Justin (shocknet) ⚡

Bxrd's following feed now surfaces notes by cumulative engagement, not just a reverse chron of posts or reposts of your follows.

Nostr clients as only as good as the infrastructure that powers them, these simple enhancements are made possible by a shared graph using a lot of memory.

CLINK disrespectors just having NIH syndrome. Embarrassed they've wasted time on dying protocols because they couldn't solve the most basic use-cases of getting invoices and receipts reliably where they belong without a bunch of extra trad-web infrastructure.

CLINK Offers: Lightning payments without a web serve

Welcome

to the CLINK ecosystem

Welcome Circl and SkateSpots to the CLINK ecosystem

https://clinkme.dev/apps.html

Good poll for Bithereum crypto-kids to out themselves.

Nostr derangement syndrome from the DHT clowns is pretty funny, it's just websockets and json... And they have to reinvent nostr relays just to make DHT powered apps.

To troll them harder I might fork nostr-tools and call it weson-tools in my apps

Got to the bottom of the Ark astroturf, an "anon" fighting me over it accidentally revealed a little too much about themselves.

Big-stablecoin is behind it, that's why all the paid fluffers are out.

All makes sense now since it's Centralized/Surveilable, double-spendable, and results in negative yield via rounds.

Also doubt that it's being proposed shortly after Taproot Assets is a coincidence.

The Liquid hacker could send the remaining coin to Spark and Ark and shatter illusions of those being non-custodial at the same time

Kill three fake L2's in one hack

I suggest fixing your nostr metadata to occupy a nym/slug, and adding a noffer for zaps.. Might drop a little something this week

(see https://nymrank.dev if you're unfamiliar with nym optimization)

Federated custody was always a hoax.

👀

Bumped the testflight build, bigger released slipped for this week... but should ship next week.

It'll be worth the wait, especially for node operators running a Pub

CLINK fixes the LN-address privacy hole — no HTTP third party fetching your invoice.

https://stacker.news/items/1559801

CLINK while you CLANK

🟡 Notice

There's a zero-day CLN vuln that has operators keeping their nodes down until a patch is released. As a result several of our channel peers are offline temporarily until they release a patch which is expected in the next few days.

Liquidity on sends may be tight until then, but is safe.

NIP-22 now implemented on Bxrd and it will pick up both kinds for a transition period

https://Bxrd.app

Pretty sure this is just plebs that hardware wallets and punch plates are wastes of money when you can just back up wallet.dat to mdisc

omg who made this masterpiece?

Hitler uses a fake L2...

Testing a CLI tool so you can let your clanker use CLINK headlessly

https://github.com/shocknet/clinkctl

If you think BIP-110 failed you never understood the objective. It was extremely successful controlled opposition.

Core's influence has been consolidated, solidified.

Resistance shattered and demoralized.

"Spam" is now a good thing, pre-excusing more Bithereum scope creep.

Haven't run into a single guard-rail issue with GPT 5.6 Sol like everyone has been complaining about

Guessing there's trust tiers based on peoples usage history

Bigger problem is it's pedantic and hallucinates vulns

Looking at the patch commits it seems that an attacker could glean connection details to the backing node.

Even if there's no evidence you were hit yet and have no funds hot, you wouldn't want to receive a payment with an attacker lying in wait,

Rotate the connection credentials to the backing node.

Omg fireship 💀

Make a mental note of who's engaging in the "casino" dice cargo-cult purity spiraling

Shitty dice are fine

Checked a repo not our own for calibration last night with GPT 5.6 Sol

Critical hit first try, a fairly popular software wallet. Disclosed to publisher just now.

You may want to consider checking and building stuff from source yourself until the ecosystem has time to catch up.

Silver lining here is that fake L2 wallets built exclusively on swaps are facing their comeuppance.

They were warned about these single points of failure.

Lightning.Pub shops Zeus and Boltz endpoints for on-chain swaps, so that functionality will not be available for the duration of this outage.

Do not bin your Coldcards

Key management is an intractable problem that goes back as far as computers using cryptography at all, engineers in the 70s and 80s recognized that the ultimate vulnerability of any cryptographic system was not the strength of the mathematical cipher, but the fragility of the human interfaces required to use it.

Every email challenge, 2FA token, username/password, biometric, or even SSL sites you've interfaced with is an abstraction or workaround the difficulty in managing keys.

Seed phrases are hardly an improvement over post-it notes on monitors in the 90s, most disks are volatile storage, and memory is lossy.

Large custodians with geographically dispersed enterprise-class HSMs behind policy engines are going to be the inevitable conclusion for most until we start thinking outside of the box rather than tinkering with toys and treating bad BIPs as canonical.

HWW maxis becoming ETF maxis was not on my bingo card for this week

Excited to add 3 new Apps to the CLINK ecosystem list:

Dark Wisp Nostr Client BTCPay CLINK Plugin Vendure CLINK Plugin

https://clinkme.dev/apps.html

CLINK, ShockWallet, Lightning.Pub, Bxrd, Sanctum

Fully uncompromising decentralized WeChat is nigh.

Amazing what you can do when you don't waste time fucking with fake L2's.

Less BIP wars. More BOLT wars.