You should get involved in bitcoin protocol development and bitcoin core to understand some of the things shared in the post.

Everything looks good from outside. It's the same for every open source project.


> If the vast majority of users end up needing custodians to interact with the protocol, then controlling the direction of protocol development is irrelevant. Just control the custodians.

https://xcancel.com/NotASithLord/status/1857208794851483991


nostr:npub1sg6plzptd64u62a878hep2kev88swjh3tw00gjsfl8f237lmu63q0uf63m will the Bitcoin Legal Defense Fund cover any expenses that may arise from Coinkite’s (what I view to be baseless) legal action against a competing open-source project, BTClock by nostr:npub1k5f85zx0xdskyayqpfpc0zq6n7vwqjuuxugkayk72fgynp34cs3qfcvqg2?


LMAO


joinmarket still doesn't work with descriptor wallets in bitcoin core, and it's become kind of pressing that this is addressed

legacy wallets have been deprecated for a long time, and are very likely going to be removed in next major version of bitcoin core (29.0), there's migration functionality to upgrade old wallets but this won't help for the use of legacy RPC calls like "importmulti"

after that it will ofc. still be possible to use it with version 28.x, but it's kind of sad to see an important privacy tool fall behind like this

so in case anyone wants to give it a go:
https://github.com/JoinMarket-Org/joinmarket-clientserver/issues/1571


nostr:nprofile1qqs9336p4f3sctdrtft2wlqaq5upjz9azpgylhfd3dplwf005mfrr9spzamhxue69uhkummnw3ezuendwsh8w6t69e3xj7spz3mhxue69uhkummnw3ezummcw3ezuer9wcq3qamnwvaz7tmwdaehgu3wwa5kueg6g89xw and nostr:nprofile1qqsw3znfr6vdnxrujezjrhlkqqjlvpcqx79ys7gcph9mkjjsy7zsgygpr9mhxue69uhhqatjv9mxjerp9ehx7um5wghxcctwvsq3samnwvaz7tmjv4kxz7fwdehhxarjd93kztnrdaksz9thwden5te0wfjkccte9ekk7um5wgh8qatz7tvu4p wrote lot of stuff about supporting decentralized coinjoin implementations in April this year after the arrest of Samourai founders.

I am sure HRF and Opensats can support contributors, maintainers etc. in this repository.

I work on a different coinjoin implementation which is simpler and works fine with descriptor wallets. However, I want to see joinmarket do better.


Free WabiSabi coodinators are lying to you. They aren't free, they are just secretly taxing you.


It's not used in Asia for anything except investment.


i think believing that it does is the wishful thinking 🙂 in my experience, the people circlejerking over their IQ, are rarely the people that contribute a lot to anything


Previous conflicts when Antoine contributed in LDK.


Related links:

https://github.com/lightning/bolts/pull/1208

https://github.com/lightning/bolts/issues/1209


I think he got banned because of this comment: https://github.com/lightning/bolts/pull/1207#issuecomment-2457109597


Maybe related to these links:

https://github.com/lightning/bolts/pull/1208

https://github.com/lightning/bolts/issues/1209


This is the architecture of Qubes OS. It can be used to create secure vaults WITHOUT covenants. One VM to get pre-signed transactions and use them based on output restrictions. Another VM which generates a private key, creates pre-signed transactions and securely destroy the key.

https://image.nostr.build/973696c8b3954faeeba57e3e461c372df777c2a29806b1e145d499b9f88770bc.png


This is the architecture of Qubes OS. It can be used to create secure vaults WITHOUT covenants. One VM to use covenants and get pre-signed transactions based on output restrictions. Another VM which generates a private key, creates pre-signed transactions and securely destroy the key.

https://image.nostr.build/973696c8b3954faeeba57e3e461c372df777c2a29806b1e145d499b9f88770bc.png


Everyone knows about Ross. Not many people know Alexandre aka Alpha02: https://xcancel.com/sp3ked/status/1808710404580753520


How stablecoins are extending 'USD dominance': https://digitalchamber.org/stablecoinreport/


Neither I have time nor interested in politicians and their investments.


The problem with wabisabi coinjoin transactions is that you end up with dust UTXOs and need to consolidate them after coinjoin: https://mempool.space/tx/b893d2f3dccf0b4ce22e572e431b97b7a14fdf00992fbfb344937ba717eec793


https://image.nostr.build/ad629e70291e898c7e3879ab43da54bd1400dd7b57f1fcf3cc698b3840bdf91b.png

https://theintercept.com/2024/11/10/trump-nonprofit-tax-exempt-political-enemies/


I realized this AM my answer to this is "stand up a multisig signer that doesn't require KYC" - so since I've already done that I'll plug it here, check out https://sigbash.com

nostr:note1ghufhwc3ma9qh6z3xw82tg7m454h3vux6cshky558wq76dd9qazsp99m8h


MOE https://image.nostr.build/10f73753a6ae5546974a97c89d266041c21815c65b2232837bbe928f77f76993.jpg


What difference does it make in your life if a politician has invested some amount in gold, property, stocks, bitcoin etc.?


Has anyone tried mining a block with non-standard transactions using DATUM with ocean?


Shared by nostr:nprofile1qqs00000009s3zn9xuxx0hglgyt2yds55un0h7gh5ffyvx6z4jz4xpcpz3mhxue69uhhyetvv9ukzcnvv5hx7un89uq36amnwvaz7tmwdaehgu3wvf5hgcm0d9hx2u3wwdhkx6tpdshsxxphhe on twitter
 https://image.nostr.build/281496946c5db4ceec383d8f9b3ef4fa153d3adc3a4410b8f905a3f053ed68d3.jpg


These sats could surely be used for something better. Who cares about bitcoin holdings of politicians?


This could solve the drug problem (meth use) in Thailand.

https://www.marijuanamoment.net/using-marijuana-is-tied-to-lower-consumption-of-alcohol-opioids-and-other-drugs-new-study-reveals/

https://image.nostr.build/80bef2efc3caaf2ab2a1ab689ffd307a068805764a944b07fb1cac193f77ec20.jpg


Thanks. It all started by experimenting with python-nostr.


Closed door meetings dont belong in decentralized protocols.

Be suspicious of people who don’t let you in on the discussion


I think we disrespected and ignored satoshi when all the funding, efforts etc. went to fedimint, cashu etc.

Not just satoshi but all the people who discussed ecash without trusted third parties before bitcoin on mailing lists. We are just slaves for investors at this moment and there are very few transactions settling payments on bitcoin.

It's a speculative asset that everyone enjoys when price goes up and not the same as when I started researching bitcoin in 2015.

I can assure you all the conferences in US do not affect normal people in this part of world. Asia still prefers other things for payments and I don't know who are you scaling for.


Privacy is not achieved simply by using Tor, but by deciding what you want to let the world know.

I achieve privacy every day without Tor.


I had lot of enthusiasm in 2017 when price went up.

I don't feel it anymore and think bitcoin is dead if it remains a speculated asset being traded by trusted third parties.

I don't know. I feel very emotional about it because I can't see something being captured by governments I used for payments on darknet.


I don't think bitcoin was created for on-chain AMMs.


Yeah this is the first time bitcoin price has gone up. Gold was at all time high even before elections but who cares.


IP address is not a collectible but necessity for networking. IPv6 already has 50% adoption in last 25 years.


How will Ten31 invest in custodial solutions then?


Per-country IPv6 adoption: https://stats.labs.apnic.net/ipv6

https://image.nostr.build/02e6ef4c0bfa7c54a5b5a3ecf5d40cedb9c129e6aeef7b9845d49110010a6cd9.png
https://image.nostr.build/856fd670e81bc0e811a6980ae36e6078e99e7d94270df676f48dfdb7a9601812.png


1. It is harder to review, test and get consensus on all the opcodes that are part of this proposal.

2. They can be used to build undesirable things.


Sorry but it's a waste of time.


I will be surprised if more than 1% of Asian population is using or interested to use bitcoin for payments.

Sometimes I am confused who are we scaling for.


Lot of controversial things in the paper that are just opinions. This makes the soft fork politics uglier and delays next soft fork.


This recent bcap paper looks more like an attack on bitcoin. Not many people will say bad things about it though because 2 authors are investors.


I haven't explored #zeus for almost a year. If I understand this correctly I can open a channel from a hardware wallet now. This is unfairly bullish.
https://nostrcheck.me/media/9e69e420e60df69cd945510882cfe44d91757a2c58d1c21c027a7977d12360c2/9479e78c692e68d965ee1cb90ec9a0bec38cf44a942630c1d628efb0fe7b2d08.webp


> Bitcoin Core developers have veto(ish) power on consensus changes

https://image.nostr.build/58751075495cf138a2765ccd5ec3293fefdc157edcf14f4a347acf3e48e4ff03.png

Livestream: https://youtu.be/tMvtQXK_Wio


iOS 18.1 added an implementation of the auto-reboot timer for locked devices we've been using in GrapheneOS since June 2021:

https://chaos.social/@jiska/113447894119816217

This was one of our early generation protections against forensic data extraction. We added a lot more protections this year.


There isn't much difference in religious and political extremists. Doesn't matter which party or religion or country.


I am surprised this did not include bitcoin core: https://www.cisa.gov/sites/default/files/2024-06/joint-guidance-exploring-memory-safety-in-critical-open-source-projects-508c.pdf


The US government wants developers to stop using C and C++

https://www.theregister.com/2024/11/08/the_us_government_wants_developers/


i'm looking for someone to make a better favicon for nostr.x0f org #artstr #pixelart

this is the starting point (at full resolution):
https://media.x0f.org/43b0d4f0b075c0d29ad0aeeff3446d00d8e6c085be7cea9b214aebb6c7786b2a.png

the current icon i made with a naive scaling tool: https://nostr.x0f.org/favicon.ico
target sizes: 256x256, 64x64, 48x48, 32x32, 16x16

the problem is that the thin border doesn't scale well at lower resolutions, which makes it just a black blob and invisible against a dark background, so this needs manual work to look good

let me know if you can do this and are interested (will pay in btc/lightning)


Custodial solutions have better UX compared to self custodial wallets. Getting rugged is a great user experience.


Happy to see joinstr in the coinjoin section.

nostr:nevent1qqst0hqwknprspm44ekehzvhvlm733rqk4pnyr0f9n35w7yxm0u6p7cpzpmhxue69uhkummnw3ezumt0d5hsyg9c7zuzzsrh9zyqw4zryj3fw3c4wn6r6al49ysp2kpl8gkjnl7tkcpsgqqqqqqs8rsf4e


Took me a full week to nail down some of the bugs, but Negentropy on native Android/Kotlin is now done and fully compatible with the C and JavaScript implementations.

Next adding it to Amethyst... https://github.com/hoytech/negentropy/pull/15


[bitcoin] Merged PR from instagibbs: Remove mempoolfullrbf https://github.com/bitcoin/bitcoin/pull/30592


Or use nostr:nprofile1qqs24yz8xftq8kkdf7q5yzf4v7tn2ek78v0zp2y427mj3sa7f34ggjcpzamhxue69uhhv6t5daezumn0wd68yvfwvdhk6tcppemhxue69uhkummn9ekx7mp0qyg8wumn8ghj7mn0wd68ytnddakj703s8dt privacy


I think VPN providers should support both protocols and let the users decide.


I still use openvpn. Mullvad isn't the only VPN provider.


People who pretend that something like nostr or better has never been tried are either too young or dishonest.

I was interested in nostr since 2022 because:

- Simple protocol (at that moment)
- Enough libraries to try and implement
- Some known bitcoiners involved in it


yo! I'm happy to announce the first release of chachi, a relay-based group (NIP-29) client for the web. NIP-29 allows creating groups that can be read by anyone or only authenticated users. These groups can be open to new members or require explicit approval from the group admins.

Every group gets a chat and a timeline of posts. I'll add more content types such as long-form and video in the future. Check out these videos explaining the main features of chachi.

https://nostr.download/71eedcea101f5fe9f1deb4c534ea3fbae67953e911f85a40fb0ac731b482b65f.mov

Finding and joining groups

https://nostr.download/47b29148c31c08f0295d97b9956396658ac8300d5e73598630fd4fe9996178ab.mov

Interacting with chat messages with reactions and replies

https://nostr.download/2af6f1a9c2f6ad96cdf529836737585a49038e8ba423465d17e96520239215bd.mov

Sharing different content types in chat

https://nostr.download/01f4ed8300b7dad45098780633597e3c1e91c93e13c50fedab6f817541529975.mov

Try it at https://chachi.chat

Source code is at https://git.v0l.io/verbiricha/chachi

Let me know what you think in the #chachi hashtag, this post or the official chachi group https://chachi.chat/groups.0xchat.com/chachi


You can do it for free: https://github.com/artiebits/fake-git-history


Four years ago today, nostr:nprofile1qqsrhuxx8l9ex335q7he0f09aej04zpazpl0ne2cgukyawd24mayt8gprfmhxue69uhhq7tjv9kkjepwve5kzar2v9nzucm0d5hszxmhwden5te0wfjkccte9emk2um5v4exucn5vvhxxmmd9uq3xamnwvaz7tmhda6zuat50phjummwv5hsx7c9z9 published his first commit on his new project called NOSTR. Happy Fourth Birthday NOSTR!
https://m.primal.net/Luho.png

Don't forget to send Fiatjaf a GM to show your gratitude 😂


It's working now.


Will be fun if some of these image upload websites changed the profile pics for some links.


PSA: Those of you who uploaded your profile pics via void.cat, no one can see them after the rugging.


They are mostly rigged as well.


Thank you everyone.

https://i.imgur.com/CDHPJ5J.png

nostr:nevent1qvzqqqqqqypzqe5py69vu36g6sdyelxpueqqd7untw7rt9uzk0vkz8my65wxw5keqy88wumn8ghj7mn0wvhxcmmv9uq36amnwvaz7tmwdaehgu3wvf5hgcm0d9hx2u3wwdhkx6tpdshsqgqqqqyeutqr4uqkwjplp4f6t0qqjlvjxe33e77tuc6n9y0365zw7yc9pr0w


Multiple things have happened in a few weeks irl that made me realize I dont have enough money.

I don't want to become millionaire and flex. If you think my projects could help bitcoin, please donate: https://geyser.fund/project/joinstr


rip hashtag following… looks like its being abused by spammers. This was expected tbh.

You can go to your profile and remove all hashtag follows until we have better tools to deal with this.


I dream in a future where I buy orange pilled SATs in #mostro that are properly washed in #joinstr to finally come to my LN wallet. All this in just 1 click, form a single merged client!!

nostr:nprofile1qqsqqqqqqqr99ezjae52qyv8lvyv3x2fdj6xedgar2sgq0gx8t8dhfcpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhsfa7ute nostr:nprofile1qqsxdqfx3t8ywjx5rfx0es0xgqr0hy6mhs6e0q4nm9s37ex4r3n49kgppemhxue69uhkummn9ekx7mp0qywhwumn8ghj7mn0wd68ytnzd96xxmmfdejhytnnda3kjctv9uq3samnwvaz7tmwdaehgu3wvekhgtnhd9azucnf0ghscxzjva


I haven't seen anyone using 52 characters long username.


I don't know how things work. Please educate me and explain why this is possible in the first place.


Being optional is irrelevant as such mints would still be considered cashu mints.

Mint knows each authenticated user with a `linkingkey`and account model: https://github.com/cashubtc/nuts/blob/9cb6272e9d1eb26fdfb117318bba825c068e888d/16.md
 https://image.nostr.build/0bc478c5e6563054fe6f46abc5bc88cf46417ce4af9faad6dfb7e72e6a57ea16.jpg


Cypherpunks write protocols to censor users based on KYC: https://github.com/cashubtc/nuts/pull/106


Yes they follow the same NIP: https://gitlab.com/invincible-privacy/joinstr/-/blob/main/NIP.md


rust-joinstr will be the third implementation for joinstr and code will be public in a few weeks

https://image.nostr.build/98df244042806805fb314f5af7095b23938096a790583236abd52caac114290d.png


Removed 550 more lines of code from #noStrudel https://cdn.hzrd149.com/29ac7f71da5091c2a38a8e8fb4c94076d03c734f8d3c0492e4e8d513f7bb4ca7.png


Ecash exists since 90s with same trade-offs.


Ecash mints are programs for running a mini central bank where people can deposit bitcoin, redeem it whenever they want, and in the meantime they get fast and cheap transactions with other users of that mint. They are pretty neat, especislly their privacy properties, but they come with most of the tradeoffs of custodial systems: the mint can steal anyone's money whenever they feel like it and can dmstart KYC'ing its users at any moment


"Sell me this preimage."

You can verifiably purchase the solution to any NP-Complete problem using Bitcoin (and Lightning), combined with zero-knowledge proofs.

- Buy the solution to a sudoku puzzle
- Buy the prime factors of an RSA key
- Bridge HTLCs with PTLCs
- Buy a valid proof-of-work
- and more...

https://conduition.io/bitcoin/zkpreimage/


This is how a joinstr pool looks like: https://njump.me/nevent1qqst0jnnqhx4qcvufja8079kyrml8l40dcspchmahy6gv2nx8v6qqwqpzemhxue69uhhyetvv9ujumn0wd68ytnzv9hxgq3qf8pt4h5wwmx4gjym8l0l8ffuzl3h0vpnrfhmamcx7chnnrjqjdlqhsspaj

Tx: https://mempool.space/signet/tx/f4a2b0271a1fb3c72d71c6f1cc6463914b47793d7a1e91805df956d6c45f9e3d

https://image.nostr.build/a62cce62c6bb4546ef8e4a2af5ed98cccc2185175b1bc41699b067c15bdade75.png


Primal has an interesting feature that you can look at the most cringe posts on the right.


Yes


I like the bus analogy. There is another way to describe joinstr.

- An ostrich creates a nest (pool)
- Some female ostriches lay their eggs in the nest (register inputs)
- Incubation period lasts for a few minutes (coordination using relays)
- Hatching of eggs (new UTXOs)

Eggs were of different colors but the ostriches that come out of these eggs look the same.

https://image.nostr.build/32448fd03646b76fb385e212edd92faca6a5f84f777ceef65f17c4960b4750a2.jpg


If every car is tracking its owner, a bus is like a coinjoin.

Maybe that's how we should explain joinstr to our kids.


It becomes decentralized?


In some cases it's better to avoid payments in coinjoin transactions. Payjoin or Octojoin works better in such situations because less or no coordination and transactions look normal.

Also wabisabi isn't the only implementation that allows payments in coinjoin. You can achieve the same with joinmarket and joinstr.

nostr:nevent1qqsdh4exeq2lq2mddgytrp2vafy2h85d3jnjeyq39rqc0v7fgexalhqpz4mhxue69uhhyetvv9ujumn0wd68ytnzvuhsygpz42q4zrhx8l3tzm9wzmsfy8mcaxaf3qhzs688ucadd5y2ax6e2spsgqqqqqqs9mqtdu


#pubky and #tor .onion addresses from a nostr. or ed25519 key, or ed pub

https://play-grounds.github.io/pubky/onion.html

https://image.nostr.build/896e7405dc4f15c68eef679a4aa79c4af30d19cf35c13d8fd898d87f5eeac287.jpg


Was this during the recent runes mint and high fees?


NIP 60 is the best way to lose money on nostr.

nostr:nevent1qqs2tlc6swjrssp8pzaud0zmgtxdtrr5tnznggqcz7w9v3tarfw7j3qpzpmhxue69uhkummnw3ezumt0d5hsyg86np9a0kajstc8u9h846rmy6320wdepdeydfz8w8cv7kh9sqv02gpsgqqqqqqs43ykn2


No. There are test mints that let you mint for free but you can do the same in real mints. There is no chain, custodian (trusted third party that issues ecash) decides the rules.


Bitcoiners would subscribe to d/Saylor if someone creates it.


This note will probably not even be considered, I ask nostr:nprofile1qqsrhuxx8l9ex335q7he0f09aej04zpazpl0ne2cgukyawd24mayt8gprfmhxue69uhhq7tjv9kkjepwve5kzar2v9nzucm0d5hszxmhwden5te0wfjkccte9emk2um5v4exucn5vvhxxmmd9uq3xamnwvaz7tmhda6zuat50phjummwv5hsx7c9z9 and nostr:nprofile1qqsgydql3q4ka27d9wnlrmus4tvkrnc8ftc4h8h5fgyln54gl0a7dgspzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhgqg5waehxw309aex2mrp0yhxgctdw4eju6t0qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyfehcpn anyway, what do you think about Pubky?
Could it be what Nostr is missing?
https://medium.com/@synonym_to/pubky-launch-260f36ba8fe3

#asknostr
cc nostr:nprofile1qqsdulkdrc5hdf4dktl6taxmsxnasykghdnf32sqmnc7w6km2hhav3gpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhszyrhwden5te0dehhxarj9ekk7mf0qy2hwumn8ghj7un9d3shjtnwdaehgu3wvfnj7yl8fqe


I haven't looked too deeply into it yet, so I may be talking complete bullshit here, but so far my impression is that Pubky is 3 things:

1. signed entries published on a DHT that associate a pubkey with an HTTP server
2. HTTP servers that can host any file
3. a superstructure for reading content from these HTTP servers and turning them into a global social network

It's a very elegant structure that sound very compelling to me, but ultimately I don't see how it improves much upon anything Nostr has, and it has significant downsides and unsolved (hidden) problems that Nostr either solves or is trying to solve right now.

2 is cool, but not a very hard problem to solve once you have a way to find these user servers (and, also importantly, someone to host these servers mostly for free). Blossom is doing a similar job with files as first-class citizens.

2 is also not very useful by itself. To make a social network you need a way to efficiently pull content from user servers and display them to users. There is where they came up with 3, which sounds very similar to Bluesky's central big server which they call "Relay". It's a centralized system that cannot possibly become decentralized. It looks like Pubky has accepted that as the only way to do things, and they seem to be planning on hosting one such big server.

1 is trying to be the most decentralized, censorship-resistant system ever for putting out information about public keys -- and we may discuss if it achieves that or not (I am personally very skeptical that DHTs can scale, even though nostr:npub1jvxvaufrwtwj79s90n79fuxmm9pntk94rd8zwderdvqv4dcclnvs9s7yqzis going to boldly claim that this is not a topic worth discussing because "Mainline has already proven itself with its bazillion nodes and centuries of existence" truth remains that Torrents do not work without trackers, and no one knows what will happen with the DHT if it has to store billions of records from people all over the world -- https://newsletter.squishy.computer/p/natures-many-attempts-to-evolve-a is one scenario), but all of this mega-decentralization is completely useless if you don't have a decentralized way to load content from people you follow and have to rely on a giant central server hosted by one big corporation.

Pubky's idea seems to be that centralization on content distribution is unavoidable, so they aren't even trying. The idea of Nostr is that such thing isn't unavoidable, so we are trying.


You can convert XAU to USD in search engine. Does that work in apple currency conversion calculator?


Well... there are many bitcoiners who don't even consider it a currency.


I use it for minting tokens created by trusted third parties.


Some people are selling me custodial solutions.

nostr:nevent1qqspywza9u3q8076qp6ruemvnd5etaeednd3ngu56dq2e6x6wapaq4qpz9mhxue69uhkummnw3ezuamfdejj7q3q2rv5lskctqxxs2c8rf2zlzc7xx3qpvzs3w4etgemauy9thegr43sxpqqqqqqz0zycsh


This event has the wrong hash for this image. How does your client deal with that?

https://mikedilger.com/bs.png


It's not decentralized and has leaders.


Like many, I really enjoy podcast, but fuck I absolutely hate the moment of prostitution where they start pitching me on their bullshit.

Look, if I value you what you create, I’ll seek out to support you, but when you need to spread your legs in the middle of a good conversation I just wanna turn it off.

I can’t wait for more V4V only podcast, and content.


The urge to never post on social media again and disappear online forever


Looks good. Please add 'privacy' in interests.


It works fine in this part of the world since years. People will get used to it.


Shops in chiang mai, lampang and phayao all taking bitcoin.

Cafe and food places.

ร้านที่ภาคเหนือรับ #Bitcoin บน nostr:npub1864jglrrhv6alguwql9pqtmd5296nww5dpcewapmmcazk8vq4mks0tt2tq

ร้านคาเฟ่และร้านอาหาร เชียงใหม่, ลำปาง, พะเยา

#siamstr

 https://image.nostr.build/31b1f2c670a9e21315d159780512d94704c0bca6a87348277515f22082b16155.png


Need to add a few things. Will share the link by end of this week.


🐌 snail is a bitcoin wallet that uses 1p1c packages and nostr

 https://image.nostr.build/93f3c11e7a764c8c602347fa4d1f817c14927226fc7a065fb3e6a8382a515412.png


Never added a lightning address on nostr. You can donate to joinstr@geyser.fund


"Regardless of the maximum size of a single transaction, a CJ anonymity set can be made arbitrarily large (bounded, of course, by participants) by building a multi-stage switching network out of joins." - Greg Maxwell

https://bitcoin.stackexchange.com/a/77765


Will do for the next release. Still need to improve a few things.


84 outputs are below 65k sats. There are better ways to increase anonset in a transaction without increasing number of inputs/outputs, belonging to small number of users and some of them being dust.

This method of mixing will become obsolete with joinpools after covenants.


Joinstr doesn't have a coordinator and peers can run it even on their phones

nostr:note1qqq27nc78a637rk6utm02x7skl24uthndw0azk9xr9rmewz5y50qfvxpq5


step 1: build a multiplatform FROST library for the web:

https://github.com/cmdruid/frost

step 2: hack together a remote signer and nos2x fork as proof of concept (and win a hackathon):

https://x.com/PlebLab/status/1850318480576250297

step 3: create a stupid simple multi-device signing protocol with key rotation that supports existing npubs (WIP):

https://github.com/FROSTR-ORG/docs

step 4: make self-custody of your identity great again


Never used Kagi but yet again ecash enthusiasts want people to use custodians when bitcoin payments are accepted.

nostr:note170ur7uwtv6wlp22kr6r0zl8mdmtl6hsjy8sjfwpvuglwrrte2h3s5wer9d


Yes
 https://image.nostr.build/7baff58cacb8bcf7cb411a4ffdcd63f670c2351de360af30f652f63b04c14b10.jpg


If you are working on anything related to bitcoin privacy, would you be interested in participating in such event?

nostr:nevent1qqspl3k0d784a4hw4fauyvq4zjfz2u0x0c5y2c3376209quheq2t0gsppemhxue69uhkummn9ekx7mp0qgsxdqfx3t8ywjx5rfx0es0xgqr0hy6mhs6e0q4nm9s37ex4r3n49kgrqsqqqqqpm67eqp


Hackathon could be a part of it but not the whole event.


How about doing an online event in which you can share these ideas?

I want to organize an online event focused on bitcoin privacy. Since it will be online there is no cost for flights, hotel etc. We could do presentations, workshops, discussions etc. and even anons can participate.

No custodial stuff though.


You can either take control of your relay lists, or they will control you.

This is a long form article, you can read it in https://habla.news/a/naddr1qvzqqqr4gupzq3svyhng9ld8sv44950j957j9vchdktj7cxumsep9mvvjthc2pjuqq9hyetvv9uj6um9w36hq9mgjg8

If you don't know where your posts are, you might as well just stay in the centralized Twitter. You either take control of your relay lists, or they will control you. Amethyst offers several lists of relays for our users. We are going to go one by one to help clarify what they are and which options are best for each one.

## Public Home/Outbox Relays

Home relays store all YOUR content: all your posts, likes, replies, lists, etc. It's your home. Amethyst will send your posts here first. Your followers will use these relays to get new posts from you. So, if you don't have anything there, **they will not receive your updates**.

Home relays must allow queries from anyone, ideally without the need to authenticate. They can limit writes to paid users without affecting anyone's experience.

This list should have a maximum of 3 relays. More than that will only make your followers waste their mobile data getting your posts. Keep it simple. Out of the 3 relays, I recommend:
- 1 large public, international relay: nos.lol, nostr.mom, relay.damus.io, etc.
- 1 personal relay to store a copy of all your content in a place no one can delete. Go to [relay.tools](https://relay.tools/) and never be censored again.
- 1 really fast relay located in your country: paid options like http://nostr.wine are great

Do not include relays that block users from seeing posts in this list. If you do, no one will see your posts.

## Public Inbox Relays

This relay type receives all replies, comments, likes, and zaps to your posts. If you are not getting notifications or you don't see replies from your friends, it is likely because you don't have the right setup here. If you are getting too much spam in your replies, it's probably because your inbox relays are not protecting you enough. Paid relays can filter inbox spam out.

Inbox relays must allow anyone to write into them. It's the opposite of the outbox relay. They can limit who can download the posts to their paid subscribers without affecting anyone's experience.

This list should have a maximum of 3 relays as well. Again, keep it small. More than that will just make you spend more of your data plan downloading the same notifications from all these different servers. Out of the 3 relays, I recommend:
- 1 large public, international relay: nos.lol, nostr.mom, relay.damus.io, etc.
- 1 personal relay to store a copy of your notifications, invites, cashu tokens and zaps.
- 1 really fast relay located in your country: go to [nostr.watch](https://nostr.watch/relays/find) and find relays in your country

Terrible options include:
- nostr.wine should not be here.
- filter.nostr.wine should not be here.
- inbox.nostr.wine should not be here.

## DM Inbox Relays

These are the relays used to receive DMs and private content. Others will use these relays to send DMs to you. **If you don't have it setup, you will miss DMs**. DM Inbox relays should accept any message from anyone, but only allow you to download them.

Generally speaking, you only need 3 for reliability. One of them should be a personal relay to make sure you have a copy of all your messages. The others can be open if you want push notifications or closed if you want full privacy.

Good options are:
- inbox.nostr.wine and auth.nostr1.com: anyone can send messages and only you can download. Not even our push notification server has access to them to notify you.
- a personal relay to make sure no one can censor you. Advanced settings on personal relays can also store your DMs privately. Talk to your relay operator for more details.
- a hidden, but public relay if you want DM notifications from our servers.

Make sure to add at least one public relay if you want to see DM notifications.

## Private Home Relays

Private Relays are for things no one should see, like your drafts, lists, app settings, bookmarks etc. Ideally, these relays are either local or require authentication before posting AND downloading each user\'s content. There are no dedicated relays for this category yet, so I would use a local relay like Citrine on Android and a personal relay on relay.tools.

Keep in mind that if you choose a local relay only, a client on the desktop might not be able to see the drafts from clients on mobile and vice versa.

## Search relays:

This is the list of relays to use on Amethyst's search and user tagging with @. **Tagging and searching will not work if there is nothing here.**. This option requires NIP-50 compliance from each relay. Hit the Default button to use all available options on existence today:
- nostr.wine
- relay.nostr.band
- relay.noswhere.com

## Local Relays:

This is your local storage. Everything will load faster if it comes from this relay. You should install Citrine on Android and write ws://localhost:4869 in this option.

## General Relays:

This section contains the default relays used to download content from your follows. Notice how you can activate and deactivate the Home, Messages (old-style DMs), Chat (public chats), and Global options in each.

Keep 5-6 large relays on this list and activate them for as many categories (Home, Messages (old-style DMs), Chat, and Global) as possible.

Amethyst will provide additional recommendations to this list from your follows with information on which of your follows might need the additional relay in your list. Add them if you feel like you are missing their posts or if it is just taking too long to load them.

## My setup

Here's what I use:
1. Go to [relay.tools](https://relay.tools/) and create a relay for yourself.
2. Go to [nostr.wine](https://nostr.wine/) and pay for their subscription.
3. Go to [inbox.nostr.wine](https://inbox.nostr.wine/) and pay for their subscription.
4. Go to [nostr.watch](https://nostr.watch/relays/find) and find a good relay in your country.
5. Download Citrine to your phone.

Then, on your relay lists, put:

Public Home/Outbox Relays:
- nostr.wine
- nos.lol or an in-country relay.
- <your.relay>.nostr1.com

Public Inbox Relays
- nos.lol or an in-country relay
- <your.relay>.nostr1.com

DM Inbox Relays
- inbox.nostr.wine
- <your.relay>.nostr1.com

Private Home Relays
- ws://localhost:4869 (Citrine)
- <your.relay>.nostr1.com (if you want)

Search Relays
- nostr.wine
- relay.nostr.band
- relay.noswhere.com

Local Relays
- ws://localhost:4869 (Citrine)

General Relays
- nos.lol
- relay.damus.io
- relay.primal.net
- nostr.mom

And a few of the recommended relays from Amethyst.

## Final Considerations

Remember, relays can see what your Nostr client is requesting and downloading at all times. They can track what you see and see what you like. They can sell that information to the highest bidder, they can delete your content or content that a sponsor asked them to delete (like a negative review for instance) and they can censor you in any way they see fit. Before using any random free relay out there, make sure you trust its operator and you know its terms of service and privacy policies.


I use multiple clients but mostly nostrudel, primal and amethyst.


I think I am not using relays correctly. Need suggestions.


You could put an onion address in every torrent file


Join simplex chat for https://joinstr.xyz


New wallet doesn't necessarily mean new keys.


Why would it cost money to import seed phrase?


Added the steps to test android app: https://docs.joinstr.xyz/users/using-joinstr

You can get NIP 5 address ending with joinstr.xyz if you test this app and share your feedback.


[bitcoin] Merged PR from darosior: Drop miniupnp dependency https://github.com/bitcoin/bitcoin/pull/31130


No. Only connection with nostr relays.


Riseup VPN and Tor is supported in protocol. So same IP address for all peers in a pool created with VPN.


Link: https://docs.joinstr.xyz/overview/comparison-with-other-coinjoin-implementations


I can shitpost from a new key if it ever gets compromised. What about ecash users?


I have updated this table although more technical things could be added here. Let me know if you see something important is missing.

https://image.nostr.build/989f2e929ca5e3834b232f4c6c1f493799e08915b20e330cd87a7137ce6b2f0a.png


Use of custodians for payments is the most cringe thing about nostr.


Btw another thing about ecash that I think people get wrong a lot is, the fact that it has a central point of failure is not just about trusting with money but it's just a really bad feature of an architecture; consider how much worse the privacy of it is because you have to send messages to a central server every time you make a transaction.


Now applied this to aut-ct in a branch:

https://github.com/AdamISZ/aut-ct/tree/delta

Proving is now down to 1-2 seconds even for large trees like 500K, but this is more from me fixing inefficiencies in my code; the real advantage of their new technique for me is just that they made the algorithms much simpler, *and* we have an easy way to batch proofs now (though I haven't done it).

So currently it's:
1-3 minutes to start up a server (which can be left running as long as you use the same curve tree)
1-2 seconds to do a single curve tree inclusion proof
50ms to verify a proof.

This already usable for the kind of 'satoshi millionaire' proofs like the one in my blog post, with sets of 500K or so and even larger, but for some long running system which wants to update the curve tree with new utxos all the time, like lightning  it should be possible to get rid of most of that startup cost by using an 'accumulator update' method as discussed in the paper(s).

nostr:nevent1qqsq39904896te7zp39rq7fxkqdkee7ys4x4wwugw9jj5hpztxu96hqpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhsygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9qpsgqqqqqqs8xrlev


Thanks for feedback. I will update it today.


Can you join the simplex chat to share error message and more details?


I created Pokey, a nostr Push Notifications Android app.

I called it "Pull Notifications" because I consider it more accurate, but it's more like a joke 😁

This is just still a POC, the path to have a fully functional app is long. But you can start breaking my baby now, have fun.

https://github.com/KoalaSat/pokey


1. I do not care what people think about me because the software works without me

2. It has implementations in 3 languages: python, kotlin and rust. Mobile app for android, ios and desktop apps are being used at the moment.

3. It does have sybil resistance using curve trees

nostr:note1rq4yruadusx85jp8pmsmxn59fguvzxatsqqzur98rdj7u0ken3ksq502sr


It works with testnet4


Yes


Joinstr App v0.1.1: UI Improvements, Testnet & Mainnet Support

Joinstr is a free and open-source coinjoin implementation using Nostr relays for coordinating coinjoin transactions.

https://www.nobsbitcoin.com/joinstr-app-v0-1-1/

#Eenentwintig #Nieuws #News #BitcoinNews


Protocol supports Tor as well. It is created for users with different needs and not necessarily a particular cult.


Exactly, future does not require shitcoins printed by custodians using blind sigs:

nostr:note1t3cvfuuajkn02t6se8dx2mldpmg0t8lgy76mp5supk3gftxxkqlqs78xj7


NEW RELEASE

v0.1.1 for joinstr: https://gitlab.com/invincible-privacy/joinstr-kmp/-/releases/v0.1.1

Changes
===============
- Improve UI
- Remove BIP 32 derivation paths from signed PSBT
- Wallet selection in settings
- Riseup VPN implementation
- Support Testnet and Mainnet
- Fix fee rate estimation

Review the code, verify APK, test it and share your feedback. Join simplex chat group if you need signet coins and other peers for testing.


Could be done without ecash: https://devpost.com/software/el-tor

https://m.primal.net/LbuZ.png


Yes I was responding to someone on twitter at the same time so wrote "tweet" instead of post. It is possible and shared multiple times in this thread DYOR.


> You can also use e-cash non custodially if you run your own mint

Running your own mint, using it to mint ecash for yourself does not improve privacy. You might as well run LN node instead and use LN with self custody.

Recipient needs to be online for redeeming e-cash if its issues by untrusted mint.

>  though I want to have e-cash if I must use a custodian

Why do you need a custodian in the first place? Whole point of creating bitcoin was to create e-cash with no trusted third parties. You can read old discussions on mailing lists, whitepaper and initial website.

> Users of lightning can benefit from the liquidity without using custodians themselves

AFAIK e-cash is used for small amount. Lightning already gets enough liquidity from boltz swaps, centralized exchanges etc. Ark and Mercury could provide more liquidity in the future without involving trusted third parties.


- Please read the tweet I replied to so that you understand the context of 'upgrades'
- Mints are third parties who custody bitcoin for users that may or may not use LN nodes. I have experimented enough and running a mint: https://thismoneydoesnotexist.lol
- It is possible with LN


Maybe ecash enthusiasts need to learn what bitcoin can do even without upgrades:

nostr:note1ls03lwkqgseem2vgcaky9atjx6vx3wl80zj62llkc54gkf5lqh5q9eeh5k


So we can assume coordinator can link input-outputs for all the coinjoin transactions that were done before March 2024?


nostr:nprofile1qqsdxm5qs0a8kdk6aejxew9nlx074g7cnedrjeggws0sq03p4s9khmqpzemhxue69uhksctkv4hzucmpd3mxztnyv4mz7qg3waehxw309ahx7um5wgh8w6twv5hszrnhwden5te0dehhxtnvdakz7msmsjt has added NIP-17 DM support!

All messages sent over the site (payment delivery, order details, and inquiries) are now handled via gift-wrapped events with no metadata leakage. Messages going forward should also now be solely related to your listings.

NIP-04 DMs will still be shown for the next two weeks in order to give merchants time to claim their payments and finalize orders before they're removed completely.

https://shopstr.store


I'm excited to share an experiment I've been working on: a solar-powered, self-hosted website running on a Raspberry Pi. The goal was to use the smallest, most energy-efficient setup possible, even if it means the website goes offline sometimes. Yes, this site may go down on cloudy or cold days. But don't worry! When the sun comes out, the website will be back up, powered by sunshine. https://dri.es/my-solar-powered-and-self-hosted-website


Running a nostr relay with cloudflare workers and r2 bucket storage: https://github.com/Spl0itable/nosflare


If I run a nostr client and relay on my phone, it will use all the data and overheat in a few hours.


Anonymous discount coupons using chaumian ecash: https://delvingbitcoin.org/t/anonymous-discount-coupons-using-chaumian-ecash/

https://image.nostr.build/cc9d742638f63d12430c3e938c6eeb74a218e0922bff9102a5e515c85060e5d6.png


e-trash 🗑


2x speedups for proving, 3x speedups for verification and 60%
reduction in proof size is great. I don't understand how does it improve security.


Been expecting this, it arrived today:

https://eprint.iacr.org/2024/1647

Curve Trees without permissible points, which i am expecting will significantly improve performance (and have better security). Also some batxhinh amortization type improvements.

Now renamed 'Curve Forests' :) still reading...


Easiest thing would be to allow free access for 2 minutes for every device and they can pay with lightning for more time.

https://www.boltcard.org/ can also be used for such payments.


If politicians loved freedom, the world would be a better place.


According to nostr:nprofile1qqs9pk20ctv9srrg9vr354p03v0rrgsqkpggh2u45va77zz4mu5p6ccpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhsz9thwden5te0dehhxarj9ehhsarj9ejx2a30qyg8wumn8ghj7mn0wd68ytnddakj7xph5zr s tool, the majority of mints don't work?

https://i.nostr.build/Mob9PktdeczXakMC.jpg


This can be done using self custodial LN and doesn't require trusted third parties. In fact, it highlights a problem that user had to use a certain mint.

nostr:note1sldhcs0l0uxkkajkwxynlj3f7sfkcltntu8rds97ckd8x4hfcvyqatlwj2


VPN can be restricted to a terminal, app, virtual machine etc. I used this analogy because normally we dont trust VPN to delete the logs.


Tor is a centralized network. As centralized as VPN. Use i2p for trustless privacy.

https://image.nostr.build/14435e8c8c76d7b233119c94c405e4c58c240bf128d46ddf2283948a159d8a6e.png
https://image.nostr.build/ee8d3b4cfb6083ec7dbe608ba801ac3de5f977e02243e8a691aefa1a10fd0766.png


nobody will see this post 😬 https://youtu.be/1lYpKhAkJG4?si=oc4KxTwkWhBVhrwe


1. Events can be deleted using NIP 9 and I do it often in https://nostrudel.ninja
2. Adding photos issue and blurred images in the feed are specific to damus.
3. You can discover more users by using https://coracle.social and https://nostrudel.ninja as described in this post: https://uncensoredtech.substack.com/p/bring-your-own-algo
4. I don't use zaps but they seem to work for others.
5. Searching for users with NIP 5 ID or NPUB works fine in most clients.


It would be great if a note with this hashtag could be printed on the butterfly in logo.


Hello World

 via #PostaNota


Posta Nota. Lets go again

Https://postanota.hivetalk.org

 via #PostaNota


Relay probing is becoming a reality (I know nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyv9kh2uewd9hj7qgnwaehxw309ac82unsd3jhqct89ejhxtcpzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtcppemhxue69uhkummn9ekx7mp0qyf8wumn8ghj7mn0wd68yat99e3k7mf0qqswwud0pvzu362lehm0av6sq4zd97cue5uy0z8f7jgtk0hz368dvmceue66m    nostr.watch has probably been doing this for decades now)

https://video.nostr.build/b462b6568e3cb10410cd5c25a41f61407895d09ad806f354657140c15ddab36d.mp4


a critical remote-exploitable vulnerability in Firefox has been found

if you're using Firefox, check the version. it has been addressed in the following versions:

- Firefox 131.0.2
- Firefox ESR 128.3.1, and
- Firefox ESR 115.16.1.

if you're running an older version, upgrade asap !

https://thehackernews.com/2024/10/mozilla-warns-of-active-exploitation-in.html


At last we already have the first public version of #nostrastic , a simple bridge between #meshtastic and #nostr

With #nostrastic you can send post to your nostr account or send/receive DMs from a selected list of contacts with no internet in your #meshtastic device.

More improvements and features are on the way.

Repo: https://github.com/quixotesystems/nostrastic

#grownostr #plebchain #coffeechain


Now we are able to write a post or send/receive DMs on #nostr using a #meshtastic device ( #LoRa ).

We are building a Open-Source app to use by your own as a service in a machine but also we will set up a website where you can manage your settings to allow sending posts and DMs from/to #nostr from/to a #meshtastic device.

Main cases of use (We thought, but probably more):

- Interact with #Nostr in remote areas.
- Interact with #Nostr with a device with no internet connection.
- Interact with #Nostr with a really private way.
- Interact with #Nostr with a really cheap device (less than $50).
- Interact with #Nostr with no tracking from third-parties.

Stay tuned.


Another use case: https://joinstr.xyz


It is possible to use Tor in joinstr pools but not a necessity: https://xcancel.com/1440000bytes/status/1844730713179906066


I'm at Bitcoin Amsterdam, but spent half the day finishing some Signal-style double ratchet messaging.

Deployed an experimental version on https://iris.to. You can create chat invite links and give them to friends via QR or other messaging. The UI is still lacking and glitchy, but just had to demo at the conference.

The chats cannot be publicly linked to either participant, and even if your main Nostr key is revealed, the content and existence of past messages stays hidden.
 https://image.nostr.build/b4533acd973793f7114fd5c272ccd5b5045ea0bd127c214e8314fc4c8282a354.png
 https://image.nostr.build/ded8c0437548cb1359d34b43b966b64f798cd2f98ae5f859771f47cc551cd5bd.png
 https://image.nostr.build/4458f2de8f4d424aff137d2d7ed283dd27501e1abc0a43234405008614a5cb70.png

Also published npm package nostr-double-ratchet 0.0.1: https://www.npmjs.com/package/nostr-double-ratchet

It's not actually double ratchet yet, but the single ratchet already achieves forward and backward secrecy.

The second ratchet would help secure the latest consecutive messages by same author, in case a message key for the most recent of their messages is compromised. That makes disappearing messages or manually deleted messages more secure. I guess we'll have to do it so we can say "Signal-level security".

This is obviously not tested or audited yet, but probably it's not worse than normal Nostr DMs 😅

You can take a look at the source code, but I'll write a better technical description later. It's using existing Nostr cryptography + some key derivation stuff. Chat invites use gift wrap -like arrangement addressed to the inviter's temporary session key. https://github.com/mmalmi/nostr-double-ratchet


Do you see any issues with TRUC in coinjoin? Curious to read your review of BIP431 in detail.


Does anyone use https://snort.social/ for nostr? #asknostr


Yes these are 3 clients built using joinstr's kotlin implementation. They are used for a coinjoin transaction in which nostr relays help in sharing PSBT. Source code: https://gitlab.com/invincible-privacy/joinstr-kmp


Coinjoin using desktop (macOS), Android, and iOS: https://mempool.space/signet/tx/15a9ae17eacbfee4019b3713e81975f06a57e0bea78d798fe7e3b2d3df03a160

https://video.nostr.build/30322f193ceacbd5cbc2d1374ba05a045abadafdae76dac316ae34656e93ab2e.mp4


Its hard to find users and contributors on nostr for self custodial projects.


I think this can be done using aut-ct: https://0xparc.org/blog/zk-group-sigs

Cc: nostr:npub1vadcfln4ugt2h9ruwsuwu5vu5am4xaka7pw6m7axy79aqyhp6u5q9knuu7


Market makers in joinstr: https://uncensoredtech.substack.com/p/market-makers-in-joinstr

https://image.nostr.build/2d0bab8ff6dea87408a170ae2f48c63cd9b226c432d9f1b09169e69f760ca4e8.png


A new type of relay has just appeared. It deletes events right after they have been 'queried' by a user. Useful for very specific applications where no traces are desired, like shh.com from  nostr:npub1zxev3yxc0vr2wwldstsmjzknug6mk8uwhsw7k6ka78e3c4mqvc7qxue9y7

https://github.com/Dolu89/ghost-relay


I don't use trusted third parties for my transactions. Never had any issues with privacy or security.

Point of failure is always the mint that issues ecash irrespective of how many are used in the app.


“The EU has forced Telegram to hand over all chat data to them. This is the new normal.” - Amir Taaki

https://x.com/narodism/status/1841454533152485757


Bitcoin is ecash with no mint or trusted third parties. From discussing ecash without a mint in the '90s to the creation of ecash without mint (bitcoin) in 2009, we are back to using trusted third parties in 2024.

https://image.nostr.build/121d16c98057f2c386a0c53305e4f166dd3ebe227f63582d14b604e518a0de2e.png
https://image.nostr.build/babeaa0e4436fdbeef013693a4f17c36d13c8862ff9382afa633a33c7a6f5d55.png
https://image.nostr.build/64d004459cd5fa2f42d67e6067dad31948739a547599c96b487380b4bc0fe7af.png


Related comment and pull request: https://github.com/bitcoin/bitcoin/pull/29415#issuecomment-1936003083


I have never used zaps to receive even a single sat.


Does anyone use self custodial tools on nostr? #asknostr


LOL


Awesome 🧡


This is a 4 minute vid demo-ing how to verify the 'private proof of assets' using a desktop app. See https://reyify.com/blog/privacy-preserving-proof-of-taproot-assets for details and links.

https://video.nostr.build/8893d5a569ebec61c4cbbde491882159d9fda0ef35dc99cb78455c17033cd698.mp4


> 2) doing it by means of Nostr events that declare subkeys or delegation or whatnot, creates insurmountable complexity that turns Nostr into an unusable pile of bloatware

This is already happening with different NIPs trying to do everything on nostr. Example: Name System


You login with victim's nsec, and boom, their balance appears along with private messages.

Thanks for creating a bounty to hack nostr keys.


This version wont work on mainnet. A few more versions to fix bugs and improve things and it could be used on mainnet.


APK for v0.1.0 is available for testing joinstr:

https://gitlab.com/invincible-privacy/joinstr-kmp/-/releases

Feel free to join the simplex group chat if you have any questions or need signet coins for testing.


Invincible Privacy Group

IPG is a group of bitcoiners which is focused on funding bitcoin developers improving privacy. Donors can either donate directly to the recommended projects or contribute in the pool which is used to help developers regularly.

https://invincible-privacy.github.io/donate/


A bitcoin security vulnerability I wrote about in 2019 has been resolved (2022) and now published on the Bitcoin Core website.

https://bitcoincore.org/en/2024/09/18/disclose-headers-oom/

Great job! Much thanks to Suhas Daftuar, Pieter Wuille and Niklas Gögge for getting it patched and to all code reviewers, maintainers and everyone involved.


In episode 5 of season 2 of the Outlaw Crypto Podcast, I was able to talk to Floppy aka @1440000bytes about his work on Joinstr, the decentralized Bitcoin Coinjoin implementation over Nostr
https://podcast.paranoiamachinery.com/@paranoia_machinery/episodes/floppy-joinstr-episode-5-season-2-outlaw-crypto-podcast


Not used on mainnet yet however some users have tried on signet.


frustrated enough with nostr clients that i want to create my own


Binance uses zk-SNARKs for proof of solvency, but it made no difference: https://www.binance.com/en/blog/tech/how-zksnarks-improve-binances-proof-of-reserves-system-6654580406550811626

I like aut-ct, though I believe it has different use cases. In fact, I recently mentioned it in this thread: https://delvingbitcoin.org/t/proving-utxo-set-inclusion-in-zero-knowledge/1142/2


Coinbase works with US government agencies so they won't need it. Not sure about Bukele either.


Twitter is still the safer alternative for ladies sadly, Nostr is not there yet. I can’t wholeheartedly recommend to my girl friends without being worried about the trolls. Since nostr is in smaller scale still, it’s easier to be a target.

I’m on twitter still, sorry not sorry, I use twitter to be connected to my local stl community.


I attended the status conference for the #Samourai case today on behalf of nostr:npub1t8a7uumfmam38kal4xaakzyjccht4y5jxfs4cmlj0p768pxtwu8skh56yu.

Here’s where things stand:

#newstr #freesamourai #freedomtech

https://v.nostr.build/3epxfHxjhTq0plnD.mov


Coinjoin with IOS. Looks smooth ! nostr:note1qqqqymjl0rxyzkgpe0tmhw2a9vu9mqe6dk7u9q6ltnpaxhg28zpq3njh8g


🔥🔥
nostr:nevent1qvzqqqqqqypzqe5py69vu36g6sdyelxpueqqd7untw7rt9uzk0vkz8my65wxw5keqqsqqqqzde0h3nzptyquh4amh9wjkwzasvaxm0wzsd04es7nt59r3qs6gawmn


Mostly by tomorrow. Although it will be a pre-alpha release and is only recommended for signet.


Left: iOS user creates a pool for 2 peers
Right: Android user joins the pool

Coinjoin Tx: https://mempool.space/signet/tx/feb7ed47f5a71d77cf0ee61943e4f7d085fb1f12482a52410f5aba9a9fec651c

Repository: https://gitlab.com/invincible-privacy/joinstr-kmp

https://video.nostr.build/6795561a167f7e87e308f27a0719ee36761c086e5f17c42d61b817cf356e2ada.mp4


Only a few users testing it on signet. I think mobile and web app would help in getting more usage.


Thanks for sharing the link. I just realized that I need to add more technical details in this comparison table.


very cool to see things like joinstr.xyz using nostr for signature schemes

the way bitcoin and nostr complement each other is truly beautiful. exciting times


Tx fee for 1 input and 1 output which is 100 x FEE_RATE
Relay fee if using a paid nostr relay and it may vary


It was a coinjoin transaction between Android and iOS user: https://mempool.space/signet/tx/30d69d9422626b09a77996c739ddcd1a7e34e288dd861af721cfd0279397b627


You can use any relays. Try using on signet.

It will become easier to use joinstr with mobile and web apps next week.


No. It can be used to improve DNS seeds which share node addresses for bootstrapping.

Although I am not sure if others would agree with this approach to support nodes with non-default ports in seeders. Cc:  nostr:npub1p23eukh0nxsqpfaakz6fj9vvj27y4gs0kevnrffdq4d4adkl7uuq7crnl6


Encoding IPv4 address and port number in IPv6 address: https://gitlab.com/-/snippets/3746764


 nostr:npub1ej493cmun8y9h3082spg5uvt63jgtewneve526g7e2urca2afrxqm3ndrm specifically said in his post:

"The current CTV proposal in BIP-119 has only one hashing mode, known as the DefaultCheckTemplateVerifyHash, which essentially commits to every aspect of the spending transaction in the template hash. From a practical point of view this means that in many circumstances the only available mechanism for fee payment will be CPFP. As mentioned above, this is a potential problem due to it making out-of-band fee payment a non-trivial cost savings in cases where the CTV-using transactions are small."

So he's specifically saying that out-of-band fee payment could be cost savings for small CTV-using transactions.

IMO, you could make the exact same argument for lightning force closures. Even though lightning will move to anchor outputs, which means 0 fee force closures, that will be CPFP'd thanks to "package relay". Those small transactions could have cost savings with out-of-band fee payments.

But obviously, no one is pushing against package relay. For most small transactions, out-of-band fee payments would be a small cost savings.

In fact, this statement could technically be true for any pre-signed transaction scheme. Does that mean we should never have any pre-signed transaction schemes? Hardly.

So, since this issue already exists in Bitcoin and is only relevant to very small transactions, and since CTV can actually decentralize mining even more (https://utxos.org/uses/miningpools/), I'd argue these issues are known, and the concerns with not having CTV are actually a great risk to Bitcoin. Not having covenants, IMO, is a huge risk to Bitcoin custody centralization and people choosing not to self-custody.

CAT is an entirely different beast, and I agree that the risks are much more unknown.

https://petertodd.org/2024/covenant-dependent-layer-2-review


A curated list of known public #attacks on the #Nostr network
https://github.com/ronaldstoner/nostr-attacks/blob/main/README.md


I was looking for it last month but couldnt find anything.


Cc:  nostr:npub1ej493cmun8y9h3082spg5uvt63jgtewneve526g7e2urca2afrxqm3ndrm


HTML explanation of Nostr's decentralization possibilities: https://how-nostr-works.pages.dev/


Apparently Nostr did grow ~25% right when Twitter got killed in Brazil: https://cdn.satellite.earth/52a154bd99e488ee2e23563517be75f0c93c7683d2c89c9fc9393bd19d7e7017.png


Let me know if you need NIP 5 addresses ending with rugmedaddy.info. These can be used to create QR stickers, cards etc. and shared with people at conferences.

 https://image.nostr.build/90628749e7652f51a31c9652ed1371121a6d8aed24865709f4eed35ae1535283.png
 https://image.nostr.build/4909d0c8de3d1fea80e22feb2f0acbbae2e314207f293e3d33615a7e2b6edf54.png
 https://image.nostr.build/e6968a9c44e09ac1f665517063641407430105414574bc8af140fa49020ed0a8.png


Some good food for thought on Nostr Algorithms from  nostr:npub1v6qjdzkwgaydgxjvlnq7vsqxlwf4h0p4j7pt8ktprajd28r82tvs54nzyr

https://substack.com/home/post/p-148214882

cc:  nostr:npub1r0rs5q2gk0e3dk3nlc7gnu378ec6cnlenqp8a3cjhyzu6f8k5sgs4sq9ac


At least I am not using an unmaintained mobile wallet because of a cult and trying to build something myself.


Its more than just hashtags.


Cc:  nostr:npub1jlrs53pkdfjnts29kveljul2sm0actt6n8dxrrzqcersttvcuv3qdjynqn


Every time I explain joinstr to a new developer or user, I realize the documentation isn't helpful. I hope this e-magazine makes it easier to understand.

https://joinstr-magazine.github.io/


https://image.nostr.build/a308c187a7ababba98158e0838356e6007f3b8e71100e33eb30e3d96f3a08aff.png

Basic tool to download a text file with all the ids for NIP 4 events in which entered pubkey was sender. You can try deleting these events either one by one or in batches using other tools.

Link: https://nipfour.github.io/


Bring Your Own Algo: https://uncensoredtech.substack.com/p/bring-your-own-algo


My favorite tools in nostrudel 'tools and other' stuff section:

DM Graph and DM Timeline

https://image.nostr.build/18306ef52fdfe360e2e1333e9a07d86d73824142215e8f4a06ad0630f1ee46f8.png
 https://image.nostr.build/38c8858cbe4dffa7497a4399ea70fa4e00580406f3c58f2088042d4d3f154e63.png
 https://image.nostr.build/4100c72548fa1f095acde655aaa8e6bace47406fcf402b7a1c21a31698ab5c13.png


Exploiting SGX: https://xcancel.com/_markel___/status/1828112469010596347


After several weeks of work, I think I have a working implementation (very basic so far, and lots of caveats..) of something that solves this problem. To recap:

you want to prove that you own a total of T BTC, but privately. But revealing exact amount may make it too easy to deanon. So I have a proof of this statement: "I own N utxos, whose total value is between k and k + 2^n, for some k and n that I announce, but I am not revealing which N utxos they are, or what their individual values is, out of a given list of 300k utxos". The code at https://github.com/AdamISZ/aut-ct/tree/auditing now does this.

See the latest commit note. In brief you need 3 or 4 components to the proof: 1/ a proof that each blinded commitment is part of that 300k set, 2/a proof that each committed value, when summed together, lies in the given range (using bulletproofs), and 3/ key images per utxo to ensure you dont' cheat by just claiming the same utxo multiple times.

nostr:nevent1qqsqc8wgf8w74sh2sjfpjgw4lpp7sp08vfvgpc7dvljewn3cq4grscgpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhsygr8twz0ua0zz64eglr58rh9r898wafhdh0stkklhf3830gp9cwh9qpsgqqqqqqsxpc8jd


Anons are the only heros that can save us now.


Nostr relay operators will be forced to comply with the same laws… don’t think they won’t.


i agree

let's just not get too insular (nostr versus "the rest"), i've seen this happen before with otherwise open protocols like retroshare and to some extent, fediverse, it's important to consider what is already been invented and work towards integration instead of rolling your own (even if that seems easier)

anyhow let's hope for the best 🤷♀


nostr needs to stop shoving bitcoin down everyones throats and just make it another subtle and useful tool in the nostr toolbox. People should feel comfortable coming to a nostr conference without being a bitcoin maxi. nostr:note1u3w3dwy57p88ecgrkgr0ujacag0jnmctltunxw0p96heu2veh8jqh9m3vw


1. First thing you can do as capital provider is to stop misleading. Its not necessary that only CEOs will get arrested. Tornado Cash smart contract still works and being used.

2. Nostr is a bunch of clients and relays. Clients can censor, in fact there are NIPs for it: NIP-56, NIP-51. Relays can censor some events and a few relays share this info using NIP 11.

A nostr developer and relay operator can be asked to "moderate" and they do control things.

3. Even ecash is being promoted as censorship resistant although its not. Mints can enforce KYC for mint, melt, swap etc. at some point and censor some users based on different things.

https://github.com/cashubtc/nuts/pull/106


Joinstr R&D Group (simplex). Wont be active on telegram anymore.

https://image.nostr.build/251cd7b680a4cecf83904faa8cb63369063e8f8e2921e0f2cb7f583b6b2e759e.png


I think this is possible on nostr as well if you share a key with all the followers and encrypt each post. Is there a better way to achieve this?

https://image.nostr.build/5acdb3e3800d5454664a0f6ee708d00dc9186968dcfb18549c741b57083df467.png


BIP 8.5: Flag day activation based on nLockTime signaling

https://delvingbitcoin.org/t/bip-8-5-flag-day-activation-based-on-nlocktime-signaling/1078


Best bitcoiners believe in freedom and let others use whatever they want for social networking.


You can fork protocols the same way you fork any open source software. I will share the link and NIP1 equivalent when I do it.

https://github.com/nostr-protocol/nips


https://en.wikipedia.org/wiki/Fork_(software_development)

https://m.primal.net/JvzG.png


This is nostr in a nutshell. I am not sure if its the best way to create a censorship-resistant social network. A fork of nostr that focuses on privacy, security and multi-party bitcoin protocols could work better for all use cases.

 https://image.nostr.build/660964490606c35a3b1618f8a4bf243e72d68fb30185c7d240a07d723c29fa7c.jpg


Some beautiful compact block reconstruction visualizations coming out of the RBF by default policy on layer 1 #bitcoin

https://m.primal.net/Jlat.png

https://github.com/bitcoin/bitcoin/pull/30493#issuecomment-2263336312

cc:  nostr:npub1v6qjdzkwgaydgxjvlnq7vsqxlwf4h0p4j7pt8ktprajd28r82tvs54nzyr,  nostr:npub1kyxqqqq8n2pu7f5pthr48zqcmr2k52vrud6wxzjpg0jsqcyhs3tshfc6vv


You can now run an autct server by just downloading the binary here: https://github.com/AdamISZ/aut-ct/releases/latest and running it with `./autct -M serve -k mycontext:mykesetfile` (or use an example keyset file shown in the worked example), then make RPC calls from Python with no crypto code (just do `pip install autctapi` ... though you'll want to look at the github repo for the example.py script), to prove that your taproot utxo is in the utxo set. The proving takes 5-15 seconds for keysets up to a couple hundred thousand keys, while the verifying is basically instant.

If you did want to use mainnet keys, you can get a daily-updated set of taproot keys from https://hodlboard.org/keysets. This is filtered to be only keys for utxos > 500k sats, and so it's small, about 17MB. You can demonstrate that it works "for real" by funding such a utxo and then trying the prove and verify operations the next day. It's fiddly mainly because most wallets don't support taproot, and those that do don't let you copy the private key. See https://hodlboard.org/proofs for how to get around that.

(Better to generate the keysets yourself of course, but it takes some time to figure that out, detailed instructions in first repo mentioned)


My latest invention is StatechainJS: https://www.youtube.com/watch?v=24pNIs6M7qo

Basically it's like ecash but if the operator goes down you can recover your sats. Being like ecash means transfers are fast & free, but the operator can rob you, so be careful! Try it here: https://github.com/supertestnet/statechainjs


BIP and 1 implementation by the end of this month.


Keeping an eye on this…

nostr:note1vn3wtzx748p2gcnhz0j3e8sx5ycmytt9v2k7lcdg0zqqknjr7j0suxw70z


Fractional reserve is possible with all custodial solutions, including ecash. Anyone who says otherwise is trying to scam you.


Send me some testnet coins to this address: bc1p7w5xk76j3cufczuruayl0h4kv8e02q4xan3e5qxxl8yvafp2tnrqppxjge


Even I am using it for testing something.


Mint ecash from thin air on each refresh: https://thismoneydoesnotexist.github.io


NIP 9 and NIP 40 allows clients to request deletion of events. Relays delete them most of the times. Not looking for security but to avoid manual deletion of events after shitposting. A user could enable expiry, shitpost for a few hours and forget it.


Is there a nostr client that allows you to post things with an expiry? So the events will be deleted automatically after some time.


monero


I want to move 1 BTC privately without storing or getting rugged. What are the possible options?


Octojoin: https://uncensoredtech.substack.com/p/octojoin


But it is custodied by a mint?


A cashu mint can create sats without locking actual Bitcoin (Fake Wallet https://github.com/cashubtc/nutshell/blob/f32099bce7ecca54338ebc1a551883fbdb883af2/cashu/lightning/fake.py#L31). So the zaps you receive may or may not be real, i.e. convertible to Lightning sats. So you should either zap those sats onwards, or withdraw to a real wallet asap (claim from the mint).

It this thing takes on and there will be lots and lots of such (potentially fake) sats on Nostr, this will inflate Bitcoin supply and damage it's reputation when many sats turn out unclaimable.

TLDR I hate this shitcoinery.


He forgot to mention that it involves 2 trusted third parties: mint and relay


Try chatgpt


This is the IP address for a DNS resolver: 1.1.1.1

You can connect to the nostr relays that published this note, use this IP address to connect with DNS resolver.  Associating npubs with IP addresses isn't a big deal either.

However, nostr works best when its kept simple. Adding more complexity and trying to do everything ends up in a system that cannot do basic things properly.

I had several options for joinstr and researched different protocols, distributed networks etc. however nostr was the easiest to work with because of its simplicity.


Had an idea for scaling submarine swaps into a multi-party protocol, and got some interesting results. Have a look:

https://conduition.io/scriptless/multi-party-submarine-swaps/


Joinstr added on nostrapps: https://www.nostrapps.com/apps/joinstr

https://m.primal.net/JNgQ.png


Awesome. We need more zapless stuff on nostr to make it less cringe.


Bitcoin Magazine and a large part of the Bitcoin community have completely lost the plot: praising Saylor, LARPing instead of using bitcoin, inviting Donald Trump to the Nashville conference... From wanting to get rid of central banks to bending the knee to cantillionaires. Sad!


I attended the hearing for William Lonergan Hill (TDevD of Samourai Wallet) in the Southern District of New York on behalf of nostr:npub1t8a7uumfmam38kal4xaakzyjccht4y5jxfs4cmlj0p768pxtwu8skh56yu today.

Here’s what I learned:

#FreeSamourai #WhereIsTDevD #SamouraiWallet #privacy #freedomtech

https://v.nostr.build/GNOeS8XSjdCiiGYf.mp4


The idea that only zaps are quality signal is dumb.

This is like ignoring the vast majority of people who don't want money in their social interactions.

Imagine standing in a circle of friends and zapping each other 2 cents every time someone said something you agree with. This is just not how social interactions work. Money was never part of the social agreement.

Proof of work and all / actions speak louder than words / put your money where your mouth is... I get it, that has value and is absolutely true in other context, but not in social. It's a nice bonus, it's great to be valued with a payment for something you put effort into, but it can never replace free expression without the expectation of payment. Believe it or not, some people don't want money involved in their conversations.

That's not to say that you can't have it, but don't insist on only zaps. It's going to turn people away.


Nice job #nostr #hivetalk #privacy
https://x.com/1440000bytes/status/1810664265243652530


9 Projects added for next 3 months on Invincible Privacy Group website, including #HiveTalk

https://invincible-privacy.github.io/donate/

 nostr:npub1v6qjdzkwgaydgxjvlnq7vsqxlwf4h0p4j7pt8ktprajd28r82tvs54nzyr

npub1v6qjdzkwgaydgxjvlnq7vsqxlwf4h0p4j7pt8ktprajd28r82tvs54nzyr


Freedom tech should give the users freedom to hold their own keys and do transactions permissionlessly. Neither custodians nor additional trusted third parties allow for this freedom.

It is the "convenience tech".


- Create a vulnerable webpage that sends the private key to attacker
- Landing page should be a game nostr users can play using their nsec
- Gamers are rewarded with ecash

I am sure you will get at least 100 private keys in one day with this simple social engineering and a webpage.


Security is not a priority for the users that rely on mints and relays for using their money and prefer convenience.


Ecash users do not hold any bitcoin and mints custody bitcoin for them. These users cant even hold their ecash tokens and need relays for it, so they can do anything for convenience.


#nostr is becoming a real nothing burger! No key management! Total control of the majority of devs by proxy VCs and non-profits! Complete circle jerking and simping! Implementation of eCash and Fedi, which are again VC investments! Almost zero development since I joined it! Thousands of printed bot followers! Trending 24 are VCs and their simps! Fuck it, to be honest! This is not the place I wanted to be a part of!


nothing exists until nostr elite discover it 🤣


... and losing nsec gives access attacker access to your money which is quite possible considering the number of web apps used by nostr users


3 are dead. 1 has address reuse issues. Ginger is irrelevant.

None of these are decentralized.


With #coinjoin coordinators shutting down, we need to find another way to join mixing cycles. #Joinstr lets any #nostr user broadcast and find others willing to collaboratively spend their Bitcoin

https://thebitcoinmanual.com/articles/what-is-joinstr/


We have started recently and this is the first month. Relevant stats will be shared on website at the end of July.


Today is the last day to submit your project for July 2024. So if you are working on bitcoin privacy and looking for funding, send an email to invincibleprivacy[at]protonmail[dot]com with the details.

Website will be updated in next 24 hours: https://invincible-privacy.github.io/donate/

https://m.primal.net/JDzH.png


I get more engagement on twitter about my nostr project joinstr.


Running multiple centralized coordinators does not decentralize the protocol.


Do not associate your npubs with anything other than social media.


The BTC Script workshop went awesome! I think it was at least 96% close to perfection 😍 😍 😍

I also recorded it and you can purchase the video here for only $5: https://supertestnet.org/workshops.html?option=bitcoin_script

Also remember to sign up for next month's workshop, all about Nostr! https://supertestnet.org/workshops.html


LMAO


35k are "trusted" pubkeys i.e. pubkeys with verified NIP 5. So we already have more than 100k weekly active users.

https://m.primal.net/IzEY.png

https://m.primal.net/IzET.png


How to Use Electrum Plugin for Joinstr

"In this tutorial I will share the steps to use electrum plugin for joinstr on Ubuntu."

https://www.nobsbitcoin.com/how-to-use-electrum-plugin-for-joinstr/


Its a simple HTML page with nothing malicious and here's the code: https://github.com/invincible-privacy/donate

You can report incorrect phishing warning: https://safebrowsing.google.com/safebrowsing/report_error/


Invincible Privacy Group: https://invincible-privacy.github.io/donate/

This is an initiative to help bitcoin privacy projects that are important but get ignored by other organizations.

You can submit a request to add a bitcoin privacy project. Shortlisted projects will be updated every month.

https://m.primal.net/ItzI.png


Today I learned that if you do many signatures with the same private key then it's very possible for an attacker to uncover it using these signatures and your public key: https://cdn.satellite.earth/f2daa984ce219112102ec783574df3ea612d51031e653479c903e95cfb3c70d7.mp3


Protocol to do money over data, liberating it via relay in a self custodial fashion? Read more on Joinstr 🦃Updates 👇

https://uncensoredtech.substack.com/p/tutorial-electrum-plugin-for-joinstr


I wanted to communicate about this idea of Jeremy Rubin, because I'm not sure how easily people will understand what he's saying:

https://rubin.io/bitcoin/2024/05/29/fed-up-covenants/

An attempt to explain without mathematics: the ability to create an address that can only be spent in one specific transaction (the most basic/pure covenant), but without needing a new op-code or soft fork. How? Basically by taking advantage of a crypto technique called "functional encryption", you can let someone/anyone make a signature to pay out of an address by "decrypting", but the decryption will only work for the single transaction you intend.

There are basically two problems with this apparently magical trick; one small, one big.

The smaller problem: to make this flexible structure needs a trusted setup: you create an initial (bitcoin) private key and an initial encryption key, and they must deleted at the end of the setup, otherwise the mechanism described above won't be safe from anyone who knows those keys.

The bigger problem: generalised functional encryption as described here, i.e. "give a decryption key for the output of a general function f, given the encryption of the input of the function" doesn't really exist as far as I know, except in theory. There are papers from the last decade that develop and extend more limited variants, such as "inner product encryption" which implements the idea for only the function of (take the inner product of the input with a given other value/vector), but (*and I could be wrong here) we are a long way from having it at the level where the function could be "schnorr signature of inputs (private key, transaction hash)" (though JR references ECDSA, it seems way more reasonable to go with Schnorr, since it's a simpler formula).


Its easy to use this plugin and will get easier to try joinstr protocol with other clients (web app, mobile app etc.)


#nudestr


I wrote a tutorial for the joinstr plugin

https://uncensoredtech.substack.com/p/tutorial-electrum-plugin-for-joinstr


testing nostr testnet4 faucet

https://pages.npub.info/multi-hash/z2w4fNMQxCksgmm1GJRAuwzZzNPS2/


I just learned about joinstr and I'm here to get really fucking excited about its development
nostr:nevent1qqspkkhp70jknt5lweyp2q4zxqe5gsu2zjtprna8t02l8at88vjrqaqpzpmhxue69uhkummnw3ezuamfdejsygrxsyng4nj8fr2p5n8uc8nyqphmjddmcdvhs2eajcglvn23ce6jmypsgqqqqqqsykat3c


Did you save a nostr relay in the plugin settings?


What steps did you follow for trying the plugin?


How can I use mutinynet in mutiny wallet?


Joinstr Electrum Plugin v0.1.0 (Pre-alpha) Released

"A pre-alpha release for electrum plugin to try joinstr protocol is available. Joinstr is a protocol for coinjoin using nostr. I have also updated docs and website. Feel free to share your feedback after reviewing the code, docs and testing the plugin."

https://www.nobsbitcoin.com/joinstr-electrum-plugin-v0-1-0-pre-alpha/


v0.1.0 (pre-alpha) joinstr electrum plugin: https://groups.google.com/g/bitcoindev/c/bpVjmp6PAlY

I have also updated docs and website. Try the plugin and share your feedback.

https://m.primal.net/IdYn.png


Yes it can be improved further. Its just a colloquial expression because I am happy with the progress we made to make it easier.


I don't think 1 click to join pool and another to register input was "a lot of user interaction"


Joinstr electrum plugin demo created by  nostr:npub1xw0g0f9dtve2075gc6jk5ed9808ma2zet2rttkrjqx3ekpqgc2wqrfy3xc with 2 instances (peers)

- Create pool
- Join pool
- Register input

It can't get easier than this to coinjoin 🦃

https://m.primal.net/IakF.mp4


Kevin is added as a maintainer in joinstr repository 🎉

https://m.primal.net/IZaQ.png


Thanks for sharing. Kevin fixed the issue with this MR: https://gitlab.com/1440000bytes/joinstr/-/merge_requests/3


Any python wizards out there?  nostr:npub1v6qjdzkwgaydgxjvlnq7vsqxlwf4h0p4j7pt8ktprajd28r82tvs54nzyr says this is blocking mainnet joinstr. Joinstr is a project to do coinjoins over nostr. This is the 'other stuff' we keep hearing about.

https://gitlab.com/1440000bytes/joinstr/-/issues/7


You are clueless if you think wasabi was built without funding.

Joinstr is a protocol and being simple is a feature not a bug. Let me know which basic aspects are missing or read the docs.

Misleading people to believe publishing URLs on nostr is a big thing had to be called out. Sorry if you felt offended.


I have bult a new coinjoin protocol alone from scratch that uses nostr without getting the funding or resources that zkSNACKs or Mutiny has: https://gitlab.com/1440000bytes/joinstr

Electrum plugin can be used on mainnet when a threading issue is fixed


If you’re not validating your own transactions, someone else is doing it for you and can use that information against you. nostr:note1z0lp2lzr3dq0q0vj0sm48qj3lrnfkh95qxv40rczrlpme6v9aynqxr94fj


Wait until he learns about joinstr that does more than just discovery using nostr

nostr:note1n37rfsq30gfam9lnmcpr7985gl8pq2p99p7aqryxwqgd60n0947q43lnk7


This is huge. Who could imagine that URLs can be published on nostr?


#BOBFERENCE WEEKLY LINE-UP ANNOUNCEMENTS

Welcome, Luke Childs & Floppy Disk
 https://image.nostr.build/aa3201edadcc87421cf4ea3632de78b3ec05819de07b3a4071315dc3fb3df6d9.jpg
 https://image.nostr.build/062c300eee451747e859091a85319c5246fd51cc1a87943fcf9f0e34202fbca0.jpg


This is a very cool developer tool.

nostr:nevent1qvzqqqqqqypzq4jsz7zew5j7jr4pdfxh483nwq9vyw9ph6wm706sjwrzj2we58nqqyvhwumn8ghj7un9d3shjtnwdaehw6r9wfjjucm0d5hszrnhwden5te0dehhxtnvdakz7qpqtakh0xg7wa7ylkn7frgn9eu4ejps59l52eul8rhgkyy6gnsu7j4synn598


I don't think you read the docs or looked at the code. Joinstr is a protocol. I have built CLI, web app and electrum plugin as clients to use it. CLI and web app use full node.

You can create your own app that follows the same protocol if you don't like one of these. I am presently working on electrum plugin because I am the only contributor. Even electrum plugin can be used with own electrum personal server for better privacy.

Join telegram group to discuss more: https://t.me/joinstr


Trump talks a lot. Don't believe all his promises.

Trump on Snowden: "I'm going to start looking at it...Many people think he should be somehow treated differently."

https://www.reuters.com/article/idUSKCN25B10Y/

On Assange: "Donald Trump offered Julian Assange a pardon if he denied Russia link to hack"

https://www.theguardian.com/media/2020/feb/19/donald-trump-offered-julian-assange-pardon-russia-hack-wikileaks


There is an issue with electrum plugin related to threads: https://gitlab.com/1440000bytes/joinstr/-/issues/7

Once this is fixed, it can be used on mainnet.


The great thing about Bitcoin self-custody is that I don’t need Trump (or any politician) to support my right to do it.


What `kind` number should I choose for joinstr events?

https://github.com/nostr-protocol/nips?tab=readme-ov-file#event-kinds


Thanks for the reminder. Just unfollowed as I can see why you didn't discuss this in recent podcast with NVK: https://x.com/CashuBTC/status/1791001643019809146


https://image.nostr.build/ca5f99e66c38cd488be4882360a07f5c141f0128b4dc96dcf5142612e936f0ef.jpg

Announcing BOB's First Builders Unconference: A Cypherpunk Haven

Mark Your Calendars for January!

In a world where freedom and innovation face constant threats, BOB's is creating a sanctuary for the boldest minds in our community. Introducing our first-ever Builders Unconference—a 7-day revolutionary gathering where the only agenda is to have no agenda.

Unleash Your Potential:

Break free from traditional conference constraints and immerse yourself in an environment where you decide the topics. Engage with fellow pioneers on anything from decentralized systems to the latest in blockchain technology, all within the cutting-edge confines of BOB Space.

Our Arsenal:

3/4 rooms dedicated to creativity and collaboration
An abundance of whiteboards to map out your visions
PCs equipped for any task
Robust internet connectivity to keep the world at your fingertips

A Call to Action:
In the wake of recent attacks on Bitcoin, our commitment to decentralized solutions and peer-to-peer innovation has never been stronger. Join us in defending the future of freedom and technology.

Step Up and Be Counted:
Your voice is vital. Your ideas are powerful. Together, we will shape the future.

More information and updates at

http://www.flockstr.com/event/naddr1qqyrsvnrv4jrvvpeqyt8wumn8ghj7un9d3shjtnwdaehgu3wvfskueqzyzyxwkja3ycqj3sysd7xc05ypjzgx2xk06hj8gqgh5jd6kp3zssyzqcyqqq8evctvy9x4


The moral of the tortoise and hare story is not slow and steady wins the race.

It’s don’t be a lazy fuck, especially when you have a clear advantage.


NIP for joinstr: NIP for joinstr: https://github.com/nostr-protocol/nips/pull/1238


Interesting OSINT article about the alleged LockBit founder
https://krebsonsecurity.com/2024/05/how-did-authorities-identify-the-alleged-lockbit-boss/


Great presentation about Utreexo  yesterday from Brazilian Floresta builder 🙏 Davidson-Souza at  nostr:npub13pn45hvfxqy5vpyr03krapqvsjpj34n74u36qz9aynw4svg5ypqszxgctw in BKK 🇹🇭    with  nostr:npub1e2ayjlmmaksx2rtt0z4jzyskunfwh2lwe89xav4qtnhgu4wxsudsp98a4l https://m.primal.net/IHKB.jpg  https://m.primal.net/IHKC.jpg  https://github.com/Davidson-Souza/Floresta.  https://blog.dlsouza.lol/2023/07/07/libfloresta.html


I try to work on things that are practical and not pleasing a set of nerds or investors


Makes no sense. Users should be free to decide what happens with the outputs:

- Normal spend
 -Payjoin
- Mercury Layer
- Coinswap
- Open LN channel

Nostr coordinated coinjoin already exists:  joinstr.xyz

BTW electrum has a feature to open LN channel with the change so toxic change could be used to open LN channels when doing coinjoin


Using nlocktime is now considered spam? Not that it makes any difference with some nodes but this shows you have completely lost it.

https://m.primal.net/IGZM.png
https://m.primal.net/IGZN.png


https://github.com/kayabaNerve/fcmp-ringct/blob/develop/fcmp%2B%2B.pdf

New paper from some Monero researchers (really new it seems - update date is last week!), in which they're proposing to use CurveTrees (the same construct I put into aut-ct as per my recent work) to get much larger anonymity sets (and I do mean *much larger*, from like 10ish to 100000000!).

One very notable thing (to me) is that the very easy and natural secp/secq 2-cycle (you realistically need a 2 cycle of curves for CurveTrees), has to be replaced with something more complex, because their DJB ed25519 curve has a cofactor of 8 (yet again non prime order curve biting them on the ass, lol).

Another interesting tidbit is that they propose to use Liam Eagan's recent work https://eprint.iacr.org/2022/596  (posted almost contemporaneously with Curve Trees); I remember Andrew Poelstra pointing me at this work in '22 and I said to him "I don't understand this" and he responded "yeah it was difficult so I got Liam to come round to my house and explain it" 😁 .. so yeah i'm sure some people can follow the ideas there but I am alas not yet one of them :)

They've also done a review of the generalized bulletproofs construction that Kamp et al used in their CurveTrees implementation: https://github.com/cypherstack/generalized-bulletproofs

Also interesting is that they talk about acheiving a "forward secrecy" property here, which linkable ring signatures can't have, by design: if a future ECDL breaker is found, it can always see the trace of payments in prior Monero because the linking tag reveals the private key if you can crack ECDLP. I'm not sure how this works but I believe it's to do with the Liam Eagan research just mentioned.

Finally, the extremely esoteric and dense mathematical concepts aside, it's worth mention a 1000 ft view: this proposal ditches ring signatures (and somehow they get backwards compatibility for the historical chain, though I absolutely don't understand that yet), and goes to a full ZKP proving system (bulletproofs arithmetic circuits) for full anon set. I can't help wondering if this direction makes sense - if we look at Zcash, they do the same thing, but using bilinear pairings they can get far more performant proof, proof size and verification stats, I believe (but, curvetrees can be very efficient so I'm not 100% sure about the details here). Ring sigs, as I've observed elsewhere, even with the fanciest algorithms, never quite cut it at the verification step to be able to support huge anonymity sets. If you're going to ditch them, you may just as well go with a Zcash style design, no?


https://delvingbitcoin.org/t/anonymous-usage-tokens-from-curve-trees-or-autct/862

h/t  nostr:npub1vadcfln4ugt2h9ruwsuwu5vu5am4xaka7pw6m7axy79aqyhp6u5q9knuu7


If anyone experienced with python qt and wants to help me fix this issue for joinstr electrum plugin: https://gitlab.com/1440000bytes/joinstr/-/issues/7


Trying to complete the electrum plugin: https://gitlab.com/1440000bytes/joinstr/-/merge_requests/2


Thats exactly how joinstr works as implemented in electrum plugin and uses nostr relays same as emessbee. It even supports custom pool amounts and number of peers.


A masterclass in interviewing by Junseth, insane. https://soundcloud.com/junsethsworld/interview-with-a-social-engineering


can’t wait for signal/simplex-grade comms on nostr nostr:note1dfguxeddugr5x82g3vj7p5la9jmavrtysffnsr4waxfk2hz26l7s7wl4tg


Feel free to send me your bitcoin if you need those private eCash tokens. I can mint as much as I want.


Custodial


Thank you 😃


Pools without covenants: https://delvingbitcoin.org/t/pools-without-covenants/847


Just correcting the dishonest marketing post


Its trust backed and not bitcoin backed. Custodial so users don't really own anything until redeemed by custodians.


E2EE DMs are coming to Nostr 🔒

After being nerd sniped by hearing  nostr:npub1az9xj85cmxv8e9j9y80lvqp97crsqdu2fpu3srwthd99qfu9qsgstam8y8 mention OTR for the millionth time on the Bitcoin Review podcast, I spent the last few weeks digging into OTR, the Signal protocol, and a grab-bag of other cryptography.

The end result is that I (am pretty sure at least) that I found a way to do E2EE (end-to-end encrypted) DMs on Nostr in a way that is both forward and post-compromise secure AND doesn't require any centralized servers.

Demo video: https://share.cleanshot.com/nMKk6cn0

Live demo app: https://drdm-demo.vercel.app

And finally, the NIP (for those of you with bikes in need of a shed): https://github.com/nostr-protocol/nips/pull/1206

Huge thanks to  nostr:npub1klkk3vrzme455yh9rl2jshq7rc8dpegj3ndf82c3ks2sk40dxt7qulx3vt and  nostr:npub1l2vyh47mk2p0qlsku7hg0vn29faehy9hy34ygaclpn66ukqp3afqutajft for the chats while I worked out the details.


OrbitDB uses IPFS


So its 'messaging' using IPFS and Tor?


Are nostr relays money transmitters?


There is actually something new in this statement from the FBI:

https://bitcoinmagazine.com/markets/fbi-warns-americans-against-using-non-kyc-crypto-money-transmitting-services

If you actually read the second and third paragraphs, they are quite explicitly telling you that the primary risk is that *they themselves* are going to steal your money.

So by 'something new' I mean that this is the first time you are explicitly being threatened with confiscation. It would not be surprising if this is the start of a trend, but, who knows.


Introducing https://github.com/sommerfelddev/sentrum
A daemon that monitors the blockchain for transactions involving your wallets and sends you notifications on many different channels.

Hope you find it useful! More details later.


Saylor can go ossify himself and his simps. Bitcoin needs developers and improvements.


Opensats isn't really "open" about their process: https://x.com/1440000bytes/status/1767259970104393818

Cc:  nostr:npub1qny3tkh0acurzla8x3zy4nhrjz5zd8l9sy9jys09umwng00manysew95gx


The blocksize war wasn't so much about the blocksize (or, even, scaling Bitcoin). It was really about who controls the consensus rules and how we upgrade the protocol.

For context, a bunch of startups raised tons of money between 2013 and 2016 based on ridiculous user sign-up projections and then we had a long and painful bear market and they were looking for scapegoats (the developpers that were "throttling the network") to justify the lack of growth. I am thinking here specifically of Coinbase, Bitpay and Blockchain.info.

The vibe I got is that they thought of Bitcoin itself as a corporation, that they were the equivalent of Bitcoin's board of directors because they represented the interest of VC investors, and thus they were entitled to decision making power over the network.

I don't doubt that a few people were genuine about scaling p2p e-cash (e.g. Roger Ver) but I suspect what really motivated them is that they believed control of the Bitcoin network would be an asset to their business interests, and lack of control was being used as an excuse to why their interests weren't being satisfied.

There was also a bunch of developers that I believe may have been afraid of losing their relevance (Gavin and Garzik specifically). Regardless of their intentions or psychology, it seemed clear to me that the consortium of vc-backed startups (particularly Bitpay, Coinbase, blockchain(.)info and Roger) had picked a team of developers they thought they could control and wanted to appoint them as a technical management team whicn would execute their strategy, and these guys were willing to step up for that role.

I was physically in the room when the CEO of Blockchain.info (with the very obvious support of Coinbase CEO Brian Armstrong) announced that Bitcoin Core devs were being fired and would be replaced. This was after a couple days of failed discussions with other industry people. This was the moment when I realized what was really going on.

And finally, you had a Bitcoin mining giant (Bitmain) controlling both asic production and mining pools with a vested interest in promoting the idea that Bitcoin was a democracy and the way to vote was to buy hashing power. The main ideology being pushed here was that a formal governance mechanism of the protocol needed to be established and that hashrate was the only objective measure of who makes decisions.

The underlying big blocker ideology was that the chaos of spontaneous consensus of nodes is unpredictable, flimsy, bad for business. The absence of a formal governance process was seen as the root cause of the issue.

These companies really believed they could control the protocol, and controlling development of the protocol was seen as a very valuable asset to your company. I imagine they thought of themselves as the founders of a new consortium that would solidify itself into a permanent institution. The business interests would pay developers and set the goals, and the mining interests would ratify their decisions with hash power voting. That was their plan.

This became blatantly obvious when Bitmain used its refusal to activate segwit as leverage to get what it wanted (a blocksize increase and recognition of its hashpower as a vote mecanism) even though Bitmain iself acknowledged it was not really opposed segwit.

It was classic traditional politics: I'll give you segwit if you give me something in return.

This is the language the VC suits, investors and tech startup people understand and they were very happy to "negotiate" and find "consensus".

This eventually materialized into the New York Agreement, negotiated literally as a backroom deal during theConsensuss shitcoin conference. I was there and I refused to attend.

This (private) meeting consecrated the alliance of startups/investors and bitcoin mining interests in their appointment of a technical management committee. If you think this sounds like Jekyll Island, you're not alone.

They packaged segwit with a blocksize increase (Segwit2x) and decided to force a hard fork as a condition to "allow" us to have Segwit.

We know the rest of the story: we ended up activating anyway via UASF (or more precisely, the miners activated Segwit after they New York Agreement signatories became scared UASF would lead to a chain split which they were going to lose). And the blocksize increase was also abandoned shortly after when they realized their hard fork would cause a chain split and that they would not be able to claim that their new shitcoin is the real bitcoin.

All these people were subsequently were very pissed off they couldn't control the network, which they thought they were entitled to. Some ragequit, others created a bunch of shitcoins out of spite, Roger went on to spearhead BCH as the real Bitcoin, all these fools realized they might as well make some money off of it, everyone went all-in on the shitcoin casinos after that. The "small blockers" eventually went on to evolve into the Bitcoin Maximalists and cypherpunks that today tell you to run your own node and own your own keys.


gm nostr 🤙 As of today April 11th, #Julian #Assange has been locked up for 5 years straight in Belmarsh high security prison in the UK. #FreeAssangeNOW

https://image.nostr.build/f755a17b51a0dd7a4fc62c37fcca99ada13103a8d39deb164fcfcedc1e287087.jpg


it’s ARK.

nostr:note1d8mrknfp3crf58ce7ue64qmtrunmfd5lsj0m29tjejcc6gfwqfeqhldhck


Who says drama is not possible on nostr?

Cc:  nostr:npub1qny3tkh0acurzla8x3zy4nhrjz5zd8l9sy9jys09umwng00manysew95gx


It is not backed by USD. You can mint unlimited Cashu USD tokens.


You can mint as much as you want. Its backed by trust.


Implemented QR codes at a beta tester's request, now importing sigbash keys into nunchuk.io is a breeze :) https://image.nostr.build/13b7eb136767ac6afa915b1d833961f213e3aa9eed6c3deb2e20fa8c32d723de.jpg


I love lightning, but it’s very frustrating  at the same time. It’s simply cheaper to use custodians.. and I believe that it isn’t necessary. The crucial part of sovereignty is ability to sign the message. Which doesn’t require any costs. Therefore I believe that there is some way how to make self-custody fast and cheap. And here is my current way of thinking. This approach is kind of naive but maybe there is some potential. Maybe it motivates you to improve it into something even better.

https://stacker.news/items/489877/r/hynek


They will find other ways to get it unlocked


Interesting. What are the use cases for this?


Damus Android just got supercharged by this latest grant from the Human Rights Foundation!

The continued support has been absolutely vital on our joint mission to bring freedom tech to as many people as possible.

Thank you! 💜🫂🚀 nostr:note1427apc7j7es8s5te9n6us9jt4fnpdze2h7g7xmnnnw9ye309jwds7kdre5


"There has never been a government that didn’t sooner or later try to reduce the freedom of its subjects and gain more control over them, and there probably will never be one. Therefore, instead of trying to convince our current government not to try, we’ll develop the technology that will make it impossible for the government to succeed." / Wei Dai, February 1995 /


two notes with the same content published at the same time, one has gotten 10x more attention than the other. can you spot the difference? https://blob.satellite.earth/53b3eec9ffaada20b7c27dee4fa7a935adedcc337b9332b619c782b030eb5226


Did you ever stop and *really* think about what it means to "do a Satoshi Nakamoto"?

Context for my weird question: I have met many, many bitcoiners over the years. Many of them take a stab at keeping privacy by doing some combo of: not revealing name, not revealing location, not revealing face. Etc. So often, if I happen to meet them in person, they end up revealing the things that they were hiding online. Quite literally a mask came off (pre covid!) once we started drinking - a simple, funny anecdotal example of what I mean. Many complain about photos being taken, many focus on always using a pseudonym. I'm sure most people reading recognize these patterns of behaviour.

I can see the purpose, up to a point, so this is not criticism. It's a little like me doing coinjoin "here and there" - you don't expect to defend yourself against a hyper powerful aggressor, only against a casual criminal looking for an easy score.

But if you do want *real* defence against *strong* attackers, you have a huge problem. These half-measures will be useless, perhaps worse than that, if you get overconfident, because the determined investigator only needs *one* strand to pull on, and the measures I describe above, which are almost always rules only half-stuck to anyway, don't cut it, at all.

Which brings me to my point: is it even possible to "go all the way"? Clearly it is; Satoshi Nakamoto is not the only person who's ever done it, but it's pretty damn rare at the very least.

Imagine what it would mean. If you are engaged in a serious project, that takes let's say at least a year's worth of full time work, then you are going to do that for no reward. Not just, no money, people do that quite often when it comes to things they genuinely enjoy, but no recognition, no social context, not even "oh I won't bother you because I know you're busy with that project". Nobody will say that because nobody will know. Imagine doing a full, intense 8 hour day of work (more likely, split over many days) and knowing that there will *never* be a direct reward of any form, for that. And then doing it again, and again.

What's more, you don't just "not get a reward". You have to do almost double the work, to ensure that at every step, every pushed commit or technical discussion, does not expose anything at the network trace level, or the language, vocabulary etc. Managing tricky pseudonym accounts, handling the headaches of Tor etc. I'm not trying to say it needs super-genius level tech skills, I'm trying to say it's a massive amount of effort.

Could you do that? I daren't even ask the question of myself, because I'm almost sure it's a no. But to *imagine* where that kind of motivation would come from, that's what fascinates me.


Yes


https://m.primal.net/HmGu.png
https://m.primal.net/HmGv.png
https://m.primal.net/HmGw.png


Gabor Mate, mD via The Myth of Normal - Trauma, Illness, and Healing in a Toxic Culture

I fucking love this guy
https://m.primal.net/HjhZ.jpg


Better


SMH