arbedout

What if we used Taproot and MuSig2 to make MPC obsolete 👉💖👈

My hope is that we look back on the way we as an industry currently handle signing transactions - single-sig, multisig, hot and cold wallets alike - the same way we look back on HTTP before

taught us why we all needed to move to HTTPS.

The cat's out of the bag with the newest episode of TFTC - announcing here first on Nostr:

Sigbash v2 is live! We've switched to a new approach that I've decided to call Oblivious Signing: thanks to the power of MuSig2, WebAssembly, and zero knowledge proofs, our signer never sees your signing key or the transactions you want us to sign.

instead, when you register a key, first you commit to a signing policy (anything - input and output amounts, destination addresses, time windows allowed for signing, you name it) - and we'll only sign transactions that match your policy.

Policies are as complex as you need and as private as we could possibly make them. Our beta is live on signet now at https://www.sigbash.com!

first thought on waking up: i am not un-bullish.

gm

The Mythical LLM Month

designing an SDK right now and it just hit me that the main 'users' will be LLMs.

maybe you can ask Claude to write the code for you but that doesn't mean you can ask Claude to understand the code for you

Currently watching Claude Code churn through my codebase, refactoring and adding docstring comments to it, file-by-file. Absolutely absurd.

ما که چیزی نمی فهمیم از سیاست یه عده میان و میرن در نهایت ما همون بدبختی بودیم که هستیم ....آقا جون تو دعامون و بکن اجابت

"I actually did this kind of backwards. I had to write all the code before I could convince myself that I could solve every problem, then I wrote the paper” - grug brain Satoshi is best Satoshi

Putting the finishing touches on the longest solo software project I've ever worked on - nearly two years of feedback, iterating and testing. Definitely going to announce on Nostr first this time.

Call for panel participants: anyone up for joining us for Coin Based atPubkey next month in NYC to talk through the Great Quantum Kerfuffle?

Resolution for the upcoming year: spend more time on Nostr.

A) Greatful for everyone testing out sigbash after hearing about it on citadel dispatch this week, appreciate you all🙏

B) There's a big loud notice when a key is registered that this is beta software and that your keys may stop working at any point - pay attention to that! I'm not collecting any email addresses so I can only shout this into the void for now 😅

I heard you can just do things? So I wrote a book on the political economy - the 'who gets what and why', to use Susan Strange's definition - of Internet protocols, and decided to self-publish it.

Find it at https://www.somethingmoreprofound.com in HTML and PDF format. Free as in beer, enjoy!

lmaoooooo

Made the mistake of referring to my wife's mousakka as "Bulgarian Shepherd's Pie" in front of her. If she murders in my sleep tell everyone at my funeral that I was really into Bitcoin.

I realized this AM my answer to this is "stand up a multisig signer that doesn't require KYC" - so since I've already done that I'll plug it here, check out https://sigbash.com

Hypothetically: if you thought penny-sat parity was a real possibility in the next two years, what would you do to prepare? What business models would make sense that didn't before? What software would you need that you don't need now?

Accidentally wandered into the WMD aisle of the farmer's market

[advertisement for teething infants]: have you been sleeping through the night? are you not riddled with guilt wondering whether you're a good parent? well check this out!

Watched the U.S. presidential debate last week between Trump and Biden. Watching the Iranian presidential debate between Pezeshkian and Jalili now. All the "this is fine" dog in burning house memes ever made aren't enough to convey what I'm feeling.

I just run realized Van Morrison has two songs about the exact same thing - 'Dancing In The Moonlight' and also 'Moondance' - and they're both absolute bangers

gm

Everybody was hyping me up for a possible Carrington Event and in the endI didn't even get to see any pretty lights ;(

I had a great time at BHH last year. The amazing Latvian food was an unexpected treat, if I were going this year I'd definitely sign up for this. (P.S. if you're going try to find some Latvian hot chocolate if you can - it's literally liquid molten chocolate, not cocoa powder and milk.)

Sigbash update: Passkeys, Price Feeds, and PSBT introspection!

Original beta announcement Xitter thread here: https://twitter.com/arbedout/status/1772646454533755215

Six weeks of beta testing and I can separate out the feedback I've gotten into two broad categories:

1. The oracle is useless (because I don't really need it) and
2. The oracle is useless (because it doesn't do what I really need)

For 1) - I definitely didn't appreciate how many users just wanted to submit a form to get an xpub / have an xpub signed without any conditions. That's great! But also Sigbash v1 was kind of terrible for that - without any conditions, every xpub is effectively an xprv, since you can just present it to the signing server and we'll happily assume that your ownership of the key is enough proof that we should sign for you. Since everyone in your multisig quorum can theoretically see your xpub, that means everyone has your xprv. Not ideal!

I thought about this for a bit and settled on implementing passkey authorization - now you can associate a passkey with an xpub when you first request it, and we'll only sign for that xpub if the passkey is presented at signing time. Givs your xpub to whoever you like; we won't sign requests for it unless you present your Apple FaceID, or fingerprint TouchID, or Yubikey, etc.

(Side note: This is the first Bitcoin-y thing I've built that I've had my mom test on her phone. Wild feeling watching her authenticate with her FaceID to make a signing request.)

For 2): The original oracle could only check three conditions - the bitcoin network hashrate, or the balance of a given Bitcoin address, or the BTC/USD exchange rate. All conditions were evaluatedaft signing time.

I got a ton of requests for new conditions to commit to, so many that I refactored the entire oracle UI and backend. Now you can restrict Sigbash from signing a request for an xpub based on:

*the price of 170+ fiat currencies, precious metals, or crude oil; *Treasury yields, SOFR or the Fed Funds rate; *hashrate for a given mining pool or the entire network; *daily Bitcoin transaction fees in USD; *the balance of a Bitcoin address

Instead of just checking the value for the condition at the time a signing request is submitted, you can now specify values for a given date - e.g. "Sign if Luxor's hashrate on May 6 is greater than 100 EH/s" or "Sign if the exchange rate of Bulgarian Lev to USD on April 27 is above $.010/USD". This radically changes the value proposition of the oracle; you can now build incredibly complex conditional contracts from these basic building blocks.

Finally, and also to address 2) - I added PSBT introspection, which is a fancy way of saying you can restrict an xpub to only sign for a request if the sum of the inputs, outputs or transaction fees in the PSBT you submit for signing are above or below a certain value in satoshis.

The combination of these features - being able to build addresses with spending conditions dependent on price feeds, or hashrate, or the value of a given Bitcoin address, or the inputs and outputs of the spending transaction - are what I'm hoping will be available to Bitcoin users when there's widespread adoption and support for discreet log contracts and a soft fork that enables some form of covenants. Since we aren't there yet, my hope is that we can start building and testing the UX out for that future and progressively upgrade the Sigbash backend to provide users more sovereignty as new soft forks are activated and DLC oracles get better tooling and wallet support.

(And if covenants are never activated and DLCs never get much traction? We'll still have this imperfect-but-good-enough implementation to get the job done.)

Give it a spin at https://www.sigbash.com, use code BETATEST to grab an xpub, and again please remember this could break at any time until we're out of beta. Thanks y'all, onward!

Putting the finishing touches on a new Sigbash release based on all the feedback I've gotten over the past month. Definitely announcing all the changes here first instead of Xitter. (Maybe I can just screenshot the note and post it there?)

There's a Craig Wright joke here somewhere

Parenting tip: you don't have to sing baby lullabies or play baby songs to your newborn. They will happily rock out to The Sisters Of Mercy and Prince if you offer it to them, no matter how off key you are.

The fact that your timeline isn't flooded with influencers proclaiming they stand with the students, chanting "Universities! Life! Freedom!", is something worth spending a few cyles thinking about.

Current mood https://image.nostr.build/6c7ecc2def5f3208919b086fdd7efbd3e402d9c288307863d0a84cba43da4272.jpg

Anyone have takes to shill me on CivKit before I dive into it? (At first glace the 'KYP' oracles seem iffy to me.)

Chokepoints, chokepoints everywhere https://torrentfreak.com/cloudflare-disables-access-to-pirated-content-on-its-ipfs-gateway-230324/

No words to describe how much Nostrica FOMO I'm feeling rn

Slaves lose everything in their chains, even the desire of escaping from them.

-- Jean-Jacques Rousseau, watching normies scramble from bank to bank in the midst of a crisis (maybe)

SVB going into receivership. Bitcoin users unaffected.

:

🎶 whoah ooo oh, all your shitcoins lie in dust, my friend 🎶

I would simply not build software that requires permission from the NYAG. It's not complicated

Any nostr clients or apps with built in cashu wallets?

gm, ETHDenver has approximately 60% the number of attendees as the Midwest FurFest, America's largest furry convention

Hmmn. I wonder how feasible a Bisq-over-nostr would be.

Nostr taking off right as Twitter starts falling apart is incredibly lucky timing. Let's all make the most of this opportunity

Is there a NIP-06 address explorer yet? Wondering if anyone's thought about trying airdrops or dusting those addresses yet

ooh, i heard new amethyst lets you decide between different relays for feed/dms/global? testing now

It's wild that we all have Schnorr pubkeys associated with our nyms now.

If you're not working on software that makes the CCP nervous, what are you even doing with your life?

Fixed a bug with mirroring. Can confirm after extensive testing that the fix works. Absolutely no idea how :)

Francis Fukuyama is bad, and I'm tired of pretending he's not.

gm, they're relitigating the Blocksize war over on bird app while we're busy turning into ostriches 😎

Going to do a live-fire test of some new functionality for wss://nostr.relayer.se. Please excuse any downtime /report any weird behavior beyond just connection flakiness from downstream clients for the next ~2 hours. Maintenance window starts.... now!

gm, waking up to a chronological feed of friends and mutuals vs. algorithmic content and clickbait is a breath of fresh air. i hope it lasts.

I made the choice to use the .se TLD for wss://nostr.relayer.se explicitly because the .SE administrators had left sci-hub.se up and running. With this news I'm going to have to consider moving to wss://nostr.relayer.rs (hosts of libgen.rs) https://torrentfreak.com/domain-registry-takes-sci-hubs-se-domain-name-offline-230126/

Lazynostrweb: what's the easiest way to get from an nsec1... key to a mnemonic seed phrase?

gm, woke up today and checked amethyst first. Hasn't occurred to me to check Twitter yet...

need to get good at rotating keys, we should plan on keys getting lost/compromised constantly. learn the lessons of Bitcoin here.

advertising a user's preferred relays as specified in NIP-05 is super interesting. How clients and users settle on their list of preferred relays seems worth exploring. Any other relay operators up for discussing this at Nostrica? Maybe a lightning talk?

🤙 when the walls fell

gm, the nostrverse what finally pushed me to move from custodial to non-custodial lightning, goal for today is to zap someone a few sats as a test

Realizing that NIP-06 gives every nostr pubkey access to an on-chain wallet and cashu gives every nostr pubkey access to federated chaumian e-cash. Wild

gm gm gm. thinking about what ____ over nostr would look like. potentially promising?