LeoWandersleb
Leo Wandersleb

Or more generally do you think there are wallet devs that would losen up a bit when it comes to talking about competing products if such a ring signature standard existed on nostr? I'd like to provide/sponsor the tools for that via WalletScrutiny.

2025-04-24 23:00:08

- reply

Do you think you would comment on it under good protection of anonymity? Like "One of these 100 wallet developers thinks the following about this wallet product: ... -- signed with a ring signature".

2025-04-23 14:42:18

- reply

Categories and labels are short cuts. When confronted with more souls than you can meaningfully relate to - Dunbar's Number - 200 app. - you apply heuristics. When bumping into a crowd of people and you pick up the word "Bitcoin" here and "nail polish" there, your brain draws a ton of conclusions what to expect when joining this or that group. You label them inevitably. Humans discriminate all the time and sure, there might be surprises when you end up with the other group somehow but discrimination is ok. Just don't be rude in the process.

2025-04-23 14:34:30

- reply

Custodians are counter party risk and liquid aims at being one hell of a gigantic custodian.

2025-04-23 14:31:29

- reply

Ok. We are all slaves to our phones I guess.

2025-04-23 14:08:00

- reply

Would you mind commenting on Ginger Wallet? Would you trust it? Does it look like a rug pull to happen?

2025-04-23 14:07:00

- reply

Do you happen to eat at exactly 8am? Cause I learned and can confirm from own experience that on carbs, you get about 4h from meal to meal. Also only on carbs you get the feeling of wild hunger.

2025-04-23 14:00:15

- reply

Same with daylight savings time. Let everybody come up with their own seasonal schedules. Same with zoning laws. Why not use the office space after 5pm?

2025-04-23 00:55:34

- reply

Not in Chile. I guess there's less than 1 in 200 cars that are Teslas.

2025-04-23 00:36:19

- reply

Incoherent messages during a high stress time in one's life is not necessarily an indicator of malevolence. @npub10jn…vcrd sounds like he has at least a strong grudge though which hints at something more concrete than somebody being temporarily confused.

2025-04-23 00:34:06

- reply

She's a killer if we let her out without a bell but she's so playful. I can play fight with her for 20mins without a scratch.

2025-04-23 00:31:13

- reply

Parece que varios familiares van a ir entre pronto y Junio y le voy a pagar el pasaje a alguien que me va a llevar el gato, ahorrando 5mil dolares. Igual es un cacho. Todo el vuelo tiene que ser de un solo aerolínea y si el gato va en bodega, hay que tener escalas de un mínimo de 4.5h. Al checkin hay que dejar una hora extra también y los papeles del gato hay que conseguir en una ventana muy corta de una semana o algo entre ir al veterinario y al servicio de exportación.

2025-04-22 17:27:56

Hey, great! My airline refuses to let me bring along my tiny, little, harmless, cute cat and the first agency I asked would charge me $6100 to bring the cat door to door one way.

2025-04-22 15:01:56

- reply

Talking about popes?

2025-04-22 14:39:36

- reply

Watch it on x2.5 and then pretend you watched it like everyone else here seamingly. 😛

2025-04-22 04:54:40

Beautiful quote by Ayn Rand: "We can ignore reality but we cannot ignore the consequences of ignoring reality."

2025-04-21 21:18:53

- reply

Algo así :dancing_banana:

2025-04-21 21:10:48

- reply

Debian has now flatpak and snap integrated, too. It's a bit weird to me to have these other systems that are pretty incompatible with binary transparency I think. Neither of those has sparrow though.

2025-04-21 20:57:08

- reply

What ... are you talking about? I saw people sharing "I'm in danger" tweets of Maya and Maya sharing a welcome message from her newborn, asking to excuse the earlier confusion caused by her tweet. Why should I care beyond that?

2025-04-21 20:51:15

If you are using the latest Debian and your calculator app (gnome-calculator) is acting up since some time, disable your internet, start it up, go to the settings and tell it to never update currency exchange rates. This should fix that bug in this more than two years old package. Or poke Debian to update to a newer version.

2025-04-19 23:05:52

- reply

That's sarcasm, right?

2025-04-19 20:42:35

- reply

To prevent this, we need to come up with other, privacy preserving protocols.
Filtering should happen more in the periphery. So my PC should get my events 24/7 and my nostr client should query my PC.
Querying relays should not be linked to npubs. Protocols that require ID to query ar hostile to privacy even though they are portrait as the opposite. "Only you can find your nip4 DMs". The more private way is gift wraps or other such protocols. Gift wraps incur a burden on the infrastructure so storage and delivery of these events has to be paid in a private way, using nuts for example.

2025-04-19 19:05:39

- reply

The only private data relays should have in my opinion is what and when I'm querying. All I'm sending to the relay I want to be broadcast to the world. They should politely not log my IP but then again, it's my responsibility not to show it to them.
Any protocol that relies on relays keeping secrets in my eyes is flawed as the relay operator that leaks information will always have a financial edge over those that don't, either because he's directly getting paid to leak or because he invests less in not getting hacked.

2025-04-19 18:47:24

- reply

https://en.wikipedia.org/wiki/Kardashev_scale

2025-04-19 18:41:29

- reply

44 a day
til 4 4 4 k
yeah, rhymes good enough.

2025-04-19 18:35:27

- reply

WTF was your prompt?

2025-04-19 17:51:32

- reply

I like the question. GPT-4.1 came to this conclusion. I bet it's off by some orders of magnitude though.
https://npub1gm7tuvr9atc6u7q3gevjfeyfyvmrlul4y67k7u7hcxztz67ceexs078rf6.blossom.band/d6236e5160b35aef551a208c3e5e71fdca426cc8c175082632d94dff4cda0090.png

2025-04-19 17:32:39

- reply

Technically, 2 grams of any matter has the same energy: 40 trillion cal
https://npub1gm7tuvr9atc6u7q3gevjfeyfyvmrlul4y67k7u7hcxztz67ceexs078rf6.blossom.band/db363dc84c382e599cc011c134c398bd67e35d728fb6c500b38a5059b7d9eca3.png

2025-04-15 14:46:53

- reply

Did nostr have a private beta? For what nostr tries to achieve, this sounds antithetical so I wonder what pubky is doing.

2025-04-15 14:43:30

- reply

How can it be more strict than "This is a client and this is server wich we call relay."?

2025-04-15 14:41:03

- reply

I'm not a lawyer. I'm just speaking from the gut feeling which is certainly influenced by my German upbringing where we have less free speech than in the US.
I guess, the more you restrict "hate speech", the more you sensitize the population to the issue and then even moderate speech will sound like "hate speech".
Apparently there is no clear link between hate speech laws and actual physical violence. Is "hate speech" maybe a release valve that can also prevent actual acts of violence?

2025-04-15 04:34:24

- reply

So she did called for violence against a group of people for what individuals did. The "for all I care" makes it a bit less instructive. 2 years in jail is indeed a bit crazy if that's really all there is to it. :/

2025-04-15 01:18:36

- reply

If the anomalies in the least significant bits look random, they still might be an encrypted message and the later picture might contain an equally random looking key to decrypt the first picture. This could be an implementation for your scheme.

2025-04-15 01:14:55

- reply

What was the X tweet? If it was a plausible offer to pay to commit murder, with some precise coordinates, maybe she should get jailed? Or was it less?

2025-04-14 20:06:46

- reply

Yes but it's two steganographic messages hidden in two "plausible" human text messages in a way that each message on their own does not reveal to be a steganographic message on its own but in combination they reveal a secret. This adds a huge burden on the censor as the message filter now either has to scramble all messages or test them statefully.
But how is that different from the classic steganographic method of altering a picture to hide a message? If the censor knows the original image, it can catch the alteration and the embedded message but if the censor doesn't pay close attention, you can sneak this by as just a random picture.

2025-04-14 18:38:51

- reply

I mentioned you in this note:
#nevent1q…k8yn
which got exactly one reaction and no comments and now you are basically building what I proposed? I'm a bit confused but hope others jump onto this, too.

2025-04-14 18:35:02

- reply

Your post sounds like dunking on Wasabi. I was confused 😆

2025-04-14 18:29:42

- reply

But then you are just back doing steganography with cryptography. M4 contains the encrypted message, M5 the key, ... nothing new, right? So if adversary detects that M4 might contain data but then sees it's just gibberish, same as the M5 decryption key, the match between the two adds to the obscurity but the actual recipient would also need to understand where to look, so it's just steganography with extra steps.

2025-04-14 03:10:45

- reply

I might be missing something but if f is known to the adversary, how would the recipient have an edge at detecting M4 and M5?
How about publishing M5 in a Bitcoin OP_RETURN? M4 is some binary that allows for bit flips and M5 is the generator for a xor map.

2025-04-13 22:28:52

- reply

Substantiate it! Explain, why "fascist" is technically the right term and ask them to approve ;)

2025-04-13 17:47:59

- reply

I'm pretty sure there will be bots for that soon enough. Ask around in Japan, they already have pretty crazy toilets with all kinds of features. I wouldn't be surprised.

2025-04-13 17:46:22

- reply

I'm maybe not deep enough into these topics but isn't steganography generally censorable if the mechanism is understood? So you might publish M4 but censor would block M5 as it would generate M6 which is not allowed?

2025-04-13 15:39:51

- reply

Interesting. Maybe I'll reduce my vitD supplements from 5k IU to 1.5k?
The muscle issues look like a strong signal which he went over too quickly.

2025-04-13 15:32:48

@npub107j…ncxg is working on a client there?
#nevent1q…89ye
To my understanding it's using zaps as the only way to reply which has several down sides. Many users are not zap enabled either as sender or receiver and the zap event is sent by the LN node, not the author of the zap and you don't have threads. Of course, all this could be fixed with nut zaps but these are custodial - which most of normal zap wallets are, too.
That made me think of the situation over at Xitter:
A bunch of people try to get heard and stick out from the herd by paying $8/month (and doing some KYC) but it turns Xitter in a mere two-tier society. Now when some big influencers like Elon post something, there are always thousands of replies by top tier users, so "get heard for money" doesn't work neither.
What I want for nostr:
I want to be able to "boost" notes. As opposed to zapping the note, the zap would have to go somewhere else to signify an actual expenditure. On a reply to Alice, boosting should obviously pay to Alice for her to notice it but for top posts, boosting by zapping nostr infrastructure providers would be one possible choice.
This would be an incentive to implement this type of boosting in clients like @npub1wyu…87ez @npub12vk…pugg or @npub1xts…kk5s's clients. These clients could offer an option with every note posted to include a boost and provide a beneficiary dropdown, putting their own favorites on the top of the list but allowing to put any npub there.
People want to get heard and currently there is no way to get heard a bit more for money in nostr. Yes, big zaps make a bit of waves but when getting this attention, it might often even not be desired as the primary purpose was not to boost a message but to tip/support a creator. The attention gets drawn to the deep pockets tipper, not to the cool creator.
In that sense, this new kind of boosting should be possible anonymously "somebody boosted this post 1Msat" and it should be possible to boost existing posts that way.

2025-04-13 14:55:33

- reply

That's a client that lets you reply with zaps only? So no threads or can you zap the zaps?

2025-04-11 12:15:27

- reply

I heard, Black Mirror filed for copyright violations.

2025-04-10 14:48:02

- reply

Can you put a tariff on @npub17uj…jsw9, too, for the offense of not implementing nip-17?

2025-04-09 00:32:59

- reply

No way I'm going to buy a hardware that I know can change the TOS at any moment. Pay a hefty price and then learn you now have to provide additional KYC to use your fancy screen or something? No, thanks.

2025-04-09 00:27:55

- reply

Not sure I got the joke 😆

2025-04-08 03:10:52

- reply

My reply was to VR, which really isn't open at all.

2025-04-08 00:42:25

- reply

Wake me up when there is a decent option that can be tinkered with privately and with open source.

2025-04-07 20:43:48

- reply

Congrats! Can you come over for a minute?
BT on Linux is such a pain!

2025-04-07 20:34:53

- reply

Are you personally worried?

2025-04-06 22:50:37

- reply

Yeah, primal is not great for investigations. I'd prefer njump as an intermediate step or more flexibility to use my preferred client.

2025-04-06 21:48:49

Just testing something ...
#nevent1q…xvc7

2025-04-06 20:55:29

- reply

It's ... basic. Please add a link to open profiles in njump or in my browser client of choice. I'm pretty sure it shows many false positives.

2025-04-05 19:45:51

- reply

That's an interesting table! 48 is off the chart and people talk like it was kind of normal. Since I have a smart watch, I'm always looking for my resting heart rate and it never goes below 58. At my age, that's "excellent"? Ok, so jack is super human? Or he's really pushing for exactly that number with meditation and hypothermia or whatever.

2025-04-05 14:32:02

- reply

Happy Birthday! 🎂

2025-04-04 23:32:41

- reply

You sure love emojis.

2025-04-04 02:05:30

- reply

That looks like some markdown fencing is missing.
https://npub1gm7tuvr9atc6u7q3gevjfeyfyvmrlul4y67k7u7hcxztz67ceexs078rf6.blossom.band/a4d7af4d9a3ae6a82b7d3f3125b65bc8000a283318b9a510c17289ebdf868aa3.png

2025-04-03 19:02:46

- reply

They are like an intern that thinks he knows it all after three days on the job. Annoying know-it-alls.

2025-04-03 13:57:03

- reply

You're the interviewer or the bot trying to pass as a psychopath human?

2025-04-03 13:54:46

- reply

The inverse Turing test. Doesn't work if the LLM is prompted right.

2025-04-03 13:32:41

- reply

True even as a father of a 5yo 😄

2025-04-03 13:22:42

- reply

What?
Please elaborate! Are you working on a better cline?

2025-03-30 16:18:57

- reply

Sure, for some McDonalds app it won't be worth the trouble implementing unless they also engage on nostr with the users.

2025-03-30 16:17:48

- reply

I love nostr login if done right. They can use my npub as my account identifier and store related data in their database but I don't have to verify an email address or remember a password. Nobody can steal my password from them neither.

2025-03-29 18:17:36

- reply

Public data leaked? Seriously? No email addresses, no passwords? Doesn't sound big news worthy.

2025-03-29 00:27:33

- reply

I don't get why VPN providers all want me to run their software? Aren't they just "glorified relays" as @npub17fn…5ksh put it?

2025-03-28 16:55:52

- reply

So with Nord, my speed was 10Mbps up and 5 down. With Mullvad it's 30% slower. But now the IPv6 also resolves to the VPN location.
What I actually want is to find out if https://play.google.com/store/apps/details?id=com.bitgo.mobile is gone only for Chileans or for everybody and either Google is good at recognizing me even behind a VPN and with an "private" browser window or it's really gone for the US, too, despite https://app.sensortower.com/overview/com.bitgo.mobile?country=US&tab=ratings claiming otherwise.
I'm regularly freaking out over apps disappearing as I monitor thousands for WalletScrutiny and we list thousands as "removed" but ... how would I know for sure if Google tries everything to sabotage people from getting a complete picture?

2025-03-28 16:17:58

- reply

Will try it out. Nord did put me off when they needed me to verify my email address but I needed a very concrete detail - app availability in other countries - and didn't want to experiment too long.
Why do so many in the Bitcoin space recommend Nord then? They also accept bitcoin and of course I can put in an ephemeral email but still, for $12 I did at least expect it to shield my Chile IP from Google.

2025-03-28 16:05:31

- reply

Will you replace npm, too? You got some high goals!

2025-03-28 16:03:37

- reply

That's very acceptable execution times I would guess. Are the ts execution times much higher?

2025-03-28 15:55:09

I'm just now getting into VPN usage and I'm surprised how not straight forward it is.
So I paid NordVPN and downloaded these ovpn files and set my network manager to use these but to my surprise, IPv6 leaks my real location/country even if I disable IPv6 in the network manager for both the wired and the vpn connection? How can it be that easy to screw up VPN usage in 2025?

2025-03-28 15:51:33

- reply

The warning they added upon my initiative. I suggested to keep the repository up for posterity. Who knows who's using the library and with the repo disappearing, they might just wonder why it's gone.

2025-03-27 01:07:07

- reply

If this isn't a thing yet, I assume there will be a market for blossom servers where providers offer me to copy over all my media from other blossom servers.

2025-03-27 01:05:56

- reply

https://npub1gm7tuvr9atc6u7q3gevjfeyfyvmrlul4y67k7u7hcxztz67ceexs078rf6.blossom.band/a39f24d2c4372c2d6654f1a0272b8ef6a8f4042718051b68cc65b08ef0d2fd45.png
Well, content addressability and the nips around blossom allow me to delete a39f24d2c4372c2d6654f1a0272b8ef6a8f4042718051b68cc65b08ef0d2fd45 from your blossom server and put it on mine and my followers will find it. This is not true when my events reference nostr.build urls. So ... for the very practical purpose of switching hosting provider they are not at all the same.

2025-03-27 00:13:20

- reply

I know and I love you took on this challenge! I find it a bit pricey but I was happy to pay it to get this going. By over-paying for a service, others get the signal that there is demand and hopefully competition will drive the price down.
Long term, I just realized that I was putting my media files on an irreplaceable server while relays are replaceable as they should be. I like the integration with noStrudel. Just take a screenshot and paste it in the new note but it should be blossom such that once my media files are deleted from your servers, clients can find them on my new blossom server(s).
Now I'm confused as to why you don't push me to use your blossom.band server as @npub1der…xzpc pointed out. Isn't that exactly what I was asking for?

2025-03-26 15:02:55

So I'm staring at the plans of @npub1nxy…avr7 and wonder how much of a vendor lock-in I'm subscribing to here.
Media is not content-addressable. To my understanding, blossom is being used in nostr to have content-addressable media where migration to new blossom servers avoids vendor lock-in, right? Is nostr.build not offering this? What are the trade-offs as a user? Should I renew? Should I opt for blossom instead, going forward?
Even if I bite the bullet and pay $60, how much will it cost next year? I really don't like vendor lock-in.
https://i.nostr.build/Eq7BZeoJo2oYktly.png
@npub137c…k37w

2025-03-26 14:46:43

- reply

I wouldn't celebrate this detail though. If Satoshi actually was a government construct and we were all fooled to believe, Bitcoin was grassroots, cypherpunk, anti establishment but in reality it was the safety net for a crumbling petro dollar, these Patoshi coins will look like a premine.
My fear is that we learn some day that all these ups and downs in the Bitcoin rate were engineered to generate hype but not too much hype to ensure a smooth transition to a Bitcoin backed USD.
The Patoshi coins are only a part of the probably biggest wallet in Bitcoin but if that entity fits the narrative above, it potentially has closer to 5 million coins.

2025-03-26 03:20:56

- reply

I don't get why people read from anything but their follows list. You follows are my minions that filter the web for me. If it reaches me, it's possibly relevant. A global feed can only be a train wreck filled with spam.

2025-03-26 02:57:23

- reply

For our purpose, linkability would be ok as it would prevent some Sybil attack where one author pretends to be 20 but if it's vastly easier to have non-linkable ring signatures, that's ok, too.

2025-03-26 02:55:31

- reply

I'm maintaining walletscrutiny.com and the people most knowledgeable on bitcoin wallets are bitcoin wallet developers but they are also very reluctant to talk about the flaws of their competitors unless in private with a beer.
I want to provide a tool where they can establish to be one of 100 wallet developers and thus report as a self-accredited expert. So we would identify nostr accounts that work as wallet developers and each of them can then write as a member of that group anonymously.
So the scheme should not require all the wallet devs to participate in a setup ceremony and there should not be any secret setup neither. I need it to work for the first expert willing to throw a stone, with a set of npubs of his choice should my choice not be to their liking.

2025-03-26 00:35:16

- reply

They did delete the repo since I posted this and made a PR to update the Readme to point to the issue.
So do you know of any solid ring signature scheme for my use case? I think, "linkable" is ok but not required.
I just noticed, @npub12ek…tq0f is on nostr. He looked into porting what I think I would need to JS noble-curves last year: https://github.com/paulmillr/noble-curves/issues/146

2025-03-25 22:43:58

I'm happy to see that https://github.com/monero-project/urs is no more. Why it took many years to take this step is beyond me.
#nevent1q…6vav

2025-03-25 02:47:09

- reply

So I tried again and again I don't see the result. @npub1kmw…xqk9 @npub1dcc…qdql @npub1ye5…knpr
#nevent1q…geu2

2025-03-23 23:24:51

- reply

I've sent shorter events that got rejected by relays for their size.

2025-03-23 21:58:01

https://i.nostr.build/kra8cVqn99KQJRla.png
I like @npub16g4…kv4h too much. Given most funds are spent on Claude, a subscription would probably be worth it. But then again, PPQ is anonymous. And price will only come down, probably from PPQ fixing a bug or two in the API usage :D

2025-03-23 21:51:26

vibe coding? rather zombie coding. :( You can brainlessly press "ok" a hundred times and something resembling a product drops out but you turn into a zombie in the process.

2025-03-23 21:40:43

- reply

As Geyser Spirit picked up on the zap, I would prefer you figure out what went on first. There was a zap event emitted by you but it got lost? Was it not standard compliant, resulting in not showing up in noStrudel?

2025-03-23 18:59:36

The to date scariest thing I found out about Monero is that the people behind Monero host cryptographic tools that are only crypto theater. For years. And without an issue tracker, people taking Monero devs seriously will inevitably fall for the temptation to use these tools.
https://github.com/monero-project/urs promises:
"URS can be used to sign plaintext or binaries anonymously (among a group of known users). That is a user can sign a message, hiding among a group of known/registered users, that prevents the verifier from revealing the signer's identity other than knowing that it is in the set of registered users."
7 years ago, these claims were found to be false and the Monero devs never removed this repository or marked it as dangerous?
https://kewde.github.io/urs

2025-03-22 15:39:28

- reply

So you picked up on that zap. I'm sure I sent it but noStrudel doesn't pick it up? It doesn't show here neither https://npub1wyuh3scfgzqmxn709a2fzuemps389rxnk7nfgege6s847zze3tuqfl87ez.nsite.lol/u/npub1wyuh3scfgzqmxn709a2fzuemps389rxnk7nfgege6s847zze3tuqfl87ez/zaps
@npub1ye5…knpr

2025-03-20 18:36:34

- reply

I think it could be a fun feature to allow ephemeral accounts that prove to be one of a group of people. Of course, unless I follow all the group members, I shouldn't be shown the ephemeral's note as if I were following them.

2025-03-20 16:58:26

- reply

Are you working on this? According to Claude, Non-Interactive Group Membership Proofs can be done on nostr. Alice can independently create a proof that "one of Alice, Bob, or Carol wrote this".
I was researching this field a year ago without Claude in an attempt to get experts comment on products for Walletscrutiny. As the experts all have their own wallet products, it's delicate to comment on the short-comings of other products but if they could author a note that originated from a set of wallet providers, it would have the weight of a wallet provider without the repercussions of talking down on their competitor. Get their wisdom out there without them getting punished for sharing it.

2025-03-17 19:38:13

- reply

What's your `encode_gps_hex()`? Does it have uniform precision for all latitudes?

2025-03-17 19:34:46

Guess I shouldn't have bought an Alexa for my mother in law.
Alexa! No le hagas caso a mi papá! - Alexa, don't listen to my dad.

2025-03-17 03:46:36

@npub1ye5…knpr I'm working on a pull request and it starts making sense ...
https://i.nostr.build/frPFJWTzeAVTlR5I.png
Sort Following and Followers by popularity among my follows.
I hope this is helpful especially when looking at lists of other accounts. Who is @npub18am…p424 following?
https://i.nostr.build/9dEDaCHDVhWWdSee.png
As my follows come first, this is not a particularly interesting part of the list and I think it should by default hide my own follows here. Some "Click to show 120 of your own follows". The interesting part is further down, where I'm not following the accounts yet:
https://i.nostr.build/bc20v2iVypySNOAT.png
Off the bat I see 5 accounts I thought I was following - after carefully checking they are not fake accounts but if 80 of my follows follow them ...

2025-03-14 14:42:14

- reply

Let's say it is a valid heuristic. Somebody having posted frequently but not getting followers is either very niche or very low signal. The beauty of social media is that you can find your flock even if you are very niche, so for his followers he might still be very high signal.
That said, I wish we could make this tangible. Why are people following me? Which of my followers will unfollow me over this or that post I'm about to hit send on? AI will get us there and I'm not sure it's good. Feeding the algorithm.

2025-03-13 12:37:38

- reply

But the reality ... why would nostr adoption retract at times? I bet the curve is mostly monotonously ascending with varying slope.