Semisol
semisol

software developer

Public Key

npub12262qa4uhw7u8gdwlgmntqtv7aye8vdcmvszkqwgs0zchel6mz7s6cgrkj

NIP-05 Address

semisol@nostrplebs.com

NIP-57 Address

zap@semisol.dev

Profile Code

nprofile1qqs99d9qw67th0wr5xh05de4s9k0wjvnkxudkgptq8yg83vtulad30gpzpmhxue69uhkummnw3ezumrpdejqzxrhwden5te0wfjkccte9ehx7umhdpjhyefwvdhk6dup609

Publishing to

nostr.land

relay.noswhere.com

hist.nostr.land

Author Public Key

npub12262qa4uhw7u8gdwlgmntqtv7aye8vdcmvszkqwgs0zchel6mz7s6cgrkj

Show more details

Last Notes

2024-11-14 21:39:55

- reply

fact
they posted it themselves in a Telegram channel initially

2024-11-14 21:38:40

- reply

Was before Coinkite took it down with a trademark claim

2024-11-14 21:26:49

@npub15c8…ssvx how may I reach out on Telegram, Matrix or Signal?

2024-11-14 21:25:51

- reply

they rely too much on their big margins

2024-11-14 21:15:52

- reply

I do not agree fully with throwing it fully out, but current IP regulation means that it is easy to abuse.
Trademarks provide protection against someone pretending to be affiliated with you or your products.

2024-11-14 21:10:38

- reply

I could have just used a JavaCard and been the same as other products already out there. But then what’s the point?
Big things are coming 👀

2024-11-14 21:08:42

- reply

Resubmit with it added, I’ll remove it. Or if you used your nym it’s fine, just DM me your Telegram/Signal handle.

2024-11-14 21:07:53

This all started because I was tired of the amount of bullshit and insecure products in the hardware wallet space.
Finally, you will be able to get an HWW that isn’t overpriced, that doesn’t use chips with vulnerabilities, and just works without requiring a closed source vendor app.
The SE will also be open to use in DIY projects or other HWWs as a secure starting point. #note160z…0zxq

2024-11-14 20:31:45

You can still register for the beta-test of my signing card, using security certified chips. Expecting samples ready by late 2025 Q1.
It also uses a custom platform with security-by-design, compared to the development approach of most other signers.
No bullshit claims, no cutting corners, no overpriced hardware.
https://forms.office.com/r/CxzzG4Wqam #note1655…pgxy

2024-11-13 12:22:33

What HWW would you recommend?

2024-11-09 00:34:40

“just one killer app bro. trust me” #note1m26…appm

2024-11-05 15:05:01

- reply

it really isn’t a good hammer either for 50% of things
to be honest, the cashu protocol has been having the same issues with incompetent design as with some nostr NIPs

2024-11-04 19:32:50

- reply

Anyone can make shit on Nostr.
Who can make shit that’s good?

2024-11-04 19:11:24

- reply

Nostr is not that malleable.

2024-11-04 18:43:42

- reply

What is to say Nostr isn’t?

2024-11-04 18:39:38

- reply

“why not enhance the fediverse?”
- fediverse people on nostr

2024-11-04 14:51:41

- reply

I’m working on a lot more than that… :)

2024-11-04 13:33:50

- reply

What changes?
Except that you know someone tried to access it and failed, and that’s what the failed PIN counter is for

2024-11-04 13:31:51

- reply

depends on your threat model

2024-11-04 13:23:02

Also, it is secure enough that it doesn’t need a brick or wipe PIN to resist attacks unlike some other HWWs #note135y…hlyv

2024-11-04 12:56:05

What if a 3-of-5 multisig was only $200? With HWWs that is.

2024-11-03 23:38:29

- reply

They all work fine for me.
Well except Windows 11. That thing is hot garbage. Windows 10 all the way

2024-11-03 21:51:56

- reply

video infrastructure is a complex topic
to make it work requires no effort with an MP4 on a server
to make it work WELL requires optimizations, and money for that to be usable (CDNs, servers for transcode and similar)
even one second of buffering can impact viewing experience for a normie
instead of funding ecash wallets maybe someone willing to work on the real problems should be funded

2024-11-03 21:49:21

- reply

when funding?

2024-11-03 15:26:15

- reply

you can’t change users unless it benefits them

2024-11-03 12:15:15

- reply

Oh. Don’t bother with NIP-05.
Pubkey whitelist is easier and people with other NIP-05s can use it.

2024-11-03 10:43:30

- reply

it’s not verification

2024-11-03 10:34:27

- reply

not you specifically
it just seems to be a general mentality that nsec management for example has to be hard and people have to adjust to it

2024-11-03 01:40:23

- reply

also see: Louis Rossmann

2024-11-02 09:26:35

- reply

First, not everything is on Nostr.
Second, Nostr notes are not non-repudiable because of the many ways they could get compromised, even with a remote signer (signing some unintended notes before access is revoked)
And you still need a relay to store that note… which will become harder and harder
Personal relays don’t fix this because they are limited to people who know how to run a server, and are intentionally limited to a small group of people. Also, maintenance cost will only go up while the benefit doesn’t change.

2024-11-02 09:22:28

- reply

never really

2024-11-02 09:20:49

- reply

It does not.

2024-11-01 02:39:12

- reply

whatever type of error you are having must be a more widespread issue than a few pages to be triggered so often
the ideal program would have a small pool it nonstop allocates to and deallocates from and a pool it very slowly checks and rotates allocations in/out
write random data and CRC it as I said
you then want to stop the process and get a debugger if there’s a mismatch and see the physical location along with identifying the RAM module

2024-11-01 02:36:12

pick 2: security, performance, affordability

2024-11-01 02:35:00

- reply

ycruncher?

2024-10-31 18:44:20

- reply

It is supported but not “validated” (don’t blame us if it doesn’t work) for consumer platforms

2024-10-31 18:43:27

- reply

Will do in a bit

2024-10-31 18:38:48

- reply

It is detected as ECC too.
G series CPUs don’t support it don’t ask how I know (tried to add ECC RAM to a system with one) and it didn’t detect as ECC

2024-10-31 18:37:46

- reply

I have bought 2 random ASUS boards, one meant for “professional use” and one meant to be lower end (B)
Both work

2024-10-31 18:36:37

- reply

another water heater… :)

2024-10-31 18:35:55

- reply

ryzen supports ecc

2024-10-31 18:35:29

- reply

Yes.
I have never had a corrupt DB with ECC memory, even with a few hard power cuts. I use RAID 1, though not with checksumming (mdadm) so about 50% of the time any issues should come up with disks if any.

2024-10-30 15:38:18

Hardware accelerated ChaCha20 🤔

2024-10-30 14:47:55

I wonder how many HWWs are developed with proper attention to security, from software to parts used :)
Most common one is cheaping out on SEs and buying one not meant for withstanding anything more than basic attacks. And “just add shit” firmware development

2024-10-29 21:30:09

- reply

You only get a yes or no, nothing else.

2024-10-29 20:00:51

- reply

WPA3-SAE fixes this

2024-10-29 01:23:28

- reply

No, if it also uses paper ballots, why digital also?

2024-10-29 01:21:22

- reply

Okay so what’s the point then? Redundancy?

2024-10-29 01:20:57

- reply

let’s also take a page out of most HWWs books and make the code say it is genuine itself

2024-10-29 01:18:21

Now, the problem is… how do you know it runs the code it says it does?
Maybe consider this the next time you see “open source” but the boot code cannot be verified except the boot code saying “trust me bro”
Also can we stop calling it boot ROM? Thanks #note17yx…00ju

2024-10-28 20:39:05

You forgot the part where they overprovision access, inactive accounts, and economies of scale…
knowledge can’t save you from stupidity #note1c86…n03h

2024-10-28 20:11:58

- reply

you can’t really just catch CSAM

2024-10-28 19:44:41

- reply

not possible

2024-10-28 19:36:22

- reply

nostr is the perfect breeding ground for this shit
no good way to actually block abusers, marketed as anonymous

2024-10-28 19:33:39

it’s much worse than it appears #note1lj2…0p83

2024-10-28 16:49:46

- reply

actually, not really
it’s loaded into the chip in the passport

2024-10-27 22:40:29

- reply

no, will see if I can debloat it in a way that works post-install

2024-10-27 22:30:10

this feels very wrong to do
https://i.nostr.build/AiXI2GN8Hr687yem.png

2024-10-25 23:20:59

- reply

You are missing the entire point

2024-10-25 20:30:15

- reply

Last time I checked it was hardcoded

2024-10-25 19:47:15

- reply

Yes but that may as well be irrelevant in user counts.
Also, they probably use public relays too for a public presence

2024-10-25 19:43:04

- reply

Nostr is inherently different.
It has long term identities at its core.

2024-10-25 19:28:40

or can they? :) #note189n…tzfq

2024-10-24 19:14:29

- reply

Iris and Snort

2024-10-24 14:53:29

- reply

Wait, they were once, and they forked?

2024-10-22 21:28:54

promoting your project (esp. for monetary gain) should not become your primary project
a lot of things in bitcoin have gone wrong because of that: HWWs, shitty grant funding schemes, podcasts, confs #note1z0q…md58

2024-10-22 21:25:34

“rules for thee but not for me” in the Bitcoin community, exhibit I lost count.
I think we all know what stablecoin means
also, before you say: it is mathematically impossible for there to be a stable store of value even if managed by a perfect algorithm in terms of supply control #note165x…tl7e

2024-10-22 13:02:46

- reply

That cutoff is in March, hmm
Weird

2024-10-21 13:09:44

- reply

Also, batch signing does not make much sense.
You need to send the AUTH event immediately for example

2024-10-21 05:57:04

- reply

Smartcards are also cheap

2024-10-21 05:56:47

- reply

None of them

2024-10-20 23:32:19

- reply

you are probably overdoing it

2024-10-20 22:24:21

- reply

yeah.
there’s the people that are idiots that know they are idiots: they don’t do anything
and then there’s the idiots that don’t know they are idiots or don’t care: they are dangerous because they will fuck things up for themselves and others
another example is the HWW industry…
a bunch of companies cut corners to the point where you could make a “most incompetently developed hww” marketing video and people would believe it
you could also make a “most secure hww” and they would believe it

2024-10-20 22:21:17

- reply

there are 48k potential keys with prime size 11 bit and less.
9.5k if you look for 11 bit only.

2024-10-20 22:13:15

- reply

and it is fair because there are lots of idiots that don’t know they are idiots, just like on Nostr…

2024-10-20 18:52:59

- reply

But yeah, verifying sigs is good.
Next steps: learn how to use a SeedSigner (always a good tool to have, for example if you need to temporarily handle a seed outside an HWW)

2024-10-20 17:07:26

- reply

#nevent1q…n03u

2024-10-20 16:51:22

bitcoin seeds: DO NOT SHARE AT ALL COSTS KEEP OFFLINE ONLY
nsecs: “let me enter it into some random shitty site” #note16kv…0khy

2024-10-20 12:54:03

- reply

Of course, since it doesn’t work with wine

2024-10-20 12:22:37

- reply

I have a Windows VM on my Linux machine for some things

2024-10-19 22:09:27

- reply

I personally prefer automated deployment scripts

2024-10-19 17:14:39

- reply

Hear me out.
Influencers get people to donate to some “charity”.
People those influencers know make shitty projects.
That “charity” gives them grants and does not disclose the amount.
Sounds good?

2024-10-19 17:05:46

- reply

Developers think they know everything.
“Let’s make another shitty ecash thing” 😂

2024-10-19 17:00:29

- reply

It’s kind of their right to do whatever. Though it is a shitty move.
Piracy is fine as long as it doesn’t actively try to make less people pay for that content: people pirating due to a subscription model would have never paid anyone

2024-10-19 16:56:45

- reply

Again, falls under the last one: you wouldn’t have earned from it anyway, so why care about piracy (as a publisher)?
Piracy is often either a pricing or product issue. They can’t afford it so they won’t buy it anyway, or you are offering the product in a way that they don’t want

2024-10-19 16:46:23

- reply

It’s a VC funded company that only wants to eventually sell you subscriptions or ads

2024-10-19 00:48:58

- reply

25GBASE-T and 40GBASE-T, along with Cat7/Cat8 were dead on arrival
10GBASE-T already has stringent requirements, network cards that get very hot and more.
But if you insist, we have 800Gbps already, but it’s only for backbone connections
10Gbps SFP+ used is dirt cheap
25Gbps with SFP28 is a somewhat the standard for DC deployments as an in-between for 10 and 100 Gbps.
40Gbps serves no use except being cheap homelab crap
100Gbps is still pretty good and the max you’ll see on a server (example, SANs) but also costs a lot more
more and either you are looking at either backbone links or AI

2024-10-19 00:41:06

- reply

Depends on if it’s PON or not too

2024-10-18 22:21:04

- reply

it is a relatively easy one to automate

2024-10-18 21:52:36

- reply

not the issue, it was I installed a new package
since I didn’t update for a while it pulled in newer versions of its dependencies, while other packages were left outdated

2024-10-18 21:52:03

- reply

good point
except that is considerably better than “throw shit at a wall until it sticks” approach that some HWW manufacturers take
though they also do not know how an SE should be properly used

2024-10-18 21:13:41

- reply

Not much.

2024-10-18 21:10:32

- reply

Yes.
Integration is not possible due to economic reasons.

2024-10-18 21:07:22

- reply

You can’t.
It is objectively not in X’s best interests. Being a SPOF is fine for them as long as they retain control and can lock people in

2024-10-18 21:06:26

reminder to not update a rolling distro only halfway

2024-10-18 21:01:08