Nostr is completely public. It is up to you to protect yourself and protect your own data. Nostr isn't a license to put all of your information out with no care in the world, by contrast it merely takes power away from the snake oil salesmen.

Consider this. The snake oil salesmen tell you that you can put your personal information out in the world, don't worry, we'll protect it. In fact they own it. So now they know who you are, what you say, who you follow, when you log in, and they give you the sense of control by giving you tools to control who can see what, but there are no tools to hide anything from themselves.

Data leaks and you wonder why? The snake oil salesmen told me they'd look after it! That's when people start to pay attention.

It gets worse though. They own your messages. The only way to find out what you said is by logging into their platform and asking them. If they want to silence you, they have that ability, maybe just shadow ban you so you get less engagement than usual. This is terrible especially for businesses.

It gets worse though. They need to make sure that when they ban you, or when they decide to take any action, that they are dealing with the person behind the account, not the account itself. You need to give your phone number, address, date of birth, real name. Things that you can't fake. You can't use a custom email, no it must be from Google, Microsoft or some well known provider. Oh that number? It's been used before (even though phone providers often reallocate numbers to you from old inactive accounts when you buy a new SIM card)

As time goes by, you rely on their services more and more, you accept that they advertise to you, you accept that you need to pay $8 per month for a blue check to be anyone on that platform... I mean, what else can you do?

The only cardinal sin that they never do, but that maybe they will one day, who knows... Is they never write messages on your behalf. Either you sent a message, or you were hacked. This is why we use these platforms, they give everyone an anchor, somewhere to discover people, and once discovered, they know they are always talking to the same person.

Actually, even Elon took some accounts away from some users, I believe the owner of @music had their account taken from them with no recourse.

-------------------

Nostr: the data doesn't rely on a trusted third party. The problem we're solving isn't privacy, but we're also not taking steps to prevent privacy.

You can create an account at any time. No email, no phone number, create 100 accounts, who cares, each account is a persona and no one is there to police the accounts.

You own the messages you send. No one can send a message on your behalf (even though twitter doesn't do that) and no one can take over your account. Whenever there's freedom, there's responsibility. YOU protect your account. If you get hacked, it's not twitter's fault, it's yours. Fortunately the security model is based on the most basic and most secure system in the world: asymmetric key cryptography.

You control what you can see, if there's a persona online you don't like, tell your client to not show you their content and that's all there is to it. You cannot control what others see. Why should you have any power over others?

If you decide that you want to support a charity that is maybe controversial, create a new persona, don't mention one from the other. You can't be cancelled if no one knows you are the one sending the unpopular posts.

You don't need to have just one account. We never used to before, this one account thing was imposed upon us over time by those who wished to control the internet and we the people who use it.

There is no where for a government agency to go to when they want to suppress free speech. You have evidence about malpractice by big pharma, no one can stop it from spreading wide and far. The best anyone can do is attempt to tarnish your name, discredit you, try to find your identity and come for you directly, but by then you will have already gotten the message out, they'll need to come for you and everyone else who's spreading the message. They can't just tell twitter to block messages about the thing they don't like.

Finally, let's talk about relays and clients. Your data isn't on one server, it's on many. The data doesn't rely on twitter verifying which messages are from you, you self sign your messages. One of those servers can be yours. This way you can make sure none of your posts ever disappear. It's the only way to be 100% sure.

If a client tries to push ads onto you, you can switch clients. Your data isn't stuck to your client. The relays don't even hold your data hostage, that's just not how nostr works.

Hopefully you're starting to see the benefits. You're trading off the promises that you thought you had: the ability to say whatever to whoever with some guardian angel protecting you... For actual freedom and the hard truth... There is no Santa Claus.


nostr:npub1y8sj0myap0a7awl4qsswzz653p4p6llclww5g9m8nvls0dp62s2qpcsd3u did you get the translations working on amethyst?


100,000,000 sats per bitcoin. How many dollars should 1 BTC be for 1 sat to equal 1 dollar? (Hint: answer is in the question)


Also yeah, even if clients don't let you log in with your npub, people who want to can still do it using their own tools because the information is out there.

Logging in with your npub is not actually logging in, it's telling the client what data you want to focus on looking at out of all of the data available on nostr.

nostr:nevent1qqsv3pnddvtlnydxlzhr5khey84futfl9tr4s0cgl4rgzjupqznmrpqpz3mhxue69uhhyetvv9ujuerpd46hxtnfdupzqj6j4gu9jyk4ajvtwuepr25gfvdxv4hgle4l0g2356n0dt05t3qhqvzqqqqqqyc2h57v


All nostr data is public, instead of using closed doors to give a company special access to your information, nostr levels the playing field by making everything publicly accessible to all.

Regarding private messages, this has also always been known, it was a proof of concept feature that most clients adopted to show off what we could do. Messages are private but metadata is public.

When you make a DM on Amethyst, you have a choice to use the old DM system, or a more private one by clicking the incognito icon. This is a new spec that is not yet widely adopted by all clients as far as I know, I think there may be competing ideas that nostr needs to settle between.

Using this version of chat, the metadata is hidden, or at least more of the metadata is hidden, so who you are talking to is no longer public.

This means logging in with your npub does not reveal who you are talking to using this chat type.

Logging in with npub is still useful for some people. You may want to give employees read only access to your account for a company, but the most commonly used scenario is using the app with a remote signer.

You log in with no permissions with Amethyst, but when you want to publish a note, Amethyst sends the note to another app which shows you what it wants to publish and you have to approve it. It separates your identity from your application to ensure the app cannot do anything on your behalf behind your back.

This was inspired by watch only wallets in bitcoin which let you delegate the signing of transactions to a secure signing device so you can monitor your account, see your balance, give people new addresses to send money to, but you can't send money out without the secure signer.


GM. 🙂


Very early, lots of research still to do, not a silver bullet (a small application may require GB or TB of storage by each participant), don't trust the shitcoiners who build wrapped bitcoin.


I think you're way off. Firstly, quantum computer isn't a silver bullet. How big it can scale depends (among other things) on how many qbits it can handle.

Then we need an algorithm that can theoretically solve a particular problem. So that might be: given an address, can I generate its private key? Usually it's: given a public key, if generated with sekp256k1, can I calculate its private key?

So far, I don't know that there's an algorithm for this although I have heard that there are algorithms that could theoretically crack other ECC (elliptic curve cryptography) algorithms, maybe that means all ECC algos?

Then we have the cardinal rule: DO NOT REUSE ADDRESSES. Until you spend from an address, your public key is unknown, instead your address is a hash of your public key. I don't know if there's a theoretical program that could crack that either.

Once you spend from an address, your security goes from hash+ECC to just ECC for any funds left at the same address or any new funds going into that same address.

So don't do that 🤷🏻


Serious question,
What happens to Bitcoin once quantum computers are the norm?

Would it be theoretically possible for someone with one to generate every key and send themselves all the Bitcoin? Not sure how the network would be able to react to something like that.... Am I way off?

$boost #asknostr


It kind of doesn't matter, as long as you're tracking it and ensure the tx gets mined. If I want to close the channel before it confirms, then I should pay the appropriate fee to get it confirmed which will carry the channel tx.

Let's say 1 week.


My phone doesn't understand pwa, it tried to have me extract the file.

No Bueno.


Slides are up!

tldr: Payjoins / Coinjoins on hardware wallets is no bueno.

* Quick intro to payjoin and coinjoin cooperative spend transactions
* All the things current hwws / signing devices get wrong when displaying these txs to users (yes, nostr:npub17tyke9lkgxd98ruyeul6wt3pj3s9uxzgp9hxu5tsenjmweue6sqq4y3mgl blows it, too)
* Work-in-progress R&D on some better approaches.

https://m.primal.net/Hbhy.png

Presented and discussed last night at #chibitdevs

https://github.com/kdmukai/cooperative_spend_uiux_slides/


Zaps are limited only by the lightning network.

If you have 1btc on your wallet, that's a start, but then the payment needs to be sent through a peer to peer network and so the number of hops between you and the recipient, and the amount of bitcoin in the lightning network between you and the recipient will play into the ability for you to send it over the lightning network.

Zaps don't translate to on chain payments, so you do have to use lightning.

Many wallets/service providers support multipath payments, that's where a payment is split into smaller subpayments which does increase the odds of a large payment succeeding.

1 BTC payments have been done over the lightning network. So technically the answer is yes, you can zap 1BTC if you want, but it's not common to do so.

Also finally finally, fees on Lightning network tend to be correlated to the amount spent, while on chain is correlates to number of utxos spent. Typically on chain transactions are cheaper for larger transactions and lightning is much much cheaper for smaller transactions.


So... Covid drop imminent?


We were higher before. Also this is still kind of a sideways movement.


You need one of these 📢


Was it censored on other platforms??


I think what you're saying is that since DNS is distributed, you can get information without needing to make all the calls you'd typically need to:

1. DNS query to IP
2. Call to IP
3. Get certificate
4. Call to CA(s)
5. Etc.

Now you just find the nearest DNS record, check it is signed correctly, and the data is there.

If this isn't it, I will have to tip my hat and admit this went over my head. 🧢


Why offline? If you've never tried to visit this site, surely you wouldn't have the DNS cached so you need internet to get this message.


Welcome welcome


Watched a bsv take... They think COPA is stressing and Craig is running circles around them, explaining all the ways they apparently don't know shit.

Since when does a "enterprise" version of a product work completely differently to their non enterprise one?


YouTube is better for sure, but I don't think these media servers are any better than a standard web server. 🤷🏻


You can also zap us! It's all connected 💪


As announced at our latest meetup, we now have an official website!

Check it out at https://bitcoinology.uk

We have also created a geyser page to help keep funding the meetup. Please donate if you find our meetup useful.

Check it out at https://geyser.fund/project/bitcoinology


You literally have your own web servers. Why do you need to upload your video to a client??? 🙄


This was literally the next post for me. I had to see it so now so do you and everyone else. 🤷🏻

nostr:nevent1qqsfelfhd5yqe74zhdkcjf2s3wtw5q9r2csganejfk342d8xkqephrgpp4mhxue69uhkummn9ekx7mqzypc7e27ck6en2j8qwhlsrvc4drla5xws4sncspnanyegcm0y3pvh2qcyqqqqqqg9438cc


Nice.

nostr:nevent1qqsy0a7ut3lundqp64y9d7828q92ehyt3f2l98uxfspf2ztakxzeusqpp4mhxue69uhkummn9ekx7mqzyzuuathtg9u22j0gkpts7dyt9j4yhmufx0lrxg75tcu8tsqerx3vyqcyqqqqqqgsltjg3


Take the apple mask off. (iMask? iGoggles?)


P.s. it's all love ♥


I'd tell you: shut up nerd.


Timing is sus. Know what I mean?


As they say, mo' money mo' problems. It's important to always keep reassessing your current situation and risks. You don't really know what you will do or what you need to do until you get there.

It's up to you how you want to handle your new found wealth, you can mostly preserve it, or you can change your lifestyle, but buying a mansion without also considering security and maintenance costs is how you go broke quick.


Just don't broadcast your position, it's okay for your trusted friends and family to know, it's okay to treat them but better to teach them, and overall, keep a list of risks on paper organized and keep reorganising it as your situation changes and make changes to your bitcoin security setup as appropriate.

Nothing really changes.


Anyone not?


I mean... Yeah, and? Bitcoin ain't crypto.


I'm sure it will come out in the form of a video 🔥


There are plenty of recipes but most of us aren't willing to shit coin.


Sorry, WeWork founder and CEO wants to buy... WeWork?


Did you link to the scam or the site of the scam or a site that linked to the scam?


I did this too


Politicians make more co2 just yelling about how bitcoin is bad for the environment.


What OS do you use?


Sometimes ignorance is bliss. Fuck it, download it. Make sure it is an .epub file before trying to open it and use your favourite epub reader, not one that the website recommends necessarily.

You're probably gonna be fine 😁


I mean, you gave such little context, you could have been downloading an executable program which would be more dangerous. Also what operating system you are downloading to is important, Windows is typically vulnerable to many risks but it does protect you for the most part, Linux (and I guess Mac) is typically less vulnerable but not impervious.

The internet is a wild west, don't open Pandora's box because once you open it, you see everything!


Preaching to the choir here 😬😂


But realistically, if you have any sort of power or influence, you'd just compromise the web server. Has there ever been any reported cases of someone, government or hacker, compromising SSL certificates and using it to serving content that the host didn't intend?


Ugh! He's already effectively served life. This is beyond fucked. I'm not surprised he's a suicide risk. Fuck!


I didn't think you could zap posts on damus... You know, because of Apple's policies.


Could be. Https cuts out the middleman. (as long as you're not at a public cafe, it's still somewhat possible to make HTTPS look like it's working when there's really a middleman there in a public location with untrusted WiFi)

If the website you are downloading from is untrusted, then there's a risk. If the website is trusted but they were compromised, there's a risk.

At least https at home reduces the risk to just you and the website host.


What is it look like currently?


I believe there is a cashu plugin to integrate payments using the http payment code 402


#foostr

Home cooked lamb curry 😋
https://image.nostr.build/16b86984bc84caee52db3172a9f59a398c37dfc330e17b3b9280824819ffc4c2.jpg


Expected afaik. But I might be wrong, it might not fit in the realm of OWASP, but it is a glaringly obvious security flaw that any respectable team would get onto fixing asap.

It's a small change for large benefit. This is contrary to spam and fake account detection which requires constant monitoring and manual intervention because it is very easy to catch false positives and for people to work around when the problem is more subjective than objective.


That's a different type of thing. This is an objective problem that is probably a violation of basic OWASP security tenents that are expected of all companies today.


Link? Want to hear that.


If this is true, report it to twitter. Their security team should know about this.

There is nothing in the page that tells you this and that is a security hole. A big gaping security hole.


That's a lot of permissions. They can delete posts, add posts, just to be able to serve you a calendar?

I think any bitcoin related company would be okay finding another way to set up a call if you explain that you don't want to give all those permissions to some third party.

Alternatively create a second twitter account and tell them you're using that to log in. This way they have full access to an empty account.


AND OTHER STUFF


1. Web 5?
2. Needs a Coinbase wallet?


Came to say this. 🤷🏻


Satashi* https://steemitimages.com/DQmXUAaTiUuTEjih2VTx4hUaQWEQ4Ku8kAuAZqBGbpQBg5W/giphy%20(1).gif


nostr:npub1y8sj0myap0a7awl4qsswzz653p4p6llclww5g9m8nvls0dp62s2qpcsd3u does this show in Spanish to you?

I found that the replies aren't translating but the first post is still auto translating so I'm making this in the hopes we have  something reproducible to share with #Amethyst dev(s)


¿Comprueba el idioma de tu cliente en el menú de configuración?

https://image.nostr.build/7cf6ca91e14cb7ac030c03ddd3e602199a8054a936d17c448804e03c2f45c65d.jpg


When I send this emoticon, it passes some of the gold coating on my cables to your end. ⚡🏆


You don't have a lightning address set up, so I can't send you any hard money 😢


I mean, you can't zap anyone without sats, but you don't need to configure a lightning address to send sats, you just need it to receive some.


What about keet? It feels like it should be transparent for most people, just giving people magic access to remote drives and magic privacy preserving file sharing with no service provider.

Like an OS native Dropbox.


Is there a way to get this WITHOUT alby?


I didn't even know you were speaking in Spanish!

https://image.nostr.build/f9b03ae2bb1e6659f90db148e795b3c18108aea6874825c834f4c3f9addd0588.jpg


Ready for the halving. Maybe we'll have a halving + Craig defeated party. 🥳


This is basically subscribing to an email newsletter but with an anonymous email address right?

I suppose SMTP will dox your IP, so you rely on an email provider which is the same as relying on relays in nostr


Why not just use tor?


Put the yellow eyes on it!


We have a delete spec. It's up to relays if they want to follow the spec, some will out of respect for the publisher, others will not out of respect for the truth and full transparency.

https://delete.nostr.com/


How many days left?


What am I missing here?

https://nostrcheck.me/media/bitcoinbarry/6d8f02ce92b5d82e1c78bd46bc02499f4a0183d2ce9cc9d6b74f9866a4a586c6.webp


Wait, the article says mastadon CAN'T accept zaps through zapple pay, so is there something addressing that?


He'll just sit there and say "I don't need to prove my innocence, I'm Satoshi, the law should just believe me because I'm telling the truth"

Hopefully they'll diagnose him with being a mental case and admit him to a hospital.


It's not a one day affair is it?


Notlouisck?


Pretty sure this is a bad take, there are innocent people trapped by this decision. Call it collateral damage, whatever, but these are not non-people, even the criminals might do with some investment into reform.


Wow, people still get to vote on things like this in some countries? We just get told it's for the environment, everyone wants it and it gets put into practice. Even when people start revolting, they must be climate destroyers who like to destroy government property too.


404 ?


Heat the home while simultaneously cooling the home with the window open?


I think I've seen 2 clips of this guy now. Pretty sure it's parody and not candid.


I almost believed it, but the top left branches gives it away 🤷🏻


Don't forget cooking and eating.


nostr:npub1qny3tkh0acurzla8x3zy4nhrjz5zd8l9sy9jys09umwng00manysew95gx 1 sat/vbyte on its way back! 😁


1. I didn't know you could just click that speech bubble... Pretty cool.

2. My instinct is that I should return to the main feed. It feels like a shortcut for power users.


What does it do exactly?


How crazy will it be when ETFs and its users fuck around and find out?

Bitcoin is everything we have said it is, but bitcoin backed products are only as sound as the thing it is backed by.

Bitcoin bobs and weaves, it'll deconstruct and reconstruct as and however needed to remain bitcoin in the face of change. Will wall street adapt? Can it?

Users with private keys just tag along for the ride. Anyone trying to arbitrage Bitcoin's movements are bound to lose and tell me Wall Street will resist a good arbitrage.

The good news is that there will be markets that show the discrepancies and the whole mess will be mostly public. The public will be divided with those who double down on the narratives and those who start to get it.

Strap in for the next 4 years, it's gonna be a bumpy ride.


Join us tomorrow for a talk on UTXO management.

From 6:30pm at the London Bridge Rooftop Bar.

#London #Bitcoin #plebchain

https://www.meetup.com/london-bitcoin-space/events/298735659/


The fake is too good. Impossible to tell.


Netflix supports it too.
Okay now I'll stop.

https://image.nostr.build/6b2f9ba4df857d8a0f3f263e1df4d7799813dd2ff5991c52666d60c4338f291d.jpg#m=image%2Fjpeg&dim=330x1920&blurhash=%3F8C%7Ebo%253%3FaShTwE*%5E7I%3A%5D%3Bbc%7EWXSE*S%23%5E*Na%3DzaK&x=f2a6a0694f9c9529cfa06ebe197816742010c7907601e81192cf952e6ba03c72


So does Google messages.


My brave (chromium?) Browser does it.

It looks like this.

https://image.nostr.build/26cfba70e9c6605049db3a9fc3203ee77ae9d57e85529791a5cb669a98b5da2f.jpg#m=image%2Fjpeg&dim=864x1920&blurhash=%5BGC6%242az00j%40%252xbM%7Cof4nj%5B%7EqWB4nt7%3Fboft8azs%3Aay%3FbofD%25j%5BozayaeayfkWUjZayaxayWBfQ&x=563d489d1e49dc2ff4f8d543b273e18ff417f21b1555828aa9a0c69fd2163e02


I spend a lot of time scrolling and re scrolling nostr. 🤦🏻


Wow... We found the guy! Now I can never suffix this with "... said nobody ever".

Also anyone dare tell me this in public, I have this bookmarked to prove it ain't true.

nostr:nevent1qqsfvnyzc03hrajt3v2ay6fah7mhp3vhk2g5hq6u3n62fgtzqx79t0cpzpmhxue69uhkummnw3ezuamfdejsygzu2zxrfavgvmk8xsd27yxvrt6jay3jhw0ct8ypq099ane24yal0qpsgqqqqqqs5s9y9m


If this is really a quote from Satashi, then clearly they knew mining wasn't only what kept the network secure.

Or maybe they just wanted to see where it went so it could inspire the next iteration. 🤷🏻


Can't wait to visit soon 👍


If you are an operator in the bitcoin mining industry in the US it is imperative that you ignore this survey and tell the EIA, the Department of Energy, and the current administration to fuck off.

Here's what they have in store for you.

https://tftc.io/eia-bitcoin-mining-survey/


nostr:npub1am50jqjytzdtepftqfzf8grh2gs4wpt7d4t90zxc6z288wqazj5skdks29 #nope 🤷🏻


Zap this to zap nostr:npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z


nostr:npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z feature request:

Ability to "capture more" when I take a screenshot and be able to capture one of those long screenshots with everything inside.

It's an android feature as far as I know?


I'm a fucking genius!


Okay, here's an idea: let's build a layer on top of lightning addresses that lets you define a public key associated with the address.

Something something cryptography, the mint receives the payment and locks it to a key that only the receiver and sender knows and boom!

The idea is the wallet chooses to generate a unique address [id]@mint.com and the mint cannot associate the id with the receiver but because the id is based on a public key, the receiver can.

I'm not cryptography guy, but it seems like a feasible idea based on all the other things I've seen.


I can zoom in but the quality isn't zoom worthy... I can see the pixels.


For the rug pull coming soon. Like rare Pokémon cards that they don't announce and just release. Imagine the GOD who gets that... Shame they can't sell it on the market. (Or can they?)


Haha! Trolled by idiots on twitter and trolled by bots on nostr.

Ain't your day 🤷🏻😁


Link?


Nit pick: not through mints, through tokens. It's the fact that we move from tracking people to relying on signatures on tokens that affords us the ability for mints to stay blind while serving customers.


I think we've known this for some time now. #Amethyst has had TOR functionality for some time now.

Snowden brought this up time ago and wasn't so shitty about it when he did 🤷🏻.

https://image.nostr.build/5235618b9b844121a75445843a0e5a59889843bdbf19eadc2ba23a6c140b6fb6.jpg#m=image%2Fjpeg&dim=864x1920&blurhash=%5B24xe%7C_3%3FH9Ft3%3FHR%25s%3Bs%3BITxbR*E0WBozjZIVIoNGs%3BM%7CD%25ogRjo%7DtRD%25s%3B-%3BI.%25MInkU%25MR%25s%3B&x=db2d034d0223df283b35ae663e79e33882f797154980b8dfcb8ecd73b64602dd


What happens in 5 days? (Why is he getting rekt?)


Neither is blue sky. 🤷🏻


Sounds like nfts


This was such a bitcoin specific joke, I'm glad no one was around to ask what I was laughing about. 🙈


Careful what you wish for. Inflation is a bitch.


They saw him get handed the case and so they got suspicious and .... Something something "in favour of the state". 🤡


Reads like a chance card in monopoly wtf?!
https://image.nostr.build/f10561b14e7b26d5b0244b6c2659b1e3874cadba73645af3ce3976a5c1ecc64d.jpg#m=image%2Fjpeg&dim=864x1920&blurhash=%5B27UM9%3FbH%3Dt7-.RjWrkC8%5EWBXnWBo%25jZ-Uof.AWXaJj%5D8%5ERib_j%40-Nt5t7WAJGWE-Ta%23XAWBNGjZ&x=e4dca0283d8b7abdbf09abe2911dff1cefa8904b42c6a8dc295f8ab123fb69d8


DID YOU GUYS LEARN NOTHING FROM nostr:npub1nw5vdz8sj89y3h3tp7dunx8rhsm2qzfpf8ujq9m8mfvjsjth0uwqs9n2gn'S DSB PROMISE?!?!


Who went to jail for this crime?


Couldn't you always do this?

I just delete and re-import. What's the issue with that?


Funny but FAKE! https://www.reuters.com/article/idUSL1N3491WD/


Gif


Definitely don't watch the Peter McCormack episode with Rizzo talking about ordinals... Can't believe he tried to justify Udi's point of view. ,🤮


Location?


Shower thought... Are ordinals a security?

They don't exist, but they were created, but the creator didn't own them, it was an idea that he created.

It's such a weird thing.


Bring back the car keying!


Why does webfinger specify the host twice?


What's wrong with open source chrome? It's also without any tracking chrome.


Erm, that's like saying "my car is bright when the doors are closed and dark when the doors are open"

The real difference is that you wear sunglasses when the car doors are closed (don't ask me why).

Maybe it's your computer being weird and telling you that there's a difference, but both ascii hex files and binary are the same just viewed from different lenses.


My lawyers have just confirmed that Craig Wright has had his final appeal denied by the Supreme Court.

It is over, I won, welcome to law Motherfucker!


Why does the image uploader change the image?

https://image.nostr.build/05a9e2d01e687f8e73b261c70001ec1d776638ea3bd6109b580e252f5e0ac211.jpg#m=image%2Fjpeg&dim=1080x1707&blurhash=%5E38NkQNDt3xdIln.9Excf8R%23n.R%254%2Cs%3FM%7CR%23aRk84XNDx%5B%24.Sss%3F00xcofRi%25NRi%3FsxJRjNDxKR%24M-I%2Cxt%24.NDxc%7EqjcV%5BWTRkfho%3FxdWBNDssRi&x=d6fd9d1090e90ce3d11b794b25ebe613ee26f04c339db778b451e01e192c7fd2


Last I cared, I noticed that nostr verification did not work over tor. I've since disabled tor because I stopped caring and now I see bad verification signals on accounts that I'm pretty sure are valid so I tend not to care about it at all now.

Am I a bad person?


How?


What does it do? Afaik, #Amethyst translates all posts for free. 🤷🏻


The mental gymnastics required to describe that we owe money to China and not a private entity called the federal reserve.

The dishonesty to not clarify that the federal reserve owes money to no one and that THEY are the lenders.

I feel like Neo in the matrix.


Lol. Justifying a product to the creator of that product. 😁


It's okay, bitcoin fixes this.


It just occurred to me that this does provide something: it's safer to tap your card on your own phone and have it do the communication than to rely on the merchant's device. But it's also 2 steps instead of 1. 🤔


I'd say the biggest difference is the user accounts.

On mastadon your account is owned by a mastadon server and although you can create a new account on another server at any time, it's not the same as an account being its own thing in its own right.

That's what nostr provides. Your account is created locally, locked to a secret key and no relay can restrict you from making posts under that account. Ever. They can only at best censor you and for that, we have distributed relays.


He's not wrong. If your typical western coloniser NEEDS bitcoin, all hell has broken loose from thier point of view.


It would in the sense that your stated IP would be wrong, but the time and name would still be announced. So 1 out of 3.


Yeah it would, but also you gotta find out what relay is behind this and kill it with fire.


And what is mpc and what is tee?


Both no or yes are red based on whether they are bad outcomes or not.

Can be private? No is red
Can be hacked? Yes is red


" nostr:npub1csamkk8zu67zl9z4wkp90a462v53q775aqn5q6xzjdkxnkvcpd7srtz4x9 and I "... Fixed it for ya 👍


As hilarious as this is, I also think it's pretty cool and as convoluted as it is, it's something that will definitely feel like something new and exciting.

"They just lifted the bill from our point of sale and then paid it from their own phone!! - Magic!"


Yeah, when the feature is turned on of course.

I mean when it comes to familiarity and ease, block all images exists today (Gmail) but allow from trusted users only is not as widely found and relies on your following list to be your trusting list too.


Probably easier and more intuitive to normies if all images were just blocked and you can click to show pics each time.

Chances are that their following list isn't audited well, and they might even prefer to be more selective about image loading.


I have to remind myself that these loans are basically private and these "cancellations" are just the government paying the debt for you.

If it was actually a cancellation, I think it would be net positive.


Just started getting little sats on my #lntips, I was excited to see which post made someone's day and then I realised... These aren't zaps....

Fortunately I will never know what the message behind the Zaps are and I'm glad.

Thanks nostr:npub12rv5lskctqxxs2c8rf2zlzc7xx3qpvzs3w4etgemauy9thegr43sf485vg for shielding us from the cheap spammers who think they can buy my attention for nothing!


GM.


mempool.space is one of the best places to find out what fee you want to set.

Note that if you set the fee too low, the transaction will most likely just take longer (days, weeks, or months).

The worst case is that the transaction never confirms and the network forgets about the transaction eventually.

Fortunately, until you see the transaction confirmed in a block, you can assume it is still in your wallet. Once confirmed, it has moved. There is no limbo really, and you never lose funds.


You can move funds between different types of addresses at any time, you will not lose funds.

Note: you can tell if it's native segwit or taproot by the address prefix:

bc1q = native segwit
bc1p = taproot


This was presented in London at the nostr:npub18cngxzyjtjw38mrcwlghmj5sdjzt4am4ezra23jlheafsjtt8duq6ld82l event. 👌


Custodial banking, but no user accounts. No liquidity management, no channels, all the privacy of using cash without registering with a big bank.

Your phone gets tokens from a cashu mint like you get cash from a bank ATM and you give bitcoin to others from app to app like you give cash from hand to hand, but also you can pay lightning invoices too (the mint handles it for you just like any custodial service) and the mint won't know whether the tokens you are giving them to pay your lightning invoice was the one they gave you, or the one they gave someone else.


You're getting cheap sats. It's wonderful.


His take about the security being only "can they break into my phone" is mostly true but he didn't really explain how you go about signing using those wallets together.

The devil is in the details.


Bravo with all that editing. 😘👌


Oh, hi nostr:npub1getal6ykt05fsz5nqu4uld09nfj3y3qxmv8crys4aeut53unfvlqr80nfm, can you generate invoices using the extension?


Yeah, legacy is the most expensive. There is a small difference between segwit and taproot, but taproot will be most cost effective and very popular for lightning channels, utxo sharing schemes, and other L2 protocols built on top of lightning.

For single signature wallets, segwit will be the most cost effective, but if you want to hide in the crowd, i.e. you don't want your address to stand out as "probably a single sig wallet", then you may choose to use taproot anyway.


Sorry, forgot to add the link: https://guides.getalby.com/user-guide/v/alby-account-and-browser-extension/alby-lightning-account/faqs/how-to-use-alby-lightning-wallet


Why do you want to do that anyway?

Unless you are setting up multisig or some sort of more advanced type of wallet, it's not cost effective.

When paying from a segwit address with a single private key behind it, the size of your signature in bytes will be smaller so your total cost to make a transaction will be lower.

When you pay from a taproot address with many keys or some advanced spending conditions, then a taproot signature is smaller than the equivalent on segwit, but not for a standard single signature address.

Another benefit for using a taproot address is that if you are using multisig or something advanced, no one will know if you did that or what the spending conditions were in most cases making it more private than segwit for those things.

Legacy bitcoin addresses, although the absolute least cost effective, are still supported on bitcoin, you don't need to worry about segwit becoming unsupported in the future because removing support for an old feature is a breaking change, requiring a hard fork and I don't think anyone dares to even attempt that, especially not for this reason.


For live we have zap.stream and some bitcoin podcasts stream on there at the same time as to YouTube.


I don't use getAlby, and I couldn't find docs on how to generate an invoice using their browser extension, but they do have guides to connect it to either Zeus or BlueWallet which are typical wallets with send and receive buttons.

With those if you tap receive, it will make you an invoice.


So... Everyone is chatting to Emily Thompson right? I swear you're tracking who's paying to talk to who and I bet I'm right.


Assuming you have a lightning wallet application on your phone, you click "receive" and you may need to enter an amount and it will give you a qr code.

If you don't mind, it can be useful to know what apps you are using (e.g. phoenix wallet, alby, lntipbot) and what nostr apps/sites you are using also.


Lightning is the technology, think: apple pay.

A lightning invoice is the qr code you generate for payment. You can usually specify the amount required and even a message, hence invoice. You can send it by email, show it on screen, or share it online. Once paid once, it's paid, done.

Zaps is a nostr feature, it's more like a type of payment: like donations are a type of payment that helps those in need, Zaps are a type of payment that publicises the payment on nostr for everyone to see and to help publicly identify which nostr posts were most popular.

Zaps tend to rely on a technology called lnaddress, where you get an email address looking identifier and people can send you funds over lightning. This allows you to pay someone without them asking for payment first, invoices are the opposite.

It's like a payment vs a tip.


nostr:npub126ntw5mnermmj0znhjhgdk8lh2af72sm8qfzq48umdlnhaj9kuns3le9ll is it possible to install your own software? What is the underlying os? I want to install photoprism, access the server via Tailscale, and also for some reason free gpt downloads models up to 99.9 or 99.8% and never completes.

Own hardware (Chromebox), startos.


Few.


Well, I hate beetroot so, I guess we're all the same really.


Why do vegans love meat products so much?

Like... Falafel is great.


Thanks, I'll have a look.


Vegans like sausages... What about this don't you get?


I could be your gremlin.


So... It's gonna be illegal to know of a number larger than 1 trillion?


Y no can zap?


nostr:npub1kmwdmhuxvafg05dyap3qmy42jpwztrv9p0uvey3a8803ahlwtmnsnhxqk9 is there any known way to connect to a CLN node instead of LND?

#asknostr is there a plugin that can add the Macaroon authentication layer on top of CLN?


Meme producing is the future career for any child. So we have to be teaching kids the skills that are relevant to their futures.

Also, this WILL be politics in the future, no TV debates, just memes.


Also, I can't click on it to see the full article. Is that just because of my client?


But you didn't expand on it with your own thoughts... So now I see it as just contextless  spam. 😞


I have a zombie channel with a "closing" status for months now. How do I force the close?

#askNostr #bitcoin #lightning


Brain drain
Burn out


Buy the dip = pretend you know technical analysis,

DCA = Dollar cost averaging

There are no small caps, only bitcoin and microcaps.

Degen = Trader


Why are you not using bitcoin in the first place to avoid this problem all together?


I. Keep one for me.


Actress*


Hope*


I really home someone sends this clip to the actor once a year. Just a stark reminder that they pretended to buy 1 BTC for $3 and their character now has a massive lump sum, and yet she the actor probably didn't.


We doin' alright, how about you?


At a company I work for, my manager was complaining that part of the terms of working with one payment processor is that we cannot work with other payment processors.

He correctly thought this was outrageous, especially since such a decision would lead to us implementing features in house that we have no business doing leading to all sorts of regulatory risks, security risks and so on.

Of course this isn't enough to convince a business to quit the system and enter bitcoin, but I'm sure it's a step in the right direction.


Schwingggg to the right.


I love that jack write this as a long form post on nostr and not just on some blog site that would have been guaranteed to reach more eyes.

When "celebrities" use nostr, people will browse nostr to find their posts. 💪


It's cats.. what do you think? Cats own the internet.


Quite funny, to mark [insert meaningful event] I did [commemorative gesture]. To mark the launch of [commemorative gesture] I threw a party.

If it's your birthday and I buy you a birthday card, do we need to throw a party for me for buying you a birthday card??


Okay another consideration that crossed my mind, it's not about how many tokens you can get, but also it's usefulness to a miner.

If an economy was made up of trading jpegs, then the miner might join the inscription chain, but since they will want to trade with real economic actors, likely on lightning network, they will need to ensure that the bitcoin they mine for themselves is on the chain where they want to do business.

So it's not just fees that incentivises miners, it's also (and maybe even more importantly) where their trading partners are.

If miners are trying to get fiat to pay electricity bills, then they will likely follow the chain that has a higher value, and that would likely be the one with more variety of users on it. The reason to bring this up is that a miners trading partner may just be Coinbase for converting BTC to fiat, and Coinbase may accept and allow converting both forks, so then the only thing influencing which chain the miner will mine for is whichever one pays more (and is likely to sustainably keep paying more) which will likely be the one with more economic users whether on chain or off chain.

🤔


Somehow that's not the worst of it... They're throwing away money:

> Mercedes-Benz is also using blockchain technology for less frivolous applications; back in 2020 it announced that it was piloting a project to track the amount of CO2 emissions in its cobalt supply chain using blockchain, in collaboration with traceability start-up Circulor.

https://cryptonews.net/news/nft/28398674/


I think you have an expired SSL cert. nostr:npub1vadcfln4ugt2h9ruwsuwu5vu5am4xaka7pw6m7axy79aqyhp6u5q9knuu7


Ugh! Can't zap you again 😂


For my second part:

I was thinking back to how I saw the narrative evolve around who regulates the network after the blocksize wars. The final generally accepted answer was: economic nodes; i.e. those creating on chain transactions and incentivising miners to choose a particular fork.

I think the next fork war will unveil that L2 has introduced another variable to this formula. People transacting on L2 aren't generating fees on the Blockchain as much, so if a fork were on the horizon, how could people on L2 express their opinions? They may run a node, but does it do anything?

I think the point of keeping the Blockchain cheap was to ensure that everyone could participate in such a scenario, but high fees can distort the signal of more transactions on the more popular or maybe more "just" fork.

Imagine a fork with lots of inscriptions activity vs a fork without... Not necessarily because the fork was about blocking inscriptions, but because these users want a particular feature that prioritises their transactions over normal payments or L2 transactions.

Couldn't this be a negative outcome for bitcoin where more capital outweighs the needs of the many and unless bitcoin has a hard fork, or unless there is an altruistic movement to block the fork, bitcoin becomes mostly unusable for the majority of its users.

Since writing this, I had another thought: maybe even if most users are using L2 because of fees, the portion of those users getting forced closed, splicing, using submarine swaps and so on is still generating significant on chain activity with fees to influence miners.

Paying higher fees after making good use of an L2 SHOULD be more economically sustainable than paying higher fees for single transactions in the long run.


Should've been 1234


nostr:npub1a2cww4kn9wqte4ry70vyfwqyqvpswksna27rtxd8vty6c74era8sdcw83a and nostr:npub14mcddvsjsflnhgw7vxykz0ndfqj0rq04v7cjq5nnc95ftld0pv3shcfrlx regarding your question of reducing the risk of rugging with ecash mints, there is an interesting concept called proof of liabilities that heavily reduces the risk of rugs.

It works in tandem with proof of funds.

https://gist.github.com/callebtc/ed5228d1d8cbaade0104db5d1cf63939

It's a bit technical, but the idea is a systemic periodic bank run (trading all of your old ecash for new ones) baked into the ecash system where keys and tokens are rotated and if there are more ecash in circulation than bitcoin available, someone will very quickly find out and have absolute cryptographic proof of the fact so the reputation of the mint dies if they are caught cheating.

If you're offline, the system does not force old ecash tokens to become invalid, so it doesn't force everyone to be online for the system to be secure, but it you are more secure if you turn on your wallet from time to time to ensure you are still not getting rugged.


#Bitcoin is the only asset you can truly own

https://nostr.build/i/a855c6a405cefb89f5cc8a7b0bd53ff8992855fdfde008620cd26b398529760c.jpg
#plebchain #grownostr #zapathon #memes


I'll jump back on this project some time this year. Hopefully I'll have more luck. I also have had advice on debugging hardware I can buy to help me zero in on the root cause.

I'm a little out of it depth with all this low level c++ coding, and most complex for me: compiling for non standard CPU architecture.


There is a specific algorithm you are supposed to use to calculate the fingerprint. It involves using the secp256k1 algorithm and I think possibly because of memory constraints, I had issues getting that library to run on the device.

It also wasn't giving very helpful feedback, I think the device just crashed after attempting to perform a memory allocation step.


I love how underwhelming the response was. Stay based Bitcoiners!


#asknostr #askbitcoin

nostr:nevent1qqs84d3q2yad8exmd8hhpefhu7tj2kue0t4wr6rutmrnjxlq0xk7hccpz3mhxue69uhkummnw3ezummcw3ezuer9wcpzqrvhh6h9vl7we8r9wncudmmpym4fd82fjtp3nrj3crav2tzjwjs5qvzqqqqqqy5q5uta


I will only buy when it is in a cone shape with glowing lights and I can inject it into my chest.


Do you find it crazy that the checksum for 01234..... In sequence is just a continuation of the sequence? 😂


Someone confirm something for me. Covenants let you put bitcoin into a restricted address such that you know what can and cannot be done with the bitcoin.

What I don't quite get is how it helps with regards to fees. Yes you can close a channel or do a coinjoin with less outputs and therefore pay less fees there, but won't the overall cost be higher?

You can use covenants to make it cheaper to consolidate small utxos (other than reducing load on the Blockchain and driving the fee market down)

Do covenants enable us to do more trustless collaborative transactions in ways we can't do today?

The other thing I worry about is that we all know that economic Bitcoiners regulate the network. If a transaction goes in a block that you think is invalid, you will refuse to accept it and you'll reference the valid block for all of your future transactions, making it more valuable for miners to swap to your chain.

Now if more things happen in aggregate, we start to concentrate who is influencing the network. Its a bit like mining pools influencing mining templates.

If we get things like channel factories and utxo pools, what will ensure that the majority of minds are able to express their opinions on the network?

Being able to choose between service providers seems subpar since this tends to create a class device and service providers might trend towards doing similar things like Visa and MasterCard do.


Memories of grabbing people to use bitcoin at Costa Coffee in Gibraltar with nostr:npub1vxz5ja46rffch8076xcalx6zu4mqy7gwjd2vtxy3heanwy7mvd7qqq78px and co.

https://video.nostr.build/dec852665b79e46e74caf759589686a1a8b3cde7541776da182ed67a6a61e467.mp4#m=video%2Fmp4&dim=544x960&blurhash=%5DcF%3Djsj%3FV%40RikW%7EqaxRjRjayk%3DjYfkWBjYo%23n%24ofn%25n%24R%2Bn%24bIs%3AWBIVRjflozWBRjsoo2ofj%5BaexajZofoef5ShWBoLkB&x=f719c4336ebe0753d63511cb92cc52254e35c59415f0a79efb7ede5fcbb5a271


Some pics, caveat, the checksum is real, the fingerprint is fake.

https://image.nostr.build/8cfdcb8ecab07c479b61b2bdbf5e2dc94f0206c5848328878c04b5c537254d0a.jpg#m=image%2Fjpeg&dim=768x1020&blurhash=_XJar%7DENRPX9RPofae%7EpoLIpR%2Bayayj%5B4TM%7CoMM%7Ct7WBoynhNGa%7Ds.R%2Bs%3Aayx%5DxGf%2BofjtkCaeWBWBt7s.bHjaj%3FX9xZkBs%3Aayayj%5BogxtoKbIoLWBa%23M%7Bt7j%40oLazaybH&x=0ac9a8dc67b1a1a3049c922e5517382a6ad80f43c5f5bb8dea51e4ece2035330

https://image.nostr.build/9d74f21c991fe3b0e2d4d3a7e97f990e458c509ed9dc892cacc4e89e2e436852.jpg#m=image%2Fjpeg&dim=768x1020&blurhash=_bI%3B%40jELe.WXWBkBoL%7Epn%25M%7CbHaefkj%5B4nR%2CRkR*jsWVj%5BR5NGjZWCWWofj%5Bt7jFWWWBofa%7CjsV%40NGt6aeofjtayWVRkofoLWXoLj%5BtRn%25kCjsj%5Baya%7CWVj%5BoeoeWVjZay&x=21c26a6d93c11e2e2cb3c9291fe520dab94690e044632c8e52059c7ea9124579


Btw, I couldn't find a calculator that could do sha256, I did look 😂

But seed signer works, tails OS is a poor man's option, I was trying to make it work on this microcontroller: https://shop.pimoroni.com/products/badger-2040?variant=39752959852627

They were £16 at the time and I got it working actually but then I wanted it to give you the XPUB as a qr code and I couldn't get the secp256k1 library working on it properly.

These guys now focus on the version of this with WiFi.


Down


Right


B


A


Y


X


Select


Talk


Speak


Up


Left


Calculators and seed signers count as computers to me.


The first step is to generate a random number (dice or coin flips) then you can create the first 11 or first 23 words with a lookup table and the final word is mostly complicated by the need for using sha256.

This is a good resource even if you're not trying to seed xor. There's a python script that you can read and run on a non bitcoin related computer there somewhere too.

The sad thing is you have to give your whole key to a computer to generate a valid checksum.

https://github.com/dipunm/seedxor/blob/main/assets/dice-xor-instructions.md


No.


Nah, but I will look into them anyway to see if they can work.


I was having issues zapping wallet of satoshi and this fixed it. I use lntipbot for my address fyi.


There was a UI someone built and I think it was based on nostr but end result was you could collect funds and donators knew the money went to the right purpose because you had a federation signing off before any money was released.

Multi Sig was probably the main thing but I don't remember if it used lightning also.


I found that zaps have a problem if you set your default zap type to private.

Press and hold the zap button, set the default type to public and see if that increases your odds.


Don't you mean we should be focusing on banking the unbanked instead of trying to unbank the banked?

This seems backwards otherwise.


There is no character count limit. Isn't that cool? You don't need to pay nostr:npub180cvv07tjdrrgpa0j7j7tmnyl2yr6yr7l8j4s3evf6u64th6gkwsyjh6w6 to post more than 120 characters.


nostr:npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z something to look into? The issue started on #Amethyst as far as I can tell.


I mean, for starters, you only see content that is related to you, either because you follow them or are a small number of connections removed, because they are talking about a hashtag or term that you searched for, or because they mentioned you.

If they are targeting you by naming you, you can at the very least rate limit which posts you see that are from anonymous accounts.

Spam can be mitigated, mitigation may lead to missed posts of interest, but tools for helping you identify and mitigate spam will improve when spam becomes a problem so for now, let's welcome it.


#asknostr

I need help, I remember from some time ago when someone developed a tool that could lock bitcoin in self custody but also allowed you to define a goal and accept donations and then you could spend it only if other parties in your "organisation" signed it off too. Everything was transparent is what I remember most. So a tool to run a sort of dao publicly without a Blockchain.

I don't remember the details so I may have gotten something wrong in the description but if anyone knows what I'm talking about, please point me in the right direction.


Wall street is full of pussies 🤷🏻
I can say that because #nostr 💪


Are they?


I never knew a BIP could be so ... Sassy.


> This style relies less heavily on clever C++ and is more familiar to the Core Dev Team who are primarily PHP programmers.

https://media.tenor.com/e6pkxOYgepUAAAAM/coming-to-america-arseniohall.gif


That's my point, people want you to come from a "do as I say" point of view.

Honestly, I'm still working on my family, but I think persistence, patience and consistency is key.

You can't do it in a single sitting, anyone who "orange pilled" their taxi driver did no such thing, they gave them a wallet and told them to learn more and the driver took the free money because they had nothing to lose. They still got paid for driving in fiat.


I personally like Richard Ayoade's summary of the movie. 😙👌

https://youtu.be/UH9xqJN_Vrs?si=ficg5wpPF2ZPqps2


Psycology. No one wants to be told what to do unless it is by an authority. If you can make yourself look authoritative to them, then they'll listen, but we understand that empowering means talking face to face and not down to someone.

It's a paradox, I refuse to take responsibility for someone else's decisions but I also want to open your mind to opportunities.


Fiat???

Congrats 🥳


Yeah, my talent is that I can wiggle my ears without moving the rest of my face.

Also I can develop frontend 😉


Your statement does not invalidate mine. The fee of a transaction is always the remainder of all inputs - all outputs. Therefore the sum of all outputs and the fee is always equal to the sum of the inputs.

A miner choosing to claim less reward than permitted when they mine a block is irrelevant to the point I'm making here.

It's a nice fun factoid, but doesn't make my statement incorrect.


Someone tell nostr:npub18d4r6wanxkyrdfjdrjqzj2ukua5cas669ew2g5w7lf4a8te7awzqey6lt3 or nostr:npub169gdh7kw57hc2fqwlu28pn4pa7t8tkfx98zwarwtvx6wcfnw8syqfpcfpf (which is the real one?)


I honestly think this is the missing visual indicator that makes the idea of tracing coins and implying things like ordinals look unintuitive.

When you look at the above and think ordinals, it becomes clear what ordinals are doing: they are drawing lines where they were none to begin with.


Just a thought... We should stop drawing transactions as interconnected lines. There should be a break.

Transaction inputs are collected, counted and "destroyed" aka spent.

Transaction outputs are new coins that must, along with fees, amount to the same as the inputs.

I propose we start drawing them like this with a break in the middle:

https://image.nostr.build/42518b665d5f96ef354ac991f360c6b931e993b15169995efc454bf8bf959597.jpg#m=image%2Fjpeg&dim=625x260&blurhash=ZMQ0UNt6xGbD%25ZRkX3xat3%7EnWEtPWDRpoJoNaxah_1M%7C4pxtjZtPt5R*RkE3t5%3FZRlR*WFRlocxt&x=b09eedf9555fd3c51bf54185cb286fc410378ebc3cf3995e52991cb60efe95c3


Fiddy


They have to prove that they are trustworthy in order to get approved. Using Coinbase gives them an edge.


Not that one??? 👀 That's the one I'm following.
https://media.tenor.com/MbYXU2om01cAAAAM/fry-not-sure.gif


Also changing my zap default from private to public seems to have fixed it.


I noticed that when zapping his profile, if I don't include a message, everything is fine, but if I do, then it fails... Do Zaps on posts include a message by default?


I'm not getting that far, once Amethyst does it's thing, then I choose a wallet.


nostr:npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z for some reason I am unable to zap nostr:npub1lr2zzf989mvf393y0tv39ara6a4vddkd6y87z784up9vl6ks6j3qtudl6a.

He's using wallet of satoshi.

Any idea why?

https://image.nostr.build/7dc2794b8d7981e387de519994efe29f108b04dae602d4808f3fd86335ebd2b8.jpg#m=image%2Fjpeg&dim=864x1920&blurhash=%5B34BqUW%2BITnoouoNogR%259ps%3DxvR%7ExdNExts%3F%5E%2CWTM%7BaiSs%254ogNERlR%25ogogsGNExts%3FtJs%3FWCNE&x=b0d6ea5331c2d8f332cda3d431bbef9f9f1f35c898c5fd87183bb822d5a1b048


GET IN!
https://media.tenor.com/0XD8xLZQBOcAAAAM/hungry-belly.gif


Sign in. Especially if you're using cryptography 👀

Log in is like "reporting for duty". No one likes to log their time at work.


Slowly and in cash.


It's funny, but if anyone really believes that "protecting investors" is anything like "protecting a twitter account" or that one is easier or harder than the other, like if they believe that in order to be competent at one they should be competent at the other...

🤦🏻


While everyone is bullish on twitter about the ETF craze, while there are cool things happening in the nostr space, I am feeling unsure about bitcoin, where I'm sure I don't know it will last 20 more years, because the realisation that everything boils down to on chain fees is getting to me.

Maybe it's just a UX thing, maybe wallets need to build a "savings" feature in lightning wallets so users understand how much they are saving and therefore don't feel so bad when they have a forced closed channel or a high splice in fee.

Maybe it's much more nuanced than that, maybe on chain is so expensive that it's not about "saving", it's about "feasibility". This is where I think a lot of newbies are right now. They're stuck in lightning because they were introduced there. But if they got a non-custodial one, then they are likely feeling like they are hanging on to a rope just above water with alligators in it.

Will covenants solve this? Will covenants be widely accepted? As far as I know, the covenant specs haven't changed, so if it passes now, the only thing that has changed is the fee market but we don't know for sure how well covenants will fix this or even how quickly.

Meanwhile self custodial solutions are shining. Is this the way Bitcoin is really destined to go? If it does, Bitcoin is dead to me, it failed. Bitcoin always had the potential to fail, even when I learned about it in 2017, it was more accepted then.

Since I've seen what it can do, how it can help so many people all over the world, and how it empowers us so well, but if it can't empower those who are grossly, deeply trapped in the system, those who today will fight for the system that enslaves them, when they finally need it, it isn't what I thought it was.

Help me out peeps, why is bitcoin not destined to fail in 10 or 20 years under the weight of it's own success?


Do they think they're getting bitcoin??? 😢


What is BTM??? So we're shitcoining now? I'm actually not surprised. 🤦🏻


I'm surprised that he didn't already know it... Is he a bitcoiner or no?


The rugs will continue until self custody improves. - nostr:npub1qny3tkh0acurzla8x3zy4nhrjz5zd8l9sy9jys09umwng00manysew95gx

But in all seriousness, 4 years of not reading into the bitcoin rabbit hole will do this to ya I guess.


This guy 🙄


Can we add a motivation section to make it really quick to see what this is and what this isn't and what it solves?

Afaik, it doesn't put files into relays, so it still has the risk of files going missing... I'll keep reading now.


It's literally the #bitcoin symbol. We got an inside man, gotta be.


Etf approved or just excitement in the market?


Advice for new Bitcoiners in preparation for the upcoming bull market:
📈 DON'T TRADE
⛵ BEWARE BOATING ACCIDENTS
🏢 DON'T GO NEAR BLACKROCK
#Bitcoin #memstr

https://video.nostr.build/097678af4cde4064bbede3f73449e64faac4986104e45e79bf478bf5181f9722.mp4#m=video%2Fmp4&dim=960x544&blurhash=iZFFT%3D%7Eps%25wHniWZi%5ERPNI%24IwGV%5EI%5DR%3At7kCWYWYISnhohR%3AbHxBxZogofR%3BXAf5skoeWBs%3AoIWANMR%3AbHoIoJWXR%2Bsln%7E&x=c585e9965589787d55f7e187c84bf4ada1a382f9bd5919f38aad329e6dfd4bf3


This piece clearly means more to her than it does to me.


What a numpty.

BiTcOiN wOnT sErVe EvErY1

Then bitcoin is dead, ETFs don't save bitcoin, bitcoin backs the ETF.

Stupid, fucking, retarded, coño, 😤🤬


So wait... Has an ETF been approved now? Any weird conditions?


The icing on the cake would be if you uploaded and displayed your meme using this library.


Maybe uninstall and re install.

Consider using amber to avoid having to set up your key every time. https://github.com/greenart7c3/Amber


Don't be mean, don't be mean, don't be mean, don't be mee--aybe you should get a proper phone 😝😝😝


Why do big transactions have more impact? Do you mean big as in payload size? Like batch transactions, consolidations and coin joins?

Because big in sats doesn't affect the bottom line for miners, maybe for users who are eyeballing the network, but not for the rest of us, and not if the fork has a rule change with it.


entiment

In this article we discuss the problems with the classic five star rating system and why it needs to be abolished in favor of better expressions of public sentiment.

"entiment"

This is a highlight created on https://highlighter.com


This is cool, it automatically produces split Zaps so the original creator gets 2/3rds of zaps. 🔥🔥


nostr:note1h3sr44gqtpv05uslxep2jpflvmw547q6kz7kmun4rytfjkx3hxjslqanpg
This is a highlight I am creating.... testing testing 123.


If you have any further questions, use the #asknostr hashtag for help. Keep in mind, some of this information may become obsolete since the protocol is under constant development.

"If you have any further questions, use the #asknostr hashtag for help."

This is a highlight created on https://highlighter.com


So not tomorrow... Tomorrow doesn't end in a Y.


Confirmed. Nostur is more secure than a hardware wallet.

nostr:nevent1qqs0nk4pngq9235zdhch90yt3dqkp82qxpsk42gsylc73tfmmxzly2cpp4mhxue69uhkummn9ekx7mqzyr5g56g7nrveslykg5salasqyhmqwqph3fy8jxqdewa555p8s5zpzqcyqqqqqqga63gzw


They cannot be traced. Well .... Keeping coins mixed is not easy. You have to keep track of your coins, label them, be sure not to mix them ect.

Using coin joins all the time is probably a good way to go, but also probably more expensive than you'd like.

Also, as others have said, there is still a buy record under your name with no sell record. (Traditional finance doesn't track coins, they double bookkeep, so they just sum the numbers)

You COULD just tell the government that you lost it all, but they'll probably be keeping tabs on you to see if you're lying or not.


I disagree with this. It assumes that etf based activity will translate to on chain activity.

The thing is that these custodians are centralised and will optimise to save on fees while of course marking up their profits.

It's not the number of nodes, nor the number of bitcoin you have that influences the network. It's the on chain activity. ETFs will be pre-bought and bulk bought.

A large transaction is nothing, many small transactions is everything. It doesn't matter what the big bitcoiner wants to do, just what the majority of "users" want to do.

This also means lightning users are also exempt for the most part too btw.


You mean, pay a large fee every time instead of just some of the times?

Okay buddy.


Both are cold. Too cold. Drink more cuppas and head to the fire.


Because the computer is theirs to do with as they please. You do not own a Mac, you merely experience it.


What did he say?


More like money laundering anti laws amirite 😉


HODL! HODL! HODL IN YOUR SNEEZE FOR THE LOVE OF MANKIND!


It's a coping mechanism. I have to have a job, I had to define a career, I settled... So little one, how will you settle?


Wait... Can't we just use this to our own advantage?

Can we not use AI to bring back online personas that are actually smart enough to bypass all the kyc and bullshit so we can remain anonymous behind it?


While the suits are doing ETF paperwork, Bitcoiners are out here hacking together a Lightning ⚡ powered soda machine 👀🙌 https://video.nostr.build/77a32c580daf7eb38375ecb8511a524a8a8353c048b56382f260b600e233a3bb.mp4


Insiders are fucking scammers.


Be craeful what countries you fly that thing in 💀

https://image.nostr.build/2b1983a4887e84f7bc845ac5ab4259724eee6d10b286d840465d394858d97329.gif#m=image%2Fgif&dim=360x203&blurhash=il9*l%7Bx_W9RoXAV%3DWBR%3AbI.AxvWURkbJadWFWEbHt9t7awWBb0kDW%3FWCf5Roj%5Dn%7Djsa%7EkCbIa%24jYM%7CWEoeobjsfkjXjYa%23&x=8812a39fd9269dae8045836a65ff92ac89a573688f7987c7b8d9a242d6402e69


Setup a way to find out if your passwords are ever used... Like make one of your passwords be clearly for one of your own websites but also make the name of it enticing

Then if you find your passwords are compromised,  you know that you are being targeted.


Happy Birthday #Bitcoin

Two options for events in London today. Bitcoinology in Holborn or 15 years of Bitcoin in Hackney. Or why not celebrate in style and do both.

#London #Bitcoin #Massive

🧡💜🧡


Why hasn't anyone made a Math.abs function that internally squares and then roots the value?

I think I found my calling. 😈


My neck hurts, can you do a chiropractor next?


Haha. I saw 2 types of replies. Those who like me saw a country restriction, and those who were making comments that I didn't understand.

It all makes sense now.


Do you consider questions to be answers to uour questions?


Yeah, but it can still be a BRC because it is a bitcoin Blockchain. Call it bitcoin ordinals, it's still called bitcoin something. Get my drift?

It's a bit better than creating a new shitcoin or rebranding something else with the bitcoin name because you can at least say that it has bitcoins history and is born from bitcoin.


Nah, a fork is like a cleansing. Like sweating out toxins. Once the fork is out, bitcoin continues to be bitcoin.


Lol.


So... Bullish?


I don't think this exists. The issue I am thinking is that even if you send a transaction today, it might get confirmed next week... Heck it might get confirmed in a couple of months.

I've not thought too hard about this, but that might be the reason why it isn't possible.


Lol. You asked someone?? 😁


Wow, I forgot about all of this... Watching this, I wonder how did this not bring nightmares to anyone who wasn't a geek?!


No


It's an old video but a good one still.


This is super cool.


Automated tooling. Like a kids based nostr client can completely omit this content instead of making an unsupervised child on an otherwise safe client decide themselves.

Parenting is definitely necessary, but parenting will never be 100% and a good actor should try their best to use the tools available to label and categorise their content.


#asknostr #askbitcoin

Has anyone written a thoughtful piece about the nature of Bitcoin's supply cap?

I know it seems obvious that no majority would ever support a devaluation of their hard earned money, but there are some nuances I've been wondering about:

1. When a currency is devalued, it is usually reallocated to a specific cause unfairly.

2. Increasing a supply cap would not break the fairness of issuance designed for bitcoin where miners earn their rewards.

3. Many of us come for the number go up tech among other reasons, but many others will only use bitcoin because they need to; they'll depend on the censorship resistant and permissionless nature of bitcoin, but they may not care about an inflationary policy if there is an obvious utility issue being exacerbated by the supply cap.

I am but a mere pleb, but I wonder how long this cap is considered holy as humanity evolves into the future.


https://image.nostr.build/67b6b1424069f5dee1fdcb95daf501343d28ab1eb694c38b5ae3ee89181f6088.jpg
#meme #memes


Ah, but this would mean that you are relying on people moving coins to a new address type?

If that's the case, it's pretty clear why it's unfeasible, it took forever for people to adopt segwit, and it's taking forever more for people to start using taproot.


Trezor too?


YouTube continues to turn off more features because I refuse to enable "watch history" which is their way of saying, track everything I do on the web, not just YouTube activity, but all websites I visit.

Yet this fills me with joy. I will no longer be enticed by Google's evil shorts reel feature. +1


nostr:npub1xnf02f60r9v0e5kty33a404dm79zr7z2eepyrk5gsq3m7pwvsz2sazlpr5 where should I be getting my updates now? I've been using obsidian pointed at the blog: https://blog.zeusln.com/zeus-v0-8-0-open-beta

What's the new place to find the latest updates apks?


I fucking knew it. Well done finding the undoctored original document.


Somehow reads like a NSFW novel.

Lots of plugging into holes going on 🤔😋


A summary of Cure53's audit of the NIP 44 encryption standard. A report on a report, if you will.

This is a long form article, you can read it in https://habla.news/a/naddr1qqxnzdesxg6rzdp4xu6nzwpnqgsf03c2gsmx5ef4c9zmxvlew04gdh7u94afnknp33qvv3c94kvwxgsrqsqqqa280a30ar

By this time, many of you may have either given up on a new standard for encrypting notes to emerge, or entirely forgotten that there was one. Well, I have good news — we've received the [audit report](https://cure53.de/audit-report_nip44-implementations.pdf) from [Cure53](https://cure53.de/) on the NIP 44 encryption spec, and the results are good! This post will be a summary of the findings, and some hints on what lies ahead.

# The results

The assets in scope for the audit can be found on Paul Miller's [NIP 44 repository](https://github.com/paulmillr/nip44). Included is the full text of the spec, as well as implementations in Typescript, Rust, and Go.

Overall, here's what Cure53 had to say:

> The Cure53 team succeeded in achieving very good coverage of the WP1-WP4 targets. All
ten findings spotted by the testers were classified as general weaknesses with limited
exploitation potential. In other words, no vulnerabilities were detected within the inspected
components.

In other words, no vulnerabilities were found, but there are things we can do to harden the implementations. Cure53 elaborates:

> The fact that Cure53 was not able to identify any exploitable vulnerabilities can be
interpreted as a positive sign in regard to the security of the NIP44 specification and
implementations. Nevertheless, even though the spotted problem can all be seen as general
weaknesses and hardening advice, they should not be ignored. It is known that weaknesses
may serve as entry points for more severe vulnerabilities in the future. Cure53 strongly
recommends swift resolution of all reported flaws.

These weaknesses and recommendations each have their own code, prefixed by "NOS-01", which is our audit number. Here's a quick summary of the individual points:

- NOS-01-001 describes a weakness related to naive secp256k1 implementations, which may accept public keys with both x and y coordinates instead of just x and a sign-bit. This can result in the compromise of a sender's private key if the sender can be tricked into encrypting a message with an invalid public key. This is known as a "twist attack". Cure53 recommends some additional test vectors to make sure that uncompressed keys are not accepted.
- NOS-01-002 includes a handful of minor recommendations, including specifying the initial counter for ChaCha20, nailing down key formats, and a few other things which they go into more depth on elsewhere.
- NOS-01-003 provides some additional test vectors to prevent twist attacks and out of bound errors.
- NOS-01-004 suggests using a constant time equality function to prevent timing side-channel attacks, along with some code samples.
- NOS-01-005 identifies missing range checks in the Go implementation which should be addressed in order to avoid crashes.
- NOS-01-006 addresses the lack of provisions for forward secrecy in the NIP 44 spec. They suggest introducing sender-side forward secrecy by deriving the session key using ephemeral keys and a KDF.
- NOS-01-007 explains that using the same key for multiple purposes can lead to unexpected compromises when taken together. Best practice is to use a different key for signing and for encryption, which nostr violates. While the particular curves we use aren't vulnerable to this exploit, Cure53 recommends deriving an encryption key from a user's main key using a KDF in order to reduce the impact of a leaked encryption key.
- NOS-01-008 identifies an incorrect use of the salt parameter in calls to HKDF (an HMAC-based Key Derivation Function allows us to prove that an encrypted payload was not forged). Currently, the salt is generated randomly every time, but the security definition of HKDF specifies that it be static. This is likely not exploitable, but should be fixed. Cure53 suggests switching the nonce and salt when calling the HKDF, and deriving a static salt using something like `SHA256(pubA, pubB, "nip-44-v2")`.
- NOS-01-009 demonstrates that the Message Authentication Code (MAC) tag is currently computed without a nonce. This doesn't compromise the encryption, and authentication is covered by event signatures as specified in NIP 01, but it does prevent the MAC from being useful on its own.
- NOS-01-010 suggests using clearer boundaries when constructing the HMAC payload.

The takeaway here is that with a few minor changes, the spec itself is sufficient to "provide a simple way for the users to communicate privately". There are, however, a number of edge cases which can compromise implementations, so for any developers out there porting the spec to new languages, be sure to take a look at Paul's test vectors.

> In the end, the NIP44 specification and implementations appear to have already achieved the security goal of providing users with a way to communicate privately. Miscellaneous issues identified by Cure53 during NOS-01 correspond to further hardening of the current version and/or suggestions for future versions. Following these suggestions could provide more advanced security guarantees.

They also clarify that:

>  Importantly, the lack of certain security guarantees, such as forward secrecy, post-compromise security, deniability, and post-quantum, had been known to the development team prior to NOS-01.

Since this is the case, it's important that client developers be absolutely clear with their users about what NIP 44 is good for, and what it's not. This is a "simple" way to communicate privately — users with more advanced privacy requirements should use something like MLS or SimpleX.

# What's next?

NIP 44 isn't quite ready for widespread use just yet, but it shouldn't take long to incorporate all the adjustments mentioned in the audit. Then there are several NIPs which rely on the encryption in NIP 04 which should eventually be migrated individually. Beyond that, a whole world of affordances for encrypted data becomes available on nostr.

First and most anticipated, we can finally deprecate NIP 04 and stop leaking DM metadata. Vitor's [Sealed Gift Wraps](https://github.com/nostr-protocol/nips/pull/686) are an excellent alternative to NIP 04 DMs, and add support for small group chats, which will be a big improvement to client UX.

Other more ambitious specifications targeting larger groups exist as well, including my [Closed Communities](https://github.com/nostr-protocol/nips/pull/875) draft spec. This NIP makes it possible to extend NIP 72 communities with a private component, which can be useful for publishers or real-life communities.

There are lots of other things NIP 44 might be used for as well, for example:

- The ability to share your location only with certain people
- Private calendar events, product listings, or streams
- Private tags — instead of encrypting an entire event, it should be possible to encrypt only a single tag's value. This allows senders to attach private data to public events.

# Conclusion

There's lots of work still to be done, but I think this marks a huge milestone for nostr. So thank you to Paul Miller for his work on the spec and the audit, and to OpenSats for funding the audit!


I grew up thinking people were rich if they had a garage. 🏡

We all have a #Bitcoin story. I share part of mine in the Welcome to Bitcoin series produced by @Swan. What’s your Bitcoin story?

Visit swan.com/welcome for free Bitcoin 101 educational units. https://video.nostr.build/ca33ecc1341e2bd856de216b31fd895b2907bcf9b7c99894982067c7cf28cd95.mp4


This is word for word perfection ♥


Wait, this isn't a deep fake?


Why is it such a clean snap?


Okay people, share this, get this trending and let's get this to the people that can and are willing to help!

Let's fight and be part of the solution!

nostr:nevent1qqsyw3fwsgzl8gsmthmjjtesh9wsh36urwlk0gdpzjlt4eqyh5xa7zcppamhxue69uhkummnw3ezumt0d5pzpw3089yrxevywh53dq9cnrumurcas5qkd34g88d7ppxsye4ddcs2qvzqqqqqqy7rlprz


Don't be completely delusional to think money in the bank is even yours.


nostr:npub1h8nk2346qezka5cpm8jjh3yl5j88pf4ly2ptu7s6uu55wcfqy0wq36rpev I'm listening to your Fiat money's dark secret audible, and I'm currently at the 45m mark.

I had a thought that I wouldn't mind hearing your thoughts about.

You paint a picture where you aren't worried about losing your job over inappropriate conduct because you have a buffer and probably options for employment elsewhere.

But I do imagine that some people will bend over and take shit, not for survival, but for lifestyle or peer pressure. I would assume that actors and actresses are paid well and have buffers, but it is known that the entertainment industry is no fairy tale.

My thought, maybe cynical, is that whatever you earn, you will set yourself a baseline. Unless you actively choose to set a 3 month buffer yourself, many people actively CHOOSE to live paycheck to paycheck (often either to keep up with friends or maybe because society doesn't help them understand it's benefits).

So when it comes to choosing no over yes, you may not consider your buffer as much as you consider social circles, reputation and lifestyle.


How's your Spanish?


Spam has an annoying market mechanism... Nfts and other money making scams.


Don't buy the corn, it's only going to crash again.


Hey guys,

It looks like your site is down: https://bitcoinatlantis.com/

Specifically the server is failing to let me buy tickets, giving me a timeout error (when using developer tools in the web browser).

Pls fix so I can buy tickets soon 🙏


That one is taken. You can't use that one.


It's definitely censorship, but here's some food for thought:

If they simply deprioritised the txs they didn't like but would include them if the mempool was empty, is that censorship or just natural selection the same way miners prioritise high fee txs, while others might prioritise their friends' txs.

Also, Bitcoin is censorship resistant, individual miners were never supposed to be censorship resistant. Stop panicking and let game theory play out.


Time for a feature toggle page?


Is there a service fee for maintaining the remote key server?


What is 42?


Effectively, searching for tags works irrespective of upper and lower case letters in either the note or the searched tag.


Both are the same. Amethyst tags both with the bitcoin b symbol.

In terms of nostr, in the spec, all tags are saved in their original form and in lowercase. So someone searching for notes tagged with #bitcoin will find your note even if they searched for #BiTcOiN.


Lol of course it's warren.


It's all about the visibility. It's like why tattoo your arm which might be covered when you can tattoo your forehead? 💩

https://media.tenor.com/J4Bp5qKh9ucAAAAM/shaving-hair-aang.gif


Looks like price talk has officially made it to nostr.


Look again
https://media.tenor.com/52F1nyVWEcQAAAAM/morpheus-matrix.gif


There are 2²⁵⁶ user accounts on nostr afaik. We just don't know how many of them have been discovered so far.


I had a thought last night. #asknostr

Can nostr help to facilitate private network access like Tailscale can? but without Google login and a central coordination server that can be targeted.

I know you can run headscale, but you'd need to run a VPS to keep your home IP private and then you have: a potentially unencrypted paper trail, a service cost.

I'm thinking we could somehow use nostr to privately coordinate a handshake or something and establish a private secure connection.

Anything out there that does anything remotely like this?


Where do you point your Zeus to? I'm currently pointed to their blog webpage when they released Zeus 8 public beta. I don't think I'm getting the latest updates.


Build a business based on the current thing and you'll get a mini boost, but the next minute you'll get fucked because the next thing is not your thing anymore. 🤷🏻


Searched for #datechain... Only your post came up... You made it up 💀


Fair, I've always thought HFSP was a bit off, like how Buy Bitcoin has now evolved to Study Bitcoin 🔥.

HFSP gives me the "I'm going to the moon because I found a sure bet" vibe when it should be giving the "it's all a mess and I'm getting out of it, come with or don't" vibe imo.

It's much easier to say it like that today as well with all the mess happening that everyone is feeling these days.

If you agree, let's get it trending like Study Bitcoin as a more digestible and hopefully more effective replacement.


nostr:npub1h882a66p0zj5n69s2u8nfzev4f97lzfnlcej84z78p6uqxge5tpqlupz20 feels more apt these days to say "have fun becoming poor" if you know what I mean 🤷🏻

https://youtube.com/shorts/u0mPYUPWAbM


Did you lose them?


Planning to visit San Salvador*


Is this a regular thing? Where and when? Planning to visit next year July.


Merge conflicts.

This happens if you have modified files and then try to pull the latest changes on top of the modified files.


When you click to redeem a cashu token it gets the mint to zap you. If your Zaps are set up to become cashu tokens, you'll never redeem.

Copy paste seems to be the best solution for you right now.

Maybe a client might add a "send" feature where you can specify where to send the funds.


No no, they'll do it with more fiat. Money printing is printing trust and they don't need to deliver, only to promise.

Look out for a 20 trillion loan from the fed 🤑🤑🤑


😛😛😛😛 hahaha


So you're developing for eth now?


Hahaha


Fiat.


Inflation is NOT 'Theft' (according to UK law) Theft can only occur if someone takes your property. However the fiat money you have, isn't actually your property to begin with. #inflation #money #fiatmoney #economy #bitcoin #crypto
https://video.nostr.build/10497787b791d81ad84f43a50d3bd31fe290020c84e64a3ae71838193b835299.mp4


I didn't like it so I got the CEO of Nostr to delete it. What's so hard to understand?


Wait, so you were investigated, not because you are a registered company, but because you were an anon hobbyist that technically self doxxed?


Fair, true, but the thing I had in mind, and maybe the next thing to be an issue, is a ban on serving US customers even if the money is in their hands.

I.e. the services you provide to connect to lightning, get block info and overall just serve a webpage or app that facilitates payments on behalf of a US customer.

Any company will be affected by this. Do you think this is unlikely or impossible to happen?


WoS wasn't an app store censorship. They took it down for the sake of business preservation. If mutiny doesn't register as a company, that would be your silver bullet, but pwa does nothing for this risk.


When the same shit happens on our end, we get administration fees, late fees, lawyer fees, lunch break fees, whatever.

Why don't they offer compensation when it's the other way around?!


Definitely on my list of places to visit. Any advice for other things to see and do on a solo visit?


... So to die as soon as possible?


Pics of the intuitive multisig or it didn't happen.


Since when was it your responsibility to think up a cool gift for yourself?

If you're asking me what I want, that's boring. Stop thinking about yourself and come up with something I'd like. Here's a hint though... If you get me sats, I'll know you were thinking about me.


The real question is what are you gonna do about all your friends and strangers that you orange pilled with free sats?


Just re installed and I don't know why, but. 🤯

Also, my loading screen is always white... I've seen it be multicoloured for others... What's with that nostr:npub1xnf02f60r9v0e5kty33a404dm79zr7z2eepyrk5gsq3m7pwvsz2sazlpr5?


Yes it is bad opsec to send to the same address.

If you think about it, if you send bitcoin *to* the same address twice, then you'll end up spending *from* the same address twice eventually.

But you don't need to spend twice from the same address for it to be bad opsec. The moment you add funds to an address twice, you link those funds. Now we know both sets of funds are owned or have been owned by the same person. That may not be enough to cause you trouble, but the game is to avoid giving anything away if you can.


Current bitcoin price is set to $

No numbers.


What version? I'm currently on 0.8.0-beta4 and I don't see any updates.


Nothing is guaranteed not to force close. Often it happens because of a problematic payment, because of your node being unreliable or something else.

Big nodes are known for draining your liquidity and then closing your channel, but they usually cooperatively close it, so force closes are usually not done by them unless for the reasons I mentioned above.


Not knowing something is never a reason not to try. Of course you should prioritise your personal goals, but wouldn't understanding as much about your own freedom money be a good thing to strive for?

You'll learn a lot of skills along the way and you can do it very safely by following 1 simple rule... Don't put your keys on the node.

Simples.


When you run a node, you don't leave your keys with it.

If your keys are not on the node, you can't get rugged. Even if the computer shuts down, blows up whatever, you can pick up and start again without any losses (apart from any replacements of fried computer parts... But how often have you blown up your own laptop/computer/tablet/phone? Has that ever stopped you from owning a computer?)


Now you gotta drop everything and do it NOW!


nostr:npub1m0scpelw2ru6782z46hxe622a3st9ptngx6359wjvnn66m2deg0qldjuru and his friend:
https://video.nostr.build/ce02086c37700e0b350296228e14d3191effea17de11b63b032da812ce4db7b8.mp4


... When signing bitcoin transactions.


Is there any source code or hardware specs for the #TapSigner nostr:npub1az9xj85cmxv8e9j9y80lvqp97crsqdu2fpu3srwthd99qfu9qsgstam8y8?

I'm curious to know how signature nonces are calculated... Random or deterministic or something else?


Is that Shaq?
https://media.tenor.com/aSW9ZfIIC64AAAAM/shaq-shimmy.gif


Broad shoulders, broad hips.


Man Woman


Was it this one? https://www.ledger.com/blog/firmware-extraction-evil-maid-attacks-on-blockstream-jade-hardware-wallet


Where can I read more about the esp32 vulnerability that nostr:npub1az9xj85cmxv8e9j9y80lvqp97crsqdu2fpu3srwthd99qfu9qsgstam8y8spoke about in his podcast?


Just looking back at my free sats from people trying to spam me:

Nov 17th: 32 sats
Nov 18th: 36 sats
Nov 19th: 7 sats
So far today: 5 sats

That's 80 sats for free! Thanks guys 🥰


Don't forget that the mint needs to be a reputable one too. So Carol needs to check the mint against a trust list too.


They never talk about the other side... The risk of data leaks, identity theft, the cost of impersonation...

What happened to balanced reporting... You know, the one they kept talking about when they had to include fud even if they wrote a pro bitcoin article?


Okay, I think I get it, you can ask for the master XPUB and that will have it.

But then considering the default derivation path: `m/84'/0'/0'`, there is no way to derive a child public key from a parent public key if the path is hardened.

So then I guess the only way to verify is to decrypt the backup and check that you can drive the same addresses via the backup?

Or is there a more secure way?


I'm trying to figure out how I would go about verifying that a given chain code is being used within the tapsigner. I couldn't find it in the docs, is there somewhere I can find details?

Like I know with the cold card, there was always a way to verify that the cold card used your dice rolls by using a python script.


Mr tzatziki 😂😂😂💀

nostr:nevent1qqs09jwg6n2jxanch9c2y636h25kjtuunqa3sdklj7t0emvqwdv5emcpp4mhxue69uhkummn9ekx7mqzyq278fewxh84j403rdky0ex4vv5krjtgy5xpty2083p4s39sd6yvyqcyqqqqqqg2vlvw5


What is he doing? Why does he need the ceiling pecked??? 💀


Right 😂 I have already made more than I used to make on my lightning node when I was trying to run a routing node.


Signal costs $50m / year to run!

https://www.wired.com/story/signal-operating-costs/


nostr:npub1az9xj85cmxv8e9j9y80lvqp97crsqdu2fpu3srwthd99qfu9qsgstam8y8 just got me a tapsigner, but I'm curious, once setup, is it possible or impossible to reset and reconfigure with another pk?


Frustrations are creeping out...

nostr:nevent1qqsthlsymdheuj8tdcxwzxdz5y5y7aqhdedw7jzkw7rh6m3s5x05mtspzpmhxue69uhkummnw3ezuamfdejsygxlzue8wxp0x92ax7enqggm580y4q2spspdr90fvnu3hem5ajt8pqpsgqqqqqqsts2yna


Browser extensions read the html on all pages you visit. A lot of people use getAlby or a similar extension, if it sees this tag, it presents the user with a button that allows them to send a tip.

Nothing really magic here.


At this point, I'm just sad, because the UK already killed encryption. We're just waiting for it to take effect. I'm happy for you EU 🥲


#Bitcoin community, help a fellow Bitcoiner to recover funds! Reposts & @'s highly appreciated🙏

Anyone with contacts to a tech-savvy person at Kraken please relay this! The issue is not easy to get across, user tried with Kraken customer service for two weeks to no avail.

What happened:
- user accidentally pasted Kraken's ln node pubkey as "destination" in a Boltz swap
- turns out node pubkeys are valid P2PKs (the thing before there were Bitcoin addresses), so the swap went through
- now the funds are sitting in a P2PK which Kraken should have keys for

Here the P2PK: https://mempool.space/address/02f1a8c87607f415c8f22c00593002775941dea48869ce23096af27b0cfdcc0b69
Which matches:
https://amboss.space/node/02f1a8c87607f415c8f22c00593002775941dea48869ce23096af27b0cfdcc0b69

Kraken should be able to return the funds using their lightning node's key to sign the transaction.

We know this is a big ask and some might not even consider the amount worth the effort but for us this is about principles: Returning funds to a fellow Bitcoiner, user of Kraken & Boltz 🙏

#Bitcoin never gets boring.


#nostr #asknostr

I think we need a private profile NIP. A way to encrypt things like a private lightning address, and other personal information like phone number, email, etc.

Then people can request access to certain info and you can approve it and send it to them privately.

This could of course increase friction for things like zapping if you make your lightning address private, but it can help against all this spam. The issue not being spam, but the mass collection of people's identifiers to facilitate it.

#Cashu based zapping would be even better, allowing for anonymous giving and asynchronous collection.


Come join us TONIGHT!!!

This is our last event of the year. Also we have authorized resellers selling the coinkite cold card and tap signers if you're interested 🔥

nostr:nevent1qqsfmjd30z0ul70vkhwkhgafsz83slmsqtkm6zfyfccyfgd6edmzuuqpp4mhxue69uhkummn9ekx7mqzyqlzdqcgjfwf6ylv0pmazlw2jpkgfwhhwhyg042xt7l84xzfdvahsqcyqqqqqqgzdlt77


Even if they start to believe what you're saying about the problem, the battle to believe that your solution(s) are right after them denying you were right for so long is steeper yet uphill.


Wow 🤯
nostr:nevent1qqs035yf9ng70e40y9etfs3janju49kfjulj72x6gcpvr9puwwvg4pgpz3mhxue69uhhyetvv9ujumn0wd68ytnzvupzpwd9xafrhw30ekhg2lvsmznkphj0yyuun7gdnphhgl886rkq69eaqvzqqqqqqy0r79ue


We need to ai tweak the lips to make it more realistic now. https://media.tenor.com/VrzXhtoSwcsAAAAM/hacker-typing.gif


I already forgot 😢

What do I need to remember?


This is really cool. So with something like this, do we start to identify files by their decrypted hashes?

I know torrents do this, but we can always get a hash of a virus paired with the name of a file you want. At the end of the day, Torrents never really solved the issue of getting what you want.

Torrents were free, but now with payments involved, I want to be sure that I don't ask for mastering bitcoin, and receive the bitcoin standard.

I guess the next thing to solve is a trust/reputation system for hash -> expected content mapping?


Doesn't this translate directly to:

"Don't use our platform as a wallet, use your own wallet and use us for conversions only."?

I suppose it's another way of saying, tell us your addresses and don't give me that plausible deniability crap that it might not be your address.


```
<form action="/destination" method="POST">
```

Okay, so action is often just the URL that you want to send the data in your form to.

Method is about how you want that data to be sent. You have 2 options:

1. POST: This sends the data to the destination in a way that the server can read and process it silently. You also have the luxury of being able to send unlimited information, so you can include file uploads too.

2. GET: This appends your data onto the URL and just visits it:
```
/destination?name=Bob&age=30
```

There is a limit to the size of data that can be sent this way, but it has some benefits:

1. the user can see everything that is being sent by looking at the browser URL
2. If you're building a web app with no backend and database, then you might be handling everything in browser with some JavaScript. If the data is in the URL, then the web app can read this data and use it. It can't read POST data.

Typically, you send via POST if:
1. You are sending a file
2. You are sending data to be actioned, like a command with details (send an email with contents=.....)
3. You want the data to be stored in the database

Typically you send a GET if:
1. You are just querying (search)
2. You are applying a filter (ages=20-30)
3. You are indicating an ID (/profile?id=10
3. You are building a web app with a dumb server so the webpage needs to read the data.

The inputs in the form indicate what data is put into the POST or GET data:

```
<input name="name" />
<input name="age" type="number" />
```


You obviously had been day drinking when you bought those. 👀


https://image.nostr.build/0a8230d3bff8804f7f05ca82190840ec998a2cd8bf73159d1a39e0ac69c89bf6.jpg
#meme #memes


This is horrific because I know that this is exactly how I would sell nostr but the nuance of "give your info to one company who you trust" vs "give your info to no one" will be lost on almost every one.

😢


Are you lying?


That was a bit of a rollercoaster... First it looked like he was in to it mad, suddenly did she leave her teeth in his mouth or something? 🫢


If they're public, you can see them by tapping this arrow.

It will show you zaps as well as all the reactions and likes too.


#nostr needs to become synonymous with the internet.

We need to shift from everyone knowing usernames and passwords to everyone knowing public and private keys (password managers can still work).

Then we need apps to be "powered by nostr", not to be "nostr apps".

Eventually nostr needs to be invisible. Like https, we need to push for nostr to be used where possible for safety.

But before we can do that, it's just occurred to me that we may need to focus on security more.

VPN can't protect you from surveillance if you self sign your activity. This is very profound and for a technology designed to protect you from censorship, I wonder if the selling point of having one account for everything is really a good idea?

Signing delegation using nsecbunker and getAlbly/Amber/etc is great, but the other half of the problem is ensuring that people know what NOT to sign, and what NOT to say out in public.

Apps can really help with this, but bad apps can't be speaking on your behalf and ruin your opsec and your reputation!

Webauthn is interesting and shows that we can have one login and separated identities across apps/sites. We could do something like that with delegated signing.

Okay, thanks for listening to my rant.

Gm.


I feel like this one was real. Sadly.


nostr:npub1wmr34t36fy03m8hvgl96zl3znndyzyaqhwmwdtshwmtkg03fetaqhjg240 I'm curious if you've seen polycentric? https://youtu.be/xYL96hb_p78?feature=shared

I feel like it's a copy of nostr but without a community. That said, it is being promoted now with the grayjay app pushed by Loius Rossman who is a popular privacy advocate.

I wonder if you think this is going to compete with nostr?


Wow, so openly admitting it, but also not even smart enough to realise that they DO need a token because how else do you incentivise honest actors (fees) to create verify, and uphold the integrity of blocks?!


Aaaand it's back 😢


nostr:npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z I have a notification, but when I check it out, there's nothing to see and I still have a notification.

It's driving me crazy!

https://c.tenor.com/5uCqnpgdwh4AAAAC/whoa-dude.gif


Bigger than what? They're big.


Dude... Can you please just stop?


too fucking long.


📢 New Bitcoinology Meetup Event!

Join us on Wednesday 15th November at the George & Devonshire in Chiswick!

Antoine Riard will talk about his experience with handling security issues in Bitcoin and open source software.

Details: https://meetup.com/bitcoinology/events/297243580

We hope to see you there!

https://image.nostr.build/db9595ed31d13b1b8f8d9df032371b4101e4c3f02872f966e6ce31bc80b36aa0.jpg


Fuck you. You made me actually laugh out loud. That's never happened before. 💀


Proof of work. The same mechanism used to prove costliness in bitcoin.

The ID of a nostr note is a hash of that note. Take the note, read it's bits as if it were a massive number, run that through a hashing algorithm that gives you a large random looking string of letters and numbers. That's the ID.

Any tiny change to the note would completely change the ID that the algorithm calculates, but if the note is the same, it will always generate the same ID. When I say completely change, I mean in a way that is completely unpredictable but mathematically sound.

Now let's set a restraint. We want the note's ID to begin with 00000.... That's five 0's. We don't know how to change the note to get that, but we know that if we keep changing it little by little, each time we have a 1 in X chance of satisfying the restraint.

Said another way, if we constantly tweak and guess, we should be able to find a suitable note within Y attempts.

Each guess costs a bit of the computer's time and electricity. That's time it could have been doing something else, or sat idle taking less electricity.

So. The more 0's at the beginning of the ID of the note, the more energy was probably spent tweaking the note (btw this tweaking is not visible in the note, clients don't show it to you because it's not interesting... It's just a random number that satisfied the condition for that specific note.)

All based on maths and statistics.

Okay so why do it? Because you can use this to sort by importance. If you think something is important, will you back that with some electricity bills? Burn some CPU, incur a cost to your electricity bill in a way that proves you did it and I'll believe that the note is important to you.

Want to make a correction, burn some electricity to show how much more you care about this correction or I'll trust the first one more.

It's arbitrary imo, but maybe someone will find a way to make it all make sense.


Cancel culture is not used against large people of influence or corporation's as much as it is used against individuals trying to speak out.

The mob effect is real and not good. Also our short term mentality is not helpful and the bad guys know how to navigate this well.