semisol

Public Key

npub12262qa4uhw7u8gdwlgmntqtv7aye8vdcmvszkqwgs0zchel6mz7s6cgrkj

NIP-57 Address

zap@semisol.dev

Profile Code

nprofile1qqs99d9qw67th0wr5xh05de4s9k0wjvnkxudkgptq8yg83vtulad30gprpmhxue69uhhyetvv9ujumn0wdmksetjv5hxxmmdqy2hwumn8ghj76rfwd6zumn0wd68ytnvv9hxg8uaqzv

Publishing to

relay.noswhere.com

hist.nostr.land

nos.lol

Author Public Key

npub12262qa4uhw7u8gdwlgmntqtv7aye8vdcmvszkqwgs0zchel6mz7s6cgrkj

Show more details

Last Notes

2024-09-11 05:22:20

Yes, this attack allows you to clone the Yubikey but it also cannot bypass the PIN code.
At that point, you may as well just press the button once and use it to log in… #note1z7d…yz2m

2024-09-09 19:22:56

“I hate this place” - @npub1aeh…4nwx #note1f78…e0hf

2024-09-09 14:48:02

Looking for a few product testers, still. DM me for more info.

2024-09-08 04:13:05

- reply

Should have said “we kill products for breakfast”

2024-09-08 04:07:55

- reply

this should be an option —encrypt-content <pubkey>|self
this is more useful, such as encrypted list items

2024-09-08 04:00:14

- reply

Tenor will get added to the killed by Google list one day.. :’)

2024-09-05 17:44:25

- reply

works

2024-09-05 04:22:08

- reply

nostr is not a decentralized file store

2024-09-05 01:46:16

- reply

because nostr brings nothing of value to data preservation, its goals and use case are different

2024-09-05 01:22:27

- reply

this has nothing to do with nostr

2024-09-03 21:51:39

- reply

they also share the same crypto libs, but those use symmetric crypto usually

2024-09-03 20:40:54

- reply

in that case the goal is not collision resistance but generating unique numbers from a secret and timestamp
which has still not been attacked successfully

2024-09-03 20:39:17

- reply

Doesn’t really matter; this is the second time Infineon fucked up basic cryptography

2024-09-03 19:53:50

This is what, the 2nd huge Infineon fuckup? #note1lar…n9g7

2024-09-03 19:52:11

- reply

env variable for nsec would be better…

2024-09-03 17:56:01

- reply

“Verification”
Okay I’m quitting 🤣

2024-08-30 15:56:18

- reply

Congratulations on being misled into thinking you got verification when it is not verification
It’s just a unique username

2024-08-28 17:44:13

you do not need a special relay for DVMs #note1x3n…r6e3

2024-08-28 15:08:02

- reply

There is already a spec for that with linked identities

2024-08-27 18:17:37

- reply

Outbox model makes relay decentralization irrelevant
We can use 10 big relays and it would still be fine because if you get censored you can move to another relay or spin up your own

2024-08-26 21:09:48

nostr.land changes are live, nostrplebs is waiting on a DNS update
this has reduced query times by over 10x #note1lhk…wyhk

2024-08-26 21:03:33

nostr.land and nostrplebs relays will be down temporarily for reliability and performance improvements

2024-08-26 13:55:04

nostr being overtaken by VC and corporate interests
it was better when we had 20 relays and each one had at most 30 users, and a total of 100 users
(before EOSE and replaceable/ephemeral events existed) #note15j3…fgmd

2024-08-26 10:30:27

unfortunately for you, the reason nostr works is relays #note1lcl…dydg

2024-08-25 18:54:06

a lot of bitcoin content here feels like people are trying to convince themselves, not others

2024-08-24 16:30:35

this is not a scam, maybe read before you post
you most likely tried to sign up for a paid relay that uses nostream (or someone tried to on your behalf), and this is the DM it sends out with the payment invoice #note1rqc…7czz

2024-08-23 09:29:42

- reply

Who?

2024-08-23 07:42:35

- reply

I mean, I have a lot of cores available if needed, so 👀

2024-08-23 04:43:25

fixed 50k sat mempool.space fee #note1474…a8vz

2024-08-22 12:19:21

- reply

mullvad browser is tor browser without tor, so firefox with way more anti-fingerprinting measures

2024-08-22 07:57:49

RSS feeds are a file
You can even just host it on GitHub pages ffs #note1v8s…4l4d

2024-08-21 16:10:56

- reply

😂

2024-08-21 16:03:47

maybe bitch about actual problems like opensats instead of someone quoting your note with nothing and losing you $0.07 in zaps #note1556…s4ky

2024-08-21 15:31:32

- reply

all I care is it makes cross compiling C less shit

2024-08-21 12:01:12

Damus I guess #note1q3m…e39e

2024-08-20 10:56:08

- reply

Use hist.nostr.land (free) for backing up your follow list
You can also use nostr.land (paid) to store all your notes

2024-08-20 09:45:40

- reply

just fyi, I think this graph shows which % of people that “answered” (checked one box or more) this question selected that
not out of all respondents

2024-08-20 09:43:03

Do giftwraps have plausible deniability?

2024-08-20 02:38:41

there is nothing permissioned about DKIM
just because a few receivers decide they want to impose requirements does not mean the protocol itself is not permissionless
my relay has a whitelist, does this now mean nostr is not permissionless? 😂 #note1pjk…xuc9

2024-08-20 01:45:03

- reply

Yes, the only way you can verify it with custom firmware is to ask the bootloader itself for its hash from the docs.

2024-08-19 15:45:18

- reply

The entire problem is that the bootloader has to be trusted with attesting what it is.

2024-08-19 13:15:57

- reply

And should it not apply to just the word as is? Prefix/suffix matches should use wildcards imho.
See: Scunthrope problem

2024-08-19 13:04:20

- reply

it mutes anything that contains the substring “nostr” most likely which is stupid

2024-08-19 13:00:30

- reply

And that’s fine.
But people building random shit and hoping someone finds it, or that we randomly stumble across the “killer app” for Nostr is mistaken.
The truth is that the majority does not care about censorship resistance, and everyone’s sucking at selling to the people that do

2024-08-19 04:21:31

- reply

new TXs such as consolidation can reveal ownership information about coins that were deposited months ago

2024-08-18 13:44:31

- reply

the solution is hardened derivation but hardened derivation can only be calculated via xprv, not xpub

2024-08-18 13:43:36

- reply

critical flaw:
xpub derivation works by putting the chain code C and index I through a hash function to get a modifier private key m
using the base private key b, you can calculate the derived key as b + m
for public part, m can still be calculated (chain code and index are public), but you only get base public key B
you convert m to a public key M, and calculate B + M, and that is the public key for b + m
now if b + m, the derived key, gets leaked, and the base xpub is public, m can be calculated and subtracted from b + m, to get b
you can from there calculate any other derivation path

2024-08-18 13:33:50

- reply

Okay fine 😂

2024-08-18 13:33:42

- reply

Recovering your seedphrase is a one time per device operation usually along with passphrases

2024-08-18 13:25:43

for fucks sake, HWWs aren’t meant to be expensive showoff devices with unnecessary features
who the fuck puts a keyboard on an HWW? and why is it useful?
give me something affordable that works instead
can we also get a mobile app that works properly with multiple HWW vendors? thanks

2024-08-18 13:18:55

- reply

Reading the few first sentences without any context I thought you took a step back from SS development.

2024-08-18 10:54:53

- reply

orangeclock

2024-08-18 09:36:19

You do not build until the problem you solve appears.
You build to solve a real problem.

2024-08-17 13:00:13

If there is anyone actually doing this let me know so that I have more proof that being a bitcoiner does not mean you can think rationally #note1pnf…9x8r

2024-08-17 07:06:04

- reply

I was asking you to check DMs.. :)

2024-08-17 06:19:44

- reply

DMs

2024-08-16 23:54:56

- reply

payments do not work for now, they will in a few hours

2024-08-16 23:53:18

- reply

yes there is, all the relays were merged
it’s ws://nostrland2gdw7g3y77ctftovvil76vquipymo7tsctlxpiwknevzfid.onion

2024-08-16 23:47:45

- reply

payment seems to have gone through. that DM you got is an error, will fix that

2024-08-16 23:43:23

- reply

nostr.land? I will check now

2024-08-14 07:23:56

- reply

Those relays can pull their content in anyway.
There is also no definitive way to check a deletion without breaking any scheme that runs deletions every say 15 minutes.
Can we just call it a “withdraw”?
You are withdrawing your post, relays can decide to delete it and clients may decide to not show it or show a notice.

2024-08-14 06:18:40

- reply

If you want to protect certain notes, limit to a small group of people using AUTH
Don’t complain when people don’t see them though

2024-08-14 05:31:26

Any PII protection law does not apply to non-personal information, including your notes
The GDPR for example also does not grant you the right of erasure if data is kept for archival purposes in the public interest.
Anything on the internet is forever, if you will regret it, don’t share it #note1ce9…u56t

2024-08-14 03:26:35

- reply

use nostr.land

2024-08-14 00:01:35

- reply

Yeah, not claiming it’s open source, but also open source does not mean contributions need to be accepted

2024-08-13 23:59:09

- reply

SQLite is open source, right….?
It also does not accept contributions also.
Open source defined by the Open Source Initiative does not include the right to force maintainers to accept your contribution.
That’s called “open contribution”

2024-08-13 23:55:47

OPEN SOURCE IS NOT OPEN CONTRIBUTION
Just because you can do anything with the code does not mean they have to accept your contributions
Bitkey is MIT with Commons Clause though, so not really “open source” #note1990…9epn

2024-08-13 17:00:31

- reply

An HWW is then a safe with a pen and a copy of your signature.
Unless there is a flaw in the security mechanism, it doesn’t have to be replaced

2024-08-13 02:28:18

While @npub1az9…m8y8 complains about Pi’s “unverifiable GPU code”, their own devices have the same equivalent, except you can’t even see the blob to compare with others
(you must trust the bootloader to provide you a hash, what could go wrong)
🤔 https://i.nostr.build/QL7vzBTdIYHpzNRq.jpg

2024-08-13 01:39:49

- reply

HWW vendors like to make claims about “open source” but most of them are never truly verifiable, since there is boot ROM and other components not included in the source, or that could be tampered with without noticing

2024-08-12 18:05:08

they also make higher ratelimits for trusted users impossible #note1gg7…xl6z

2024-08-11 23:57:42

- reply

Okay then, you can choose whatever I guess

2024-08-11 23:41:07

- reply

Did you know: the location of a relay does not indicate what laws have to be complied with
If the EU asks me to censor shit on my relay in Finland, then I’ll move it to another country

2024-08-11 20:01:24

- reply

Yes, and the average user is not a website operator.
If they just want Google Fonts and other non GDPR compliant sites gone, then they should be using another rule

2024-08-11 16:25:36

- reply

I hope you realize that the rule you recommended blocks all CDN fonts including Bunny and/or ones by the website owner served on another domain

2024-08-11 05:37:17

- reply

The entire point of relays is that they are replaceable: unless you can self host a relay (hard) you can’t really trust any.
We need to focus more on making it accessible to the average user to create a community without being beholden to a relay host that can terminate their relay and in a more affordable way than paying a lot for a relay

2024-08-11 05:35:40

- reply

But why focus on 1 or 2? What benefits does it have?

2024-08-11 03:10:16

- reply

why relays?
why not moderated communities? or a better version of that NIP?

2024-08-11 00:15:02

- reply

*looks at tapsigner*

2024-08-10 14:33:49

- reply

This is the notification

2024-08-10 01:31:54

- reply

key rotation proposals exist, but none are implemented
so if your nsec is gone, you can’t do much
I’d recommend creating a backup nsec and not using it except to set it up, and publishing the public key

2024-08-10 00:31:08

- reply

yes

2024-08-10 00:09:06

- reply

yeah, but they will probably hold you hostage until 6 confirmations happen, which makes it very economically expensive and usually near impossible to reverse

2024-08-10 00:08:14

- reply

stacker.news is centralized
it has a more zap oriented community and daily reward distribution
you should use a long form client like habla.news to post on nostr, and share the link on that client on stacker news

2024-08-10 00:05:38

- reply

bc1x doesn’t exist yet, it’s bc1p
reversing transactions is impossible unless unconfirmed
most info about covenants is misinformation
for example, if someone sends coins to you with a covenant attached, that actually becomes a different address
think of it like someone sending you sats, but with a 2-of-2 instead of the address you specified
it’s a different address, so your wallet will say “this isn’t my sats” and will ignore it

2024-08-10 00:01:06

- reply

Kind 3xxxx also includes blog articles and other stuff, fyi

2024-08-10 00:00:15

- reply

that is a wallet defect.
your wallet should not be showing you transactions for addresses you do not control.
any payments with covenants is a new address
the end

2024-08-09 21:26:26

How do they compile the compiler #note1vql…6dcd

2024-08-09 21:19:13

- reply

yes. in that case, use WoS for the LN address and transfer to phoenix every so often

2024-08-09 13:07:04

it is always possible to come up with a model that “predicts” the historical pricing accurately
it can’t predict future pricing though
https://en.m.wikipedia.org/wiki/Overfitting #note1ta9…4ppl

2024-08-09 12:49:18

- reply

In the case of A sending to B, the KYCing party in the 2-of-2 can update the rules by just changing when they sign and when they don’t.
But those rules cannot be updated by the KYCing party with covenants and also can do way less

2024-08-09 12:25:47

- reply

Yes. On chain covenants are still way more limited than what you can achieve with a multisig (you can’t update them later, for example)

2024-08-09 04:28:06

- reply

also if you get sent coins with a covenant attached, that is a different address
you just don’t accept them like you wouldn’t accept coins sent to a 2-of-2 with you as a participant instead of the singlesig key you requested

2024-08-09 04:26:57

idk how people can be so dumb to think recursive covenants matter for on chain KYC
there is a simpler and cheaper solution: 2-of-2 multisig #note146c…gsrw

2024-08-08 23:55:36

- reply

9000 series launch

2024-08-08 23:44:15

you could have waited another week 🥲 #note1rdd…cwyl

2024-08-08 23:23:45

- reply

I would say Phoenix.

2024-08-08 23:11:51

- reply

Zeus has a higher risk of force closes and is less optimized for LN node on phone performance (uses more data AFAIK), but allows more for advanced users (not the average spender)

2024-08-08 20:07:05

- reply

yes, that scales mostly linearly
but operational costs like people increase more logarithmically, and developing tooling

2024-08-08 19:48:13

- reply

it is cheaper per event to store billions than tens of thousands