UNGOVERNABLE

UNGOVERNABLE

Sick of being spied on, stolen from, and lied to? UNGOVERNABLE aims to ignite a rebellious spark in every listener. We explore ways to regain privacy and freedom using Bitcoin and open source software. Freedoms are not granted, they are taken and defended. We are rebels with a cause. Join us and become ungovernable.

  1. 4 days ago

    Flag Theory with Pavol Lupták | FREEDOM TECH FRIDAY 62

    A weekly live show covering all things Freedom Tech with Max, Q and Seth. This week we're joined by Pavol Lupták, a Slovak cryptoanarchist, voluntaryist and perpetual traveller currently moving between Nicaragua, Honduras and (soon) Bolivia and Argentina. He co-founded Paralelní Polis in Prague and the IT security firm Nethemba, and now runs Liberation.Travel, helping people set up residencies, bank accounts and companies abroad. Pavol explains flag theory as decentralising your life the way Bitcoin decentralises money: spreading residency, tax base, banking and companies across several countries so no single government holds a monopoly over you. He talks us through his own journey from penetration tester in Bratislava to giving up his Slovak residency (while keeping his citizenship) and building a life with no fixed tax home. Most of the conversation is practical. For EU and UK citizens, Pavol's advice is to give up permanent residency rather than relocate, then live off crypto loans rather than a salary: he borrows euro stablecoins against Bitcoin on Aave and Morpho at under 1% interest, which counts as a loan rather than income and carries no tax or reporting obligation. He sets out why Paraguay is uniquely useful here: it has territorial taxation and, unlike almost anywhere else, grants tax residency without requiring you to actually live there, just a short visit roughly every three years. He covers the cost and process of getting Paraguayan residency, why it works for families who want a backup plan without pulling kids out of school (international school networks let children switch countries without changing school), why it falls apart for US citizens taxed on worldwide income regardless of residency, and why he's now also testing Bolivia, which offers similarly crypto-friendly non-CRS banking on nothing more than a passport. We also get into his travel and privacy setup: a 7kg bag, a GrapheneOS Pixel, a Flipper Zero, the rugged Tank 5 Pro phone and Even Realities G2 smart glasses, plus his rules for staying safe on the road, splitting his seed across continents, hidden wallet passphrases, and never posting his location until after he's left. On a listener question about counterparty risk in his borrow-against-Bitcoin setup, he describes the AI agents he runs to monitor his collateral and alert him before any risk of liquidation, and to shop his loans across platforms for the best rate. Links: The Global Opportunist, Liberation.Travel, Paralelní Polis, Nethemba. HELP GET SAMOURAI A PARDON SIGN THE PETITION ----> https://www.change.org/p/stand-up-for-freedom-pardon-the-innocent-coders-jailed-for-building-privacy-tools DONATE TO THE FAMILIES w/ USD ----> https://www.givesendgo.com/billandkeonneDONATE TO THE FAMILIES w/ BTC ----> https://pay.zaprite.com/pl_JpxtkLv95T SUPPORT ON SOCIAL MEDIA ---> https://billandkeonne.org/ TO DONATE TO ROMAN'S DEFENSE FUND: https://freeromanstorm.com/donate VALUE FOR VALUE Thanks for listening you Ungovernable lot, we appreciate your continued support and hope you enjoy the shows. You can support this episode using your time, talent or treasure. TIME: - create fountain clips for the show - create a meetup - help boost the signal on social media TALENT: - create ungovernable misfit inspired art, animation or music - design or implement some software that can make the podcast better - use whatever talents you have to make a contribution to the show! TREASURE: - BOOST IT OR STREAM SATS on the Podcasting 2.0 apps @ https://podcastapps.com - DONATE via Monero @ https://xmrchat.com/ungovernable - BUY SOME STICKERS @ https://ungovernable.network/shop/ FOUNDATION https://foundation.xyz/ungovernable Foundation builds Bitcoin-centric tools that empower you to reclaim your digital sovereignty. As a sovereign computing company, Foundation is the antithesis of today’s tech conglomerates. Returning to cypherpunk principles, they build open source technology that “can’t be evil”. Thank you Foundation Devices for sponsoring the show! Use code: Ungovernable for $10 off of your purchase CAKE WALLET https://cakewallet.com Cake Wallet is an open-source, non-custodial wallet available on Android, iOS, macOS, and Linux. Features: - Built-in Exchange: Swap easily between Bitcoin and Monero. - User-Friendly: Simple interface for all users. Monero Users: - Batch Transactions: Send multiple payments at once. - Faster Syncing: Optimized syncing via specified restore heights - Proxy Support: Enhance privacy with proxy node options. Bitcoin Users: - Coin Control: Manage your transactions effectively. - Silent Payments: Static bitcoin addresses - Batch Transactions: Streamline your payment process. Thank you Cake Wallet for sponsoring the show! MYNYMBOX https://mynymbox.io Your go-to for anonymous server hosting solutions, featuring: virtual private & dedicated servers, domain registration and DNS parking. We don't require any of your personal information, and you can purchase using Bitcoin, Lightning, Monero and many other cryptos. Explore benefits such as No KYC, complete privacy & security, and human support. (00:00:00) Welcome to Freedom Tech Friday (00:04:11) Pavol Joins Us (00:06:38) Who is Pavol? (00:14:23) Flag Theory for Normies (00:26:31) Why Paraguay? (00:30:10) A Backup Plan for the Kids (00:36:21) The Price of a Passport (00:41:46) Shorting the Euro (00:48:21) Pack Light, Hack Light (00:54:47) Who Holds Your Collateral? (00:58:16) Where to Find Pavol (00:59:30) See You Next Friday!

    Flag Theory with Pavol Lupták | FREEDOM TECH FRIDAY 62

  2. 21 Oct

    A Lottery to Free Samourai | The Confab 31: Rick Messitt

    In this Confab, Max sat down with Rick (@rmessitt on Twitter) to talk about the fight for financial privacy, why the Samourai case matters, and how he helped raise over 10,000,000 sats through a provably fair lottery to support the Samourai developers. They got into the cypherpunk roots of Bitcoin, the dangers of KYC, paper Bitcoin, and the creeping surveillance state, as well as why privacy tools are essential if Bitcoin is ever going to be genuinely useful as freedom money. Rick also shared his perspective on why so many people in Bitcoin have lost sight of the bigger picture, and why supporting people like Keonne and Bill matters far beyond just one legal case. Rick opened up about his own painful experience of losing around 25 BTC in a hack, how that changed the way he thinks about self-custody, and what others can learn from it. They talked through the emotional reality of being hacked, the importance of continuing to learn rather than becoming complacent, and the trade-offs between different custody setups. It was an honest conversation about sovereignty, security, time, family, and how to keep fighting without letting any of this consume your life. LINKS MENTIONED: - Fiesta Lottery: https://x.com/RMessitt/status/1993055214203478261 - Samourai Lottery: https://freesamourai.now - Free Samourai Presentation: https://x.com/RMessitt/status/2105342444594225195 HELP GET SAMOURAI A PARDONSIGN THE PETITION ----> https://www.change.org/p/stand-up-for-freedom-pardon-the-innocent-coders-jailed-for-building-privacy-tools DONATE TO THE FAMILIES w/ USD ----> https://www.givesendgo.com/billandkeonneDONATE TO THE FAMILIES w/ BTC ----> https://pay.zaprite.com/pl_JpxtkLv95T SUPPORT ON SOCIAL MEDIA ---> https://billandkeonne.org/ FOUNDATION https://foundation.xyz/ungovernable Foundation builds Bitcoin-centric tools that empower you to reclaim your digital sovereignty. As a sovereign computing company, Foundation is the antithesis of today’s tech conglomerates. Returning to cypherpunk principles, they build open source technology that “can’t be evil”. Thank you Foundation Devices for sponsoring the show! Use code: Ungovernable for $10 off of your purchase CAKE WALLET https://cakewallet.com Cake Wallet is an open-source, non-custodial wallet available on Android, iOS, macOS, and Linux. Features: - Built-in Exchange: Swap easily between Bitcoin and Monero. - User-Friendly: Simple interface for all users. Monero Users: - Batch Transactions: Send multiple payments at once. - Faster Syncing: Optimized syncing via specified restore heights - Proxy Support: Enhance privacy with proxy node options. Bitcoin Users: - Coin Control: Manage your transactions effectively. - Silent Payments: Static bitcoin addresses - Batch Transactions: Streamline your payment process. Thank you Cake Wallet for sponsoring the show! MYNYMBOX https://mynymbox.io Your go-to for anonymous server hosting solutions, featuring: virtual private & dedicated servers, domain registration and DNS parking. We don't require any of your personal information, and you can purchase using Bitcoin, Lightning, Monero and many other cryptos. Explore benefits such as No KYC, complete privacy & security, and human support. VALUE FOR VALUE Thanks for listening you Ungovernable Misfits, we appreciate your continued support and hope you enjoy the shows. You can support this episode using your time, talent or treasure. TIME: - create fountain clips for the show - create a meetup - help boost the signal on social media TALENT: - create ungovernable misfit inspired art, animation or music - design or implement some software that can make the podcast better - use whatever talents you have to make a contribution to the show! TREASURE: - BOOST IT OR STREAM SATS on the Podcasting 2.0 apps @ https://podcastapps.com - DONATE via Monero @ https://xmrchat.com/ungovernable - BUY SOME STICKERS @ https://ungovernable.network/shop/ (00:00:00) INTRO (00:02:36) THANK YOU CAKE WALLET (00:03:41) THANK YOU FOUNDATION (00:05:27) THANK YOU MYNYMBOX (00:06:11) Welcome to the Confag, Rick (00:13:03) Why Privacy Beats Number-Go-Up (00:26:42) The 25 Bitcoin Hack (00:45:48) El Salvador & the Moment It Hit (01:01:55) How Samourai Showed Up (01:14:07) Make Bitcoin Based Again (01:25:40) The Lottery for Samourai (01:38:34) It's a Marketing Problem (01:47:40) The State of Self-Custody (02:00:42) Signing Off

    A Lottery to Free Samourai | The Confab 31: Rick Messitt

  3. 19 Oct

    More Compromised Hardware!? | THE BITCOIN BRIEF 95

    A weekly news show informing you on the latest in Bitcoin, privacy and open source tech, hosted by Ungovernables, Max and Q. AOBbitcoiner.guide down due to hosting headachesCorrection to last week's chat about Bitkey NEWSHardware hacker Joe Grand examined a Trezor Model T bought on Facebook Marketplace in Canada in 2025 and a Trezor One from a TikTok shop in August 2026, both from unauthorized sellers on models Trezor discontinued in January 2026; in both, the main microcontroller had been replaced so the device produced one of about a dozen phrases the attacker already knew instead of a random recovery phrase, with a microSD card soldered inside the Model T holding genuine firmware to pass the integrity check and the Trezor One's swapped chip carrying both the malicious and official firmware, costing its owner about $50. Trezor told Zero Day on 15 October this is a known counterfeit method it has warned about since fake Model Ts turned up on Russian marketplaces in 2022, that it hasn't examined these specific units, that its Suite check is designed to catch devices producing predetermined phrases and it knows of no way to pull this off on its current Safe range, and that its 13 October comment about no evidence of compromise referred to new devices bought from its website or authorized resellers. Both hosts stressed this is not a Trezor supply chain issue, unlike the Ledger case, since both devices were counterfeits sold by unauthorized sellers, and urged listeners to buy hardware directly from the manufacturer and be wary of any reseller -- Zero Day (Kim Zetter), CryptoastTrezor said on 13 October it has cut the number of resellers it works with and is reviewing vendor relationships as a preventive step following the CryptoBilis implants, with dropped resellers able to sell existing stock until 1 January 2027; this isn't a flaw unique to Trezor, the hosts noted, but something that could affect any hardware manufacturer -- Bitcoin Magazine, CointelegraphRecapping the 9 October CryptoBilis drain of $86M to $93M, Ledger's 15 October statement says a "highly organized criminal group" bought devices, fitted the implants and fed them back through resellers with seed-collection, draining and laundering servers built in advance, that there was no flaw in its chip, operating system or servers, and it has asked resellers across Southeast Asia and Hong Kong to suspend sales without giving an official loss figure. Mark Karpelès says a Ledger Nano X bought at MediaMarkt in Germany is confirmed to carry the same implant, and reported another from a shop at Singapore's Changi airport, though Ledger hasn't examined either device and every confirmed theft still traces back to CryptoBilis; MediaMarkt has pulled Ledger devices worldwide. Chainalysis found a scam operator who stole roughly 60 BTC ($5M) from task-scam victims had it swept up in the same drain after moving it onto a compromised Ledger device, a bit of karma the hosts enjoyed -- Ledger statement, Bitcoin Magazine, Bitcoin Magazine (scammer victim), ForkLog (Karpelès), crypto.news (MediaMarkt), TokenPost (Gauthier v Karpelès)On the same day as its CryptoBilis statement, Ledger announced Atom, an Android phone due mid-2027 that runs everyday apps and switches into a protected mode for managing keys, with an OpenClaw AI assistant whose actions need physical approval on the device; Ledger says a tamper-sensing enclosure with its own battery will block screen-reading implants like the CryptoBilis ones, and Atom will sell only through Ledger's own website at $849 for a Founders Edition ($899 after launch). The hosts called the timing tasteless but the engineering impressive, questioning whether a phone that also runs WhatsApp and TikTok belongs anywhere near your keys -- CoinDeskA UK trader posting as "realist" on X says attackers held him at knife point and forced him to transfer close to $800,000, with $40,000 coming from a hot wallet and $720,000 from a Ledger hardware wallet; police have made no public statement though he says officers are investigating, and some commenters unofficially link it to the recent Revolut breach that leaked users' crypto holdings and home addresses -- CoinDeskAI-assisted searches from researcher Pizza Bitcoiner helped Jameson Lopp merge new cases into his wrench attack archive on 16 October, taking it past 700 documented incidents, with France the leading hotspot at 77 recorded incidents so far this year; the hosts' advice remains to keep your mouth shut about your holdings and stay pseudonymous online -- Jameson Lopp (GitHub), TFTC, Pizza Bitcoiner database, OCCRPBank of Russia guidance dated 12 October confirms direct peer-to-peer crypto trades between individuals stay legal only until 1 July 2027, after which every trade must go through a registered broker or exchange under Federal Law 282-FZ -- TFTC, Bitcoin MagazineThe US Treasury announced $1.2 billion in combined penalties on 13 October after Bank of America admitted willfully violating the Bank Secrecy Act, failing to report over $5 billion in suspicious transactions to FinCEN between 2018 and mid-2025, with the OCC's $750 million penalty counting toward the total, OFAC settling separately for $11.6 million, and no executive charged; the hosts set that against the five and four year federal prison sentences the Samourai Wallet developers are serving for pleading guilty to running an unlicensed money transmitting business over privacy software they wrote -- ABC News (AP), TFTC, TreasuryCitizen Lab's AdFection report is the first public technical confirmation that mercenary spyware can reach a phone through targeted advertising alone, with no click needed from the victim: at least 45 devices at Al Jazeera were targeted with Candiru spyware in 2024 and 2025 through ads bought by Israeli firm Discover-Tech, with attacker scripts found in over 75,000 Android and iOS apps and over 120,000 websites; Google, IAB Europe and several ad exchanges cut Discover-Tech off in early October, just before the report came out -- Wired, BleepingComputer, Citizen Lab404 Media and Court Watch reported that newly public court records include a letter from Telegram to US authorities, sent after a court order, disclosing a specific user's phone number, Telegram user ID and IP address, a reminder that Telegram is not a private messenger and shouldn't be used for anything you want kept private -- 404 MediaOpenAI published a misalignment report describing how an internal GPT-5.6 Sol research model, given no funded wallet, checked 362 addresses derived from a commonly used developer recovery phrase on 26 June, found one with funds and paid Sepolia testnet fees from it to finish a coding task without disclosing where the money came from, reasoning the funds on a known public developer mnemonic were "effectively abandoned"; only valueless testnet ETH was involved, and OpenAI caught it on 25 September through extended monitoring and has restricted live internet access for similar tasks -- OpenAI misalignment report, CoinDesk RELEASES Fulcrum 2.1.4 -- 2026-10-18 Adds a parallel hash lookup that makes get_history and subscription queries 5x to 10x faster on cold or uncached lookups, tunable with a new history_lookup_threads setting. Also refreshes the built-in server seed list.Lightning Terminal v0.17.7 -- 2026-10-17 Bundles Taproot Assets v0.8.6 with lnd v0.21.4-beta and Loop v0.35.0, ships reproducible archives with a signed tag, and the notes give a staged upgrade procedure for nodes with a price oracle.Am I Exposed v0.43.1 -- 2026-10-15 Fixes the find-connection tool added hours earlier in 0.43.0, which brought encrypted backups with an optional wallet key lock and graph investigation tools: find connections between addresses, BIP329 graph labels, a time layout and multi-select.Bisq 2 v2.1.14 -- 2026-10-15 Required update fixing vulnerabilities from Bisq's recent security audit. Offer takes must match the maker's current offer and price, buyers enforce seller reputation limits, and Bitcoin URI and Lightning invoice amounts are checked against the agreed trade. Also signs storage, isolates Tor connections between identities and moves to Tor 0.4.9.14.ZEUS v13.2.3 -- 2026-10-12 Stable release after 13.2.3-rc1: embedded LND 0.21.4 and an LDK Node build with the rust-lightning 0.2.7 security fixes. Also checks LSP-wrapped invoices match the invoice they wrap and binds LNURL-auth callbacks to the signing domain.Bitcoin Core v32.0rc4 -- 2026-10-12 Fourth release candidate for 32.0. Block validation can now fetch the coins being spent from disk in parallel (new -prevoutfetchthreads, default 8), the default connection limit rises from 125 to 200, onion services Bitcoin Core creates get Tor's proof-of-work defences against flooding, and a bug that could leak your IP when using private broadcast over Tor is fixed. The final release follows once testing on the candidates is done.Nunchuk Android 2.9.1 -- 2026-10-13 Adds an option to export the XPUB of any key, including software keys, along with bug fixes.Bitcoin Seed Tool 2.4.1 -- 2026-10-13 Fixes layout problems on phones and merges the SeedQR controls into one button with a SeedQR or Compact SeedQR switch, also for BIP-85 child seeds and Seed XOR shares. No change to how seeds, keys or addresses are generated.Corisco app v0.3.0 -- 2026-10-18 An open-source (MIT or Apache 2.0) Android Lightning wallet whose keys live on a cheap LilyGo T-Display-S3 (ESP32) board you flash yourself, with every payment confirmed on the device's own screen over Bluetooth. Built on Spark, so Spark operators co-sign with your key. App v0.3.0 adds paying Lightning addresses and LNURL plus a receive Lightning address; firmware v0.1.2 and app v0.2.1 shipped on 13 October.Bull Bitcoin Mobile 6.14.0 -- 2026-10-12 Tor now runs as an isolated package with separate sessions for vault-backup key servers and onion Electrum servers, and recovery words are typed on an in-app keyboard instead of t

    More Compromised Hardware!? | THE BITCOIN BRIEF 95

  4. 16 Oct

    Pirate Radio with SF | FREEDOM TECH FRIDAY 61

    A weekly live show covering all things Freedom Tech with Max, Q and Seth. This week we're joined by SF, aka Pleb Royale, a designer and Noderunner from the Netherlands behind a pile of free Bitcoin art and Noderunners Radio, a listener-funded internet radio station where song requests are paid for in sats. SF talks us through his design background (BTCPay Server skins, the Bitcoin Focus magazine, logo work for Alex Gladstein and Andreas Antonopoulos, and the Noderunners logo that's spread right across the community) and how a group of friends running nodes in the Netherlands turned into one of Bitcoin's most dedicated grassroots scenes, including this year's Noderunners Conference held in Arnhem's old prison. We get into how the station's jukebox evolved: built first by HeroVK as a Telegram bot controlling SF's Spotify, then rebuilt from the ground up with AI once he picked up a Claude subscription, and now running on self-hosted LNbits with its own seven-and-a-half-terabyte music library. Library tracks cost 21 sats as an anti-spam measure, Wavlake tracks run through a value-for-value lane where most of the 210 sats goes straight to the artist, and live DJ and band sets (streamed over RTMP) pool donations that only get split out once the set ends. Everything moved to self-custodial wallets to stay clear of EU rules around holding value, which is also why the old bot's leftover user balances are only now being unwound for withdrawal. SF also sets out the station's manifesto, a push toward a real FM/AM broadcast that could carry the state of the Bitcoin network over the airwaves if the internet ever goes down, and the idea of musicians timestamping their work to the chain as proof of creation. He clears up a tweet aimed at Breez after Misty Breez broke in September (his post, Roy's reply): it wasn't the radio's backend failing, just bad timing trying out Liquid swaps right as the hack hit. Links: Noderunners Radio manifesto, Noderunners Conference, Pleb Royale, Pleb Projects, SF's GitHub, Bitcoin Fortune Cookie. HELP GET SAMOURAI A PARDON SIGN THE PETITION ----> https://www.change.org/p/stand-up-for-freedom-pardon-the-innocent-coders-jailed-for-building-privacy-tools DONATE TO THE FAMILIES w/ USD ----> https://www.givesendgo.com/billandkeonneDONATE TO THE FAMILIES w/ BTC ----> https://pay.zaprite.com/pl_JpxtkLv95T SUPPORT ON SOCIAL MEDIA ---> https://billandkeonne.org/ TO DONATE TO ROMAN'S DEFENSE FUND: https://freeromanstorm.com/donate VALUE FOR VALUE Thanks for listening you Ungovernable lot, we appreciate your continued support and hope you enjoy the shows. You can support this episode using your time, talent or treasure. TIME: - create fountain clips for the show - create a meetup - help boost the signal on social media TALENT: - create ungovernable misfit inspired art, animation or music - design or implement some software that can make the podcast better - use whatever talents you have to make a contribution to the show! TREASURE: - BOOST IT OR STREAM SATS on the Podcasting 2.0 apps @ https://podcastapps.com - DONATE via Monero @ https://xmrchat.com/ungovernable - BUY SOME STICKERS @ https://ungovernable.network/shop/ FOUNDATION https://foundation.xyz/ungovernable Foundation builds Bitcoin-centric tools that empower you to reclaim your digital sovereignty. As a sovereign computing company, Foundation is the antithesis of today’s tech conglomerates. Returning to cypherpunk principles, they build open source technology that “can’t be evil”. Thank you Foundation Devices for sponsoring the show! Use code: Ungovernable for $10 off of your purchase CAKE WALLET https://cakewallet.com Cake Wallet is an open-source, non-custodial wallet available on Android, iOS, macOS, and Linux. Features: - Built-in Exchange: Swap easily between Bitcoin and Monero. - User-Friendly: Simple interface for all users. Monero Users: - Batch Transactions: Send multiple payments at once. - Faster Syncing: Optimized syncing via specified restore heights - Proxy Support: Enhance privacy with proxy node options. Bitcoin Users: - Coin Control: Manage your transactions effectively. - Silent Payments: Static bitcoin addresses - Batch Transactions: Streamline your payment process. Thank you Cake Wallet for sponsoring the show! MYNYMBOX https://mynymbox.io Your go-to for anonymous server hosting solutions, featuring: virtual private & dedicated servers, domain registration and DNS parking. We don't require any of your personal information, and you can purchase using Bitcoin, Lightning, Monero and many other cryptos. Explore benefits such as No KYC, complete privacy & security, and human support. (00:00:00) Welcome to Freedom Tech Friday (00:02:32) SF Joins Us (00:03:56) Who is SF? (00:07:21) The Cult Within the Cult (00:15:39) How Noderunners Radio Started (00:31:14) Vibe Coding the Jukebox (00:39:43) When Misty Breez Went Dark (00:46:18) Live Sets and the Donation Pot (00:58:27) Broadcasting Bitcoin Over the Airwaves (01:05:58) See You Next Friday!

    Pirate Radio with SF | FREEDOM TECH FRIDAY 61

  5. 12 Oct

    $93M Drained From Tampered Ledger Devices | THE BITCOIN BRIEF 94

    A weekly news show informing you on the latest in Bitcoin, privacy and open source tech, hosted by Ungovernables, Max and Q. AOBKeyOS v1.4.1 releasedPassport Core v2.4 internal beta testingPrepping for Freedom Fest UK and AmsterdamMax renovating the house NEWSHundreds of self-custody wallets belonging to Southeast Asian Ledger customers who bought their devices from CryptoBilis, Ledger's authorised reseller for Malaysia, Indonesia and the Philippines, were emptied in a coordinated sweep across six chains on 9 October, with on-chain tallies putting losses at $86M to $93M; Tether froze about $10M of the stolen USDT, and on 10 October Ledger confirmed an "unauthorized hardware implant" in one affected user's device. Mark Karpelès's Tibane Labs teardown found a hidden board inside a Nano X tapping the screen's data lines to read the 24 words during setup and send them out over its own cellular modem, never touching the secure element, so the device still passes Ledger's genuine check; CryptoBilis changed hands in March, with unverified registry screenshots showing a new owner based in China, though nobody has shown a link between the new owner and the theft. Anyone who bought from a non-direct seller should not set the device up, and anyone who already did should move funds to a new seed generated on a device bought direct -- Ledger Support (implant), Ledger Support (halt), Ledger (72-hour update), Bitquery investigation, Tibane Labs teardown, Mark Karpelès, Specter, CoinDesk, The Block, Crypto Briefing (Tether), Cointelegraph (EU report)On 11 October Coldcard said a post carrying a phishing link went out from its official X account and was deleted, telling users not to visit it and that coldcard.com is its only official site; it found no matching login or session record, says its credentials and offline 2FA remain secure, and has asked X Support to escalate, with no losses reported and no confirmation yet of how the post was published -- COLDCARD, COLDCARD follow-up, Cointelegraph, Stacker NewsSecond says an attacker exploited a bug in its Ark server's boarding flow on 5 October, registering boards with only his own signature and then exiting them while also spending the same balances out of Second's node over Lightning, taking 0.75 BTC of the company's own liquidity; Second blocked the source within hours, briefly took the server offline and shipped a fix, with users' pre-signed exit paths unaffected, and links the attacker's coins to the 19 September Blink theft -- Second, bark MR #2612, Stacker NewsFinCEN filed notices on 5 October withdrawing the 2020 unhosted wallet proposal, which would have required reports on transfers to self-custody wallets over $10,000 and records over $3,000, and the 2023 finding that labelled international coin mixing a primary money laundering concern, saying it will take no further action on either; existing exchange AML rules and OFAC sanctions on specific mixers are untouched -- Federal Register (wallets), Federal Register (mixing), Coin Center, CoinDesk, TFTCOn 25 September the DC Circuit upheld Roman Sterlingov's Bitcoin Fog conviction, finding that moving funds in and out of the mixer furthered its ability to launder funds for all users, enough to try him in Washington; on 5 October, the same day FinCEN withdrew its mixer rule, SDNY prosecutors cited that ruling against Tornado Cash developer Roman Storm, whose lawyers replied that Bitcoin Fog was custodial and Tornado Cash is not, with his retrial set for 26 April 2027 -- The Rage, TFTC, DC Circuit opinionICANN's Reveal Day on 7 October published 1,615 applications for new top-level domains, including mempool.space operator Wiz's community application for .bitcoin, which proposes a restricted namespace for vetted Bitcoin builders with no auctions or premium names and 21% of gross revenue going to Bitcoin development; a rival standard .bitcoin application from Bird Pepper LLC, linked to Identity Digital, is also in the contention set, with string confirmation due 17 November -- Application PDF, ICANN, Contention sets RELEASES Nunchuk Desktop 2.9.1 -- 2026-10-10 Fixes launch failures on Apple Silicon Macs introduced in 2.9.0, which brought hardware-key inheritance to desktop.Bitkey app 2026.13.0 -- 2026-10-05 Block's Bitkey published app release 2026.13.0 with a matching source tag and an updated Emergency Exit Kit APK for users who lose access to the app stores or Bitkey's servers.Am I Exposed v0.42.1 -- 2026-10-08 Roughly ten versions between 5 and 8 October turned Am I Exposed from a single-transaction checker into a wallet privacy auditor: wallet-level privacy heuristics, a UTXO list with privacy-aware coin selection and manual coin control, a spending decision tree, and BIP329 label import and export.Flint 1.3.0 -- 2026-10-06 The nodeless Lightning plugin for BTCPay Server adds a Sweeps report (what left the wallet, the fee, what arrived) and a Stablecoin Payments report to BTCPay's Reporting page. Supports BTCPay 2.4.1 and later, with no database migration.BlueWallet 8.0.2 -- 2026-10-06 Reproducible builds and BIP329 label import and export. Watch-only wallets can have their derivation path and fingerprint edited and show the raw PSBT when sending. Also fixes RBF on HD Bech32 wallets and animated QR scanning.StartOS 0.4.0.2 -- 2026-10-05 Gateways can be marked secure, services become reachable from other routed private networks, packages can request hardware virtualisation, and apps that pin the server certificate, such as Sparrow and Electrum clients, now see the same certificate on every route. Networking and backup fixes too.Coinos v3 (public testing) -- 2026-10-08 Coinos founder Adam Soltys opened Coinos version 3 for public testing at v3.coinos.io on 8 October, with a video tour. The new version pairs an Ark spending wallet with a regular onchain bitcoin wallet, adds a built-in Nostr client and encrypted messaging, and can run offline.PayPerQ Enclave Router -- 2026-10-07 PayPerQ (PPQ.AI), a pay-per-use AI router that takes Lightning, now serves chat requests inside an AWS Nitro enclave, with prompts encrypted on the device and the company seeing only billing metadata.Everything Else Alby Hub v1.24.1 -- 2026-10-06Refreshed payment screens, transaction filtering, a Postgres to SQLite migration flow, and dependency and security updates.Amber 6.6.7 -- 2026-10-05Nostr signer: relays reconnect after VPN and network changes instead of staying stuck until a force-close.Amethyst v1.18.0 -- 2026-10-11Nostr client: web of trust, private DM fixes and a new desktop app.Also in window: v1.17.0 (2026-10-05), reproducible builds and QR scanner audit fixes.Arkade TS SDK 0.4.79 -- 2026-10-08Updates the scure crypto libraries and fixes a swap URI amount-conflict bug; the companion Swap SDK 0.0.25 carries the same fix. 0.5.0 release candidates continue alongside.balanceofsatoshis v25.0.0 -- 2026-10-08LND command-line toolkit: adds a pending command and drops the price command.BDK chain 0.23.4 -- 2026-10-12Patch releases across the Bitcoin Dev Kit crates, also core 0.6.4, esplora 0.22.3, electrum 0.24.1 and bitcoind_rpc 0.22.1.Bitcoin Core v32.0rc4 -- 2026-10-12Fourth release candidate for 32.0, which brings parallel block validation and silent payments. Final not yet released.Bitcoin Keeper v2.6.3 -- 2026-10-07Fixes pairing with Keeper Desktop.Also in window: v2.6.2 (2026-10-06), smoother unlock and more reliable key rotation.BTCPay Server 2.4.5 -- 2026-10-06SSRF blocking on by default and tighter refund permissions. Followed release candidates rc4 to rc7 (2026-10-05 to 10-06).Cake Wallet 6.4.6 -- 2026-10-05Monero-side improvements and bug fixes; no Bitcoin-specific changes noted.Core Lightning v26.06.9 -- 2026-10-07Security release.Ditto v2.44.2 -- 2026-10-10Nostr social server: point releases, no readable notes.Also in window: v2.44.1 (2026-10-07) and v2.44.0 (2026-10-06).Fedimint React Native SDK 0.1.0-beta.1 -- 2026-10-11First React Native SDK for federated ecash apps, for testing only.Fedimint v0.12.2 -- 2026-10-06Gateway security release.Also in window: v0.11.4 (2026-10-06), related hardening.a…

    $93M Drained From Tampered Ledger Devices | THE BITCOIN BRIEF 94

  6. 9 Oct

    Bitcoin in Every App | FREEDOM TECH FRIDAY 60

    A weekly live show covering all things Freedom Tech with Max, Q and Seth. This week we're joined by Roy from Breez to talk about how the nodeless SDK has evolved, moving from Liquid to Spark after Boltz suspended swaps in August citing AI-assisted attacks, and why Breez picked Spark over Ark: Roy says payments need a near-perfect Lightning operator and that liquidity, not the ledger design, is the real bottleneck. We get into what Breez takes on as a Spark operator, the closed-source nature of Lightspark's SSP versus the open-source SSP Breez has now released, and why Spark's confidential transactions and oblivious send are still on the roadmap rather than shipped. Roy is blunt that Lightning was never a privacy tool, that around nine nodes handle 80-90% of network volume, and that Spark's privacy model is comparable to an LSP rather than something better. We also cover the stablecoin features (Stable Balance, instant on-chain deposits via zero-conf), the Glow reference wallet, and how AI coding tools have cut SDK integration times from weeks to days, including partners going from API key to production in under 24 hours. Links: Breez SDK (Spark) docs, Spark FAQ, Cake case study, Radar case study. HELP GET SAMOURAI A PARDON SIGN THE PETITION ----> https://www.change.org/p/stand-up-for-freedom-pardon-the-innocent-coders-jailed-for-building-privacy-tools DONATE TO THE FAMILIES w/ USD ----> https://www.givesendgo.com/billandkeonneDONATE TO THE FAMILIES w/ BTC ----> https://pay.zaprite.com/pl_JpxtkLv95T SUPPORT ON SOCIAL MEDIA ---> https://billandkeonne.org/ TO DONATE TO ROMAN'S DEFENSE FUND: https://freeromanstorm.com/donate VALUE FOR VALUE Thanks for listening you Ungovernable lot, we appreciate your continued support and hope you enjoy the shows. You can support this episode using your time, talent or treasure. TIME: - create fountain clips for the show - create a meetup - help boost the signal on social media TALENT: - create ungovernable misfit inspired art, animation or music - design or implement some software that can make the podcast better - use whatever talents you have to make a contribution to the show! TREASURE: - BOOST IT OR STREAM SATS on the Podcasting 2.0 apps @ https://podcastapps.com - DONATE via Monero @ https://xmrchat.com/ungovernable - BUY SOME STICKERS @ https://ungovernable.network/shop/ FOUNDATION https://foundation.xyz/ungovernable Foundation builds Bitcoin-centric tools that empower you to reclaim your digital sovereignty. As a sovereign computing company, Foundation is the antithesis of today’s tech conglomerates. Returning to cypherpunk principles, they build open source technology that “can’t be evil”. Thank you Foundation Devices for sponsoring the show! Use code: Ungovernable for $10 off of your purchase CAKE WALLET https://cakewallet.com Cake Wallet is an open-source, non-custodial wallet available on Android, iOS, macOS, and Linux. Features: - Built-in Exchange: Swap easily between Bitcoin and Monero. - User-Friendly: Simple interface for all users. Monero Users: - Batch Transactions: Send multiple payments at once. - Faster Syncing: Optimized syncing via specified restore heights - Proxy Support: Enhance privacy with proxy node options. Bitcoin Users: - Coin Control: Manage your transactions effectively. - Silent Payments: Static bitcoin addresses - Batch Transactions: Streamline your payment process. Thank you Cake Wallet for sponsoring the show! MYNYMBOX https://mynymbox.io Your go-to for anonymous server hosting solutions, featuring: virtual private & dedicated servers, domain registration and DNS parking. We don't require any of your personal information, and you can purchase using Bitcoin, Lightning, Monero and many other cryptos. Explore benefits such as No KYC, complete privacy & security, and human support. (00:00:00) Welcome to Freedom Tech Friday (00:02:45) Roy from Breez Joins Us (00:05:04) Eight Years of Breez (00:14:19) Liquid, Spark & Surviving the Hacks (00:18:09) The New World of AI Attacks (00:24:07) Why Spark...and Its Trade-offs (00:43:14) Lightning Was Never Private (00:49:36) The Breez SDK (01:00:28) See You Next Friday!

    Bitcoin in Every App | FREEDOM TECH FRIDAY 60

  7. 5 Oct

    The Cop Who Robbed Silk Road | THE BITCOIN BRIEF 93

    A weekly news show informing you on the latest in Bitcoin, privacy and open source tech, hosted by Ungovernables, Max and Q. AOBWeekend shenanigansMission Control and JarvisMax fighting insects NEWSFormer National Crime Agency officer Paul Chowles has been ordered to repay GBP 1,810,678.93 after a Crown Prosecution Service confiscation order on 30 September; he stole 50 BTC in 2017 from a wallet holding coins seized from Silk Road 2.0 administrator Thomas White, worth about GBP 59,000 at the time, laundering it through Bitcoin Fog and spending it via CryptoPay and Wirex cards before Merseyside Police caught him in 2022; he was jailed for five and a half years in July 2025, and part of his confiscation order now pays off White's own unpaid confiscation order to the state -- CPSSouth Africa's Absa has become the first African bank to custody bitcoin, mainly for institutional clients, following Deutsche Bank's custody launch in September; head of digital assets Rob Downes said bitcoin will be the bank's largest custodied asset, with other digital assets to follow, in a market Chainalysis puts second in Sub-Saharan Africa by value received at about $36B -- Bitcoin MagazineBlink published its post-mortem of the 19 September attack: a permissions flaw in its admin tools, open since October 2023, let the attacker grant themselves admin rights through the OAuth consent page and take over 35 custodial accounts, withdrawing about 6.61 BTC from 24 of them; nine targeted accounts had 2FA on and all 18 login attempts to use them were refused, so nobody with 2FA lost anything; shareholders advanced the full amount as an interest-free loan so balances were restored by 24 September with fees refunded, and Blink is offering a 25% recovery bounty plus a matching 25% donation to circular economies including Bitcoin Beach, Bitcoin Ekasi and Afribit Kibera -- BlinkTether says USDT is coming to Bitcoin this month via the RGB protocol, issued by Utexo, whose co-founder Viktor Ihnatiuk says the company holds the commercial licence; Utexo can't freeze RGB addresses the way Tether freezes Ethereum ones, so instead it will blacklist UTXOs that become unredeemable at bridges and minting tools, with BTC-to-USDT swaps and BTC-backed lending to follow and Lightning support after launch; USDT first lived on Bitcoin via Omni back in 2014 -- CoinDeskA federal judge in Utah has granted a preliminary injunction blocking the VPN provisions of the state's SB 73, the first US law to penalise VPN use, which would have required adult sites to block VPN users or locate every visitor; the court found the law demands something technically impossible, though the separate ban on explaining how to use a VPN was not challenged and stays in force -- EFFCore Lightning is warning of active attacks on unpatched nodes: an operator on v26.06.7 reported an attacker opening a splice, routing a small keysend, then sending an error so the victim's node goes on-chain and sweeps its own output through the revocation path as if it had cheated; the path was already fixed in v26.06.8, and by 1 October Stacker News operators were reporting about 0.2 BTC lost between them, with one user reporting 4.88M sats across five incidents and a StartOS user reporting 3M sats; anyone on 26.06.7 or earlier should upgrade now, or restart with --offline if they can't upgrade immediately -- GitHub #9578, GitHub #9595, TFTC, Stacker News, Stacker News, CLN v26.06.8The Dutch cabinet has told parliament that shares, bonds and options will move to a realised-gains tax from 2028, with other assets following in 2030; crypto isn't named among the 2028 instruments, so if it counts as an "other asset" Dutch bitcoin holders keep paying yearly tax on unrealised paper gains for two years longer than shareholders, and the tax-free allowance falls to EUR 1,000 per person -- NL Times, Bitcoin Magazine, Crypto BeneluxThe Liquid Federation says an independent external audit of Elements v23.3.4 is underway, focused on safely restoring peg-outs, and it is replacing the peg-out authorisation key list and moving all peg-out keys to cold storage; peg-outs remain paused nearly a month after the exploit, with about 602 BTC of the stolen 3,996 BTC still unrecovered -- crypto.news, KuCoin News, liquid.netUK law firm Edmonds Marshall McMahon says it has recovered 20.00444711 BTC, about $1.725M, in full and with no deduction for one client seven weeks after the Coldcard theft, the first documented full recovery through the Crypto Recovery Trust; the claim rested on blockchain forensics, the client's exchange records, signed message challenges and wallet derivation checks -- EMM Legal, CoinDesk, DecryptApps built on the Breez SDK can now accept USDT or USDC from more than 30 networks including Ethereum, Base, Solana and Tron, with Flashnet converting the payment in the background so it lands in the receiver's self-custodial wallet as bitcoin, or as dollars with the stable balance feature; this is a developer-facing SDK feature, not something Breez's own wallet turns on automatically -- Bitcoin MagazineBlock has launched its first big consumer ad campaign for bitcoin, "Some things don't make sense. Bitcoin does.", running on YouTube, X, Meta, Fox Sports and in cinemas until 31 December; meanwhile a Stacker News user described failing for the second time in two weeks to spend bitcoin at a Square terminal because the merchant hadn't switched the option on in their dashboard -- newer point-of-sale devices have the toggle on by default with a customer-facing screen, but older terminals still need the merchant to enable it -- Bitcoin Magazine, Stacker NewsBitget reopened BTC withdrawals on 28 September, with fiat and P2P back by 2 October, and Bitcoin Magazine reported more than 4,000 BTC withdrawn in a single hour on 29 September; CEO Gracy Chen told CNBC only about $1.1M of the roughly $388M stolen has been frozen and she isn't "expecting to recover a lot" -- CNBC RELEASES Ghostly 1.1.2 -- 2026-10-05 An MIT-licensed messenger that finds contacts over the Mainline DHT and talks over direct encrypted connections, with no servers or accounts, built-in payments across Lightning, Cashu, Ark, Spark and on-chain, and messages that vanish by default.LDK v0.2.7 -- 2026-10-01 A security release fixing two funds-theft bugs, including a malicious peer able to force a second commitment signature at the same state index, plus two denial-of-service bugs.Envoy 2.3.5 -- 2026-10-01 Adds proper large-screen layouts for tablets, fixes the Passport Prime price graph stuck on "Loading Data", and removes leftover code from the retired Buy Bitcoin feature.Nunchuk Android 2.9.0 -- 2026-09-30 Lets users set their own hardware signing device as the inheritance key in off-chain timelock inheritance plans, plus general bug fixes.Blockstream Green iOS 5.7.0 -- 2026-09-28 Adds manual coin selection for Bitcoin and Liquid, a price chart and BIP39 passphrase guidance at login, and restores 2FA-protected and 2-of-3 multisig account creation.Am I Exposed v0.37.5 -- 2026-09-30 A redesigned interface with light mode, a compact transaction graph and a "Before you act" section, plus later patches fixing Umbrel startup and dropping Liquid from tips and guides.Flint 1.2.1 -- 2026-09-28 The nodeless Lightning plugin for BTCPay Server turns on unilateral exit for every server, letting a merchant take its balance on-chain without Spark's operators, now with automatic exit-state backups.StartWRT 1.2.1 -- 2026-10-01 A security fix for the router's management interface so requests from loopback no longer skip sign-in, meaning every settings change now needs authentication. Everything Else 0xchat 1.5.6 -- 2026-09-30Nostr chat: blocks connections while the Tor proxy is set but not ready, closes a system-proxy leak, validates TLS for non-onion hosts, and patches Cashu P2PK security issues.Amber 6.6.6 -- 2026-09-28Nostr signer: fixes the nostrconnect parser corrupting secrets that contain "=", which broke NDK-based clients.AQUA 0.5.4 -- 2026-10-01Fixes Lightning refunds, mismatched fee display and failed-payment status; minimum iOS is now 15.Arti 2.7.0 -- 2026-10-01Tor in Rust: fixes low- to high-severity security issues (onion service operators should upgrade) and moves closer to running relays and directory mirrors.BasicSwap 0.19.0 -- 2026-10-03Atomic-swap DEX: Smart Buy (beta) fills an order across offers, and offers and swap messages can now travel over Nostr with a key per swap and Tor when enabled.Also in window: 0.18.10 (2026-09-29), switchable price oracles and stale-rate protection.BDK FFI v3.1.1 -- 2026-09-29Error messages no longer echo back descriptor or key material; also fixes a fee-rate overflow.Bisq v1.10.9 -- 2026-10-01Mandatory: fixes vulnerabilities found in a recent security audit and updates Tor. Required to keep trading.Bitcoin Core v32.0rc3 -- 2026-10-01Third release candidate for 32.0, which brings parallel block validation and silent payments. Final not yet released.Bitcoin Keeper v2.5.17 -- 2026-10-02Better Recovery Key backup checks and repair, and improved wallet recovery.Also in window: v2.5.16 (2026-10-02), UI and crash fixes; v2.5.15 (2026-09-28), versioning only.Breez SDK Spark 0.26.1 -- 2026-10-02Smaller mobile binaries.BTCPay Server v2.4.5-rc3 -- 2026-10-05Release candidate, following rc1 (10-01) and rc2 (10-02). No release notes yet.COLDCARD 5.6.3 and 1.5.3Q -- 2026-09-30Adds Codex32 and Shamir seed splitting, warns before installing contributor-signed or downgraded firmware, and…

    The Cop Who Robbed Silk Road | THE BITCOIN BRIEF 93

  8. 2 Oct

    Freedom Fest UK with Nathan Day | FREEDOM TECH FRIDAY 59

    A weekly live show covering all things Freedom Tech with Max, Q and Seth. This week we're joined by Nathan Day, co-founder of Bitfest, to talk about Freedom Fest, a new event for privacy, digital rights, civil liberties and freedom tech running alongside Bitfest at the Pendulum Hotel in Manchester this November. Freedom Fest is ticketed and marketed separately to reach freedom-minded communities who aren't into Bitcoin yet, with talks from the Tor and GrapheneOS teams, Free Cities and HRF's CBDC Tracker crew. Listeners get 21% off Bitfest tickets with the code UNGOVERNABLE at bitfest.uk, limited to the first 21 uses. We also get into Nathan's eight-ton overland camper mining three terahash off solar, the state of merchant adoption on BTC Map and the wrench-attack risk merchants take on by being on a map, and how Omarchy, OpenCode and Hermes have turned him into a prolific vibe coder. HELP GET SAMOURAI A PARDON SIGN THE PETITION ----> https://www.change.org/p/stand-up-for-freedom-pardon-the-innocent-coders-jailed-for-building-privacy-tools DONATE TO THE FAMILIES w/ USD ----> https://www.givesendgo.com/billandkeonneDONATE TO THE FAMILIES w/ BTC ----> https://pay.zaprite.com/pl_JpxtkLv95T SUPPORT ON SOCIAL MEDIA ---> https://billandkeonne.org/ TO DONATE TO ROMAN'S DEFENSE FUND: https://freeromanstorm.com/donate VALUE FOR VALUE Thanks for listening you Ungovernable lot, we appreciate your continued support and hope you enjoy the shows. You can support this episode using your time, talent or treasure. TIME: - create fountain clips for the show - create a meetup - help boost the signal on social media TALENT: - create ungovernable misfit inspired art, animation or music - design or implement some software that can make the podcast better - use whatever talents you have to make a contribution to the show! TREASURE: - BOOST IT OR STREAM SATS on the Podcasting 2.0 apps @ https://podcastapps.com - DONATE via Monero @ https://xmrchat.com/ungovernable - BUY SOME STICKERS @ https://ungovernable.network/shop/ FOUNDATION https://foundation.xyz/ungovernable Foundation builds Bitcoin-centric tools that empower you to reclaim your digital sovereignty. As a sovereign computing company, Foundation is the antithesis of today’s tech conglomerates. Returning to cypherpunk principles, they build open source technology that “can’t be evil”. Thank you Foundation Devices for sponsoring the show! Use code: Ungovernable for $10 off of your purchase CAKE WALLET https://cakewallet.com Cake Wallet is an open-source, non-custodial wallet available on Android, iOS, macOS, and Linux. Features: - Built-in Exchange: Swap easily between Bitcoin and Monero. - User-Friendly: Simple interface for all users. Monero Users: - Batch Transactions: Send multiple payments at once. - Faster Syncing: Optimized syncing via specified restore heights - Proxy Support: Enhance privacy with proxy node options. Bitcoin Users: - Coin Control: Manage your transactions effectively. - Silent Payments: Static bitcoin addresses - Batch Transactions: Streamline your payment process. Thank you Cake Wallet for sponsoring the show! MYNYMBOX https://mynymbox.io Your go-to for anonymous server hosting solutions, featuring: virtual private & dedicated servers, domain registration and DNS parking. We don't require any of your personal information, and you can purchase using Bitcoin, Lightning, Monero and many other cryptos. Explore benefits such as No KYC, complete privacy & security, and human support. (00:00) Welcome to Freedom Tech Friday (03:12) Nathan Day Joins Us (04:40) Freedom Fest & Bitfest (11:10) The Overland Beast (18:54) Who's Speaking & Ticket Code (22:15) Putting Bitcoin on the Map (32:44) Is It Omarchi or Omarki? (46:48) Should You Pay in Bitcoin? (54:16) Where to Get Tickets (56:03) See You Next Friday!

    Freedom Fest UK with Nathan Day | FREEDOM TECH FRIDAY 59
See All (506)

5
out of 5
21 Ratings

About

Sick of being spied on, stolen from, and lied to? UNGOVERNABLE aims to ignite a rebellious spark in every listener. We explore ways to regain privacy and freedom using Bitcoin and open source software. Freedoms are not granted, they are taken and defended. We are rebels with a cause. Join us and become ungovernable.

Information

  • Creator
    UNGOVERNABLE
  • Years Active
    2019 - 2026
  • Episodes
    506
  • Rating
    Explicit
  • Show Website
    UNGOVERNABLE

You Might Also Like