so long and thanks for all the fish

I’m going to be taking a step back from here

nostr.land will be maintained for the forseeable future, for issues about it please DM nostr:npub1gt9gms5hr3l6548zxgn7xvcvcmzxyzgdsrrelrdwxwmj0exz7jaqdjlxjt


I’m not the one that is getting more of the profits than they do work for Nostr Plebs, and then complaining about things.

You can get the relays list done once you stop doing everything to hold the project assets like domains yourself while actively distrusting me that I will rug you from the start.


beep boop! this note has been mined in around 027933s with 41 bits. nonce: 0001234883235380


If you need a seamless way to backup your profile and follows, you can use https://hist.nostr.land/
Simply add this relay wss://hist.nostr.land to your relay list and you’re set. Whenever your profile list or follows change, they are automatically backed up. When you need to restore, go to the website and restore to the version you like. It’s that easy. No need to do periodic backups


You might be a Nostr Elite if...
1) You have over 1000 followers, but only post every couple of days or weeks.
2) You are famous from "someplace else", so you don't feel like you need to prove anything to anyone and expect everyone to recognize you from there.
3) You hardly follow anyone else, who isn't an elite, or your follow list is stale and you don't care.
4) You rarely repost anyone else's stuff or hang out in their threads.
5) You rarely respond to mentions or tags, unless they're from another elite, and you feel put-upon by them.
6) You don't actively search for new npubs to follow or interact with.
7) You mostly repost things you've posted elsewhere.
8) You post things and then only respond for a short time.
9) When someone reposts you, you don't feel curious to find out more about them.
10) You think there is no Nostr Elite.


GN🐶🐾🫂💤😂🤣
https://i.nostr.build/nWnvE.jpg


Me waiting! 🐶🐾🤣😭 https://i.nostr.build/9zVoQ.jpg  nostr:note1uvsuwhk6mxgcjze5vav5df668hr9y4a4hrnrrt823fyc73xx3nkq67z3k2


If the only solution for Bitcoiners to have private payments is custodians (be it e-cash, Fedimints, etc. as is all the rage) then Bitcoin will simply be dead for me. Feels like the ultimate cop-out.

Custody is the line in the sand that cannot be crossed. Custody not only opens up immense risk for loss of funds, it also makes these tools far less resilient to adversarial environments.

Can "they" stop every Bitcoiner from keeping 12 words safe? No.

Can "they" stop a few popular mints from operating? Absolutely.


Do nostr users even want nostr to grow?

Do folks view nostr as the freedom tech for all, or a way to be in a bubble away from those you dislike?

It seems that there’s some pessimistic self sabotage that will surely make those who join leave after one day.

Ego can kill.


Hey look, it’s nostr:npub1e0z776cpe0gllgktjk54fuzv8pdfxmq6smsmh8xd7t8s7n474n9smk0txy https://image.nostr.build/219927b7ea3172f539c295be90660b9613d1edcda6f94d864f9c25b7a5b67546.jpg


As of this moment I resign from my (nonexistent) position as network engineer and will take up a job on a farm shoveling pig shit, but it will be 100x better because I will not have to be in the same industry as people that think NAT is a security measure


If I ever write a note with only a GM, I've been compromised.


what if you could easily:
- create your own algorithm
- generate mute lists from any criteria
- use the most accurate content classification/recommendation APIs
- create your own nostr stats
- integrate nostrscripts
- analyze custom datasets

would be cool wouldn’t it :) nostr:note1krc283u2p978rasa8v20ycv9wanehk0tgtt77235zjshq0v42n7qafu9l8


zaps on nostr by month
https://image.nostr.build/eb771a991e0564cb6b9965f7e6dced831b2874edd87380295484dab593ff2514.png


not really


billing


different MAC addresses?


not zaps.
just not always giving them engagement


that also happens


it does


probably for some things, but some topics need to be discussed I guess

but that’s rare


everyone makes mistakes sometimes


social media pushing influencers that always push optimistic content is 90% of the problem

people wanting to special is 5%

the other 5% is the other cases


1. Start donating directly. Grants won’t work.

OpenSats and the like are great for people that are lazy and don’t want to donate directly, but such centralized entities become kingmakers for the protocol.
For the $30/month you get, consider paying for quality relays, subscribing to your client’s subscription service, etc. And I also blame devs for not implementing an easy way to donate.

2. Pass on value.

If you make a client with NDK, donate to NDK. If you use designs from someone, consider passing some % of your donations.

3. Stop doing shit for free.

You don’t have to do designs for nothing. Or give support with libraries.

At the current stage, people don’t have that much revenue, but you could ask for a % of zaps in exchange for support/designs for example. nostr:note19jaf989dy6ejkw08r9lmwmgtdcpyhe5kjs6afe7xkrj2pwykfx3sg2280s


primarily bitcoiner delusion

but for any given topic you can find someone that matches what I said


Thinking Bitcoin can handle even only the “most important of most important transactions” on L1 is dumb at the current design.


Do you really think a privacy upgrade is coming to bitcoin-core when most (or all?🤔) core devs use their real names?
We need a culture shift


The bitcoin block size was increased
It will happen again


Queries need to be more advanced


what. just what.
😭


Will you also show signed notes with an invalid signature?


LNbits people rugged all mints on their “demo server” while they could have made them withdraw only

Their demo server also got drained


don’t depend on big entities to fund FOSS devs.
fund them yourself directly. nostr:note1awa6kyufetxrvsl5j0s583hzxrcuah9demk8y5yyz6k7lhun9knq60rgtr


Nostr.land does not store IPs. If you start abusing it it’ll be logged based off of patterns.


I hope you enjoy your delusions… whatever, not worth trying to convince people when it won’t work. nostr:note1hwa0hcf3me3wxwdda9gx4959wfqk3n88evahu9us48s9yfjl96ss0dfwne


check DMs for more details


there will be some features you will love for the relay you are running right now


those are just troll accounts, yeah


I think it means it has failed validation in some way

you should not show NIP-05s at all if they fail validation unless it’s the user’s own profile to inform them


Go is awesome in general

cross-compilation isn’t hell
error handling is a bit verbose but it helps you avoid bugs by making you think about every potential failure case
performance is good
goroutines and channels are just awesome

the runtime’s a bit large for my taste but whatever


the nip05 is failing validation


I'm talking about a KV store that is distributed. FoundationDB uses the SQLite btree code, or their own own btree based storage engine on each node for local storage. here's a talk about it while it was still in development: https://www.youtube.com/watch?v=5iqKu1pVDvE


I honestly don't see the benefit of that anymore with the designs of newer KV DBs.


“but does it have separate key and value logs?” what do you mean by this?


it was independent & paid until Apple acquired it and open sourced it, it also has another big user that’s unrelated (Snowflake)


https://foundationdb.org is what I want to use actually.

you can add more nodes and it would add that to your available capacity, you don’t need to replicate your DB to have multiple frontends and you can outgrow what you can fit in one server


I have some very specific requirements, including, but not limited to:
- control over the entirety of the relay “frontend”: this is primarily to process filters, for example, directing them to different DBs or modifying
- support for multiple sub-partitions of the same DB
- attaching custom data to events
- control of query execution for limits
- custom handling of event replacement and deletions
- support for swappable KV backend
- support for multiple instances running on different hosts on the same KV DB


I’m working on a relay DB and I’m working on something to support this


Who?


Translations are going to be a key part of Nostr.


don’t bother trying to do anything on nostr that goes against what the top 10 most likely paid off influencers want because most people are sheep


than the average person


Noswhere will archive all your notes, as long as we can use it to our benefit somehow.


sorry, forgot the “average person” at the end.
also my initial estimate was 95% but that would piss off that 95% propaganda loving bitcoiners


About half of people on Nostr calling themselves bitcoiners have only slightly better critical thinking skills


dataset of what? historical follow lists?


Looks like this claim might be questionable. A few attempts at confirming might not be lining up. Should keep an eye out for this. https://i.nostr.build/2RQ35.png https://i.nostr.build/Le232.png  nostr:note1pa65jnhw80yc57cpx0e9n6rac8559wmevduuem4p8k93mfvfyymsk7rs5d


Hi All!
By popular demand, we are planning to offer a completely free account! It sounds funny, but we are serious.

Full KYC Account (*free)
- 1GB of storage
- CDN network
- Free Media Gallery view

*In exchange for all of your verified KYC  info (name, email, address, gov issued ID), permission to sell or do as we wish with your data, media and viewing patterns.


What people portray operating a blossom server like: you are helping decentralization
What it actually is: dealing with garbage uploaded 24/7


1 machine for NAS, 1 for hosting your shit, 1 for LN node if you want one.. that’s all


No not at all


all you need is 2-3 servers and like 2 switches, one 100G one 1G… more is excessive
100G and 1G are not going away for a while


I set the TTLs to 1h. DNS based failover is a bad idea and I’ll drop the healthchecks


had to deal with 3 invoices on the same day


I am somehow very good at bikeshedding my own projects and this is bad

this time it’s about whether I should use Rust in my control plane or Go, except that I know shit about Rust


I do not believe Nostream supports cancelling queries so you could rapidly open/close subs. The event tags index is not implemented properly leading to all events with a certain tag being loaded for a JOIN. If this exceeds about 32-64MB for a single query it will start spilling over to disk and amplify the attack by wasting your resources on context switches, leading to disk IO being wasted and more CPU cycles to load/save from/to disk.

Bonus points for using IPv6 to get around ratelimits.


Hmm… don’t mind if I do


🐶🐾😂😂😂 https://i.nostr.build/wGmr2.jpg


This can and will happen with Bitcoin


thanks, I just got 2 emails and a personal DM from 3 cloud providers saying I have an invoice, and it has not been 24 hours since they were issued


Challenge: Create a mapping for each Nostr event to a unique string so that when events are divided into fixed size buckets, ordered by this string, ensure that any query touches as few buckets as possible.


Some relays are stupid and ask for NIP-42 because “the filter will match DMs” even though it is just a catch all with no kinds.


Every A in Australia is pronounced differently.
	-atzyrus, May 2015


So who the hell would know if 80% of Whirlpool liquidity was controlled by one entity. Sure it might cost but once it’s in they can remix those forever and imagine the returns they could get…


If the coordinator could detect you mixing 2 UTXOs at once, it means the coordinator has deanonymized you


The one input per mix restriction was enforced client side.

That can be correlated to say that 5 UTXOs lack common ownership with each other.


One flaw with Whirlpool was you could only mix 1 output at once. Which could be used for correlation.

An RNG that newer outputs five 9’s in a row, or always passes statistical tests, is also broken even though it may “seem” random


Client funding needs to be more common


Apologies for the crosspost.

If you are passionate about our project and planning to attend any conferences this year, please reach out to the organizers and ask them if they have invited anyone from our project to present on it. This is the only way we may be considered to appear at many of these events.

For reference, my plans so far for the year are to attend the Oslo Freedom Forum, to speak & operate a donated maker booth at the Nashville conference, and will also be at BTC Prague as an attendee. https://image.nostr.build/4874129af926f3f58da5b224aa67e2c6424cf05f407218feef314479593fa4b9.jpg


1. Reevaluate your life choices


MUST


nostr stats are too limited


next time add wss://hist.nostr.land


You should get a DM reminder when it is close to expiring


and it’s a subscription


just use nostr.land. they are the same now


Had a one-off issue with Noswhere translate leading to downtime. Fixed.


negentropy + cursors is the way…


Sorry, I’ll pass


You have no choice really.


Most importantly, an attacker can request re-Initialization of the channel while only having the channel state, allowing them to pretend to be the public key way after the channel gets cut.

I’ll also be introducing a control command to stop using a channel.


I’ll be doing some revisions to the spec today for fixing some flaws.


Channels cannot be correlated to users unless:
- you leak via IP
- you leak via activity times
Both of which apply to all schemes.

This is only for obscuring who a user has communicated with at all: if an app establishes channels only when DMing, you only leak A has initiated a channel with B, but adding noise reduces this risk.


The only reference that I could find after looking through the spec a few times is a tag, and I couldn’t find any other documentation on this.

There also seems to be an assumption that there is strict message ordering.


The real pubkeys.

I believe this is strongly metadata leak resistant as channels can be established before they are needed, or when not needed to obscure other details like who was ever communicated with.

This can be, and the specification permits future re-initializations to be performed in the same channel.


Post-compromise security refers to recovery from a total leakage of internal state.

The DH ratchet uses continuous key exchanges to update itself in a non deterministic way.

In your case, this is not actually a DH ratchet, but a symmetric ratchet without any data mixed in (the root) being used to feed the sender and receiver ratchets. This makes the system state determinstic and gets rid of post-compromise guarantees, and has equivalent security guarantees as using a single ratchet for send and one for receive.

I also do not see how the “active participant changing” would be defined in contexts where there’s concurrent events being sent.


No. You only need one prekey.
The initiating party uses an ephemeral key.

The shared secret is used to derive 2 private keys, one for initiator to target, and one for target to initiator.

When sending a message you pick the private key depending on your role in the channel, encrypt the message to the key itself, and put it in an event signed by the key. To receive messages you look for events by the other side.

This also comes with plausible deniability.

Channels can be rotated and this provides stronger security guarantees than gift wraps (sender and recipient anonymity).


Establish a new channel. Done.

fyi, your protocol lacks post-compromise security as the ratchet state is advanced deterministically. the post-compromise security comes from extra data being mixed into the state when advancing the ratchet that may not be observed by an attacker post-compromise.


The protocol provides no benefit compared to ephemeral key exchanges.

One part of DR is post-compromise security: if the current state of the ratchet is leaked, the mixing of new secret information via say key exchanges will render it unusable. The NIP lacks this functionality.

The rotation of encryption keys every message does not provide any benefit except the fact you can authorize new devices without giving them access to previous communications, without the post-compromise security bit.

The message key being leaked without the ratchet state being leaked is a very unlikely, if not impossible, scenario.


Broadcast a zap receipt or acknowledge that it did happen.
I would not broadcast it after withdrawing to encourage people to use the recipient’s mints.


I'm selling the seconds of a day, where the first second after midnight is called "epic", first second of every hour is a "rare" second and the first one of every minute is an "uncommon" second. Then there are the 23 "smooth" seconds, from 01:01:01 up to 23:23:23. And finally there are also the 11:11:11 and 22:22:22 seconds, which are the only 2 "regarded" seconds. I'm about to release a second scanner app, to see which seconds have special rarities. Expect an airdrop soon, but you can start bidding now!


I would not consider this as a zap and would not broadcast an event. Then try to withdraw all of it automatically nostr:note1nz84y0yrdkss3ktqqc05ddztws98u9kg4pcmehljnj4seq0p4jxqq72zch


Fraud proofs are hard because you can’t easily prove that you aren’t hiding shit from the mint. Broadcast it on a relay the mint can’t read from (IP blacklist for example), and you just framed them for something they couldn’t respond to.


You could send bogus events as well


I just said use a dedicated tor circuit to query for events on each channel.

You can’t correlate two different circuits via IP because they have different exit nodes.


the worst a relay can do is drop messages.

the key generated for channels is completely unrelated to the init message, and it can be queried from a dedicated connection on say a different tor circuit.


prompt injection is still a big deal sadly… there’s actually dedicated models for summarization out there.

you could fine tune existing summarization models to take additional context input like reply chains via tokens


LLM translation is still far off but would be great… the quality of translations still are suboptimal with the big clouds, so on device, especially for some languages, will need time to mature

also, I feel like finetuned models designed for content curation and summarization will be the way. the more specific the tool the more accurate it is for a task.


articles


I looked into it more and I think that the simplified DR protocol doesn’t provide the full security guarantees as the standard DR protocol, and it’s basically on par with my proposal.


we could probably even integrate this natively into the channel spec.


s/forward secrecy is possible/forward secrecy is the default/


not long. wrote it up in an hour or two.

compared to gift wraps, it provides DoS resistance as you can only ask for events in channels you care about, relays can filter initialization events using pubkeys, forward secrecy is possible, and plausible deniability is also possible since any party can forge a conversation making any evidence as good as “trust me bro”


also, plausible deniability.
someone can’t prove that you said you’re running an unregistered money transmitting business in a DM


Introducing a new general purpose event encryption proposal that completely hides the sender and recipient including from relays in a way that is DoS resistant, and has plausible deniability, and forward secrecy.

https://gist.github.com/Semisol/bc0b36915d9898e03f150e1a8cb25c00


I should add NIP-42 support to my indexer

Also, I don’t have your relay indexed, since it has no benefit (I already direct connect to relays) while adding additional load


congratulations you just encouraged everyone to add you to their private mute list


https://tillitis.se

But signers basically have no benefit if not hardware to 95% of users. On browsers you can use an extension. For native desktop apps you probably entered the management credentials for your signer that allows you to download your nsec. On mobile maybe. And for the average person this is not worth it.


https://youtu.be/b2F-DItXtZs

Take this video, replace the 2nd bear bullshitting about MongoDB with 50% of Nostr developers, and replace MongoDB with insert new crap NIP here


🤔 nostr:note1auxuu075atc5gly0rn5x0m5fy89utw67yuuu6epq50phv6wfv22smhuh9j


WoT reports are dumb
Who you follow != Who you have the same moderation views with


408 Request Timeout

could not find point in 1 minute


From LNbits to my own code. I have an invoice server connected to my CLN node, and I’m using a rune to restrict access to receiving payments only.


🚨withdraw your sats from ln.tips bot NOW🚨

you can use @BitTipBot as custodial alternative in telegram if you want to stay there


I put a switch in the cable
Wait
The cable controls the data

😭


hope it was worth it nostr:note1c4r3kz3fyfk5sx9tgrq8tz6udq2xw0el2lpekwe4cvd00jtf062qs5latk


Nostr.land payments and my zaps will be down temporarily.


more accurately “if they don’t care”


Nostr.land has native Tor.


IPv6… :)


“so you see, bird allows routers to synchronize routing tables using BGP, and that’s what makes the internet work, and the internet can be used for transmitting money via LN or bitcoin” nostr:note1s4r8cmvdny833v98xla03t4r0ksxgzj0lpf8c069a2px7mk4yvhq5k2ft5


The authors of bird should be thrown in jail for being a money transmitter.


“Free” is not the coreect term


Note: vm.overcommit_memory=1 will fix 50% of your server crashing issues


Bitcoin is under actual attack and influencers are still crying and distracting you with ordinals and rare sats. It gets so fucking tiring


Fuck you too 😼


lnurlauth is passkeys but worse change my mind nostr:note1ad4ghz3ls29hppt6ntgn5uv0n790dhcplzffv4d64thc5n9d7kyq2p6475


Wow. https://image.nostr.build/0ab6c1403eb8b4e4020bd8be7eb9c88c4104b33b56e68d10d67c213eb9c04df7.jpg


Logs


Re: NIP-17. TLDR: if I am not wrong, it does not make Nostr DMs safer 🐶🐾🫡
(I am glad to be proven wrong) nostr:note1wx323qyqsyhc0gwept8e6cj7c25tmgjmle3vre4jvdtk8j6q8ndqk5h0y8


gift wraps do not reduce relay-related risk while increasing implementation complexity.


don't talk about freedom, if you don't mean it


only use relays with NIP-42 enforcement for DMs, simple

the relay can already know your pubkey by linking it through your other REQs and your IP

you could also establish a key you use for DMs to a specific person and another to receive, and rotate this every so often

gift wraps are a client DoS vector and do nothing to actually obscure info from relays


they are not
NIP-42 is


Passwordless != usernameless


Primal is the Coinbase of nostr


A top Nostr client is paying $1000/month to twitter/X to be a verified company and selling itself as Social Bitcoin Wallet..! What is their business model? https://image.nostr.build/a561aefa843ad5fcf75e1828c0814ab21f467f7b9699cb3f10d1688cd625c54e.jpg


Essa é a coisa mais incrível do Damus… gosto muito da ideia de vencer a barreira da língua! nostr:note1a7v393kazn8yrfnv2wytwnts6aw9a69yjc4qgat28cdc3xjq50wsqjux4k


If you are looking for affordable translations for your client with competitive rates while not sacrifing quality whenever possible and wider language support, DM me.

Still in closed beta


We got thai translations now 🤙 hope this helps read #siamstr content, a huge part of nostr now unlocked in Damus 💜 nostr:note12xw5mq4ma6my7fskxfr4hnuhegtya9cjcdghfmwd9c55texzxhfsrk792x


Not having any form of ground fault protection + shit like this = ☠

Otherwise it would immediately trip and they would realize they are doing something incredibly stupid


I would not trust my communications to be 100% secure unless it was software I wrote or audited using already established crypto libraries only on devices that are specifically isolated for this purpose


Multi-cloud is the way you cannot convince me otherwise


They never made it easy to run it.


Does it in any way relate to a specific Bitcoin event?


Depends

could provide some guidance but I’m too busy with other projectd right now to fully commit to it


that part is still somewhat WIP, but that’s what I’m going to get sorted out soon.


Did you know Damus Purple includes a universal translator? 🖖

Today it gets even better. We heard you #siamstr: Purple now includes Thai translations 🎉

See how auto-translations can significantly improve your #nostr experience. Sign up with lightning at https://damus.io/purple/checkout or use the side menu to join purple with apple pay. Enjoy! https://image.nostr.build/c3da21e6d4d90dc89c35f7b30b214189adb86aaf573b240cee359cab4ab8a3f6.jpg


Just becauss it’s shitcoins doesn’t mean it won’t affect you. nostr:note1y3dv4k04qycx4n4fq8rttws7nv4p0e49p2hhllfuhmmw82r7nqxsx5yn7w


Have fun breaking OpenTimestamps

And payment codes


If a guy reselling hobbyist electronic components and 3d printed parts out of his basement makes you nervous about your multi-million dollar company's profit model, there likely are issues with the products you're offering, and/or the amount of value you're delivering to your customers.

(And no, this is not a reference to just one individual or company.)


* KYC on-ramps
* No protocol level privacy improvements in bitcoin-core
* Wasabi collaborating with Chain Analysis
* TornadoCash arrest
* Roman Sterlingov arrest
* ETF
* Monero delistings
* KYC all miners
* Samourai arrest

Are you sure we are winning?


And it’s one interpretation of sats


impossible


noswhere will retain your notes as long as they are useful to me even if they are ephemeral or you set an expiration
even if you don’t send anything to the noswhere relay

anyone can do this


yeah, precedent is being set and it’s awful

what even qualifies as a money transmitting business? does my LN node count? (certainly more than a blinded CJ coordinator) does an ecash mint count? what if I make software that allowed mixing like Tornado Cash did? (founders got arrested)


The charges though… they were a coordinator, they did not custody or control funds in any way, how is that a money transmission business?

willingly assisting money laundering makes sense, but some cases are questionable, and I don’t trust their evidence

scamourai is gone, good, but the why is 🤮 nostr:note1cddcm56spgsyfpuajkf647vyrxhe3naw9m6tmhxkzks62rqn0hfq4phk5y


The environment is evolving
Bitcoin must too


the exploit is not related to taproot


usually
- don’t be controversial
- be on “good terms” with the client developer
- do self-censor yourself


Yeah. Most people view v4v as get first pay later.

Which is a horrible model.


Get the content first, and pay whatever you think it is worth afterwards (usually zero because why should I spend my money on this content when it’s free???)


it was not a mining pool but it worked somewhat similarly: you get paid in nuts for submitting a share

those nuts could be anything


There seems to be this myth on here, that programmers, system admins, designers, and other techies are incapable of human communication and all ideas are hatched out by one man sitting silently alone in his mother's basement. Whenever others see us discussing or debating anything, they freak out and try to shut the conversation down and tell us to GO CODE SOMETHING.

But techies literally invented the Internet, so that they could talk about techy stuff over long distances.
That is what this technology is for.

Grow the fuck up and hit the mute button. Or I will.

nostr:nevent1qqs2tfu30qdj7kfkva8nr2famdytjntkfuxwwrv6g63se7hu4p7lqhqprpmhxue69uhkv6tvw3jhytnwdaehgu3wwa5kuef0q9thwumn8ghj7enfd36x2u3wdehhxarj9emkjmn99ah8qatzx9kngmnexe5x5ut6v4cxudrj0p4kuat38y6xxvn8wpch5u3j896kv6mtwumhgarr0pukz6ehwc6rxm3kwem8xct2vvex5mqpzamhxue69uhhyetvv9ujumn0wd68ytnzv9hxgtchmkc3h


at least it’s not nostrich.house LLMs


because it’s only an opinion when nostr:npub1jk9h2jsa8hjmtm9qlcca942473gnyhuynz5rmgve0dlu6hpeazxqc3lqz7 doesn’t like it


is there a clear definition of spam that meets all of the following criteria:
- coinjoins are fine (so no “inefficient transactions”)
- applications for timestamping (so no “money transmission only”)
- arbitrary data is not fine while not prohibiting the previous


I think I found the perfect quote to describe you rn

“once an idiot, always an idiot”


have you tried putting aside the opensats pr aside and considering how likely or unlikely of a possibility my claims are

they are higher than you think

otherwise why would their “transparency” not be actual transparency

some claims I have sources from/derived from interactions but I’m not going to say because I do not want you or others to harass them


can’t see your proof of work :)

have fun trying to get engagement while not contributing any value to nostr

I certainly did, including, but not limited to:
- reviewing NIPs
- helping nostr:npub1xtscya34g58tk0z605fvr788k263gsu6cy9x0mhnm87echrgufzsevkk5s save $8k/yr
- nostr.land
- noswhere search

and a bunch more is getting built which nostr:npub1t3ggcd843pnwcu6p4tcsesd02t5jx2aelpvusypu5hk0925nhauqjjl5g4, nostr:npub1wtuh24gpuxjyvnmjwlvxzg8k0elhasagfmmgz0x8vp4ltcy8ples54e7js and a few others know

you are instead spending your time whining about things that don’t affect you


slippery slope risk exists even though I love purging ordinals from my mempool

bare multisig should be axed though from relay policy since adoption is few except data storage, and there’s way more cost efficient alternatives


zero PoW my ass, just because most of my work is tools that you won’t interface with directly doesn’t mean it’s there, or that I’m not building anything right now


ok person that acts like they know everything sometimes and has barely anything of value to contribute, including good opinions and ideas


it’s the model that works, and doesn’t involve kingmakers like opensats, or any board bias at all even though I tried to avoid that with my proposal

clients compete for attention: what users really want gets funded

ideas are sent from the lowest level like relay implementations and libraries to user facing parts like clients


- library dev has revolutionary idea and creates a funding campaign
- client dev sees a use for this, creates another funding campaign sending parts of the money to the library dev
- users fund clients
- clients fund libraries
- everything gets built

- library dev has a stupid idea, creates funding campaign
- client devs don’t see a use for this except one (a bad use), creates funding
- users don’t see value proposition
- fail


Both now that I think about it.


Okay what about this.

Users decide what wallets they want to fund.

Wallet devs can fund libraries that make life easier for them, and for their users indirectly.

Did we reinvent zap splits? Yes! Do people feel better about OpenSats than to do this? Yes!

For people that want to outsource this shit, I’m thinking of something. People can set up their own funds, pay with onchain (you’ll see why, but LN is also possible), anyone can donate, public record of amounts and similar exist, and funds get sent back with timelock if not spent.


For the last one: no they aren’t. including some people would be reasonable, but the test for “power user” is also vague

But also if you want users to assess projects… did you hear of Kickstarter


It isn’t

The only mention of the nostr committee they mentioned were full of either client devs with their own personal interests (devs should decide grants they have no stake in) or people with investments. A good chunk of the board isn’t involved with Nostr that much from what I see


What conflicts of interest again?
They know how shit works. If client developers decide grants for libraries for example, it would be a win win: client devs are more experienced in that subject, they don’t make a lib themselves, and multiple devs means minimized conflicts of interest

Instead we have people building closed sourced products with investments in competitors and that don’t remotely touch Nostr dev work.


I have not. I think there was a nostr committee or something that assisted with picking candidates for that, but I can’t find the list anymore.


All of them aren’t Nostr devs
Some aren’t devs at all
Some have conflicts of interesg
so on

Decentralize the grants


A nonprofit for funding Nostr development should be ran by developers that know the goal and have minimized conflicts of interests + diverse viewpoints, not influencers with investments.


There’s a lot of things that on the surface look fine but when you dig deeper aren’t.


There’s something called respecting people’s privacy.

If you take the time to think this out you’ll realize it’s more plausible than not. Their “transparency” is a joke. I can’t find a breakdown of their operations fund, their “meeting minutes” state the obvious, conflicts of interest are not disclosed. Follow the money and you’ll realize it’s fishy.


C*


CLN has a weird bug though that I’m suspecting might be a memory safety error… :/


CLN wins for being extensible


but it’s worse when it’s unoptimized react


web is shit


Fishcake hates it


PHP is in fact dogshit


C# is dogshit


The iOS link preview is more usable than zap.stream on mobile for watching Nostr streams.


No, local model
We all know how much more shit smaller LLMs are


Uses dumb local thing


Averages do not mean anything in this context


They’re trying to cancel the guy that created nix/#nixos. I’ve been in the nix community for about 10 years and I’ve never heard of any of these signatories. Why are we still doing this childish cancel culture nonsense in 2024? Don’t like the leadership? Fork off.

https://save-nix-together.org


I think revocation is needed, and more thinking on the spec


Yes because it’s a search relay not a general purpose one. Tags soon


relay.noswhere.com exists


Spell checker


bro just saved me 8k/year and now i feel dumb nostr:note1rne065entn5ztjrxmejn9xk3s7daqzjd6dmtfy5qq6tqhfh6j5xq2r0red


Nope.
The entire note JSON of the renoted note was translated even when it was the intended language


WS frame size limits


problem is event size limits


never applied, never received any

the only 2 I were paid was a 0.05 btc by Will when jack donated in the esrly days, and 0.05 btc for hist.nostr.land as a bounty
both have no conditions


I have not applied tor a grant.
I do not intend on applying.


personally my problem is the current implementation, read my other posts


For the board, multiple of them have ties to Ten31 which funds Primal. I can’t find a disclosure for that on the site.

They also don’t disclose much in their transparency page.


nostr:npub1xtscya34g58tk0z605fvr788k263gsu6cy9x0mhnm87echrgufzsevkk5s, will find in a bit


ok we actually need a multiplexing layer for relays

whether it be virtual partitions people control, aggregators that read from multiple relays + filter spam + deduplicate, or similar use cases it’s needed


sure.

but there’s better ways of doing it.

“commodity relays” can still offer people partitions they control, because let’s be honest, no one wants to know how to deploy a server just for this

we also need standardized interfaces for moderating relays… nostrscript?


because there will exist relays to serve anyone, some to serve a client’s users, some paid, so on

people will not want to spin up a relay for a small community, and would rather use infra they pay for

one reason reddit wins imo because it is way simpler to spin up a community, you do not need hosting expertise, you do not need to pay for expensive relay hosting (there’s a reason web hosts share one mysql deployment across multiple tenants)


I honestly get the premise but the current landscape makes things too hard, moderation tools are garbage, relays are still not optimized to be ran as easily with sane defaults, URL changes are impossible, it’s not easy

we also need a solution to the too many connections problem, outbox and community relays and all that will pile up, and having 100 connections send 10kb (a basic request/response + handshake) is going to end up with 1MB data usage, on top if

I would not be against this idea if we have it more thought out, and consider other options also such as subdividing an existing relay into smaller virtual partitions, but trying to do it with the current model, and some people trying to do it for the sake of doing it, will not end well


why can we not replace mailing list relays with a moderated community?

also we need to address multiple problems like local caches, what if a relay removes content for moderation


relays will not be communities

communities will instead have a need for relays so they can preserve their content for future access, not “isolate” their content

many communities will run without a dedicated relay and many relays will exist serving multiple communities, or none


You need: a domain
You get: infinite LN addresses


There won’t be mega relays.
There won’t be micro/community relays.

Relays will come and go to meet demand. Data storage is a commodity.


Groups should be encrypted either way except if they are public.


The Discord one was not a data leak

It was people complaining about how their groups got scraped when they had the join link public.

Same thing can happen to Nostr


nope, what will end up happening is clients run relays for their users to provide them an easy onboarding platform, hobbyists will run their own, communities if big enough will run their own for data availability guarantees, the censored will run their own, so on

relays will exist to meet demands


Decentralization isn’t easy to quantify: in reality the model of per community relays, and having medium sized relays are more similar than people think

Relays will exist. There will be less relays than communities. And there will still be lots of relays.

Nostr works because of data portability, not because of relay count


Most people will resort to hosting services, or even if they host their own probably do it on a cloud provider, so the privacy part of “trusting a relay” will be the same.


Public relays can also enforce AUTH


There is no verified LN address


Highly dependant on the situation

I won’t blindly do option 2 :)


they already spoke out about the pressure thing


it’s a comparison

telling people that are potentially corrupt to fix their own corruption is never happening


Partially true, partially not.


9 don’t have to
enough to rig the results is enough

and I haven’t seen anything about board members not getting paid. the operations fund is not disclosed, they do have paid employees AFAIK, and only 1-2 people said they don’t get paid in a somewhat ambiguous way (and that they take nothing from donations, which is… expected?)


1. They have shadow banned multiple people and refused to back down until they got enough pressure
2. They have been lying scumbags at times
3. VC funded company that has a focus on promoting influencers (trending came way before zaps and similar afaik) nostr:note1x2tpjhrqczcqym3vpy3kgcj85y87gdcw50w43nv9qhn9jmft723qn0eckn


Wavlake and Primal share an investor. Hivemind Ventures, aka Max Webster.

Wavlake and Primal both engage in matching npubs to email adresses. This can be then used to sell nostr data, as it can be attached to data outside of nostr.

Wavlake and Primal both offer « trending » visibility. (Primal came out the gate with trending algo while basic nostr features were still lacking. Talk about development priorities)

Wavlake is totally fine with people gaming the leaderboard and removed the data I used to spot the cheater (that man likes trending) (I was using supporter counts to spot the fake, Wavlake removed it after I communicated with them about the manipulation)

Primal would like to convince me that their advert containing their investor and another shitfluencer was a genuine conversation and not an ad hidden in a podcast/vlog.

🤷♂


Yes
Good luck finding HIPAA compliant relays

I don’t remotely trust Vitor for security, considering gift wraps


I did not say marketplace was unnecessary


Horrible ideas die as fast as they get thought of


ECC memory matters
https://i.nostr.build/yq7y9.png


There is paying for blockspace, and there is intentionally overpaying and wasting it


On chain cost


I sarcastically dropped a comment on a advert by primal. This is their reply.

It is missing context. It is a « genuine » conversation between an investor of  Primal and another influencer (who pretends not knowing stuff that he already knows).

Follow the money plebs, and don’t accept the BS. nostr:note1p8t38am4uxutjrmfrkqqhvfj6t2r2mudmgkgpgq3sxv0egmljsfsz5ztm7


no

you only know a key


No because these private keys may exist somewhere else and are not bound to you specifically


Reminder that the DAO fork happened
Sufficient social consensus can result in a fork to steal your coins and you can’t spend it

The end


By this all SE involving HWWs are extremely closed source not to be trusted projects nostr:note10kujqm5sz7439mkm6sxeva4xxe7z4zx0mnkpqujtlc0vhu6773rstskvzj


Need to repost this b/c it seems the latest FUD attack on SeedSigner is to characterize it as a "closed source project".

SeedSigner is both Python code and a customized, purpose-built *nix operating system that is engineered to run on hardware that is not fully open source, i.e. Raspberry Pi SBCs. See the attached image for additional info on the reasoning behind our design decisions.

Linux is similarly run in many closed source hardware environments, but that does make Linux a "closed source project".
https://m.primal.net/Hxpq.jpg


Wait right you can’t fix idiocy


Not a single entity so far that has no direct or indirect incentive from OpenSats and related has come out and defended them without trusting


One factor for OpenSats’ grants is if you suck their dick hard enough. Not the only one but one of many and one with high influence over the end result


more behind the scenes stuff, like algorithms and search.
not public yet


Discussions can happen on social media that don’t suck. It’s just that some people like to bullshit for personal gain, whether it be entertainment or selling their own product


Over 50 years, storing 1GB of data in S3 costs $15
On Bitcoin it costs $1.6m


I never applied for funding.

There are few other sources, by the way. nostr:note1nlrlxfgqkhx2ehdrkpjvk9s3z97mjshqy6y06r87gj58pzhm34gspuqwsf


Bitcoin: A Highly Distributed Append Only Log System nostr:note1ye7azm0et7yxwy2drxcz05w0gphsqsyds9g4y2g8zpnyty7ew90q6swjas


zapathon has signed its DNR order 5 times and yet you keep trying nostr:note1eel5483c8znh6g2j9aavq8tawa6f87m8h5dzj5dq95d6mzm2aanqx2ah2k


We can’t know that I think
Not relayed


This breaks OTS I guess. nostr:note1dpde9ylz69hfv77yhehnp9qyw0jjt8cx6seumkkcc5xl7ddpmp2s7fq6jc


VDSL can go 42/12


I’m still on DSL


good to know most of you are either opensats simps or got paid off


Might be just a … custodian
But kind of concerning


Just added 6 months of nostr.land relay subscription. Great work in there #growNostr


yeah that’s dumb
I personally don’t find the bot of any value, and many people can agree: a bunch of its reports are outright false and it’s overly sensitive


noone can, since everyone is getting paid by opensats, including me. ten31 is invested in primal and strike. it’s pretty ingenious and prevents anyone from saying anything or else you may not get your nostr grant, at least that is the perception even if its true or not. Odell has called me personally and said there’s no way he would have of conflict of interest, but it’s literally impossible to not have a conflict of interest here. Odell is a great guy and I’m inclined to trust him, but the whole situation feels wrong and is causing a chilling effect.


I have not publicly spoken much or asked questions about this for a few reasons. Firstly because I consider you to be a personal friend and I feel that you try to do the right thing in each of the projects and organizations that you are involved with. You helped our project out in numerous ways, especially early on when our core concept was brand new and still being proven out.

Neither opensats nor dorsey owes our project anything. I have been very clear about this, and I moreover feel that opensats is a net good for both the bitcoin and the nostr communities. But I have also avoided asking questions about the status of grants, much less about potential conflicts of interest, because I did not want to spoil Keith's chances at a grant, or negatively impact anyone else who might apply in the future for a SeedSigner-related grant. I think this speaks to the same self-censorship dynamics that jb55 has referenced.

You insinuate in the above that there has been at least one vote on a SeedSigner related grant. This would be news to me because I had the understanding that applications related to SeedSigner were being considered but were deactivated when it became known that Keith had received funding from the HRF.

While a required threshold of "yes" votes for a successful grant is of course entirely reasonable, "no" votes (especially emphatic ones from persons of influence) can cut quite effectively in the opposite direction. nvk's repeated, persistent, very public criticisms of our project communicate something like personally motivated animus rather than any sort of good-faith conscientious objection. Even were he to openly abstain from a formal vote on SeedSigner related grants (which would be in line with opensats' publicly established policies) other board members are likely to be influenced by his numerous public statements. It's honestly troubling that someone running a company that embraces "source available" as an attempt to rebrand what open source means, and who has referred to good/faith FOSS proponents as "commies", should be in a position to decide who does, or who does not, receive open source grant funding.

Some very legitimate questions are being raised about the parties providing funding, their motivations, the entities receiving funding (and those who aren't), the specific tech they're working on, and those who are directly (and indirectly) involved in the funding decision making process. I don't think these questions are being asked because of prototypical bitcoiner contrarian suspicion, but rather are the result of an evolving pattern of observable events; some might call what they are seeing as potential "aligned malincentives". The opensats funding dynamics and scale may also be arriving at a point where larger structural dynamics are coming into play and a "just trust me" approach to public relations and organizational ethics becomes increasingly less and less viable.

So where from here? I don't have a good answer and none of these are my decisions to make. Hopefully opensats just has a short-term public perception challenge that can be resolved with better communication and more transparency. But bitcoiners are a skeptical bunch and these questions aren't going away if they aren't addressed.

Lastly -- I believe that you personally have a good heart and I'm rooting for your success.

(NB - I am speaking here under the exorbitant privilege of operating this account as SeedSigner "the man"; my comments may not reflect the opinions of all, or even of any, of our contributors.)


time to launch a new “ordinals optimized” testnet and sell people worthless shit /j


By running this you are actively shorting USD nostr:note1vl0ephpzcrk54tvvclccu408rfx9w92229jjuplfkj4jdfwq3ejsgteaws


It uses the OpenAI moderation API
OpenAI moderation is in fact made to filter content for weak babies as we all know


“Harassment / stalking / doxxing”
“Intolerance & hate”


It uses the OpenAI moderation API


No. Don’t disable it yet
Just check if it could be low signal disconnects

Consider increasing transmit power also. Your neighbors may hate you but who cares. Increased my reach by a bunch that way


Media converters work until they break and you have no diagnostics


Look at RSSI


I also need to know on the 1st building you have a switch with an SFP(+) port or not, otherwise you’ll need a switch. Don’t use media converters. 300ft+ is only going to be good with fiber, copper will cause issues since you’re very close to going over spec.


Do you intend on running the link between two buildings outdoor or via a conduit? There’s a cost difference.


High rate of false positives is the main problem


Jerk is subjective
They will get in your WoT no matter what

The idea of “who I’m following/trusting” moderation is stupid as it gives influencers the ability to censor and content/trust view != moderation view


There is no solution that just works
There will never be


No it does not


100GbE is actually competitive in price per gigabit compared to everything else


Also power usage is a bitch.

Could you give me some more details? How many devices, any potential upgrades planned down the line (more hosts or link aggregation), rough distance for cable runs, etc.


Also for NICs look for used shit too.


Look on the used market. You can find a bunch of stuff on eBay.

Note: do research before you buy, avoid HP shit at all costs, if you can avoid using switches with module vendor locking, I can try to help with this

For fiber and modules, go to fs.com.


because they don’t care about their users

too many paid relays or insert nostr service here sell crap to end users and falsely market their shit


Native Tor support. nostr:note13hzkudugh3f2hsmywn3hwl2ypkr5x4wm8vptvgjzqnz966zdznxsr304e3


Heard that it might compete with Bitcoin miners on how hot it can make your house get 😂


Also with SFP shit vendors often lock what modules you can use to their own only. And charge markups Apple would wish they could.

Thankfully there’s ways around it.


Running anything faster than 2.5G on copper is expensive (Cat6a and hardware), often problematic (heat issues) and bad value (just use fiber or something)

10G with fiber is cheap, including hardware, if you know where to buy. Need more throughput for 1-2 things? Use a LAG.

25G also would recommend if you need more throughput, and the hardware isn’t that expensive either.

40G/100G, don’t. The 4x10G/25G lane setup means you either pay for expensive MPO fiber or end up dumping a bunch on modules. NICs for 100G are a pain in the ass.


Context:
10GBASE-T runs hot as fuck. And it’s more expensive than just using SFP+ and running fiber or something.

I do not want to think how expensive (and hot) 40GBASE-T would be compared to just fiber

Thankfully no one made 40GBASE-T hardware


“40GBASE-T”
Is this fucking real
…

What the fuck


You do not need to trust me.
Maybe except for paying for my services but that’s it.


True, until not I guess


Nostr.land has Tor support

:)


reason: fake zaps

I could spin up my own mint backed by nothing, send you tokens from it, and now it appears I zapped you while I actually zapped you nothing

also fees for transferring across nints


for any proper cashu zaps you MUST pay a mint that the recipient uses or your zap is as good as not


it doesn’t work how you think it does


You need to make sure your sats are on the recipient’s mint
So you may as well be paying like 20 different mints to create tokens


Not really


https://ipng.ch/s/articles/2023/11/11/mellanox-sn2700.html

🫠


Is ossification good for bitcoin?
Yes.

(The logic is flawed.)


honestly for scrapers the best solution to reduce load on both the relay and still have content accessible for search services etc is creating small json dumps that can be processed directly + use relay only for realtime


I’m thinking of starting a non profit to build water wells in Africa. I will sit on the board and we will spread our grants to anyone who wants to build water wells.

Oh, and I’m a VC, who’s heavily invested in one of the companies that builds water wells and I’m concerned about my return on investment.

Don’t worry, I’m not biased, anyone can apply for a grant. Anyone.

And if you question my incorruptibility, just remember I’ve been building water wells since the beginning, I have a few paragraphs written on my website, and if you question my altruism, you don’t care about fresh water in Africa!


Relying on grants is not the way. You can’t grow your team on grants, its not even allowed as grants are only for individuals. Support client devs directly to have a larger impact and to properly build out a nostr ecosystem that isn’t all funded under a board of decision makers with 0 transparency, where if you make a post like this you likely won’t get your next round of funding and LTS. Don’t let VCs capture and control nostr.

GM nostr:note1kh87df4jtseet4g9uszzuea80hdtp9mtyyg444ujnmqaekpns90srldl0v


Also cursors are really easy to implement without persistent state. Added that to the PR.


A relay that reads from multiple relays (without an indexer)

assuming the lowest created_at is the one you should use here is dumb, because it assumes the lowest created_at of any relay read from, and that misses events from other relays

This also breaks many other potential relay optimizations unrelated to this


Delusional V4V activists that don’t understand basic economics can place their idea where it belongs: in the trash


Read my last comment.
Until based pagination breaks down when you introduce stuff like Bostr.


I would still recommend RAID 5. The overhead is minimal and capacity waste drops by 2x


certificate verify failed: certificate is not yet valid


But it also costs a ton.


Unrelated to that but any reason for going RAID 10 instead of something like RAID 5? XOR is pretty optimized to the point you’ll probably saturate memory bandwidth easily and you get more capacity.

And for weekly backups: I do hourly ones to an on site server, and daily to off site.

Proxmox makes it really easily. Also, setting retention rules helps: 12 backups hourly, 14 backups daily, 8 backups weekly, 6 backups monthly


Oh, that was not about the service. I just hate LNbits and “node distributions” for many reasons.

Unfortunately I am stuck with LNbits as there is no alternative but I made it deposit only.


Yeah, they say their grants are "no strings", but that's not accurate. It's "thin strings".

The way to give someone money with no strings attached is to just send them money, unasked and without expectation that they react or respond with anything other than a courteous "Thanks!"

Otherwise, you are giving it with the expectation that you are forming a relationship, through which you can exert influence.


“LNbits”
“Umbrel”
😟


You told me webflow was a mess so I was referring to that.


Consider getting rid of technical debt 😂🤗


Stupid is what stupid does! 🐶🐾🤣👍🏻


Wrote a NIP to end pagination hell for once and for all, and allow for conveying more information through EOSE in general.

https://github.com/nostr-protocol/nips/pull/1173

nostr:npub1x3azxuysp5vmfer4vgs4jn5tmfcx4ew8sh0qnev7gczljxsr7jwqa3g4el nostr:npub1ye5ptcxfyyxl5vjvdjar2ua3f0hynkjzpx552mu5snj3qmx5pzjscpknpr nostr:npub1v0lxxxxutpvrelsksy8cdhgfux9l6a42hsj2qzquu2zk7vc9qnkszrqj49 nostr:npub1acg6thl5psv62405rljzkj8spesceyfz2c32udakc2ak0dmvfeyse9p35c

Had some ideas for more stuff to add: “auth_recommended”, etc.


Single devs with shoestring budgets are criticized for not having everything ready for everyone. I guess the solution is just to shove everyone into the KYC’d VC funded one with lots of employees. Pretty sad that this is where nostr is headed. I guess this is jacks vision for nostr now so it must be done. The biggest threat to nostr is a handful of influencers who control the funding and can pick the winners. Purple is my attempt at breaking free from this, but I feel like it’s already a losing battle.


Somehow missed this drama: nixcon dropped anduril as a sponser because the people obsessed with censorship over on the fediverse complained when #nixos posted it on their instance. I don’t have a strong opinion on anduril, I’m just grateful we’re free from the tribal hell over there.

https://cdn.jb55.com/s/9aecee16cc4505cc.png

https://cdn.jb55.com/s/b50cd24b0b74e6c5.png


Hi, #asknostr, does anyone know what all these low sat requests are from #primal in my #mutiny wallet? TIA

https://m.primal.net/HuOn.jpg


I agree with ARK's decision to not give money to OpenSats.

They should fund core devs / projects directly unless OpenSats published PUBLICLY how much they're funding each project.


Why don't people want to dedicate $20 per month (or 4 cups of coffee) in total for Nostr tools they use every day?

If we want freedom tech to succeed, the tools that make it possible need to be funded: relays like https://nostr.land, media hosts like https://nostr.build, clients like https://damus.io, etc.

Complaining about:
- why media hosting is expensive when it takes hours of work per day to keep running, and risks like CSAM content make it harder to maintain
- recurring relay fees when it takes constant work to keep up, and recurring server bills
- clients not being perfect while they require a lot of time to make work and optimize
doesn't help with anything

If everyone on Nostr making shit calculated how many hours they spent on nostr development and how much they actually profited, and compared that to if they got a job with their skillset, I would bet it's way higher than how much an average startup loses

So please, support your clients, relays, media hosts, and everything else you use


Consider me onboarded 🫡🤝

1-year plan

Support devs directly nostr:note1egljy688rc77q8j3u6at80jw0m8xn3mqvmaam5mueu8rex78wzusjfxadm


I could only say, "wow". When client treat kind 1984 event like an normal note, Wow.
https://image.nostr.build/17aa7f54132f42b7a5445415b3dcaa3f9cf563c11647f53c930c699448f9c509.png


Super excited to announce ‘AI Studio (beta)’ for nostr.build Creators and Advanced account holders!
Now available, you can go into your account and start using your Generative AI prompt to create almost whatever image you want. Advanced accounts can choose from three different models! This is just the first of many more AI features to come.
*Account hodlers - Please tell us how it works and post pictures!! Also, let us know of any bugs!
*You can access AI Studio in the left menu bar, check out nostr:npub137c5pd8gmhhe0njtsgwjgunc5xjr2vmzvglkgqs5sjeh972gqqxqjak37w s video on how to use it!!
*Please post some of your creations!!! https://i.nostr.build/oMErl.jpg  nostr:note12h03zvfdcen2k9wp2z779fq7zj09swfn4zlulcms0c8uyt48a7ts6qz35m


Did you know: you can use https://nostr.land to back up your notes on the paid relay locally, free of charge, in seconds?

You will be able to import your old events soon also, without paying additional fees for archival unless you have a lot of notes unlike other paid relays.

Just 4k sat/month.


They did not Dan. They didn’t even see the Dans. Too busy counting their sats and assessing their reach.


If bitcoin comes to rely too heavily on corporate grants/donations, you'll only get the tools that for-profit corporations want you to have. Keep bitcoin free -- build your own shit if you can, contribute to your favorite project, or donate *directly* to it (avoid pass-throughs).


All that is required for evil to prevail is that good people remain silent.


They are ran by influencers that keep feeding you constant unrealistic hopium. People on here are still sheep, just following other people instead.

They don’t disclose grant amounts. They don’t disclose the terms for grants if any. They don’t disclose their operations fund usage and how much of it goes to their own pockets but prominently show the donate button for it.

People on the OpenSats board with financial interests don’t disclose them in a way that’s easy to see for donators.


Happy to announce nostr.land now supports following lists of up to 3k people, while most relays, including paid ones, cap off at about 1k.

register today: https://nostr.land


Happy to announce you can easily back up your events on https://nostr.land now.

No extra costs.


is your strfry relay crashing? probably because of this exploit:

nostr:nevent1qqsrzc923fxe0g52ludlml6hdgswnkrur6ugff2mt7c4pw3w6e53n7spzpmhxue69uhkummnw3ezuamfdejszrthwden5te0dehhxtnvdakqz9rhwden5te0wfjkccte9ejxzmt4wvhxjmcpzpmhxue69uhkummnw3ezumrpdejqhnfuu7


Opensats is just marketing for the companies he invest in through Ten31.

Odell is a mouthpiece. Fuck all that noise.

nostr:nevent1qqs0ndlv493lz0yau4gwgxz3gjq4fy9tc4q6xpj8djv7dydnskarh4cpzpmhxue69uhkummnw3ezuamfdejsygqpphcvjj87n2656t9hafpql7sg64u43xqmd6ngaqa25l4jm5lstgpsgqqqqqqsdkmmxe


## Why this is happening

This happens due to an invalid real IP header.

You are most likely using `X-Forwarded-For` as the real IP header. Strfry expects the real IP header to contain just an IP, but [the `X-Forwarded-For` header is *a list of IPs*](https://en.wikipedia.org/wiki/X-Forwarded-For), with every proxy adding the IP of where it got the request from.

If a client specifies an X-Forwarded-For header, like `X-Forwarded-For: 1.1.1.1`, your proxy will add the remote IP, like this: `X-Forwarded-For: 1.1.1.1, 127.0.0.1`
When you use `$proxy_add_x_forwarded_for` in Nginx, this is what it is doing: *appending* the remote IP to the header.

Strfry tries parsing `1.1.1.1, 127.0.0.1` as an IP address, fails, and throws an exception.

## How to fix it

If you are using Caddy, just switch to `X-Real-IP`.

If you are using Nginx, you can add a real IP header like so, and switch to using it:
`proxy_set_header X-Real-IP $remote_addr;`

You can also disable the real IP header, but this will cause problems if you use a write filter script or look at the logs.

How to mitigate the strfry crash exploit

Is your strfry relay crashing with the error "invalid size of ipBytes"? This is how you can fix it.

This is a long form article, you can read it in https://habla.news/a/naddr1qvzqqqr4gupzq5455pmtewaacws6a73hxkqkea6fjwcm3keq9vqu3q7930nl4k9aqqg8xarjvee8jttrwfshx6pdve5hs5m6jh2


The question is why are the big players and devs trying so hard to centralize Lightning in exchange wallets like Primal wallet, strike and cashapp?


Community Relays, let's gooo 🛰 #decommoditize
nostr:nevent1qvzqqqqqqypzple86qwtret0kkzcqvrv0wnkhvphhus3ck6h83twfecv4pv82khsqy88wumn8ghj7mn0wvhxcmmv9uq32amnwvaz7tmjv4kxz7fwv3sk6atn9e5k7tcqypc3f3azmlzg88z50txxf4rpzhlv5vezn2yvvhev9xpn67z27m0k5vg9nmt


https://fortune.com/europe/2024/04/05/germany-law-sunday-rest-tegut-teo-automated-stores/

🤣😂🤣😂🤣😂

Robots need to rest on sundays and pay social and health taxes.

So, I'm fully expecting an EU regulation that forces on-line stores/marketplaces to be closed on weekends/holidays. I mean the same rules that apply in the real life have to apply on-line, no buts. Right? Right?


Opinion about Samourai Wallet (android)
<!--HEADER END-->
Samourai has cost me many many hours due to their strong social media presence and constant ad hominem attacks. They blamed me for not being able to compile or reproduce their product instead of helping me to compile it. Given I compile wallets all the time as can be found on walletscrutiny, I doubt I lack the expertise to compile wallets but even if I did, why not show me? Not one developer other than their team themselves disagreed with my technical assessments of their product. Apart from proven scams, this is the product I trust least in the whole space.

But it's not only me. To [quote Bitcoin Core developer and absolute genius Gregory Maxwell](https://www.reddit.com/r/Bitcoin/comments/9r9344/slp29_samourai_wallet_bitcoin_privacy_software/e8fm1v8/):

> I have seen far too much outright dishonest and extremely incompetent behaviour from Samourai to ever trust it myself.
> Samourai has very poor privacy while bragging about having good privacy: It sends your addresses all back to their server. Their "trusted node" mode doesn't change this, it just exposes your Bitcoin node to attacks completely needlessly. (Needlessly because they only use it to relay transactions, which they could do via the public P2P ports of any node, and because since they've already sent your addresses back to their server sending your transactions via something else doesn't increase your privacy.)
> If you want strong privacy then as a start you need to run a full node (and use either Bitcoin Core wallet, or run your own electrum server), preferably via tor.
> I don't doubt that they want and intend to eventually have good privacy but it seems that they're just unable to stop lying about it, even after previously being caught.

You can find many more very competent people complaining about Samourai's dishonesity and aggressive behavior or outright incompetence if not malice [here](https://nopara73.medium.com/samouraileaks-samouraidevs-sockpuppet-exposed-7ce654b92c0b), [here](https://nopara73.medium.com/samouraileaks-part-2-harassment-of-bitcoin-developers-fae3019abd2f) and [here](https://nopara73.medium.com/samouraileaks-part-3-is-random-org-random-enough-35704796ae93). And yes, those three links are to nopara's blog, who is the developer of Wasabi wallet which targets the same audience of privacy focused users but that doesn't take away from the facts reported there.

Stay away from Scamourai!
<!--FOOTER START-->

#WalletScrutiny #nostrOpinion

[Join the conversation!](https://walletscrutiny.com/android/com.samourai.wallet)

An opinion made about android/com.samourai.wallet generated using nostr-opinion-plugin.


the seedsigner cope goes further

can anyone REALLY build their own coldcard though?

reminder that you still can’t build your own chips for a working coldcard like you can’t with a pi
if you are complaining about not being able to build… a PCB then something is wrong with you nostr:note1a5fsayl6p74m7gq4kzzsh56flcgc9tv8n80ysrslrgydx9u07vhsd6nrkz


“men are harassing women”

do you really know WHO is behind that nym? or are you making assumptions?


The same people convinced Open Source doesn’t require steady funding believe GIMP is a real replacement for photoshop.


IEEE no longer accepts Lena image containing submissions from 4/1 onward

Comments ( https://news.ycombinator.com/item?id=39885977 )

https://www.theguardian.com/technology/2024/mar/31/tech-publisher-bans-playboy-centrefold-test-image-from-its-journals


XZ backdoor: "It's RCE, not auth bypass, and gated/unreplayable."

Comments ( https://news.ycombinator.com/item?id=39877267 )

https://bsky.app/profile/filippo.abyssdomain.expert/post/3kowjkx2njy2b


yes. Make targeting easier for the Feds.


Iowa fertilizer spill kills nearly all fish across 60-mile stretch of rivers

Comments ( https://news.ycombinator.com/item?id=39870402 )

https://www.nytimes.com/2024/03/29/us/iowa-spill-fish-kill.html


The nostr:npub17tyke9lkgxd98ruyeul6wt3pj3s9uxzgp9hxu5tsenjmweue6sqq4y3mgl hate will continue until it disappears.

SeedSigner can go fuck itself because it makes our overpriced devices that we want people to buy multiple of look like a waste of money abd time. nostr:note1pkje2lmp8n4jcxg3jhm5cyrt7e4zezvc0ml7dp5k6np75jqulqtsjj7fdt


Coldcard's biggest security hole is the emotional insecurity of its leader 🤡
nostr:nevent1qqsqmfv40asne6evrygeta6vzp4lv63v3xv8allxs6tdfsl2fqw0s9cpremhxue69uhkummnw3ezuum9w35xvmmjwpexjanpvdujucm0d5pzp6y2dy0f3kvc0jty2gwl7cqztas8qqmc5jrerqxuhw622qnc2pq3qvzqqqqqqyzzsyc3


I Have Deleted Systemd

Comments ( https://news.ycombinator.com/item?id=39804306 )

https://unix.stackexchange.com/questions/772960/i-have-deleted-systemd


Sure. Let Adobe AI scan all of your documents. What could go wrong?

Comments ( https://news.ycombinator.com/item?id=39805581 )

https://infosec.exchange/@briankrebs/111965550971762920


# Introduction

LNbits is a project plagued with poor code quality, potential security risks and bad management. What can be done about it?

# The problems

## Improper handling of vulnerability disclosures

### Case 1

Two years ago (don't remember exactly when, Twitter account deleted), I discovered an SQL injection vulnerability in LNbits. This could be exploited very easily by setting by sending the injected data in keys in the payload of most requests. (anyone could create create wallets)

This was possible due to the query to insert/update was generated using the body of the request, with basically no sanitization.

When I contacted Ben Arc about this, **the fix for this exploit was not implemented for several months**, and when it was, I do not recall there being an advisory for people to update.

### Case 2

A month or two ago, I had discovered an exploit that allows draining nodes completely under certain conditions. I had reported this to an active maintainer of the project, which had passed it on to the team. **The exploit has not been fixed.**

### Case 3

Again, a month or two ago, a flaw was discovered in the SatsDice extension that allowed anyone to drain wallets. I had investigated this, and found that the extension allows invoice keys (instead of admin keys only) to create dice that have a guaranteed win rate and return more sats than put in, and then use it to drain balances.

I had reported this to the team, and while it was fixed *a week or two later*, there was no easily visible for people to update except an "update your SatsDice extension" message in the LNbits chat buried in a conversation about the exploit.

## Bad security practices

### "Don't do one thing, and don't do it well"

LNbits has over time expanded its scope, from being a wallet layer to an LN apps platform to a node management tool. While this may seem great for users, it has come at a significant security cost:
- There is a larger attack surface for attackers to exploit.
- The newly introduced node management and admin UI feature allows easy draining of nodes if the admin URL was leaked, whether by by the autocomplete on the search bar or the user's history.
- All extensions run at the same privilege level as LNbits itself which has direct access to funds.

### Developers can accidentally shoot themselves in the foot

The LNbits codebase encourages many harmful development patterns that allows developers to easily create vulnerabilities that put funds at risk

#### Example 1

Most LNbits extensions use the following system for handling object creation/deletion:
- Take the body and convert it to a class
- Overwrite/sanitize fields in that class, such as preventing overwrite of the wallet ID
- Pass it to the DB to write

There is a slight problem: it can be easy to miss what to sanitize and what to not sanitize.

When you are doing an update request, you may accidentally forget to overwrite the wallet_id on the request sent by the user to update a withdraw link, and trust the user. You just created a bug to drain anyone's wallet given its ID, which LNbits does not consider sensitive information and sometimes requires you to share.

#### Example 2

LNbits treats any error during a payment attempt an error. But errors don't always happen due to failures in your request. Network connectivity is flaky, nodes restart, and way more reasons for there to be an error while the payment actually may be going through.

If you can get a way to trigger an error during a payment call, but also have it succeed, you can easlly drain a node. I have reasons to believe this is possible in production deployments.

This could easily be fixed as attempting to check the status of a payment after an error, and if that also fails, consider the payment pending until it can be checked, but ths has not been implemented.

## Bad project management

LNbits' current management suffers from many problems:
- the project suffers from feature and scope creep, implementing things for the sake of it
- bugs go unaddressed
- security is not a top priority

This is problematic for a project that deals with funds, as it is everything that you shouldn't be doing for a project meant to deal with funds. Tens of thousands of dollars in some cases and thousands in others.

# What can we do about it?

For me, I have disabled withdrawals on my LNbits instance.
I am also working on a replacement project called LNLocker that will solely focus on the wallet layer bit.

I would encourage trying to replace LNbits, as hard and sometimes impossible as it may be, or if you can, modify the code or restricting access via LND macaroons so that withdrawals cannot be made.

I highly recommend not exposing LNbits to the internet if you cannot disable withdrawals.

This is a long form article, you can read it in https://habla.news/a/naddr1qq8xcmnzd968xttgv9ex6en4dspzq5455pmtewaacws6a73hxkqkea6fjwcm3keq9vqu3q7930nl4k9aqvzqqqr4guhvt8wg


https://i.nostrimg.com/3aa6d52a5a1fb05ec93f9f2d5cdea59adebf914db111538e7964a05d952f3620/file.jpg
#meme #memes


Yikes. Don’t put your money into leaky platforms probably. nostr:note1wd4ng2ete2sa7vyv9gpng9hh96e8axqgjhwtjsk6j0hcdz4jmdjs92hgt3


Response from Flipper Zero to the Canada Ban

Comments ( https://news.ycombinator.com/item?id=39777746 )

https://twitter.com/flipper_zero/status/1770459769452589468


Twstalker.com as a Twitter alternative front end

Comments ( https://news.ycombinator.com/item?id=39753049 )

https://twstalker.com/EFF


Running late for college, and the scooter is stuck in an update

Comments ( https://news.ycombinator.com/item?id=39743673 )

https://old.reddit.com/r/indianbikes/comments/1bhi2ok/what_the_fck_is_this_i_m_running_late_for_my/


Cut the repost spam


Tech layoffs highest since dot-com crash

Comments ( https://news.ycombinator.com/item?id=39721066 )

https://www.cnbc.com/2024/03/15/laid-off-techies-struggle-to-find-jobs-with-cuts-at-highest-since-2001.html


April Fool's Day is the one day of the year when people critically evaluate
news articles before accepting them as true.
	-kellenbrent, Apr 2015


Sunlight, a Certificate Transparency log implementation

Comments ( https://news.ycombinator.com/item?id=39713370 )

https://letsencrypt.org/2024/03/14/introducing-sunlight.html


🪄🍽 Voilà. Your dishes are squeaky clean now.


Cloudflare mitigates AI side channel attack

Comments ( https://news.ycombinator.com/item?id=39703255 )

https://blog.cloudflare.com/ai-side-channel-attack-mitigated


The judge just ruled from the bench.

CRAIG WRIGHT IS NOT SATOSHI NAKAMOTO

Further findings of fraud etc will come in the written judgment.

Welcome to law.


We understand the price of Bitcoin has gone up a lot recently and for those that still convert to fiat, this would make our accounts more expensive.

- If you are renewing your nb account and you would like to downgrade, please contact us directly we can manually do it. 69k sats is the cheapest acct.

- If you decide not to renew, we will continue hosting your account media for 1 year after your account expires. We will always have our free services.

- Reminder that Fishcake and I work on nb hours each day (24/7 support, content review, new features and maintenance, integration with other apps, etc) and do not receive any funding and keep the small profit (~300-500k sats a month) we make on the node for liquify and emergency.  We got a very small grant from OpenSats a year ago and that was it! nostr:note1qpcrspmenxxcewefx4jrf8qr3yv3l50kxvk2cxa8emvfrv2s9llst29lyh


The great American llama (and ostrich and emu) collapse

Comments ( https://news.ycombinator.com/item?id=39671983 )

https://www.washingtonpost.com/business/2024/03/07/llama-emu-ostrich-herds-down/


product reviews with no comment https://image.nostr.build/e0cffbdfba5d2d8b4609b72bde9eeb9d9290159a17f356fa195163ae68bcaf6e.jpg


California Seized Enough Fentanyl In 2023 To Kill Global Population 'Twice Over'
https://www.zerohedge.com/medical/california-seized-enough-fentanyl-2023-kill-global-population-twice-over


I'm disappointed at the standard being set for bounties.

It has been half a month since the release of hist.nostr.land, which was made to fulfill nostr:nprofile1qyd8wumn8ghj7urewfsk66ty9enxjct5dfskvtnrdakj7qgmwaehxw309aex2mrp0yh8wetnw3jhymnzw33jucm0d5hsqgpm7rrrljungc6q0tuh5hj7ue863q73qlheu4vywtzwhx42a7j9n5zr9h9m 's bounty for a relay that kept old contact lists. Since then, I have not been paid, with my submission being initially dismissed for not meeting criteria not mentioned in the bounty post, with the only time estimate for payment I have gotten a few days after that being "this year", and no further follow ups after that.

This sets a dangerous precedent and creates a bigger power imbalance between people offering bounties and developers: developers can have their submission dismissed on terms that were never mentioned, and the people offering bounties can postpone payment for however long they please, while developers have to open source what they made before they get paid to be eligible.

A bounty is already a risk for developers: someone can claim it before them, and their efforts could go to waste. Setting precedent that allows people to postpone payment to developers for whatever reason and add arbitrary terms will only reduce the amount of people willing to work on bounties, and goes against common practice:
You pay first (or sign a contract and/or escrow funds), and once the work is complete, you have to pay. No subjective terms, no arbitrary rejections, if it meets the terms then you get paid. Bounties as they are completely flip this on their head by requiring people open source their work without a guarantee to get their promised amount, and terms can be added after the fact.

We can't do much about this due to the nature of bounties, but we have a few options to improve the situation:
- For nostr:nprofile1qyd8wumn8ghj7urewfsk66ty9enxjct5dfskvtnrdakj7qgmwaehxw309aex2mrp0yh8wetnw3jhymnzw33jucm0d5hsqgpm7rrrljungc6q0tuh5hj7ue863q73qlheu4vywtzwhx42a7j9n5zr9h9m  and others to pay bounties when it meets the terms  without adding arbitrary terms after or withholding payment. If you don't have the money to pay right now then don't make a bounty.
- Switch to alternative solutions. Grants after project release do not work as they rely on some entity like OpenSats to accept the project after developers have done all the work, with no guarantees since they can be rejected due to whatever reason, such as it not matching with the vision of the grantor or due to personal issues. The ideal solution is to have a contracting system: have some group of people escrow funds, have clear defined terms, and only pick one developer (and add more later if nothing gets done).


Hist.nostr.land is very valuable to me as a nostr user. I have a bounty out for low data mode on a client and have sats set aside to pay.

If I request a meal at a restaurant it is understood that I will pay for it at the end.

Short of a low fee being stuck in the memepool there is no excuse for lack of funds. The precedent bring set here is dangerous.

#NoFreeLunch nostr:note10z2t0d7hr2awv3tptln47ldvhmudshfuf0vdhekz0vnqtxt0amqqnw5a3k


Ok, after a few weeks of on and off dev work, and a few bugs and fixes later, I’ve finally managed to implement renewal and upgrade page for nostr.build . You can now see “renew” button on your account page if your subscription is within 30 days of expiration. Or you will see upgrade button if you are not on the highest plan. We also started offering extended subscription times that come at discount. You will see all that is available at https://nostr.build/plans/
Some features are still in works, and we are committed to continue adding more. Your subscriptions will get better and better with time! LFG and build an independent future and foundation for the new era of media sharing and social media! 🐶🐾🫡🫂🔥💜


If you're not fighting captchas 24-7 and doubting your humaness, you're doing it wrong.
https://i.nostr.build/xvzK.jpg


Schrödinger’s Backup. https://image.nostr.build/1f557e71da163a387625bc393601cc9a166f342ffa11075530de96568bbcf2b7.png  nostr:note15awgkn599ds94x9flcn7jljcah7ppy9den8re0qlsn04zm3kkl0qw6a6k9


if you value your following list, use https://hist.nostr.land


CALLING MY FRENS!

I would ask that you follow nostr:npub12pl4h7pk0svg8ug4mhu7a90hn6nf83eqadd94pccgsafn73s392qpt42wq and that you ask your people to follow it as well.

I started this account for my friend Texas Slim because I knew his crew did not have time to do it themselves. nostr was new (still is) at the time and I was already all in and knew how to work the thing. I told Texas Slim I was doing it for those reasons so he is not in the dark on this.

I have only been posting verbatim what TBI's Twitter account has been so as to respect their marketing etc. but the time is coming when I need to turn the keys over to Slim and his producer, June (the posts are beginning to get questions and I am not about to start answering out of turn).

When I turn those keys over I want to place in their hands a freedom account with at least 1000 followers and a rowdy bunch of activity: replies, reposts, and likes. If I turn over an account full of "meh" then the chances it remains as vibrant as it is (585 followers so far) decreases.

The Beef Initiative is something I have been involved with since Texas Slim published The Harvest of Deception: https://producers.beefinitiative.com/blog/the-harvest-of-deception  He was the first person I called a friend after I moved to Canyon, Texas and that friendship solidified my passion for soil, ranching, land management and my sense of the sheer Glory of God's Creation.

If you are reading this then hit the Follow button: nostr:npub12pl4h7pk0svg8ug4mhu7a90hn6nf83eqadd94pccgsafn73s392qpt42wq,  and make a post asking others to do the same. It don't cost ya nothin'.

Let's build this thing into a major nostr property that the TBI will be proud to take possession of, continue to steward, and help propel the nostr community into the future.

Can I get help from nostr:npub1el3mgvtdjpfntdkwq446pmprpdv85v6rs85zh7dq9gvy7tgx37xs2kl27r (Hellthread Queen -- you know what to do), nostr:npub1qny3tkh0acurzla8x3zy4nhrjz5zd8l9sy9jys09umwng00manysew95gx, nostr:npub1guh5grefa7vkay4ps6udxg8lrqxg2kgr3qh9n4gduxut64nfxq0q9y6hjy, nostr:npub1cjw49ftnxene9wdxujz3tp7zspp0kf862cjud4nm3j2usag6eg2smwj2rh, nostr:npub1jlrs53pkdfjnts29kveljul2sm0actt6n8dxrrzqcersttvcuv3qdjynqn, nostr:npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs, nostr:npub10chlkc62tk7yr5m9qjc2u7rs3ufhhrq8yukeey0c5lysqkp2gumq93mnex, nostr:npub1xy54p83r6wnpyhs52xjeztd7qyyeu9ghymz8v66yu8kt3jzx75rqhf3urc, nostr:npub1key55ax33gkl50uqemvl4khrtqrhzm7wzpc7fhseutt5ddkcwcrqgxlt3h, nostr:npub1xtscya34g58tk0z605fvr788k263gsu6cy9x0mhnm87echrgufzsevkk5s, nostr:npub1hu3hdctm5nkzd8gslnyedfr5ddz3z547jqcl5j88g4fame2jd08qh6h8nh, nostr:npub1sg6plzptd64u62a878hep2kev88swjh3tw00gjsfl8f237lmu63q0uf63m, nostr:npub1z4m7gkva6yxgvdyclc7zp0vz4ta0s2d9jh8g83w03tp5vdf3kzdsxana6p, nostr:npub1lrnvvs6z78s9yjqxxr38uyqkmn34lsaxznnqgd877j4z2qej3j5s09qnw5, nostr:npub17u5dneh8qjp43ecfxr6u5e9sjamsmxyuekrg2nlxrrk6nj9rsyrqywt4tp, nostr:npub180cvv07tjdrrgpa0j7j7tmnyl2yr6yr7l8j4s3evf6u64th6gkwsyjh6w6, nostr:npub18ams6ewn5aj2n3wt2qawzglx9mr4nzksxhvrdc4gzrecw7n5tvjqctp424, nostr:npub1dergggklka99wwrs92yz8wdjs952h2ux2ha2ed598ngwu9w7a6fsh9xzpc, nostr:npub1kyeml3tma4su8yw5aru48wgxclchp8zr3kguwhakmtmegjw40zws82sfjk, nostr:npub1aeh2zw4elewy5682lxc6xnlqzjnxksq303gwu2npfaxd49vmde6qcq4nwx, nostr:npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z, nostr:npub1l2vyh47mk2p0qlsku7hg0vn29faehy9hy34ygaclpn66ukqp3afqutajft, nostr:npub12262qa4uhw7u8gdwlgmntqtv7aye8vdcmvszkqwgs0zchel6mz7s6cgrkj nostr:npub1az9xj85cmxv8e9j9y80lvqp97crsqdu2fpu3srwthd99qfu9qsgstam8y8, nostr:npub1ewe0qgak4gykym236t6w4x06jyuw4q8v040lmn5lamude434yqcsz7uqlw, nostr:npub1f5pre6wl6ad87vr4hr5wppqq30sh58m4p33mthnjreh03qadcajs7gwt3z, nostr:npub1t0nyg64g5vwprva52wlcmt7fkdr07v5dr7s35raq9g0xgc0k4xcsedjgqv, nostr:npub1h4lrzqnrne72xj00yl3zzr0k6qn93cqe5g4vvkfechs6mn89mwyqfa2jcm, nostr:npub12u423pq5c6c5gvyzlekk5u9s5ksnyd27yemuvu3l9gpqpcnx545s6f8pyh, nostr:npub1cf3zeytdnwgwzz5pk2ax0vvmmlzad03xcft4d50ejrfhsh8pxcdsefx7gk, nostr:npub135x4y8w7jty24ggvxfm0c4mqaknk2su0fzzmwrgfdfylj6tz3l9qlv5xpr, nostr:npub18678fyrar7fg7gy77ggwsuk2cqe74ull38ng2v5x63werc63a70qw02kgq, nostr:npub1k7vkcxp7qdkly7qzj3dcpw7u3v9lt9cmvcs6s6ln26wrxggh7p7su3c04l, nostr:npub1s5yq6wadwrxde4lhfs56gn64hwzuhnfa6r9mj476r5s4hkunzgzqrs6q7z, nostr:npub1a2cww4kn9wqte4ry70vyfwqyqvpswksna27rtxd8vty6c74era8sdcw83a, nostr:npub1cj8znuztfqkvq89pl8hceph0svvvqk0qay6nydgk9uyq7fhpfsgsqwrz4u, nostr:npub15879mltlln6k8jy32k6xvagmtqx3zhsndchcey8gjyectwldk88sq5kv0n

Thank you,

David Bennett (AKA Nunya Bidness)

#grownostr #plebchain #permaculture


announcing https://hist.nostr.land — a service to back up your contacts list and profile for free

just add was://hist.nostr.land to your relay list and go to https://hist.nostr.land if something goes wrong

if you like it, consider zapping or joining the relay :)

it is open source: https://github.com/nostr-land-relay/histrelay

cc nostr:npub180cvv07tjdrrgpa0j7j7tmnyl2yr6yr7l8j4s3evf6u64th6gkwsyjh6w6 I want my 5m sats


Or just have basic operational security, don't standout from the crowd and be fooled be fearmongers into adopting complex setups that will shoot you in the foot.
Simplicity is underrated.
nostr:nevent1qqsw2ulsurunxy2cm2jd8cm9n2pcnka0ucnrneh5aukld760gx6zefspgdmhxw309a3xjarrda5kuu3kv3jn2mrtweurgarswajx67njv3nxgurvvy6hx7tpxfskvamsvdsky6n4wqe8surfx4j82mrzv9jzummwd9hkuq3qaz9xj85cmxv8e9j9y80lvqp97crsqdu2fpu3srwthd99qfu9qsgsxpqqqqqqz0rhw80


Exit your Bitcoin/Nostr optimism echo chamber and stop being sheep that listen to a different group of people and say they aren’t sheep.

Step 1. Unfollow influencers that don’t point out flaws with Bitcoin or Nostr or don’t say anything slightly controversial and keep constantly pushing unrealistic optimistic crap


Yeah, I’m going to shut up because it’s not worth wasting time on entitled fucks that will find some irrelevant excuse to complain about a service

Pay or stfu


Over the past few months I’ve noticed a pretty big shift from an ideological perspective to a more practical one amongst influential developers around here.

It wasn’t long ago that ZBD was catching bullets left and right for releasing a client with an email/password login that held users private keys for them. Now it’s seemingly encouraged as long as it’s nsecbunker run by one of your favorite client developers?

“The node is on the phone” and fully self-custodial lightning for all was a loud narrative until people were actually forced to try it when WoS pulled out of US. Didn’t take long for it to become all about ecash and how to “minimize” custodial risks instead.

I tend to be on the practical side of things so I welcome the shift, but I’d caution against losing sight of why we are here in the first place.


I want to give a quick shout out to nostr:npub12262qa4uhw7u8gdwlgmntqtv7aye8vdcmvszkqwgs0zchel6mz7s6cgrkj for architecting and getting the new system going that will host all of my projects moving forward.

It is far beyond anything I would have been able to set up on my own, but he has been extremely patient and transparent every step of the way, teaching and explaining everything so I can administer this beast of a server.

I’ve learned a great deal, and will continue to learn a lot in the coming weeks, but I already have more confidence that the data belonging to the people trusting me to hold it for them is safe and secure.

A full write up on the experience is forthcoming, but I wanted to thank my fellow purple cat for the absolutely exceptional work and assistance.


Nostrudel: 5m sat
nostrexplained.com: 10m sat

Nostr awareness at events with already people knowing about Nostr: 10m sat
The Nostr Report: 2.5m sat

Adding support for showing which relays a note is on a client (a feature that is barely used): 13m sat

A lot of sats going to the wrong thing and a lot of sats not going to the right thing, and people ask why OpenSats should disclose grant amounts
nostr:nevent1qqsx0xwg0amcamctu4dr6kfny0c8c8vznja3hgk4xd6la36csgyuvhgppemhxue69uhkummn9ekx7mp0qgs99d9qw67th0wr5xh05de4s9k0wjvnkxudkgptq8yg83vtulad30grqsqqqqqpzn5gh3


introverts trolley problem

https://m.primal.net/HZcA.png


Sadly, most people are not interested in uncomfortable truths. They need their dosis of feel-good collective hallucinations.
Optimism sells.


Happy to announce the eden.nostr.land onion service is now available: nostrland2gdw7g3y77ctftovvil76vquipymo7tsctlxpiwknevzfid.onion


"Privacy isn’t about hiding something because you’ve broken the law. Privacy is about having the right to withhold information on certain circumstances to prevent misuse and misappropriation."


Important notice: The nuts.semisol.dev will shut down in 5 days (25 Jan)

Due to being able to not maintain the mint currently, I will be shutting it down. Deposits are disabled.
Any sats after the 5 day period will be sweeped by me.


MEV already exists on Bitcoin
F2pool uses their position as a pool to manipulate the Stacks proof-of-transfer mechanism to be always selected


https://donate.torproject.org/

Please donate for the backbone of Bitcoin and our freedom of speech!


Another relay is exposed as an onion service (and with an awesome vanity onion url)!
nostr:nevent1qqsxzw8ewpfqakm7vtxntcpc4wekly5ucg93lkjq3hgxvg3ctamkwngpremhxue69uhkummnw3ez6ur4vgh8wetvd3hhyer9wghxuet59upzq5455pmtewaacws6a73hxkqkea6fjwcm3keq9vqu3q7930nl4k9aqvzqqqqqqyvp32m9


Please try to be respectful of open source developers time and efforts. Devs are doing work on Bitcoin and nostr often for little or no pay. Demanding they address your silly pet project idea immediately with no thanks, zaps, or regard for their time is not cool. These folks are talented individuals and their time is valuable, please treat it as such.


YOU FUCKING IDIOTS YOU WEREN’T SUPPOSED TO PUT e TAGS FOR QUOTES
YOU WERE SUPPOSED TO USE THE q TAG THAT PROBABLY ISN’T SPECCED BUT A BUNCH OF CLIENTS USE AFAIK


(putting ODELL cap on) IF YOUR SOFTWARE DESIGNED IN SUCH A WAY THAT IT CANNOT CRASH AND RECOVER WITHOUT CORRUPTING ITS STATE, IT’S A SHITCOIN AND IT SHOULDNT BE USED FOR ANYTHING SERIOUS, ESPECIALLY FINANCIAL ROUTING!

I AM LOOKING AT YOU, L FUCKING ND! I AM NOT MAXY ANYTHING, I AM FOR PROPER SOFTWARE DESIGN! 🐶🐾🫡😭😭😭

There, I needed to take it off my chest!


if you need a high quality relay that is sustainable and fast, consider using https://eden.nostr.land
also open to suggestions


Analysis Report
------------------------

Force Closure #093
Initiated by: Us
Reason: You sneezed, lnd got scared scared and threw a tamtrum.


Bitcoin cannot be ossified
Evolution is required for it to keep going, even if it is the bare minimum
SHA256 will be broken
Significantly better scaling approaches will be discovered
secp256k1 will be broken
and more nostr:note1q07wsu9nmm7fa2h7a23urgqqjznr2zdg2nad7yt4ummpthxcj02qmwela6


warning: the following thread may make you experience discomfort and feelings of anger, and make you question humanity
not recommended for sysadmins

https://nitter.net/Foone/status/1224238613040259072


my condolences


RIP, John Pilger. One of the greatest journalists who ever lived. First one to really reveal the true nature of how the IMF waged war on the global south.

https://image.nostr.build/5685bb9ec60a960bd76807093d1720a685b8f04f8298724a313c4b9219c0ddfe.jpg


The users fiatjaf is talking about in action

https://m.primal.net/HWDZ.png

nostr:note1qdy53ejkz6nd6mh2382yjvv457uj0rp77zpg7tcwv86dhj5txd3sl5flr8


All our collective efforts in 2024 must be employed in developing a Nostr app with a single button. Users won't have to think, they will just press that button and they will be fed with content selected to them by an amazing algorithm. When they are hungry they press the button and food will be put inside their mouths. Whenever they feel a little bit of discomfort in their bodies they just press the button. The app cannot mention relays, keys or the word "Nostr" because that will intimidate users, it should have a familiar name, maybe it should be called "mom", since that word is very familiar to all normies since when they were babies.


Disclaimer, this tutorial may have a real financial impact on you, follow at you own risk.

**Step 1**: execute ```lncli closeallchannels```

That’s it, that was easy as it could be. Now all your node’s channels are in the process of being closed and all your liquidity is being moved to your onchain wallet. The best part, you don’t even need to confirm anything, it just does it in one go with no questions asked! You can check the status by using a very similar looking command, ```lncli closedchannels```!

**Good job! Now you are ready to start from scratch and use any other reasonable solution!**

🐶🐾🫡🤣🤣🤣

Disclaimer: this is a satirical tutorial that will 💯 cost you a lot of funds and headaches.

How to quickly migrate from LND to anything

Quick and easy way to migrate away from LND!


LN channel forensics
https://semisol.dev/files/channelforensics.png


🐶🐾🤣🔥🔥🔥 https://i.nostr.build/y3dk.jpg  nostr:note1h8n8pvg6d6fnmktkn9nn573hs3x7zjm63x3dyxzgzzap7tr8ca4qwryvh0


One year ago today, I started NostrPlebs.com. I'm not going to go into all of the details as I've talked about this numerous times over the last year and most of you all know this story as well as I do. Therefore, I will keep this very short.

1) I would never have been able to do accomplish my goals without the help of nostr:npub12262qa4uhw7u8gdwlgmntqtv7aye8vdcmvszkqwgs0zchel6mz7s6cgrkj who wrote the registration and management application side of things about a week after I launched. Thank you Semi.

2) A very special thank you to nostr:npub1rq9x6sk86e8ccw2cm8gsm4dyz9l24t823elespupaxjnzdk026fsca2r93 <3 She was the very first person to offer to pay me in sats for setting her up with a Nostr address. She inspired me to do more than just offer a Nostr address to a few close friends.

3) NostrPlebs.com would not be the success that it is, without the support of all of our customers and friends over the past year. Thank you for all of your support that helped us grow. We registered nearly 6,000 Nostr addresses over the past year. I still can't believe that.

One year down, a lifetime of impact to come for https://NostrPlebs.com. This anniversary is just the beginning!


thank you for the love and support. the love on nostr is beyond anywhere else. i can’t thank you enough for lifting my spirits and praying for me. nostr:note1xmrwj3a76wrg0q6mavacy0guev30qg76jvg3kfrcezwcem6tfq3qxasyvw


I haven’t said anything because it’s been something i’ve been trying to keep to myself, but I was just in the hospital for a week with double lung pneumonia. I had incurred sepsis, but thankfully went to the hospital just in the nick of time before septic shock. I’m at home recovering after being discharged yesterday. It’s been an awful challenge to stay positive, the pain has been unbearable. It’s been tough to keep my life together now, and I wouldn’t wish this on my worst enemy.

Life is not to be taken for granted, you never know what’ll happen to you. I’m so grateful to still be alive. it was incredibly scary. I was close to being gone. I love you guys. https://image.nostr.build/fd3a9ee083cf232f19161a168828d2b29ac44737e95a631ec4c0aef547a429df.jpg https://image.nostr.build/aef691b08fbb3c9fce1295c1c6076f23fc61b70a60c5f36c8aa2166baf398bd6.jpg https://image.nostr.build/a319c4fd562827a37158598431316936785f2b36e669d6a0055be89c6bad1d0a.jpg


Nah, he’s just in it for the money *he* can make.. made that clear on a space yesterday, said he tells all the investors he talks to that it’s the greatest, most profitable casino ever.

When I asked what his own personal goal and mission is, he said: “Hyperbitcoinization”.

While anyone can do as they please with their money, don’t be out there saying your ‘mission’ is hyperbitcoinization and then leveraging your influence and money to attack it

Here’s some of the garbage he invests in.. UTXO Management is the investment arm of BTC Inc, who runs Bitcoin Magazine and Bitcoin Miami/Nashville/Amsterdam

Sadly, Dylan LeClair recently joined their team :/ https://i.nostr.build/jarl.jpg https://i.nostr.build/laxw.jpg https://i.nostr.build/WnYa.jpg https://i.nostr.build/QQ9K.png https://i.nostr.build/6wgn.jpg https://i.nostr.build/Bw6Y.png https://i.nostr.build/oaxx.jpg https://i.nostr.build/zaxy.png https://i.nostr.build/AwQO.png https://i.nostr.build/030M.png https://i.nostr.build/2wvX.jpg https://i.nostr.build/Lj4D.png https://i.nostr.build/qaxd.png


It is a pretty clear trend that over the entire history of the Bitcoin network that the average svB rate and the minimum relay fee is going down


None of this shit about Bitcoin Magazine's 360 degree return to shitcoining is surprising.

If there is degen money on the table, they can only leave it there so long before investors or  stakeholders or simply their own piggy piggy greed start pulling them into Planet Shitcoin's orbit.


Fellas, I think threads.net might be blocking some servers already.

It does not work on any Pleroma servers yet. But I believe that is an unintentional compatibility issue. However some servers seem to be outright blocked.

Let me explain. Threads requires signed fetches. What that means is that every GET request to a threads.net resource needs to be cryptographically signed. Threads will then look up the signer and verify its signature.

The flow looks something like this:

gleasonator.com -> GET threads.net/zuck (signed by /actor)
threads.net -> GET gleasonator.com/actor

The request to Threads contains a signature, with information about how to verify it. Threads will then verify it by fetching info from the origin server before returning the data.

You can see Threads fetching your own server by looking at the "facebookexternalua" user agent. Try this command on your server:

grep facebookexternalua /var/log/nginx/access.log

If you see logs there, that means Threads is attempting to verify your signatures and allow you to access their data.

On Gleasonator, I am seeing logs there. It is trying to let me establish a connection, even though it fails due to a bug in Pleroma or Threads. This means Gleasonator is not blocked.

However, on Spinster, and the Mostr Bridge, I have no requests from Threads at all, despite sending signed fetches. graf reports that Poast also isn't receiving any requests.

I do not believe they are operating on a whitelist. If so, it wouldn't make sense for Gleasonator and many other widely-blocked servers like gameliberty.club to be able to fetch from Threads.

So then I thought it may just be a caching issue, or a fluke on their end. But when I make a request from Gleasonator, I get the pingback from Threads within seconds. On Spinster and Mostr, there is no attempt being made at all.

So I am starting to think they may be blocking at the server-level already. And they are blocking Poast, Spinster, and the Mostr Bridge.


We must fight centralization by... *Checks notebook* ensuring nobody changes their node policies through social coercion and ostracization.  Node policy diversity is centralization! War is peace!


so many dumb ideas misallocating talent