takinbrrrr

I guess it's a good thing we don't have mass adoption yet. #liquid

The differences between #MeshCore and #Meshtastic are night and day in my experience! In my local community, we have a disaster preparedness drill we run every weekend. When I was running Meshtastic, I would get 8 contacts at my best count. After switching to MeshCore, I got 62 contacts on my first weekend. Same equipment. As at the time of this publication, there are 1295 active nodes on Meshtastic and 756 active nodes on MeshCore!

Is it me or running #meshcore is significantly more power efficient than #meshtastic? I have a wismesh tag that lasts about 3 days on full charge with meshtastic but I'm only seeing a daily energy drop of 10% with meshcore!

Help me understand this #btcpayserver vulnerability. This only affected instances with lnd as the lightning backend right? So if you had a firewall blocking external access to the lnd node besides the lightning protocol port (9735 or whatever was configured for the node), then even if the node's macaroons were breached, this would not have resulted in loss of funds?

We were so fixated on quantum computing breaking public key cryptography that we didn't realise we had an entropy problem on our hands.

If financial sovereignty is outlawed, only outlaws will have financial sovereignty.

You installed that browser extension to make browsing the web more accessible but what you also got was an extension that was reporting on every website you visited and AI chat logs.

https://amibeingpwned.com/ is a service that constantly scans published browser extensions to determine what they're truly doing.

Before you install that browser extension, check their score and determine if that convenience is worth the privacy invasion.

#privacy #security

Phishing is becoming increasingly sophisticated and it's easy to fall prey to these attacks.

Here's a tip that could save you. When you receive an email that requires you to take immediate action, the first thing you should do is PAUSE. It's unlikely that taking five minutes to critique the email would materially change the outcome of what might have already begun. The urgency is usually the first social engineering attack.

Take your time to scrutinize the email. This email says I have a recovery contact request and yet the body says I have successfully approved a request to add a recovery contact to my Google account. Which is it? If it does not make sense, do not take immediate action; investigate further. If you're not technically savvy, ask someone who is.

Stay safe.

The more I use netbox, the more I realise how many problems it solves. I can't believe how I've managed to do sysadmin work all these years without it. 🤦‍♂️ #sysadmin

One reason why it's hard to teach people to value their privacy and take steps to protect it can be observed in the personal health space; just like your health, privacy is something you don't value until you lose it. #privacy

Freedom is not free. #abc25

Is there a mimetype for cashu tokens?

#asknostr #ecash #cashu

Today I sent a friend e-cash in an e-mail (pun intended). Of course the e-mail was encrypted using PGP. I pictured it as literally sending cash in the mail except that the mail was sealed and guaranteed not to be opened but by the intended recipient. I'm living in the future.

#ecash #cashu #bitcoin

First they ignore you (aeonbtc's blocklist), then they laugh at you ("knots' users are stupid; I hope they get rekt 🤣🤣🤣"), then they fight you (portlandhodl's attack on knots nodes), then you win!

#knots #core #bitcoin #filters

Bitcoin projects are not nearly as complex as the Linux kernel but there's something to learn here. #oss #git #security

for something as important as verifying binaries for bitcoin software, it's a wonder that very few people do it.

1. few developers sign their binaries
2. few users verify those binaries

we can do better and for those developers who sign their binaries, unless you suspect your master key has been compromised, there's no need to rotate it. that's what subkeys are for.

gm!

gold.

anyone out there still playing #pathofexile2? playing solo has been a bit boring!

#poe2 #gamestr

one of my favourite features of uptime kuma (https://uptime.kuma.pet) is definitely certificate expiry monitoring. as much as you can automate renewals, some setups require manual handling.

I bit the bullet and switched to #NixOS a little over a year ago. After spending a year with #Nix, I’m attempting to nixify all the things and wondering why I can use Nix on my phone! 😐

I remember ad blocking extensions being a niche thing. Now realizing that Google going after ad blockers means that ad blocking has gone mainstream - to the point that it’s directly affecting Google. It’s a clear signal that users consider ads as being an impediment to their use of the web and want something better.

#privacy #browsers #google

The client you use as your daily driver has an outsized impact on your #Nostr experience. It’s like the difference between using Coinbase and Sparrow to send bitcoins. It’s hard to know what you’re missing out on until you’ve tried something else. Most Nostr clients are good — for the regular user, even great but for someone who needs something more and doesn’t want to murk around on the command line, you should check out

.

I initially dismissed the client because it lacks that polish that makes it a very good looking client. Looks are important and you don’t always get to make a second impression. However I keep most of the clients around because I like to follow their evolution. All of that “lacks polish” impression flew out of the window when I started to murk around in the settings. You know that feeling when you desire a certain feature but you don’t complain about what you’re given because you didn’t write the client but then you find this one client that implements not just one, two or three of the things on your wish list but like MANY of them? That’s what I found in Nostur and why it’s now my favourite client. I don’t have to go through all the features but the fact that I can:

1. Choose what relays I want to read from, write to and search
2. See what relays I’m seeing a note from and that I posted to (sometimes you need to rebroadcast a note in case a relay missed it)
3. Share an actual image of a note with other apps
4. Use a custom NIP-96 media upload service
5. Configure your own web of trust filtering system and (specifically) restrict loading media to your web of trust
6. Choose what relays to publish as your reading and writing relays

among others, makes it the most powerful client I’ve used to date. Basically, this is the mobile (and desktop) client for power users and it’s become my daily driver.

Beauty is not only in physical appearance but in character.

Who would’ve thunk it that to dismiss a #Nostrnest broadcast on

, you had to swipe up on the pill button? 🤷‍♂️

Zapping is the highest form of content engagement. #v4v

Is there a workflow to transfer ecash tokens online? I’m aware you could use Lightning but I was wondering if someone is working on a mechanism to make online payments directly using ecash?

#cashu #ecash

Kept vigil all night hoping to take a crack at Spiritborn!

#diablo4 #d4

For the longest time, I had my watch and search histories turned off on YouTube; technically it is referred to as “paused”. It occurred to me that despite this setting, Google might still be storing this data and there would be no way for me to prove otherwise. I (obviously) haven’t fully read the terms and conditions of use for YouTube so it’s hard to tell if there’s a sneaky sentence in there allowing them to do this despite whatever it is they wanted me to believe.

Now YouTube significantly limits the usability of the service if you have your search and watch history turned off and I figured that since I cannot determine for a fact that they honored the setting, I might as well turn the feature back on. I was not ready for what I would see next — YouTube was making suggestions based on things I had recently searched for and seen! What ever happened to “pausing” search and watch histories‽ The only way that this could have happened was that Google never honored the setting! “Pausing” your watch and search histories does nothing to keep Google from storing and then using them to make recommendations on what to show you next.

As we often say, #donttrustverify #privacy

3 sat/vb is the new 1 sat/vb

I struggle sometimes between which terminology to use when trying to describe the process of acquiring bitcoins: Is the right term “buy bitcoin” or is it “buy bitcoins”?

Here’s my thinking: when you’re describing acquiring the individual units of bitcoin (say in a trade or in comparison with another asset), I should use “buy bitcoins”; it’s kind of akin to saying “buy houses”. However, if the reference is not only to acquiring bitcoin units but also the ideology of bitcoin or the asset class, then it should be “buy bitcoin”, similar to saying “buy real estate”.

One more reason why owning bitcoins is better than real estate. In this video, Mitch Vexler of Mockingbird Properties explains how governments are robbing home owners of their equity through taxes that result from an illegal overvaluation of the property.

Where streaming payments are concerned:

nuts > lightning

I do not understand how Bitcoin companies that intend to stay true to the Bitcoin ethos of self-sovereignty, self-custody and decentralization do not plan to be profitable from day one.

Why would an investor put money in your startup and not buy bitcoins with their capital? Investing in your company comes with the opportunity cost of buying bitcoin. Self-sovereignty, decentralization and self-custody are not sexy enough for the typical investor who’s really courting the next investor. Next time you intend to start a bitcoin company and you intend to get investment, you should think about the game the investor is playing. Maybe you just have the wrong investors.

You’re with me, I’m with you Always one, but born as two As above sit the stars and below lies the sea I give you you and you give me me

A little bit of Internet history — prior to 2004, the way you registered a domain in the .ng TLD was to write a zone file and send it via email to a dude named Randy Bush.

“I’m a stickler for correctness. That’s my job.”

That’s who Randy Bush was. I remember having a few registrations rejected due to some error in the submission. I always wondered if he had a script doing this validation for him or whether he did it manually.

I tried to find one of those submissions but those emails have long been deleted ☹️

https://www.theregister.com/2004/01/17/internet_fool_s_gold_sparks/

Maybe it’s just me but those DNS-based payment instruction lookups (aka BIP-353) are incredibly fast.

Now that the WALLET RRTYPE has been ratified I wonder if we would see a migration to this but with DNSSEC as the spec doesn’t mandate this.

Fun fact, if you plan on implementing BIP-353, be mindful that not all TLDs support DNSSEC.

There are two kinds of people:

1. Those who could care less about their online privacy and

Always wondered why more mints didn’t support tor hidden services.

Ladies and gentlemen, a peer to peer electronic cash system, except it’s not really peer to peer, payments are sent indirectly (i.e through a financial institution) from one party to another.

#AppleCoin #AppleCash #Bitcoin #p2p #kyc #permissionless #permissioned https://image.nostr.build/7475cc12418f9e2254e3aa15dfacb2b0fa0520d37483c1c423acd4e2661c07d4.jpg

If you're one of the many #Bitcoin enthusiasts out there who hasn't had a chance to listen to all the classic episodes of Bitcoin Uncensored, don't worry, I've got you covered! Chris DeRose and Joshua Unseth's #podcast was a staple of the community, but even some OGs might have missed out on it. To help preserve this piece of Bitcoin history, I'm sharing a #torrent with all the episodes from that era - enjoy!

magnet:?xt=urn:btih:89551c89f054fc2da134664bc43291281809ec7d&dn=Bitcoin_Uncensored_podcast_archive&tr=udp%3a%2f%2fopen.demonii.com%3a1337&tr=udp%3a%2f%2fexplodie.org%3a6969%2fannounce&tr=http%3a%2f%2ftracker2.wasabii.com.tw%3a6969%2fannounce&tr=udp%3a%2f%2ftracker.opentrackr.org%3a1337%2fannounce&tr=udp%3a%2f%2ftracker.cyberia.is%3a6969%2fannounce

One way #nostr clients can improve #privacy today would be to support the use of proxies (http or socks, possibly with authentication). Rather than reveal the client’s IP address to the relay, the proxy’s IP is all the relay will see.

I thought this could be solved today by using custom relays that are just proxies; for instance wss://my.relay.proxy/nos.lol could just be a #proxy for wss://nos.lol and all nos.lol would see is the IP address of my.relay.proxy but that interferes with #nip65 so it’s better for the client to directly support proxies.

One of these days #Nostr will get some attention (attack). Are we preparing for this? How would relay operators handle it?

#censorship #freedomofspeech

Recently noticed that #Damus shows notes on my feed from accounts that I do not follow. Initially I thought this might be coming from a relay but then I compared my feed on Damus with that on Primal using the same relays. The unwanted notes appear in Damus but not on Primal. Is this a feature and is there a way to disable it? @jb55

Woke up this morning with a craving for ice cream; next thing you know, the entire bowl is gone!

#foodstr https://image.nostr.build/96178b806f3a4c56039a3b589022322aafec282e2711750f3ae408624b41aa26.jpg

Using npub.cash as my nostr lightning address

#ecash #npubcash #lnurl

A lot of websites use dark patterns in relation to cookies management, with the majority of them trying to trick you into accepting all of them. It tells you everything you need to know about their sincerity when they say “we care about your privacy”

#privacy #cookies #darkpatterns

You’re all in on #Bitcoin and you envy those with fiat because you cannot buy more but on the flip side, you become their envy when the price appreciates significantly. Fascinating.

Citing bank closures of Nigeria's End SARS activists, a Ugandan human rights lawyer, Alexei Navalnys' opposition campaign, a Guatemalan journalist, a religious activist group in the Phillipines, a business man in Egypt, and a journalist from India, the RUSI report states that:

"These are just a handful of the victims/survivors from around the world who have had their organisations closed, colleagues imprisoned, or bank accounts indefinitely frozen because of their pro-accountability and pro-transparency work as members of civil society. All of these incidents, and countless more, arise from a perversion of tools and powers stemming from anti-money laundering and counterterrorist financing (AML/CTF) measures within the global anti- financial crime regime."

https://www.therage.co/weaponization-of-fatf-standards-rusi/

The fact that the software you produce is open source, is not an excuse for shitty customer service.

Based. What’s with the cassava though?

…Binance disclosed this in an announcement on its “commitment to P2P users in Nigeria” on Tuesday, warning that “users behaving in a manipulative way will be removed from the platform.”…

https://gazettengr.com/binance-confirms-working-with-tinubu-govt-to-block-dollar-naira-exchange/

Here’s a counterargument for #filters. The whole premise of #consensus is that all participants agrees on the same set of rules. Your node, your rules is not how #Bitcoin works. The network already operates under a set of rules that have been publicly agreed upon. By running a node, you help to make sure these rules are followed, contributing to their collective implementation. You may as well fork off the network if you think it’s your node, your rules.

This is the most privacy-invasive feature to be added to the major cab hailing apps of recent. I don’t understand how that is supposed to make me safe.

Be careful what you say in cabs; it just might be getting recorded.

#privacy https://image.nostr.build/9b49457b17693f6b8fe05b9a488c900a88de37af28e6c349f7c1fd405acd256f.jpg

If you use a hardware wallet that uses Bluetooth, you should be mindful of these new attacks:

“BLUFFS is a series of exploits targeting Bluetooth, aiming to break Bluetooth sessions' forward and future secrecy, compromising the confidentiality of past and future communications between devices.”

https://www.bleepingcomputer.com/news/security/new-bluffs-attack-lets-attackers-hijack-bluetooth-connections/

The people of Zambia woke up on Friday to discover that energy prices had gone up by some odd 40+%. This is coming after the government devalued the currency by 30% due to depleting foreign currency reserves.

In real terms, the people of Zambia just got a 30% cut in their wealth overnight. Earning an income in Zambian kwachas? Have financial assets in ZMW? Too bad, your income (assets) will have to go up by at least 30% to keep up with the devaluation.

Imagine saving for retirement and waking up one day to realize you’ve lost 3 years worth of savings out of the last 10!

#Bitcoin fixes this.

https://www.reuters.com/world/africa/malawi-hikes-fuel-electricity-prices-after-currency-devaluation-2023-11-10/

Exactly as

predicted.

https://techcrunch.com/2023/09/15/x-launches-account-verification-based-on-government-id/

https://twitter.com/ghostofwhitman/status/1701318064749400385

"basically risk-free”

https://open.spotify.com/track/7KEPDWPWa4wfsP0Ee7JlIr

Dog dumplings is the new term for shitcoin

H/T

Very impressive. Same scene, different characters, probably different times of the day.

#diablo4 #diabloiv https://cdn.nostr.build/i/69441251bacce5836eed00e9a4e1be9caf695d5bb78771c76ee25dd1443bc372.png https://cdn.nostr.build/i/603528272d4eb9283f7bbfa45fb44677a8d1c606077eacee45f6a05f32137d7d.png

#TIL: Shuudan Koudou - the Japanese art of precision walking

Most people don’t realize how broken the Internet is unless you live in one of these “undesirous” locations.

😅 https://cdn.nostr.build/i/ff7b90c0a9b48011ac84c66c38ca98dc89ca5d5897d44a85cdb80f022fe7f894.jpg

I know. #Zapping can be addictive.

“You can’t change politically, that which exists culturally.” — Olavo de Carvalho

Here’s how to enable zapping on Damus:

1. Open the link in the note and click “On”
2. It’ll open in Damus and all you have to do is click “Run”
3. Close Damus and reopen it.
4. Enjoy your zaps!

#zaps #growstr #damus

https://damus.io/note1gjd2str0tfqvrcwdttskxkd52vmsagc477gsr858k0ug86nuj60qzn6uas

How to escape Worldcoin

https://open.substack.com/pub/insanelyfree/p/how-to-escape-worldcoin

“When assessing complex systems the only thing you can realistically rely upon is trust.”

Imagine that your online banking application was written by third parties with no relationship with your bank; how would you scrutinize it? That’s precisely how you should treat your bitcoin wallets.

Any application that handles or (worse) generates key material should be scrutinized to the highest degree possible.

Coutts Bank: We’re closing Nigel Farage’s bank account because he’s a “disingenuous grifter” with “xenophobic, chauvinistic and racist views”

World Bank: Hold my beer.

https://twitter.com/spectatorindex/status/1689058903592669185