:56

then fourthly, you might have a sparrow password.

24:58

So could you just help explain the difference between

25:00

those four concepts just for listeners

25:03

who are little bit newer or using this

25:05

opportunity to

25:05

learn? Sure. So I I think one

25:07

can think of the Sparrow wallet password

25:10

and the PIN on the device is very much

25:12

the same kind of kind of thing. They control

25:14

access to the device or to your

25:16

Sparrow wallet. They are

25:18

basically just a gatekeeper in

25:21

front of things, which allow you. They

25:23

don't change in any way what's

25:25

going on inside the wallet or inside

25:28

the device, they just allow you to access

25:30

it at all. Otherwise, you're sump

25:32

dead. You can't get in. Then in

25:34

terms of the past phrase, that's

25:36

actually like an additional word

25:38

added on to the end of your seed words.

25:41

And that changes your entire seed.

25:43

So that's why when we were saying earlier,

25:45

it creates a completely different

25:47

and valid wallet that's, you

25:49

know, the effect of the pass phrase

25:52

is really to be able

25:54

to add this this additional thing

25:56

which creates wallet that only

25:59

you kind of know about. And

26:01

the big advantage of that is

26:04

that you are then able to ensure

26:06

that even should your Sparrow wallet

26:08

password be found or

26:11

indeed your device PIN that

26:13

pass phrase Livera the fact that it's

26:16

a different thing. Somebody would have

26:18

to enter in a pass pass phrase

26:20

and then go and check the blockchain. To

26:22

see whether there are any funds for that

26:24

particular wallet that they have not created.

26:26

And if they don't, then they're gonna have to go and

26:28

try the next one. And and that's a very

26:30

much slower process than trying

26:33

to guess, for example, your spirit

26:35

wallet password. Now even that is

26:37

slow because Sparo uses a

26:40

relatively slow key derivation algorithm

26:44

by choice in order to make it more difficult

26:47

to attack. But the pass phrase

26:49

thing is you're going to

26:51

a blockchain which is a very large data database

26:53

and you're trying to look things things up and you

26:55

can imagine that's never going to be

26:57

very, very quick. So we're just trying to put

26:59

things in which not only

27:01

hide the wallet, but also make it much more

27:03

difficult to brute force. Back to

27:06

the show in a moment. When it comes to securing

27:08

your Bitcoin, think about the hardware you use,

27:10

clankite dot com makes some awesome Bitcoin

27:12

hardware and accessories, for

27:14

your Bitcoin. Most notably, the GoldCard

27:17

Mark four. This is an extremely versatile

27:19

and reliable device. You can use it

27:21

to spin up your Bitcoin wallet

27:23

totally offline. All you have to do is plug

27:25

it into the wall or use the cold power

27:28

and you can charge your device in that

27:30

way and you can use micro SD card to

27:32

move things back and forth between your computer

27:34

or otherwise. You can also use it with NFC.

27:37

You can use it in various configurations, whether

27:39

that's single signature or multi signature. So

27:41

to get your gold card and your associated

27:44

gear, go to clincard dot com and get a discount

27:46

on your gold card with the code Lavera. Build

27:49

on l two is a community for builders

27:51

by block stream. This is a community

27:53

led effort with contributors and companies

27:55

who are building on call lightning and the

27:57

liquid network. So it's an interactive

27:59

community whether you are a builder, a

28:01

product manager, designer, and an engineer,

28:04

or just simply an interested on looker.

28:06

You can join their mentorship programs

28:08

to fast track your success. There's community

28:10

space where you can ask questions and discuss

28:12

with other Bitcoiners and build

28:14

the future of Bitcoin layer two. Go and

28:16

sign up. You can get access on the platform over

28:18

at build on l two dot com.

28:21

And finally, unchanged dot com. Unchain

28:23

capital can help you by improving

28:25

your security to multi signature. Untrained

28:28

capital is secure, transparent, easy

28:30

to use, and sovereign. In most

28:32

setups, you have two keys which you keep in

28:34

different locations and they hold a third key.

28:36

They can walk you through the process of setting

28:38

it up or you can go and set it up yourself on the

28:40

website. If you pay upfront for the

28:42

Concierge onboarding program, they'll ship you

28:44

some hardware, they'll teach you how to use it,

28:46

and you can then increase that

28:48

security and give yourself that additional

28:51

peace of mind by removing single points

28:53

of failure. Enchan are also thinking about

28:55

that inheritance scenario so you can give

28:57

your executor one key from a two or three

28:59

volt. There are step by step checklists. There

29:01

are letters for the executor or trustee

29:03

and other tools available So go to

29:05

unchanged dot com slash concierge.

29:08

Use code Lavera for discount there, and now

29:10

back to the show. I see. Yeah. And I

29:12

think it's an important thing just for people to understand

29:14

the reference to understand those four

29:17

concepts because if you misapply

29:19

that, you can get things wrong. And if you

29:21

if you confuse things. So for example, if if

29:23

a listener is out there, maybe they're little bit newer,

29:26

and they confuse the passphrase with, say, the Sparrow

29:28

application level password, they're totally

29:30

different things. And it will show you

29:32

literally a different wallet

29:34

and different addresses. And of course, this is

29:37

partly what the Livera which is

29:39

a new feature you mentioned, that's helping guess

29:41

that's there to help them decide or determine,

29:43

am I looking at the correct wallet? But

29:46

it's just useful to have a conceptual awareness

29:48

of these concepts so that way we can

29:51

be more secure and make the

29:53

right choices when we are deciding how to

29:55

secure our coins and all of

29:56

this. Right? Yeah. Yeah. Agreed.

29:59

You know, it's it's I think the

30:01

adding that life, life hash thing was

30:04

for me, you know, they're just trying to avoid

30:06

the support requests that come in when

30:08

people have had a typo or,

30:11

you know, that's, I think, the

30:13

the key key thing. So I'm gonna keep on

30:15

trying to work at that, hopefully,

30:17

we'll eventually get to point where

30:20

people are thinking about the passphrase that

30:22

they enter rather than just you

30:23

know, going for it. Yeah. And let's chat

30:25

little bit about NFC support. I know this

30:27

is something that is available

30:29

in the top signer. It's available in the

30:31

MK4. Some other devices are out there.

30:34

I know this is something you have also added

30:36

support relatively recently as

30:38

well. What's that what's that been like? And Are

30:40

people using it a lot or not really?

30:42

You know, I I was really unsure

30:44

of how much use it would get, and

30:47

I've only had few weeks now at to

30:49

judge it. But I I it's certainly being

30:51

used. I'm certainly getting queries

30:53

and people are talking

30:55

about it. So, you know,

30:57

it's it's I would say that it's got more

31:00

use in last few weeks than I thought it would,

31:02

which I think talks to the success of

31:04

the product itself. And I think, you know,

31:07

you kind of have to ask at the price point

31:09

of buying a card reader, which is required

31:11

in a desktop setting because, you know, generally,

31:14

your computer doesn't have a card reader in it.

31:16

Plus the the card card itself,

31:18

you know, you're kind of for one card,

31:20

you're kind of already looking at what for

31:22

example, a cold card would cost.

31:25

So you got to go to ask

31:27

why would you do it. And my answer

31:29

to that is that there are

31:31

setups, for example, Multisignature setups,

31:34

but also, I think one that's interesting

31:36

is, say you have, you know,

31:39

a a few kids and you want to introduce

31:41

them to the Bitcoin world and how to

31:43

self custody getting

31:45

them all to buy, you know, buying them all a seed

31:48

sorry, sorry, a cold card. Might be

31:50

quite an expensive thing, and there's lot of

31:52

complexity in using it. But

31:55

the TAP signer is just a single

31:57

card and put it on the reed reader

31:59

and enter in a short pin. And then you

32:01

have full use of it to import,

32:04

to sign all of those kind of

32:06

things. And for me, that's a nice way to

32:08

be able to get people in. Just from

32:10

my own point of view, it's it's sort of quickly

32:13

risen to be a common

32:15

way that I will test things if I'm

32:17

testing, for example, a Multisignature, what

32:19

have you I will generally tend to use

32:21

that just because it's so easy to use. You're

32:23

not trying to enter a pin and then

32:26

get this thing to work or do some kind of an

32:28

egg sort of egg yolk thing.

32:30

You know, you just have a very easy system.

32:33

So it's kind of ease of use is

32:34

high. And I would say that

32:36

when once you've started buying more than one,

32:39

the price point really does start to make more

32:41

sense. I see. Yeah. And it could make sense.

32:43

Maybe in a business

32:44

context, like, let's say, a bunch of people

32:46

have, you know, these top signers, and maybe it's like

32:48

a multi gig. So it's not just a single signature

32:51

wallet, but maybe few people, like, let's

32:53

say, five people get together and have a three or

32:55

five, and each of them has a top signer or

32:57

whatever they've each got their own device.

32:59

Maybe it makes sense from that context for

33:02

the larger spending, let's say.

33:04

So it kind of remains to be seen what's

33:07

gonna be the main use there. But certainly,

33:09

it is easy. Like, it's very quick to move

33:11

that information back and forth with NFC rather

33:14

than doing it all with, you know, Gold

33:16

Guard and, you know, these little SD cards

33:18

in and out all the time, but still

33:21

a useful feature. So let's see what happens

33:23

there. In terms of, I guess,

33:25

multi sig adoption, do you see

33:27

that there's much I guess just broadly

33:30

looking at the user experience for Multisignature,

33:32

I mean, I think most people can agree. It's a massive

33:34

security improvement. It's probably an improvement

33:37

in redundancy so long as you've done it correctly.

33:40

Do you foresee more people

33:42

using in terms of the average

33:45

just Bitcoin or, like, just see, you know, just

33:47

an average guy who's got a Bitcoin stack,

33:49

let's say, over the years as the cycles go

33:51

on. Do you see that as main streaming

33:53

and normalizing? Or do you see them sort

33:55

of staying in single

33:57

signature? Do you have any predictions? That's

33:59

a hard hard one to predict.

34:01

You know, I think that's without wanting

34:03

to get too deeply into it because

34:05

it's an area which I still need to spend

34:07

some time on myself. I think that if we

34:10

see this upholtz or similar

34:12

proposal come in, then, you

34:14

know, that might really affect things

34:17

because that provides a

34:19

security model, which think is would

34:21

be very interesting to many. But I

34:23

do think, just zooming out,

34:26

I do think that there is a general

34:28

progression as more and

34:30

more people become comfortable with

34:32

how Bitcoin works, how self custody

34:35

works, how these different concepts like

34:37

output, the script doctors, how

34:40

they can be used, I think we are

34:42

gonna see Multisignature to

34:44

the fore, you know, It's really just

34:46

about getting people used to the ideas

34:48

of it. know, I think that

34:50

just a few years ago we had a

34:52

relatively difficult, you know, I remember trying

34:55

to set up a multisig using Electromwallets

34:58

back in the days before I built a sparrow

35:00

and it was difficult. It wasn't easy

35:03

for me. To do. So

35:05

things have now changed a lot. You know, we've got

35:08

a lot more more apps with a lot

35:10

easier import of being able

35:12

to import the the right way

35:14

and, you know, the right kind of formats

35:16

to get wallet going. And

35:19

I think that the fears that you sometimes

35:21

hear are generally maybe coming from

35:24

that sort of earlier era where

35:26

you had systems that we're really

35:28

just not well designed for it. You

35:30

know, for me, I I can't imagine

35:32

how it could be much easier

35:35

to set up a Multisignature

35:37

know, in the spirit right

35:39

now, it's really, really

35:41

not a difficult thing to do and I would encourage

35:43

anyone who thinks it

35:45

is just to try, you know, just give it

35:47

a go, you know, create a

35:50

bunch of seat phrases and

35:52

trying and sort of get it set to

35:54

start up and see how it goes

35:56

because it's really not a difficult thing.

35:59

I suspect we will see more of it

36:01

as a result. So yes, I think

36:03

multistage is

36:04

coming. Yeah, and I think op Vault

36:06

may change things a little bit, and it could

36:09

also be layered dot layered together. Right?

36:11

You could even have multi signature and

36:13

maybe depending on how things go, it may

36:15

be common to people for people to use

36:17

up vault in combination with multi signature.

36:19

So then it just makes it even harder that

36:21

let's say you have your two of

36:23

three or your three of five multi signature

36:26

and you've got an up vault recovery pathway

36:28

So then if that becomes

36:30

really mainstream and it's known

36:32

that any serious hodla is

36:35

using multi some combination of

36:37

multi signature and or op vault,

36:39

it might really reduce the overall

36:41

amount of theft in a way. Right? Like, as my friend

36:44

Michael Flaxman has mentioned, that

36:46

we we might be able to make it clear

36:48

that Multisignature is such a common

36:51

and easily used feature for anyone with

36:53

a with a lot of coin that it

36:55

actually helps prove out

36:57

this whole idea of Bitcoin as this

36:59

uncensurable or difficult to seize

37:02

money. And I that to me, that's just a really cool idea.

37:04

But of course, it remains to be seen where

37:06

op vol goes if it comes or not, but

37:09

I think it'd be a cool thing to see. So

37:11

that's kind of how I'm seeing it. Do you have any

37:14

other thoughts on OpVault?

37:16

Not hugely at this time apart from the

37:18

fact that I think it would be a very useful things

37:21

to add. I'm certainly not

37:24

saying we should add it fast or rush

37:26

it in. I think it requires a lot of due

37:28

care But I think that

37:30

the idea is certainly good and that's

37:32

the general view that I

37:35

have seen is that most people seem

37:37

to regard the sort of idea behind

37:39

it as good and they are, I

37:41

think, some positive views on

37:43

the way in which it's been implemented to

37:45

date. The other thing about MultiSeq

37:47

that I would like to just say is,

37:49

it is obviously, as you mentioned

37:52

earlier, when you have multiple individuals

37:54

involved, it is really useful

37:56

for that, particularly in a business

37:58

context. If a business

38:00

wants to store funds, The

38:02

immediate question is how do we do it?

38:05

And Multisignature the obvious answer

38:07

because it allows multiple employees

38:10

to then hold the keys and

38:12

not one of one of them can then run

38:14

off, and that kind of gives everyone a feeling

38:16

of we're doing the right right thing.

38:18

So as I was saying earlier, the

38:20

the next version of the Sparrow is gonna

38:22

have a standard in it. It's

38:24

called BSMS or

38:27

BIP 129. And that

38:29

is basically an important export

38:32

standard, which allows people

38:34

to share the different, you know,

38:36

key stores or or shards, if you will,

38:39

in their setup, the

38:42

different signers can then exchange

38:44

over whatever secure channels

38:47

they use. And then

38:49

they can one of one of them can then,

38:51

you know, take all of those different assigners,

38:54

compile them into a Multisignature And

38:56

then share the wallet

38:59

as another

38:59

file, also ABSMS file, and

39:01

then everyone else can import that. So it kind

39:03

of just gives you a mechanism

39:06

to be able to conduct this

39:08

remote Multisignature setup in an

39:10

easy way. Yeah. So just to be clear,

39:13

today, you could have the same

39:15

Sparrow wallet database

39:16

file, right, that dot m v dot m dot

39:19

d b file. Let's say you, me, and

39:21

a third person, We could share that database

39:23

file today and share, let's say, we

39:25

had a signal chat. Let's say, you, me,

39:27

and this third person had a signal chat, and we could

39:29

share our PSBC through that. And

39:32

one of us could just kind of do that coordination

39:34

role and do it that way. But I I presume

39:37

BSMS would be an easier way to do

39:39

that maybe across

39:40

wallets. Is that Is that the goal here? Or

39:42

what what's goal? Yeah. So, I mean,

39:44

it must be said that this first implementation,

39:47

you know, there's a lot lot to BSMS,

39:50

which really, you know,

39:52

to get the full benefits requires integration

39:55

with the hardware devices themselves. Because

39:57

the idea is that every single

40:00

signer signs their own information

40:02

before they send it out. And then

40:05

when the information is all

40:07

compiled and brought together,

40:09

it includes the first address of

40:11

the wallet. And then the idea here is that that

40:14

first address is then the the device

40:16

then goes and checks. Okay. A, I

40:18

am the signer in the column and

40:20

b, the first address of this wallet matches

40:23

the one that I think it should should should

40:25

be. Unfortunately, we're just not

40:27

there today in terms of vendor support.

40:30

It's it's one of those difficult things

40:32

where it requires a lot of people to kind of

40:34

work in concept to deliver a UX

40:36

experience. So this first implementation

40:39

that I have been working on is really just

40:41

the basics of being able to share the information

40:44

back and back and forth. And

40:46

for many people who don't necessarily

40:49

want to, you know, you can't, for example,

40:51

at this point, save a

40:54

invalid, wallet file in

40:56

the spirit spirit. It kind of prevents

40:58

you from doing that. So what

41:00

you should do is then everyone then imports

41:02

their own device in whatever that is,

41:05

whether it's a soft software wallet, hardware

41:07

wallet, whatever it is. And then they

41:09

export this BSNS file,

41:11

they share it, and then everyone can import

41:13

those. So it's just AAA

41:16

means at this at this early stage of

41:18

being able to share that information out. Otherwise,

41:20

you'd have to send around expos in the end,

41:22

you know, the sort of other details,

41:25

which is less of a of a convenience.

41:27

So I think it's really just

41:30

making it easier to do those remote Multisignature

41:32

setups. I see. Yeah. So I guess,

41:35

today, it's possible even now, but

41:37

it just requires a little more technical competence

41:39

and a little bit more manual jiggling

41:42

with the system, let's say, as opposed to

41:44

the hypothetical BSMS future

41:47

is, I

41:47

guess, one way to explain that. Right?

41:49

Yeah. Yeah. I think, you know, we the

41:52

the idea here is to kind of solve the

41:54

need of people who just want to set up a

41:57

remote Multisignature and kind

41:59

of make that particular task easier.

42:01

But in time, I hope that we'll see

42:03

vendor support as well, which

42:05

will just allow all the kind of verification angles

42:08

of it to come into

42:10

play. So it's a as

42:12

with most of these things, it's a road that

42:14

we walk walk on and, you know, we gradually

42:17

get to the end end

42:19

call. And so let's also chat

42:21

about your bp 329.

42:23

So this is related to the import and export

42:25

of transaction. So can you tell us a little bit

42:27

about that? How it came about and how

42:29

that's progressing?

42:31

Sure. So, you know, what we have,

42:33

if everyone's kind of heard of

42:35

of the common staff

42:38

standards around SEDWords, for example,

42:40

the thirty nine is what it's called. And

42:42

that kind of defines how those seed words

42:44

look and how how they work. And that allows us

42:46

to transfer our funds from

42:48

almost any wallet on the market two

42:50

at different wallets. And that's a really useful

42:53

thing. You know, being able to not be locked

42:55

into a particular wallet is an immensely

42:57

powerful thing that we all kind

42:59

of enjoy. Now what we

43:01

don't have is the ability to transfer the labels

43:03

in one wallet to a different one.

43:06

That is until the 329.

43:08

Came came about. So the idea

43:10

here is that you don't want to have

43:12

application lock in for any

43:14

data that sits within that particular

43:17

wallet. And what the 329

43:19

is, it allows you to export all of the labels

43:21

from your wallet. And then for

43:23

any supporting wallet, you can then import

43:26

that file and then essentially all

43:28

of your labels will then be brought across.

43:30

So it's a means to be able

43:32

to do that. And as as we know,

43:35

labels are really important because we

43:37

have this UTXO model,

43:39

which means that, you know, all of your

43:41

privacy is linked to whatever the

43:43

UTXO came from. So being able

43:45

to label it Livera us a hint of,

43:47

okay, while I spent this before, it

43:50

was a change I put from a transaction there.

43:52

So if I spend it to someone else, they're going

43:54

to be able to follow that back. And

43:57

it just allows us to be more arrive at

43:59

when we can label things and understand what

44:01

that trail looks like. So I think

44:03

labels are important. Labels should

44:05

be used and we shouldn't be locked into

44:07

any particular particular application. And

44:10

that's really what the sort of

44:12

import and export of them is

44:14

all

44:14

about. So, yeah, that could be handy for

44:16

people who need to

44:19

just keep records as well, like, of

44:21

what did I do? What was this? What does this transaction

44:23

relate to? And being able to easily

44:26

move that across wallets or export it

44:28

out into other applications even

44:30

just for assessment or accounting or

44:32

other purposes. Also wanted to chat about

44:34

the privacy aspect of it. I know there's been

44:36

a lot of discussion. It's ongoing discussion

44:38

about bit forty seven pain mams

44:41

or you know, just this idea of

44:43

having a payment channel, but it's

44:45

like an on chain payment. And so

44:48

I think there are some debates online

44:50

about whether that should be used or

44:52

adopted. We are seeing I

44:55

saw recently there are some news about a new wallet

44:57

called StackWallet who has it. So So

44:59

Samura while it has it first. Obviously, Samura

45:01

while it has it. There is some chatter about some

45:03

other wallets adding it, but at the same time,

45:05

there are there are people critiquing the idea.

45:07

So why is bit forty seven

45:09

important or good from your perspective just

45:12

for people to

45:13

understand? Sure. So, I mean, I think

45:15

the key thing that it gives

45:17

you is, how can I in

45:19

a non interactive way receive

45:22

payment from someone else? Right? And

45:24

when I say non interactive, I

45:26

mean, I'm not going to be talking to them.

45:28

I don't know who who they are, they're just gonna send

45:30

knee funds. And I don't have to speak

45:33

to them or do anything on my my

45:35

part. And there's a number of ways that you

45:37

can do that today. Number one, you can put

45:39

a Bitcoin address out there in

45:41

the world, still a very highly used approach.

45:44

It has the huge downside is

45:46

that the entire world can see

45:48

exactly how much money I have got

45:50

on that address. Right? That's completely

45:52

open. So that is a very big

45:54

disadvantage to that. And if

45:57

I want to spend those funds, everyone

45:59

can see that as well. So

46:02

that's generally not the best route. The

46:04

second kind of approach is to run

46:06

something like BTC Pay Server which

46:09

allows a new address to be sent. But

46:11

of course, that's that requires you

46:13

to run a server. And for many people

46:15

in the world, that is not an easy thing. You know,

46:17

you not have to set up a server

46:19

somewhere you have to keep it going, and then that server

46:21

can then generate new addresses as

46:23

required. So bit forty seven

46:26

is a different approach. If you can

46:28

say kind of a third approach, which allows you

46:30

to put up this thing called payment code. It's

46:32

a really long series of letters and numbers.

46:35

And any thirty seven compatible wallet

46:37

can take that payment code and can

46:40

then construct an address

46:42

which that payment code and only that

46:44

payment code can see. And

46:46

that's a really powerful thing.

46:48

It's kind of allowing people

46:50

to, you could create a banner, a

46:52

black on, for example, with payment code

46:54

on it and anybody could run the world can

46:57

send you money to that. And

46:59

if that's a powerful idea, I

47:01

think. You know, it's an idea that one can

47:03

have this static address that

47:05

anybody can send to and

47:07

that sending is then private. That's

47:10

generally the that's think the the key

47:12

kind of idea that that forty seven is trying

47:14

to solve. Now we have a number of

47:16

other competing approaches, which

47:18

have come about in the last sort of year or

47:21

so We've got silent payments, and

47:23

then another one called, I think it's

47:25

the 351 private payments.

47:28

And that one, Both of those are

47:30

doing the same thing as what the forty seven

47:32

is. They try to improve on it in

47:34

certain ways, which we can get into. But

47:37

I think the forty seven, ultimately for

47:39

me, is still the key one because

47:41

it has this ability to be used and

47:43

integrated with all wallet. Where as some of

47:45

the others require full nodes,

47:48

which is not some something. Again,

47:50

you know, if you can run a full node, maybe

47:52

you can run a server anyway, in

47:54

which case you might as well be using

47:56

BTC based servers. So for me, it's

47:58

it's it's really, you know,

48:01

I haven't seen anything that

48:03

rivals the forty seven. And it's not a

48:05

perfect spec.

48:07

I I would say that it has downsides

48:10

for sure. But I think that

48:12

the utility that it has is

48:14

really unmatched, being able to

48:16

run a lot wallet client and

48:19

receive funds from a static address

48:21

anywhere in the

48:22

world, I think, is quite a unique

48:24

feature. Right. And so as you were

48:26

saying, I think that's probably the key

48:28

point that pit forty seven solves all

48:30

that some of the other approaches may not.

48:33

And so in practice,

48:35

I think it's more likely that bit forty seven

48:38

is going to stay at least for the

48:40

users who are focused on on train.

48:42

Perhaps in the future, if more

48:45

commerce shifts to lightning, then maybe

48:47

some of it moves to things like lightning address

48:49

or maybe in the future, bolt twelve LNURL,

48:52

these kinds of approaches. But,

48:54

yeah, it seems to me like pit forty seven is

48:57

going to be the useful approach especially

48:59

in the case where you need to regularly pay

49:01

the same person again and again. So

49:03

especially in the context of an employer

49:05

relationship, or even mining

49:07

pools. I believe Lynncoin has

49:10

this feature as a mining pool, which is

49:12

pretty cool. So maybe

49:14

over time, we sort of see a shift

49:16

towards the bolt twelve or lightning

49:19

address style because maybe that's more

49:21

scalable and usable for these

49:23

smaller transactions. But

49:25

I think the BIP forty seven,

49:27

it seems to me like it's here to stay at least in

49:30

certain niches. I think maybe

49:32

the criticisms, I could understand against

49:34

bit forty seven is one, there's not a lot of wall

49:37

to support it. Right? And I think that's fair.

49:39

And secondarily is the aspect

49:41

of meeting a notification transaction on

49:44

chain for every individual

49:46

that you wanna set up this bit forty seven. Let's

49:48

go at a bit forty seven channel or have that transaction

49:50

notification. So I think That's the

49:52

other aspect where I could understand

49:54

if you wanna take donations. It's kind of it's a

49:56

lot more friction if you need somebody to be

49:58

able to do that on chain notification

50:01

and then take donations. Certainly,

50:04

it makes sense for large donations that people

50:06

would do that. But I think in the context

50:08

of, let's say, I need to just put this QR

50:10

up and just take quick donations. I think

50:13

maybe vault twelve or lightning address

50:15

style approaches are faster in that

50:17

way. But certainly, they come with their own

50:19

trade offs too, right? Yeah, I mean,

50:21

the big downside is that, of course, good

50:23

lightning requires you to be online,

50:26

right? You need to know and either if you're going

50:28

to run your own node, which you

50:30

should, of course, because we all trying to be as non

50:32

consolidated as we can,

50:34

then that node needs to be online,

50:37

stay online, in which case you're very

50:39

much in the same situation as BDC

50:41

TASER, which, you know, I've got no

50:43

issue with that, you know, it is a more

50:45

difficult thing for many people in this world.

50:48

I would actually say that,

50:50

you know, I I do note that

50:54

some have an issue with sending

50:56

this notification transaction. The

50:59

cost of it is actually really small. It's like

51:01

the minimum amount that

51:03

you need to spend like five hundred and something

51:05

cents. So I mean from a

51:07

from a cost point of view is really minimal.

51:10

I would say that the kind

51:12

of the more impactful thing is

51:14

the fact that you have to be a little bit aware of

51:16

the UTXO that you use to

51:19

send it. And Spiro does some work to try

51:21

and make sure that it doesn't, you

51:23

know, resend UTX's

51:26

those or these that change from notification

51:28

transactions unless it needs

51:30

to. So I think that that's more

51:33

of concern than spending

51:35

what is really a tiny amount of money.

51:37

The other, I think, down downside is

51:39

that you need to use a hot wallet and

51:41

for many people, that isn't ideal. That's

51:44

it. I will say that, you know, there

51:46

are many, many hot wallets in this world

51:48

and we hear remarkably few

51:51

cases where those hot wallets are being compromised.

51:55

I'm sure it does happen, but the reality

51:57

is most of the time you hear about people

51:59

forgetting their past phrase, not about the

52:01

fact that somehow their hot wallet was

52:04

hacked. So I think that

52:07

those two are downsides, but

52:09

they're not massive in my

52:11

view and certainly not a reason that

52:14

shouldn't be trying to

52:16

implement the forty seven and trying

52:18

to use it. Yeah. And I think one other aspect

52:21

that If we want to see more Bitcoin

52:23

use and I think most of us agree

52:25

with that, we want to see more people using Bitcoin

52:27

and adopting Bitcoin. One thing that would

52:29

be really useful there is having a feature,

52:32

something like a contact list in our

52:34

applications. And I think

52:36

maybe that's been one difficulty so far.

52:38

I know some people have tried it. There have been

52:40

attempts at this, but it just it hasn't

52:42

seemed to stick really other than,

52:44

let's say, in Samurai Wallet or perhaps in

52:46

Sparrow Wallet if you have a few pay nIMs that you have

52:49

already set with or p forty seven codes

52:51

that you've set up with. And I'm curious

52:53

your thoughts that how important or relevant

52:55

is the is this notion of a contact list

52:57

in our Bitcoin

52:58

wallet. Yes, I mean, I do think

53:00

that it certainly makes things easier.

53:02

And I think that that's the reason why

53:04

paynams have seen such adoption

53:07

really. It is unusual for

53:10

Bitcoiners to use a

53:12

center centralized kind of service.

53:15

And I don't think that it's going to stay stay that

53:17

way. think it is due to change

53:19

and become a more decentralized thing.

53:22

But pain them certainly indicate

53:24

to us how it's so much easier just

53:27

to remember someone's NIM and

53:29

then be able to enter that in. So,

53:31

you know, It's useful,

53:33

but, you know, again, we want to be cautious

53:36

here because we don't want to get tied to something

53:38

which, you know, connects too

53:40

many connections to service

53:42

that we might not be able to control. So

53:45

think some pros and cons, but

53:48

can certainly see how you

53:50

know, if you want to send a donation to

53:52

SpireWise, you can just, you know, enter that

53:54

in as a sort of pain and it

53:57

pops up, so it makes life so much easier.

53:59

Right. And so when it comes

54:01

to just Bitcoin more broadly,

54:03

we've been talking a lot about security and a

54:05

little bit about privacy as well. I'm

54:07

curious if you have any things on your

54:09

wish list or things that you would

54:12

like to see kind of as a closing comment.

54:14

Is there anything that you would you know, if we could waive

54:16

our magic wand or if if you could

54:18

see development go in a particular

54:20

direction, what sorts of things would you like

54:22

to see? Well, I mean, I I

54:24

guess my, you know, sort of perennial

54:27

one is really size, cross

54:29

input, signature aggregation. That

54:32

one is just a

54:35

particular approach to being able to have

54:37

one signature for all of the

54:39

inputs of a transaction. And

54:42

the big advantage to that is

54:44

not only that it makes transactions smaller

54:46

and they're costless But I think the

54:49

key one is that it changes the fee

54:51

dynamics to favor transactions where

54:53

you have multiple people

54:56

coming in, and that of course breaks

54:58

the common input ownership heuristic.

55:01

So for me, that is always going

55:03

to be top of my list and I'm going to be

55:05

asking for it and wanting it until

55:08

hopefully one day we sit. So if

55:11

there was ever – I do believe

55:13

that there is some work ongoing on it, but

55:16

I'm kind of unaware of how much

55:18

and how far off it is. But that

55:20

for

55:20

me, it's always gonna gonna be very high

55:22

on the list. Yeah. And in fact,

55:25

I know Jonas, Nick,

55:27

and Tim Ruffing were doing some work on half

55:30

aggregation, which is a related idea about

55:32

an episode on that. But in terms

55:34

of the broader, the full piece, I

55:36

think that's going to be some ways off. Of

55:38

course, I would like to see that as well. I think

55:40

it would be a big win for scalability

55:43

and potentially for privacy also.

55:45

So it'd be really cool if we see that.

55:48

I'm hoping. He's hoping. Right?

55:50

I'm hoping. Yeah. Absolutely. Yeah.

55:53

Alright. Well, listeners make sure you follow Craig

55:55

spare wallet dot com is the place to go to get

55:57

Spare wallet. Follow him. You can find

55:59

his handle, his Craig Raw, and most places.

56:02

And I've got I'll put the Nastra, N

56:04

pub, and few other details in there.

56:06

Craig, thanks for joining me, and great

56:08

job with everything you're doing on Spare

56:10

wallet and Bitcoin

56:11

development. Thank you. Stephan has

56:13

been great to be up again. Yeah.

56:16

It's

56:17

looking forward to the next

56:20

few months and seeing everyone

56:23

hopefully we'll be able to get out to few

56:25

conferences this year. So, yeah,

56:27

looking forward to seeing senior

56:29

Get the show notes over at stéphane levera dot

56:31

com slash 462. Thanks for listening,

56:33

and I'll see you in the citadels.

Unlock more with Podchaser Pro

  • Audience Insights
  • Contact Information
  • Demographics
  • Charts
  • Sponsor History
  • and More!
Pro Features