bitpunk.fm seems to have a different server setup that ignores the parameter part after nostr.json and always returns all the users

eg
https://bitpunk.fm/.well-known/nostr.json?name=bearetta
https://bitpunk.fm/.well-known/nostr.json?name=Bearetta
https://bitpunk.fm/.well-known/nostr.json

all returns the same list
i do the same for x0f.org actually--there's so few users that there's no reason to implement database lookup logic

for bigger servers, or if they want to make it more difficult to enumerate users (for privacy), it makes sense to do so, and minestr.app apparently does


for example, he was a great help in the COPA case, without their support and funding we'd have a lot more trouble winning against CSW
credit where credit is due


it looks like the server is case sensitive in this case, it won't return output when queried for Chris:

$ curl -v 'https://minestr.app/.well-known/nostr.json?name=Chris'
< HTTP/2 404
$ curl -v 'https://minestr.app/.well-known/nostr.json?name=chris'
< HTTP/2 200
{
  "names": {
    "chris": "..."
  }
}


If it wasn’t for crypto anarchists, you’d be trading stocks with your broker over the telephone during Wall Street business hours.


in a way

i think relays rejecting notes that are non-valid according to the spec with a clear message would make for a better developer (and eventually user) experience, and not be censorship: you can post any content as long as it's correctly formatted, at least things are not accepted then silently hidden

however, what it would trade away is flexibility; that relays have knowledge of the message kinds and do checking makes it harder to experiment with new extensions and kinds, and possibly get in the way of "other stuff" uses, i definitely get the point why it was designed like this


at least Jack Dorsey seems to know what he's doing, and has been a great help to various FOSS and decentralized projects
(not that im quite idolizing him, no one is perfect)
Saylor just spouts nonsense all the time, that he can get away with due to his influence and proximity to the money printer, and i'm not sure why people have patience for this


well, yes, LSPs and lightning payment providers handling tons of payments tend to have elaborate routing setups and multiple lightning nodes they load balance over, but maybe a bit early to worry about if you're just getting started 😀

anyhow, happy to help test connectivity, just let me know once you get there


this is a drawback of handling everything client-side and having server that is only a "dumb" relay that doesn't do message specific validation and feedback

matrix has a similar problem, though there is sufficient client centralization that one client (element) pretty much decides what is going to be shown and what isn't


there was also a coredev event last week (bitcoin core developer meeting), some people are still traveling from that or otherwise inactive

still, that can't be the entire audience here lol


i've never been and will never be socially conservative, fiscally i dont really know where i stand, i've had opinions drift on that but really every system seems to suck in some way


i agree... but really it's the enduring feeling of powerlessness that numbs me; i was much more active about this 15 years ago, getting outraged about one or other human rights violation or mass slaughter after another, posting about it on social media
hoping telling the world about it (eg sharing wikileaks Collateral Murder video) changes something
but it just hurts to confront myself with it constantly while it changes nothing, yes we know how by know awful humans can be to each other 😢 is that all there is
the people in charge just do what they've always done, they don't give a shit about protest, did the idealism that we live in a democracy give us the idea that we have anything to say about war?
maybe, all we can do is be thankful if we're not somewhere the bullets hit


what kind of load balancing setup are you using for lightning ? i didn't know that was even a thing


if you don't have a known deficiency, and have balanced diet otherwise, they're pretty much pointless


oh sure telnet works too, suggested nc because it can also connect to Tor addresses (using `-x 127.0.0.1:9050`) and telnet isn't that commonly installed anymore 😀


any other way of contacting me is fine too (see https://github.com/laanwj), doesn't have to be DM here 😀

no, i don't know any way to figure out if a lightning node is connectable, except connecting to it from another node-or maybe simply checking the address+port is reachable using `nc -v` or such

there may be websites that try it for you and report, maybe amboss.space or other lightning explorers, but not sure


+1 for house of suns, this is one of my favorite books


i was starting to think my relay or client was malfunctioning


M51 (MIRI image)

https://live.staticflickr.com/65535/53150967876_1c5cbf92c4_c.jpg

#m51 #jwst #webb #galaxy #whirpoolGalaxy

Image Credit: ESA/Webb, NASA & CSA, A. Adamo and the FEAST JWST team

Published: 08/29/23


happy to open a channel to you if you DM me your node address


Black basil...

https://image.nostr.build/934afc2134f3e6de6553eb7238aef20ad0c017b23b47c5cd22f2c35a7eb64d1c.jpg

#BeautifulNature


sure ! i have that (and tons of RPIs, they can be passively cooled which is great against noise), but it's not what you'd want to use for any kind of serious production setup for tons of users 😀


i also have fiber to the home, though it maxes out at 1Gbit
which is plenty enough for me at the moment, certainly because i'm not hosting a lot at home 😀
i don't currently live big enough to accommodate a server room 🙂


8 gbit ?! that seems big overkill even, would be extremely hard to saturate with relay traffic even with lots of users (and i imagine finding a powerful enough server will be the bottleneck at that point)


the horizontal scrolling parts look a lot like Nemesis/Gradius for MSX i played a ton of that as a kid
oh i see it's a spin-off so that makes sense


i think this is true, it helps to see code as a craft like crotchet/knitting where you make patterns, after all that was what was historically at its basis by Ada Lovelace

also-at least a lot of work in FOSS is as much about communicating with people as doing coding, especially maintainer roles could easily be seen as more femme-coded


emblematic of a society that doesn't care about its people, just puts them away in boxes when inconvenient


the main theme of this account seems to be "i can't build nostrudel" lately, hehe


Sketched out some talks of nostr:nprofile1qqsvxhlccdqyf8cddzh34mzggja5f2wqhrqa6n6dfmauvhsjqwdrfzspzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhgqg5waehxw309aex2mrp0yhxgctdw4eju6t0qyw8wumn8ghj7mn0wd68ytndw46xjmnewaskcmr9wshxxmmdtsxx9q and @nothingmuch (no nostr?) from nostr:nprofile1qqsxhwmaw842y4zzzk580cfke4l5jr6xyh44v3v6pk59dnyzjm2a7vqcd5flv. Sadly couldn't make it to there, but seemed to be a great technical conference!

So cool for organizing nostr:nprofile1qqsvh300dvquh50l5t9et2257pxrsk5ndsdgdcdmnnxl9nc0f6l2ejcpz3mhxue69uhhyetvv9ujuerpd46hxtnfduq3samnwvaz7tmjv4kxz7fwwdhx7un59eek7cmfv9kqzrrhwden5te0vfexytnfdu7y9l4j!
 https://image.nostr.build/6f801068559f148b5985417b2f01f84b5a8edae014cfbfd14d12d746c87a2023.jpg

See me do it live at nostr:nprofile1qqs0zqyq74avavecxlreqte2ugu5hc7q867qwg386pmeflmd00hdnhqpz4mhxue69uhkummnw3ezummcw3ezuer9wchs6tqrzz!


i can't build the latest nostrudel master branch anymore, some dependency issue, does anyone have an idea what is happening here ?
https://github.com/hzrd149/nostrudel/issues/253


The documentary review even made it to the physical weekend edition, nice! Here's another quote:
Hoback: so what is it about then?
Todd: to make Bitcoin the global currency while people like you are distracted by nonsense.
https://img.sprovoost.nl/48d2a5c230015e6606fb15cb795d7bc7027097c54f179f41effa3ebf480ccf8c.jpg


Onward 🫡


Stay humble 🫡


from what i remember back in the day blockstream was heavily trying to get people to use PeerSwap instead (because dual-funding only solves the initial funding problem)
but they always have so many balls in the air
and LSP based approaches get so much more marketing behind them


can concur that dual-funding is a feature that works great, i made a lot of use of it when i had to rebuild my lightning node, it's a shame that it's so undersold


mechanically it looks like it could, but i doubt the default model will come with any kind of combat programming, so probably the latter
(would make for a much more interesting fight though)


something you won't find anywhere else: first-class support for #cmus music player 😀
nostr:nevent1qvzqqqqqqypzq8m30r240xhza67qjpv7rjgljdq568svnsl69q0ncxa8nj2ee42eqy2hwumn8ghj7un9d3shjtnyv9kh2uewd9hj7qgwwaehxw309ahx7uewd3hkctcqyq0gm332ffkgh6gugq0ycn3kzutxgdurt7wznqlhzn2su8ymgc99z3hw88d


As so often, well put by Greg Maxwell:

"The whole point of bitcoin is to exist outside of any centralized control. Satoshi was clearly passionate about this. So much in our lives is mediated through centralized authorities that people seem at times desperate to hand control to someone. The things in our lives that aren't centrally controlled, like -- say-- the English language just get taken for granted. How could Bitcoin achieve its purpose with some founder around? The technology was designed so that the identity of Satoshi is irrelevant, but a lot of people have a hard time understanding that."

https://www.reddit.com/r/Bitcoin/comments/1fzi657/why_not_peter_todd/lrc6ok0/


fuck U money


yes it's a joke, but it's scary how believable it is


i checked and none of the relays that they mention still has it, i'd guess njump have it cached locally (and so have the users that still see it in some client)


ARISS SSTV image I was able to get part of this morning. Damn hard to get a full and clear signal/recording. I use websdr.org to follow the #ISS around the planet and record the signal where I can. It's a fun challenge and  you can get a digital reward for decoding even a partial image at https://ariss.pzk.org.pl/sstv/

#hamradio #spacestation #sdr

https://nostpic.com/media/80bfd70e77ad84c01489e650c089ee81ef4111d9ed66a6d4498d9ad8a0abccdc/d89271d5ea9b0fea11c26756f7a601970554b5e1adbc53e5c3b002db01dc5f7d.webp


yes it was a twitter clone spawned by one of the many Musk dramas, which basically looked and worked like someone rolled something in php 2000's style, on a shoestring budget 😀

which it was, the idea was that it was run by some organization with by-laws that would prevent the excesses of twitter like data harvesting, algorithmic rage boosting, advertisement, abuse of moderation and so on, but they didn't have any plan at all to cover costs

and not surprisingly, went out of business quite quickly


oh i think i figured it out, need to use "pnpm" instead of yarn


$ npm -i pnpm
Unknown command: "pnpm"

this did something:

$ npm install pnpm
added 1 package in 1s

unfortunately, the yarn output is still the same after that


it took less than a month for my build-nostrudel script to no longer work 😮💨

UsageError: This project is configured to use pnpm because /home/.../nostrudel/package.json has a "packageManager" field

not even sure what it means, i was using

yarn install
yarn build --outDir /home/www/... --emptyOutDir

any idea what would be the equivalent for pnpm ?


i mean, having seen people extremely enthusiastic about cohost of all things (at the time), i'm convinced people can overlook a lot of technical jankiness if the experience and community is fun to them 😀


#Nostr101

"npub" is your public key. It never changes.

"nprofile" has both your public key and your current home relay. It changes as your outbox relay list changes.

When you are sharing your user, prefer to share it as an nprofile since the receiving user / app can quickly figure out where to get more information from the user.

If the receiving app only has the npub, it has to search for a relay that has the user. If the receiver is using the same relays as the sender, that's easy. But if the receiver is on a separate relay set, then it's likely the receiver will never load the user.

Outbox model fixes this but it requires you to share the nprofile, not just the npub.


if some people stay behind on the old one that's also fine, doesn't change anything


i mean nuke the network, start with a new and empty one

right maybe every year is too often, but making it predictable means that different infrastructure can be prepared to move to the next one and a clean slate (which is a worthy test in itself, i suppose)


i think a good way to guarantee them from gaining value would be to have a predictable reset rate, every year, N years, or even a fixed lifetime in blocks


Video time lapse of the Aurora https://video.nostr.build/39e5c2508618fca76a4a598f47a726a83bda3ef15810c490227db12a7a5a76ca.mp4


sure, one could make storage/retrieval authenticated and end up with something like dropbox; files are encrypted in transport but the server can read them

the lack of partial updates (as they would change the SHA256 hash) would bring some inefficiency for cloud uses compared to other network file protocols

the E2EE layer exists on top of that, and that paper is about how it's very hard to achieve without leaks of some kind, so that's where the challenge starts 😀


yea it would be great, but some people act as if we already live in some post-scarcity civilization, even though it's constantly more clear that we don't—or that one will just be effortlessly airdropped at any moment (*handwave* AGI *handwave*)


i dunno, blossom is mostly intended to host media for publishing, it's as far from a private E2E encrypted cloud as you can get


i think there can be, but only if you explicitly create them, through a contract or business relationship or such

not just because someone did something in the past


Vladimir: From the Old Slavic name *Voldiměrŭ, derived from the elements volděti meaning "to rule" and měrŭ meaning "great, famous". The second element has also been associated with mirŭ meaning "peace, world".

Stanislav: Derived from the Slavic element stati "stand, become" (inflected forms in stan-) combined with slava "glory"

Ludmila: "favour of the people" from the Slavic elements ľudŭ "people" and milŭ "gracious, dear"

Vitalik:  form of the Late Latin name Vitalis, which was derived from Latin vitalis meaning "of life, vital"


Russian names: "ruler of the world" "become glory" "favor of the people" "of life, vital"


thanks ! i had noticed the proxy metadata but wasn't sure it was used this way, makes sense


please tell me there's at least a mechanism to prevent roundtrips e.g.

mastodon -> bridge a -> nostr -> bridge b -> mastodon

or

nostr -> bridge a -> mastodon -> bridge b -> nostr

(and infinite regresses of these 😱 )


no, never heard of it ! thanks, that could be interesting


i remember this kind of thing from the early days of bitcoin, people have real difficulty coping with a system where there's no company and organization in charge, or directly profiting from use

at some level many people just *can't* understand it, which means Bitcoin Core was a convenient target for all nasty complaints

one of the most persistent, hard issues was fighting scope creep in Bitcoin Core (and in the consensus code); yes, that you can do something with bitcoin doesn't mean it all has to be in that software, the onus of decentralization is to create an ecosystem, where everyone does their part, but no part is critical
(and a project with everything is unmaintainable anyhow; there's the tendency to push the burden on a few people, a kind of Omelas effect)

and the relentless nagging for me to be "more like a dictator" (remember Mike Hearn)... sigh, no that's not the kind of thing we're trying to do here: create a decentralized financial system, not a weird new government. the reason BSV appealed to quite a few people is that it had a central dictator, even if clearly a scam

eventually, things fell in their place, though even in bitcoin it's a continuing struggle... really want something to be done? great, take initiative yourself, help out one of the projects in some way or get people to help

nostr:nevent1qvzqqqqqqypzqwlsccluhy6xxsr6l9a9uhhxf75g85g8a709tprjcn4e42h053vaqqsqqqy294d9tatpd4v5r8h287m2ytsf5kn8aqvsxc0jhwuvn9ky6tsh0r43l


i tried, but their donation page is offline too at the moment 😢


a critical remote-exploitable vulnerability in Firefox has been found

if you're using Firefox, check the version. it has been addressed in the following versions:

- Firefox 131.0.2
- Firefox ESR 128.3.1, and
- Firefox ESR 115.16.1.

if you're running an older version, upgrade asap !

https://thehackernews.com/2024/10/mozilla-warns-of-active-exploitation-in.html


i'm not sure, i think the private messenger space is even more saturated than the social media one, and if you have signal, matrix, or simplex for that matter, i'm not sure "doing it over nostr" is much of a win

DMs do depend on a network effect to some level; my own experience is that it was difficult enough to get some people to use signal, i don't think i'll try to get them to use yet another secure messenger

but onboarding them to DMs is easy if people are already using nostr for other reasons
another bootstrapping problem i suppose 🙂


i think trying to listen to them and understand is good, but that doesn't mean obeying every one of their whims 😀


yes sway is pretty good

i'm not the biggest fan of tiling but it's super lightweight which is great for slower machines, or when every bit of screen space (lost to window decoration) counts


book recommendations for learning cryptography
nostr:nevent1qvzqqqqqqypzqe6msnl8tcsk4w28capcaegeefmh2dmdmuza4ha6vfut6qfwr4egqqsxme6td6uc37py83q9spt4754m4dg7pr9ceaeysl0f43pkxzp8c3c5knkku


still struggling with one at the moment😅


Fantastic writeup of the case by the law firm Bird & Bird who represented COPA in the trial against Craig Wright
https://www.twobirds.com/en/insights/2024/global/a-different-way-to-defraud-the-lessons-from-the-trial-of-bitcoins-origins


attacking the internet archive should be counted as crime against humanity imo
nostr:nevent1qqsf4k9c97c74sae4ywjcn9chd6vrfspsv3ed6lnglxqqcakkkkxwmgpzdmhxue69uhkummnw3ezu7psvchx7un8e5928x


rather working on extreme wardrobe complexification tbh


relationship_status: [embedding float32 x 768] is the new "it's complicated"
nostr:nevent1qvzqqqqqqypzp6vf4fhqzd749fqsanvf4evl0tdlkz77e9uxhyvpcdc8j495e7nfqqs2g8xpcfrzfpk2dey4jvxsh4qgslat7puwk5adxghn4gqj7xhd5eqcr6l02


sure, it's not code i'm super proud of but here u go:
https://github.com/laanwj/miscellany/blob/main/nostr/post-bitcoin-core-release.py


Nice! Both the fact that this was merged and that the bot tagged me (add an njump link or something similar to your Github profile). nostr:note1k6aevgrjjtrfyws4j679qtk0jp04cmsw0g3a73prqgjq9t5xdsjqkanx5d


congrats, and glad that it's working now!


not planned

https://media.x0f.org/90dc89a2a9b2042069911055c45252f759483d911025c4e9ff4b2122cd57f23f.png


it doesn't quite nullify people's built-in rage-algo, but there's no amplification either

if it was twitter you'd now have 100k rabid parasocial followers that only know you by that one angry rant, and expect you to post like that all the time 🙂


finally, irl boob armor ! 🤣


the triple big-mac of nothingburgers


i understand the smaller dev related conferences, it can be constructive to discuss with other developers in person sometimes, but yes i've always avoided the big bitcoin conferences for that reason


thanks for the suggestion !

yes i eventually rolled my own script for this, which specifically parses the yaml metadata for jekyll posts from the bitcoincore org repo, and creates and posts a nostr event with the markdown text (with magnet link inserted)

see https://habla.news/u/bitcoincore@x0f.org

it turned out to be easier than expected, though for experimentation it would have been nice to do the first one with a UI


i have very varied experiences with users reporting issues, some will go out of their way to explain their problem and provide supporting evidence, others will swear and bring personal things into it, if you're going to treat me like shit... at least pay me for it. i definitely differentiate between those.

i've definitely never had "groupies", like yes people will treat you nice as long as they want something from you, at other times they treat you like a code generating machine instead of a person

the projects i've worked on tended to have tons of code-review, testing, and critical discussion, sometimes even to the point of dragging out changes for years

it can absolutely be difficult to get people to look at your stuff, review is often a bottleneck, that's true ! people like to write code but not necessarily look at it, to have review you need to have people that really care about the project, as well as ideally the specific change

i agree nostr has a specific problem that it just has too many projects going on, and too little focus on each of them. maybe it can be too easy to roll your own 😀  or maybe front-end dev is different, in the sense that it's more opinion-driven than backend dev so easier to get into a fight about little things.


we're all Satoshi, even nostr:npub1ej493cmun8y9h3082spg5uvt63jgtewneve526g7e2urca2afrxqm3ndrm  🙂


it kinda depends on how person A behaves, if they take their time to report an issue the proper way, i'd think they're a great user, helping narrow down and find a bug and improve the software

if they immediately start blasting you about how the software sucks (even if it's not ruled out it's some problem with their device) and their specific problem is more important than anything else you could be working on and things like that, and are otherwise not helpful, and if that happens day in day out (which is often with popular FOSS software), i can really understand patience wearing thin


at least there's also no way to build a backdoor only the "bad guys" can use !


There's no way to build a backdoor that only the "good guys" can use.


that made sense to me, but apparently, websocket can already do this on the transport level:

nostr:nevent1qvzqqqqqqypzqlxr9zsgmke2lhuln0nhhml5eq6gnluhjuscyltz3f2z7v4zglqwqqsqz35fqcqu7qmplf6z7wmyxs7fv84rezvj24kevz5h54ntdhwsj6cyz2c99
so now it's less clear what the win would be


TIL this is a thing at all, it's even defined in the same RFC ( https://datatracker.ietf.org/doc/html/rfc7692 ) as per-message websocket compression, a matter of reusing the LZ77 context between messages


>  while others experience thinking in more abstract or sensory forms, like images or emotions rather than words

i'm like this; i don't have an internal monologue i don't think in terms of words, unless i'm actively thinking of something to type or say


i got a cheap USB C DAC cable a few days ago, now i can rejoin the exciting world of using a phone with wired headphones !


to be fair, us millennials have been told that WW3 is coming pretty much all our lives, maybe with the exception of a few years in the 90's with the fall of the Berlin wall, but it's always some other story, always like "now it's really one minute to midnight!!!"

gotta dance sometimes 😀 it is what it is


thanks-nostter also seems to mess up the rendering in various ways, while nostrudel and habla render it correctly

angle brackets are standard markdown (and convenient here, so that people can see/verify the URL) so i tend to err on the side of "clients should fix their shit, please report an issue with them" instead of adding all kinds of workarounds


it's hard to word it in a non-awkward way, but seems you both have different, but kinda feminine coded roles
(like queen and caregiver achetypes)
not exactly of course
it's cute anyhow 😀


a wider "right to repair" (including reverse engineering provisions, and the right to make replacement parts) would go a long way too


it's a very lesbian way to have a heterosexual relationship (i definitely don't mean that in a negative way)


i've experimented a bit with nostr: URLs in the markdown, but this embedding doesn't seem to be handled great in clients (nostrudel generates a unusable link back to itself, habla keeps the nostr: link assuming that the browser will handle it...)
even though NIP-23 explicitly mentions this

so yes, putting in the magnet URL directly makes more sense for now


in the same event? that wouldn't work, torrents are kind 2003, whereas markdown notes are 30023

however, markdown notes can reference other events through the normal link syntax and "nostr:" scheme, so adding a reference would be straightforward


yes, that would be something to figure out first

HTTP2 benefited from decades of HTTP use, and a virtually ossified protocol, making it possible to design a hyper-optimized protocol for specifically that use-case

just throwing something together with protobuf is not quite that, and has the risk that another binary optimized protocol will be needed later, and of course people will want support for all three... 😀

(HTTP3 didn't change much compared to HTTP2, the main change is switching the transport to QUIC and pretty much all other changes are related to that, but still-)


this is a complete release announcement and download without reference to either github or bitcoincore.org

(the idea is to automatically generate this from the yaml descriptor https://raw.githubusercontent.com/bitcoin-core/bitcoincore.org/refs/heads/master/_releases/28.0.md )

still working on it; it would, for example, make sense to put a reference to the torrent event directly in the release notes


yea, thanks, already adapting the nostr posting harness that i rigged in python

it's better if this is semi-automated anyway, though i was hoping to avoid this today 🙂


is there a nostr long-form client that allows me to enter just raw markdown ?

i tried using Habla but it shows a WYSIWYG widget and no apparent way to bypass it, i'm sure this is nice for most people but i already have the content as md file

#asknostr


haha if it isn't just procedural delaying on the side of the Brazilian government this is the most typical Musk mistake i can imagine

of course he's not going to have anyone cross-verify the bank number before sending the transaction, and give anyone the opportunity to potentially correct him, he's the big man !


i'm not sure-AFAIK, the protocol sends only one event per message

deflate is very good in catching repeated text within a message, compressed JSON will get pretty close to a naively implemented binary protocol, for large data
it's also very fast

with lots of small messages it will be less effective because the same text repeated over and over won't be compressed, this would ideally need some kind of shared dictionary like HTTP2's header compression


im neither in marketing nor really a judgemental person, if you prefer monero then use monero 🤷♀
i have zero interest in "my coin is better" arguments based on checkbox points, there's also no need to try to convince me of anything


yea, the websockets protocol has built-in support for transparent per-message compression, using deflate (gzip)


billions? hah, that presumes adoption already 😀
to get there, there's probably more worthwhile things for both relay and client authors to focus on than duplicating protocol work


that's a fantasy imo, there will be no ditching, the old protocol will always be around, and there will always be need to support it too


imo too early for that kind of optimization, nostr having a trivial-to-learn protocol is one of its charms, and a simple text protocol allows for easier prototyping and experimentation in the early days

mind that this is only about text messages, which are very small compared to other media, would agree encoding images and video in JSON would be absurd 😀

adding another protocol and the logic for supporting both of them adds a lot of hassle--like sure HTTP eventually got binary protocols in the form of HTTP2, HTTP3, when giants like google with massive web servers tried to squash out every byte and sponsored this kind of development, but i'm not sure massive relays like that what we want in the first place


big mean thing loll


huh there's a few pretty closeby here, might get a device and try too, mesh networking has always seemed exciting to me but also i've never lived in a place where there's interest in that kind of thing, or at least i was aware of


in Dutch there's kippenkermis ("chicken carnival") but it's not a very common expression


aww poor jellyfishes 😢 🪼

the blue dragon mostly feeds on siphonophores (like the portugese man'o'war, which looks like a jellyfish but officially isn't one) and collects their venomous nematocysts to use them itself, which i find intriguing about them, but it's a pretty dangerous animal in general and im sure it also eats other small sea animals it comes across


yes for example i've always found the citadel vision very dystopian, it's the kind of obvious future outcome to be avoided, not unironically fantasize about
it definitely doesn't need any kind of decentralized money!

i don't think issuance is the problem, if sats are too valuable, they could issue smaller notes; blockchains don't scale to mass use so a that point everyone will be using one L2 or another

but that presumes adoption, my fear is more like "what if it was all just a speculative market, people sell their bitcoin for stock or their local currency, and none of the technology we built will actually be used"


Onward 🫡


yes, big data is incredibly difficult to work with (and video more so due to encoding/streaming woes), especially if the goal is to have a degree of decentralization

it's also really expensive (storage, bandwidth, CPU for transcoding), it is not possible to ignore or postpone thinking about economics there to the degree that it is for short text


more than i like to admit, probably Taleb's "Fooled by Randomness", it sparked some interest in economics and the stock market (where i had no interest in that topic at all previously) and set a chain of events that eventually led to me being involved in bitcoin


the button after "Want to purchase a voucher without logging in?"


If you use Mullvad, please send them an email and ask them to support lightning payments. They currently support onchain only and frankly that’s sad :(

Thank you! Together we can make things happen!!


i've been using that one for years and it worked fine for me

if you don't want to input the account #, they also have an option to buy vouchers you can input to top up your mullvad account yourself


Win Sats Daily! Post videos with #bullishbounty


my biggest fear regarding bitcoin is when it turns out it only made some people rich, even worse if it's the wrong ones, and changed nothing in the downward trajectory of freedom whatsoever


exactly ! i guess the idea is cost saving, a good switch chip is expensive, and a crappy one would kind of ruin the device

and power users are probably happy they can choose their own switch to use

but generally, people will already have a broadband modem, adding the router box, and then adding a switch as well is a bit much for the average user😀


i wonder which random person with a matching name they picked this time, or whether they fell for one of the many idiot satoshi impersonators


they do; according to the admin page, mastodon will keep trying to deliver for 7 days, then give up, until a delivery from the domain succeeds


interesting, there's now a router designed by the OpenWRT developers
at least with that there's no longer the worry "can i install openwrt on it, and how much hassle is it" 😀
i kind of wish it had more LAN ports though
https://liliputing.com/openwrt-one-wifi-6-router-is-now-available-for-89/


it doesn't help that there's a lot of nonsense innovation by tech companies to sell new software and hardware and vendor lock-in (how many UI frameworks do we really need?), so everything is always new in that sense, always needing to be ported to some new API or API version

with all that context drift, writing software is like building sand castles, unfortunately, i often wish it'd stop and some things would be standardized


it depends ! some older software that doesn't add many new features anymore and exists in a stable ecosystem doesn't need that much maintenance, they have clearly defined scope and rarely a new bug is found

on the other hand, nostr is evolving super fast, clients are not that stable, and there's a culture of "everyone wants to write their own" so people jump ship all the time, so projects won't reach that stage


it instinctively makes me flinch because it's basically a custodial wallet, with the risks that entails


like yeah, some specific predictions were definitely over-the-top pessimistic

world population is still growing, albeit slower, maybe saturating

but there's definitely plenty of resource exhaustion, scarcity and starvation all around, being privileged westerners makes us able to ignore a lot, for now... though living costs are constantly rising
i don't think we're quite free of that prediction yet


i meant syncing the block chain (for a local wallet)

how does the wallet-only sync work? is it some kind of SPV or electrum kind of mode, where it queries a node for transactions specific to it?


yes the thing is that this really depends on the threat scenario, which likely differs per person, and per country

my impression from the Tor people has always been "it's good to run the entire node over Tor because that creates noise to hide the signal", but it also has drawbacks, eg the contents of your peers list and other things are very personal to your node and it's easy to expose those inadvertently or indirectly


this is the general theme, bitcoin has more considerations than just privacy, while monero has it as their marketing and can focus on it at the expense of everything else

for one, syncing a monero node takes ages, and requires fast storage for the entire block chain instead of only a UTXO database, do people generally run their own monero node? if not and they're using some wallet provider, that's not great for privacy either

also yes things like potential DoS attacks might fly under the radar for a more obscure coin, but wouldn't for bitcoin


one one hand this would be the highest privacy transaction submission method, because it shares no state with any continuously running P2P daemon that may be fingerprinted or tracked over time by spy nodes

on the other i'm not entirely sure, because if something connects to the Tor network just to drop off a transaction, that may raise some red flags and make it easier to perform some classes of timing correlations against


speaking of Dandelion, has anyone yet made a stand-alone bitcoin P2P transaction broadcast tool using arti (https://tpo.pages.torproject.net/core/arti/ )?

like https://github.com/laanwj/bitcoin-submittx but it wouldn't use a SOCKS proxy to an existing Tor daemon but handles the Tor network handling internally

nostr:nevent1qvzqqqqqqypzpp59a0hkv5ecm45nrckvmu7pnk0sukssvly33u3wwzquy4v037hcqqs0pga3kvduve5rzvg2zhrqa5c5qdw2ad0rvdasnvgyu25lj5c83qsv9w79g


it's emotional race-to-the-bottom thinking that became popular around 9/11 with terrorism, "CSAM is infinitely bad so it warrants infinitely bad measures"

the more idealistic governance where measures are tested against other, what you would say, important cornerstones of civilization, like civil liberties, are long gone. Only this absolute (questionable) measure of safety matters and even bringing up privacy, freedom of speech and movement, or even whether a measure would really be effective, is ever more of a taboo

"we have to do something!!! don't get in the way!!!"


if even security and intelligence agencies raise caution with your drastic plans for monitoring and control over communication, maybe it's a "are we the bad guys" moment… i dunno…
nostr:nevent1qvzqqqqqqypzphylegxrz89mlxyxuyckf3j8t73a3zcxgkkew5pwwyp27tdukrgfqqsqgzqtpv64gc3vf577ns89sv3andrzqerfkn7zhqa93s4gegunw3csnxw74


> I used macros and tiny structs to track length. In noscrypt I replicated C# spans with inline functions and small structs, the same way literally every other language does because most of them are written in C anyway lol.

the way you say that, C is mostly a language for people with too much time on their hands 😀 it's great if things like that just work with the standard types provided by the compiler/standard library, believe me, after 30 years of coding it doesn't sound like fun anymore to roll it yourself

> storing the termination with 0 at the end of a buffer is arguably the most efficient way to handle that

nah, PASCAL strings (storing the length explicitly) are slightly more efficient in most cases, as there's no need to iterate over the string again and again to get the length.

But their biggest problem isn't efficiency, it's that a character (\0) is special-cased. This can often be exploited in various ways in protocol handling.

(i say this as someone that has found tons of remote exploitable bugs in C code, including libminiupnp 😱 )


C would be an okay language if not for the abomination that are 0-terminated strings and the str* and sprintf families of standard C functions, it's completely unsuitable for string processing


the painful position of being a serious person working on something that is (or was) a big hype too

the onus is always on you to prove that something can actually be of use, that it is not *only* hype

you'd say bitcoiners understand this 😅


are you sure?
somehow all the catgirls i know are C++ devs which do verilog in their off time, or some retro computing assembly dialect 😀


bitcoin core is a fairly unique project in that development has to be very, very careful
it's fine if you don't understand, you might if you had been through what we have been


Yes! 🫡


i'm sure some men actually mean it, but a lot are also "i prefer without makeup" then still hypocritically expect your face to look flawless, and prefer women that look that way, which escalated to the point that "nomakeup" is actually a make-up style that involves a lot of make-up expertise-to make it look like no makeup was used 😅

this is why you often only see lesbians wearing truly no make-up out


yes we'll get there, one step at a time !

it's doubtful that it has a RCE, but there may be less critical interaction issues with other settings, components and operating systems too

enabling it by default out of the box is kind of reckless

people can help by testing and reviewing


reports are public (appropriately, kind 1984 events) so you should be able to see who reported you
(unless they used a new anonymous npub for this)


including yourself ! 😅


Win Sats Daily! Post videos w/ #bullishbounty


yea, hopefully this can entirely replace the mess that is upnp


🚀
nostr:nevent1qvzqqqqqqypzpamvs5te0hrehvy2la54am0l23qehs653dsyczpxhfddzssgvfe3qqspcy7n7w6r2qvpq4pzpa93qhvp5jc5kmvr2fn9nxq96a76tdl9utqxaa9gk


that's pretty cool gear though i can't imagine needing that at home 😀 but will keep it in mind when moving into a castle someday !


at least it's easy to get used to, i wish they focused all their bureaucracy on bottle caps instead of undermining privacy


that's an interesting use case
as every message is signed, if you happen to have stored it somewhere, there's less deniability here than on social networks like twitter, where they could erase the message then claim it never existed


it's mostly an opsec leak, people can see where you are (sometimes quite precise) by geolocating your IP
it also allows correlation with other services you might be using, especially if you run other P2P software on the same IP
for defense in depth reasons i absolutely use a VPN for all nostr related things


i'd say hoarding downloaded files (that may or may not come in useful some day, eg hw vendors really like disappearing old documentation and chip datasheets) is not the same as demanding that relays store every single one of your chat messages forever 😀


negative-zap, lol, great idea


honestly i've also wondered that

at the height of the blockchain hype, there were so many people convinced it as desirable to store their messages and everything on the block chain forever

it's unfortunate that for a decentralized financial system there's a necessity for global coordination, verification and thus a bottleneck like that, but it was never something good to actually want imo

and yes there are some things that make sense to archive for historical purposes, but by far most stuff should probably be forgotten more or less instantly


adding wss://relay.nsa.gov to my inboxes and outboxes


it already exists (in the form of NIP-17), but it's up to the client software to implement it, some do but a lot don't yet, prod your favorite client author to implement that 😀


that works too, matrix has end-to-end encryption very similar to signal, and the same kind of privacy

operators of the instances involved can see who messages who (but random users can't), but not the contents


DMs are another kind of message (kind 4) that can be queried from relays, just like the normal messages (kind 1), they're not usually shown by clients but they could be
(some do, for example nostrudel has a "DM timeline" built in: https://nostrudel.ninja/#/tools/dm-timeline)

there's a better DM standard that makes this kind of correlation more difficult but it's not widely adopted yet

but yea at least admins can't read the contents of messages here


thank you, followed ! 😀


a good rule of thumb seems to be to never use private messages in any social network, but switch to something like signal as soon as possible, there's always a catch


beep beep


yes very normal, it's less bad if you think of it as mild physical exercise which you can often do while mulling over more interesting things, like taking a walk


looked at bluesky again, 9/10 posts are highly stressful posts complaining about one thing or another i can't do anything about anyway... thanks for telling me, yay for doomscrolling... but at least 1/10 is cool mushroom pics...


we make changes directly in production. as is tradition. https://user-images.githubusercontent.com/64505169/205257958-8b9cdb32-2139-48dc-8394-dc1952ef825d.png


there's a lot of crap nowadays

but a significant part of movies has always been crap tbh 😀 the ones we remember are filtered by time to be worth remembering


yes,i agree keeping the data queryable in hot storage instead of cold storage is more expensive, i'm sure it can be a problem for really big relays (but they are a problem, period 😀 )

that said, nostr's database use is fairly trivial-it's not like any complex queries or indices are required, modern computers can handle a lot of these records

and sure, machine-generated spam could make it much worse too, my assumption only holds for well behaved human users lol

but all in al i'm much more worried about image/video/audio data and such, if people are going to come here and regard this as another youtube or tiktok, with the same assumptions, the few media hosting services are going to be overloaded in a minute


i found the github issue: https://github.com/nostr-protocol/nips/issues/1282


oof, that is extreme

but yes it's basically what i feel like too, Anita's on here, but besides that the only trans women accounts i've seen are tiresome porn stuff


sure, i don't particularly mind the blame game, yes the problem is with people's assumption that just because it's on some list and publicly connectable it's free use to everyone for any purpose

some degree of security through obscurity often works, so i wouldn't mind being removed from the list, i do agree it's not a lasting solution especially against determined spammers, but this isn't even intentional

i am in fact working on locking down my relay more, but i also don't want to go the other extreme of auth-only


mastodon often gets that same criticism


for example, owncloud supports things like personal music streaming which is quite cool, if you don't want to use spotify but also  wouldn't want your entire music collection on every device


community is also a love/hate relationship often, i mean ive been often super annoyed by the trans community on twitter but i do miss it here


syncthing is great software, i use it all the time, never used owncloud personally

but i guess the latter is more geared toward single file server usage; you might want to replicate some data on every device you use it on, as syncthing does, but not all of it especially large stuff like directories with tons of images and video


imo (6) in the case of text notes, human generated text will never amount to much in storage terms

all typed text in a lifetime would probably fill the space of one short 1080p video or so ?😀

though i think there's good reasons for using expiration-eg, a lot of posts are just spur of the moment stuff, more like chat, you might not necessarily like people digging it up after years


i imagine a horse would get extremely confused in low gravity and ride more like a kangaroo 😀


i do really like the idea of publishing with an expiration date by default (and make it selectable per post as an advanced option), i wish clients supported that


good idea in principle, though we don't have that information if we get deletion requests for events we've never seen (which are the biggest problem here)


i considered that, but it's not just one npub in this case unfortunately, a bridge effectively mass-generates npubs so it's a DoS attack in that sense


a compromise would be to store the deletion request but only if it resulted in a deletion, not just in case

otherwise the trash heap dominates the database i just don't like that 😀


i sometimes wish there was a way to stay out of nostr.watch, i don't really want clients randomly selecting my relay for use, nor being flooded like this

in any case, if so it makes sense and, it seems to be the relay software that's at fault here for storing the deletion requests instead of just processing them, might just change that


integrating a client into a relay server was a really strange choice of the author imho

like yes you can get maximum performance that way by exposing specific queries, but it also kind of undermines the client agnostic idea of nostr


wraaaah looks like momostr literally queries all the relays from api.nostr.watch, then sends their deletion queue there 🤷♀
so even if you have a small relay you're bombarded with thousands of deletion requests per day from them

here's the code:
https://github.com/nanikamado/momostr/blob/main/src/event_deletion_queue.rs#L58

nostr:nevent1qvzqqqqqqypzqz4rnedwlxdqqznmmv95ny2cey4uf23qldjexxjj6p2mt6mdlaecqy2hwumn8ghj7un9d3shjtnyv9kh2uewd9hj7qgwwaehxw309ahx7uewd3hkctcqypg5fe7p8duz38h49cse6nh7ep70h558zxv0d3j4h2fl5tnyqjkuvsmym89


hahahaha n-no thanks

i'm more scared by random people's attention than that i enjoy it

something i should probably work on, given that there's no way around the attention economy nowadays but yea


fwiw, after deleting all kind 5 events in `SELECT event_id FROM tag WHERE name="L" and value="pink.momostr"`, there are 72 left and it's wayy down the list

now i need a way to block these before they're even inserted 🙂


> Post a picture of your bare tits, some vegetables, be a dev of a popular client, or be well-known from someplace else, basically.

for a moment i read this as doing all of these in one picture
that sounded quite funny 😀


even stranger

when i open your post:

https://media.x0f.org/e3cc2aa41a250bf71bbbd3fe8b3a9c9aba856b01cfacd05a5cc8fc5086086c41.png

when i open lnpc's post:

https://media.x0f.org/ac12c0ff0026d39c9093f4e521ebcda5c532df1242765bc806daa8d12e443858.png

and i can go back and forth between these two states, apparently it has that event in its database doesn't show it


same here, that event seems to be missing

maybe it would work better if the "e" tag had the optional relay hint filled in? though if it's the same relay you'd say it's obvious where to look

my experience is also that "find" also never finds them, somehow, and hangs for a long time 😀
(which i found strange because querying a relay for a single event is pretty much instant)


Out there. Away and within. // 📷 lost-in-moments

#lost_in_moments  #autumn_colours  #fores  #the_village_and_the_hills
 https://status.z428.eu/bl-content/uploads/pages/a36170bdff52ca39d82bd786d1ad4087/vx5emsoj1hpeeja7.jpg https://status.z428.eu/bl-content/uploads/pages/a36170bdff52ca39d82bd786d1ad4087/me3mbrhj74kglfsq.jpg https://status.z428.eu/bl-content/uploads/pages/a36170bdff52ca39d82bd786d1ad4087/nvsiyzt4csmr4atj.jpg https://status.z428.eu/bl-content/uploads/pages/a36170bdff52ca39d82bd786d1ad4087/scvfpwemk4xnwpxg.jpg


yes ! that's a mystery to me too, i've already nuked all of them a few days ago

i'm not sure who is sending me tons of deletion requests and why (i don't particularly want to set up IP logging but might temporarily...)

they're pretty much all for events that aren't even on my relay to start with, related to some mastodon bridge, which still doesn't explain the number of deletes

nevent1qvzqqqqqqypzqz4rnedwlxdqqznmmv95ny2cey4uf23qldjexxjj6p2mt6mdlaecqy2hwumn8ghj7un9d3shjtnyv9kh2uewd9hj7qgwwaehxw309ahx7uewd3hkctcqyrtpyuls676a7q432tnvk355wqplsgx3s64e24ehh62p8gj5u5k0u9hxc4g


current events per kind statistics on nostr.x0f.org
https://media.x0f.org/f0f2c8304158d7c32b58b10e16b0ccae4e4b26ee0d4742f74b5ae15e0aa079ea.png


interesting, i wasn't aware those were old events, thanks !

you're right though, the most recent one
nostr:nevent1qqsdhphamkx0ptkfkpkk74eejnpafylz9nnrddddlhaz62ahzq27xpgpzdmhxue69uhhyetvv9uju7psvchx7un8l5n5y9
is from Sep 11, most are older, they all seem to belong to a single person 😀, looks like someone is backloading their events into my relay


yes


there apparently is, though i'm not sure who is doing it (but not consistently, nor whether to trust them), i've seen events of kind 9978 (Classification data) (part of nostr-filter-relay?) on my relay which assigns labels like "label":"news_and_social_concern"


yes it would make more business sense the other way around, default is expiring, pay for the option of permanent storage


not true i can type *much* faster than i can speak (likely an exception though 😅)
nostr:nevent1qvzqqqqqqypzpq35r7yzkm4te5460u00jz4djcw0qa90zku7739qn7wj4ralhe4zqqs2pth620tem5470lc9qypcxv6d4gla5c6x6csjgl5dssr0chmhksc6pwghr


maybe in private messaging modes?

i don't think voice notes are very useful for public publishing, never heard of micro-podcasting 😅


torii gates are meant to delineate the transition from the mundane to the divine; at inari shrines they're typically bright red and contributed to the shrine by successful businessmen as thanks for their success https://m.primal.net/LEWm.png


hahaha yea posts with 15 hashtags should probably be straight up ignored

that's it though, they *look* spammy, and add nothing, even break the flow if you're just reading a post

topical relays sounds like a decent idea, if there'd be some kind of UI in clients to direct a post to a specific relay


no i do directly look at the database of my relay 😅

i'm not sure what nostrudel's "global" feed does but it shows me pretty much exactly the same things as the "following" feed, which is quite pointless

it makes sense, nostr has no global feed by design, so it really depends on the selected relays


not really ! i like the concept of having no user ids, but have never used it or looked into it at any depth


hashtags are probably the best discovery mechanism here but also they look so cheesy, maybe it's just a weird personal holdup but i resent using them 😀

could we have tags for indexing as a seperate thing ? (i guess it's stricly possible to add "t" tags independently of the content)
nostr:nevent1qvzqqqqqqypzp3l7jtuqc5tvp32tzh5dy44vqu5pqdkexn4pluulkrxc5r7kwaekqqszk8nnxg7f5fd3w7gh34dx0z74vskxkey3zgqd5awv9ttzvcgayrqhw0kkr


i've found this one of the most frustrating features in signal where you cannot really export your message history, and every time you need to re-link your computer (which expires after 30 days of non-use or so) it will start with an empty one

i do understand it from a privacy point of view but still

fwiw, matrix does provide message history for E2EE rooms even with new devices

nostr:nevent1qvzqqqqqqypzq3svyhng9ld8sv44950j957j9vchdktj7cxumsep9mvvjthc2pjuqqsgt0zpg6tslgxjx9raff5nusuqapwj7nf5hvpvaxzh5ux3ddlmq4qjk6ldh


yes... grouping kinds, tags information per NIP/NUP is a good idea, it makes it easier to selectively include or exclude one, or distinguish when two protocols use the same tag differently
(right now what i needed was just one big list, but this varies per application, and the big list can always be generated anyhow)


neat, yes the idea of storing the protocol metadata using the nostr protocol itself is quite elegant


agree they're fascinating but i'm also extremely skeptical of both on the short term, it's rife with scams

i think ai will be stuck at "reasonably smart pattern matching" and this kind of "neural associative array" hallucination for a long time

humanity needs to work through quite a few issues before we can even think of building a mind, i believe some kind of structures just can't build certain things, right now we can only build tools and slaves
the kind of self-steering, independent thinking and researching free agent kind of AGI that people fantasize about, is out of reach
(barring some accidental emergence but nah, then we're also looking at long timescales)


thanks !
i also intend to include experimental and temporary assignments, and non-fiatjaf standards

though i'm not sure how yet, i like the semi-automatic parsing approach but it has its limits for differently-formatted documents scattered all over the place 😀


In principle, it's the same as making any TCP service accessible from tor
there's many guides available for this, the basic steps are to install tor, then add to /etc/tor/torrc:

HiddenServiceDir /var/lib/tor/nostr_relay/
HiddenServicePort 80 127.0.0.1:8081

We're using port 80 instead of 443 because using TLS behind Tor is only a hassle in most cases (Tor already provides equivalent encryption). Where to redirect it depends on how your relay is configured.

In my case i use nostr-rs-relay (listening on 127.0.0.1:8081). In front of this i have nginx reverse-proxying to provide TLS. However, because nginx isn't really doing anything useful there, i can redirect Tor to its local HTTP port directly. Easy but YMMV.

Another option if you do want Tor connections to go through say, nginx (for example if you're providing extra pages or services on the domain), would be to add another plain http service port (say, port 81, then make Tor connect there), specifically configured for the onion HTTP. But that's web server specific.


i wanted to have more insight into events on my relay, so i needed this to automatically show descriptions for kinds and values without having to look every one manually

could also do anomaly detection "what events use non-spec kinds and tags?"

also plenty of other applications like code generation; say, auto-generate constants for common kinds and tags and things like that


dunno about "good" but nostr.x0f.org relay is now available through ws://4kyeh7owcdx56delz5mn6lm6t3pdld3x3s6747ntgxjp5r5gfwjffbid.onion
nostr:nevent1qvzqqqqqqypzq3svyhng9ld8sv44950j957j9vchdktj7cxumsep9mvvjthc2pjuqqs0vt026p98jk5d2f4p7f6806nu8cmdw3xykf48qz6t8u58ewtawrgvqveel


hah i've had the opposite experience, i'd been trying to get rid of my google developer account (without deleting my google account) since 2018 or so

because time after time there were more requirements for app publishing, with deadlines, and they kept spamming me although i didn't care anymore

i had one free app on the store, once(!), which prevented me from turning off the account, even though the app was removed from the store long ago due to one of those deadlines

only this year they finally threatened to remove google developer access if i didn't fill in yet another form... finally ! don't threaten me with a good time lol


as long as most people don't use nostrudel, imposters won't bother though 😀  it was useful last time around


at the moment, no
blossom is a simple protocol that stores files and makes them available by their content hash
it doesn't have any knowledge about the content of the files, like conversion of resolutions and formats


GM,

If anyone knows a company or has a company that would like to sponsor this project, please send me a DM, I’ll gladly take feature requests.

I’ve been bleeding sats instead of stacking them for almost a year now and **really** need help.

While the idea of V4V is great, it really isn't sustainable and hasn't even covered a single month of expenses


maybe it's a new kind of marketing... nothing says luxury like "these chocolates are so good we have to lock them down !" 😀


okay this is neat, i don't think i've ever seen so many tor support options in any application 😀 👍


Tor presets are in! https://video.nostr.build/f0bb5e05593a545cabfdd04d1cc4e4ab32e530299703fd02bff9e7fa776e406b.mp4


wish i had a heart as big as yours !


Bitcoin Optech newsletter #322 is here:

- announces a fixed vulnerability affecting older versions of Bitcoin Core
- provides an update on hybrid channel jamming mitigation
- summarizes a paper about more efficient and private client-side validation
- announces a proposal to update the BIP process
- summarizes popular Q&A from Stack Exchange
- Optech Newsletter #322 Recap on Twitter Spaces
https://bitcoinops.org/en/newsletters/2024/09/27/

Antoine Poinsot posted to the Bitcoin-Dev mailing list a link to the announcement of a vulnerability affecting versions of Bitcoin Core that have been past their end of life since at least December 2023...
https://bitcoinops.org/en/newsletters/2024/09/27/#disclosure-of-vulnerability-affecting-bitcoin-core-versions-before-24-0-1

Carla Kirk-Cohen posted to Delving Bitcoin details about various attempts to defeat an implementation of the mitigation for channel jamming attacks originally proposed by Clara Shikhelman and Sergei Tikhomirov...
https://bitcoinops.org/en/newsletters/2024/09/27/#hybrid-jamming-mitigation-testing-and-changes

Jonas Nick, Liam Eagen, and Robin Linus posted to the Bitcoin-Dev mailing list a paper about a new client-side validation protocol. Shielded CSV uses zero-knowledge proofs to allow verification with a fixed amount of resources and without revealing previous transfers...
https://bitcoinops.org/en/newsletters/2024/09/27/#shielded-client-side-validation-csv

Mark “Murch” Erhardt posted to the Bitcoin-Dev mailing list to announce the availability of a pull request for a draft BIP that describes an updated process for the BIP repository...
https://bitcoinops.org/en/newsletters/2024/09/27/#draft-of-updated-bip-process

Selected Q&A from Bitcoin Stack Exchange:

- What specific verifications are done on a fresh Bitcoin TX and in what order?
- Why is my bitcoin directory larger than my pruning data limit setting?
- What do I need to have set up to have getblocktemplate work?
- Can a silent payment address body be brute forced?
- Why does a tx fail testmempoolaccept BIP125 replacement but is accepted by submitpackage?
- How does the ban score algorithm calculate a ban score for a peer?
https://bitcoinops.org/en/newsletters/2024/09/27/#selected-qa-from-bitcoin-stack-exchange

Bitcoin Optech will host an audio recap discussion of this newsletter with special guests Jon Atack, Gloria Zhao, and Jonas Nick on Twitter Spaces Tuesday at 14:30 UTC. Join us to discuss or ask questions!
https://twitter.com/i/spaces/1mrGmMbAAdBGy


yeah, this

extrapolating this, in the near future, the only high-paying jobs left will be those that take the risk of circumventing some aspect of the bureaucracy (e.g. the grey sector), which will be increasingly hard but there's a pressure because it's impossible to do anything actually useful within the system 😀


one of the not-so-cool aspects of computers it that their enormous processing power and storage made it cheap to have inhuman mountains of paperwork, and governments are still discovering this, resulting in creeping licensing into every single aspect of life

i don't think many people care about this from a freedom angle, but there has to be a point where adding ever more bureaucracy will actually affect efficiency, and negatively affect countries that do this


yeah i don't mean "don't be social at all" (though that's an option for some people, sure), there's tons of ways to have fun that don't involve dating rituals and awkwardness around expectations of sex etc


the dating game set up to be maximally humiliating and sucky for everyone involved, why even bother really


i guess this reinforces "don't use a tv as a monitor" again
nostr:nevent1qvzqqqqqqypzqqf08cglms25d2tuy7gkvtg6u6435rf7c0lr4cc7sc09nn77rcldqqs22c4u4qhdj2evt9v89uu47myc5zl5w635tyttrjfhp4my0g22dqc3a7240


it's not that i really mind people using my relay, but there should be a TOS-like thing probably ?

i like doing database analysis (for my own curiosity), so by using my relay you consent to this

also i reserve the right to toss out what doesn't spark joy 😀


now we're talking let's get on it !!!


hahahah yes it's clear, on any social media platform there's a few people that can post any brain fart and it'll get tons of engagement, most don't make it there though


The idea of a good tyrant, who uses censorship and propaganda for the good of his subjects, goes back to at least 2400 years to Plato's philosopher king.

Which reminds me that I still need to finish this book: https://www.amazon.com/Open-Society-Its-Enemies-Spell/dp/0415237319 nostr:note1cgg6kwnct4k83tk2qnv6wg4qypegks27dyn6893l4ece39mkamustuak5t


nostr-rs-relay does store the whole kind 5's, which is kind expensive for storage, especially as my relay somehow receives tons of kind 5's for messages it never even had (from pink.momostr, a mastodon bridge?)
at some point this was the largest part of the database, at least in record count 😀


here we go: https://github.com/laanwj/nips-json

this contains all the lists and tables from the README in json format, as well as the python script used to parse and generate them

nostr:nevent1qvzqqqqqqypzqz4rnedwlxdqqznmmv95ny2cey4uf23qldjexxjj6p2mt6mdlaecqy2hwumn8ghj7un9d3shjtnyv9kh2uewd9hj7qgwwaehxw309ahx7uewd3hkctcqyqqqqhafu9lp8fjzkegas4va3csjd74gcvap0vl7az3m53vfm2m6kj33tmj


no idea, but apparently it's part of strfry relay, https://github.com/hoytech/strfry/tree/web/src/apps/web so likely something you can enable as a plugin for that relay
i don't think it's possible to set other relays


there are clients that set a random list of relays ? okay that explains a bit, i was just wondering why two seemingly random people, who i've never even interacted with, were using my relay

that is a somewhat questionable behavior imo 🙁
nostr:nevent1qvzqqqqqqypzq0vy9tlv6h3f8u5tvcnexdcy50acec2n42ga0y9tz8m2w5k5ffpdqqsxzst39de08zdwle0u48p7pl7jsjmv7w6tykqunaduvwh4q4g9m4cpyvkgv


i slightly prefer json in this case because parsing it doesn't require an external dependency in python, and all the data i'm working with is json already (but converting is easy either way once it's in some machine readable format)


looks like nostrudel has a list of kinds here: https://github.com/hzrd149/nostrudel/blob/master/src/helpers/nostr/kinds.ts

but it's not complete, nor does it have all information from the table (eg no NIP number/source)


C implementation:
- cursor_iternext: https://github.com/python/cpython/blob/main/Modules/_sqlite/cursor.c#L1090
- cursor_fetchone_impl: https://github.com/python/cpython/blob/main/Modules/_sqlite/cursor.c#L1142

so yes, fetchone literally just calls next() on the iterator 🤷♀

why did they even bother to add it ?!? i don't know, maybe it wasn't always this way, eg from what i remember iterators were much less common in python 2.x times


i use sqlite3 a lot, it's great as application database--but in this case it's also for prying into nostr-rs-relay's database

yes, just fetchone in a loop usually

while True
    rec = cursor.fetchone()
    if rec is None:
        break

which works the same i guess but it's more typing

if you're concerned about performance you'd also do this, but fetching a batch at the same time with fetchmany

there's also fetchall when you want to fetch everything, but don't expect so many it'd exhaust memory


is there a machine readable version of the nostr kinds and tags tables somewhere ? (or something similar that also includes non-standardized ones)
(yes, i could parse the tables in https://github.com/nostr-protocol/nips/blob/master/README.md but it seems a sort of common thing to need)


i think so (haven't checked the source, though)


you can usually play youtube videos in VLC (by opening their URL as network video), and do whatever 😀  doesn't work 100% of cases but it's neat


TIL python sqlite3 cursor objects are iterable, was always calling fetchone one by one 😭 (or fetchmany)


that and when you are following them, the client knows where to look for a persons notes


Darl McBride has died. He led SCO Group's legal attacks on Linux in the early 2000s, where they falsely claimed copyright ownership of Linux. Had he prevailed, the open source landscape might look very different today.

His claims were comically nonsensical, and memorably he claimed to have a suitcase full of irrefutable proof. Still, he had to be reckoned with because he had a richly funded war chest. The legal battles went on for years.

Does any of this sound familiar? Yes, I see a ton of parallels to Faketoshi. The only difference is that McBride did not have a cult of personality; he was utterly uncharismatic and nobody seemed to root for him.

Back then, I was glued to GrokLaw, a blog by a writer who called herself PJ. She covered the SCO saga in close detail and I soaked up every word. I loved Linux and free software and it all seemed like an existential battle, which I still believe it was.

Like Faketoshi will, McBride became utterly irrelevant after his legal attacks failed. In 2020, he filed for personal bankruptcy. Last week, he lost his life to ALS at 64 years old. While I'll always remember him as an enemy of freedom, nobody deserves that illness. RIP Darl McBride.


This was my favorite thing to have co-authored this year.  The obvious audience for this report is current and prospective donors to Brink, and I think it does a great job of communicating how Brink's engineers help strengthen and enhance the network.  But I also wanted to write a report that the engineers could show to their families to help communicate how meaningful the work they do is.

The families of many engineers don't really understand their loved one's work.  They can't tell the difference between world-changing development and goofing off at the computer.

What would be great is to give Bitcoin contributors industry-leading salaries, more than megacorps pay for soul-crushing work.  If your parents or partner knows you make $500,000/year, they won't think you're goofing off.  But every satoshi spent on one contributor is a sat Brink can't spend on another talented contributor who wants to do the work but also needs an income.

Instead, Brink provides more modest grant amounts and focuses on giving engineers the opportunity to work on projects they personally find highly meaningful.  For many people, that's a tradeoff they'll happily take.  But if your parents or partner or friends have high expectations of you, it can be hard to communicate that you're just as much at the top of your game as a dev at a top-10 tech company even though you make less money.

Where that problem exists, I hope this report will help.  Engineers receiving grants from Brink did so many extraordinary things this year.  I was overcome with pride of being even a tiny part of the team.  I hope both the objective set of accomplishments and the subjective awe will shine through to anyone reading about each engineer's accomplishments, especially their family.

nostr:nevent1qqst0zfy4jjd8vzkw7zyx6ekztddyg8hg4hhywn5uwh975hd66cvxzgpzdmhxue69uhk7enxvd5xz6tw9ec82c30qgsxu35yyt0mwjjh8pcz4zprhxegz69t4wr9t74vk6zne58wzh0waycrqsqqqqqpg7j53y
nostr:nevent1qqszewnpcnnckvhdxlf60kynw6rkrks7068386mpk9602v33y8mzkjgpzdmhxue69uhk7enxvd5xz6tw9ec82c30qgspgwdt6s5cz9j74nxdq34a2ed26x0jx99f8tvm6zdds03ng2lvn8crqsqqqqqp7t0hcn


it's perfectly normal for ecosystems near carrying capacity to taper off population growth (there's increasingly more conflicts, competition for resources, etc), it means the population number will be stable, not that it will necessarily drop by much


level 2 is spooks spreading rumors that someone is a spook, to seed division and disrupt development


actually querying relays goes a bit further than i like to go here, besides it only has some simple drop-off-only nostr code right now 😀

i guess it doesn't matter that much, it will still post to other relays if one fails


also the relay hint can be used to drop off the ping at the user's preferred relay, instead of only the bot's preferred relays


yes nprofile is great because the public key and relay hint provides enough information to find a user's posts, i'm not sure what clients do with a npub but i guess they ask the user's current configured relays, and there is not necessarily a overlap


there's also the overpopulation issue if people don't die and all stay here

Linda Nagata, in her sci-fi books, had one solution for these kind of societal issues that arise from (pseudo-)immortality: if you choose to do the radical life-extending treatment, that's fine, but you're no longer allowed to live on Earth, you'll have to live somewhere else


follows are not necessarily friends, it only means you want to see someone's messages, could also be to keep an eye on the enemy 🙂


living 2000 years with continued youth and energy doesn't sound too bad 🙂


okay, this is live now !

if you add https://njump.me/nprofile... (or https://njump.me/npub...) in the social links in your github profile with your nostr address, the merge bots will ping you when something from you is merged
(it doesn't really have to be njump.me, any host will work)
nostr:nevent1qvzqqqqqqypzpp59a0hkv5ecm45nrckvmu7pnk0sukssvly33u3wwzquy4v037hcqqsyhpx67kvgpq8pzamgaj8xtphsmxxn2sz74d4evtr2zvmmqcma2wg77lkca


oh ! it's a different call, this works:

curl -L -H "Accept: application/vnd.github+json" -H "X-GitHub-Api-Version: 2022-11-28" https://api.github.com/users/Sjors/social_accounts
[
  {
    "provider": "generic",
    "url": "https://njump.me/npub..."
  }
]


yes that would be neat !  f there was a github->npub (or preferably, nprofile) mapping API somewhere, it would be easy enough to do

one straightforward would have been to look for 'njump.me/...' links in the user's github profile's social links

unfortunately it appears that these links aren't available through the API 😮💨 :
https://docs.github.com/en/rest/users/users?apiVersion=2022-11-28#get-a-user


i disagree with a lot of Peter's takes on politics and war (especially his blatant Israel apologism) but come on, cancel politics here ? 🙂


yes it's kind of silly

mastodon even copied this behavior, afaik


whoops, forgot the nostr : prefix this time (looks like nostter doesn't render without? somehow nostrudel doesn't care and renders the preview anyway),

nostr:nprofile1qqs0wmy9z7tac7dmpzhld90wml65gxdux4ytvpxqsf46ttg5yzrzwvgpzdmhxue69uhhyetvv9uju7psvchx7un802qf5c
nostr:nprofile1qqsp4t9sqvmnw7slt57pnkd06mcsm7z9a6yn06v67zzx6w9d009e2lgpzdmhxue69uhhyetvv9uju7psvchx7un894hqqs
nostr:nprofile1qqsdzmqs880h7se4ldk5f8ptmxptjpzspxj38wcltr46mhuqqz8agrspzdmhxue69uhhyetvv9uju7psvchx7un8vtslr8
nostr:nprofile1qqsfsxz67pnytmth787qvj0nvc5kcmernxqr27fzg2x566mc89nlsyspzdmhxue69uhhyetvv9uju7psvchx7un85ulwfm
nostr:nprofile1qqsxukl93wa78srfm8wpgrcc2xmwkd6c4a4znsftjye2rnvuz5ya7hgpzdmhxue69uhhyetvv9uju7psvchx7un8wp09f5
nostr:nprofile1qqsxf5lqp8t8ccqpee6yc8fy59g7yhguwfg94hynckuxwtu2lqm64egpzdmhxue69uhhyetvv9uju7psvchx7un82gf8ks


yes; before twitter was locked down to show tweets only when logged in, it was even easier, one could simply switch the browser to incognito mode to view the tweet anyway


a reminder about the bitcoin merge notification bots; these bots automatically post when there is a commit to the associated repository:

nprofile1qqs0wmy9z7tac7dmpzhld90wml65gxdux4ytvpxqsf46ttg5yzrzwvgpzdmhxue69uhhyetvv9uju7psvchx7un802qf5c
nprofile1qqsp4t9sqvmnw7slt57pnkd06mcsm7z9a6yn06v67zzx6w9d009e2lgpzdmhxue69uhhyetvv9uju7psvchx7un894hqqs
nprofile1qqsdzmqs880h7se4ldk5f8ptmxptjpzspxj38wcltr46mhuqqz8agrspzdmhxue69uhhyetvv9uju7psvchx7un8vtslr8
nprofile1qqsfsxz67pnytmth787qvj0nvc5kcmernxqr27fzg2x566mc89nlsyspzdmhxue69uhhyetvv9uju7psvchx7un85ulwfm
nprofile1qqsxukl93wa78srfm8wpgrcc2xmwkd6c4a4znsftjye2rnvuz5ya7hgpzdmhxue69uhhyetvv9uju7psvchx7un8wp09f5
nprofile1qqsxf5lqp8t8ccqpee6yc8fy59g7yhguwfg94hynckuxwtu2lqm64egpzdmhxue69uhhyetvv9uju7psvchx7un82gf8ks

(looks like the original announcement post was a broken event, so making a new one, also using nprofile instead of npubs to make it work across relays)


yup i could manually request the event successfully:

nak req -id a4d693b68b5513c8e5aa7c4822cc99b762808d22b2866acf707c37badc5672ef wss://nostr.sprovoost.nl

and when i told nostrudal to search for the event on your relay, it also found it now
strange!


right, seems you'd want the date of the repost there, not the date of the reposted post

but i'd expect that wouldn't make it eat the event completely, but just make it appear at the wrong place in the timeline


BOLT 12 is merged into the spec

To applause at the Lightning Spec Summit dinner! ❤


thanks !
i tried that last time (i do follow myself on mastodon here), but somehow it didn't work, couldn't get the content of the post to actually appear


yes that would work in this case, and seems useful in general
though might also be overkill if you're only looking to bridge a specific post


thanks. yea, for example apparently matrix is partially blocked in Russia

https://wetdry.world/@cybertailor/113139376699033771

which seems something interesting to post here, but screen-capping it seems a bit of a cop-out if we have a bridge


is there a way to get a nostr version of an arbitrary fediverse post as neventXXXXXXX, using the mostr bridge?

i've wanted to repost or quote a post i saw on fediverse here, a few times, but usually they aren't bridged

even when i can find the poster through mostr.pub with the bla_bla.com@mostr.pub NIP-05, their post isn't visible on their bridged profile

nostr:npub1s6z7hmmx2vud66f3utxd70qem8cwtggx0jgc7gh8pqwz2k8cltuqrdwk4c


i have the bitcoin core commit notification bots, not a lot of fun but useful to some
nostr:nevent1qvzqqqqqqypzqz4rnedwlxdqqznmmv95ny2cey4uf23qldjexxjj6p2mt6mdlaecqy2hwumn8ghj7un9d3shjtnyv9kh2uewd9hj7qgwwaehxw309ahx7uewd3hkctcqyqkv5k88egec57v5v6g235dyvpprz55ucc6lawp3sdsm7tw9e43zup94r2a


it's the kind of illustration that you'd find in the encyclopedia under "the banality of evil"


pretty sure it's basically two steps:

- run a gstreamer or VLC pipeline to convert the video to a series of images (eg, sample an image, skip N frames, repeat), outputting a directory of jpg/webp images

- then a simple bot that uploads and posts the next image from this queue every so often, remembering where it is


ahh looks like that does about 3-4 posts a day, and captures a frame every few seconds. not literally every frame 😀  not as as i imagined

kinda want to do this for Ergo Proxy now 🙂


oh yeah 90% of building any kind of federated system is "don't repeat the mistakes that were made with e-mail" 😅

> If you look at it from a trust perspective however a thin relay makes more sense because how does a relay know what i, as the end-user, considers worthy of my attention. Specifically if the relays filter stuff that i am not aware of.

agree, the only exception is when running the relay yourself and carefully curating it
but that's not something many people are going to do, and in that case, that relay is effectively a proxy-client

> Looking at it from a real-life perspective, social interactions are always p2p so i think striving towards that goal seems to make the most sense.

in real life, yes, and for one-to-one or group chats, though mind that systems like twitter are parasocial not social, the model is more like "an infinite town square with soapboxes everywhere" 🙂


putting them into the inboxes/outboxes is kinda bad because other people's clients will then try to connect to the local relays too, failing of course, but they'll see error messages


like a frame per hour or real-time ? lol

(but pretty sure whatever media upload service used, isn't going to be happy with this)


"he hates trans women but loves watching trans porn" that's a surprisingly common occurrence, unfortunately


Win Sats Daily! Post videos w/ #bullishbounty


just read that this is a known issue with nostrudel's hosting: nevent1qvzqqqqqqypzqfngzhsvjggdlgeycm96x4emzjlwf8dyyzdfg4hefp89zpkdgz99qqswghk0q6vhzm66djyvezl407uvp6kwvar4tj0tpucczlhctcf7hmc6mw0x9


oh yeah "be a bit scary" is a valid strategy sometimes 😀


proof of humanity !!!


(not meant as an argument for or against whatsoever, but something to keep in mind)


the point that the cypherpunks make is that access-control based security can always be overruled with enough force (or social engineering), while no amount of brute forcing can (for the forseeable future) crack, say, a 256 bit AES key, it can be the only way to have some security against adversaries that have way more resources


hahahah thiss is what i imagine when people talk about "scary ai-generated nostriches"


something i've found useful in the past when probing bitcoin spy nodes was an RPC API to freeze/detach a peer connection and either open a port that shuttles data from and to that connection, or even export the file descriptor through a UNIX socket

other scripts can use that to communicate with the peer, and the peer will notice nothing different from connecting to your normal node
nostr:nevent1qvzqqqqqqypzqz4rnedwlxdqqznmmv95ny2cey4uf23qldjexxjj6p2mt6mdlaecqy2hwumn8ghj7un9d3shjtnyv9kh2uewd9hj7qgwwaehxw309ahx7uewd3hkctcqypczg53saqmxx9892ert2h338lc04z04xr5rgcsvcut3ppa62xr0w3t04te


joinmarket is still reasonably active


scorched-earth
nostr:nevent1qvzqqqqqqypzplfq3m5v3u5r0q9f255fdeyz8nyac6lagssx8zy4wugxjs8ajf7pqqsfeglyhzg5rqyafh2pxg6d78f35ssrtxsvl6ue3x9emgcuwjlgjag0s62mr


no idea... it's the default content for a kind 1 event

https://github.com/fiatjaf/nak/blob/master/event.go#L95
https://github.com/fiatjaf/nak/blob/master/event.go#L188

maybe you're not setting the -content option?


one thing i've been thinking of is feeding them fake posts, after managing to find out which connection is their listener
(i don't think they listen to my relay though)


Elon being CEO of tesla did more to make people critical of the EV story than any critic 😅


i don't know if PoW on replies has even been tried, i've only ever seen it on top-level posts, which wouldn't deter replyguys by definition


timezone issue maybe? 😅


nostrudel is kinda flaky with notifications here too


yes... as someone who was entangled in a court case which involved someone lying about the relative order of events many times, i appreciate this kind of thing 😀  both backdating and postdating fraud happen

one wouldn't use this kind of thing for random shitposts, but for important announcements it makes a lot of sense just in case


both are useful

the block hash proves knowledge of some information that couldn't have been available before (same as using a newspaper headline, for example), so it puts a >= bound on the timestamp

OTS stamping can be used to prove that information already existed at a certain time (by putting it in a merkle tree that will be published in a block), so puts a <= bound on the timestamp

together these can "box in" the timestamp of the event


makes a lot of sense imo

i guess it could be a super short NIP like NIP-14, just the tag name proposal and the rationale
no new event kind as it (by definition) needs to be part of the original event


yea that would be nice...


Make a plan to recover.

Archive your nsec,
seed phrases, and
important passwords.

Take it seriously even if you’re “just testing.” Some things are irreplaceable.
https://m.primal.net/KvPH.jpg


whyyyy are computers like that nowadays
<conceptually simple thing> ohh that should be easy !

nooo you cannot do this, you have to do some other thing
change another setting
find another workaround
it's more like navigating government bureaucracy sometimes 😅


ugh.... that likely indicates it's using SSL (TLS) to access a plaintext HTTP server, interpreting the output as a corrupted packet, so it's indeed making it wss://


yes that's another possibility! i think that's true for images and other content but not sure it's also the case for websocket connections, might well be 😮💨


hahaha yes this is the best meme for when someone posts another overenthusiastic hypewagon ai take


oh, yea wss:// won't work, using the wrong protocol would explain the disconnection


in firefox, i often use the "network" tab of developer tools to troubleshoot issues like this, it can show the status of the ws connections, error messages and even packet-by-packet details

https://media.x0f.org/c681a7490299bcb8351c4c6e070cc0c39e16a6f1a17ab2f4af2b61699b753efd.png


that message proves that your relay is running

that nostrudel can't connect to it is strange! it should work as ws://127.0.0.1:8080/ like that, the only thing i can think of is that there's some access control thing where your browser doesn't allow websites to connect ports on localhost


it should be a matter of specifying the host:port it is running on (specified in config.toml), in your client, like any other relay
e.g. ws://127.0.0.1:8080/  if you want to use it locally on the laptop it's running on
otherwise specify some LAN address like ws://192.168.1.10:8080/

nostr-rs-relay can't do TLS (wss://) by itself, so to expose it on the internet, it's generally reverse-proxied behind a web server such as nginx, or a TLS tunnel is used


it's a bit more clear to me now i've read their article on it: https://blog.wasabiwallet.io/killing-coordination-fee/

it's a specific implementation issue in the way they do coordinator fees that allows for cheating, fixing that is not something they like to spend time on, so they removed coordinator fees wholesale


i think the relay it mentions in the message is the one the note *goes to*
at least, in this case: i see it coming from primal.net in my client, and it mentions primal.net

what i wonder is where it reads the original note from, because i don't write to primal.net
i suspect damus.io or nos.lol even though they don't have the spam themselves 😀


interestingly i get reply guy spam on the primal relay even though i don't write my messages there
either some relay i write to is immediately cross-posting there (?)
or, the bot doesn't send their replies to the same relay that it reads the notifications from


another interesting read is the wireguard paper (although not a RFC) https://www.wireguard.com/papers/wireguard.pdf
it's not that long but describes the entire protocol, it's quite clever how they achieve security with such low overhead and coordination


agree, though i think it's a bit strange that the release notes speak of "unknown incentives" while it's more nebulous what incentives free coordinators have


i mean we all want nostr to be accessible and easy to use... but unfortunately this also means the single brain-celled gay slur throwing organisms can use it


yes, non-PGP encrypted mails send and received from outside can be intercepted and read, like any mail provider

PGP encrypted mails (such as those sent between protonmail users) can't be, although the web-client could ostensibly be backdoored to either reveal your private key or certain mails. This happened with hushmail in the past, for example. It's unlikely you'd detect if you got a slightly different version than everyone else.

Using an open source bridge, along with your own mail client could avoid this particular scenario, but not many do this.

It's an improvement in security to say, Google which just stores all your mail in plaintext and can query it at will, but mail (even encrypted mail) will always suck for privacy.


if CPU usage isn't maxed out it's blocked on disk i/o likely, storing the data direcotry on a faster disk (if it's not already a NVME) might help

(monero doesn't have the separation between an UTXO set database and the blockchain storage, so the entire thing needs to be on fast disk)


but slow doesn't matter if your life is at stake as an activist i guess
also mind that a layer of VPN adds almost no overhead compared to Tor (especially at the entry point you can just use a wireguard-based one, the exit one has to use openVPN TCP based VPN which adds more latency)


Tor is more private but also a lot slower, it depends on the threat model, if you're just trying to hide your home IP from other nostr users, or torrent or download from libgen a bit, a VPN is fine

but yes the VPN provider can do the same spying as an ISP and as they know your source IP, they could still correlate it, and give this information when pressured

if you need strong anonymity opsec (especially when dealing with nation states) then Tor is absolutely the minimum, you can combine it with a VPN as well or even do VPN-over-tor-over-VPN if you want to hide that you're using Tor to both your ISP and the destination site


there's https://vpn.sovereign.engineering/  that can be used to top up mullvad through lightning


yes that happens 😀
a new feature is introduced in 28.0 that XORs the blocks on disk with a random key, to prevent block data from triggering false positives of virus scanners
however something in the implementation of that caused.a slowdown, which should be solved now


that makes sense, 27 is still the latest release
distros probably shouldn't be giving you a release candidate (testing version)
they'll pick up 28 once the final version is out 😀


Yes i think that's just a historical anomaly, it's not that different for say, Android versus Windows. Android users will put up with having no or very difficult root access, while if you'd take away adminstrator on Windows people would complain and probably migrate to some other OS.

Phones are seen as "consumer devices" like TVs, set-top boxes (remember EFF "tivoitization" discourse?) and so on. Historically these didn't allow installing custom software at all, and if so, completely controlled by the cable company. Computers are seen as well, computers, which implies a larger degree of freedom.

If it wasn't for the lucky historical anomaly of home computers and the internet, things would be a lot more locked down across the board, probably.


bitcoin core 28.0rc2 binaries are up
https://bitcoincore.org/bin/bitcoin-core-28.0/test.rc2/

compared to rc1, most significant change is a fix for a performance regression related to block storage


yeah twitter is always so much about chasing the latest thing, two weeks (or days) later the next thing happens, everyone has forgotten they were supply chain expert for a few days and for what


it's enabled by enabling "HiddenServiceSingleHopMode" and "HiddenServiceNonAnonymousMode" (just an extra measure as warning) in torrc

full description on how it works is here: https://github.com/torproject/torspec/blob/main/proposals/260-rend-single-onion.txt


the java implementaton of i2p daemon is kiinda messy, and uses a lot of memory, there's also a c++ one (i2pd) which is more optimized, but it's less stable (often crash bugs), and also has had memory leaks in the past

to be clear i don't have anything against i2p as a protocol, i think it's useful as an alternative to tor, but it wouldn't be my first choice for anything


fwiw you can use one-hop onions with tor, if speed is more important than privacy

i2p is definitely not faster on average, also it's harder to integrate into applications-no arti equivalent, so the only way is interfacing through SAM with a running i2p daemon, which may or may not be readily available for a platform


what makes you prefer i2p?


interesting
if i had one on my relay i'd play around with that a bit


sure, but i'm just surprised relays allow such blanket queries

it's so fast it must be a response to a real-time notification, so the bot must have a persistent websocket open


how do those reply bots manage to reply to every post in the first place? how do they know?

can they get a feed of every single post, even on the busy relays?


emoji kitchen mode for reacts in nostter is so funny
https://www.gstatic.com/android/keyboard/emojikitchen/20230418/u1f988/u1f988_u1f525.png


hah i too was fascinated with the idea of open, interconnected virtual worlds when i was young, also had some ideas like that (before wasm it was other sandboxes 🙂 ), maybe the idea i could be anything i couldn't be in the real world

nowadays i dunno, games and virtual worlds are everywhere, and i think we've been neglecting the actual world to such a degree, it lost its shine a bit


i think the core concept of HTTP was great, basic HTML is fine with a bit of styling with CSS, as a hypertext document retrieval system where everyone can run a server

there were much worse proposals 😀 for example, to extend teletext with some extra features for rendering images and vector graphics, and forms, leaving the rest under full control of the cable companies

but making it this monster ad-supported spyware operating-system-in-an-operating system yea 🤷♀


oh wow uh i just decided i need this

https://shop.mntre.com/spree/products/486/large/pref-purple.jpg


Reported an issue: https://github.com/hzrd149/nostrudel/issues/234


the thing is i know quite a bit about digital logic and FPGA programming i'm just no good with the practical side 😀 trying to learn but yeah there's so many things

might just buy the new reform laptop anyhow

no other laptops, i do have a few of these kind of open hardware projects, some (semi) recent ones:

- Radiona ULX3S (FPGA dev board) https://radiona.org/ulx3s/
- Glasgow interface explorer (hardware reverse engineering tool) http://glasgow-embedded.org/latest/intro.html
- Betrusted precursor (open signing/communication device) https://betrusted.io/


yes have the same issue, even though i have them on "always", they keep getting de-authed, i assume that this is a nostrudel bug and not something with the relays but not sure


that makes some sense to me
how would that work server-side ? what kind of query would it send to the relay in that case ?
"give me all events of kind 1" sounds like an messy and expensive firehose, well i guess if you have a specially curated relay it might work


why not join one of the existing projects, and improve that ? i think one source of the problems, as so often in FOSS, is that everyone wants to build their own instead of cooperating, so you have zillions of abandoned and half-assed clients instead of a few very good ones 😅


AI? oh no...
jumping on hype wagon after hype wagon without much of a clue


give the kids some challenges, im sure learning how to bypass internet censorship will help them a lot when they grow up, too !


what even counts as "social media" here, are they completely banned from the internet?

at least in the 90's we were crafty enough to work around the kind of internet filters in schools and such 😀  maybe this will be a new generation where kids are more computer-savvy than their parents


of most general interest would probably be the ones about basic internet protocols and packets:
- https://datatracker.ietf.org/doc/html/rfc791 Internet Protocol (IPv4)
- https://datatracker.ietf.org/doc/html/rfc8200 Internet Protocol, version 6 (IPv6)
- https://datatracker.ietf.org/doc/html/rfc4253 SSH protocol
- https://datatracker.ietf.org/doc/html/rfc2616 HTTP/1.1
- https://datatracker.ietf.org/doc/html/rfc9113 HTTP/2
- https://datatracker.ietf.org/doc/html/rfc8446 TLS 1.3


i hope so

i have one of the early MNT reform laptops ! it's cool but also, pretty soon after i got it it turned out to be some errata with the motherboard's power management, which i was supposed to fix myself, but i don't have great soldering skills

(to be fair, they did offer to repair this for free if i were to send the laptop to Germany)

also the batteries became unusable very quickly (no, they didn't explode 😀 ) because apparently they discharge when not using them and below some level they just die

so all in all, i never got to use it for what it intended it for

i guess my point is that unless you're an electronics whiz, open hardware isn't going to be a great experience, and compared to open source software it's harder to find help, because you need to find someone local, which isn't easy as long as it's so niche


yeah i sort of get this... twitter is so big that it has some fairly airtight bubbles, and at least with a small account, it can feel safer within one, because people there have some shared context and understanding
(sometimes posts escape a bubble and become dogpiling fodder and it goes very wrong, but still...)

here it feels very open, which makes it hard to talk about anything personal without it somehow being misinterpreted or taken out of context

dunno how this can change, but until then, inviting some of my friends here seems like a bad idea


i don't think those cases should count as "fatal"
it's a red flag if the .well-known/nostr.json could be retrieved, but doesn't have that key for that user


yea for women it tends to work differently, because it destroys your self image and just hurts.a lot and, maybe even less motivated to better behavior, because that's often what caused the eating disorder in the first place


sabotaging Europeans through overcompliance


Oh you asked where? https://www.btcwip.com


nostrudel has done something like that with a "public key color", generated deterministically from the public key, that can be used to distinguish users which otherwise have the same name/avatar

not sure this is the best solution as the eye can only distinguish so many colors, and ostensibly spammers could grind until they have a similar enough color (but currently don't), but it's something


i think blocking/hiding notes by users that have a NIP-05 address, but which doesn't verify, would already help a lot with all the impersonators


> Don't auto replay videos, especially not with audio.

i wish any nostr client had this, auto play is absolutely awful especially if people post a ton of moving stuff at the same time


i've never regretted reading a RFC


I've written a blog with a proof of being a satoshi millionaire, that does not reveal where my funds are on-chain. Bukele and Coinbase take note pls :)

https://reyify.com/blog/privacy-preserving-proof-of-taproot-assets


What's the current state of NIP-17 support?

I'm considering implementing it for Kosmos account notifications, but AFAICS the client I use (noStrudel), which is jam-packed with other features, doesn't support it yet. 🤔

Feels wrong for a new implementation to use the deprecated NIP-04 with zero metadata privacy.


they usually just tend to overheat and burn the place down


i like using shampoo and conditioner, makes my hair soft
i've tried washing with just water for a while as experiment, but my hair gets kinda greasy and my head itchy
maybe it gets better if i'd put up with it for weeks but...


sure, but who knows what people will do with it?

on your own relay you can obviously do what you want, but if you publish something that publicly nails people as spammers, you also have responsibility for it to be correct and not cause collateral damage


that seems fine

but then if my posts somehow end up on your relay anyway (because someone set it as inbox) you'd publish them in the banned IPs feed and whoknows servers and clients would start ignoring them


at the least reputation / WoT should override this, otherwise it's worse than twitter

twitter does downrank new accounts coming from VPN IPs, but if you have an account that's seen as reliable otherwise it won't ban you (usually)


as someone who intentionally runs all nostr stuff over a VPN for privacy reasons, this would pretty quickly ruin my experience here


have fun... i guess...


ever since i saw GUIX's fancy default configuration and learned how much "top" can do, there's hardly need for the fancier tools


i'm pretty fond of rpi5, they are surprisingly fast (don't feel much slower than the average desktop pc), can have NVME storage, and there's lots of good-looking cases available, which tend to be silent or even passively cooled

but rpis do lack ECC RAM which is often recommended for lightning nodes, so i get it that people don't want to use them for big routing nodes


yes, oof, that is some confusing pricing, i do think i read about it initially then forgot about it and started assuming the whole package was pay-per-month


"the battery in your neuralink implant will detonate in T-3...2...1..."


"not your supply chain, not your bomb"


wine already isn't one-off for new subscribers anymore, it's pay per month (https://nostr.wine/add-time)


welcome to coldcard menu ! (firmware 2044-02-04)
enter one of the following pins

339385   explode
249385   release anesthetic gas
238385   enable laser grid
239385   send bitcoins
239485   radiation burst
239375   open sharks trapdoor
239374   open dogs trapdoor
239386   send in swat team

have a great day !


to be clear: wireguard simply creates an extra network interface on both hosts, then tunnels encrypted IP packets between them
what to route through it is entirely customizable with firewall rules, it doesn't need to expose any unnecessary ports remotely


right, it's for hiding your home IP but still having extremely low latency, unlike tor/i2p

the advantage of wireguard is that it's easy to set up and there are lots of guides for it, of course there's more complex forwarding setups possible too


a substantial part, although i wonder how many of these are just shims with wireguard to a home network, that's a fairly common setup


i always wait until my phone is half falling apart before buying a new one 😀
must say the new Pixel is nice, the camera is a lot better than the cheapo Huawei i had before, but also i don't care much about phones and their features


yeah, though arguably, there's so many ways a vehicle can turn dangerous when hacked, that the battery exploding wouldn't be my first concern


good reminder to put my phone in a handbag instead of in a pocket


On the way to court to cover the Samourai Wallet hearing starting at 1pm EST with David Z Morris. Watch this space for possible updates and a full report 👇


GM and good luck to the Samourai folks in today's hearing. 🌀

https://image.nostr.build/a17d43b69d5a76cc00f0ae58d511c8125310f6330a1e9486bd8625f7edebab52.jpg


In between - hours, places, weathers. A brief return of summer. // 📷 366skies

#366skies  #outerworld  #smartphonephotography  #dresden  #concrete_city
 https://status.z428.eu/bl-content/uploads/pages/a564ad456835447412821b98a351b6ea/tzc0qg5t1yrutzeo.jpg