bitgould
Dan Gould

obsessed with the bitcoin privacy problem, payjoin, snowmobile trails, and armchair 漢學

Public Key

npub1yevrvtp3xl42sq06usztudhleq8pdfsugw5frgaqg6lvfdewfx9q6zqrkl

NIP-05 Address

bitgould@bitgould.com

NIP-57 Address

bitgould@stacker.news

Profile Code

nprofile1qqszvkpk9scn064gq8awgp97xmlusrsk5cwy82y35wsyd0kykuhynzspz4mhxue69uhhyetvv9ujumt0wd68ytnsw43qz9thwden5te0v35hgar09ec82c30wfjkccten9vcv5

Publishing to

relay.mostr.pub

ditto.pub/relay

purplepag.es

Author Public Key

npub1yevrvtp3xl42sq06usztudhleq8pdfsugw5frgaqg6lvfdewfx9q6zqrkl

Show more details

Last Notes

2025-04-09 17:50:03

Payjo.in Directory Security Incident: Misconfiguration May Have Exposed Some Payjoin v1 Messages
Backwards compatible BIP 77 receives from BIP 78 senders made before April 2 may not have full common input heuristic protection
https://payjoindevkit.org/2025/04/08/payjo-in-redis-misconfiguration/

2025-04-03 15:32:16

- reply

Accompanying this release is payjoin-cli-0.1.0 Beta, which takes the reference implementation out of alpha since the Async Payjoin wire protocol is now presumed to be stable.
Release notes: https://github.com/payjoin/rust-payjoin/releases/tag/payjoin-cli-0.1.0

2025-04-03 03:18:50

- reply

ok the biggest issue is that to have an email server you need smtp. So you could build an alt but you’d need to convince all users to use nostr

2025-04-03 03:14:02

Bitcoin Dev mailing list is back up

2025-04-03 03:04:08

Explicit requirements for a mailing list alternative from Kanzure
#nevent1q…45u2

2025-04-03 02:57:15

- reply

Yes IMO the hardest thing is presenting it well

2025-04-03 00:55:52

- reply

We need to write a kickass presentation and deliver a demo. Someone to run the team is even better since payjoin implementations are being done at the hackathon at the same time

2025-04-03 00:43:55

- reply

MIT Bitcoin Expo THIS FRIDAY is offering a $2,500 decentralized application prize.
Remote OK. Nostr Bitcoin Dev Mailing List could definitely win. I’m recruiting help.
https://mitbitcoin.devpost.com/#prizes

2025-04-03 00:41:25

- reply

I wish I had a better alternative to suggest

2025-04-02 23:48:01

- reply

https://www.nobsbitcoin.com/bitcoin-developer-mailing-list-migrates-to-google-groups/

2025-04-02 23:11:41

- reply

#nevent1q…7her

2025-04-02 23:11:11

how the heck do I embed a note

2025-04-02 23:09:18

- reply

& what’s off-the-shelf way to submit a note for moderated approval?

2025-04-02 23:06:04

- reply

2 requirements for bitcoindev imo
1. email interface (nostr bridge could work)
2. moderation (at least a moderated view)

2025-04-02 22:58:33

- reply

This is what “I will make you obsolete” moments are made of

2025-04-02 22:56:24

Google’s official stance:
Bitcoin Dev is “unwanted”
https://m.primal.net/QCOA.jpg

2025-04-02 18:49:09

- reply

https://m.primal.net/QCCr.png

2025-04-02 18:32:17

Chat I think I need to eat a frisbee on stream

2025-04-02 14:04:53

- reply

May you share the apps that use Nostr for this? How are these made better by ID + signatures?

2025-04-02 14:04:02

- reply

No doubt making clients potential coordinators is a step toward better decentralization. But that’s not my question, which is: is lack of coordinator decentralization preventing people from using wasabi who otherwise would?

2025-04-02 05:12:13

- reply

The email interface is a requirement. Did somebody say bridge?

2025-04-02 05:10:07

MEV is just miner alpha and if that alpha either
gets to miners at the same time as everyone else or never gets leaked then it seems like the problem goes away
so just don’t leak it

2025-04-02 03:20:47

- reply

Is the availability of coordinators a constraint on adoption? I can’t remember any extended time when no coordinators were online.

2025-04-02 03:01:27

- reply

Big upgrade in those respects agree

2025-04-02 02:42:34

- reply

Which other stuff do you find more interesting, engaging, or otherwise useful?

2025-04-02 02:42:00

Does nostr in current form sufficiently replace mailing lists? In audience quality for me, almost. In pure reach maybe not. Gotta try highlighter. But then how do I link to the rascal post from my own host?

2025-04-02 02:26:41

- reply

Thanks for the reminder, @nprofile…vtcc told me to set up npub.cash so I just set it up now

2025-04-02 00:48:33

Saying the “other stuff” on nostr is more important than censorship resistant social media is like saying blockchain technology is more important than bitcoin

2025-04-01 20:11:22

Nostr boils down to a censorship resistant comms layer. Applying it to batched transaction coordination begs the question: Is coordination censorship the bottleneck to adoption?

2025-04-01 15:18:33

Payjoin Probing Attacks: Facts, Mitigations, and Why Payjoin Still Wins for Privacy
https://payjoindevkit.org/2025/03/31/payjoin-probing-attacks/
https://m.primal.net/QAkk.png

2025-03-30 14:44:28

- reply

2025-03-28 14:15:20

- reply

Gonna be good

2025-03-21 22:58:39

- reply

when you leave a vacuum the barbarians arrive

2025-02-22 16:53:45

- reply

Judgy in that limiting what is accepted in one instance of writing saves the time to scale to hopefully many readers

2025-02-21 22:50:49

My repository is a temple

2025-01-30 18:18:48

Loks like Tor’s twitter got pwnd

2025-01-23 23:43:59

- reply

news to me, wow

2025-01-23 14:35:08

- reply

Love to see so much progress and well laid plans 💚

2025-01-21 23:58:29

Ross Ulbricht, Silk Road operator granted a full and unconditional pardon https://image.nostr.build/5cc463c10157cbe152e78088c77bd1c64dd8493e8d3f6ddfd19632c6bf78890a.jpg

2025-01-19 22:31:10

- reply

Thanks for sharing this hopeful, positive news

2025-01-16 14:54:10

- reply

Republic of Bits

2025-01-16 14:51:18

We’re building the Republic of Letters 2.0

2025-01-12 23:15:40

- reply

For sure
We’ve done it for opens, which perhaps you’ve seen, but a splice could work the same way

2024-12-31 17:37:44

- reply

Bitcoin can. 🗽

2024-12-31 04:09:42

- reply

Payjoin v2 is backwards compatible, so Bull Bitcoin Mobile can pay BTCPay Payjoins and vice versa as long as the v2 client stays online. Looking forward to exploring full BTCPay v2 support in the future.

2024-12-31 02:54:15

- reply

You can always make naive transactions as you always have

2024-12-31 00:55:15

- reply

Not really, since coinjoins have an overt signature that can be identified as a coinjoin. Payjoin looks identical to many other types of typical transactions that any wallet would mak before payjoin existed.
The Anonymity Set metric claimed to measure coinjoins isn’t robust since your peers in the join can deteriorate it by revealing themselves. The way it has been deployed makes no guarantees about the costs an attacker would need to pay to violate your privacy. Not to say anonymity sets aren’t real, they are, but the way that word has been applied has been deceiving.

2024-12-30 20:06:46

- reply

“Anonymity set” as understood in legacy CoinJoin parlance is a bogus half-baked idea that breaks down as soon as transfers get made. this iteration of payjoin doesn’t address that. It breaks Common Input Heuristic.

2024-12-30 18:39:02

- reply

https://image.nostr.build/a8d2088dec61c4e56b7b3a33b6e4af05e036d5944c9d6cef2085bbc521dea9aa.jpg

2024-12-30 18:36:25

- reply

The sender customarily offers to pay the fee for a receiver to include an input to break CIH, so payjoin does make spending this dust economical. Spending dust becomes valuable to the sender to break CIH.

2024-12-29 21:07:54

- reply

not solve, but its batching can make the cost to spend a UTXO less

2024-12-29 20:35:08

- reply

TIL Which is great but I can’t enforce it as a receiver afaict?

2024-12-29 20:19:01

Zaps need to be blind and only reveal relative ranking

2024-12-28 23:10:13

- reply

Lightning is a vital component of Bitcoin adoption but doesn’t break Common Input Heuristic on that big UTXO spend. Payjoin does.

2024-12-28 17:44:47

Send and receive Async Payjoin from your Android phone. No server hosting required.
Backwards-compatible with Payjoin v1 in BlueWallet, Sparrow, BTCPay and others #note1v0d…hncu

2024-12-19 20:17:32

DOES IT GET BIGGER THAN THIS!? #note1960…9z7s

2024-12-18 04:25:27

- reply

@npub1e2a…8a4l

2024-12-18 03:48:41

- reply

Yes varial is when the board rotates (a shuv it) relative to you. I think the first would be 180 varial flip and the latter differentiated by frontside/backside by whichever side faces forward mid spin @npub1yrn…k5cx knows. e.g in a frontside [180] varial heelflip you face forward in the middle of a 180, board spins the same way and ends up 360 turned around. Oh man where is the article on naming skateboard tricks when you need it

2024-12-18 02:17:59

- reply

This is a varial heel where the board spins 180 independent of you. a 180 heel is where your body rotates but the board only flips under your feet and spins with you.

2024-12-11 22:58:45

Is this emergent consensus? https://image.nostr.build/0f5e106ec452f8bbe0e17d69bd5d049f16f913e6c6e35b50922472d205a9a85a.jpg

2024-12-11 17:52:58

@npub1spr…8s72 @npub185h…wrdp Thank you for entrusting me to foster Grumpy at rust-bitcoin Summit. He found his forever home at MIT DCI https://image.nostr.build/8c83d57efc9f69baa79196283b37c74148902137c7005a41bf114261ca05bdbb.jpg

2024-12-04 16:11:35

- reply

@npub1s0v…pq6j keeps hinting at a blurry target that looks like this

2024-11-10 05:01:22

- reply

@npub1xll…le2c https://image.nostr.build/5e978436eeb4584624fb4f7706370ae789a1e81e2ac1f60bfd3852aa7f4d1082.jpg

2024-11-09 14:40:45

- reply

watching where?

2024-11-01 04:06:54

- reply

https://image.nostr.build/cf53b30ca4949f7f1b2552291104a6c0bbaa50e2b2a266a53c632095401ded5d.jpg

2024-10-31 18:33:29

- reply

https://image.nostr.build/c697012e87259a8ed22442dd879166026c7896eb142d607b32758406fd2ed1da.jpg

2024-10-31 16:39:31

- reply

gotta go FAST

2024-10-09 15:52:53

has generative ai given rise to a new type of software worker who is neither a developer nor applies engineering principles yet produces results as a product mainly of extracting results from software?

2024-08-21 15:31:54

- reply

How did you find Erik?

2024-08-12 16:00:44

- reply

https://bitcoindevkit.org/blog/_2024-q2-update/ percent-encoding gone rogue

2024-08-11 16:25:01

- reply

I think they do with a bit of additional kyc and manual in-app bitcoin purchase https://help.venmo.com/hc/en-us/articles/16145303480595-Crypto-Transfers

2024-08-10 14:38:40

- reply

I’m glad twitter broke away from the mainstream and at the same time recognize the incentives are broken

2024-08-06 13:26:20

- reply

curious if you’d have luck asking them to send bitcoin from venmo

2024-08-02 23:23:50

- reply

Cool vape

2024-07-22 18:15:30

- reply

I’ve seen no kyc regulated financial services are viable for small amounts (i.e. less than $1k). Could an institution offer a mint and somehow cap amounts with range proofs?

2024-07-22 16:02:53

- reply

Humongous congrats to all of the contributors and to everyone downstream who’ll be able to update without taking painkillers after.
What a W.

2024-07-22 14:14:01

- reply

Must we assume the server does no work on behalf of the user? Is it it possible to have a server do more and explicitly advertise NIP-X support or is that not Nostrly?

2024-07-18 18:51:28

- reply

Using Payjoin for better batching of all sorts of activity is the goal. Sounds like you just get it 🔥
Any major snags or changes to propose?

2024-07-18 18:31:31

Putting the reps in with Payjoin Dev Kit I see 🫡 #note1x74…pr6a

2024-07-18 16:27:50

- reply

The BIP recommends Tor or VPN for private DNS querying. Was ODoH considered? I assume it was avoided because it tries to avoid HTTP, but in web clients of course HTTP is available

2024-07-17 20:52:24

- reply

The OHTTP relay doesn’t terminate TLS and instead depends on a reverse proxy to do so. nginx-full configuration can terminate the TCP stream but e.g caddy can only terminate at the HTTP layer. Not sure how start9 handles TLS termination for those who want it to be reachable by domain.

2024-07-17 18:03:41

- reply

probably. getting tls termination right on a raw tcp stream is the tricky part

2024-07-17 17:48:52

Had some new blood deploy an OHTTP Relay yesterday. Access to many resources Bitcoin and beyond are about to level up privacy.

2024-07-14 21:13:08

- reply

Congratulations to you

2024-06-30 01:28:37

Prediction markets should be sats denominated. What’s blocking this?

2024-06-27 16:09:11

- reply

I think I confused MASQUE requirements with OHTTP requirements. Big if true.

2024-06-27 15:11:11

- reply

afaiu WebSocket unfortunately isn’t actually HTTP, but a hack to get TCP communication working that breaks out of HTTP semantics. MASQUE requires data to be sent in HTTP.

2024-06-26 03:09:13

- reply

The difficulty with proxying arbitrary traffic like Apple does is that an attacker can flood DoS traffic behind protection. That’s why OHTTP specs 1:1 relay server to gateway server. OHTTP could even work for general Nostr if it were available over WebTransport instead of WebSocket.

2024-06-21 18:24:44

- reply

https://youtu.be/FzJTvAwg_is?si=CbN3vjfmZEh33QrU

2024-06-20 15:42:46

- reply

OP_CAT is proposed taproot stuff.
Concatenating makes it possible to transform data to be used by both mathops and sigops within taproot script. I’m aware of no other deployed opcode that bridges these two worlds.

2024-06-20 14:56:59

- reply

There is no deployed opcode that bridges math opcodes (32 bits input) with signature opcodes (>32 bits input). OP_CAT is the simplest proposal I know of that makes this, and thus simple transaction introspection, possible.

2024-06-20 14:41:49

Why doesn’t Nostr have encrypted messaging on par with Signal yet? @npub1jy2…9p6d explains https://blog.yonson.dev/log/2024-06-vol2/

2024-06-13 18:58:25

- reply

There’s such a vast creative opportunity for style between a hoodie and and a dark suit with oxfords that’s slept on. Few.

2024-06-12 13:32:13

- reply

sorry Yegor

2024-06-11 01:19:34

Apple is relying on Oblivious HTTP for IP address protection too, not just Payjoin #note18ha…zwkk

2024-05-26 14:17:15

- reply

BIP 78 is Payjoin v1
BIP 77 is Payjoin V2 (an open draft PR)

2024-05-26 04:13:48

- reply

Neither up- nor downgrade, just another flavor. Payjoin keeps details of an actual payment private from third parties. Old school equal-amount CoinJoin (including Wasabi 2) keeps earlier history private from a second party, but payments thereafter leak details.
Payjoin is an incremental change to boost the privacy of the whole network, not just for an individual.

2024-05-26 04:10:41

- reply

Silent payments and payjoin can already work together. Payjoin fixes common imput ownership heuristic and silent payments fixes address reuse. ¿Porqué no los dos?

2024-05-23 05:37:14

The simplest way to break the sole privacy problem Satoshi left in the whitepaper 🫱 #note1zyq…f0yu

2024-05-09 13:47:34

- reply

“If you can’t be first in a category set up a new category you can be first in” — 22 Immutable Laws of Marketing