Oddbean new post about | logout

Notes by LeoWandersleb | export

 Cybercriminals who hit a jackpot payday tend to fall victim to the same issue that befalls lotter... 
 Can you please give me not a lot of money? 
 Well, maybe both are evil? Iranian missiles also killed civilians. And both actions don't justify to obliterate nations or blow up the world in nuclear Armageddon but somehow that feels like it's right around the corner. 
 "Psyllium husks tear up your intestines" where did you get this from? I bought that stuff and very occasionally add a spoon or two to a meal but thought it was actually quite good for your health? 
 Don't worry about calories on keto. If you eat keto, you will lose weight even if you try not to.

Eat fat. Lots of it. The goal is not to replace carbs with protein but with fat. Lean meat probably works for faster weight loss but even if you eat fatty meat you will lose weight. 
 Did we give up custodial nsecbunker providers? What else do we need on that front? nostr:npub1l2v... 
 Are we not using Schnorr sigs? That should allow multi signature schemes where only collaborating machines can sign a message. Federated custody of social media keys. I could imagine endorsing such an nsecbunker using 3of3 sigs. 
 If you want to use the service you would have to create your key from 3 keys I think. I don't think you can split the key if you started single-key. 
 Not sure. Maybe. I might sponsor somebody to set it up and maintain it. 
 NoStrudel needs nip17 (private DMs) support! There is a bounty of $300US so far to get it integrated, with some work started which by my judgement doesn't function yet.

If you have implemented it before, maybe you want to earn a quick bounty?

If you also want to know if you have DMs that your client hasn't shown you yet, maybe you also want to chip in? 
 @hzrd149 sounded reluctant to integrate nip17 in ways that make it "just work" as default-decrypt-all-messages isn't for him personally and the crux with nip17 is that the client doesn't even know which conversation a DM belongs to until it's being decrypted but I think that is just a settings requirement. Maybe nip17 needs a "check for and decrypt all private DMs" button. 
 Why do banks on a business account provide excel export and then use different number formats in different columns and date as text without a year? How can I assume they are competent? 
 bruh. iris.to:
- snort UI
- social graph spam filtering
– builtin cashu wallet
- random feed e... 
 Snort was my daily driver but somehow it screwed up along the way. Last time I checked, it did not load many of the notes I had on noStrudel. 
 Should I see a face there or does that only work while on opiates? 
 I literally thought about giving up on you yesterday ;)

nostr:nevent1qvzqqqqqqypzq3huhccxt6h34eupz3jeynjgjgek8lel2f4adaea0svyk94a3njdqy88wumn8ghj7mn0wvhxcmmv9uq3uamnwvaz7tmwdaehgu3dwp6kytnhv4kxcmmjv3jhytnwv46z7qpq4ss6x7yvnl0zqpxxq8mzzsrhlsp9yhj5pcla7hw5nql3ay3t6v6sw3xpfe 
 Wait, what? He's really chosen the most pathetic and despicable route shitcoins usually take?

https://i.nostr.build/lUIYTPOKDS8aPT7K.png 
 Of course but to think making this painfully clear for everybody would be a good idea prior to the elections makes me wonder if he runs for president to promote his crypto grift cause I thought he posed as a crypto guy to win elections. 
 Anytime a new follow list or relay list or profile metadata note is sitned, relays should delete ... 
 According to the nips, relays are not supposed to store the old versions so most actually don't. 
 If that is a consideration, the relay could detect nukenings and retain the longest such list just in case. 
 Radical community nostr client update:

I love how multiple projects and developers have reached ... 
 I'm not sure I'm following. So nip29 allows to fork a community? Does that mean you can "copy" a group chat under a new owner? And now if I'm not sure which of those communities will be around later, I post to both communities but people might be subscribed to only either of them? So they might reply to only one community?

Other than that, I don't agree with your take to own the audience. I mean, nostr is an open protocol so if you want to build such a tool, by all means do but to decide on a fundamental level to have either the one or the other ... I don't agree with that. Let the owner pick and let the audience know how closed the community is. But in the end, each community member can already see and archive all community activity, so how to wall that garden I'm not sure. 
 So to keep members a confidential detail you would need to use gift wraps to send your newsletter to each of them and re-wrap their messages when broadcasting to all readers to keep the list private. Then people can copy the content but not the members unless those communicate their membership out of bands. 
 It's not been implemented yet and now is just the second priority nobody wants to think about. Well, some are working on it and there is proposed nips but there is no widely available standard yet.

There is also the take that nostr is meant to be simple and key rotation is not as simple as all the rest. 
 What people did in the past was to change their name to "old account of [username] (new account in profile)".

Of course, if your key really is compromised, whoever has it could change the profile to point to a different account so these pointers are hints but no definite proof that a user moved on to exactly that key. 
 Well ... if I want all your posts I now first have to query for all your subkeys.
When you follow 1.5k people it's already an issue that you have to slap that list of pubkeys on many of your queries, uploading MBs of queries every other second. 
 Well, nsec is indeed something many people expose to many online systems. nsec bunker is probably not widely used. At least not more than 2% of users use it. 
 The relationship attestation isn't my concern. My concern is that now clients need to keep track not of one key but of many. You could use a different sub key for each client you use, so your profile might refer to more than one key at a time cause you use 3 clients. Additionally you might rotate keys even without knowing them to be compromised, so for older posts you would need to track additional keys.

Currently, relays already reject queries for long follows lists. Multiply those lists by 10 and you might see the issue. 
 The idea is the same in that you end up with multiple pubkeys or you re-broadcast with the new key all your past events. But, key compromise always happens at some point and that is a good argument to isolating these points so in a nostr where everybody has multiple pubkeys, people would like to use different subkeys for different points or apps or machines.

But as fiatjaf pointed out, this problem is sort of solved with nsec bunker as here, the master key controls how the key can be used and you can give sort of sub keys to different systems without third parties needing to care or know about these sub keys. 
 Those pubkeys are very low bandwidth. The (personal) bunker listens for one pubkey per client you use.

I want a bunker in my phone. That's always on. 
 🤦‍♂️ I'm one of the 5k followers of this abandoned account. But did he really join more than a year ago? I'm confused.

https://i.nostr.build/f6gXrwVHiXEkC4IH.png 
 Fair enough. Backdating wouldn't be hard neither though. But he did confirm his nostr profile on xitter so I wonder why if he didn't get his intern to maintain it. 
 It's good to clean your contact lists from time to time, remove old Nostriches that are no longer... 
 I had asked for this several times. Great it exists now! I guess with my mere 340 follows I can leave it to others to test it out before letting it touch my follows list ;)

Does know about outbox or does it check on only some small set of popular relays? Does it preserve settings it doesn't understand? ...

For what it is so far ... is it open source? Is there a public issue tracker? In the mean time, some feedback:

 https://i.nostr.build/wPTOKLHiSl6W8nnR.png 

* Improve the layout of the list. Some minor amount of style is cheap
* Start searching as soon as you know the npub
* Show "last active" next to each account
* Sort accounts from longest inactivity (no activity ever?) to most recent activity
* Provide a checkbox with each
* Provide a "check all older than x months" button
* Provide info of relays that were checked
* If the profile could not be found, assume you didn't find the right relay to check and don't offer to remove it unless opted in. 
 Well, it helped me unfollow some 5 accounts but I wouldn't blindly trust it to unfollow in bulk. Will add the feature requests to the repo. 
 I opened issues for all on the repo but have no special commitment to favor one over the other. I dared clicking unfollow on primal for those 5 I unfollowed but checked for note and reply count and last activity there first, too. All that to me was important when unfollowing as I don't follow lightly so for a low-churn follow list, your(?) bulk feature might not be for me ever. 
 The tool does not make clear that you actually store a graveyard list somewhere. Where do you store it? On my relays or yours? If on mine, which list do you use as there are at least 3 standards. 
 Well ... the other tool looks better and shows profile pictures and works with npub instead of hex ... but both look very rudimentary. Where the above tool excels is the graveyard list. I'm not sure your tool stores the removed users to some list. 
 I’ve noticed that I don’t want to zap podcasts who have sponsor spots in the middle of the sh... 
 Yeah, some put a loading bar into the bottom of the stream during those pathetic endorsements. That makes it more skippable but yeah, it's annoying when you're listening to a podcast and maybe getting your hands dirty with garden work and can't skip that crap. 
 nostr:naddr1qvzqqqr4gupzq3huhccxt6h34eupz3jeynjgjgek8lel2f4adaea0svyk94a3njdqqxnzdejxu6n2dfkxqengdpsgd02ct 
 #politics #opinion

Netanyahu gave a speech at the UN general assembly. Most people walked out. T... 
 Not really anything new he's doing there. Just before he did it in Gaza and now in Lebanon. Who will put him to justice? Countries with nukes are above international law. 
 My face when the weights at the hotel gym only go up to 10 kg: 😑 
 A gym for hamsters? 
 Guys, could you get your elections in the US over with soon, please. This saber rattling sure will subside quickly after that, right?

https://www.pravda.com.ua/eng/news/2024/09/26/7476938/ 
 So ... Harris will win? Please not! 
 Oh, that is clearly confirmed. I have not read the whole post linked but it should contain all details needed to build an exploit. At this point there is no speculation anymore. 
 Reconnected with an old friend. 

Ask him if he’s dating anyone, he tells me it’s hard when y... 
 Addiction isn't a cause. At least it's not that simple.

Helping people is really hard. 
 Forgot my phone in "Do not disturb" mode since 7am.

Best day ever. 
 Why do people who tend to lose their phone also tend to switch it to DND? 🤷‍♂️  
 In-device video translations > filtering content by language
nostr:nevent1qqs24u39w8jwv4z8nw9yjlc... 
 If only it was in-device 😕 

But it's ok. They store x12 the video material (at some point they will store the translations as binary patches to the original, to only patch out the lip sync and audio) and we get to preserve our mother tongues. 
 *If you cry wolf too often, people will stop believing you*

I still remember Melvin tried to pus... 
 Weird claims. Wish he would have included some more concrete pointers. As is, it looks just conspiratorially minded. 
 Snails need to eat, too. :D I heard coffee helps. The left over of brewing coffee ... Kaffeesatz in German. 
 It's not a first but to roll it out "for free" to all videos would be awesome if that's what this is. Meta has an up-hill battle to fight and this might help get critical mass quicker. 
 @craigraw why the version jump from 1 to 2 for Sparrow wallet? Is there any incompatibilities?

Else, great to see you are also on nostr. All my followers should follow you, too! 
 Day 243 of #100pushups challenge complete 🤙

Sets spread out throughout the day. 

Set 1: 34 (... 
 A few more weeks of training and you will be ready for #1000pushups for 1000k ;) 
 Filet mignon is tasteless, why do people like this cut? Just because tender? 
 Always gives me a smiley when the filet mignon is more expensive than the ribeye. 😋 
 Hard to keep up with all the 2 hr long podcasts. Who is making ai summary tool :) select podcasts... 
 I want a personal LLM that learns what I find trivial or "known" and helps me find what's new. When reading Bitcoin news, I'm often just proof-reading what some journalist thinks he knows. An LLM could do that trivially, too but it could help me skip the stuff I know and summarize the stuff that's actual news for me.

On your podcast thing ... I want a generative LLM that turns a 2h podcast into a 5 minute podcast reproducing the spirit of the most relevant points, sounding as if that was all the podcast. ;) 
 It's too convoluted. This allows 1024 different settings for TOR. I would want two:

( ) tell the world my IP address
(*) protect my privacy 
 Make it four options then:

* Protect my privacy
* Protect my privacy unless the relay really wants to know my IP
* Protect my privacy unless it comes at a cost
* Fuck my privacy 
 Ok, another proposal.

.onion urls won't work unless you use TOR, so that option should be a general "Allow use of TOR"

Group stuff:
Relays: Use TOR for all relays, untrusted relays, all but DM relays (DM relays are the ones where you have to login to DM?)
Media: Use TOR for all text and media, text/audio/images, text only 
 Please specify the nip you can read your DMs on. nip4 was deprecated and Amethyst for example uses nip17 which not many other clients talk yet.

Growing pain. We will get over it and provide the best DM privacy on the planet! 💪  
 Apparently your client does only support kind-4 DMs. On NoStrudel you can stalk people. Try it out. Go to https://next.nostrudel.ninja/#/u/npub1zzmxvr9sw49lhzfx236aweurt8h5tmzjw7x3gfsazlgd8j64ql0sexw5wy and click the ghost top right. 
 You did receive 4 gift wraps however. That's how they call DMs that hide the sender using an ephemeral sender.
https://i.nostr.build/4ofkeGW90vMVQlFW.png 
 Correction: "That's how they call a technique used to send DMs" 
 Your only (nip4) DM ever was a message received from Soap Miner.

https://i.nostr.build/rk69BuN6vOna85qM.png 
 There is at least three nips. The third I had not mentioned before restricts DM delivery to only the involved parties, blocking me from obtaining these encrypted messages that are neither from nor to me. 
 LIFE DEPENDS ON DISAGREEABLE PEOPLE 
 Disagreeable is a personality trait that survived for a reason. A people without is a people that will get pushed over. Somebody has to be the first to say enough-is-enough and that's probably a disagreeable person. 
 Let's say I listened to an insane person for 20 hours and now I want to replace all my light bulp... 
 If any specific wavelengths matter, LEDs will either have to produce all of those or there's no alternative to an incandescent light. But I suspect the human genome mostly developed absent any artificial light, including fire, so it's probably healthiest to get out during the day and sleep at night. It's not the most productive, especially where nights are long but that's kind of what we are built for. 
 Highly recommend the movie ‘The Grey’ with Liam Neeson. 

Ending is dope 
 Half through, crossing fingers for a dope ending. 
 ... how often do they try to out-run a wolf pack that's already 10 ft behind them?