Tyler Burns

InfoSec Analyst - Cypherpunk - Vegan Ⓥ 🌱 - Animal Rights - Bitcoin - Privacy Proponent

Public Key

npub1d30mhvhd0sagmu83wdm26wqk00heptfn05xvgmfx7r9xscstnfcs7xynp3

NIP-05 Address

tylerburnsveg@anonymousgreen.com

NIP-57 Address

tylerburnsveg@anonymousgreen.com

Profile Code

nprofile1qqsxchamktkhcw5d7rchxa4d8qt8hmus45eh6rxyd5n0pjngvg9e5ugpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhsd65nss

Publishing to

relay.damus.io

Author Public Key

npub1d30mhvhd0sagmu83wdm26wqk00heptfn05xvgmfx7r9xscstnfcs7xynp3

Show more details

Last Notes

2024-11-17 19:48:44

Finally deleted my X account for good. Haven't really used it in a long time and it was long overdue for deletion.

2024-10-09 02:54:47

- reply

Well said. Norm's moth joke is the epitome of this. Sometimes you'd have no idea where he was going with something, but the ridiculousness and obsurdity would have you laughing regardless.

2024-10-08 13:47:21

- reply

Agreed. We're on the same page there. You do you. That's why I emphasized getting your own blood test to analyze your own results for yourself. I think it is good for everyone do to for themselves. If you see your results and your happy with them, then that's great. I'm extremely happy with my blood test results and my cardiovascular risk is extremely low. Good luck to you!

2024-10-08 13:36:52

- reply

You either have to completely ignore those 4 pillar of scientific analysis I mentioned or accept that saturated fat is very damaging to cardiovascular and metabolic health. There is no other reconciliation of that.
But like I said, don't take my word for it. Eat a diet high in saturated fat and then go get your apolipoprotein-B levels checked with a blood test. If you want to conclude that maintaining high levels of apolipoprotein-B in in your bloodstream is safe, then that's your risk and not mine.

2024-10-07 13:46:27

- reply

But a cashew is a seed. Never understood the seed oil bad rep.

2024-08-26 11:33:38

- reply

TIL you can follow hashtags 😆

2024-08-24 16:28:49

- reply

Where is the sex here?

2024-08-18 18:29:40

- reply

Voter turnout for the 18-25 demographic was its highest in 50 years in 2020. Still not close to what the turn out is for the 65+ demographic though. There are about 50 million in that 65+ group, so I'm not sure if turnout is the main issue here given the population sizes and the popularity of the program across all those demographics.
I think as Lyn put it, it is a marketing issue. I don't think people know enough about how the program works to be able to vote accordingly. It probably wouldn't be nearly as popular of a program otherwise.

2024-08-07 03:09:37

- reply

This is even more worrying:
https://techcrunch.com/2024/07/29/how-to-opt-out-facial-recognition-airports-american/

2024-08-07 02:52:30

- reply

Positive feedback is so important to give. Not just because of the fact that it is positive, but also because when you have to give negative feedback, it makes that individual more receptive to it.
Positive feedback should be given in a ratio greater than 3:1 with negative feedback. No one wants to hear negative feedback all the time. More positives than negatives make the negatives more productive and responsive.
Also, when giving positive feedback, provide the "why." If you give the reasons why you appreciated an effort given, then it comes off more genuine and also allows the person to understand what you valued in what they did.

2024-08-06 15:24:51

Anytime a bitcoin service shuts down, it is just further proof that you need to host all your necessary bitcoin infrastructure yourself. Have contingency plans and alternatives ready in case any given project you're utilizing stops being supported.
I've always been hosting my own applications across my entire stack. But I feel for people impacted when a service shuts down. A lot of people don't have the expertise or time to be able to maintain and update everything required for a full self-custodial solution. But it is so important that we all have the option and right to do so.
This will certainly get easier over time. The development in this space happens so quick. But as quick as new developments are made, just as quickly some can fail. Hope for the best, plan for the worst.

2024-08-04 15:08:49

- reply

He did it! GOAT!!

2024-08-02 19:27:00

- reply

I think Alcaraz will win it, but I want Djokovic to get a gold medal. The fact that he's in the final at 37 with one good knee is crazy.

2024-07-26 16:51:46

Really pleased with how this documentary came out. Congrats to everyone in the bitcoin community that was involved. It was very inspiring and hopeful of a better future with bitcoin. I'll definitely be recommending it as a watch for others just starting their bitcoin journey.
https://youtu.be/b4xuRZYLpgk?si=Gl_dmse4h1orO83b

2024-07-19 16:27:49

- reply

The little blue screens everywhere is a nice touch. 😆

2024-07-19 15:27:50

- reply

No, you don't need kernel mode access to hook into API calls like NtReadVirtualMemory, NtOpenProcess, etc which are all API calls that exist in usermode space. Having usermode hooks certainly makes it easier for malware to thus unhook the security agent and avoid detection. So it is a trade off.

2024-07-19 15:19:28

- reply

A lot are still usermode hooks. Some are mixed. For example, CarbonBlack has some kernel level drivers for file and network detections, but its prevention policies all operate as usermode hooks.
https://github.com/Mr-Un1k0d3r/EDRs

2024-07-19 15:17:15

- reply

The update isn't rolled out via an agent update. The update is a detection controlled by Crowd strike and it is how their solution operates. It is a fairly black box solution that handles detections on its own. It is one of the reasons why SOC's love it because they can focus on triage rather than tuning since many orgs don't have the in-house expertise or resources to create detections for all the latest threats. Out sourcing security like this has a huge cost though as we see.

2024-07-19 15:12:48

- reply

It is installed as a kernel mode driver which is even higher privileges than a user mode admin. It isn't quite standard for EDR agents as there are a lot of solutions whose agents only use usermode hooking for their detections.

2024-07-17 14:20:57

- reply

Didn't know about that website. Pretty cool idea. Thanks for sharing.

2024-07-17 14:06:53

- reply

We all know Yhorm lost. So I'm going with magic internet money.

2024-07-11 22:46:04

- reply

Such a good show. My wife and I loved it. Episode 5 is TV perfection!

2024-06-21 03:12:23

- reply

Are you sure about that? I've read hundreds of articles all saying that Bitcoin has already died. 😆

2024-06-14 13:16:21

Just came across a threat via email at work that led to a compromised website that used Ethereum to deploy malware. Thankfully our security controls blocked the threat. But just one more reason why Ethereum is garbage.
Found a good write up on the attack chain:
https://labs.guard.io/etherhiding-hiding-web2-malicious-code-in-web3-smart-contracts-65ea78efad16

2024-06-13 13:47:17

- reply

Linux for gaming is on fire lately. No reason to ever use Windows now.

2024-06-10 13:27:40

- reply

YouTube has done wonders for my DIY capabilities. Haha

2024-06-07 07:44:49

- reply

Doxxing is despicable. https://image.nostr.build/d165cd1ff0ebd508abbc44e2d9c6befaf73ecebb212395c95cabc4ad43d2baf0.jpg
https://image.nostr.build/57f12225dffc3f8df1f7fdfd650026085ee0957eec8e94262f5a7a88f3512d75.jpg

2024-04-24 18:39:08

Careful on the Wallstreet Journal website today. I've been investigating a malware ad campaign that is delivered from their website. Not that anyone should be viewing their news site anyway since it is garbage, but just be extra careful.
It leads to a bogus WSJ website (wsj[.]pm) that says you need to download an extension to continue viewing their website. If you click install it will download malware that runs some malicious powershell scripts.
Hot off the presses showing up just today:
https://www.virustotal.com/gui/file/191a8766da98b1f992072045905cf82c771d8cb9f697d08873686778dc70c7f6/behavior

2024-04-24 13:27:58

- reply

I love solar. I have it on the roof of my house and it allows me to generate my own power rather than relying on someone else. Rooftop solar is definitely the way to go for resiliency and decentralized power, but big solar farms like this are still better than a ton of other grid power options out there.

2024-04-20 00:11:14

There it is!! https://image.nostr.build/3ef099ef0082a44285d21d0745f84b0a468676323f7f821fa7368b05eb685119.jpg

2024-03-09 03:27:12

- reply

Very elegant. Looks amazing!

2024-03-09 01:17:59

- reply

What is the single point of failure? You can have multiple copies of each, all in geographically dispersed locations. You can lose any number of them and still recover just fine.

2024-03-08 23:34:22

- reply

What is it about your threat model that you feel multi-sig protects you against better than single-seed+passphrase?

2024-03-08 03:31:52

I'm something of a zapper myself.
https://image.nostr.build/f1418aace2c900fc8173fa7c2840b33015c6e5d0719d938f804a8f67ac76828d.jpg
#nevent1q…gt0c
#nevent1q…gt0c

2024-02-28 01:09:13

- reply

My wife is a teacher and had a student bring a bookbag to school full of cockroaches. The next day after her telling me that story, my (also kindergartner) child and I put one of those on our couch. 😆

2024-02-27 15:27:45

- reply

Cool stuff. Learned something new. Those BBQr frames flash pretty quick. How long does it take the Coldcard Q to recognize all those QR frames? It must have pretty good recognition with the camera!

2023-12-19 17:31:39

- reply

...at least not due to control of the platform itself. ...just don't lose your key. Haha

2023-12-19 17:27:31

- reply

At least you can't lose your "account" here.

2023-12-06 15:11:17

- reply

To be fair, the mempool did clear on my node after a hard shutdown. 😆

2023-10-09 20:18:31

- reply

Having so much fun with this game at the moment. Bought it on a whim just because it was From Software and was looking for a new game to play. Wasn't until about 10 hours in that it really started clicking for me and now I'm loving it.

2023-07-25 22:46:13

- reply

InfoSec Twitter needs to move over to Nostr. Nostr needs more varied communities and I feel InfoSec would be a good fit here.

2023-07-22 14:44:38

- reply

I've been really liking Obtainium a lot lately as well to help me update all these open-source apps without relying on a third-party app store. Everything is coming together!

2023-07-19 03:42:17

- reply

I used it with Telnyx. I didn't use Linphone for text, only voice. But Telnyx has a lot of SMS/MMS options available.

2023-07-18 11:27:09

- reply

Have you tried Linphone? That's on F-Droid as well and is pretty feature rich.

2023-04-21 02:26:32

- reply

I run a Tor bridge for my own use so that I always have a reliable bridge to connect to when I am remote.

2023-04-18 17:55:13

Is the mempool actually going to clear soon? 👀
https://i.imgur.com/oGb2S8e.jpg

2023-04-17 22:24:02

Just had solar installed on my house. Self-sovereign power pairs well with self-sovereign money!

2023-04-13 15:03:36

Bitcoin/LN node going down for some hardware upgrades.

2023-04-13 00:44:45

- reply

Pretty cool you can zap someone for something like this and it goes right to their wallet. Community in action. Great to see and shows the power of bitcoin and nostr working in concert.
#[0]

2023-04-12 14:17:22

- reply

And when they donate their wealth to others, they rarely look for recognition of that giving from others.

2023-04-12 13:43:43

"Transient" inflation still hot.
https://www.reuters.com/markets/us/us-consumer-prices-rise-moderately-march-underlying-inflation-still-hot-2023-04-12/

2023-04-09 15:31:26

- reply

Some how haha

2023-04-09 02:26:01

- reply

Oh Mylanta!

2023-04-09 02:08:51

...and so I told my wife, it would be wrong of me not to zap the nice feet.

2023-04-08 18:27:45

#[0] run

2023-04-08 16:19:13

- reply

Very sad. He was just back visiting too. 😢

2023-04-07 00:22:45

- reply

Nothing that I have any experience with to give an opinion unfortunately.

2023-04-06 23:03:27

- reply

Active Directory. It is a security mess. It is what you get for trying to be backwards compatible with so many older generations and build on top of it creating a complex nightmare.

2023-04-06 16:53:01

- reply

I would try to find real life examples and stories that highlight the importance of privacy. Too many people think that privacy is only important if you have something to hide. But usually the importance of privacy doesn't make itself apparent until it is too late. The more people value privacy in their everyday lives, the bigger of a push for privacy there will be in the products and services that are available to society.

2023-04-06 16:48:27

Anyone have a parent that used to clip coupons a lot? My mom used to clip coupons for groceries growing up.
People say bitcoin's proof of work is wasteful, but what good did making people clip coupons for discounts do for society? It is such a weird act. A store will give you a discount, but only if you spend time clipping out these pieces of paper first. We want to make sure you wasted time, energy, and paper before we drop the price of our products. It is basically proof of work, but is completely meaningless and wasteful. Glad that has mostly gone by the wayside.

2023-04-05 22:30:02

- reply

I love Christopher Nolan's movies.
Memento, The Prestige, Inception, Interstellar, Tenet.
Great sci-fi movies or movies that require thought engagement.

2023-04-03 23:05:06

- reply

3Blue1Brown has a lot of good videos. I've shared his bitcoin one with others many times. The one he references in the video about 256-bit security is really good as well.
https://m.youtube.com/watch?v=S9JGmA5_unY

2023-04-03 14:38:04

Reason #3027 why you shouldn't use Facebook. You're the product and your data, personal information, and images are all used for the gain of others and it is never in your best interest.
https://www.businessinsider.com/clearview-scraped-30-billion-images-facebook-police-facial-recogntion-database-2023-4?utm_source=reddit.com&utm_source=reddit.com

2023-04-03 13:15:42

- reply

Time to create gender-neutral connectors!

2023-04-02 23:12:14

One of my favorite ways of "cleaning" KYC bitcoin that is very simple is to open a private channel on a throwaway LN node to another random public LN node (over tor obviously). Then I'll funnel those funds inbound to my actual LN node over several transactions. I now have those funds for spending on my LN node without the funds being tied to the on-chain KYC UTXO.
You're basically ditching the KYC UTXO anonymously to a complete stranger while refilling your LN node (which is hopefully already funded with KYC-free bitcoin).
If I ever have to make an on-chain transaction as payment where I had to give my identity, I'll often also use this same technique with my change addresses from that transaction just to burn off the change on the lightning network to avoid contaminating other KYC-free I may have in my wallet.
Lightning Network is such an amazing privacy tool for bitcoin.

2023-04-01 01:48:02

- reply

Clock must've struck midnight where you are. Still another couple hours where I'm at before these shenanigans start. lol

2023-03-31 17:01:08

I just completed a trade on Robosats for the first time. I've been a long time user on Bisq and have completed hundreds of trades there, but this was the first time using Robosats. Definitely a lot less liquidity on Robosats, but was a good experience overall. Always nice to have multiple non-KYC options out there.

2023-03-30 12:44:12

#[0]
How come I get this warning on my own self-hosted cashu wallet?
https://i.imgur.com/FQU6NKf.png

2023-03-29 18:59:52

- reply

That doesn't narrow it down to it being the relay, the client, or anything else. Ryan is using both Eden and Amethyst, so what about his post makes you narrow it down to just Eden and not Amethyst or anything else for that matter?

2023-03-29 18:53:59

- reply

You're not a client of his. The fee is just for spam prevention and not a subscription. You're basically using the relay for free. As was said, there are plenty of other relays and plenty of other clients. A lot of variables with Nostr, find a combination that works for you and try not to be so hard on those that are donating their time to jump start this awesome project that is Nostr.

2023-03-29 13:33:10

- reply

I've been using my de-Googled LineageOS phone for several years now. I love it and I'll never go back to stock or Apple. Would love to try Calyx or Graphene someday though. Good article!

2023-03-27 15:04:38

- reply

Mine is currently set to 1GB. I had just increased it from 512MB last week.

2023-03-27 00:54:51

- reply

Wow, what are the chances that they lived so close to you?! That's wild. Glad he was able to get some relief!

2023-03-27 00:52:06

Every year that goes by I add more and more apps and services onto my self-custodial bitcoin node and each one that gets added makes me more and more excited about bitcoin. Can't wait to see what it is like in a few more years.
Anyone that says that the bitcoin space isn't building or innovative clearly isn't looking very hard.

2023-03-26 17:57:35

Overdue change, but just switched over from using Eletrum Personal Server to Electrs. Given that EPS isn't really being developed any more, I had to finally switch it out. I only used it internally or over Tor. Took overnight for Electrs to fully index, but now it is up and running. Seems to be working well.

2023-03-26 14:30:48

- reply

You crack me up. 😆

2023-03-24 02:25:36

- reply

There are still good organizations like that out there, but they just don't have the name recognition. They're more concerned with action on the ground than screaming so everyone can hear them. Always seems like the loudest ones are the ones with the worst reputations.

2023-03-23 21:16:07

https://i.imgur.com/MSEI7b3.gif

2023-03-23 21:10:47

- reply

You're a person with true dedication to the cause.

2023-03-23 21:06:08

I got my lightning address set up on LNBits with zap support just in time for Zapathon!

2023-03-23 13:51:49

I just wrote an article on Blogstack with my understanding of the latest bank failures:
https://blogstack.io/naddr1qqyxywpsxsen2v35qyv8wumn8ghj7un9d3shjtnndehhyapwwdhkx6tpdspzqmzlhwew6lp63hc0zumk45upv7l0jzknxlgvc3kjdux2dp3qhxn3qvzqqqr4gu2pxf2k
Feel free to give me any feedback.

2023-03-23 06:31:40

- reply

Hellblade was such a good game. Would love to see what they do with #2.

2023-03-22 17:31:13

- reply

PSA: For those being *reckless*, even though restore functionality isn't built yet, it is still worth while to download a copy of your backup JSON for your Cashu wallet. In the event you lose your browser data, you can still use the information in that JSON file to repopulate the data in your browser's local storage.
https://void.cat/d/ARmv8TDm2gxMSNXtqYGMRL.webp

2023-03-22 12:25:38

Thinking about scheduling some downtime for my bitcoin node for maintenance right after the upcoming difficulty adjustment so that when it comes back online it doesn't have as many blocks to catch back up on after it comes back online.
I've got big brain moves. 😆

2023-03-21 22:20:50

I never cease to be amazed by the number of Nostr clients and the sheer amount of variety in design and features among them.

2023-03-21 15:21:43

Just lost all of my following again. First time in a long time that happened. Very annoying, but luckily I had a backup that I was able to quickly restore with this time around.

2023-03-21 03:07:23

- reply

Oh nice! Good stuff!

2023-03-21 03:03:02

- reply

Sir, I haven't seen a penny in years...

2023-03-21 02:57:15

- reply

I'm sure these stats are pretty reflective of reality, but it should be noted that a lot of non-custodial solutions for lightning addresses (eg, LNBits, satdress, etc) don't currently support the sending of zap notes (kind 9735) which might then causes zaps to be under-reported for non-custodial. I'm currently using Ligess for my setup which only started supporting Nostr zap notes a couple weeks ago.

2023-03-21 02:48:25

- reply

My wallet being non-custodial is what makes my experience as a user superior. 😉

2023-03-21 02:00:14

- reply

I have hundreds of trades on Bisq and haven't had a single trade that went bad. Ya, I can vouch for it.

2023-03-21 01:01:09

- reply

Turns out the biggest risk wasn't some attacker but instead from ourselves running nodes with wumbo channels off of raspberry pi's. Haha

2023-03-20 15:56:10

- reply

Great list of suggestions. One thing I would add to your list that is super easy to start doing right away is to switch your email message viewing to text-only instead of HTML by default with your email client. This will prevent tracking when viewing emails and also make phishing links easier to spot. Most of the time you can get what you need from an email with text-only viewing.
Sometimes you might have to view an email as HTML to be readable, but usually there should be an option to not load remote content when doing so in your email client.
Text-only email by default is a great privacy preserving step that is also easy to do.

2023-03-20 12:46:18

- reply

This is the way.

2023-03-20 00:34:28

- reply

ChatGPT is the real big brother. 😅
#[0]

2023-03-19 23:53:49

- reply

Definitely feel you. I've had my fair share of ear infections and they're no fun. Hope it clears up for you soon.

2023-03-19 18:11:51

- reply

Wait, the guy who made Damus doesn't pronounce Nostr like Nostradamus?? Tell me it ain't so #[4] ! 😆

2023-03-19 13:35:56

- reply

Good group of guys! Enjoy!

2023-03-17 16:37:30

- reply

Right. I am not doing full db backups on my node at the moment. Just have a mirrored drive to protect from single drive failure which is sufficient for my lowly node.
I used to have quite a bit of funds on my routing node but have since toned it down to just a few channels and few million sats for my own spending purposes.
After having to actually go through the nerve-wracking recovery process using the static channel backup, I realized I either need to change my setup drastically or adjust the amount of funds I'm being #reckless with. I chose the latter for now.

2023-03-17 16:22:27

- reply

I've been playing around with cashu this morning and reading up on it. It is pretty cool. The privacy aspects of it are very nice. Even just being able to temporarily utilize satoshis on an entirely different lightning node/mint and being able to pay invoices privately from that node/mint is a cool privacy use case.