You can also just go do FNM if you’re into that sort of thing!


Legacy is a bit expensive to get into but it’s my favorite format and there isn’t that much card rotation.


If you think of your savings as food, fiat is your fridge and #bitcoin is your deep freezer.

The fridge you go into frequently. The deeper freezer, infrequently.

The fridge encourages consumption, the deep freezer encourages planning.


I see. It still reduces the key security overall but I understand what you’re going for.


A more clumsy but functional option is to list child keys signed by the master key


I was thinking in the context of nips 41 and 109, and around how to improve key safety. Imo master key should never touch a mobile device - if you don’t let the master key touch a mobile device or other low trust environment, but you do let a child key, then if you expose your xpub, it undermines the whole security model of having a well protected master key.


the algorithm is really good at programming people

the mindless repetition is top


The issue with exposing your xpub is that xpub + any child priv = xpriv


Hey been some time 🫂


You should check out our somewhat unusual distro https://codeberg.org/stagex/stagex


Come join #! https://matrix.to/#/%23!%3Amatrix.org


What’s the status of subkeys / revocations on nostr? Was the idea killed? Doesn’t feel right to not have a way to revoke a compromised key or the ability to use subkeys signed by a master key. I imagine the conversation happened somewhere, just not sure where… anyone have a link?


iOS


I was just doing some testing on mobile nostr clients and it seems some don’t delete the npriv when the app is deleted. Please fix this if your client has this issue. nostr:npub12vkcxr0luzwp8e673v29eqjhrr7p9vqq8asav85swaepclllj09sylpugg is one example.


Not that I’ve seen. I remember that there was a bounty at some point.


Seems like a good moment to share this since GitHub is down. There are open source alternatives to GitHub like Codeberg and self hosted options like Forgejo and Gitea. In the spirit of decentralization and OSS let’s try to ditch M$ products.


I mean.. who knows, but it certainly makes it easier. Good to understand that you aren’t interested in growing nostr though.


Is anyone in Canada looking to grab Ergodox blank key caps? I bought them by accident instead of the ones for a Moonlander. Can sell them for CAD $80 + shipping.


What are the best relays rn?


I was looking at it but @openvibe seems like the thing I want


Congratulations! Looking forward to seeing more from your team 🫂


nostr:npub1sg6plzptd64u62a878hep2kev88swjh3tw00gjsfl8f237lmu63q0uf63m is killing it putting his money where his mouth is concerning privacy and free speech

https://www.nobsbitcoin.com/simplex-chat-v6-0/


Sick deal. Thank you 🤙


Nice, I’m setting a node up soon. Decentralize all the things!


Basically the entire infosec community moved from twitter to mastodon, so I’m not sure where you were looking.

But anyways, you don’t think making it easier for users from another platform to come here by making integrations across them is a good idea?

Btw I’m not trying to have a discussion with you about which protocol/platform is superior, we agree on that.


I just gave a friend an update on what Nostr is and showed a bunch of apps in the ecosystem. Showing how fast it is and how all of these apps use the same identity and data but are different in their focus. He has been around the space of social media protocols for years but he was blown away.

We’ve really got something amazing. We need to do a better job of show and telling the story. It’s not about just zaps or censorship resistance or the way we’re doing web of trust moderation. We’ve built something which works really well. It fulfills the dream of the early days of the internet, web, and Web 2.0. An open interoperable internet, by and for the users.

As an aside, yes bitcoin is part of it, but it’s so politicalized that some people dismiss nostr as that bitcoin social media protocol. We see people join nostr and through it discover bitcoin, that’s the path to wide adoption.


Definitely! One thing that’s been bugging me is the tribalism I sometimes see on nostr. We need a welcoming environment, not a condescending one. Let’s get more peeps in here 🫂


MOAR


It’s a good idea. AI will keep getting better. It will become very difficult to distinguish reality from AI generated soon and in some cases it’s already tricky to tell them apart.


If you want to help build an off-grid and decentralized mesh network, check out https://meshtastic.org/

For $30-$100 you can get a node that has excellent range (sometimes up to 100km), and it doesn’t require a HAM license.

We have done a great job decentralizing quite a few things, and this is a great way to do the same for our infra.

Check out nodes globally using this map: https://meshmap.net/

I recommend this hardware: https://shop.uniteng.com/product/meshtastic-mesh-device-station-edition/


GitHub sucks. https://sfconservancy.org/GiveUpGitHub/


> Between stimulus and response there is a space. In that space is our power to choose our response. In our response lies our growth and our freedom.
>
> Stephen R. Covey


There are a lot of ideologically aligned people on Mastodon that left Twitter for a good reason. Showing them a better alternative would be great. I want people to have choice. If a subset of those users want to create their own relays and socialist them up - let them.

Outside of that, most of the infosec community moved there and I like to have access to that info as it’s relevant to my work so that’s a very practical issue for me. I’d rather have the problem of having to curate than not having the data available where I want it.


Like this: https://codeberg.org/stagex/stagex


Maybe but at least it’s federated, and we can annex users from there. They are a perfect target for upgrading to nostr, and atm they have a stronger/larger community so finding a way to bridge them over is a win.


I officially kicked Twitter today in the interest of supporting OSS and decentralization. I unfollowed everyone on there and pointed to Nostr and Mastodon.

Has anyone had success bridging Mastodon and Nostr? I came across Mostr but so far it isn’t working well. Seems like it would be a big win if we can integrate these networks more.


Bitcorn is forever 🌽


Ohayo gozaimasu. 🌞


Welcome! 🫂


Check out airgapos. It’s made for this sort of thing: https://git.distrust.co/public/airgap


Just cut a new release of StageX. It’s a fully bootstrapped build toolchain focused on determinism/reproducibility.

https://codeberg.org/stagex/stagex

Best use cases are high risk environments where you want all of the software used multi reproduced with minimal deps, but you can use it anywhere you like, for example as a drop in replacement for alpine rust - which there is a nice example for in the readme.


Leuk! Ik kan spreek een beetje omdat ik heb in Amsterdam gewooned


Alles is goed. Werken aan een disaster recovery systeem! Jij bent nederlands?


Goedemorgen. Hoe gaat het allemaal?


Huge milestone: First demo of Nostr Web Services (NWS) bringing TCP to Nostr. With NWS, you can host any existing web application on Nostr without having to use DNS or even announce your public IP to the world, simply by sharing your service's npub (or nprofile).

Try it out the demo yourself. Here is a Cashu test mint running with NWS. Let's use curl to retrieve the mint's information. The request travels from your computer to the public NWS entry relay, then through nostr to the service's NWS exit relay. At the other end is a Cashu mint with HTTPS encryption.

```
curl -s -x socks5h://relay.8333.space:8882 https://nprofile1qqs8a8nk09fhrxylcd42haz8ev4cprhnk5egntvs0whafvaaxpk8plgpzemhxue69uhhyetvv9ujuwpnxvejuumsv93k2g6k9kr/v1/info --insecure | jq
```

https://m.primal.net/JTMl.png

I can't stress this enough: THE MINT RUNS BEHIND HTTPS!

The NWS entry relay can't read your traffic. It's encrypted. We can host public entry relays that can be used by anyone.

This means we can plug the entire internet to it 🌐.

Let's plug it into Cashu for now. Nutshell wallet supports socks5 proxies (that's how it uses Tor). By setting the public entry relay as the proxy, the wallet can now connect to a mint's npub/nprofile and communicate with it via NWS.

https://m.primal.net/JTot.png

This is going to be so freaking cool. And it's going to be a lot more useful than just for Cashu. There are still bugs and issues that need to be ironed out but the code is coming out soon. Watch this space.


Thank you for the hookup! You da real mvp


No sweat, appreciate you 🫂


Does anyone have an invite code for getalby?


Why do so many companies feel it’s okay to leak their user emails through the signup flow? AWS Cognito actually has this issue baked into their product.
https://m.primal.net/Jjil.jpg


Whew, thought I lost my key but past Anton did a nice backup 🤙


He just missed out on drawing so many “obvious” conclusions


Totally. I really enjoyed both Sapiens and Homo Deus.


The Sovereign Individual by Davidson and Rees-Mogg feels like something Yuvel Harari would have written if he was smarter.


We started at 6am. You basically gotta walk all day. I bailed around 4pm, and my buddy finished around 11pm.


Heyo, thanks for the nice welcome! Unfortunately I only made it to 60k steps because my right foot got injured last week and that flamed up again but I’ll try again in a few months!


Ever wonder what it was like working for a Bitcoin company in the early days? Did you know users back then were part crazy, part generous?

I started working at BitInstant late 2012, which allowed people to buy Bitcoin with cash. In the fall of 2013, I joined Blockchain(dot)info (BCI). The early days at BCI is what I want to focus on here.

BCI was the biggest non-custodial web wallet & the most used block explorer. I wore many hats as the first employee, but my main job was handling the support tickets.

My first day at BCI was chaos. I logged into Zendesk and saw THOUSANDS of tickets as old as January 2013. There was one guy, Ben Reeves, doing everything since inception. Support wasn't the highest priority.

After initially feeling overwhelmed, I decided to clean things up. I closed all tickets older than a few weeks, and included a message apologizing for the lack of response. I assured people this would no longer be the norm, and to open a new ticket if their issue was ongoing.

I had free reign over my job, and became obsessed with making sure users received help in a reasonable amount of time. It started as a goal to respond within 24 hours of a new ticket, which turned into 12 hours. Within a few months, the average response time was down to 2-4 hours, only because I had to sleep at some point! 😂

I didn't realize how little I knew about Bitcoin until I had to answer tickets about the Bitcoin network itself. After all, we weren't just a web wallet, but a block explorer! I spent many late nights digging around on BitcoinTalk, trying to learn more, so I could help users with their questions. Learning about Bitcoin back then wasn't impossible, but it wasn't easy.

Many early users were shocked to receive a response to their questions. To hear back so quickly was unheard of. There were many Bitcoin projects back then, but most didn't have dedicated support staff. If you received a response, it would be from the founder or some other developer. These guys didn't have the resources to tackle support, especially in a timely manner.

I quickly learned about the generosity of bitcoiners. Many users requested a btc address from me so they could send a tip for the help provided. Even when I told them it was unnecessary, as I was a paid employee, they insisted on tipping.

Many of these users were nuts. 😂 Here's an example that didn't happen frequently, but it happened:

A user opens a ticket during the time I'm actively watching the queue. I see it come in, respond within minutes with a solution, and he insists on tipping. I'm like, "Bro it's cool, don't sweat it," but this madlad won't leave me alone until he tips me.

I look at my tip jar - 0.5 BTC, which is worth a few hundred USD at the time. WTF, ARE YOU INSANE?! 🤯

Part of this generous attitude was about saying thank you, but I believe a bigger part was about the early proliferation of Bitcoin.

We preach the HODL mentality today, but Bitcoin wouldn't be what it is without the generosity of early adopters. So many bitcoins were given out freely so people could learn about it firsthand.

I believe many of the tips I received were from people who, at one point, also received free btc. It felt wrong to HODL these tips, so I paid it forward. I purchased work related items so I could do my job better. I tipped people on Reddit. I donated towards bitcoin-backed fundraisers, including when Andreas fundraised for Dorian Nakamoto. I did everything I could to keep that spirit of giving alive.

The landscape today has changed, but that spirit of generosity lives on. The best example is zapping on Nostr, where people are tipping each other via LN for posts and comments. It's beautiful to see!

Thank you, early adopters, for your generosity. You're a big part of why Bitcoin is what it is today. 🧡

Be kind, be generous, and be a little crazy. 😄


GM! Going for a 100k step today for the first time. Hoping my legs don’t give up, because I won’t.


Stories like this are such a cool part of history and a look into the mindset that’s needed to bootstrap a new technology

nostr:note16zshe8wy034mnar9grc80cwtaj5qmkcyz49mdn6t4u4tn5rtc5tsaze2aa


When you realize what it means to be a sovereign individual: https://open.spotify.com/track/5EWPGh7jbTNO2wakv8LjUI?si=QV9YsDHYRGqzW9IfJ7cqUQ&context=spotify%3Asearch%3Afreebird


Dubrovnik ya?


Trying out primal. V-nice so far 🙌


We just released StageX, a containerized software build root, 100% auditable and deterministic, bootstrapped from 256-bytes of assembly. Every package is built, attested, and signed by multiple independent builders, and of course everything is open source.

https://codeberg.org/stagex/stagex


Isolating environments is the way 🤙


Absolutely, I always find it funny (and disturbing/sad) when people assume that proprietary closed-source software is more secure


Self-hosted FOSS is where it’s at 🤙


While this is a growing and non-exclusive list, here are some of my favorite nostriches that I think you should be following if you aren't already (really hoping i get this tagging right 🤞):

#[0]  - if you have nostr FOMO like me then youll need the daily report.

#[1] - because he could probably teach Bitcoin to a rock. He may have already done so.

#[2] & #[3] - because they are dope, bleeding heart bitcoiners and build cool shit.

#[4] - a phenomal "relay" of information.

#[5] & #[6] - becuase theyre legends and for updates on leading iOS and Android client development.

This is very much a short list. But feel free to tell me who I am foolish for not including 🤘💜