Neovim have a ~$800k Bitcoin donation sitting untouched since 2023
Neovim have a ~$800k Bitcoin donation sitting untouched since 2023
Neovim 有一笔约 80 万美元的比特币捐款自 2023 年起一直未被动用
I was looking at neovim’s donation footer at the bottom of their site and saw a bitcoin donation address. Thought I’d check how much in donations they’ve gotten. And I saw this massive 10 Bitcoin donation from back in 2023 (worth $800,000 now…)
我在查看 Neovim 网站底部的捐赠页脚时，看到了一个比特币捐赠地址。我心想查查他们收到了多少捐款，结果发现了一笔 2023 年收到的巨额捐款——10 个比特币（现在价值 80 万美元……）。
From the activity history, neovim last sent bitcoin out of the address in 2019 so it’s been max 7 years since they’ve definitely had access. Does anyone from the neovim project know about this? Seems like a pretty significant amount of funding to have sitting there. Hope it can come to good use as I use neovim daily.
从活动记录来看，Neovim 上一次从该地址转出比特币是在 2019 年，所以他们最后一次确认拥有访问权限距今最多 7 年。Neovim 项目组有人知道这笔钱吗？这笔资金闲置在那里似乎相当可惜。我每天都在使用 Neovim，希望这笔钱能派上用场。
ashkankiani: For a reference point, when I was unemployed and between jobs, I got involved with Neovim for fun, and after some contributions, I eventually tried some full(ish)-time paid work. I wrote the native lua LSP client (:h vim.lsp, and the nvim-lspconfig repo) for Neovim in a few weeks for about $3k USD (circa 2019)? This amount could fund quite a lot of work to be sure.
ashkankiani： 作为参考，我失业待业期间曾出于兴趣参与了 Neovim 的开发。在做出一些贡献后，我尝试进行了一些全职（或接近全职）的付费工作。我曾在几周内为 Neovim 编写了原生的 Lua LSP 客户端（:h vim.lsp 和 nvim-lspconfig 仓库），报酬大约是 3000 美元（2019 年左右）。这笔钱（指 80 万美元）肯定能资助大量的工作。
matesz: I’ve read so many news stories of people gone missing who had been know to have sole access to bitcoin wallets with large amount of bitcoins in them. I wonder how people at large crypto exchanges handle that. Perhaps shamir share the access to the pkey password and store parts at secure places like a bank? And make official access protocol akin to dnssec, but simplified?
matesz： 我读过很多新闻，讲的是那些掌握大量比特币钱包唯一访问权限的人失踪了。我很好奇大型加密货币交易所是如何处理这种情况的。也许他们会用 Shamir 秘密共享方案来拆分私钥密码，并将碎片存储在银行等安全场所？或者建立一种类似于 DNSSEC 但更简化的官方访问协议？
jackb4040: I worked at a crypto exchange, yes we used shamir shares. But probably not as sophisticated as you’re thinking, there was basically one big “break glass” text document with all the keys. And then a hand-rolled software on each person’s laptop to distribute the plain text and run / practice the 3/5 recovery ceremony. So anyone losing their device would be equivalent to someone quitting and require its own ceremony to reissue a key, but I don’t think that ever actually happened.
jackb4040： 我曾在一家加密货币交易所工作，我们确实使用了 Shamir 共享方案。但可能不像你想象的那么复杂，基本上就是一个包含所有密钥的“紧急备用”文本文档。每个人的笔记本电脑上都运行着一套自研软件，用于分发明文并执行/演练 3/5 恢复仪式。因此，任何人丢失设备都等同于有人离职，需要进行一次专门的仪式来重新签发密钥，但我认为这种情况从未真正发生过。
IAmBroom: > Social recovery wallets in general did not take off, which was a big learning moment for me that very few people actually cared about the technology and what they really wanted was an app with as many gambling features as possible that uploaded their keys to google drive. People who are not HN-profile never care about the technology, and always care about usable, convenient features. The shocker is: most HN-profile people feel the same way.
IAmBroom： > “社交恢复钱包总体上并没有流行起来，这让我深刻认识到，很少有人真正关心技术，他们真正想要的是一个尽可能多地集成赌博功能、并能把密钥上传到 Google Drive 的应用程序。” 非 Hacker News 用户群体从不关心技术，他们只关心好用、便捷的功能。令人震惊的是：大多数 HN 用户其实也是这么想的。
jackb4040: Yes, I do agree with this. What rubbed me the wrong way was all the cynical people who would talk endlessly about how revolutionary the tech was and all the possibilities it opened to get others invested, but ran companies that were just casinos and actually could have simpler operations without the crypto parts!
jackb4040： 是的，我同意这一点。让我感到不适的是那些愤世嫉俗的人，他们喋喋不休地谈论这项技术有多么革命性、能带来多少投资机会，但他们经营的公司本质上只是赌场，而且完全可以在没有加密货币的情况下以更简单的方式运营！
dspillett: Ding ding! Crypto still exists, but the tech grifters have all pivoted to AI and been replaced by MAGA grifters.
dspillett： 说得对！加密货币依然存在，但那些技术骗子都已经转向 AI 领域，并被 MAGA（让美国再次伟大）骗子所取代了。
ecesena: A better solution (than Shamir secret sharing) are threshold signatures. The difference is that with Shamir you have to reconstruct the private key in one place before you can sign. With threshold signatures…
ecesena： 比 Shamir 秘密共享更好的解决方案是阈值签名（Threshold Signatures）。区别在于，使用 Shamir 时，你必须先在一个地方重构私钥才能进行签名。而使用阈值签名……