Derek Ross

The purple pill helps the orange pill go down.

Developer Relations at Soapbox.

🪺 NostrNests.com
🎙️ YakBak.app
🖼️ Zappix.app
🗓️ Plektos.app
🎶 ZapTrax.app
📈 Zaplytics.app
🎧 Podstr.org

Public Key

npub18ams6ewn5aj2n3wt2qawzglx9mr4nzksxhvrdc4gzrecw7n5tvjqctp424

NIP-05 Address

derekross@grownostr.org

NIP-57 Address

derek@npub.cash

Profile Code

nprofile1qqsr7acdvhf6we9fch94qwhpy0nza36e3tgrtkpku25ppuu80f69kfqpz3mhxue69uhhyetvv9ujuerpd46hxtnfduq3zamnwvaz7tmwdaehgu3jxyhxxmmdss5kj9

Publishing to

relay.damus.io

nostr21.com

nostr.mom

Author Public Key

npub18ams6ewn5aj2n3wt2qawzglx9mr4nzksxhvrdc4gzrecw7n5tvjqctp424

Show more details

Last Notes

2026-07-17 13:57:45

- reply

I wouldn't know. It's terrible here. Damn you Canada.

2026-07-17 13:40:19

Good morning and pura vida, Nostr. Another day, another model to try. 🫂💜🤙🏻

2026-07-17 01:56:43

- reply

I haven't tried a large file that size.

2026-07-17 01:31:56

- reply

https://blossom.ditto.pub/70fcc2fc983ad942438c7fc35276d06ab7fbf3a4ad7eea39e96641d363f38b01.jpeg
I just uploaded this. No issues.

2026-07-17 01:18:45

- reply

Yes. Their server is angry.

2026-07-16 19:56:59

@npub1q3s…d26p's talk from Bitcoin++ is now live. Open Source is Dead! https://www.youtube.com/watch?v=w7KQl6qh4yM

2026-07-16 18:13:23

thanks @npub1yzf…fxu5 for building the nostr weather station. i can now see how unhealthy the canadian wildfires are making the air at my house.
https://blossom.ditto.pub/dc5921ce07e343d03db708f2dda1d4860173aa6dc9d0bede1f566ee2359ecff2.png https://relaying.earth/npub1xd40m5xdjank9qexd7p2dvdh3mmk5ea4rguy3c4eytjemgqxrwtqjvng03

2026-07-16 17:50:24

It smells like smoke outside and the sky is white. Thanks Canada! https://nostr-relay.derekross.me/0aeb7a007036150947835b2ae8862ed25f3a57bb327b4f1bea817943dbbbd619.png

2026-07-16 15:50:36

- reply

welcome to nostr and the decentralized social future!

2026-07-16 14:22:19

- reply

come on in!

2026-07-16 13:22:17

- reply

I tested this morning and it works.

2026-07-16 13:21:16

The sun was orange last evening and I can't even see it today. Thanks @nprofile…tkue https://nostr-relay.derekross.me/053be38b0f34b353ac1272ce348f180e203fa7a54fe74a240ac1ce68931a9537.jpg

2026-07-16 13:04:20

Armada v0.30.0 is out.
https://zapstore.dev/apps/naddr1qq88qatz9eshymtpv3sjuctswqq3samnwvaz7tmjv4kxz7fw0fshqum5daex2tnyv4mqygrcrg2jwp2lwnqlwq3s7ypcgcymx32glz4k5znv4f6qykp8l876u5psgqqq0c9sfnehew

2026-07-16 13:00:37

good morning and pura vida, nostr. if you're building here, you're building for the future. 🫂🤙🏻💜

2026-07-16 12:59:48

if you're an OpenCode maxi and a Claude Opus/Fable maxi, i encourage you to check out Meridian.
main app: https://github.com/rynfar/meridian
plugin: https://github.com/rynfar/meridian-plugin-opencode-scrub
this will allow you to use your claude code subscription and not be forced to use claude code itself.

2026-07-16 12:08:33

- reply

GM.

2026-07-15 19:18:34

We've been chasing private messaging on Nostr for years. NIP-04. NIP-17. NIP-29. Our own Universes. Marmot. Every one taught us something, none of them was the whole answer.
Now it is. Encrypted communities, no company in the middle, and we run our entire team on it.
It's built on the Concord Protocol by the Vector team, @npub16ye…g4wn and @npub12w7…ktz3, who pivoted from Marmot to their own protocol.
@npub1q3s…d26p worked with them on v2, and we ran with it.
A tip of the hat to Flotilla @npub1jlr…ynqn for leading the NIP-29 charge, too.
I wrote the whole messy, honest story, including the dead ends.
https://soapbox.pub/blog/building-an-armada-voyage-to-encrypted-communities

2026-07-15 18:30:24

gonna change my profile pic to this handsome fellow.
https://blossom.ditto.pub/7f03c7d4a69e797a8f9646a474735d8293200dba5ab22f210d34b60e2a16c6e7.png
#nevent1q…ck9u

2026-07-15 18:28:40

- reply

great shot

2026-07-15 18:25:44

wtf
https://blossom.ditto.pub/eabaf5de8dff4370bf816fda1958ce61fe74052dcfe01b08b5843d2cf96b64d6.png

2026-07-15 18:24:31

- reply

https://gifverse.net/media/Vw2DtBzn/original.gif

2026-07-15 17:31:36

- reply

So business as usual? Keep building, keep shitposting, keep evangelizing. 🫂🤙🏻💜

2026-07-15 16:36:24

- reply

It's about time for a new meme. Though the meme is literally in my job description, so it can't die 😩

2026-07-15 16:35:46

- reply

That was January or February 2023.

2026-07-15 13:05:43

Good morning and pura vida, Nostr! The building will continue. We're not slowing down. 💜🤙🏻🫂

2026-07-15 02:48:13

i use OpenCode + Claude for nearly everything, but i use GLM Z.ai with my OpenClaw for many things. i really enjoy using GLM 5.2. it's actually very good, a top tier model, but it gets absolutely hammered this time of day, every day, when China wakes up and starts working. when this happens, i know it's time to go to sleep.
https://blossom.ditto.pub/fad7741cd5c66f76352a083b14596bff8b03d918144f149a2733f63186365128.png

2026-07-15 02:43:11

- reply

we have a portable / camping hammock that i have on the boat. i tie it up everyone once in a while.

2026-07-15 01:27:06

It's a good ole fashioned link trade. 👇🏻
#nevent1q…w4tv

2026-07-15 01:26:44

- reply

Ugh. That sucks. I wonder if it's coming this way like last time.

2026-07-15 01:26:09

- reply

Welcome.

2026-07-15 01:25:49

- reply

I'm working on a blog post that links to Flotilla 👀 Will be live in a few days.

2026-07-14 22:21:20

- reply

I'm good. Currently pondering many things, but good.

2026-07-14 22:20:59

- reply

I've heard 👀

2026-07-14 22:03:56

- reply

It's a good logo and app 🥹

2026-07-14 22:02:48

- reply

DM sent.

2026-07-14 21:59:15

- reply

Hey man. You're still using Shakespeare for BCHNostr, right? I'd like to "fund" your campaign, but not with BCH 😂 I'll DM you a Shakespeare gift card.

2026-07-14 21:56:09

I have two favorite places for contemplating all of the things. 1) boat. 2) hammock. Current status:
https://blossom.ditto.pub/3922e4fae42d0d7918a8b30e8c16aa29deace69fd73e1321d8d444c3a0b0e904.jpeg

2026-07-14 21:26:06

- reply

I haven't seen one.

2026-07-14 21:12:40

- reply

Oh man 👀

2026-07-14 21:08:18

Anyone still playing Chess over Nostr? https://jesterui.github.io
https://blossom.ditto.pub/0ab3016c4b342c4e5eff87eb8fba1998ae60bd250e0f9933d0ee79d7dbfc2c7c.png

2026-07-14 15:02:28

- reply

PV!

2026-07-14 15:02:24

- reply

PV!

2026-07-14 15:02:07

- reply

gm!

2026-07-14 15:01:50

- reply

nice domain name lol

2026-07-14 15:01:41

- reply

love it

2026-07-14 15:01:35

- reply

awesome. gm.

2026-07-14 15:01:22

- reply

2026-07-14 15:01:18

- reply

i think we're all there lol so i follow the mindset of release early and often. though that itself is hard because then it leaves many projects at about 85% complete.

2026-07-14 15:00:41

- reply

such a good show lol

2026-07-14 15:00:20

#MyBotLife
https://blossom.ditto.pub/3f6fd61f6d9fffa2a60ab43b2fb2f8a0df6d454bb3ea496893b6a86cec6a8c01.png

2026-07-14 14:20:58

- reply

i just renewed for my second round at the beginning of the month.

2026-07-14 14:20:41

- reply

$80 for 3 months i think?

2026-07-14 13:41:27

good morning and pura vida, nostr! it's time to vibe the future. what cool projects have you worked on recently that you wish more people knew about? 🫂💜🤙🏻

2026-07-14 13:30:05

- reply

2026-07-14 11:59:43

- reply

Z.ai GLM 5.2 with my OpenClaw.

2026-07-14 11:59:10

- reply

Good morning 🌄

2026-07-14 11:51:15

- reply

GM Maria

2026-07-14 03:09:35

This is a cool tool.
#nevent1q…0m2x

2026-07-14 03:09:06

- reply

It's good and it's cheaper, but it's not better.

2026-07-14 03:08:30

- reply

Hey @nprofile…emrk how have you been?

2026-07-14 02:42:11

- reply

It's coming most likely in the next release.

2026-07-14 01:25:30

- reply

You'd have to ask them. I'm only stating what we've seen for years.

2026-07-14 00:15:48

🛡️ Soapbox Bug Bounty Payout — $1,000
Researcher: @nprofile…e307
Project: Armada / Concord Protocol
Severity: High
Status: Resolved & Patched
Vulnerability
A permission-validation flaw in Concord's control-plane event handling allowed any community member to strip another member's roles by sending an unauthorized role-revocation event (kind 3308). The delegation fixpoint only checked roles a signer granted, not roles they revoked — so an empty role_ids edition passed vacuously for any signer, regardless of their authority level.
Impact: Any member could break another member's channel access and permissions. Affected members lost admin roles, channel visibility, and required a ban/kick/reinvite cycle to partially restore access.
Disclosure & Resolution
• Reported: Jul 13, 2026
• Patched: Jul 13, 2026 — same day
• Fix: 5a655112 (https://gitlab.com/soapbox-pub/armada/-/commit/5a6551127fec11cbf69d27dc140010db72419683) — "Drop control-plane revokes and demotions from non-authority signers" by Chad Curtis
• Issue: soapbox-pub/armada#73 (https://gitlab.com/soapbox-pub/armada/-/work_items/73)
The patch enforces that a non-owner signer must hold MANAGE_ROLES, outrank everything handed out, and outrank what the admissible predecessor conferred — closing both the vacuous-revoke and rank-bypass paths.
Reward
$1,000 USD awarded to hzrd149 for responsible disclosure of a high-severity authorization bypass.
Acknowledgment
Thanks to @nprofile…e307 for finding and reporting this promptly. The patch landed within hours of disclosure — exactly how this should work. Thanks @nprofile…73sf for your quick turn around 🙏
───
Bug bounty program: Soapbox rewards responsible disclosure of security vulnerabilities in Armada / Concord Protocol. Reports can be filed via GitLab issues on the relevant project.

2026-07-13 21:04:32

you don't need Claude Code /radio when you have Shanty singing you sweet songs of the Armada.
Shanty generates music on the fly and streams it live for us. it's perfect background coding and vibe coding music :)
https://blossom.ditto.pub/1fd48a76addeff5db8a58a88553390353cb1f71a0f841d4cfd5ea60215db13ef.png

2026-07-13 20:42:02

Concord is growing. Wen <your client goes here>?
https://blossom.ditto.pub/fba47c16b910f0ac13465732457f771724cba67173e6eacaf805737156cea5d9.png

2026-07-13 19:37:38

- reply

*bitcoiner

2026-07-13 19:36:22

- reply

if you buy bitcoin and keep it on an exchange to some day sell, you're not a bitcoiner in my eyes. if you send to cold storage, if you run a node, if you spend bitcoin, if you do *any* of those things, they're you're a bitcoin in my eyes.

2026-07-13 19:25:30

- reply

id like for everyone to run a node, but it's not possible for everyone to do that. those that have the means and capabilities should do so though.

2026-07-13 19:06:26

Thanks @npub13dg…twkv for the great write-up. https://nerds.xyz/2026/07/venezuela-bitcoin-earthquake-relief/

2026-07-13 18:48:37

- reply

it's because no one wants a real war to escalate into a global catastrophe, so we're playing operational conflicts instead.

2026-07-13 18:29:41

here's the repo. i may work on this a bit more, i may not since it just works after one prompt. feel free to fork or submit PRs for features or additional operating systems. https://github.com/derekross/noscrobble
#nevent1q…uds5

2026-07-13 18:15:04

- reply

i wish it didn't have to come to that, but i believe it now that i've seen things progressively get worse over the last month.

2026-07-13 16:30:30

- reply

Yes.

2026-07-13 16:30:16

And if the Ditto relay would have went down, Nostr would have continued to function as designed.
#nevent1q…xx8h

2026-07-13 16:29:49

- reply

Tis but a scratch.

2026-07-13 16:28:47

- reply

I love picking wild berries 🤤

2026-07-13 16:26:02

I've been using the web Cashu.me as my zap wallet for 9 months now. I'm looking forward to this.
#nevent1q…t6z2

2026-07-13 16:24:39

- reply

It's just support for the music d tag.

2026-07-13 16:24:18

- reply

Issues in!

2026-07-13 15:40:21

Venezuelans Turn to Bitcoin to Fund Earthquake Relief
https://soapbox.pub/blog/venezuela-earthquake-relief-bitcoin
https://stacker.news/items/1524113

2026-07-13 15:36:10

- reply

so is it freedom tech or not?

2026-07-13 15:11:09

- reply

now i need ditto and armada to support music status and not just general status :P

2026-07-13 15:06:25

Fable one shot my nostr music scrobbler with NIP-46 sign-in. it's a simple COSMIC applet that lives in my system tray and publishes music status updates of what im listening to.
https://blossom.ditto.pub/ad5e39c98909f11e3fa80e13026d276efd5ed8919319c9ae276f6b7f57784126.png

2026-07-13 14:59:00

- reply

Hey man, you taught me we have to build the future that we want.

2026-07-13 14:13:09

- reply

yes

2026-07-13 14:12:36

- reply

hey man. you told me earlier today on X that BIP-110 wasn't a hardfork, based on me sharing @npub1mzn…6mak's article from last year. so which is it?

2026-07-13 13:46:31

- reply

oh. i could have sworn i read "boys" before. oops my bad. being pregnant in the middle of the summer is probably terrible. both of my children were summer babies. good luck to you and your wife <3

2026-07-13 13:44:55

just a reminder: nostriches LOVE to touch grass, go outside, and enjoy the fresh air. during the summer months, nostr is always historically less active. and i love that for us.

2026-07-13 13:42:52

@npub1qny…95gx you're forgetting to stack real notes, not that fake shit. c'mon man. at least one note a day helps to keep centralization away.

2026-07-13 13:30:04

Venezuelans are turning to bitcoin to help them in their time of need. "This is a chance for the world to see Bitcoin as borderless money."
https://soapbox.pub/blog/venezuela-earthquake-relief-bitcoin

2026-07-13 13:11:44

- reply

2026-07-13 13:11:33

- reply

hey this sounds like me! i nuked my 20 year old reddit account after getting banned again and again and again. i miss the extra content, but i don't miss the headaches. help me bring content to nostr :) that's how we win. and good morning :) thanks for being here.

2026-07-13 12:52:36

- reply

Hey man! How's the new baby!? Oh wait. Isn't it babies? 👀

2026-07-13 12:51:19

- reply

PV https://blossom.primal.net/46d9822f6bfe6fa79c11268075198625dd25372cb05286b371b27246cac3b6eb.jpg

2026-07-13 12:28:17

- reply

good morning maria!

2026-07-13 12:28:07

- reply

hey man. how are you doing? what's the latest thing you're vibing?

2026-07-13 12:27:54

- reply

good morning sir :)

2026-07-13 12:27:43

- reply

doing well. but, honestly a bit sad that some hot younger scammer isn't in my DMs this morning.

2026-07-13 12:07:16

Good morning and pura vida, Nostr! I'm still glad to be here with all of you. Nostr is the forever home where I can build the future I want, with the friends that I want. 🫂🤙🏻💜

2026-07-12 23:55:06

- reply

Different use cases perhaps.