hodlbod

Christian Bitcoiner and developer of coracle.social. Learn more at info.coracle.social.

Merch is available at https://geyser.fund/project/coracle/rewards

Public Key

npub1jlrs53pkdfjnts29kveljul2sm0actt6n8dxrrzqcersttvcuv3qdjynqn

NIP-05 Address

hodlbod@coracle.social

NIP-57 Address

hodlbod@getalby.com

Profile Code

nprofile1qqsf03c2gsmx5ef4c9zmxvlew04gdh7u94afnknp33qvv3c94kvwxgspp4mhxue69uhkummn9ekx7mqpupmhxue69uhhyetvv9ujuerpd46hxtnfduhj2v3swaehxw309aex2mrp0yhxumm5daeks6fwwa5kute9xgc8wumn8ghj7mn0wvhxcmmv9ujnyvrhwden5te0wfjkccte9eekjctdwd68ytnrdakj7ffjxpmhxue69uhhyetvv9ujuvrcvd5xzapwvdhk6te9xgc8wumn8ghj7mnxwfjkccte9eshqup0y5erqamnwvaz7tmjv4kxz7tjwvhxumm5daeks6fwwa5kute9xgc8wumn8ghj7un9d3shjtnwv4u8getj0ghxxmmd9ujnyvrhwden5te0vejkuunfwgkhxtnwda6x7umgdyh8w6twk2vfpw

Publishing to

nos.lol

relay.damus.io/%20wss://relay.notoshi.win/%20wss://nos.lol/%20wss://relay.siamstr.com/%20wss://relay.0xchat.com/%20wss://nfrelay.app/%20wss://relayrs.notoshi.win/%20wss://relay.nexterz.com/%20wss://fenrir-s.notoshi.win

relay.nos.social

Author Public Key

npub1jlrs53pkdfjnts29kveljul2sm0actt6n8dxrrzqcersttvcuv3qdjynqn

Show more details

Last Notes

2025-05-25 02:17:39

- reply

Read this as "Zionist National Park" 😂

2025-05-23 21:12:14

- reply

No, because relays don't know who sent the message

2025-05-23 19:37:12

- reply

I think my problem is that I think by coding. It makes it very uncomfortable to switch to planning mode and let someone else have all the fun of actually building. But I think this is the right way to use it.

2025-05-23 19:06:39

Seems to me effective vibe coding is less about telling the llm what to do than creating an environment in which it can thrive. Just like any form of life it has to exist within a given context in order to orient itself, otherwise it is without purpose and only represents mere possibility. The job of the vibe coder is to allow the llm to self actualize.
But don't listen to me yet, all my vibez are garbage so far.

2025-05-23 15:15:48

Are there any clients out there that have solved the NIP 17 spam problem from a UX standpoint? It would be nice to separate "requests" into requests from reputable people in your network (based on wot or pow) and requests that are unlikely to be worth your time.

2025-05-22 13:41:35

- reply

Tell your kids they can eat them

2025-05-21 02:43:12

- reply

The relay implementation is the main problem. But NIP 29 also requires relay support (translating group create/edit into metadata) when it could have been incidental (as it is in NIP 28 as it happens).

2025-05-21 01:55:39

- reply

Coracle v1 is so back

2025-05-21 01:55:11

- reply

Au contraire, that's what I like most about it. NIP 28 will allow me to use less opinionated relays (that don't rely on RPC calls that have to be supported by the implementation).

2025-05-21 01:10:50

Strongly considering abandoning nip 29 for nip 28 if you can believe it

2025-05-20 19:25:48

- reply

I'll look into making it fail more gracefully. There is a trade-off between scope and trust though, and for coracle and flotilla I'm on the wide scope and high trust side of things. A lot of these approvals are used to probe relays to figure out what the user is allowed to do. I don't think every client should necessarily be sparing about signatures. "Sign everything" is a valid mode for some applications.

2025-05-20 17:21:46

- reply

Lists should live on the user's outbox relays, the goal of compass is to have the minimum setup that allows for finding the correct relays to query based on the outbox model.

2025-05-20 15:46:49

- reply

could be

2025-05-19 16:50:48

- reply

Just pushed an update to anchor, give it a shot

2025-05-19 16:08:30

- reply

Hash databases would definitely be better, and might help the maintainer avoid liability, but public hash databases (in particular for fuzzy hashes) can make it possible for attackers to reverse-engineer the hashing algorithm to craft payloads that avoid matching.

2025-05-19 16:02:59

- reply

Your point about edits is hurtful and insensitive

2025-05-17 20:21:59

@nprofile…p59r I think you have a caching bug on Fountain, episodes that have been deleted are still showing up on the @nprofile…h9ar feed

2025-05-17 13:41:55

- reply

I haven't had to deal with this yet, but my understanding is that in the US at least you're not responsible if you don't host it. Of course, cloudflare is a private company and they can do whatever they want with your account.
Implementing censorship lists in FOSS may actually be illegal (again in the US), because it can be construed as "advertising" CSAM. Same thing for 1984 reports, which can be used to find rather than avoid content. The rules are stupid and set us up for failure. IFTAS has been doing some work in this area creating resources for activity pub admins, but they mostly have to do with who not to federate with.

2025-05-17 01:07:54

I've been using regular shaving cream for years. Today I finally looked at the label and saw sodium lauryl sulfate and propane. But thanks to @nprofile…2tmg and the circle P I knew just what to do: visit soapminer.com and trade a few precious sats for pine tar tallow soap.

2025-05-16 16:54:07

the internet is a dog's breakfast
always on
silenced, scrutinized, leave a review
never off
abandoned, harried, simulated
authentic fakery
counterfeit living
attention absorbed, inner externalized, meaning mocked
what was is what I am
what I am is what will be
remember, in order to become
imagine, in order to act
memory stagnates
imagination wanders
inertia? or chaos
decline, decay, or
the queering of the self
or:
roots and leaves
Chesterton's fence, and new ones too
I am not alone
reality is witnessed
politics is for virtue
politics is for happiness
we build the city
and melt into its form
the rule of man
the rule of man
becoming the image
measured, weighed, wanting
the gathering of form exports chaos
inertia. nirvana. death.
just wait
spoken
nature groans
to be filled
with what?
God speaks: freedom
man answers
Man speaks: freedom
nature answers
created, redeemed
suspended, enveloped
transcendence: reality
the fire on the altar
the garden in the city
a crown on the forehead
work is prayer
a whole, burnt offering
unmade, remade, revealed
the internet
unmakes: a more perfect liquefaction
remakes: the digital native
reveals: the sovereign individual
politics, culture, community
yes, but
technology reformed

2025-05-16 16:53:24

- reply

Agreed, such a thing is desperately needed

2025-05-16 16:39:03

- reply

That would be ideal, but it's probably more of a job for clients helping users pick their relays. I've wanted to build a relay management client for a long time that checks relay availability, specs, policy, etc (directly and via nip 66), as well as probing the relay for user access. Then, warning the user if a relay goes down or misbehaves, and migrating notes back and forth when selections change. Clients shouldn't duct-tape the network together with broken heuristics if users can't be bothered to make good relay selections.

2025-05-16 15:48:29

To contextualize the adoption of cryptography:
- Public key crypto was invented in 1976
- Bitcoin was invented in 2009, 33 years later
- In 2025 (49 years later), cryptography is still a niche topic
- The printing press was invented around 1440
- By 1470 (30 years later), a handful of presses had been established in major cities
- In 1500 (60 years later), there were only 417 presses
- By the 1550s (110 years later), printing presses were in use globally
Transformational technologies go through a period of obscurity, then centralized control, then eventually become universally accessible. My hope is that we are just coming out of the centralized control phase of cryptography and the internet.

2025-05-16 15:22:50

- reply

Use backticks. Not linkifying nostr entities without nostr: prefixes is like not linkifying example.com/my/path/here. Hyperlinks aren't invasive, and they're helpful. Expecting links to always have a protocol in front of them isn't really realistic. People do copy and paste non-prefixed entities, and they often type non-prefixed domain names.

2025-05-16 15:16:03

- reply

It depends on where you would expect the note to "belong". In most cases, you would encode the nevent with 3-5 of the author's "write" relays, pulled from their NIP 65 10002 event. In some cases, an event might "belong" elsewhere, for example with NIP 29 communities, where a note is posted to a community relay.
For the examples you mentioned, the second example includes a hint for finding the e-tagged event, not the cited event itself. The hint is also not ideal, because it uses the event author's relay, not one of @nprofile…gqlc's relays (he doesn't have relay.primal.net in his 10002), but it does work because primal happens to have the note in question.
The first example doesn't make any sense, I don't know what `r` tags mean when applied to kind 1. NIP 65 only defines `r` tags applied to kind 10002, not any other event.

2025-05-16 14:02:34

"All the labor of man is for his mouth, and yet the soul is not satisfied."

2025-05-16 13:59:35

- reply

I have, but don't feel strongly either way. I don't know if vopyleft matters much for nostr software, since the whole idea is to have multiple implementations. But for foundational things like khatru, strfry, it might make more sense? I should take a listen.

2025-05-16 12:57:53

- reply

I tried, but it was a bad fit. Eventually switched to https://github.com/nostr-protocol/nips/pull/879

2025-05-16 12:57:28

- reply

This one is better, since it doesn't smash everything into a single kind: https://github.com/nostr-protocol/nips/pull/879

2025-05-16 04:21:19

- reply

Sad, it was so good in its prime. Of course, it was probably a result of exploiting volunteers for fake karma. But I still post questions there every so often.

2025-05-15 23:10:45

- reply

And your nostr feed appreciates you

2025-05-15 23:10:36

- reply

Interesting library, I might start using that

2025-05-15 23:03:33

- reply

Neat, that's what I was thinking of doing, sort of stupid but the way pnpm handles peer dependency ambiguity seems annoying (if correct)

2025-05-15 23:02:02

- reply

This doesn't solve diamond dependencies though right? Where you have multiple versions of the same library included, bloating your bundle (or worse, having multiple copies of state)

2025-05-15 23:01:25

- reply

Does this have time-based cache invalidation? The problem I've run into with checking the cache first is you don't know if there's a new version of a replaceable event

2025-05-15 22:24:56

- reply

@nprofile…yuzs

2025-05-15 22:24:37

- reply

@nprofile…v5l9 @nprofile…3pwc

2025-05-15 22:24:25

Should I use peerDependencies when writing multiple related javascript libraries, or lockstep versioning? Both seem annoying.

2025-05-15 17:11:02

- reply

I am using router to sync with purplepag.es and relay.nostr.band, so it should be reasonably complete. I'm using supported_nips = [65] to signal this, but it wouldn't hurt to be more explicit

2025-05-15 16:41:29

- reply

Does it store kind 10002? Because that should really be the thing that gets indexed, rather than profiles (although that's also helpful). Also, I'm not sure what you mean by lightweight, a blossom server is out of scope for what I'm trying to do. Although the fact that it's dockerized does make it easier to deploy.

2025-05-15 16:20:53

New project just released: Compass 🧭
For a long time I've wondered how bad things would be if @nprofile…j6hr's wss://purplepag.es relay went down, since it's the only dedicated kind 10002 indexer I'm aware of, and is heavily relied on for bootstrapping user relay selections, which is a key part of keeping nostr decentralized.
So I stood up another one at wss://indexer.coracle.social. Regular users don't need to do anything, but I encourage client developers to add this to your list of relays you check for NIP 65 kind 10002 relay selections.
I've also open-sourced the project at https://github.com/coracle-social/compass so anyone who wants to can run their own.
The project also supports mirroring other indexers via `strfry router`, but I have left that as an opt-in feature. Unless you expect significant load on your indexer, mirroring would only increase the number of unnecessary connections made to other indexers, so please be considerate when setting up mirrors.

2025-05-14 21:42:44

Had to use discord today, and wow it is evil. The notifications bell showed a red dot, so I clicked on it. No notifications, but a non-default "for you" tab showed a notification dot, so I clicked on it. The dot then disappeared, and I got a nice fiendly [sic] "Nothing here yet" message.
Treat your users with respect.

2025-05-14 21:40:13

- reply

This one looks pretty custom too, I tried it and got access denied for reqs and chat messages. If you're able to give me access I can try again

2025-05-14 21:10:07

- reply

Yeah, I'm switching to just a regular VPS but now it's too underpowered to build strfry 🤷‍♂️

2025-05-14 20:50:40

'nother Coracle version out (0.6.17) 🐠
* Fix reaction notifications crash
* Show web of trust badge on DM items
* Make name on messages clickable
* Remove duplicate dependencies
* Add relays to note options form

2025-05-14 20:49:40

- reply

That makes a lot of sense, and yeah, a lot of this comes from me trying to deploy strfry/lmdb on a PaaS 😂

2025-05-14 20:30:08

- reply

Yeah, I get that containers allow the use of shared resources on a single host. The problem is that the same pattern has been used (and nested) in many places where it makes no sense. The render problem is that they support deploying dockerfiles, but not configuring the command to run the container on the host, which means you can't map volumes. The workaround is also really weird: https://community.render.com/t/map-disk-to-docker/4707/5

2025-05-14 18:03:35

- reply

Just another layer to learn/troubleshoot/have incomplete support for (cf render.com docker volume support)

2025-05-14 17:07:32

- reply

No, I've been using docker for 10 years off and on, it doesn't solve any real problems (that I personally have)

2025-05-14 15:16:55

- reply

I can vouch, I'm very happy with @nprofile…qnha's work

2025-05-14 13:05:58

- reply

Yeah, I know

2025-05-14 13:05:01

- reply

This is fixed on web, new version coming to android today

2025-05-14 03:26:26

- reply

I attempted using flotilla

2025-05-13 22:21:35

- reply

That's one of the biggest takeaways for me as well, incredibly small groups of idealists can have a massive impact

2025-05-13 21:44:38

- reply

Do you think that nostr is doing something novel in the area of making public key cryptography accessible and useful to regular people? Or is it just the latest doomed attempt at achieving the aspirations of crypto-anarchy?

2025-05-13 19:59:35

- reply

Definitely a factor

2025-05-13 18:53:52

I'm reading a history of asymmetric cryptography right now ("Crypto" by Steven Levy), and my mind is being repeatedly blown by the origins, odds, and success of the movement. Everything we're doing with nostr started in the 1970's! And yet we somehow still don't have widely-used, decentralized electronic mail that checks both boxes of the original RSA paper:
> we must ensure that two important properties of the current “paper mail” system are preserved: (a) messages are private, and (b) messages can be signed.
The question that keeps coming to mind is this: what happened between 1996 and 2009? Once individual rights to cryptography was established, did the movement die out? Why did no one build out access to cryptography for the average internet user? Yes, SSL is ubiquitous, but it's still controlled by a cabal of root certificate issuers.
I know there was ongoing work that led to bitcoin, and XMPP is an obvious exception, but even so I am stunned that 50 years after the invention of public key cryptography we still don't have widespread, meaningful adoption. Keys are limited to technical users, and encryption is mediated and undermined by centralized platforms.
For those with some perspective on this history: are we in the midst of a cryptography renaissance? Did bitcoin kick off a resurgence of interest in digital privacy? Or is that just my own bias at play?

2025-05-13 17:44:37

- reply

Why would that have any effect? Best thing is to just ignore them

2025-05-13 17:33:44

- reply

Just did some testing, nostr.land seems to work fine on coracle, but it rejects messages sent via flotilla because they use a `-` tag (even if the author is the one who is authenticated)

2025-05-13 17:03:55

- reply

Attempted it this morning via nip 46 and it didn't work. Hopfully @nprofile…4248 can figure it out, from what I understand ios makes things difficult.

2025-05-13 15:05:51

- reply

Thanks, it's what I've always wanted

2025-05-13 15:03:34

- reply

I'm aware. PSA to people using clients that don't show web of trust indicators: use a client that shows web of trust indicators. For everyone else: mute @nprofile…5z0u

2025-05-13 13:04:12

- reply

Which relay?

2025-05-13 02:59:26

- reply

No, but we eeally need one. My guess with nsec.app is that ios is picky about letting safari come to the foreground. @nprofile…mxwm would probably know more

2025-05-13 02:56:10

- reply

You have to have a community you actually want to join. The popular relays being cluttered is a symptom of too few people self hosting their groups. Which relays are failing for you?

2025-05-13 02:53:29

- reply

Custom emojis are distinct from emoji reactions. Custom emojis use custom shortcodes/urls rather than standard rmojis, either in reactions (which aren't surfaced much in coracle) or note contents

2025-05-13 00:03:09

One thing you guys didn't really touch on is that neuralink would not actually disintermediate thought at all, any more than uploading our brains into the cloud would result in anything more than merely simulated consciousness. Rather, human thought would be reduced to a data transfer protocol (instead of spoken language), and would take on the form and limitations of the same — meanwhile, neuralink itself would have access to your thoughts, and would no doubt monetize it for its own benefit.
https://fountain.fm/episode/1yfcv3jLZulh14mSTfXZ

2025-05-12 22:18:14

Coracle 0.6.16 with some minor updates, one of which has been on my list for literal years (custom emoji rendering):
* Add support for editing WOT feeds
* Change default blossom servers
* Add support for custom emojis
* Fix note deduplication
Prost

2025-05-12 20:56:36

Just scored 66 points in Nostr Snake! 🐍⚡ #NostrSnakeScore Play at https://NostrSnake.fun

2025-05-12 17:18:22

- reply

BTW new version is on web, I'll release a new android version later today

2025-05-12 17:18:05

- reply

Just switched the default blossom server to nostr.build, which should work better. For the layout thing, are you sure you're on the latest version (0.6.15)? This is due to "safe inset offsets" on android and ios, where newer phones let content bleed into the navigation areas. I've released a few versions trying to fix this recently.

2025-05-09 21:09:58

So far, no one has signed up for email digests via anchor.coracle.social 🤔
I understand not wanting to share your bunker url or email address with me, but I will say that I'm sure enjoying getting digests of my feeds:
https://hbr.coracle.social/a8f575f71c1bc85fb11febf02307ae97130e543aed05b5aa1ceb8627f8e0cd4e.png

2025-05-09 20:02:50

- reply

anchor.coracle.social is a micro-app for email notifications based on coracle custom feeds

2025-05-09 19:57:23

- reply

For sure it is this week, I think I've released 2 new versions of coracle, 3 of flotilla, and one entirely new app

2025-05-09 19:49:26

New version of Coracle is out: 0.6.15 — this one is just more QoL improvements and bugfixes — the big one this time is better blossom support (and dropping nip 96!)
* Fix safe areas more
* Improve remote signing
* Drop nip 96 support
* Use user blossom servers
* Improve profile edit page
* Avoid duplicate notes in feeds

2025-05-09 19:10:07

Just added Flotilla to alternativeto.net — do me (and nostr) a solid by going there and liking the app: https://alternativeto.net/software/flotilla-chat/about/

2025-05-09 17:01:38

- reply

> And maybe college, as we know it, has reached its end.
It definitely has. I hope what replaces it will be more meditative, humanistic, and dignifying, rather than more utilitarianism.

2025-05-09 17:00:09

Erik Hoel suggests:
"In my ideal society, laws dictate that all digital devices have a built-in “Sunday mode,” activated automatically, shutting down everything but GPS and calls. Major websites reject all incoming traffic. No emails are sent. Outside, the silent world becomes filled with voices once more."
Apart from the obvious centralization concerns (and loss of emergency services), I think this is a fantastic idea. Maybe I'll turn Coracle off on Sundays 🤔

2025-05-09 16:50:59

So apparently college students are one-shotting essays with LLMs and teachers are quitting because "they want more from life than grading an AI’s essays."
Erik Hoel's solution is to monitor the process of creating an essay rather than just judging the output. Not a terrible idea, but it strikes me as a pretty complex (and tech-dependent) thing to do.
We already have this technology though — it's called _talking_ to people. Socratic dialogue has been the gold standard of learning since forever, and is impossible to fake (particularly if you're in the room together).
At the small college I went to, we had "recitations" every Thursday/Friday with our professors where we talked about the week's readings. They were the best part of the week because we got to hear directly from our professor, and articulate for ourselves what we got out of the reading. The problem is that this approach doesn't scale — but that's part of what makes it worthwhile.

2025-05-09 16:23:32

- reply

I don't see that that makes a difference, they're paying per byte right?

2025-05-09 16:20:53

- reply

They can already do that by sending legitimate transactions back and forth between wallets

2025-05-09 16:01:07

- reply

That won't happen, because spam has no value

2025-05-09 15:13:09

- reply

Excellent, if you need to loop in a dev consider me available

2025-05-09 13:43:58

Idea for non-technical folks who want to help grow nostr: research adjacent conferences/magazines/podcasts (e.g. in fediverse land or whatever) and arrange interviews with nostr developers or features on nostr.

2025-05-08 22:16:58

Just forked @nprofile…0jsu's nparrot project and adapted it to NIP C7 chat rooms! This kills several birds with one stone:
- I got to learn some rust
- I prototyped a demo for what bots would look like on flotilla
- I opened up a massive RCE vector onto my computer
https://coracle-media.us-southeast-1.linodeobjects.com/nparrot_chat.mov
If you're interested, the source code is available here: https://github.com/coracle-social/nparrot/tree/master

2025-05-08 15:21:47

- reply

While that makes things more awkward I'm glad to see that you're trying to make the service pay for itself, there hasn't been a lot of that on nostr so far because everyone is happy to give stuff away for free right now. An eCash (or even zap-based) solution would go a long way towards solving this, but for something that is as frequent as wot queries, an account-based model might still make the most sense. Maybe clients could add a setting that would allow them to autopay for microtransactions. But, as with any usage-based pricing model there can be surprises when you look at your invoice. Tricky.

2025-05-07 22:08:31

- reply

Hmm I'll likely be using the user's own pubkey to make requests, is vertex intended to work differently?

2025-05-07 20:48:13

- reply

This is cool, you're right. I don't think id prefixes would cause problems with performance from what I understand about how indexes work.

2025-05-07 20:44:08

- reply

Ah, nice I missed that when I looked through. Adding it to the list.

2025-05-07 16:35:09

- reply

The account switching thing. I haven't checked my code yet, but the client secret should get switched out when changing accounts, which would result in an entirely different session being used. But I can't think how amber would mess that up, so it's probably me.

2025-05-07 16:13:01

- reply

@nprofile…lmth could this be an amber bug?

2025-05-07 16:09:37

- reply

Thanks, the video is really helpful, I'll see if I can replicate the behavior. Although the Amber part of it is blacked out, I assume you were switching accounts there too?

2025-05-07 16:01:19

- reply

I did update a lot of the networking code in this latest release, to reduce how man relays are connected to, so that's likely to be the case. This is one of the hard parts of nostr, and can't really be solved economically without shared infrastructure of some kind. @nprofile…s75a maybe this would be something worth adding to vertex?

2025-05-07 15:07:22

- reply

I found the problem, it's a cache miss due to non-normalized relay urls

2025-05-07 02:45:07

- reply

Hmm, loads for me. But it should probably load for everyone

2025-05-07 01:36:36

New release of Flotilla is out, my first 1.0 release on nostr! Even Coracle never felt quite good enough to call it "ready".
This latest release includes an integration with anchor.coracle.social, which gives me a story for keeping communities engaged with the platform via email notifications. This was the last major piece missing before I felt ready to start onboarding communities.
Obviously, lots of work is still to be done, so give Flotilla a try and let me know if you run into any issues or find glaring omissions!
PS, the new version is coming soon (tm) to App Stores near you, but you can get it today on web or via ZapStore.

2025-05-06 22:09:43

- reply

I realized I've actually already fixed this on flotilla, so it was an easy update, check zapstore for the new version

2025-05-06 21:28:05

- reply

Unfortunately all the same problems with email apply to push notification servers as well. In order to access auth-protected relays on behalf of a user, you have to be able to sign stuff with their key. Push notifications are by default not encrypted either (although I think you can do e2ee).

2025-05-06 21:20:54

- reply

I think the takeaway here is just how insecure legacy infrastructure is, both in terms of platforms and in terms of email. Anchor makes me feel really insecure because of all the ways that I can surveil and hijack my users's authentication! But that's really a result of how much privacy people are used to giving away on the internet.
You could host your own instance of anchor, which would take care of the bunker url piece, but it would require you to run a server and use an email service (which can in turn then look at the content of your emails). You could go further and run your own email server, but that's a little over the top even for technical people.
One other possible solution I can think of would be to use PGP to encrypt the emails that are sent, but again, that solution has been shown to be too much hassle for anyone but the most paranoid to use on a regular basis.
The other day I was reading the original RSA paper, which starts with
> The era of “electronic mail” [10] may soon be upon us; we must ensure that two important properties of the current “paper mail” system are preserved: (a) messages are private, and (b) messages can be signed.
Ironically, email is neither private nor signed — but nostr is!

2025-05-06 21:01:34

- reply

Yes sir, same backend, different frontend (it'll be built into flotilla's settings)