Semisol
semisol

I do not agree fully with throwing it fully out, but current IP regulation means that it is easy to abuse.
Trademarks provide protection against someone pretending to be affiliated with you or your products.

2024-11-14 21:10:38

- reply

I could have just used a JavaCard and been the same as other products already out there. But then what’s the point?
Big things are coming 👀

2024-11-14 21:08:42

- reply

Resubmit with it added, I’ll remove it. Or if you used your nym it’s fine, just DM me your Telegram/Signal handle.

2024-11-14 21:07:53

This all started because I was tired of the amount of bullshit and insecure products in the hardware wallet space.
Finally, you will be able to get an HWW that isn’t overpriced, that doesn’t use chips with vulnerabilities, and just works without requiring a closed source vendor app.
The SE will also be open to use in DIY projects or other HWWs as a secure starting point. #note160z…0zxq

2024-11-14 20:49:36

- reply

If you’d want me to check, let me know.

2024-11-14 20:48:25

- reply

BTClock fixes this… best part of open firmware is user control if the vendor abandons the product or does not implement functionality users want

2024-11-14 20:31:45

You can still register for the beta-test of my signing card, using security certified chips. Expecting samples ready by late 2025 Q1.
It also uses a custom platform with security-by-design, compared to the development approach of most other signers.
No bullshit claims, no cutting corners, no overpriced hardware.
https://forms.office.com/r/CxzzG4Wqam #note1655…pgxy

2024-11-14 20:06:14

- reply

Apparently “BTClock” is too similar to “BLOCKCLOCK” and consumers would totally get confused that BTClock is a Coinkite product… and so they took all their repos and their GH org down

2024-11-14 17:57:17

@npub1sg6…f63m will the Bitcoin Legal Defense Fund cover any expenses that may arise from Coinkite’s (what I view to be baseless) legal action against a competing open-source project, BTClock by @npub1k5f…vqg2?

2024-11-13 12:22:33

What HWW would you recommend?

2024-11-10 01:56:45

- reply

Not your responsibility what others do with information.
If it was about building a nuclear bomb, sure… this?

2024-11-09 00:34:40

“just one killer app bro. trust me” #note1m26…appm

2024-11-05 15:05:01

- reply

it really isn’t a good hammer either for 50% of things
to be honest, the cashu protocol has been having the same issues with incompetent design as with some nostr NIPs

2024-11-04 19:32:50

- reply

Anyone can make shit on Nostr.
Who can make shit that’s good?

2024-11-04 19:11:24

- reply

Nostr is not that malleable.

2024-11-04 18:43:42

- reply

What is to say Nostr isn’t?

2024-11-04 18:39:38

- reply

“why not enhance the fediverse?”
- fediverse people on nostr

2024-11-04 14:51:41

- reply

I’m working on a lot more than that… :)

2024-11-04 13:33:50

- reply

What changes?
Except that you know someone tried to access it and failed, and that’s what the failed PIN counter is for

2024-11-04 13:31:51

- reply

depends on your threat model

2024-11-04 13:23:02

Also, it is secure enough that it doesn’t need a brick or wipe PIN to resist attacks unlike some other HWWs #note135y…hlyv

2024-11-04 12:56:05

What if a 3-of-5 multisig was only $200? With HWWs that is.

2024-11-03 23:38:29

- reply

They all work fine for me.
Well except Windows 11. That thing is hot garbage. Windows 10 all the way

2024-11-03 21:51:56

- reply

video infrastructure is a complex topic
to make it work requires no effort with an MP4 on a server
to make it work WELL requires optimizations, and money for that to be usable (CDNs, servers for transcode and similar)
even one second of buffering can impact viewing experience for a normie
instead of funding ecash wallets maybe someone willing to work on the real problems should be funded

2024-11-03 21:49:21

- reply

when funding?

2024-11-03 15:26:15

- reply

you can’t change users unless it benefits them

2024-11-03 12:15:15

- reply

Oh. Don’t bother with NIP-05.
Pubkey whitelist is easier and people with other NIP-05s can use it.

2024-11-03 10:43:30

- reply

it’s not verification

2024-11-03 10:34:27

- reply

not you specifically
it just seems to be a general mentality that nsec management for example has to be hard and people have to adjust to it

2024-11-03 01:40:23

- reply

also see: Louis Rossmann

2024-11-02 09:26:35

- reply

First, not everything is on Nostr.
Second, Nostr notes are not non-repudiable because of the many ways they could get compromised, even with a remote signer (signing some unintended notes before access is revoked)
And you still need a relay to store that note… which will become harder and harder
Personal relays don’t fix this because they are limited to people who know how to run a server, and are intentionally limited to a small group of people. Also, maintenance cost will only go up while the benefit doesn’t change.

2024-11-02 09:22:28

- reply

never really

2024-11-02 09:20:49

- reply

It does not.

2024-11-01 02:39:12

- reply

whatever type of error you are having must be a more widespread issue than a few pages to be triggered so often
the ideal program would have a small pool it nonstop allocates to and deallocates from and a pool it very slowly checks and rotates allocations in/out
write random data and CRC it as I said
you then want to stop the process and get a debugger if there’s a mismatch and see the physical location along with identifying the RAM module

2024-11-01 02:36:12

pick 2: security, performance, affordability

2024-11-01 02:35:00

- reply

ycruncher?

2024-10-31 18:44:20

- reply

It is supported but not “validated” (don’t blame us if it doesn’t work) for consumer platforms

2024-10-31 18:43:27

- reply

Will do in a bit

2024-10-31 18:38:48

- reply

It is detected as ECC too.
G series CPUs don’t support it don’t ask how I know (tried to add ECC RAM to a system with one) and it didn’t detect as ECC

2024-10-31 18:37:46

- reply

I have bought 2 random ASUS boards, one meant for “professional use” and one meant to be lower end (B)
Both work

2024-10-31 18:36:37

- reply

another water heater… :)

2024-10-31 18:35:55

- reply

ryzen supports ecc

2024-10-31 18:35:29

- reply

Yes.
I have never had a corrupt DB with ECC memory, even with a few hard power cuts. I use RAID 1, though not with checksumming (mdadm) so about 50% of the time any issues should come up with disks if any.

2024-10-30 15:38:18

Hardware accelerated ChaCha20 🤔

2024-10-30 14:47:55

I wonder how many HWWs are developed with proper attention to security, from software to parts used :)
Most common one is cheaping out on SEs and buying one not meant for withstanding anything more than basic attacks. And “just add shit” firmware development

2024-10-30 05:49:24

- reply

Your GPU will have a grudge against you

2024-10-29 21:30:09

- reply

You only get a yes or no, nothing else.

2024-10-29 20:00:51

- reply

WPA3-SAE fixes this

2024-10-29 01:23:28

- reply

No, if it also uses paper ballots, why digital also?

2024-10-29 01:21:22

- reply

Okay so what’s the point then? Redundancy?

2024-10-29 01:20:57

- reply

let’s also take a page out of most HWWs books and make the code say it is genuine itself

2024-10-29 01:18:21

Now, the problem is… how do you know it runs the code it says it does?
Maybe consider this the next time you see “open source” but the boot code cannot be verified except the boot code saying “trust me bro”
Also can we stop calling it boot ROM? Thanks #note17yx…00ju

2024-10-28 20:39:05

You forgot the part where they overprovision access, inactive accounts, and economies of scale…
knowledge can’t save you from stupidity #note1c86…n03h

2024-10-28 20:11:58

- reply

you can’t really just catch CSAM

2024-10-28 19:44:41

- reply

not possible

2024-10-28 19:36:22

- reply

nostr is the perfect breeding ground for this shit
no good way to actually block abusers, marketed as anonymous

2024-10-28 19:33:39

it’s much worse than it appears #note1lj2…0p83

2024-10-28 18:58:16

- reply

most SSDs now error instead of returning garbage most of the time also if they detect a checksum error

2024-10-28 16:49:46

- reply

actually, not really
it’s loaded into the chip in the passport

2024-10-28 14:08:23

- reply

you can’t do much

2024-10-27 22:51:08

- reply

I can also just use Win10

2024-10-27 22:40:29

- reply

no, will see if I can debloat it in a way that works post-install

2024-10-27 22:30:10

this feels very wrong to do
https://i.nostr.build/AiXI2GN8Hr687yem.png

2024-10-27 21:55:54

- reply

Good luck getting through border control after that
Also that won’t do it

2024-10-27 20:19:01

depending on where you travel to and your country of residence, at border control, scanning your passports will automatically transfer biometric information stored on the chip of the document #note1xrm…mje7

2024-10-25 23:20:59

- reply

You are missing the entire point

2024-10-25 20:50:34

- reply

It actually is better for other viewers too as they can see actual conversation instead

2024-10-25 20:43:22

- reply

a zap and a like express different things
a like indicates that you found something useful, interesting, relevant, whatever. you liked it
a zap indicates it provided you some amount of value that you are willing to pay for, such as paying to support future development of the content
there are some people that think you should only zap and more than (insert some sats number) because some BS, those are usually the ones that can’t provide meaningful value to be worth *paying for*

2024-10-25 20:30:15

- reply

Last time I checked it was hardcoded

2024-10-25 19:47:15

- reply

Yes but that may as well be irrelevant in user counts.
Also, they probably use public relays too for a public presence

2024-10-25 19:43:04

- reply

Nostr is inherently different.
It has long term identities at its core.

2024-10-25 19:28:40

or can they? :) #note189n…tzfq

2024-10-24 19:14:29

- reply

Iris and Snort

2024-10-24 14:53:29

- reply

Wait, they were once, and they forked?

2024-10-22 21:28:54

promoting your project (esp. for monetary gain) should not become your primary project
a lot of things in bitcoin have gone wrong because of that: HWWs, shitty grant funding schemes, podcasts, confs #note1z0q…md58

2024-10-22 21:25:34

“rules for thee but not for me” in the Bitcoin community, exhibit I lost count.
I think we all know what stablecoin means
also, before you say: it is mathematically impossible for there to be a stable store of value even if managed by a perfect algorithm in terms of supply control #note165x…tl7e

2024-10-22 13:04:04

- reply

I think it may be a takedown request.

2024-10-22 13:02:46

- reply

That cutoff is in March, hmm
Weird

2024-10-21 13:24:08

- reply

#nevent1q…5q4s

2024-10-21 13:09:44

- reply

Also, batch signing does not make much sense.
You need to send the AUTH event immediately for example

2024-10-21 05:57:04

- reply

Smartcards are also cheap

2024-10-21 05:56:47

- reply

None of them

2024-10-21 05:34:42

- reply

You know, you could move the entire signing process onto the card, and I am doing that
You are forgetting that the average user can need to sign up to 5 events/sec. AUTH, media uploads, etc

2024-10-20 23:32:19

- reply

you are probably overdoing it

2024-10-20 23:29:36

- reply

Or you can renew

2024-10-20 22:24:21

- reply

yeah.
there’s the people that are idiots that know they are idiots: they don’t do anything
and then there’s the idiots that don’t know they are idiots or don’t care: they are dangerous because they will fuck things up for themselves and others
another example is the HWW industry…
a bunch of companies cut corners to the point where you could make a “most incompetently developed hww” marketing video and people would believe it
you could also make a “most secure hww” and they would believe it

2024-10-20 22:21:17

- reply

there are 48k potential keys with prime size 11 bit and less.
9.5k if you look for 11 bit only.

2024-10-20 22:13:15

- reply

and it is fair because there are lots of idiots that don’t know they are idiots, just like on Nostr…

2024-10-20 22:06:55

- reply

uhh
RSA bare minimum was 1024 bits, not 2048
768 bits has been cracked with large distributed compute projects
also the cracked key is actually only 11 bits

2024-10-20 22:00:55

- reply

no they factorized a 11 bit RSA key
one that you could do faster on your own computer

2024-10-20 18:52:59

- reply

But yeah, verifying sigs is good.
Next steps: learn how to use a SeedSigner (always a good tool to have, for example if you need to temporarily handle a seed outside an HWW)

2024-10-20 17:07:26

- reply

#nevent1q…n03u

2024-10-20 16:51:22

bitcoin seeds: DO NOT SHARE AT ALL COSTS KEEP OFFLINE ONLY
nsecs: “let me enter it into some random shitty site” #note16kv…0khy

2024-10-20 12:54:03

- reply

Of course, since it doesn’t work with wine