Wavlake and Primal share an investor. Hivemind Ventures, aka Max Webster.

Wavlake and Primal both engage in matching npubs to email adresses. This can be then used to sell nostr data, as it can be attached to data outside of nostr.

Wavlake and Primal both offer « trending » visibility. (Primal came out the gate with trending algo while basic nostr features were still lacking. Talk about development priorities)

Wavlake is totally fine with people gaming the leaderboard and removed the data I used to spot the cheater (that man likes trending) (I was using supporter counts to spot the fake, Wavlake removed it after I communicated with them about the manipulation)

Primal would like to convince me that their advert containing their investor and another shitfluencer was a genuine conversation and not an ad hidden in a podcast/vlog.

🤷♂


Yes
Good luck finding HIPAA compliant relays

I don’t remotely trust Vitor for security, considering gift wraps


I did not say marketplace was unnecessary


Horrible ideas die as fast as they get thought of


ECC memory matters
https://i.nostr.build/yq7y9.png


There is paying for blockspace, and there is intentionally overpaying and wasting it


On chain cost


I sarcastically dropped a comment on a advert by primal. This is their reply.

It is missing context. It is a « genuine » conversation between an investor of  Primal and another influencer (who pretends not knowing stuff that he already knows).

Follow the money plebs, and don’t accept the BS. nostr:note1p8t38am4uxutjrmfrkqqhvfj6t2r2mudmgkgpgq3sxv0egmljsfsz5ztm7


no

you only know a key


No because these private keys may exist somewhere else and are not bound to you specifically


Reminder that the DAO fork happened
Sufficient social consensus can result in a fork to steal your coins and you can’t spend it

The end


By this all SE involving HWWs are extremely closed source not to be trusted projects nostr:note10kujqm5sz7439mkm6sxeva4xxe7z4zx0mnkpqujtlc0vhu6773rstskvzj


Need to repost this b/c it seems the latest FUD attack on SeedSigner is to characterize it as a "closed source project".

SeedSigner is both Python code and a customized, purpose-built *nix operating system that is engineered to run on hardware that is not fully open source, i.e. Raspberry Pi SBCs. See the attached image for additional info on the reasoning behind our design decisions.

Linux is similarly run in many closed source hardware environments, but that does make Linux a "closed source project".
https://m.primal.net/Hxpq.jpg


Wait right you can’t fix idiocy


Not a single entity so far that has no direct or indirect incentive from OpenSats and related has come out and defended them without trusting


One factor for OpenSats’ grants is if you suck their dick hard enough. Not the only one but one of many and one with high influence over the end result


more behind the scenes stuff, like algorithms and search.
not public yet


Discussions can happen on social media that don’t suck. It’s just that some people like to bullshit for personal gain, whether it be entertainment or selling their own product


Over 50 years, storing 1GB of data in S3 costs $15
On Bitcoin it costs $1.6m


I never applied for funding.

There are few other sources, by the way. nostr:note1nlrlxfgqkhx2ehdrkpjvk9s3z97mjshqy6y06r87gj58pzhm34gspuqwsf


Bitcoin: A Highly Distributed Append Only Log System nostr:note1ye7azm0et7yxwy2drxcz05w0gphsqsyds9g4y2g8zpnyty7ew90q6swjas


zapathon has signed its DNR order 5 times and yet you keep trying nostr:note1eel5483c8znh6g2j9aavq8tawa6f87m8h5dzj5dq95d6mzm2aanqx2ah2k


We can’t know that I think
Not relayed


This breaks OTS I guess. nostr:note1dpde9ylz69hfv77yhehnp9qyw0jjt8cx6seumkkcc5xl7ddpmp2s7fq6jc


VDSL can go 42/12


I’m still on DSL


good to know most of you are either opensats simps or got paid off


Might be just a … custodian
But kind of concerning


Just added 6 months of nostr.land relay subscription. Great work in there #growNostr


yeah that’s dumb
I personally don’t find the bot of any value, and many people can agree: a bunch of its reports are outright false and it’s overly sensitive


noone can, since everyone is getting paid by opensats, including me. ten31 is invested in primal and strike. it’s pretty ingenious and prevents anyone from saying anything or else you may not get your nostr grant, at least that is the perception even if its true or not. Odell has called me personally and said there’s no way he would have of conflict of interest, but it’s literally impossible to not have a conflict of interest here. Odell is a great guy and I’m inclined to trust him, but the whole situation feels wrong and is causing a chilling effect.


I have not publicly spoken much or asked questions about this for a few reasons. Firstly because I consider you to be a personal friend and I feel that you try to do the right thing in each of the projects and organizations that you are involved with. You helped our project out in numerous ways, especially early on when our core concept was brand new and still being proven out.

Neither opensats nor dorsey owes our project anything. I have been very clear about this, and I moreover feel that opensats is a net good for both the bitcoin and the nostr communities. But I have also avoided asking questions about the status of grants, much less about potential conflicts of interest, because I did not want to spoil Keith's chances at a grant, or negatively impact anyone else who might apply in the future for a SeedSigner-related grant. I think this speaks to the same self-censorship dynamics that jb55 has referenced.

You insinuate in the above that there has been at least one vote on a SeedSigner related grant. This would be news to me because I had the understanding that applications related to SeedSigner were being considered but were deactivated when it became known that Keith had received funding from the HRF.

While a required threshold of "yes" votes for a successful grant is of course entirely reasonable, "no" votes (especially emphatic ones from persons of influence) can cut quite effectively in the opposite direction. nvk's repeated, persistent, very public criticisms of our project communicate something like personally motivated animus rather than any sort of good-faith conscientious objection. Even were he to openly abstain from a formal vote on SeedSigner related grants (which would be in line with opensats' publicly established policies) other board members are likely to be influenced by his numerous public statements. It's honestly troubling that someone running a company that embraces "source available" as an attempt to rebrand what open source means, and who has referred to good/faith FOSS proponents as "commies", should be in a position to decide who does, or who does not, receive open source grant funding.

Some very legitimate questions are being raised about the parties providing funding, their motivations, the entities receiving funding (and those who aren't), the specific tech they're working on, and those who are directly (and indirectly) involved in the funding decision making process. I don't think these questions are being asked because of prototypical bitcoiner contrarian suspicion, but rather are the result of an evolving pattern of observable events; some might call what they are seeing as potential "aligned malincentives". The opensats funding dynamics and scale may also be arriving at a point where larger structural dynamics are coming into play and a "just trust me" approach to public relations and organizational ethics becomes increasingly less and less viable.

So where from here? I don't have a good answer and none of these are my decisions to make. Hopefully opensats just has a short-term public perception challenge that can be resolved with better communication and more transparency. But bitcoiners are a skeptical bunch and these questions aren't going away if they aren't addressed.

Lastly -- I believe that you personally have a good heart and I'm rooting for your success.

(NB - I am speaking here under the exorbitant privilege of operating this account as SeedSigner "the man"; my comments may not reflect the opinions of all, or even of any, of our contributors.)


time to launch a new “ordinals optimized” testnet and sell people worthless shit /j


By running this you are actively shorting USD nostr:note1vl0ephpzcrk54tvvclccu408rfx9w92229jjuplfkj4jdfwq3ejsgteaws


It uses the OpenAI moderation API
OpenAI moderation is in fact made to filter content for weak babies as we all know


“Harassment / stalking / doxxing”
“Intolerance & hate”


It uses the OpenAI moderation API


No. Don’t disable it yet
Just check if it could be low signal disconnects

Consider increasing transmit power also. Your neighbors may hate you but who cares. Increased my reach by a bunch that way


Media converters work until they break and you have no diagnostics


Look at RSSI


I also need to know on the 1st building you have a switch with an SFP(+) port or not, otherwise you’ll need a switch. Don’t use media converters. 300ft+ is only going to be good with fiber, copper will cause issues since you’re very close to going over spec.


Do you intend on running the link between two buildings outdoor or via a conduit? There’s a cost difference.


High rate of false positives is the main problem


Jerk is subjective
They will get in your WoT no matter what

The idea of “who I’m following/trusting” moderation is stupid as it gives influencers the ability to censor and content/trust view != moderation view


There is no solution that just works
There will never be


No it does not


100GbE is actually competitive in price per gigabit compared to everything else


Also power usage is a bitch.

Could you give me some more details? How many devices, any potential upgrades planned down the line (more hosts or link aggregation), rough distance for cable runs, etc.


Also for NICs look for used shit too.


Look on the used market. You can find a bunch of stuff on eBay.

Note: do research before you buy, avoid HP shit at all costs, if you can avoid using switches with module vendor locking, I can try to help with this

For fiber and modules, go to fs.com.


because they don’t care about their users

too many paid relays or insert nostr service here sell crap to end users and falsely market their shit


Native Tor support. nostr:note13hzkudugh3f2hsmywn3hwl2ypkr5x4wm8vptvgjzqnz966zdznxsr304e3


Heard that it might compete with Bitcoin miners on how hot it can make your house get 😂


Also with SFP shit vendors often lock what modules you can use to their own only. And charge markups Apple would wish they could.

Thankfully there’s ways around it.


Running anything faster than 2.5G on copper is expensive (Cat6a and hardware), often problematic (heat issues) and bad value (just use fiber or something)

10G with fiber is cheap, including hardware, if you know where to buy. Need more throughput for 1-2 things? Use a LAG.

25G also would recommend if you need more throughput, and the hardware isn’t that expensive either.

40G/100G, don’t. The 4x10G/25G lane setup means you either pay for expensive MPO fiber or end up dumping a bunch on modules. NICs for 100G are a pain in the ass.


Context:
10GBASE-T runs hot as fuck. And it’s more expensive than just using SFP+ and running fiber or something.

I do not want to think how expensive (and hot) 40GBASE-T would be compared to just fiber

Thankfully no one made 40GBASE-T hardware


“40GBASE-T”
Is this fucking real
…

What the fuck


You do not need to trust me.
Maybe except for paying for my services but that’s it.


True, until not I guess


Nostr.land has Tor support

:)


reason: fake zaps

I could spin up my own mint backed by nothing, send you tokens from it, and now it appears I zapped you while I actually zapped you nothing

also fees for transferring across nints


for any proper cashu zaps you MUST pay a mint that the recipient uses or your zap is as good as not


it doesn’t work how you think it does


You need to make sure your sats are on the recipient’s mint
So you may as well be paying like 20 different mints to create tokens


Not really


https://ipng.ch/s/articles/2023/11/11/mellanox-sn2700.html

🫠


Is ossification good for bitcoin?
Yes.

(The logic is flawed.)


honestly for scrapers the best solution to reduce load on both the relay and still have content accessible for search services etc is creating small json dumps that can be processed directly + use relay only for realtime


I’m thinking of starting a non profit to build water wells in Africa. I will sit on the board and we will spread our grants to anyone who wants to build water wells.

Oh, and I’m a VC, who’s heavily invested in one of the companies that builds water wells and I’m concerned about my return on investment.

Don’t worry, I’m not biased, anyone can apply for a grant. Anyone.

And if you question my incorruptibility, just remember I’ve been building water wells since the beginning, I have a few paragraphs written on my website, and if you question my altruism, you don’t care about fresh water in Africa!


Relying on grants is not the way. You can’t grow your team on grants, its not even allowed as grants are only for individuals. Support client devs directly to have a larger impact and to properly build out a nostr ecosystem that isn’t all funded under a board of decision makers with 0 transparency, where if you make a post like this you likely won’t get your next round of funding and LTS. Don’t let VCs capture and control nostr.

GM nostr:note1kh87df4jtseet4g9uszzuea80hdtp9mtyyg444ujnmqaekpns90srldl0v


Also cursors are really easy to implement without persistent state. Added that to the PR.


A relay that reads from multiple relays (without an indexer)

assuming the lowest created_at is the one you should use here is dumb, because it assumes the lowest created_at of any relay read from, and that misses events from other relays

This also breaks many other potential relay optimizations unrelated to this


Delusional V4V activists that don’t understand basic economics can place their idea where it belongs: in the trash


Read my last comment.
Until based pagination breaks down when you introduce stuff like Bostr.


I would still recommend RAID 5. The overhead is minimal and capacity waste drops by 2x


certificate verify failed: certificate is not yet valid


But it also costs a ton.


Unrelated to that but any reason for going RAID 10 instead of something like RAID 5? XOR is pretty optimized to the point you’ll probably saturate memory bandwidth easily and you get more capacity.

And for weekly backups: I do hourly ones to an on site server, and daily to off site.

Proxmox makes it really easily. Also, setting retention rules helps: 12 backups hourly, 14 backups daily, 8 backups weekly, 6 backups monthly


Oh, that was not about the service. I just hate LNbits and “node distributions” for many reasons.

Unfortunately I am stuck with LNbits as there is no alternative but I made it deposit only.


Yeah, they say their grants are "no strings", but that's not accurate. It's "thin strings".

The way to give someone money with no strings attached is to just send them money, unasked and without expectation that they react or respond with anything other than a courteous "Thanks!"

Otherwise, you are giving it with the expectation that you are forming a relationship, through which you can exert influence.


“LNbits”
“Umbrel”
😟


You told me webflow was a mess so I was referring to that.


Consider getting rid of technical debt 😂🤗


Stupid is what stupid does! 🐶🐾🤣👍🏻


Wrote a NIP to end pagination hell for once and for all, and allow for conveying more information through EOSE in general.

https://github.com/nostr-protocol/nips/pull/1173

nostr:npub1x3azxuysp5vmfer4vgs4jn5tmfcx4ew8sh0qnev7gczljxsr7jwqa3g4el nostr:npub1ye5ptcxfyyxl5vjvdjar2ua3f0hynkjzpx552mu5snj3qmx5pzjscpknpr nostr:npub1v0lxxxxutpvrelsksy8cdhgfux9l6a42hsj2qzquu2zk7vc9qnkszrqj49 nostr:npub1acg6thl5psv62405rljzkj8spesceyfz2c32udakc2ak0dmvfeyse9p35c

Had some ideas for more stuff to add: “auth_recommended”, etc.


Single devs with shoestring budgets are criticized for not having everything ready for everyone. I guess the solution is just to shove everyone into the KYC’d VC funded one with lots of employees. Pretty sad that this is where nostr is headed. I guess this is jacks vision for nostr now so it must be done. The biggest threat to nostr is a handful of influencers who control the funding and can pick the winners. Purple is my attempt at breaking free from this, but I feel like it’s already a losing battle.


Somehow missed this drama: nixcon dropped anduril as a sponser because the people obsessed with censorship over on the fediverse complained when #nixos posted it on their instance. I don’t have a strong opinion on anduril, I’m just grateful we’re free from the tribal hell over there.

https://cdn.jb55.com/s/9aecee16cc4505cc.png

https://cdn.jb55.com/s/b50cd24b0b74e6c5.png


Hi, #asknostr, does anyone know what all these low sat requests are from #primal in my #mutiny wallet? TIA

https://m.primal.net/HuOn.jpg


I agree with ARK's decision to not give money to OpenSats.

They should fund core devs / projects directly unless OpenSats published PUBLICLY how much they're funding each project.


Why don't people want to dedicate $20 per month (or 4 cups of coffee) in total for Nostr tools they use every day?

If we want freedom tech to succeed, the tools that make it possible need to be funded: relays like https://nostr.land, media hosts like https://nostr.build, clients like https://damus.io, etc.

Complaining about:
- why media hosting is expensive when it takes hours of work per day to keep running, and risks like CSAM content make it harder to maintain
- recurring relay fees when it takes constant work to keep up, and recurring server bills
- clients not being perfect while they require a lot of time to make work and optimize
doesn't help with anything

If everyone on Nostr making shit calculated how many hours they spent on nostr development and how much they actually profited, and compared that to if they got a job with their skillset, I would bet it's way higher than how much an average startup loses

So please, support your clients, relays, media hosts, and everything else you use


Consider me onboarded 🫡🤝

1-year plan

Support devs directly nostr:note1egljy688rc77q8j3u6at80jw0m8xn3mqvmaam5mueu8rex78wzusjfxadm


I could only say, "wow". When client treat kind 1984 event like an normal note, Wow.
https://image.nostr.build/17aa7f54132f42b7a5445415b3dcaa3f9cf563c11647f53c930c699448f9c509.png


Super excited to announce ‘AI Studio (beta)’ for nostr.build Creators and Advanced account holders!
Now available, you can go into your account and start using your Generative AI prompt to create almost whatever image you want. Advanced accounts can choose from three different models! This is just the first of many more AI features to come.
*Account hodlers - Please tell us how it works and post pictures!! Also, let us know of any bugs!
*You can access AI Studio in the left menu bar, check out nostr:npub137c5pd8gmhhe0njtsgwjgunc5xjr2vmzvglkgqs5sjeh972gqqxqjak37w s video on how to use it!!
*Please post some of your creations!!! https://i.nostr.build/oMErl.jpg  nostr:note12h03zvfdcen2k9wp2z779fq7zj09swfn4zlulcms0c8uyt48a7ts6qz35m


Did you know: you can use https://nostr.land to back up your notes on the paid relay locally, free of charge, in seconds?

You will be able to import your old events soon also, without paying additional fees for archival unless you have a lot of notes unlike other paid relays.

Just 4k sat/month.


They did not Dan. They didn’t even see the Dans. Too busy counting their sats and assessing their reach.


If bitcoin comes to rely too heavily on corporate grants/donations, you'll only get the tools that for-profit corporations want you to have. Keep bitcoin free -- build your own shit if you can, contribute to your favorite project, or donate *directly* to it (avoid pass-throughs).


All that is required for evil to prevail is that good people remain silent.


They are ran by influencers that keep feeding you constant unrealistic hopium. People on here are still sheep, just following other people instead.

They don’t disclose grant amounts. They don’t disclose the terms for grants if any. They don’t disclose their operations fund usage and how much of it goes to their own pockets but prominently show the donate button for it.

People on the OpenSats board with financial interests don’t disclose them in a way that’s easy to see for donators.


Happy to announce nostr.land now supports following lists of up to 3k people, while most relays, including paid ones, cap off at about 1k.

register today: https://nostr.land


Happy to announce you can easily back up your events on https://nostr.land now.

No extra costs.


is your strfry relay crashing? probably because of this exploit:

nostr:nevent1qqsrzc923fxe0g52ludlml6hdgswnkrur6ugff2mt7c4pw3w6e53n7spzpmhxue69uhkummnw3ezuamfdejszrthwden5te0dehhxtnvdakqz9rhwden5te0wfjkccte9ejxzmt4wvhxjmcpzpmhxue69uhkummnw3ezumrpdejqhnfuu7


Opensats is just marketing for the companies he invest in through Ten31.

Odell is a mouthpiece. Fuck all that noise.

nostr:nevent1qqs0ndlv493lz0yau4gwgxz3gjq4fy9tc4q6xpj8djv7dydnskarh4cpzpmhxue69uhkummnw3ezuamfdejsygqpphcvjj87n2656t9hafpql7sg64u43xqmd6ngaqa25l4jm5lstgpsgqqqqqqsdkmmxe


## Why this is happening

This happens due to an invalid real IP header.

You are most likely using `X-Forwarded-For` as the real IP header. Strfry expects the real IP header to contain just an IP, but [the `X-Forwarded-For` header is *a list of IPs*](https://en.wikipedia.org/wiki/X-Forwarded-For), with every proxy adding the IP of where it got the request from.

If a client specifies an X-Forwarded-For header, like `X-Forwarded-For: 1.1.1.1`, your proxy will add the remote IP, like this: `X-Forwarded-For: 1.1.1.1, 127.0.0.1`
When you use `$proxy_add_x_forwarded_for` in Nginx, this is what it is doing: *appending* the remote IP to the header.

Strfry tries parsing `1.1.1.1, 127.0.0.1` as an IP address, fails, and throws an exception.

## How to fix it

If you are using Caddy, just switch to `X-Real-IP`.

If you are using Nginx, you can add a real IP header like so, and switch to using it:
`proxy_set_header X-Real-IP $remote_addr;`

You can also disable the real IP header, but this will cause problems if you use a write filter script or look at the logs.

How to mitigate the strfry crash exploit

Is your strfry relay crashing with the error "invalid size of ipBytes"? This is how you can fix it.

This is a long form article, you can read it in https://habla.news/a/naddr1qvzqqqr4gupzq5455pmtewaacws6a73hxkqkea6fjwcm3keq9vqu3q7930nl4k9aqqg8xarjvee8jttrwfshx6pdve5hs5m6jh2


The question is why are the big players and devs trying so hard to centralize Lightning in exchange wallets like Primal wallet, strike and cashapp?


Community Relays, let's gooo 🛰 #decommoditize
nostr:nevent1qvzqqqqqqypzple86qwtret0kkzcqvrv0wnkhvphhus3ck6h83twfecv4pv82khsqy88wumn8ghj7mn0wvhxcmmv9uq32amnwvaz7tmjv4kxz7fwv3sk6atn9e5k7tcqypc3f3azmlzg88z50txxf4rpzhlv5vezn2yvvhev9xpn67z27m0k5vg9nmt


https://fortune.com/europe/2024/04/05/germany-law-sunday-rest-tegut-teo-automated-stores/

🤣😂🤣😂🤣😂

Robots need to rest on sundays and pay social and health taxes.

So, I'm fully expecting an EU regulation that forces on-line stores/marketplaces to be closed on weekends/holidays. I mean the same rules that apply in the real life have to apply on-line, no buts. Right? Right?


Opinion about Samourai Wallet (android)
<!--HEADER END-->
Samourai has cost me many many hours due to their strong social media presence and constant ad hominem attacks. They blamed me for not being able to compile or reproduce their product instead of helping me to compile it. Given I compile wallets all the time as can be found on walletscrutiny, I doubt I lack the expertise to compile wallets but even if I did, why not show me? Not one developer other than their team themselves disagreed with my technical assessments of their product. Apart from proven scams, this is the product I trust least in the whole space.

But it's not only me. To [quote Bitcoin Core developer and absolute genius Gregory Maxwell](https://www.reddit.com/r/Bitcoin/comments/9r9344/slp29_samourai_wallet_bitcoin_privacy_software/e8fm1v8/):

> I have seen far too much outright dishonest and extremely incompetent behaviour from Samourai to ever trust it myself.
> Samourai has very poor privacy while bragging about having good privacy: It sends your addresses all back to their server. Their "trusted node" mode doesn't change this, it just exposes your Bitcoin node to attacks completely needlessly. (Needlessly because they only use it to relay transactions, which they could do via the public P2P ports of any node, and because since they've already sent your addresses back to their server sending your transactions via something else doesn't increase your privacy.)
> If you want strong privacy then as a start you need to run a full node (and use either Bitcoin Core wallet, or run your own electrum server), preferably via tor.
> I don't doubt that they want and intend to eventually have good privacy but it seems that they're just unable to stop lying about it, even after previously being caught.

You can find many more very competent people complaining about Samourai's dishonesity and aggressive behavior or outright incompetence if not malice [here](https://nopara73.medium.com/samouraileaks-samouraidevs-sockpuppet-exposed-7ce654b92c0b), [here](https://nopara73.medium.com/samouraileaks-part-2-harassment-of-bitcoin-developers-fae3019abd2f) and [here](https://nopara73.medium.com/samouraileaks-part-3-is-random-org-random-enough-35704796ae93). And yes, those three links are to nopara's blog, who is the developer of Wasabi wallet which targets the same audience of privacy focused users but that doesn't take away from the facts reported there.

Stay away from Scamourai!
<!--FOOTER START-->

#WalletScrutiny #nostrOpinion

[Join the conversation!](https://walletscrutiny.com/android/com.samourai.wallet)

An opinion made about android/com.samourai.wallet generated using nostr-opinion-plugin.


the seedsigner cope goes further

can anyone REALLY build their own coldcard though?

reminder that you still can’t build your own chips for a working coldcard like you can’t with a pi
if you are complaining about not being able to build… a PCB then something is wrong with you nostr:note1a5fsayl6p74m7gq4kzzsh56flcgc9tv8n80ysrslrgydx9u07vhsd6nrkz


“men are harassing women”

do you really know WHO is behind that nym? or are you making assumptions?


The same people convinced Open Source doesn’t require steady funding believe GIMP is a real replacement for photoshop.


IEEE no longer accepts Lena image containing submissions from 4/1 onward

Comments ( https://news.ycombinator.com/item?id=39885977 )

https://www.theguardian.com/technology/2024/mar/31/tech-publisher-bans-playboy-centrefold-test-image-from-its-journals


XZ backdoor: "It's RCE, not auth bypass, and gated/unreplayable."

Comments ( https://news.ycombinator.com/item?id=39877267 )

https://bsky.app/profile/filippo.abyssdomain.expert/post/3kowjkx2njy2b


yes. Make targeting easier for the Feds.


Iowa fertilizer spill kills nearly all fish across 60-mile stretch of rivers

Comments ( https://news.ycombinator.com/item?id=39870402 )

https://www.nytimes.com/2024/03/29/us/iowa-spill-fish-kill.html


The nostr:npub17tyke9lkgxd98ruyeul6wt3pj3s9uxzgp9hxu5tsenjmweue6sqq4y3mgl hate will continue until it disappears.

SeedSigner can go fuck itself because it makes our overpriced devices that we want people to buy multiple of look like a waste of money abd time. nostr:note1pkje2lmp8n4jcxg3jhm5cyrt7e4zezvc0ml7dp5k6np75jqulqtsjj7fdt


Coldcard's biggest security hole is the emotional insecurity of its leader 🤡
nostr:nevent1qqsqmfv40asne6evrygeta6vzp4lv63v3xv8allxs6tdfsl2fqw0s9cpremhxue69uhkummnw3ezuum9w35xvmmjwpexjanpvdujucm0d5pzp6y2dy0f3kvc0jty2gwl7cqztas8qqmc5jrerqxuhw622qnc2pq3qvzqqqqqqyzzsyc3


I Have Deleted Systemd

Comments ( https://news.ycombinator.com/item?id=39804306 )

https://unix.stackexchange.com/questions/772960/i-have-deleted-systemd


Sure. Let Adobe AI scan all of your documents. What could go wrong?

Comments ( https://news.ycombinator.com/item?id=39805581 )

https://infosec.exchange/@briankrebs/111965550971762920


# Introduction

LNbits is a project plagued with poor code quality, potential security risks and bad management. What can be done about it?

# The problems

## Improper handling of vulnerability disclosures

### Case 1

Two years ago (don't remember exactly when, Twitter account deleted), I discovered an SQL injection vulnerability in LNbits. This could be exploited very easily by setting by sending the injected data in keys in the payload of most requests. (anyone could create create wallets)

This was possible due to the query to insert/update was generated using the body of the request, with basically no sanitization.

When I contacted Ben Arc about this, **the fix for this exploit was not implemented for several months**, and when it was, I do not recall there being an advisory for people to update.

### Case 2

A month or two ago, I had discovered an exploit that allows draining nodes completely under certain conditions. I had reported this to an active maintainer of the project, which had passed it on to the team. **The exploit has not been fixed.**

### Case 3

Again, a month or two ago, a flaw was discovered in the SatsDice extension that allowed anyone to drain wallets. I had investigated this, and found that the extension allows invoice keys (instead of admin keys only) to create dice that have a guaranteed win rate and return more sats than put in, and then use it to drain balances.

I had reported this to the team, and while it was fixed *a week or two later*, there was no easily visible for people to update except an "update your SatsDice extension" message in the LNbits chat buried in a conversation about the exploit.

## Bad security practices

### "Don't do one thing, and don't do it well"

LNbits has over time expanded its scope, from being a wallet layer to an LN apps platform to a node management tool. While this may seem great for users, it has come at a significant security cost:
- There is a larger attack surface for attackers to exploit.
- The newly introduced node management and admin UI feature allows easy draining of nodes if the admin URL was leaked, whether by by the autocomplete on the search bar or the user's history.
- All extensions run at the same privilege level as LNbits itself which has direct access to funds.

### Developers can accidentally shoot themselves in the foot

The LNbits codebase encourages many harmful development patterns that allows developers to easily create vulnerabilities that put funds at risk

#### Example 1

Most LNbits extensions use the following system for handling object creation/deletion:
- Take the body and convert it to a class
- Overwrite/sanitize fields in that class, such as preventing overwrite of the wallet ID
- Pass it to the DB to write

There is a slight problem: it can be easy to miss what to sanitize and what to not sanitize.

When you are doing an update request, you may accidentally forget to overwrite the wallet_id on the request sent by the user to update a withdraw link, and trust the user. You just created a bug to drain anyone's wallet given its ID, which LNbits does not consider sensitive information and sometimes requires you to share.

#### Example 2

LNbits treats any error during a payment attempt an error. But errors don't always happen due to failures in your request. Network connectivity is flaky, nodes restart, and way more reasons for there to be an error while the payment actually may be going through.

If you can get a way to trigger an error during a payment call, but also have it succeed, you can easlly drain a node. I have reasons to believe this is possible in production deployments.

This could easily be fixed as attempting to check the status of a payment after an error, and if that also fails, consider the payment pending until it can be checked, but ths has not been implemented.

## Bad project management

LNbits' current management suffers from many problems:
- the project suffers from feature and scope creep, implementing things for the sake of it
- bugs go unaddressed
- security is not a top priority

This is problematic for a project that deals with funds, as it is everything that you shouldn't be doing for a project meant to deal with funds. Tens of thousands of dollars in some cases and thousands in others.

# What can we do about it?

For me, I have disabled withdrawals on my LNbits instance.
I am also working on a replacement project called LNLocker that will solely focus on the wallet layer bit.

I would encourage trying to replace LNbits, as hard and sometimes impossible as it may be, or if you can, modify the code or restricting access via LND macaroons so that withdrawals cannot be made.

I highly recommend not exposing LNbits to the internet if you cannot disable withdrawals.

This is a long form article, you can read it in https://habla.news/a/naddr1qq8xcmnzd968xttgv9ex6en4dspzq5455pmtewaacws6a73hxkqkea6fjwcm3keq9vqu3q7930nl4k9aqvzqqqr4guhvt8wg


https://i.nostrimg.com/3aa6d52a5a1fb05ec93f9f2d5cdea59adebf914db111538e7964a05d952f3620/file.jpg
#meme #memes


Yikes. Don’t put your money into leaky platforms probably. nostr:note1wd4ng2ete2sa7vyv9gpng9hh96e8axqgjhwtjsk6j0hcdz4jmdjs92hgt3


Response from Flipper Zero to the Canada Ban

Comments ( https://news.ycombinator.com/item?id=39777746 )

https://twitter.com/flipper_zero/status/1770459769452589468


Twstalker.com as a Twitter alternative front end

Comments ( https://news.ycombinator.com/item?id=39753049 )

https://twstalker.com/EFF


Running late for college, and the scooter is stuck in an update

Comments ( https://news.ycombinator.com/item?id=39743673 )

https://old.reddit.com/r/indianbikes/comments/1bhi2ok/what_the_fck_is_this_i_m_running_late_for_my/


Cut the repost spam


Tech layoffs highest since dot-com crash

Comments ( https://news.ycombinator.com/item?id=39721066 )

https://www.cnbc.com/2024/03/15/laid-off-techies-struggle-to-find-jobs-with-cuts-at-highest-since-2001.html


April Fool's Day is the one day of the year when people critically evaluate
news articles before accepting them as true.
	-kellenbrent, Apr 2015


Sunlight, a Certificate Transparency log implementation

Comments ( https://news.ycombinator.com/item?id=39713370 )

https://letsencrypt.org/2024/03/14/introducing-sunlight.html


🪄🍽 Voilà. Your dishes are squeaky clean now.


Cloudflare mitigates AI side channel attack

Comments ( https://news.ycombinator.com/item?id=39703255 )

https://blog.cloudflare.com/ai-side-channel-attack-mitigated


The judge just ruled from the bench.

CRAIG WRIGHT IS NOT SATOSHI NAKAMOTO

Further findings of fraud etc will come in the written judgment.

Welcome to law.


We understand the price of Bitcoin has gone up a lot recently and for those that still convert to fiat, this would make our accounts more expensive.

- If you are renewing your nb account and you would like to downgrade, please contact us directly we can manually do it. 69k sats is the cheapest acct.

- If you decide not to renew, we will continue hosting your account media for 1 year after your account expires. We will always have our free services.

- Reminder that Fishcake and I work on nb hours each day (24/7 support, content review, new features and maintenance, integration with other apps, etc) and do not receive any funding and keep the small profit (~300-500k sats a month) we make on the node for liquify and emergency.  We got a very small grant from OpenSats a year ago and that was it! nostr:note1qpcrspmenxxcewefx4jrf8qr3yv3l50kxvk2cxa8emvfrv2s9llst29lyh


The great American llama (and ostrich and emu) collapse

Comments ( https://news.ycombinator.com/item?id=39671983 )

https://www.washingtonpost.com/business/2024/03/07/llama-emu-ostrich-herds-down/


product reviews with no comment https://image.nostr.build/e0cffbdfba5d2d8b4609b72bde9eeb9d9290159a17f356fa195163ae68bcaf6e.jpg


California Seized Enough Fentanyl In 2023 To Kill Global Population 'Twice Over'
https://www.zerohedge.com/medical/california-seized-enough-fentanyl-2023-kill-global-population-twice-over


I'm disappointed at the standard being set for bounties.

It has been half a month since the release of hist.nostr.land, which was made to fulfill nostr:nprofile1qyd8wumn8ghj7urewfsk66ty9enxjct5dfskvtnrdakj7qgmwaehxw309aex2mrp0yh8wetnw3jhymnzw33jucm0d5hsqgpm7rrrljungc6q0tuh5hj7ue863q73qlheu4vywtzwhx42a7j9n5zr9h9m 's bounty for a relay that kept old contact lists. Since then, I have not been paid, with my submission being initially dismissed for not meeting criteria not mentioned in the bounty post, with the only time estimate for payment I have gotten a few days after that being "this year", and no further follow ups after that.

This sets a dangerous precedent and creates a bigger power imbalance between people offering bounties and developers: developers can have their submission dismissed on terms that were never mentioned, and the people offering bounties can postpone payment for however long they please, while developers have to open source what they made before they get paid to be eligible.

A bounty is already a risk for developers: someone can claim it before them, and their efforts could go to waste. Setting precedent that allows people to postpone payment to developers for whatever reason and add arbitrary terms will only reduce the amount of people willing to work on bounties, and goes against common practice:
You pay first (or sign a contract and/or escrow funds), and once the work is complete, you have to pay. No subjective terms, no arbitrary rejections, if it meets the terms then you get paid. Bounties as they are completely flip this on their head by requiring people open source their work without a guarantee to get their promised amount, and terms can be added after the fact.

We can't do much about this due to the nature of bounties, but we have a few options to improve the situation:
- For nostr:nprofile1qyd8wumn8ghj7urewfsk66ty9enxjct5dfskvtnrdakj7qgmwaehxw309aex2mrp0yh8wetnw3jhymnzw33jucm0d5hsqgpm7rrrljungc6q0tuh5hj7ue863q73qlheu4vywtzwhx42a7j9n5zr9h9m  and others to pay bounties when it meets the terms  without adding arbitrary terms after or withholding payment. If you don't have the money to pay right now then don't make a bounty.
- Switch to alternative solutions. Grants after project release do not work as they rely on some entity like OpenSats to accept the project after developers have done all the work, with no guarantees since they can be rejected due to whatever reason, such as it not matching with the vision of the grantor or due to personal issues. The ideal solution is to have a contracting system: have some group of people escrow funds, have clear defined terms, and only pick one developer (and add more later if nothing gets done).


Hist.nostr.land is very valuable to me as a nostr user. I have a bounty out for low data mode on a client and have sats set aside to pay.

If I request a meal at a restaurant it is understood that I will pay for it at the end.

Short of a low fee being stuck in the memepool there is no excuse for lack of funds. The precedent bring set here is dangerous.

#NoFreeLunch nostr:note10z2t0d7hr2awv3tptln47ldvhmudshfuf0vdhekz0vnqtxt0amqqnw5a3k


Ok, after a few weeks of on and off dev work, and a few bugs and fixes later, I’ve finally managed to implement renewal and upgrade page for nostr.build . You can now see “renew” button on your account page if your subscription is within 30 days of expiration. Or you will see upgrade button if you are not on the highest plan. We also started offering extended subscription times that come at discount. You will see all that is available at https://nostr.build/plans/
Some features are still in works, and we are committed to continue adding more. Your subscriptions will get better and better with time! LFG and build an independent future and foundation for the new era of media sharing and social media! 🐶🐾🫡🫂🔥💜


If you're not fighting captchas 24-7 and doubting your humaness, you're doing it wrong.
https://i.nostr.build/xvzK.jpg


Schrödinger’s Backup. https://image.nostr.build/1f557e71da163a387625bc393601cc9a166f342ffa11075530de96568bbcf2b7.png  nostr:note15awgkn599ds94x9flcn7jljcah7ppy9den8re0qlsn04zm3kkl0qw6a6k9


if you value your following list, use https://hist.nostr.land


CALLING MY FRENS!

I would ask that you follow nostr:npub12pl4h7pk0svg8ug4mhu7a90hn6nf83eqadd94pccgsafn73s392qpt42wq and that you ask your people to follow it as well.

I started this account for my friend Texas Slim because I knew his crew did not have time to do it themselves. nostr was new (still is) at the time and I was already all in and knew how to work the thing. I told Texas Slim I was doing it for those reasons so he is not in the dark on this.

I have only been posting verbatim what TBI's Twitter account has been so as to respect their marketing etc. but the time is coming when I need to turn the keys over to Slim and his producer, June (the posts are beginning to get questions and I am not about to start answering out of turn).

When I turn those keys over I want to place in their hands a freedom account with at least 1000 followers and a rowdy bunch of activity: replies, reposts, and likes. If I turn over an account full of "meh" then the chances it remains as vibrant as it is (585 followers so far) decreases.

The Beef Initiative is something I have been involved with since Texas Slim published The Harvest of Deception: https://producers.beefinitiative.com/blog/the-harvest-of-deception  He was the first person I called a friend after I moved to Canyon, Texas and that friendship solidified my passion for soil, ranching, land management and my sense of the sheer Glory of God's Creation.

If you are reading this then hit the Follow button: nostr:npub12pl4h7pk0svg8ug4mhu7a90hn6nf83eqadd94pccgsafn73s392qpt42wq,  and make a post asking others to do the same. It don't cost ya nothin'.

Let's build this thing into a major nostr property that the TBI will be proud to take possession of, continue to steward, and help propel the nostr community into the future.

Can I get help from nostr:npub1el3mgvtdjpfntdkwq446pmprpdv85v6rs85zh7dq9gvy7tgx37xs2kl27r (Hellthread Queen -- you know what to do), nostr:npub1qny3tkh0acurzla8x3zy4nhrjz5zd8l9sy9jys09umwng00manysew95gx, nostr:npub1guh5grefa7vkay4ps6udxg8lrqxg2kgr3qh9n4gduxut64nfxq0q9y6hjy, nostr:npub1cjw49ftnxene9wdxujz3tp7zspp0kf862cjud4nm3j2usag6eg2smwj2rh, nostr:npub1jlrs53pkdfjnts29kveljul2sm0actt6n8dxrrzqcersttvcuv3qdjynqn, nostr:npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs, nostr:npub10chlkc62tk7yr5m9qjc2u7rs3ufhhrq8yukeey0c5lysqkp2gumq93mnex, nostr:npub1xy54p83r6wnpyhs52xjeztd7qyyeu9ghymz8v66yu8kt3jzx75rqhf3urc, nostr:npub1key55ax33gkl50uqemvl4khrtqrhzm7wzpc7fhseutt5ddkcwcrqgxlt3h, nostr:npub1xtscya34g58tk0z605fvr788k263gsu6cy9x0mhnm87echrgufzsevkk5s, nostr:npub1hu3hdctm5nkzd8gslnyedfr5ddz3z547jqcl5j88g4fame2jd08qh6h8nh, nostr:npub1sg6plzptd64u62a878hep2kev88swjh3tw00gjsfl8f237lmu63q0uf63m, nostr:npub1z4m7gkva6yxgvdyclc7zp0vz4ta0s2d9jh8g83w03tp5vdf3kzdsxana6p, nostr:npub1lrnvvs6z78s9yjqxxr38uyqkmn34lsaxznnqgd877j4z2qej3j5s09qnw5, nostr:npub17u5dneh8qjp43ecfxr6u5e9sjamsmxyuekrg2nlxrrk6nj9rsyrqywt4tp, nostr:npub180cvv07tjdrrgpa0j7j7tmnyl2yr6yr7l8j4s3evf6u64th6gkwsyjh6w6, nostr:npub18ams6ewn5aj2n3wt2qawzglx9mr4nzksxhvrdc4gzrecw7n5tvjqctp424, nostr:npub1dergggklka99wwrs92yz8wdjs952h2ux2ha2ed598ngwu9w7a6fsh9xzpc, nostr:npub1kyeml3tma4su8yw5aru48wgxclchp8zr3kguwhakmtmegjw40zws82sfjk, nostr:npub1aeh2zw4elewy5682lxc6xnlqzjnxksq303gwu2npfaxd49vmde6qcq4nwx, nostr:npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z, nostr:npub1l2vyh47mk2p0qlsku7hg0vn29faehy9hy34ygaclpn66ukqp3afqutajft, nostr:npub12262qa4uhw7u8gdwlgmntqtv7aye8vdcmvszkqwgs0zchel6mz7s6cgrkj nostr:npub1az9xj85cmxv8e9j9y80lvqp97crsqdu2fpu3srwthd99qfu9qsgstam8y8, nostr:npub1ewe0qgak4gykym236t6w4x06jyuw4q8v040lmn5lamude434yqcsz7uqlw, nostr:npub1f5pre6wl6ad87vr4hr5wppqq30sh58m4p33mthnjreh03qadcajs7gwt3z, nostr:npub1t0nyg64g5vwprva52wlcmt7fkdr07v5dr7s35raq9g0xgc0k4xcsedjgqv, nostr:npub1h4lrzqnrne72xj00yl3zzr0k6qn93cqe5g4vvkfechs6mn89mwyqfa2jcm, nostr:npub12u423pq5c6c5gvyzlekk5u9s5ksnyd27yemuvu3l9gpqpcnx545s6f8pyh, nostr:npub1cf3zeytdnwgwzz5pk2ax0vvmmlzad03xcft4d50ejrfhsh8pxcdsefx7gk, nostr:npub135x4y8w7jty24ggvxfm0c4mqaknk2su0fzzmwrgfdfylj6tz3l9qlv5xpr, nostr:npub18678fyrar7fg7gy77ggwsuk2cqe74ull38ng2v5x63werc63a70qw02kgq, nostr:npub1k7vkcxp7qdkly7qzj3dcpw7u3v9lt9cmvcs6s6ln26wrxggh7p7su3c04l, nostr:npub1s5yq6wadwrxde4lhfs56gn64hwzuhnfa6r9mj476r5s4hkunzgzqrs6q7z, nostr:npub1a2cww4kn9wqte4ry70vyfwqyqvpswksna27rtxd8vty6c74era8sdcw83a, nostr:npub1cj8znuztfqkvq89pl8hceph0svvvqk0qay6nydgk9uyq7fhpfsgsqwrz4u, nostr:npub15879mltlln6k8jy32k6xvagmtqx3zhsndchcey8gjyectwldk88sq5kv0n

Thank you,

David Bennett (AKA Nunya Bidness)

#grownostr #plebchain #permaculture


announcing https://hist.nostr.land — a service to back up your contacts list and profile for free

just add was://hist.nostr.land to your relay list and go to https://hist.nostr.land if something goes wrong

if you like it, consider zapping or joining the relay :)

it is open source: https://github.com/nostr-land-relay/histrelay

cc nostr:npub180cvv07tjdrrgpa0j7j7tmnyl2yr6yr7l8j4s3evf6u64th6gkwsyjh6w6 I want my 5m sats


Or just have basic operational security, don't standout from the crowd and be fooled be fearmongers into adopting complex setups that will shoot you in the foot.
Simplicity is underrated.
nostr:nevent1qqsw2ulsurunxy2cm2jd8cm9n2pcnka0ucnrneh5aukld760gx6zefspgdmhxw309a3xjarrda5kuu3kv3jn2mrtweurgarswajx67njv3nxgurvvy6hx7tpxfskvamsvdsky6n4wqe8surfx4j82mrzv9jzummwd9hkuq3qaz9xj85cmxv8e9j9y80lvqp97crsqdu2fpu3srwthd99qfu9qsgsxpqqqqqqz0rhw80


Exit your Bitcoin/Nostr optimism echo chamber and stop being sheep that listen to a different group of people and say they aren’t sheep.

Step 1. Unfollow influencers that don’t point out flaws with Bitcoin or Nostr or don’t say anything slightly controversial and keep constantly pushing unrealistic optimistic crap


Yeah, I’m going to shut up because it’s not worth wasting time on entitled fucks that will find some irrelevant excuse to complain about a service

Pay or stfu


Over the past few months I’ve noticed a pretty big shift from an ideological perspective to a more practical one amongst influential developers around here.

It wasn’t long ago that ZBD was catching bullets left and right for releasing a client with an email/password login that held users private keys for them. Now it’s seemingly encouraged as long as it’s nsecbunker run by one of your favorite client developers?

“The node is on the phone” and fully self-custodial lightning for all was a loud narrative until people were actually forced to try it when WoS pulled out of US. Didn’t take long for it to become all about ecash and how to “minimize” custodial risks instead.

I tend to be on the practical side of things so I welcome the shift, but I’d caution against losing sight of why we are here in the first place.


I want to give a quick shout out to nostr:npub12262qa4uhw7u8gdwlgmntqtv7aye8vdcmvszkqwgs0zchel6mz7s6cgrkj for architecting and getting the new system going that will host all of my projects moving forward.

It is far beyond anything I would have been able to set up on my own, but he has been extremely patient and transparent every step of the way, teaching and explaining everything so I can administer this beast of a server.

I’ve learned a great deal, and will continue to learn a lot in the coming weeks, but I already have more confidence that the data belonging to the people trusting me to hold it for them is safe and secure.

A full write up on the experience is forthcoming, but I wanted to thank my fellow purple cat for the absolutely exceptional work and assistance.


Nostrudel: 5m sat
nostrexplained.com: 10m sat

Nostr awareness at events with already people knowing about Nostr: 10m sat
The Nostr Report: 2.5m sat

Adding support for showing which relays a note is on a client (a feature that is barely used): 13m sat

A lot of sats going to the wrong thing and a lot of sats not going to the right thing, and people ask why OpenSats should disclose grant amounts
nostr:nevent1qqsx0xwg0amcamctu4dr6kfny0c8c8vznja3hgk4xd6la36csgyuvhgppemhxue69uhkummn9ekx7mp0qgs99d9qw67th0wr5xh05de4s9k0wjvnkxudkgptq8yg83vtulad30grqsqqqqqpzn5gh3


introverts trolley problem

https://m.primal.net/HZcA.png


Sadly, most people are not interested in uncomfortable truths. They need their dosis of feel-good collective hallucinations.
Optimism sells.


Happy to announce the eden.nostr.land onion service is now available: nostrland2gdw7g3y77ctftovvil76vquipymo7tsctlxpiwknevzfid.onion


"Privacy isn’t about hiding something because you’ve broken the law. Privacy is about having the right to withhold information on certain circumstances to prevent misuse and misappropriation."


Important notice: The nuts.semisol.dev will shut down in 5 days (25 Jan)

Due to being able to not maintain the mint currently, I will be shutting it down. Deposits are disabled.
Any sats after the 5 day period will be sweeped by me.


MEV already exists on Bitcoin
F2pool uses their position as a pool to manipulate the Stacks proof-of-transfer mechanism to be always selected


https://donate.torproject.org/

Please donate for the backbone of Bitcoin and our freedom of speech!


Another relay is exposed as an onion service (and with an awesome vanity onion url)!
nostr:nevent1qqsxzw8ewpfqakm7vtxntcpc4wekly5ucg93lkjq3hgxvg3ctamkwngpremhxue69uhkummnw3ez6ur4vgh8wetvd3hhyer9wghxuet59upzq5455pmtewaacws6a73hxkqkea6fjwcm3keq9vqu3q7930nl4k9aqvzqqqqqqyvp32m9


Please try to be respectful of open source developers time and efforts. Devs are doing work on Bitcoin and nostr often for little or no pay. Demanding they address your silly pet project idea immediately with no thanks, zaps, or regard for their time is not cool. These folks are talented individuals and their time is valuable, please treat it as such.


YOU FUCKING IDIOTS YOU WEREN’T SUPPOSED TO PUT e TAGS FOR QUOTES
YOU WERE SUPPOSED TO USE THE q TAG THAT PROBABLY ISN’T SPECCED BUT A BUNCH OF CLIENTS USE AFAIK


(putting ODELL cap on) IF YOUR SOFTWARE DESIGNED IN SUCH A WAY THAT IT CANNOT CRASH AND RECOVER WITHOUT CORRUPTING ITS STATE, IT’S A SHITCOIN AND IT SHOULDNT BE USED FOR ANYTHING SERIOUS, ESPECIALLY FINANCIAL ROUTING!

I AM LOOKING AT YOU, L FUCKING ND! I AM NOT MAXY ANYTHING, I AM FOR PROPER SOFTWARE DESIGN! 🐶🐾🫡😭😭😭

There, I needed to take it off my chest!


if you need a high quality relay that is sustainable and fast, consider using https://eden.nostr.land
also open to suggestions


Analysis Report
------------------------

Force Closure #093
Initiated by: Us
Reason: You sneezed, lnd got scared scared and threw a tamtrum.


Bitcoin cannot be ossified
Evolution is required for it to keep going, even if it is the bare minimum
SHA256 will be broken
Significantly better scaling approaches will be discovered
secp256k1 will be broken
and more nostr:note1q07wsu9nmm7fa2h7a23urgqqjznr2zdg2nad7yt4ummpthxcj02qmwela6


warning: the following thread may make you experience discomfort and feelings of anger, and make you question humanity
not recommended for sysadmins

https://nitter.net/Foone/status/1224238613040259072


my condolences


RIP, John Pilger. One of the greatest journalists who ever lived. First one to really reveal the true nature of how the IMF waged war on the global south.

https://image.nostr.build/5685bb9ec60a960bd76807093d1720a685b8f04f8298724a313c4b9219c0ddfe.jpg


The users fiatjaf is talking about in action

https://m.primal.net/HWDZ.png

nostr:note1qdy53ejkz6nd6mh2382yjvv457uj0rp77zpg7tcwv86dhj5txd3sl5flr8


All our collective efforts in 2024 must be employed in developing a Nostr app with a single button. Users won't have to think, they will just press that button and they will be fed with content selected to them by an amazing algorithm. When they are hungry they press the button and food will be put inside their mouths. Whenever they feel a little bit of discomfort in their bodies they just press the button. The app cannot mention relays, keys or the word "Nostr" because that will intimidate users, it should have a familiar name, maybe it should be called "mom", since that word is very familiar to all normies since when they were babies.


Disclaimer, this tutorial may have a real financial impact on you, follow at you own risk.

**Step 1**: execute ```lncli closeallchannels```

That’s it, that was easy as it could be. Now all your node’s channels are in the process of being closed and all your liquidity is being moved to your onchain wallet. The best part, you don’t even need to confirm anything, it just does it in one go with no questions asked! You can check the status by using a very similar looking command, ```lncli closedchannels```!

**Good job! Now you are ready to start from scratch and use any other reasonable solution!**

🐶🐾🫡🤣🤣🤣

Disclaimer: this is a satirical tutorial that will 💯 cost you a lot of funds and headaches.

How to quickly migrate from LND to anything

Quick and easy way to migrate away from LND!


LN channel forensics
https://semisol.dev/files/channelforensics.png


🐶🐾🤣🔥🔥🔥 https://i.nostr.build/y3dk.jpg  nostr:note1h8n8pvg6d6fnmktkn9nn573hs3x7zjm63x3dyxzgzzap7tr8ca4qwryvh0


One year ago today, I started NostrPlebs.com. I'm not going to go into all of the details as I've talked about this numerous times over the last year and most of you all know this story as well as I do. Therefore, I will keep this very short.

1) I would never have been able to do accomplish my goals without the help of nostr:npub12262qa4uhw7u8gdwlgmntqtv7aye8vdcmvszkqwgs0zchel6mz7s6cgrkj who wrote the registration and management application side of things about a week after I launched. Thank you Semi.

2) A very special thank you to nostr:npub1rq9x6sk86e8ccw2cm8gsm4dyz9l24t823elespupaxjnzdk026fsca2r93 <3 She was the very first person to offer to pay me in sats for setting her up with a Nostr address. She inspired me to do more than just offer a Nostr address to a few close friends.

3) NostrPlebs.com would not be the success that it is, without the support of all of our customers and friends over the past year. Thank you for all of your support that helped us grow. We registered nearly 6,000 Nostr addresses over the past year. I still can't believe that.

One year down, a lifetime of impact to come for https://NostrPlebs.com. This anniversary is just the beginning!


thank you for the love and support. the love on nostr is beyond anywhere else. i can’t thank you enough for lifting my spirits and praying for me. nostr:note1xmrwj3a76wrg0q6mavacy0guev30qg76jvg3kfrcezwcem6tfq3qxasyvw


I haven’t said anything because it’s been something i’ve been trying to keep to myself, but I was just in the hospital for a week with double lung pneumonia. I had incurred sepsis, but thankfully went to the hospital just in the nick of time before septic shock. I’m at home recovering after being discharged yesterday. It’s been an awful challenge to stay positive, the pain has been unbearable. It’s been tough to keep my life together now, and I wouldn’t wish this on my worst enemy.

Life is not to be taken for granted, you never know what’ll happen to you. I’m so grateful to still be alive. it was incredibly scary. I was close to being gone. I love you guys. https://image.nostr.build/fd3a9ee083cf232f19161a168828d2b29ac44737e95a631ec4c0aef547a429df.jpg https://image.nostr.build/aef691b08fbb3c9fce1295c1c6076f23fc61b70a60c5f36c8aa2166baf398bd6.jpg https://image.nostr.build/a319c4fd562827a37158598431316936785f2b36e669d6a0055be89c6bad1d0a.jpg


Nah, he’s just in it for the money *he* can make.. made that clear on a space yesterday, said he tells all the investors he talks to that it’s the greatest, most profitable casino ever.

When I asked what his own personal goal and mission is, he said: “Hyperbitcoinization”.

While anyone can do as they please with their money, don’t be out there saying your ‘mission’ is hyperbitcoinization and then leveraging your influence and money to attack it

Here’s some of the garbage he invests in.. UTXO Management is the investment arm of BTC Inc, who runs Bitcoin Magazine and Bitcoin Miami/Nashville/Amsterdam

Sadly, Dylan LeClair recently joined their team :/ https://i.nostr.build/jarl.jpg https://i.nostr.build/laxw.jpg https://i.nostr.build/WnYa.jpg https://i.nostr.build/QQ9K.png https://i.nostr.build/6wgn.jpg https://i.nostr.build/Bw6Y.png https://i.nostr.build/oaxx.jpg https://i.nostr.build/zaxy.png https://i.nostr.build/AwQO.png https://i.nostr.build/030M.png https://i.nostr.build/2wvX.jpg https://i.nostr.build/Lj4D.png https://i.nostr.build/qaxd.png


It is a pretty clear trend that over the entire history of the Bitcoin network that the average svB rate and the minimum relay fee is going down


None of this shit about Bitcoin Magazine's 360 degree return to shitcoining is surprising.

If there is degen money on the table, they can only leave it there so long before investors or  stakeholders or simply their own piggy piggy greed start pulling them into Planet Shitcoin's orbit.


Fellas, I think threads.net might be blocking some servers already.

It does not work on any Pleroma servers yet. But I believe that is an unintentional compatibility issue. However some servers seem to be outright blocked.

Let me explain. Threads requires signed fetches. What that means is that every GET request to a threads.net resource needs to be cryptographically signed. Threads will then look up the signer and verify its signature.

The flow looks something like this:

gleasonator.com -> GET threads.net/zuck (signed by /actor)
threads.net -> GET gleasonator.com/actor

The request to Threads contains a signature, with information about how to verify it. Threads will then verify it by fetching info from the origin server before returning the data.

You can see Threads fetching your own server by looking at the "facebookexternalua" user agent. Try this command on your server:

grep facebookexternalua /var/log/nginx/access.log

If you see logs there, that means Threads is attempting to verify your signatures and allow you to access their data.

On Gleasonator, I am seeing logs there. It is trying to let me establish a connection, even though it fails due to a bug in Pleroma or Threads. This means Gleasonator is not blocked.

However, on Spinster, and the Mostr Bridge, I have no requests from Threads at all, despite sending signed fetches. graf reports that Poast also isn't receiving any requests.

I do not believe they are operating on a whitelist. If so, it wouldn't make sense for Gleasonator and many other widely-blocked servers like gameliberty.club to be able to fetch from Threads.

So then I thought it may just be a caching issue, or a fluke on their end. But when I make a request from Gleasonator, I get the pingback from Threads within seconds. On Spinster and Mostr, there is no attempt being made at all.

So I am starting to think they may be blocking at the server-level already. And they are blocking Poast, Spinster, and the Mostr Bridge.


We must fight centralization by... *Checks notebook* ensuring nobody changes their node policies through social coercion and ostracization.  Node policy diversity is centralization! War is peace!


so many dumb ideas misallocating talent


Delete is and has always been a core part of the nostr protocol. Essentially Nostr delete is just like on centralized platforms, not all copies of content are deleted when you request servers delete something.

I fundamentally don’t understand why nostr app developers keep insisting on disabling delete and pretending that nostr doesn’t support it. Delete works in nostr and it is a large part of why we switched from secure scuttlebutt to nostr. Delete can’t work in scuttlebutt, but does work in nostr.

Users should be informed that there is no way to force relays to honor your delete requests. And i think dishonest relays should be something we can rate and track in nostr clients. But to say we don’t have delete or edit in nostr is both incorrect and undermining the adoption of the protocol.


I would like to send 33 billion BTC to my cold storage but bitcoin is censoring me 😘


85% of whirlpool users.

Not wallet users. It is absurd to suggest that 85% of any wallet's install base has a private node running alongside it.

Lunacy.


Developers censor tx with OP_RETURN > 80 bytes = GOOD
Developers censor tx with OP_RETURN > 40 bytes = BAD

I made a new coinjoin tool that needs 84 bytes of OP_RETURN data and devs are censoring my transactions :/


42 is 40 + 2 opcodes (which are counted in the current versions)

If you think Core gets to just dictate things, get over your centralization mindset.

Knots has used 40/42 since 2013. Samourai are the ones who chose to exceed it.


Don't forget BlackRock can decide on behalf of all their spot ETF investors which fork of #bitcoin is the "real" bitcoin.


I just don't get NFT's. I don't. How many of your friends collect things? Like *really* collect them? Obsess about display cases and acid-free backing and all that shit? Not many right? Why am I supposed to believe that NFT's are no less of a niche thing?

And how the fuck is anyone supposed to believe that these minting events are actually bootstrapping something that will be coveted in the future? Collectibility is an organic story. Something might be collectible because a huge amount of the original issuance was destroyed or there were misprints, etc...etc...hardly anything is collectible because some fuckstick on Twitter ran a few prompts through Stable Diffusion.


NRC-20, NostrSwap and "Nostr Assets" are scams that exist only to steal your money. Do not fall for it. Tell your children.


Listening to the Ordinals episode of the bitcoin review podcast, how can you be against Drivechains and promote Ordinals? They have the same eternal shitcoin incentive misalignment. They are the same thing.


Indeed. Somehow they got tons of people to repeat that it’s somehow “decentralized” despite not being in any way decentralized. Quite impressive.


We live in a time when it's more socially acceptable for a child to be on
amphetamines than it is for an adult to smoke pot.
	-DrSkyentist, Nov 2015


I regret leaking that I am a cat. Now everyone thinks I’m a pussy.


Exploding pigs sound scary af 🙀 nostr:note1qg2e5xdp5nqc9qlh3nwhqh3ptx4snw8re3u0ps8e0x3anhyfh70s5muvpa


Wen OLYMPUS tho?


Shit my iPhone seven glitched and posted my note way too many times, sorry for the spam fam.


Most bitcoin "accessories" that you see for sale this black friday are pointless, overpriced, regular consumer products repackaged in premium branding.

You don't need a $150 kit to hammer seed phrases into washers. You need a hammer and washers and a letter punch kit, all of which you can get at Harbour  Freight for like $25.

You don't need a waterproof HWW case with custom cut foam. You need a Pelican 1120.

I COULD GO ON


YOU DONT NEED A COINKITE $30 INDUSTRIAL MICROSD CARD

nostr:nevent1qqs86pvl0k2rknqy2cnp80vcllra74s0ns206uxkmq9vptjkqwwvjdgprfmhxue69uhkummnw3ezuumpw35x7ctjv3jhytnrdaksygqnhj2ajgwgk6exeu65jjtymtuxlycjlegfy3yr6fngy7temqyf05psgqqqqqqsm8sdnt


WoS didn’t rug you.
The US government did.

Wake the fuck up.


Craig Wright hired a private intelligence firm to spy on hodlonaut, in an attempt to spin an appeal case narrative that he was part of a large, organized cabal devoted to destroying Wright's reputation. Because that's a perfectly normal thing to do.

https://twitter.com/hodlonaut/status/1726286758713737538

https://image.nostr.build/1a234986135e59e51fbf941ca8b56180efc6f8efed6acde6ce8161c16c958192.jpg

https://image.nostr.build/70fef3be137919c8de582192c152cb54c680be2886652866744b5ba7fd3da741.jpg


Why the hell do USB type A ports with 10Gbps exist

What next, we are going to run DisplayPort using USB4 over a USB-A to USB-C cable?


SEX is great and all but have you ever solved a programming problem that's stumped you for weeks?


I agree that what nostr:npub1xnf02f60r9v0e5kty33a404dm79zr7z2eepyrk5gsq3m7pwvsz2sazlpr5 is doing right now could lead to elevated force closes. I also agree that LND is shit.
But this does not justify nostr:npub1mutnyacc9uc4t5mmxvpprwsauj5p2qxq95v4a9j0jxl8wnkfvuyque23vg outright blocking zaps to them in my opinion. In no case should a wallet, especially a competitor, attempt to block payments to another wallet, with no option given to users to turn it off.

Hold invoices and stuck HTLCs are still going to exist, whether nostr:npub1mutnyacc9uc4t5mmxvpprwsauj5p2qxq95v4a9j0jxl8wnkfvuyque23vg blocks nostr:npub1xnf02f60r9v0e5kty33a404dm79zr7z2eepyrk5gsq3m7pwvsz2sazlpr5 or not. We need proper solutions to HTLC resolution in low-uptime wallets.


These two 💜🐈🐈⬛ https://image.nostr.build/40b90037fa269ce0b4c0d7d0bcc64459ce3c4ff6f63051f4074948a244663e1f.jpg https://image.nostr.build/145f3ea6464c0ab9fff3c356b13d3f696045c83991f53842d76fdd05e0144be6.jpg


mempool composition, in MvB
https://image.nostr.build/8ab10f8cb22158ba4fd00ddb37f3e7bd8ee931921af6918d7d2f42051af3a8a6.png


an LLM is just the views of another executed by a computer


The longer Wallet of Satoshi exists without being forced to add KYC, the more it seems to point to them being a honeypot.

Lots of user info to harvest there. Feds have done crazier things.


Good thing those app reviewers that make you jump through hoops to get "approved" for the "store" are there to protect you!

(Not a dig at apple, could be any of them)

https://image.nostr.build/02cd66d1ffacbcfbdf1caf6882f3beca5e5f3640049b00435ec288bc4c85275f.jpg


Nostr has a funding problem. Developers and infrastructure is severely underfunded and reliant on flawed economic models, and this could pose a risk to the future of Nostr as a protocol.

To understand it, we need to understand what resources are needed to make Nostr work, how they aren't funded properly and what could happen next.

# The costs of what makes Nostr work

Nostr works because:
1. Developers build clients on it
2. There is infrastructure to support clients

If there are no developers, there are no clients. If there is no infrastructure, clients have no purpose.

## The costs of developing a client, and the reliance on developers

Clients require time to develop the client, and money to run infrastructure for it.

Without developers, there would be no clients, and no Nostr.

Developers have lives and need to make money somehow in exchange for the time they spend. Developing a client is a significant cost, even for small ones (assuming 1 hr/day, no infrastructure costs and the average salary of a software developer, **$1500**) and needs to be covered somehow.

We have multiple models, all of which have large downsides:
1. Donations/V4V/Bounties:
   This model suffers from the problem that a minority pays for the majority, which will lead to the majority demanding exclusive benefits for their money or otherwise cutting off funding since they have no reason to pay.
   This also suffers from the fact that donations are unreliable.
2. Grants from OpenSats and similar non-profits:
  These suffer from the same problems as the donations model, but also suffer from the following problems:
    - the managers of these non-profits may have views not aligned with their donors, leading to misfunding.
    - that such projects are mostly stopgaps that add additional complexity to a direct donation model.
3. Paywalled features:
   It is very hard to find the balance between paywalling enough features to make money, and discouraging too many users from using the client. There may not even be such a sweet spot.
4. Cuts:
   It is extremely hard to balance these so that people don't complain, and it is likely that there will be forks of FOSS clients that remove these features by some users.
5. Paid clients:
   People do not want to spend a lot on services that they expect to be free or cheap, and spending $5/month on this client, $10/month on that client, so on won't scale, even though that is way less than the actual value they are getting.
6. Ads:
   Ads are usually underpaying and mostly make money for the ad companies instead of the client developers. Ads are also an invasion of privacy and may not be well received by some users.
7. VC funding:
   VCs put profit above protocol health, which may accelerate some issues that I will discuss later. They also may disincentivize the development of some apps (uncensored social media for example) for pushing their own agenda.

Even if we find some good way to fund clients, it doesn't end there...

## The cost of infrastructure

There are multiple types of infrastructure for Nostr, such as relays, services like Noswhere's search relay, push notifications, etc. All of these cost money to operate, and are the other half of what make Nostr work.

These have even more limited funding options, which have even bigger downsides:
1. Client funding:
   Clients already struggle on funding as I discussed in the previous section. This would mean infrastructure is even more underfunded.
2. User payments:
   Users do not understand the details and importance of infrastructure, and have no reason to fund it. Making this problem worse, infrastructure providers can falsely advertise their services, diverting money away from infrastructure that is higher quality and should be funded. This is already happening.
3. Grants from OpenSats and similar non-profits (*relays only*):
   Again, these suffer from problems specified in the last section about grants. These entities will likely want the highest value from their donations, therefore leading them to encouraging a few big relays than many medium sized ones. Since relays are more important infrastructure, and they could have more control, these entities can also exert more control over the network.
4. Data harvesting and selling:
   This would discourage people from using their providers, but this is likely going to happen to some extent. The issue is that it would not generate sufficient revenue for the amount of users it will drive away.

Both infrastructure and developers being underfunded can lead to issues that may kill the protocol, which I'll discuss in the next section.

# The risks of improper funding

## 1. The protocol fizzles out and dies without reaching critical mass

This is one of the less likely options since there will probably be people developing for the sake of it, but is likely. With client developers being underfunded and infrastructure shutting down, Nostr would become smaller and worse to use until it completely fizzled out except maybe a few people.

## 2. The enshittification of Nostr

This is the most likely outcome, and the worst one. As Nostr continues developing, developers and infrastructure developers will want to maximize revenue, so they will begin by making good products to attract users at a loss.

After they have a sufficiently large user base, they would slowly erode bridges to their competitors, only leaving what is required so that their users won't complain.

After this stage, it is likely that clients will start merging with other ones to make larger "everything" apps and kill the last bridges, turning them into proprietary walled gardens, returning us to where we are today.

# How do we fix this?

I have no idea. Please share your opinions if you do :)

Or, the most likely way for nostr to die.


Everyone read this

https://www.omegle.com/


yes

pic was a meme depicting reality


I fucking called it! The evil saylor arc is starting.


Derek told you about my intentions.
Ralf also told you this and instead you decided to ignore all that, so I’m not sure who’s the “bad actor” here.


India Swaps Russian Crude For Saudi Oil As Discount Dwindles

India Swaps Russian Crude For Saudi Oil As Discount Dwindles

            By Charles Kennedy of https://oilprice.com/Latest-Energy-News/World-News/India-Swaps-Russian-Crude-For-Saudi-Oil-As-Discount-Dwindles.html

India’s October imports of Russian crude oil were down 4% compared to the previous month, with increased imports from Saudi Arabia. According to https://ibcworldnews.com/?p=119098
, citing Vortexa cargo data, India imported 1.55 million barrels per day of Russian crude in October, compared to 1.62 million bpd in September.

https://cms.zerohedge.com/s3/files/inline-images/india%20ioc.jpg?itok=zn4nCpPT

The drop in October reflects a dwindling discount for Russian crude, which is frequently selling above the G7-imposed price cap of $60 per barrel, despite buying restrictions.

The fall in India’s Russian crude imports for October was balanced out by an increase in imports of Saudi oil. India took in 924,000 bpd of Saudi crude in October, compared to 523,000 bpd in September, IBC reported, citing Vortexa data.

India’s crude oil imports from Russia fell by more than 4 percent in October compared to September, according to figures compiled by energy cargo tracker Vortexa.

Total crude oil imports by India reached 4.56 million bpd in October.

India is the third-largest importer of oil in the world.

If the price is right, India has also said it would consider importing Venezuelan oil following an easing of U.S. sanctions.

"It is always good when more supplies come to market," https://www.reuters.com/world/india/india-may-buy-venezuelan-oil-if-its-cheap-minister-says-2023-11-01/
 cited Indian Oil Minister Hardeep Singh Puri as saying at an industry event, adding, "We will buy from wherever we can get cheaper oil."

On October 18, the U.S. Department of the Treasury lifted most sanctions on Venezuelan oil for a period of six months. Venezuela oil is heavy, sour crude, which has been in short supply. Despite the lifting of sanctions, the Energy Information Administration notes that due to “years of underinvestment and mismanagement”, Venezuela will “likely limit crude oil production growth to less than 200,000 barrels per day (b/d) by the end of 2024”.

      https://cms.zerohedge.com/users/tyler-durden

Thu, 11/02/2023 - 15:00

https://www.zerohedge.com/commodities/india-swaps-russian-crude-saudi-oil-discount-dwindles


Friendly reminder that it can always be worse… https://image.nostr.build/c426a5070249238aba2a2fc6d55893663e273f77095dc0f2ada7500a6d89f0df.jpg  nostr:note1ugtj0rkgjwyvf7e7hyrhfge39l4q7gn58p9n5l2we5ukuxf9ps0sv8lqvf


"Stop resisting, Stop resisting!" is one of the most instantly recognizable phrases of the new American century. When you read the words, you can probably still hear them shouted in your head, the echoing memory of a generational trauma, the indelible recollection of the moment that the citizen became subordinate to the state.


Good morning nostr,

We are about to enter the "then they fight us stage" and it is going to be fucking messy.

 - Build strong local communities. Improve your own skills. Stack relentlessly.

Then we win. 🫡


There are two viruses in that picture having sex. NSFW


wtf? https://i.nostr.build/60wa.jpg


Someone said some days ago in some NIP proposal discussion that we will run out of kind numbers because currently we're limited to 40000. Some weeks before someone else had complained that I had written somewhere that the kind number should be a `uint16`, which can only go up to 65536.

In the meantime, some people make NIP proposals that involve very different events, but that use just one kind number and differentiate events by adding `d` tags or by other tricks. That is justified in the name of _flexibility_: the idea is that by having a string in which people can write anything the protocol is automatically more flexible, extensible, powerful, magical.

But this is not true. Using strings to differentiate between what could have been differentiated by a number doesn't make anything more flexible, it just adds confusion and inefficiency. Take [NIP-58](https://github.com/nostr-protocol/nips/blob/master/58.md) for example. It's the NIP that defines **badge creation, award and acceptance**.

It makes sense for the badge creation to be _parameterized replaceable_ (kind 30009) and differentiated by the `d` tag, as each pubkey can create multiple badges, and it makes sense for the badge award to be a normal, non-replaceable event (kind 8), as badges can be awarded to many people and the awards never change. But it **doesn't** make sense that for each badge receiver to craft a list of badges they have accepted and want to display they have to use a _parameterized replaceable_ event (kind 30008) with a `d` tag set to `"profile_badges"`. Why this magical string?

I believe the idea was that people would be able to craft different badge lists. For example, they would use the `"profile_badges"` value for badges they want to display in their main profile, and some other value, for example, `"hidden_badges"` for badges they have accepted but don't want to display in their main profile, and `"rejected_badges"` for badges that they want to explicitly reject -- or something like that.

The idea makes sense, but does it really? We could have done the same with a kind 10007 meaning _profile badges_, kind 10008 meaning _hidden badges_ and kind 10009 meaning _rejected badges_. That would save disk space and bandwidth, it would make it easier for relays to index these events and, most importantly, it would make implementation simpler. In the world of `d` tags, every programmer that tries to implement creating these badge lists have to go to the NIP and hardcode the kind 30008, then look for the magical string that must be set at the `d` tag and write it, exactly like in the NIP, as a string, and add that as a tag to the event, the same is valid for when a client wants to support reading the tag lists. While in the multi-kind world you only need to hardcode one magical number. It's undeniable that `{"kinds": [10007]}` is a simpler filter than `{"kinds": [30009], "#d": ["profile_badges"]}`. You may say the differences are negligible, but I'm just trying to illustrate a principle.

I have the impression that in the minds of many programmers to be able to write a string gives them the impression that everything is more flexible and magical: "oh, I can write _anything_, while if the stuff is in kinds I would have to first get authorization from the NIP overlords". Maybe the NIP process can be improved, but ultimately this makes little difference. You can definitely write _anything_ in the `d` tag, but you can also write _anything_ in the `kind` field too, the actual requirement that exists, and that exists for both, is that others start using the exact same kind number or `d` string that you're using, and vice-versa, and there is no shortcut for that, you necessarily have to come to an agreement with others -- which is what the NIP process tries to facilitate.

We should use kind numbers as much as possible, and `d` tags only when absolutely necessary.


ⓘ This note has been removed for violating Fiatjaf Community Guidelines.


ⓘ This note just has the icon thingy on it, nothing special going on here - but go stack some sats you bitch


ⓘ This note violates nostr:npub12262qa4uhw7u8gdwlgmntqtv7aye8vdcmvszkqwgs0zchel6mz7s6cgrkj Community Guidelines for distributing false information about cats. The sacred committee of cats has determined that it is beneficial for them not to display the contents of this note on #Nostr


So many bitcoin influencers noting from primal. Pretty hypocritical considering all the “no blue checks” and “no custodial wallets” they note about. nostr:note165ywq7ms8kx8n2l7sg7d3ajp9wujja4av3tp04f57ljn8f6rc3rqcmemh8


I like to randomly put these notes, with a link to German language Bitcoin education, into shopping carts. The text means: Are you sick of inflation? What is sound money? #bitcoin is freedom #spreadeducation https://video.nostr.build/effb896e2014998d681d15a126e0bf7041e6c55d06cc554785b84ec8a5ebff45.mov


the mempool, over 5 minutes
https://minio.buyvm-lux-1.semisol.dev/static/nm/mempool.mp4


Until they realize the relay won’t work 95% of the time, is eating up their battery and cellular plan and doesn’t have much benefit.


Stacks is a shitcoin with its own token that the founder premined.

🙅♂


UMA is LN addressses but:
- incompatible
- with mandatory sender identification
- forced KYC
- with walled gardens (people can’t send or receive to you unless you are a “trusted VASP”)


David Marcus’ new standard:
- is not permissionless
- breaks compatibility with LNURL
- creates large custodian only closed gardens
- is hilariously complicated to implement
- requires the sender be identified
- could start turning over PII of the sender on payments to the recipient’s custodian

UMA can suck my dick


going back to build 23, dislike the design of current version of profile previews 💜


If I had a Bitcoin for every time the FBI said that, Satoshi would look poor.


A hack conceptualized by the deranged to unsuccessfully make Nostr work for private communications and violating the core of Nostr’s design principles


The face of someone that doesn’t use your shitty client made with high amounts of incompetence and lies :)


don’t be in the top 50k by followers? sorry, according to primal, your engagement is as good as a bot (and that’s fine, who cares, only the influencers deserve to show up on the trending page)

they aren’t incompetent after all, they have had to have a reason for this


Eden.nostr.land doesn’t block Tor :)


zbd is not nostr.
you have been fooled by a KYC app to let them have your keys and therefore the privilege of reading all your DMs and post as you forever while locking you in and not being actually decentralized.

your account is compromised.


Taler ded

https://image.nostr.build/d4076cf0a4cda28af01a95017566fa0ed4cd0baff3217be0c1bf75b031ddb4a0.jpg


We are at war, make no mistake.  Google “war machine”,  you get a pic of a marvel character.  Google “who runs the world”,  you get a Beyoncé song… they want you fat, lazy, depressed, dependent and uninformed…WE ARE AT WAR.

https://image.nostr.build/02579516b9a5d586d8cf7375734463ea5b4a291458347403b7c12a65c70c3097.jpg


verify your `getutxooutsetinfo` matches
https://uset.ln.semisol.dev/


EXPERIMENTAL ANDROID 14 RELEASE ANNOUNCEMENT

GrapheneOS is now based on Android 14. An experimental release based on Android 14 has been made available for broader public testing. Most of our features are already available. Certain minor features haven't yet been ported to Android 14. There may be more issues to address with the sandboxed Google Play compatibility layer to restore full app compatibility.

This release provides the full 2023-10-06 patch level for all supported devices along with the recommended security patches only included in Android 14.

Android 13 is no longer actively developed upstream and now only receives backports of the Android Security Bulletin patches, not the recommended patches included in the latest stable release of Android. Pixels are also now only supported via Android 14 and require Android 14 to achieve a patch level above 2023-10-01. Android 14 has had publicly available experimental releases since February 2023 and is already a mature OS. It also contains significant privacy and security enhancements which more than offset the attack surface from added features. These reasons are why we have so heavily prioritized porting to Android 14 and began to defer more and more of our other work until after Android 14 since around July 2023.

Please join #testing:grapheneos.org on Matrix if you want to help with testing the experimental releases.

The experimental releases are production builds of GrapheneOS signed with the official release keys. You don't need to reinstall the OS to test them and you'll continue receiving regular updates on the experimental releases via the
regular release channels. There will likely be a couple more experimental releases before we're ready to push out a release via the Alpha channel, Beta and then Stable as usual.

There are 2 ways to update to the new experimental release. You can either enable ADB within the OS and use it to override the update channel to the experimental channel, or you can sideload the update via recovery. Sideloading
the update via recovery is recommended if you don't already use ADB since it avoids needing to temporarily enable developer options and ADB along with temporarily trusting a computer with ADB access.

To install one by sideloading, first, boot into recovery. You can do this by holding the volume down button while the device boots to enter fastboot mode followed by selecting the Recovery option in the menu with the volume buttons
and then pressing power to activate it. You should see the green Android lying on its back being repaired, with the text "No command" meaning that no command has been passed to recovery. Next, access the recovery menu by holding down
the power button and pressing the volume up button a single time. This key combination toggles between the GUI and text-based mode with the menu and log output. Finally, select the "Apply update from ADB" option in the recovery menu and sideload the update with adb. For example:

[adb sideload felix-ota_update-2023100600.zip]

https://releases.grapheneos.org/felix-ota_update-2023100600.zip
https://releases.grapheneos.org/tangorpro-ota_update-2023100600.zip
https://releases.grapheneos.org/lynx-ota_update-2023100600.zip
https://releases.grapheneos.org/cheetah-ota_update-2023100600.zip
https://releases.grapheneos.org/panther-ota_update-2023100600.zip
https://releases.grapheneos.org/bluejay-ota_update-2023100600.zip
https://releases.grapheneos.org/raven-ota_update-2023100600.zip
https://releases.grapheneos.org/oriole-ota_update-2023100600.zip
https://releases.grapheneos.org/barbet-ota_update-2023100600.zip
https://releases.grapheneos.org/redfin-ota_update-2023100600.zip
https://releases.grapheneos.org/bramble-ota_update-2023100600.zip

To install the update over-the-air with the OS update client, enabling developer options, enable ADB, attach the device to a computer with ADB installed, run adb devices, accept the authorization prompt to trust the computer with ADB access and run the following command:

[adb shell 'setprop sys.update.channel experimental && cmd jobscheduler run app.seamlessupdate.client 1']

* Code Snippets above use square brackets remove but entering if copy/pasting.

SUPPORT FOR THIS RELEASE IS ONLY OFFERED IN THE TESTING ROOM ON MATRIX PLEASE DO NOT MESSAGE ME HERE.


so a friend of mine just sent me this. maybe this is old news but it's new to me. #holdyourownkeys
https://void.cat/d/E8HsYkq8EBi6weNbfVNrTq.webp


Why would you pay for nostr:npub18kzz4lkdtc5n729kvfunxuz287uvu9f64ywhjz43ra482t2y5sks0mx5sz ‘s cellar service if their relay stores events forever? For the privilege of being able to broadcast events with an older timestamp that make no realistic cost difference to new events?

Give your money to relays that don’t try to create the problem then sell you the solution.


eden.nostr.land offers permanent* retention without created_at limits for up to 100k notes without paying extra, with the option to buy more coming soon
*as long as you continue paying

just saying ;)


It's cool that you can compile bitcoin core to support fiat transfers:

`./configure --enable-usdt`

;)


good morning nostr 🤗


🤫
https://image.nostr.build/29ba8b492724899a6b16798448523cbde527e9e7cecfe254fdc9f2d9f870830d.png


I’m making a big investment in terms of time and money to make Nostr.land the best relay in terms of performance, scalability and feature set while staying sustainable (this is why one time fees suck) and being affordable. The current price was inadequate for that.


eden.nostr.land offers long term note archiving at no cost. :)


big architectural changes coming to nostr.land which will allow me to offer affordable and fast event archival, an actually affordable high quality aggregator and search in one connection

and working on noswhere.com scalability + tag search 👀


Ripple Won't Go Forward With Acquisition of Fortress Trust

"A few weeks ago, we signed a letter of intent to acquire Fortress Trust – we’ve since made the decision not to move forward with an outright acquisition, though Ripple will remain an investor," Ripple's CEO Brad Garlinghouse said.

https://www.nobsbitcoin.com/ripple-wont-go-forward-with-acquisition-of-fortress-trust/


regime police in Iran opened fire inside and outside a mosque today, killing and injuring dozens of people who were protesting against the brutal regime.

you may not see or hear what’s going on in Iran anymore, that’s because they make sure that their disgusting actions don’t make it out of the country.

they still fight everyday for their freedom, and get killed for even trying.


Dedicated archival relays make no sense and are a waste of effort and money. Storage is the cheapest thing to exist.

Eden will soon offer free 100k events per user and then charge you $1 per 100k events you are over with limitations (no file storage, no spam)


It costs at most $5 to store 100k notes for one year. (assuming you are already paying for a good quality relay monthly)
Pay wisely.


A majority of relay costs come from not the notes stored but the user count (time spent for server maintenance and the compute required to handle users)


nostr will not be an everything protocol imho and shouldn’t be one
there will be protocols for direct communication like simplex
there will be protocols for public information like nostr
there will be protocols for money like bitcoin and ln
and so on


Voting is a disaster and will continue being so.


It feels like everything has been said in the first 3 podcasts and now we're just regurgitating.


Would anyone be interested in a bounty for implementing support for not FCing a channel and letting the user decide if an HTLC gets stuck and a peer is offline for certain channels? I can trust some of my peers


Real talk you have no idea how sophisticated physical surveillance is…

You think you’re “anon”?

Lol that’s cute.

Have you been in an airport in the last 5 years?

You’re fucked.

Wake up.


Here to build freedom tech, and tools to help people get the most out of it

- eden.nostr.land: high performance paid relay
- nostrplebs.com: NIP-05 and nostr services provider
- wss://relay.noswhere.com: high speed and quality search
- new.nostryfied.online: easy backup of your events
- nostrnests.com: audio spaces
and the list goes on


WARNING: the lnbits.semisol.dev mint will be rugged soon (NOT nuts.semisol.dev)
withdraw your funds in the next 7 days


I propose removing the `description_hash` requirement from zaps as many have already started doing so with bare LNURL-pay.

I know that many nostr client devs haven't even checked this from `zap receipts` to begin with – your laziness was worth it!

Nostr client and zap server devs: What are your thoughts? Please give feedback in the PR 🙏

https://github.com/nostr-protocol/nips/pull/788


Introducing accelerated Instant Backups, brought to you by nostr:npub12262qa4uhw7u8gdwlgmntqtv7aye8vdcmvszkqwgs0zchel6mz7s6cgrkj

If you want your backup instantly, literally lightning-fast, you can use this:

https://new.nostryfied.online/

Thank him for this.


☠ ☠ ☠ nostr:note1fss9jj3vg7z2rx0evp7nrnwg0rcese674jehq00aejzx2ndymwcs37nznc


The new backup service will be lightning-fast, eliminating the need to wait.

We will also store your files for you, allowing you to broadcast them whenever you want.

It can't get any better, and it's coming very soon. nostr:npub12262qa4uhw7u8gdwlgmntqtv7aye8vdcmvszkqwgs0zchel6mz7s6cgrkj  🤜🤛 nostr:note1xf5t25jmalcnxwqpj6jgd2gge32gdx9syvwm36fqjxv5qtf5zw6skcpkml


Something big is being worked on 🤫•


A lot of talk about #ZBD today. There's only one thing that matters in this discussion. If you don't control your own npub/nsec then it defeats the entire purpose of #Nostr.


I’m genuinely concerned about how much more you value connections and being on the “right” but unethical side of some shitty companies over integrity


A custodial solution you refuse to use to yourself but freely recommend you to anyone else is a big red flag


This is not incompetence, this is not priorities. This is outright malice.

Please stop trying to deny the existence of any negative possibilties for the sake of not angering a person that claimed they made Nostr happen like they were all the devs or something


hmm primal still shows my media i thought i deleted from my nostr.build lmao


“…the freedom of Speech may be taken away, and, dumb and silent we may be led, like sheep, to the Slaughter.” https://image.nostr.build/4360ca662845dbb853257ab587b7421f1362bb7af84687735ec90f02eee63033.jpg


should I add a US relay to eden.nostr.land?


My man Pablo is adding nostr:npub1y27q6mdnjf0mkl3ev2nh7dqsk4yu3hyqmhzfz8tg3hdpwdmdfdlsczzps3 search to his Highlighter application. In the near future, you'll also be able to search for "highlighted content" via our web search interface. This is all done easily, thanks to the openness of Nostr.

nostr:nevent1qqsg2g32kaqmwzex44lag2x8y4gz8ewwt59nslrx0gds4kh4d9fev4gppemhxue69uhkummn9ekx7mp0qgs04xzt6ldm9qhs0ctw0t58kf4z57umjzmjg6jywu0seadwtqqc75srqsqqqqqp3lcc43


Anyone want to offer me a translator job from UK or US?

Figured it doesn't hurt to ask.


Hey ZBD, you forgot nostr’s value proposition: owning your own data !
🤣


Watching my boss regret the last 5 years of him bitching at his father, who is now terminal, and seeing him make every effort to spend time with him.

This is your simple reminder to tell the ones you love that you do, and to spend the time we have, cause tomorrow isn't guaranteed.


buy #bitcoin

follow for more top secret trading strategies


Imagine if to use PGP it had become normalized that you had to buy a specialized device from a PGP-focused company… This is basically where we have landed with bitcoin cold storage.


Nutminers need nuts to mine. These nuts will go to Semisol's nutmining pool.

lnbc21u1pj0egyusp5jc00j9px87ncmda3rynumm9u8ytr4je8p0jd5ahzywj2c62tvelspp55md6dqh53u0j6gr0pvx28g0t0l3ej6n70u50f8qgfdkacuu9y07sdq4gdshx6r4ypjx2ur0wd5hgxqyzjnccqpjrzjq2wyade0xm3ur6af3eyr2jr87euj3ncag8fxrnc6kavg9murjta02z709gqqs3gqqyqqqqlgqqqqqxgq9s9qxpqysgqrqd84kesn2ucmgswn0yvd267mn5ffzmnc8lhfq7nzyjc5wdqasm972ysprpcq799u5hr8rtdkpva5z78kn8jra2rx6tyxsarx4k332qp5ue8uq

https://image.nostr.build/7eb929f7ab7ee3ea4807dc45203cf049a6789f4984d01bf6da0e5b072dd95efb.gif


“ten minutes” ok well continue believing what you want to

you copied my and nostr:npub18ams6ewn5aj2n3wt2qawzglx9mr4nzksxhvrdc4gzrecw7n5tvjqctp424 NIP-05 service, wording and ToS nearly as is. You gave your customers an inferior service lacking even the ability to manage NIP-05s for the sake of capitalizing on the hype, and you never built it out fully afterwards.

I am building this because many people are telling me your search is inaccurate, slow and sometimes outright doesn’t work. I am actively working on giving my users a high quality product that is useful.


Tales from 4chan
photo_1988@13-07-2019_02-15-49.jpg

https://bae.st/media/54b13b0b52d4825a8c871d4320ab8662bea001fbe9935e278bd0c09f5d0f5a40.jpg?name=photo_1988%4013-07-2019_02-15-49.jpg


I'm always bullshit, #coffeechain We just have so much going on, it's hard not to be.

https://image.nostr.build/00d7d2b3914a0741188d781a576d537245c0229c8858466c98a6a87bc99b309a.jpg


Those censorship memes hit too hard. I got removed too 😞


I don't get the nostr.band strategy. I feel like they are just trying to:
- Copying others and passing the ideas as their own
- Burn money on ideas that won't make reasonable profit, unless they:
- Lock people into their products with their APIs, their browser, their appstore and similar, trying to find a way they can monetize users and clients using their monopoly and position

Nostr thrives because it is decentralized and people have choice. Maybe think twice before locking yourself into one provider.


For those that were at #bh2023 or downloaded my slides and were curious about nosWhere: I'm happy to announce that nostr:npub12262qa4uhw7u8gdwlgmntqtv7aye8vdcmvszkqwgs0zchel6mz7s6cgrkj just finished phase 1 of nosWhere for you all. You can now add our relay to your Nostr client to improve your search results.

nostr:nevent1qqsdvvmswg9dhn6dg3zhfad0qx7clxtutn9m6dtl0rkgexrxceucmesppamhxue69uhkummnw3ezumt0d5pzqg4up4km8yjlhdlrjc480u6ppd2ferwgphwyjywk3rw6zumk6jmlqvzqqqqqqy4rghhx


bend the knee to nostr:npub12vkcxr0luzwp8e673v29eqjhrr7p9vqq8asav85swaepclllj09sylpugg and you will be rewarded

isn’t that right nostr:npub12262qa4uhw7u8gdwlgmntqtv7aye8vdcmvszkqwgs0zchel6mz7s6cgrkj

building your own nostr client fixes this nostr:note15kwtvu6qtp0dkvrj5cgd22x5x5swges2jnclza0cajj022cs6d9qh7r8jr


yep. you either play by nostr:npub16c0nh3dnadzqpm76uctf5hqhe2lny344zsmpm6feee9p5rdxaa9q586nvr's stupid rules or you basically are suppressed from the view of 90% of normies on nostr that get fooled by a shiny UI and don’t truly care about censorship resistance.


#freeRalf #freeSemi

The way you make something stronger is by first breaking it. nostr:npub12262qa4uhw7u8gdwlgmntqtv7aye8vdcmvszkqwgs0zchel6mz7s6cgrkj broke nostr:npub12vkcxr0luzwp8e673v29eqjhrr7p9vqq8asav85swaepclllj09sylpugg so now fix it and make it stronger/better. nostr:npub1ezw0xm0w52rd4yfdg9zlw9qvwdy46alzelklkefptrd203m37tuq4djmeg is just too generous with the zapper and triggered the kill switch. So make a note and reset.  nostr:npub1ezw0xm0w52rd4yfdg9zlw9qvwdy46alzelklkefptrd203m37tuq4djmeg He’s just got a big zapper, can’t hate a guy that. Let’s remember why we are all here, not to fuss and fight, but to break shit and then fix it to make it better/stronger. #plebchain #nostr


#DeletePrimal
https://void.cat/d/QCjtDY3rHSHDJWUskD5BKj.webp
#nostr #plebchain #FreeSpeech #NoCensorship #SelfModeration


Content filtering is not a client’s job, I can do that myself. #primal 👎 nostr:note12s2lfp72adgkr9yxyewq94m7e7k2jkrxltake2gyv4mzwvsv6tssxg3l5m


Smart Vaults says that they "use" nostr, but they ask you to sign-up on their wait-list with an email address and follow them on X.  🚩 🚩 🚩 🚩 🚩 🚩 🚩 🚩 🚩 🚩

https://www.smartvaults.io


For some reason I became a temporary spokesperson for nostr, I don’t know why, but I don’t care, I’m not in this for the clout. Most of the shit i build, people do not use. I’m just happy I was able to build something that people actually like and use for a change. Everyone has played an important role, I don’t think it was a single event that made nostr what it is today. That’s what makes it special!


yikes. this is super cringe af.
no other way to put it. sorry.