❌

Normal view

There are new articles available, click to refresh the page.
Today — 29 October 2026Main stream

Senator Bill Hagerty: Expanding the U.S. Strategic Bitcoin Reserve, & the Future of Dollar Hegemony

29 October 2026 at 08:46

Bitcoin Magazine

Senator Bill Hagerty: Expanding the U.S. Strategic Bitcoin Reserve, & the Future of Dollar Hegemony

Senator Bill Hagerty says the only answer some in Congress have is a central bank digital currency, and that’s “absolutely not consistent with freedom and liberty.” In this in-studio interview, he explains how uncertainty let former SEC chair Gary Gensler attack the industry, why a light government touch helps innovation thrive, and what Congress can realistically get done before the new session in January.

Chapters:
00:00 Senator Bill Hagerty on What’s Next for the Clarity Act
01:38 Democrats, Ethics Provisions and the Stablecoin Rewards Debate
03:04 How the SEC and CFTC Are Regulating Crypto Without Congress
04:43 How the GENIUS Act Will Change Payments and Settlement
07:08 Stablecoins, Treasury Demand and U.S. Dollar Dominance
08:31 The U.S. Strategic Bitcoin Reserve and 200,000 Bitcoin
10:54 Why Americans Are Still Skeptical of Crypto
13:18 Bitcoin Mining, TVA and Tennessee’s Energy Buildout
17:14 Bitcoin Businesses in Nashville and Why CBDCs Threaten Freedom
18:36 What Congress Can Pass Before the New Session in January

DISCLAIMER: The views and opinions expressed in this show are those of the participants and do not necessarily reflect the official policy or position of BTC Inc., Bitcoin Magazine, or any affiliated entities. This content is provided for informational and educational purposes only and should not be construed as investment, legal, tax, or accounting advice. Nothing contained in this show constitutes a solicitation, recommendation, endorsement, or offer to buy or sell any securities or financial instruments. Viewers should consult their own advisors before making financial or business decisions.

This post Senator Bill Hagerty: Expanding the U.S. Strategic Bitcoin Reserve, & the Future of Dollar Hegemony first appeared on Bitcoin Magazine and is written by Patrick Green.

Before yesterdayMain stream

SEC Puts Tokenization On Its 2027 Examination Agenda

24 October 2026 at 14:00

TL;DR: The SEC has named tokenization among its fiscal 2027 examination priorities, bringing the systems behind blockchain securities into closer supervisory focus. The staff document sets inspection priorities and creates no new legal obligations.

The SEC’s tokenization agenda now includes a practical question for financial firms: can the infrastructure work reliably when something goes wrong?

In its October 23 announcement, the US regulator placed tokenization among the market developments its examiners will scrutinize during fiscal 2027. The wider program also covers investment advice, complex products, private credit and cybersecurity across more than 34,000 registrants.

For companies building services around tokenized assets, that brings the discussion down from the promise of faster trading to the controls supporting it. A share recorded on a blockchain still needs dependable ownership records, functioning markets and an orderly response to disruption.

Clearing And Trading Systems Enter The Frame

The 20-page examination document explicitly includes tokenization among high-risk areas for clearing-agency reviews. In its discussion of Regulation Systems Compliance and Integrity, it lists tokenized securities alongside extended trading hours, advanced AI and quantum computing. Cloud providers and other technology suppliers also feature in those reviews.

That combination matters. Extending trading hours can leave less time for maintenance, while connecting a token to conventional securities records adds another place where systems must agree. The relevant test is whether the complete service remains dependable, including the handoffs between systems.

The document separately emphasizes cybersecurity governance, access controls, incident response and risks from shared technology. It also states that the priorities are staff views, carry no legal force and do not amend existing law. An examination focus should therefore be read as a signal about supervision, rather than a new tokenization license or prohibition.

A Permission To Experiment Still Comes With Conditions

The context is the SEC’s September innovation exemption for certain tokenized stock venues. That temporary framework requires equivalent shareholder rights, issuer notification and an opportunity to object when an unaffiliated party tokenizes shares. It also imposes trading limits and requirements for public, auditable smart contracts.

Those conditions illustrate why market access and operational supervision move together. A permitted venue can still have weak controls; a technically impressive platform can still mishandle an investor’s rights. The new priorities put attention on that gap.

For investors, the useful distinction is between the token and the service built around it. Questions about who holds the underlying security, how transactions reconcile and what happens during an outage remain relevant alongside the blockchain’s design. Custody and market infrastructure do not become incidental simply because a trade uses a token.

The SEC says its priorities are non-exhaustive and may change during the year. Tokenization’s place in the published agenda nevertheless gives firms a clear reason to expect scrutiny of how their systems operate, as well as what their products promise.

Written by the News Desk and edited by Samuel Rae.

Bitwise Asks SEC To Protect Funds Relying On Token Status Filings

22 October 2026 at 15:50

TL;DR: Bitwise filed a supplemental SEC comment seeking clearer protection for firms that rely on token-status filings. The October 21 letter develops its earlier proposal; it is an industry request, not an adopted rule.

Bitwise is pressing the Securities and Exchange Commission to answer a question that matters to fund managers: when can a firm rely on somebody else’s determination that a crypto asset has separated from an investment contract?

The asset manager’s October 21 supplemental letter focuses on that reliance problem in the SEC’s proposed Regulation Crypto Assets framework.

It asks the commission to distinguish an issuer’s filing of Form TR from the point at which a separate market participant can rely on an unchallenged filing. It also seeks protection for reasonable, good-faith determinations if a later challenge arises, and asks for the treatment to carry through relevant investment-company and investment-adviser definitions.

A Token Issuer And A Fund Manager Have Different Information

Bitwise’s original October 19 response explains its position as a company that builds investment products using crypto assets rather than issuing those assets itself. Whether an asset could be treated as a security affects decisions about which products can hold it.

The practical concern is that a manager may need to make those decisions using public information, without access to all the records held by an issuer or development team.

A reliance framework would define when public filings can support that decision and what knowledge would prevent a firm from relying on them. That is distinct from declaring that any particular token is outside securities law.

The supplement also argues that filing Form TR should not itself be treated as an admission about the asset’s previous legal status. Its requests concern the consequences of using the proposed process, not simply the form’s availability.

The Letter Does Not Resolve The Rulemaking

The document is hosted in the SEC’s comment file, but its arguments belong to Bitwise. Publication there is not an endorsement by the commission.

The distinction is especially relevant to headlines about regulatory certainty. An industry participant can identify a problem and propose a detailed solution while the outcome remains undecided.

For fund managers, the issue to watch in the eventual rules is how responsibility is divided between the party making a token-status filing and the firms using it to construct financial products. Bitwise’s latest submission makes that division the center of its case.

Related Reading

This article was written by the News Desk and edited by Samuel Rae.

Anti-Forensics: Building a Phantomdrive

22 October 2026 at 10:07

Welcome back, aspiring cyberwarriors!

You may know that privacy laws aren’t respected everywhere. In some places you can be forced to decrypt your files, or worse, get accused of a violation just for having encryption. A VeraCrypt hidden volume helps with the first problem but not the second. That’s why the project developer built Phantomdrive.

Phantomdrive is a fully open source USB drive that shows up as an 8GB disk when you plug it in. The OS has no way to detect the rest of the storage. To unlock the hidden partition, you open a text file on the visible part of the drive, type password: YOURPASSWORDHERE and save it. The drive disconnects, remounts the hidden partition, and AES-256 handles the encryption and decryption on the fly.

Design

The hardware, firmware, and mechanical design are all open source. The developer built it around a small chip called the CH569, from the same company behind the CH340 USB-to-Serial chip you’ll find on most Arduino clones. It has USB3, SD/eMMC support, and a hardware AES block built in.

eMMC was too expensive due to AI-driven demand, so the developer went with an SD card instead. If someone tears the device apart they’ll find it, but everything on it is encrypted. The enclosure is sealed with epoxy, so any attempt to get inside means destroying it first. Once eMMC prices drop, a version using it will follow.

The board itself is simple. It’s a CH569 chip, a USB port, two buck converters, a firmware update button, an SD card, and some supporting components.

Cryptography

The developer verified encryption works through functional tests and ran it against OpenSSL’s AES implementation. Most of the GitHub issues that surfaced were AI-generated noise or already fixed bugs, with one real exception around AES-XTS covered below.

Key Derivation

A Key Derivation Function (KDF) turns your password into an encryption key. The naive approach is padding the password to 32 bytes and using it directly.

That’s weak. A precomputed table could crack it without even brute forcing. To fix that, Phantomdrive adds a unique salt per device.

With different salts, an attacker has to compute keys for each device separately, and you can’t swap the SD card between devices. You can read your salt like this:

udevadm info --query=property --name=/dev/sdc | grep ID_SERIAL_SHORT
ID_SERIAL_SHORT=Phantomdrive:34FC1FA7145467F7

So, 34FC1FA7145467F7 is the salt for this device, which you will need to recover the data if it ever fails. Save that value. You can also change the Phantomdrive name and the USB PID/VID in firmware if you want more stealth. On top of the salt, the KDF runs 100,000 rounds of SHA-256.

That adds about 3 seconds to unlock time, which is already at the limit of what the chip can handle. Argon2 isn’t an option since it needs too much memory. If you need stronger security, you can increase the round count, use a software encryption layer on top, or look for a different device.

AES Modes

AES is a block cipher that works on 16-byte chunks. Different modes turn it into a stream cipher.

AES-ECB is the naive approach, encrypting each block directly. The problem is that identical plaintext blocks produce identical ciphertext blocks, which leaks patterns. Attackers can also manipulate the ciphertext in predictable ways. Not good.

AES-CTR solves this by encrypting a counter and XORing the output with plaintext.

uint64_t i = 0;
while(i < len(ciphertext)) {
    ctr = aes_encrypt(i);
    ciphertext[i] = plaintext[i] ^ ctr
    i++;
}

The main risk with CTR is nonce reuse. If an attacker copies your ciphertext twice and can guess one version, they can recover the other. The developer gets around 9 MB/s write and 20 MB/s read with AES-CTR.

AES-XTS is the disk encryption standard and uses two keys. K1 protects the data, K2 generates a tweak per sector. 

Each 16-byte block gets its own adjustment (T0, T1… Tn), then blocks are encrypted one by one to produce the final ciphertext. 

It’s more secure but slower, around 6 MB/s write and 10 MB/s read on this hardware.

Firmware

The firmware is built on two open source libraries:

BSP: https://github.com/hydrausb3/wch-ch56x-lib

ISP: https://github.com/hydrausb3/wch-ch56x-isp

Password Snooping

The device doesn’t understand file systems. It just handles raw USB WRITE10/READ10 commands and passes them to the SD card. To detect the unlock password, the firmware scans every write for the string password: before passing data through.

void phantomdrive_snoop_write(uint8_t *buf, uint32_t len)
{
    const char *prefix = "password:";
    const size_t prefix_len = 9;
    uint32_t i;

    for (i = 0; i + prefix_len <= len; i++) {
        if (buf[i] != 'p')
            continue;
        if (memcmp(buf + i, prefix, prefix_len) != 0)
            continue;

        size_t pw_start = i + prefix_len;
        size_t pw_end = pw_start;
        while (pw_end < len && (pw_end - pw_start) < sizeof(pending_pw) &&
               buf[pw_end] != '\n' && buf[pw_end] != '\r' && buf[pw_end] != '\0')
            pw_end++;

        size_t pw_len = pw_end - pw_start;

        memcpy(pending_pw, buf + pw_start, pw_len);
        pending_pw_len = pw_len;

        memset(buf + i, 0, pw_end - i);
        return;
    }
}

Once the password is found, it gets copied into RAM and the buffer gets zeroed out so the password never touches the disk. Keep in mind, if you store a lot of data on the unencrypted partition and any of it contains the string password:, you could get a false match. If that’s a concern, you can change the trigger string in firmware or look for a different approach.

Video

The developer has also published a video, if you want to get into details of this project. 

Summary

Phantomdrive is an open source USB drive that shows up as a plain 8GB disk while hiding the rest of its storage. You unlock the hidden partition by saving a password in a text file on the visible disk. The firmware catches it in the raw write traffic, keeps it in RAM, and never writes it to disk. Encryption is AES-256 on a CH569 chip, with a per-device salt and 100,000 SHA-256 rounds for key derivation. It’s limited by the hardware, so it’s weaker than memory-hard options like Argon2.

If you want to go deeper into how privacy can be preserved on real systems and how forensic traces are created and analyzed, our Anti-Forensics training is your next step. We covered advanced techniques for preserving your privacy and understanding what investigators can still see even when you think you have covered your tracks.

The post Anti-Forensics: Building a Phantomdrive first appeared on Hackers Arise.

Hyperliquid Policy Center Calls For Five Changes To SEC Crypto Rule

20 October 2026 at 13:00

TL;DR: The Hyperliquid Policy Center supports the SEC’s proposed crypto framework but says five changes are needed to make the rules workable for token developers and markets.

The Hyperliquid Policy Center has welcomed the US Securities and Exchange Commission‘s attempt to clarify how securities law applies to crypto assets, while warning that details around distributions and trading could still create unnecessary barriers.

In a comment published October 19, the group urged the regulator to revise its proposed Regulation Crypto Assets framework in five areas. Its concerns include how administrative steps in token airdrops are treated, how tokens can trade after an exempt distribution, and whether a safe harbour offers clear enough protection once a project has matured.

The centre also wants clearer rules for token buybacks and a consistent approach to the interaction between federal exemptions and state securities requirements.

The proposals reflect a long-running problem for cryptocurrency developers. A network token may begin life inside a fundraising arrangement, yet eventually circulate in a system where thousands of participants trade and use it without dealing directly with its original issuer.

Drawing a line between those stages has been difficult under decades-old securities tests. The SEC’s proposal is intended to offer more predictable treatment, but the consultation process shows that industry participants still disagree about where the boundaries should fall.

The advocacy group’s submission is not a regulatory decision. It is one contribution to a rulemaking process whose final outcome will depend on the commission’s response to the evidence and objections it receives.

Written by the News Desk and edited by Samuel Rae.

Strive Adds 1,223 Bitcoin As Corporate Treasury Reaches 36,818 BTC

20 October 2026 at 10:30

TL;DR: Strive purchased another 1,223 Bitcoin over two days, taking its reported holdings to 36,818 BTC in a fresh SEC filing.

Strive’s Bitcoin buying spree continued through the middle of October. In a filing dated Monday, the company disclosed the purchase of 1,223 BTC between October 14 and October 16, bringing its total reported holdings to 36,818 coins.

The latest purchase cost roughly $100 million at an average price of about $81,734 per Bitcoin, according to the company’s figures. It followed an earlier acquisition of 2,822 BTC in the same week, showing how aggressively the corporate treasury strategy has accelerated.

The size of the holding puts Strive among the largest publicly traded Bitcoin owners. That creates an unusual relationship between the company’s shares, its balance sheet and the price of Bitcoin: investors are evaluating not only the coins it holds, but also how management finances future purchases.

Preferred shares, equity issuance and other capital-market tools are increasingly central to the treasury-company model. They can give firms more ways to acquire Bitcoin, but also raise questions around funding costs, dilution and the risk of buying into volatile markets.

Strive’s announcement does not tell us where Bitcoin prices go next. It does, however, give a clear snapshot of one company’s conviction and the increasing scale of its exposure.

The key metric for shareholders will be whether that accumulation creates value per share, not just a larger total Bitcoin balance.

Written by the News Desk and edited by Samuel Rae.

Three Companies Have Notified the SEC of Intention To Start Tokenized Stocks Trading

21 October 2026 at 16:55

Bitcoin Magazine

Three Companies Have Notified the SEC of Intention To Start Tokenized Stocks Trading

Three companies have notified the U.S. Securities and Exchange Commission of their plans to operate tokenized securities venues following a new rule, according to the top regulator. 

Tokenized Stock Venue, Perpetuals.com, and OKX have all submitted plans to operate by allowing trading of tokenized stocks, the SEC said in a Wednesday announcement. 

Along with the Intercontinental Exchange, crypto exchange OKX was the first to file with the regulator to debut tokenized securities trading on a new platform, OKXICE. 

The SEC in September said it was offering a five-year exemption to platforms that facilitate trading of tokenized stocks. Regulators like the SEC are pushing ahead with regulating the crypto space despite lawmakers blocking major digital asset legislation in September. 

Tokenized stocks are the latest example of firms wanting to utilize Bitcoin’s underlying technology to help upgrade traditional finance. By putting stocks on the blockchain, traders can operate 24/7, according to proponents. 

The SEC said Wednesday that just because the firms are on the list, doesn’t necessarily mean they meet all the requirements for the rule. 

Wall Street’s top regulator is now very pro-crypto under U.S. President Donald Trump. SEC Chair Paul Atkins has said the regulator wants to “update” how it watchdogs securities, and “modernize them in the age of blockchain and crypto assets.”

Atkins has said that the regulator wants the U.S. to be on track to be the “crypto capital of the world.” 

Under the previous Democratic Joe Biden administration, the SEC was hostile towards the crypto industry and hit major companies — including Coinbase and Kraken — with lawsuits. The regulator attracted criticism for so-called regulation by enforcement. 

But under Trump, that has changed: the Republican campaigned on a ticket to help the crypto space and has signed a number of laws and executive orders aimed at helping the digital asset space. 

Traditional finance titans like BlackRock and Franklin Templeton for years have used blockchain rails to tokenize money funds.

In January, the S&P 500 gave crypto platform Trade[XYZ] the green light to debut a new derivative contract on decentralized exchange Hyperliquid, giving traders the ability to trade the stock index 24-7. 

This post Three Companies Have Notified the SEC of Intention To Start Tokenized Stocks Trading first appeared on Bitcoin Magazine and is written by Mathew Di Salvo.

Hyperliquid Policy Center Calls For Five Changes To SEC Crypto Rule

20 October 2026 at 13:00

TL;DR: The Hyperliquid Policy Center supports the SEC’s proposed crypto framework but says five changes are needed to make the rules workable for token developers and markets.

The Hyperliquid Policy Center has welcomed the US Securities and Exchange Commission‘s attempt to clarify how securities law applies to crypto assets, while warning that details around distributions and trading could still create unnecessary barriers.

In a comment published October 19, the group urged the regulator to revise its proposed Regulation Crypto Assets framework in five areas. Its concerns include how administrative steps in token airdrops are treated, how tokens can trade after an exempt distribution, and whether a safe harbour offers clear enough protection once a project has matured.

The centre also wants clearer rules for token buybacks and a consistent approach to the interaction between federal exemptions and state securities requirements.

The proposals reflect a long-running problem for cryptocurrency developers. A network token may begin life inside a fundraising arrangement, yet eventually circulate in a system where thousands of participants trade and use it without dealing directly with its original issuer.

Drawing a line between those stages has been difficult under decades-old securities tests. The SEC’s proposal is intended to offer more predictable treatment, but the consultation process shows that industry participants still disagree about where the boundaries should fall.

The advocacy group’s submission is not a regulatory decision. It is one contribution to a rulemaking process whose final outcome will depend on the commission’s response to the evidence and objections it receives.

Written by the News Desk and edited by Samuel Rae.

Strive Adds 1,223 Bitcoin As Corporate Treasury Reaches 36,818 BTC

20 October 2026 at 10:30

TL;DR: Strive purchased another 1,223 Bitcoin over two days, taking its reported holdings to 36,818 BTC in a fresh SEC filing.

Strive’s Bitcoin buying spree continued through the middle of October. In a filing dated Monday, the company disclosed the purchase of 1,223 BTC between October 14 and October 16, bringing its total reported holdings to 36,818 coins.

The latest purchase cost roughly $100 million at an average price of about $81,734 per Bitcoin, according to the company’s figures. It followed an earlier acquisition of 2,822 BTC in the same week, showing how aggressively the corporate treasury strategy has accelerated.

The size of the holding puts Strive among the largest publicly traded Bitcoin owners. That creates an unusual relationship between the company’s shares, its balance sheet and the price of Bitcoin: investors are evaluating not only the coins it holds, but also how management finances future purchases.

Preferred shares, equity issuance and other capital-market tools are increasingly central to the treasury-company model. They can give firms more ways to acquire Bitcoin, but also raise questions around funding costs, dilution and the risk of buying into volatile markets.

Strive’s announcement does not tell us where Bitcoin prices go next. It does, however, give a clear snapshot of one company’s conviction and the increasing scale of its exposure.

The key metric for shareholders will be whether that accumulation creates value per share, not just a larger total Bitcoin balance.

Written by the News Desk and edited by Samuel Rae.

SkyAI Sells Its Solana Holdings And Launches $201 Million Buyback Offer

20 October 2026 at 06:45

TL;DR: SkyAI says it has sold all its SOL and started a cash tender offer that could cost roughly $201.3 million if fully subscribed.

SkyAI’s experiment as a Solana treasury company has taken a dramatic turn. Rather than simply holding through market volatility, the Nasdaq-listed firm says it has sold its entire SOL position and is offering to buy back as much as 95% of certain outstanding shares and warrants.

An October 19 filing with the Securities and Exchange Commission puts the proposed cash purchase price at $3 per share or warrant. If everyone eligible tenders the maximum amount, the purchase would total approximately $201.3 million.

The company disclosed $223.8 million in cash as of October 16 and confirmed that its Solana sales were complete by that point. Consequently, the tender offer is no longer conditional on the price of SOL — a material change from an earlier version of the plan.

The decision is noteworthy because many listed cryptocurrency treasury companies have spent recent months explaining why they intend to keep accumulating tokens. SkyAI is moving in the opposite direction and returning cash to investors through an offer whose terms are defined in its SEC documents.

Shareholders still have choices to make. The tender is scheduled to expire on October 29 unless it is extended or terminated earlier, and the offer remains subject to its stated conditions.

SkyAI’s move is not a verdict on Solana’s technology. It is a reminder that the capital structures wrapped around crypto holdings can change much faster than the networks underneath them.

Written by the News Desk and edited by Samuel Rae.

BlackRock Files For Bitcoin ETF With Managed Downside Protection

20 October 2026 at 05:35

TL;DR: BlackRock has proposed another Bitcoin-linked ETF, this time using options to pursue some protection against losses while giving up part of the potential upside.

BlackRock’s latest Bitcoin fund filing takes a different approach from the familiar buy-and-hold exposure offered by its iShares Bitcoin Trust. Instead of simply following the price of Bitcoin, the proposed iShares Bitcoin Managed Protection ETF would use an options strategy linked to IBIT or similar exposure.

The ambition is straightforward enough: participate in some of Bitcoin’s gains and seek a measure of protection during a decline. The trade-off is equally important. Gains could be capped, and the protection is neither unconditional nor guaranteed. The structure is designed around overlapping options positions, meaning an investor’s outcome could depend on when the shares are purchased as well as what Bitcoin does next.

That makes this a different kind of product, not a safer version of holding spot Bitcoin in every circumstance. Options costs, fund expenses and changing market prices all affect what shareholders receive.

The filing arrives as issuers work to move beyond basic spot exposure. Income-oriented and buffered Bitcoin products try to give financial advisers additional ways to fit an unusually volatile asset into conventional portfolios.

For investors, the missing details matter as much as the proposed strategy. An SEC filing does not mean the fund has been approved or launched. Its eventual fees, live portfolio and actual protection terms will determine whether the structure delivers a useful alternative to IBIT.

Written by the News Desk and edited by Samuel Rae.

Confessions of a Professional Hacker: Can the CIA or other Intelligence Agencies Track My Every Move?

By: OTW
14 October 2026 at 15:51

Welcome back my aspiring cyberwarrior and others interested in cybersecurity!

When people find out I am a professional hacker, one of the most common questions they ask is, “Can the CIA (or other intelligence agency) track my every move?” The short answer is Yes!, they can track your every move if you have a cellphone AND the interested party (CIA or other intelligence agency) has your phone’s unique IMEI number.

Let’s look at how they do this and what you can do to make their job much harder.

IMEI

The IMEI or the International Mobile Equipment Identity number is unique to each phone and can not be altered. If the CIA or other intelligence agency knows this number of your phone, they can track your movements by tracking your phone. This number is available to them by subpoena, search warrant or US Patriot Act provisions.

The IMEI is stamped on your phone and when you open the phone you can find it like below.

In addition, you can find the IMEI under settings of your phone. It is different places in different phones, but look for something such as “About Phone” like below.

IMSI

It is also possible to track a phone and its user by its IMSI (International Mobile Subscriber Identity) number of the phone. Fortunately, this IMSI can be changed out by changing out the SIM (Subscriber Identification Module) card.

MSI numbers are broadcast by your phone when its sends a beacon to connect to the cell tower. It is possible for anyone with the right equipment to intercept and read those IMSI numbers. 

Every time a cell phone attempts to connect, it pings the cell towers in the area to determine which is closest. Every cell phone or other device connecting to the cellular network (such as iPads) does this. Every time a cellphone pings a tower, the phone’s IMSI, IMEI numbers as well as the the location of the cell tower is stored in the carrier’s database.

By triangulating (multiple towers are used to track the phone’s location by measuring the time delay that a signal takes to return back to the towers from the phone) between the pings to the towers in the area, the location of the phone can be determined within 50-500 meters, depending upon the concentration of cell towers. The closer the cell towers are together, such as in an big city, the more precise the data on the location of the phone. In urban areas, your location can be narrowed down to within 50 meters.

Stingrays

Although not a method of tracking but rather of eavesdropping, stingrays are one of the tools intelligence agencies and law enforcement use to listen to cellphones. A stingray is just a compact, mobile cell tower. Law enforcement and intelligence agencies can simply move one into your neighborhood. Your phone will then connect to the closest cell tower. The stingray looks and acts just like a cell tower so you phone connects to it without asking further questions. Once your cell phone connects to the cellular network, the owner of the stingray has access to all the calls and data leaving your phone. For more on stingrays, see my article here.

In the US and other countries (they are banned in the EU), you can buy an inexpensive, limited-feature, pre-paid phone at a local retailer without having to register your name. In this way, it is very difficult for intelligence agencies to connect the phone and its unique IMEI to your identity. To take further precautions, the phone should be purchased with cash so that no credit/debit card trail remains.

When purchasing a burner phone, make certain that you are NOT carrying your other phone with you. Your other phone is tracking all your movements. If you are carrying your that phone, you are creating a record of your visit to the “burner phone” retailer linking you to the purchase and the IMEI of the burner phone thereby frustrating your attempts to remain anonymous. 

Summary

The CIA, any intelligence agency or law enforcement can track your every move very precisely by tracking the cell towers your phone pings before it connects. All this data is stored in the phone carrier’s database and can be accessed by these agencies. The burner phone is probably the best way to frustrate this type of tracking but make certain to take the precautions described above.

The post Confessions of a Professional Hacker: Can the CIA or other Intelligence Agencies Track My Every Move? first appeared on Hackers Arise.

IP Camera Hacking: Hacking IP Cameras with Cameradar

By: OTW
8 October 2026 at 09:48

Welcome back, my aspiring IP camera hackers!

As most of you know, we have played a key role in the defense of Ukraine. Among our many activities in defense of Ukraine is the hacking of IP cameras throughout the country. In this way, we can spy on Russian activities and war crimes. We did this at the request of the Ukraine Army starting in April 2022.

For more on Hackers-Arise activities in Ukraine check out this post.

For more information on our IP camera hacking to support Ukraine, check out this post.

  

To hack these cameras we used multiple methods and techniques. In hacking, we often need to explore multiple methods to be successful. Persistence is a key hacker characteristic.

As hackers, of course, it is important to take a strategic approach to any target. Always use the simplest methods first before progressing to more advanced and time-consuming attack methods.

  

In our first step, we identified the unprotected cameras using such sites as Shodan, Google, and Censys. Next, we tried default credentials. These default credentials vary by camera and manufacturer, so make certain to check our list of default credentials for nearly every camera and manufacturer. That technique yielded a few cameras.

Next, we tried to hack the cameras with weak passwords. This yielded significant results! The primary tool we used in that effort was cameradar.

In this tutorial, I will show you how to use this tool for IP camera hacking just like we did in the Ukraine war!

RTSP

Before we begin to hack IP cameras, you need a bit of background in RTSP. RTSP is the protocol that most of these IP cameras use. Not all of the cameras use RTSP, but the vast majority do. Before we go any farther, we need to say that those cameras using proprietary or other protocols will not be exploitable by cameradar.

RTSP is an application-layer protocol used for commanding streaming media servers via pause and play capabilities. It thereby facilitates real-time control of the streaming media by communicating with the server — without actually transmitting the data itself.

Rather, RTSP servers often leverage the Real-Time Transport Protocol (RTP) in conjunction with the Real-Time Control Protocol (RTCP) to move the actual streaming data.

Most IP camera use the Real-Time Streaming Protocol (RTSP) to establish and control video and audio streams. The content is delivered using Real-time Transport Protocol (RTP). RSTP does not provide any configuration of the device. That must be done using the URI and IP address. Any configuration changes must be done via the web interface.

Most systems support RTSP as a fallback even if they are using a different protocol such a PSIA or ONVIF

When a user initiates a video stream from an IP camera using RTSP, the device sends an RTSP request to the streaming server. This jump starts the setup process.

Subsequently, the video and audio data can then be transmitted using RTP.

You can think of RTSP in terms of a television remote control for media streaming, with RTP acting as the broadcast itself.

While similar in some ways to HTTP, RTSP defines control sequences useful in controlling multimedia playback.

While HTTP is stateless, RTSP has state; an identifier is used when needed to track concurrent sessions

Like HTTP, RTSP uses TCP to maintain an end-to-end connection and, while most RTSP control messages are sent by the client to the server, some commands travel in the other direction (i.e. from server to client).

 

 RTSP uses the following commands, typically sent from the client to the server, when negotiating and controlling media transmissions: 

Options: This request determines what other types of requests the media server will accept.

Describe: A describe request identifies the URL and type of data.

Announce: The announce method describes the presentation when sent from the client to the server and updates the description when sent from server to client.

Setup: Setup requests specify how a media stream must be transported before a play request is sent.

Play: A play request starts the media transmission by telling the server to start sending the data.

Pause: Pause requests temporarily halt the stream delivery.

Record: A record request initiates a media recording.

Teardown: This request terminates the session entirely and stops all media streams.

Redirect: Redirect requests inform the client that it must connect to another server by providing a new URL for the client to issue requests to.

Other types of RTSP requests include ‘get parameter,’ ‘set parameter
,’ and ’embedded (interleaved) binary data,’

Now that you have a little background in RTSP, you are ready to start cracking IP camera credentials!

Step #1: Download and Install cameradar

Although cameradar can be run natively in Linux, I find that it works best in a docker container.

First, install docker.

kali > sudo apt install docker

Next, start docker with the systemctl command;

kali > sudo systemctl start docker

Now, download cameradar.

kali> sudo git clone https://github.com/Ullaakut/cameradar

Now, you are ready to begin to brute-force IP cameras!

Step #2: Run the RTSP Credential Brute-forcer

Now that you have docker and cameradar installed, you only need to point cameradar at the IP address of the camera that you want to brute-force!

For instance, to brute force a camera at 192.168.1.101 (obviously, not an IP address of a real camera), we would simply enter;

kali > sudo docker run ullaakut/cameradar -t 192.168.1.101

  

Cameradar will now attempt to find a RTSP stream at one of the default RTSP ports namely 554, 5554 and 8554. If you suspect there may be other ports with RTSP streams (you may want to run an nmap scan first), you can add them with the -p switch, such as

kali > sudo docker run ullaakut/cameradar -t 192.168.1.101 -p 9554

Step #3: Using Custom Username and Password Lists

By default, cameradar uses a small username and password list of the most common usernames and passwords. It’s good strategy to use these first but if they are unsuccessful, it’s time to bring out the big guns!

In this context, big guns means larger and more appropriate username and password lists. From my experience hacking cameras in Ukraine and Russia, the usernames usually are simple such as admin, root, admin1, admin3, etc. This means that you can probably use the default username list but passwords vary quite a bit. That’s why you should use a good password list that is appropriate for your environment (for instance, using a Spanish list in a Spanish speaking nation).

First, the password list must be json format. There are several websites that can covert your text file to json such as https://anyconv.com/txt-to-json-converter/. Your .txt file will then be appended with a json extension. So, if we were using the seclist’s password list;

/usr/share/seclists/Passwords/Common-Credentials/10-million-password-list-top-1000000.txt,

I would first convert it to json format and then use that file with cameradar. It will then appear as 10-million-password-list-top-1000000.json.

Now to use that password list with cameradar, you can run the following command;

kali> sudo docker run ullaakut/cameradar -t

-v /usr/share/seclists/Passwords/Common-Credentials:/tmp/dictionaries

-c “tmp/dictionaries/10-million-password-list-top-1000000.json”

-t 192.168.1.101

  

Summary

Password Cracking of IP camera credentials is very similar to other remote password cracking once you become familiar with the RTSP protocol. In fact, in many ways it is easier, as it is rare to find a lockout (limiting how many attempts you can make) on the RTSP protocol. By using a tool like cameradar, we were able to successfully access a large percentage of IP cameras with weak passwords.

 

The post IP Camera Hacking: Hacking IP Cameras with Cameradar first appeared on Hackers Arise.

Coinbase’s Ryan VanGrack: CFTC Approval “Opens Many Doors” for Bitcoin

5 October 2026 at 17:14

Bitcoin Magazine

Coinbase’s Ryan VanGrack: CFTC Approval “Opens Many Doors” for Bitcoin

The SEC’s proposed custody rules could make it easier for investment advisors to help clients own Bitcoin directly. Coinbase’s Ryan VanGrack explains why institutional capital tends to flow where there are clearer rules, and why he sees direct ownership and ETFs as “both and, not either or.” He also shares why traditional finance is accelerating its push into Bitcoin and digital assets.

Chapters:
00:00 Coinbase Wins CFTC Approval for Its Own Clearinghouse
01:29 Can SEC Guidance Last Without the Clarity Act?
02:40 SEC Custody Proposal: Helping Advisors Hold Bitcoin Directly
04:14 Tokenization: The Biggest Upgrade Since Electronic Trading
05:41 How Tokenization Cuts Out Wall Street’s Middlemen
07:34 What Washington Still Needs to Fix for Bitcoin Holders
08:56 Institutional Adoption Accelerates After the Clarity Act Vote
11:07 How Coinbase Is Bringing Digital Asset Infrastructure to Community Banks
12:01 Sponsor: Square
12:34 Is Crypto Really a Tool for Illicit Finance?

DISCLAIMER: The views and opinions expressed in this show are those of the participants and do not necessarily reflect the official policy or position of BTC Inc., Bitcoin Magazine, or any affiliated entities. This content is provided for informational and educational purposes only and should not be construed as investment, legal, tax, or accounting advice. Nothing contained in this show constitutes a solicitation, recommendation, endorsement, or offer to buy or sell any securities or financial instruments. Viewers should consult their own advisors before making financial or business decisions.

This post Coinbase’s Ryan VanGrack: CFTC Approval “Opens Many Doors” for Bitcoin first appeared on Bitcoin Magazine and is written by Patrick Green.

Coinbase Business Chief: Big Banks Increasing BTC Exposure | Shan Aggarwal

5 October 2026 at 17:08

Bitcoin Magazine

Coinbase Business Chief: Big Banks Increasing BTC Exposure | Shan Aggarwal

New SEC rules could open the door for financial advisors to hold Bitcoin for their clients, and Coinbase is already at the center of that custody story. Shan Aggarwal, Coinbase’s first-ever Chief Business Officer, explains how Coinbase custodies most of the Bitcoin ETFs and supports the advisor community. He sees the advisor rule as expanding the pie for Bitcoin access, with Coinbase providing the infrastructure behind it.

Chapters:
00:00 How the SEC’s New Advisor Rules Could Bring Bitcoin to Wealth Managers
01:13 What BlackRock and JPMorgan Want From Bitcoin Infrastructure
02:16 What Will Drive the Next Wave of Bitcoin Adoption
03:28 Can the Coinbase One Card Turn Spenders Into Bitcoin Owners?
04:22 Coinbase’s Trillion-Dollar Stablecoin Opportunity
05:14 Coinbase and Citi Bring Stablecoin Payments to Merchants
05:56 Sponsor: SALT Lending
06:26 How Coinbase Customers Are Using Bitcoin Lightning
07:37 Will AI Agents Pay in Bitcoin or Stablecoins?
08:30 Coinbase Expands Into Collectibles and Everyday Bitcoin Rewards

DISCLAIMER: The views and opinions expressed in this show are those of the participants and do not necessarily reflect the official policy or position of BTC Inc., Bitcoin Magazine, or any affiliated entities. This content is provided for informational and educational purposes only and should not be construed as investment, legal, tax, or accounting advice. Nothing contained in this show constitutes a solicitation, recommendation, endorsement, or offer to buy or sell any securities or financial instruments. Viewers should consult their own advisors before making financial or business decisions.

This post Coinbase Business Chief: Big Banks Increasing BTC Exposure | Shan Aggarwal first appeared on Bitcoin Magazine and is written by Patrick Green.

SEC Proposes New Rules On Crypto Custody 

1 October 2026 at 17:09

Bitcoin Magazine

SEC Proposes New Rules On Crypto Custody 

The U.S. Securities and Exchange Commission has proposed new rules to update how investment advisers and regulated funds hold assets, with a big focus on crypto.

In a statement Thursday, the Wall Street watchdog said it would allow advisers and funds acting through their advisers, to hold client crypto themselves, but only if no permitted custodian is available. 

Regulators are pushing ahead with rulemaking for the digital asset space despite lawmakers blocking the Clarity Act last month. 

JUST IN: 🇺🇸 SEC Chairman Paul Atkins releases a statement to address the custody of crypto assets. 👀

"Since the advent of Bitcoin in 2008, the crypto asset market has grown from a niche curiosity into a multi-trillion-dollar asset class" 🚀 pic.twitter.com/SbLR2HAeW1

— Bitcoin Magazine (@BitcoinMagazine) October 1, 2026

The long-awaited legislation — a framework for distinguishing between digital assets that are securities, commodities or payment stablecoins — didn’t get the votes needed to advance. 

“Since the advent of Bitcoin in 2008, the crypto asset market has grown from a niche curiosity into a multi-trillion-dollar asset class to which investors actively seek exposure. Unfortunately, our rules and regulations have not kept pace,” SEC Chairman Paul S. Atkins said in a statement.

“To that end, today’s proposal would provide a clear regulatory framework for the custody of crypto assets, giving investment advisers and funds a compliant pathway where none existed before — and replacing the grey of uncertainty created by custody rules crafted for a bygone era.”

The regulator said in its proposed rules that records kept on a blockchain could count toward compliance, subject to conditions. 

It added that it would allow use of state trust companies as custodians for client and regulated fund crypto assets, subject to conditions.

Lawmakers blocked the Clarity Act in a procedural vote last month. Regulators had said before the vote that regardless of whether the landmark legislation passed, they’d still start regulating the crypto industry.  

The SEC before the vote sent a proposal to the White House aiming to “clarify the framework for the custody of crypto assets” for investment advisers and companies. 

Pro-crypto Atkins said he would still work to make the U.S. the “crypto capital of the world” regardless of the landmark legislation getting through. 

This post SEC Proposes New Rules On Crypto Custody  first appeared on Bitcoin Magazine and is written by Mathew Di Salvo.

Blockchain.com Is Reportedly Seeking Up To $500M In US IPO

29 September 2026 at 18:30

TL;DR

  • Blockchain.com is reportedly preparing a U.S. IPO that could raise about $500 million.
  • Bloomberg reports the company is discussing a valuation of roughly $4 billion to $6 billion.
  • The plans remain private and could change; Blockchain.com has not announced a final offering size or pricing date.

Blockchain.com is reportedly trying to become the next major crypto company to reach the U.S. public markets.

The company is discussing an initial public offering that could raise roughly $500 million, according to Bloomberg, citing people familiar with the plans.

A potential valuation in the range of $4 billion to $6 billion is being discussed.

The Numbers Are Targets, Not Final Terms

Blockchain.com has not publicly priced an IPO.

There is no final share count, offer price or trading date.

The figures currently circulating represent targets being discussed with prospective investors and advisers.

Bloomberg reports that the company could accept a smaller capital raise depending on market conditions.

That matters because private IPO preparations can change substantially before a company reaches a public roadshow.

Blockchain.com declined to comment on the reported plans.

The company was valued at approximately $7 billion in a private funding round in 2023, meaning the proposed public-market range would not necessarily restore its previous private valuation.

Crypto IPOs Are Testing Public-Market Appetite Again

The timing is interesting.

Crypto companies have spent several years moving between periods of aggressive expansion and long stretches where public listings were effectively off the table.

A $500 million Blockchain.com offering would be another test of whether public-market investors are ready to fund large crypto-native businesses again.

Blockchain.com operates wallets, brokerage and institutional infrastructure and has been active since the early years of Bitcoin.

It also announced a partnership with the New York Stock Exchange earlier this month around tokenized U.S. securities.

That does not guarantee an IPO will happen.

The listing process depends on market conditions, regulatory filings and investor demand.

The valuation target can also move before an offering is launched.

Still, the reported range gives a useful indication of what the company and its advisers believe the public market might support.

Crypto companies once relied heavily on venture capital and private token markets for funding.

More of them are now trying to use conventional equity markets as well.

If Blockchain.com proceeds, investors will get another chance to decide how they value a mature crypto business whose revenues span several different parts of the industry.

For now, it remains a proposed transaction.

The ambition is clear: raise hundreds of millions of dollars and return Blockchain.com to a multibillion-dollar valuation on the public market.

This article was written by the News Desk and edited by Samuel Rae.

❌
❌