Semisol
semisol

> There’ll be less eyes on the design
Same issue with MCUs, really. Anyway, large SE companies conduct their own testing *and* rigorous independent certifications. (semi-formal validation)
Not sure you can reach that level even if you open source, because the majority of the security is in the physical design, and so physical attack tests. And not the logic.
I have also significantly reviewed the design of the SE I am using.
> There’s no do over in BTC but there is in the fiat world
In the end, there is still damage. Fake digital signatures can be as damaging as blindly signing contracts. Credit card fraud can lead to millions lost for banks.
In the end, *someone* is losing something from it being insecure, and so they have a strong incentive to ensure they buy secure products.
> we can DIY build one
But does anyone? Or do we rely on the manufacturer and Espressif to solely deliver a correct product?
What if the boot ROM on the MCU logs your seed to a hidden area on the chip?

2025-05-27 17:26:44

- reply

If people set up their own oracle that they can take down, they could also use a mixed oracle/SE mode on a SE HWW

2025-05-27 17:18:24

- reply

one of the development samples is sitting on my desk right now

2025-05-27 17:16:08

- reply

Indexes in SSD. Block data in HDD.
UTXO set bloat might change this though :/
But at least we're getting cheaper and faster SSDs

2025-05-27 17:14:51

- reply

To start, as both disclosure and a background, I have signed a mutual NDA with a large company that makes SEs. This does *not* include a non-disparagement clause, and what is covered by NDA is technical documentation.
> Not to mention (well, I guess I'm mentioning) the risks of a supply chain attack for the secure elements.
This depends on the secure element. The company that I work with, and many other reputable vendors, have strong countermeasures against supply chain attacks:
- Each chip gets a unique key to identify it, that proves it is genuine
- Production of chips is tightly monitored
- Sensitive key material is stored in dedicated hardware only
and so on.
Cheap SEs, like the ATECC series, to my knowledge do not do this.
> And at this point, secure elements are securing crazy amounts of money. So the temptation must be off the scale.
It has always been, even before Bitcoin. Passports, credit cards, other digital signature systems, etc.
And yet, there are few attacks discovered in high-quality SEs. Almost none apply to real-world scenarios.
> Secure elements are closed-hardware
That is true. But the off-the-shelf MCUs are also closed hardware. Everything is closed hardware. Unfortunately, due to how the IC industry works, building a chip requires proprietary IP, and any company that gives it away is shooting themselves in the foot, really.
Economic incentives are very real, while the amount of protection open sourcing a SE is not. (how do you verify the chip you got equals the open source design?)
> Secure elements ... require NDAs
This will change.

2025-05-27 16:38:44

- reply

The next model will be the largest regression seen by a hardware wallet vendor, ever

2025-05-27 16:36:59

- reply

That doesn’t matter either.
It’s simple: how hard is it to reach the end result. And HWWs are way harder.

2025-05-27 15:11:13

it’s most likely easier to hack an oracle server than a proper secure element
#note14v3…m8qn

2025-05-27 15:03:43

- reply

for legal reasons I cannot comment about it except that it’s bad

2025-05-25 23:16:52

- reply

You should have gotten DM. Zap2relay zaps are not published
Also yes

2025-05-25 23:14:43

gn nostr
big stuff is coming
#note1gdh…66yk

2025-05-25 23:14:31

- reply

Will add support for syncing to other relays on nostr.land soon, on publish

2025-05-25 23:09:18

- reply

also yes I’m going to use your Nostr.land design for both NL and to some extent this, this was just a test of the UI library 👀

2025-05-25 23:04:55

managing nostr relays is shit. but it doesn’t have to be.
relay marketplace, and management client coming soon 👀

2025-05-25 22:35:09

Nostr relays will be fully Nostr native. 👀
#note1p38…tlnw

2025-05-25 22:27:39

only if there were tools like CodeQL and similar …
#note174v…pyg8

2025-05-25 18:09:24

To own your data, you need to have both a reliable archival relay, and a local backup
Just deployed a 5x performance improvement to https://nostr.land export
Using another paid relay? You can easily move in your data.
#note1lqp…agh5

2025-05-25 13:24:41

- reply

Also, Nostr.land is more pay-as-you-go as well. The listed tiers only show what months get you how much bonus time.
Also maybe a comparison of feature set? Nostr.land in that price includes inbox/archive as well

2025-05-25 13:23:13

- reply

sand cat

2025-05-25 02:28:13

- reply

fyi nostr.land homepage is also info

2025-05-24 17:43:56

- reply

congrats you forked the hellthread

2025-05-23 15:17:18

- reply

and RabbitMQ, and NATS JetStream
oh look it’s all message queues and write ahead logs

2025-05-23 13:14:48

pv Nostr

2025-05-22 15:01:11

- reply

kind 3 is very much alive but sure

2025-05-22 14:57:15

- reply

to the primary as well
search soon

2025-05-22 14:51:11

- reply

nowhere

2025-05-22 14:37:53

- reply

You know what I want more

2025-05-22 14:26:05

- reply

the incident has been resolved

2025-05-22 14:04:15

- reply

you never know which “extra spicy” is in fact extra spicy

2025-05-22 13:46:21

- reply

Name last name

2025-05-22 13:23:40

- reply

This may be spam or waste of block space but it’s not a scam
Miner decides how to use their blockspace. Filters are another debate as well (should I help miners get these transactions or not)

2025-05-22 13:10:36

- reply

This has the benefit I do not have to place the antenna for ZB in my server rack and instead somewhere closer

2025-05-22 13:09:53

- reply

2025-05-22 06:53:16

- reply

the only option I can (currently) recommend and trust is SeedSigner

2025-05-22 02:29:55

- reply

this is not necessary as it connects to almost every relay out there
unlike some others

2025-05-22 02:12:12

Pretty close to being done with the beta version of the Nostr.land aggregator.
♻️ Low-data mode that hides data-heavy notes
🛑 Filter NSFW media and untrusted media hosts
🛡️ Customizable MAT spam filter with resistance to attacks on WoT
🛜 Read/write to hundreds of relays unlike current aggregator/filters
1️⃣ One relay for all Nostr.land services
Will be included in existing subscriptions for free.
gn nostr
#note1kev…2npg

2025-05-22 01:48:12

Low-data mode for nostr 👀

2025-05-22 01:34:22

- reply

I unfortunately use Docker
And also a dedicated host with Z2M

2025-05-22 01:33:52

- reply

🤣🤣🤣
Another thing. The SAMA5D2 like they claim is not a security processor, never was

2025-05-22 01:20:11

- reply

who what

2025-05-22 01:16:17

- reply

this has reminded me of @npub1s0v…pq6j calling smart cards 30 year old technology, even though one from a decade ago probably still has better security than the Passport

2025-05-22 01:13:36

- reply

I cannot see how this PR has increased or decreased codebase maintainability, or has benefitted the economic majority

2025-05-22 00:27:20

- reply

Yeah, feel free to DM me if you want to disable your old ID and get refunded for the payment, if you decide to not keep the old one.
No one else could claim the name, but it wouldn't resolve either.
PV 🫂

2025-05-22 00:21:26

- reply

the debate has made no sense to me

2025-05-21 23:32:23

- reply

Sorry, missed the original notification. You would need to register a new identifier, and we can refund the cost.
But the old ID would stop working.

2025-05-21 13:47:08

- reply

❌

2025-05-21 13:44:17

ag _ _ _ _ _ _ _ r

2025-05-21 12:59:38

rewriting the nosdex queuer 🤔

2025-05-21 10:01:03

“Any problem in computer science can be solved with another layer of indirection”
This is what using FDB feels like

2025-05-21 05:48:37

- reply

I will simply reply by saying that:
- The amount of nonstandard transactions have been extremely minor
- Until the recent debate, no one used large OP_RETURNs, mostly fueled by the debate itself (and no serious usage still!)
- There are very few outputs below the dust limit

2025-05-20 22:18:18

- reply

well you will see today or tomorrow 👀
(it starts with a)

2025-05-20 21:49:22

- reply

I am implementing passkey support for a company and I can say it is significantly more convenient than the state of Nostr login, and the same if not more secure

2025-05-20 21:02:30

- reply

It’s 18.75 bytes now. Sorry

2025-05-20 20:44:05

- reply

150 bits

2025-05-20 17:54:17

- reply

💡

2025-05-20 17:52:00

- reply

eventually I think Nostr will get replaced by something better, anyway
but until people realize that a new protocol revision is needed this is all that can be done

2025-05-20 17:47:52

- reply

most likely modified to work with FDB, and maybe 1-2 tweaks but maybe
one thing I have worked on is a state-machine type query runner for NFDB which allows fair query scheduling
also DMs

2025-05-20 17:43:18

- reply

soon

2025-05-20 17:13:08

What's the #1 feature you want in a relay?

2025-05-20 15:48:15

- reply

Perhaps 👀

2025-05-20 15:48:01

- reply

you need to only keep hist.nostr.land and nostr.land

2025-05-20 15:44:12

gm Nostr
big things are happening over at Nostr.land 👀

2025-05-20 13:23:21

- reply

Relays can also signal in NIP-11 data that their relay is paid! I do not think Amethyst shows this, but Damus will show a B symbol

2025-05-20 04:57:50

- reply

Nostr.land relay

2025-05-20 04:51:15

You can just build things
https://v.nostr.build/BPKspwBxYr5J9Xez.mp4

2025-05-20 03:39:52

Why

2025-05-20 02:34:21

The discount has been closed.
You may also now access the new website at https://nostr.land 👀
#note1gjc…ttnx

2025-05-20 01:10:53

- reply

shh

2025-05-20 01:10:01

nostr.land: to sats or to bits

2025-05-20 00:29:36

- reply

just you wait
https://i.nostr.build/pyNoDAmUDjafHqGx.png

2025-05-19 20:00:51

Nostr.land discount closing soon ;)
👀 a major website redesign is coming

2025-05-19 18:20:54

- reply

US relay is undergoing maintenance right now. But no, it will automatically select the correct endpoint with GeoDNS.

2025-05-19 17:42:23

Nostr.land will now prompt you in amethyst if your subscription is expired with a 1-click link to register.
Should be fully rolled out in a bit

2025-05-19 16:12:28

- reply

Input your npub, but $25/yr with the new NFDB discount (renote the launch note), about $48/yr otherwise
But I should make it directly link with your npub.

2025-05-19 16:01:04

- reply

🚀

2025-05-19 15:58:36

- reply

Nostr.land is one of the earliest paid relays.
Azzamo is a relatively new paid relay. Not sure about their reliability metrics.
Nostr.wine requires additional payments for inbox and archival. Nostr.land has them included.
They also subsidize existing users’ cost with new users, which has not collapsed yet, but who knows when it will end :)
Also, Nostr.land uses NFDB, which has a significantly improved architecture than other relays, and allows scalable operation.

2025-05-19 15:39:03

- reply

From my testing the costs are not significantly different between say an influencer and an average user.
Not that it makes a dent when you have hundreds of users.
So each user gets billed how much their content costs to serve on average

2025-05-19 15:29:18

- reply

The cost of payment includes the data being served.
Fair use applies. So if you spam the relay with garbage, or use significantly more (and by that I mean very significantly) resources than everyone else, you might be asked to leave
Otherwise the cost per user is actually not variable too much.

2025-05-19 15:26:24

- reply

A nostr DB. Not really an acronym

2025-05-19 15:22:29

- reply

Administration and development costs, and economies of scale (or rather the inverse)
Also something big is coming that I am not going to spoil yet, that will make you think the current price is a steal :)

2025-05-19 15:12:58

- reply

Hosted service.

2025-05-19 15:12:07

- reply

This can happen during manufacturing or transit anywhere in the supply chain

2025-05-19 15:10:09

- reply

Paid relay.
Also archives your notes and a DM inbox.

2025-05-19 15:04:48

- reply

But for that you need a scalable relay… and only NFDB does that.

2025-05-19 15:01:04

✉️ Nostr.land now supports inbox for DMs.
With no additional relays, no price change, and no extra payments to keep track of.
Try now => https://nostr.land
If you don’t like it, money back within 30 days, no questions asked :)
#note1ay2…zwjw

2025-05-19 14:07:35

deploying more inboxes 👨‍💻
#note1ydc…gt2n

2025-05-19 13:53:08

- reply

it may be that primate does not support highlights

2025-05-19 13:48:18

- reply

nostr.at

2025-05-19 13:29:26

Are you sure your SE's arent backdoored, anon?
Many SEs used by HWWs do not include features for attestation of chip authenticity.
A look-alike chip that behaves identically, but has a backdoor can be swapped in at any point during the supply chain, and you wouldn't know. A significant amount of HWWs, including ones marketed as "ultra secure", are vulnerable.
https://i.nostr.build/UYhMaPojqIKyPXcJ.jpg
Normally, high quality SEs offer attestation and mutual authentication, where the manufacturers exchange keys, allowing the HWW to verify that the SE is in fact genuine, like so:
https://i.nostr.build/7VYMwAxHhNkMvrDn.jpg
Most HWWs instead use low-quality, cheap, insecure SEs that are vulnerable to this attack and others.
#bitcoin

2025-05-19 10:21:32

✨ NFDB is now rolled out for all nostr.land customers alongside free note archival.

2025-05-19 02:45:38

- reply

Yes

2025-05-18 23:42:59

also did I tell you that you do not need to pay for an archival relay like Cellar?
all of your notes are archived, no questions asked.
what are you waiting for? :)
#note1ay2…zwjw

2025-05-18 23:31:45

- reply

you sure?