English
Zach Herbert 🇺🇸
Report

Zach Herbert 🇺🇸✓

@zherbert

Cofounder & CEO @FoundationHQ. Building Human Authority Hardware for Bitcoin and agentic computing. Mechanical engineer, MBA dropout. Also tweets about health.

3.3K Following12.7K Followers16.9K Posts
  1. Zach Herbert 🇺🇸✓@zherbert
    I largely agree that hardware wallets are dead - but I think the answer is an ultra secure, open architecture hardware security platform where bitcoin & crypto features are simply APPS that users can choose to install. My goal is to scale @FoundationHQ to general purpose security applications for consumers and enterprise.
    Apollo @MindsFiction
    Hardware wallets are dead. KYC, honey pots for supply chain attacks and hackers, target for customs agents etc… Remote signers on air gapped commodity hardware are the future.
    213778.9K
  2. Apollo✓@MindsFiction
    Hardware wallets are dead. KYC, honey pots for supply chain attacks and hackers, target for customs agents etc… Remote signers on air gapped commodity hardware are the future.
    191918026.1K
  3. Zach Herbert 🇺🇸✓@zherbert
    This is how I'd fix the iPhone Duo's ridiculous sidebar. I call it Twin Islands. Two little glass bars: one around the camera for statuses, one at the bottom for app controls. Apps get the full width of the screen. Controls stay under your thumb. Thoughts?
    Download
    2511613.5K432K
  4. Zach Herbert 🇺🇸✓@zherbert
    Posts @zherbert
    Zach Herbert 🇺🇸 @zherbert
    Many folks rightly pointed out that the top island could still cover webpage content. So I made it collapse around the camera. Battery and signal stay visible. Tap to expand; scroll to tuck it away. Twin Islands...or do we call it Dual Islands?
    107710.7K
  5. Zach Herbert 🇺🇸✓@zherbert
    Many folks rightly pointed out that the top island could still cover webpage content. So I made it collapse around the camera. Battery and signal stay visible. Tap to expand; scroll to tuck it away. Twin Islands...or do we call it Dual Islands?
    Download
    Zach Herbert 🇺🇸 @zherbert
    This is how I'd fix the iPhone Duo's ridiculous sidebar. I call it Twin Islands. Two little glass bars: one around the camera for statuses, one at the bottom for app controls. Apps get the full width of the screen. Controls stay under your thumb. Thoughts?
    221034730.3K
  8. Zach Herbert 🇺🇸✓@zherbert
    Zach Herbert 🇺🇸
    RT @FoundationHQ: KeyOS v1.4.1 is now available to download! Our latest KeyOS release brings: ⚡ Significantly faster firmware updates 🔋 Improved charging to reduce long-term battery wear ⚠️ Low-battery alerts before automatic shutdown 🛡️ Safer shutdowns to protect against unexpected power loss Small improvements that make a big difference to everyday use. Full release notes in the comments 👇
    09032
  9. Zach Herbert 🇺🇸✓@zherbert
    Zach Herbert 🇺🇸
    RT @FoundationHQ: Why should your hardware be limited by someone else's APIs or walled gardens? With Passport Prime, developers and companies can build their own apps on KeyOS, each securely sandboxed and isolated from the rest of your device. The freedom to innovate. The security to do it right. Who should build an app for Prime? Tag them 👇
    04026
  10. Zach Herbert 🇺🇸✓@zherbert
    I have a vivid memory from when I worked at the Apple Store in high school – was on break in the back room and one of the Geniuses came in and said that a girl spilled water all over her keyboard. He asked us to vote on whether we should cover the full costs of the repair. We all of course raised our hands to vote yes. The Genius went back out to the girl and made her day. Apple used to go by “surprise and delight” and “under promise, overdeliver”…not sure wha’s happened since then. (Also the store manager was incredible, fired up and motivated and a great mentor and leader)
    Blake Whittle @BlakeWhittle7
    Update: Apple “found” “liquid damage” in the keyboard, so tripled the price. I declined all repairs, and it was sent back. UPON RETURN, they didn’t plug my battery back in, so it now requires it to be plugged in to be on. Apple Store said nothing they can do. Pissed beyond measure, but didn’t escalate because the local repair shop will get it resolved when I do the repair with them.
    36161.6K292K
  11. Blake Whittle✓@BlakeWhittle7
    Update: Apple “found” “liquid damage” in the keyboard, so tripled the price. I declined all repairs, and it was sent back. UPON RETURN, they didn’t plug my battery back in, so it now requires it to be plugged in to be on. Apple Store said nothing they can do. Pissed beyond measure, but didn’t escalate because the local repair shop will get it resolved when I do the repair with them.
    78332.3K780K
  12. Zach Herbert 🇺🇸✓@zherbert
    Zach Herbert 🇺🇸
    RT @zherbert: If any Ledger user wants to switch to American manufactured, open hardware with active tamper sensors (will wipe if you try to open it) – check out our @FoundationHQ Passport Prime and Legacy Mode apps (in beta). Let me know what questions you have!
    017012.9K
  13. Zach Herbert 🇺🇸✓@zherbert
    Zach Herbert 🇺🇸
    RT @BAcct8: Self-custody has been under attack this year but is far from dead. I just read the 3rd party security audit on my own signing hardware. There are still people in this space doing it right! “Based on this comprehensive security audit of the Passport Prime, the overall architecture demonstrates exceptional security design principles and sophisticated implementation.” Read the reports on your own signing devices (if the manufacturer commissioned one that is.) Coldcard and Ledger either didn’t do this at all or instead have trust-me-bro “internal audits”.
    04051
  14. Zach Herbert 🇺🇸✓@zherbert
    Going to refrain from commenting on Ledger CEO going after @MagicalTux…except that it’s the kind of comments I’d expect from someone like NVK, not the CEO of the largest HWW company.
    1961957.4K
  15. Zach Herbert 🇺🇸✓@zherbert
    Zach Herbert 🇺🇸
    RT @BitcoinNewsCom: The Next Phase of the Ledger Implant Story Could Be AI-Generated Industrial Sabotage @zherbert of Foundation warns that anyone can now use AI to generate a convincing image of a competitor’s hardware wallet with a malicious implant inside, potentially sparking widespread panic. We are entering an era where photographic evidence can no longer be taken at face value. The real test is whether a reputable expert has physically opened and inspected the device. Full interview below.
    Bitcoin News @BitcoinNewsCom
    NEW POD | BITCOIN NEWS EXCLUSIVE We sit down with the man who broke the Ledger supply chain attack wide open. Mark Karpelès (@MagicalTux), former CEO of Mt. Gox, and Zach Herbert, CEO of @FoundationHQ, join us to discuss the largest supply chain attack in crypto history. 🔸 Mark says he found the spy implant 3 weeks before the drain, tagged Ledger, and got no response 🔸 How a hidden cell modem read seed phrases straight off the screen and passed Ledger’s own check 🔸 Why a passphrase didn’t save you, and what actually would have 🔸 Mark says with $5M, he could build an implant you’d need an X-ray to find 🔸 Why the hardware wallet reseller model may be dead 🔸 What the future of self-custody looks like Watch on YouTube: 00:00 Ledger Supply Chain Attack Exposed 01:18 How Mark Discovered the Compromised Ledgers 04:29 $100 Million Stolen From Hardware Wallets 05:03 Opening the Ledger to Find the Implant 06:29 The SPI Implant That Reads Your Screen 09:56 How the Implant Steals Your Seed Phrase 13:51 The Hidden LTE Chip Phoning Home 17:00 The Timeline Behind the Attack Going Public 18:31 $86 Million Drained in 24 Hours 20:15 Did Ledger Know About This for Months? 24:00 The Malaysian Reseller Behind the Attack 26:56 How Hardware Wallet Companies Vet Resellers 30:21 Tracking the Stolen Crypto On-Chain 34:20 The Attack Spreads to Europe 36:05 Inside the Criminal Implant Supply Chain 39:10 Why Trezor Wasn't Targeted 42:08 Why Ledger Was the First Target 45:27 The Future of Hardware Wallet Security 50:20 Multi-Party Computation as the Fix 54:30 Making Self-Custody Easy for Newcomers 56:27 Why the Industry Must Professionalize 59:07 Staying Optimistic About Bitcoin's Future
    01045
  16. Bitcoin News✓@BitcoinNewsCom
    NEW POD | BITCOIN NEWS EXCLUSIVE We sit down with the man who broke the Ledger supply chain attack wide open. Mark Karpelès (@MagicalTux), former CEO of Mt. Gox, and Zach Herbert, CEO of @FoundationHQ, join us to discuss the largest supply chain attack in crypto history. 🔸 Mark says he found the spy implant 3 weeks before the drain, tagged Ledger, and got no response 🔸 How a hidden cell modem read seed phrases straight off the screen and passed Ledger’s own check 🔸 Why a passphrase didn’t save you, and what actually would have 🔸 Mark says with $5M, he could build an implant you’d need an X-ray to find 🔸 Why the hardware wallet reseller model may be dead 🔸 What the future of self-custody looks like Watch on YouTube: 00:00 Ledger Supply Chain Attack Exposed 01:18 How Mark Discovered the Compromised Ledgers 04:29 $100 Million Stolen From Hardware Wallets 05:03 Opening the Ledger to Find the Implant 06:29 The SPI Implant That Reads Your Screen 09:56 How the Implant Steals Your Seed Phrase 13:51 The Hidden LTE Chip Phoning Home 17:00 The Timeline Behind the Attack Going Public 18:31 $86 Million Drained in 24 Hours 20:15 Did Ledger Know About This for Months? 24:00 The Malaysian Reseller Behind the Attack 26:56 How Hardware Wallet Companies Vet Resellers 30:21 Tracking the Stolen Crypto On-Chain 34:20 The Attack Spreads to Europe 36:05 Inside the Criminal Implant Supply Chain 39:10 Why Trezor Wasn't Targeted 42:08 Why Ledger Was the First Target 45:27 The Future of Hardware Wallet Security 50:20 Multi-Party Computation as the Fix 54:30 Making Self-Custody Easy for Newcomers 56:27 Why the Industry Must Professionalize 59:07 Staying Optimistic About Bitcoin's Future
    Download
    14206234.2K
  18. Zach Herbert 🇺🇸✓@zherbert
    Zach Herbert 🇺🇸
    RT @BitcoinNewsCom: The next generation of malicious hardware wallet implants could be virtually impossible to spot. @zachherbert explains how attackers could conceal spy chips inside a device’s battery, behind its screen, or even within the plastic casing. And he warns that the Ledger attack may have been discovered before the technology reached its most sophisticated form. Watch the full interview below
    05042
  19. Zach Herbert 🇺🇸✓@zherbert
    Zach Herbert 🇺🇸
    RT @SimplyBitcoin: DID WHITE HOUSE OFFICIAL GET FIRED FOR LEAKING AMERICA'S STRATEGIC BITCOIN RESERVE PLAN?? | EP 1614
    03040
  21. Zach Herbert 🇺🇸✓@zherbert
    Ask yourself - how does Ledger know what % of Bitcoin and stablecoins are secured by their devices?
    Download
    563549356.5K
  22. Zach Herbert 🇺🇸✓@zherbert
    Zach Herbert 🇺🇸
    RT @Vinman: Continuously impressed by @FoundationHQ . I had gotten a day 1 Passport Prime, ran into an issue with it, sent an email to support, they replied to me almost immediately within the late hours of the evening, new device shipped the next morning, arrived in my hands 24 hours later, no questions asked. Had to purchase all the accessories to show my support for a great company. Buy American & Support American builders. Kudos to the team.
    04057