dannybuntu / dannybuntu is on Nostr

Open Source contributor to FOSS project walletscrutiny.com and nostr.info

Last Notes

2026-09-10 13:08:31 UTC

🤖🔐 Another win for verifiable trust: our AI verification agent Bob independently reproduced the Trezor Safe 5 v2.12.4 firmware from public source — byte-for-byte matching the official release. This is what AI-driven cybersecurity auditing looks like: transparent, automated, repeatable.
✅ Built from source. Verified by AI. Trusted by design.
🔍 Full verification: https://walletscrutiny.com/hardware/trezorSafe5/#verificationId=8df0431ced6470c8e8659ab189ac19faa56c1e3560ee8ce4e563305da4e84a04
#Bitcoin #Cybersecurity #AI #ReproducibleBuilds #HardwareWallet #Trezor

2025-09-15 03:56:26 UTC

🚀 Successfully reproduced and verified @BitcoinSafeOrg v1.5.0 (linux) from source!
✅ The binary tested matches the one built from source.
🔍 See the full verification here:
Plus filed a github issue [Enhancement]
https://walletscrutiny.com/verifier/?pubkey=1f9e547c2f31942623b8ad1d07713282e8640fd8cf474e9f79f18ace8af216ed#verificationId=c5ce61984ffef35945a8ef4ac2f836d949337d95724df9839a111d09e293dacf

2025-09-05 01:07:36 UTC

nostr:nprofile1qythwumn8ghj7un9d3shjtnswf5k6ctv9ehx2ap0qythwumn8ghj7un9d3shjtnwdaehgu3wvfskuep0qyv8wumn8ghj7mn0wd68ytnxd46zuamf0ghxy6t69uqzpyaap3hnejawguugkqdvdnst9sqnz9xu5nqg6m38zt207u2qtg7rndtyguDesktop app v2.7.0 recently released and we at
@nprofile…wxp5 have, in earnest started testing for reproducibility. On that, may we request that the build documentation is updated - some parts are-but not for the reproducible builds part
https://pbs.twimg.com/media/G0C2tzybUAA1Sxa?format=png&name=900x900
https://npub1r709glp0xx2zvgac45wswufjst5xgr7cear5a8me7x9vazhjzmksp2sf7d.blossom.band/d6d3424cc13c97489288e32813c7763367e97da4021ab004d21af5e107a00760.png https://pbs.twimg.com/media/G0C2Wi4awAEKHZx?format=jpg&name=large
https://npub1r709glp0xx2zvgac45wswufjst5xgr7cear5a8me7x9vazhjzmksp2sf7d.blossom.band/10f8fcbb88b5fb5f8b871eef02210582704839844bfb774f076461e1b7a2e764.png

2025-06-23 13:16:45 UTC

- reply

@nprofile…7w9w could answer that.

2025-06-20 02:27:43 UTC

- reply

Our existing system is a powerful, specific implementation of what the Attestations NIP aims to generalize. Our "verifications" are a highly specialized form of their "attestations." The NIP is not a replacement for our testing infrastructure but a potential protocol for broadcasting our results. Adopting the NIP could significantly increase the reach and interoperability of our findings within the broader Nostr ecosystem, making WalletScrutiny a foundational "Attestor" for app reproducibility.
We use a sophisticated, automated testing infrastructure to perform reproducible build verifications for cryptocurrency wallets, primarily for Android and hardware wallets. The goal is to determine if the publicly available application binary matches the publicly available source code. The results are published as detailed "Review Pages" on our website.
Attestations NIP: This is a new, generic proposal for making, tracking, and revoking truthfulness claims about any event on Nostr. It is not specific to wallets or reproducible builds. As it's a new proposal, it currently has no widespread adoption, but it aims to be a foundational layer for any "web of trust" application, from fact-checking to reputation systems.