moonsettler

https://paynym.is/+boldgrass1aa

stubborn self-sovereign money maximalist and aspiring cypherpunk. signaling for BIP-119 OP_CTV

Public Key

npub1dgesr3zcgyjv2z0050h7auzdlf88gycry7tlk7wsypmgngy97yxqv4mccn

NIP-05 Address

moonsettler@iris.to

NIP-57 Address

npub1dgesr3zcgyjv2z0050h7auzdlf88gycry7tlk7wsypmgngy97yxqv4mccn@npub.cash

Profile Code

nprofile1qqsx5vcpc3vyzfx9p8h68mlw7pxl5nn5zvpj09lm08gzqa5f5zzlzrqpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhszrnhwden5te0dehhxtnvdakz78j5z90

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1dgesr3zcgyjv2z0050h7auzdlf88gycry7tlk7wsypmgngy97yxqv4mccn

Show more details

Last Notes

2024-03-19 16:49:33

- reply

i rarely use nostr because my favorite clients are broken in tor browser now.

2024-03-19 16:48:02

- reply

iris link in my bio doesn't work?

2024-03-19 00:19:12

Craig Wright is a narcissistic sociopath and a compulsive liar.
not 'autistic'! those are very different problems.

2024-02-19 09:59:51

- reply

people that think you can bitcoinize an economy or just facilitate more adoption without letting people interface with fiat in the bootstrapping phase are turbo retards.

2024-02-19 09:07:19

- reply

wrenching control out of the hands of uncle sauron and the wef morons over on an off ramps is of prime importance. hating on fiat is easy but solving p2p exchange with digital fiat that can't be stopped or throttled by the politicos and banksters is super hard.

2024-02-18 13:21:16

- reply

wdym by "CTV cannot do covenants by itself?" did you mean CSFS?

2024-02-16 15:14:37

- reply

trying to gain consensus on LNhance before reverting to CTV only activation effort has kinda delayed things a bit.
LNhance is CTV + CSFS + IKEY
it would enable LN-symmetry as well as better pools/channel factories.

2023-08-15 18:42:44

- reply

too bad i'm not fucking young anymore!

2023-07-25 21:15:50

- reply

unstaffed arkham asylum

2023-07-25 21:09:23

- reply

i'm not missing any point. he can get fucked. not doing the verification. that's the only relevant point. he can keep making twitter shittier each day sure. it's a great plan, no way for it to backfire.

2023-07-25 18:40:40

- reply

i think inever said fuck Elon! before he started to make twitter unuseable with one retarded change after the other. but i can't be sure.

2023-07-24 19:22:50

- reply

https://cdn.nostr.build/i/b2e670f584f3ea0b84f6cf2240aa7e0994a216d3c251f1655dcdabc1eebcc1e0.png

2023-07-24 19:11:11

twitter started shadow banning me after i said fuck Elon! in a DM... soon after no more DMs again, and my posts are hidden.
coincidence?

2023-07-22 11:49:07

- reply

whoever came up with this, get fucked!!
https://cdn.nostr.build/i/ca7bf86084e335561fab25d20a048e60c7886d63550bf840b6d80dd6d0adccb3.png

2023-07-22 00:26:07

- reply

"freedom of speech!"?? unless you reached your f***ing WEF quota for the day, then no speech for you! only bugs!

2023-07-22 00:25:52

- reply

i guess just an other reminder that the WEF hates me...

2023-07-22 00:25:33

- reply

wtf is this daily dm limit??? COME ON!

2023-07-03 13:08:36

- reply

i'm guessing this is the same mechanism that otoh makes people freak out when a bear or shark eats someone even tho that's statistically insignificant af.

2023-07-01 23:34:14

- reply

protesting? nah. civil disobedience? i plan to make that my baseline.

2023-07-01 21:51:20

- reply

have to say nostr is a lot more useable than bluesky so far. and don't seem to be many bitcoiners there either.

2023-07-01 20:55:09

- reply

control freaks and Karens.

2023-07-01 18:30:13

- reply

are there any high signal technical groups / rooms idk wtf to call it related to bitcoin development? covenants and stuff? the feed just makes me want to fall asleep most of the time.

2023-07-01 18:26:19

- reply

degraded performance due to "record traffic" apparently.

2023-07-01 18:18:12

- reply

thx! it's going super well so far.
https://nostr.build/i/9f3f48e98bac2d4d44f73900ea4d9752c8f3bdec413ec5459061d545b6321de5.jpg

2023-07-01 18:04:47

- reply

alright i will check it out if you are serious. why not?

2023-07-01 17:46:29

- reply

i wanted to come back when this childish infatuation with zaps is over and nobody yaps about them anymore, like nobody posts hysterically about likes either.

2023-07-01 17:17:57

- reply

already are.

2023-07-01 17:17:28

- reply

it's 100% real. it explains why i can't read anything. past my daily WEF quota ffs!

2023-07-01 16:36:25

- reply

i mean if you make Y = G and the blind it the mint won't be able to tell and you have the r blinding factor and DLEQ proof to prove it was you who burned it.

2023-07-01 16:32:48

- reply

lol Y = G?

2023-07-01 16:19:10

- reply

this retarded cunt managed to make twitter worse every time he tried to fix something.

2023-07-01 16:16:28

fuck Elon Musk! he fucking ruined twitter it has become completely unuseable now.

2023-07-01 16:13:28

- reply

what a queer idea... probably not.

2023-06-17 12:46:50

- reply

dude... next time you gonna make these funny fish faces crypto bros do for engagement?

2023-05-12 11:13:15

- reply

best part is, it would be fully automated in the background.

2023-05-12 10:47:12

- reply

fucking apple!

2023-05-11 08:31:13

- reply

let my try to explain it more succinctly what i'm trying to accomplish @npub1vad…nuu7!
the first DLEQ proves C' = k*B'
second DLEQ proves C = k*Y
it Alice gives Carol the first DLEQ Crol can't produce or verify C from it without r. r blinds the relationship between C' and C thus protects the 'unlinkability' aspect. Alice however can reveal the second DLEQ to anyone.

2023-05-10 21:54:42

- reply

ofc there are special cases where Bob would know that C' and C are related, for example if there is only one token in existence of his database of a certain denomination.

2023-05-10 21:50:21

- reply

thanks for the correction, will fix!
yes, the first DLEQ Alice receives at the time the token is minted. however will not ask for the second immediately, that would be bad for her privacy.
so in theory it doesn't break unlinkability, because B' or C' can't be linked to C, and these two DLEQ-s don't happen in the same session. they would happen displaced in time. Someone would present C for Bob anyhow, Bob doesn't know if that is Alice or Carol. Bob may know that C' is related to a specific lightning invoice, but he has no idea that C is related to any such thing.

2023-05-05 10:19:56

- reply

time and a different world. everyone had to rush to work or school pretty early, there was no time to sit down and eat. to this day i usually don't eat anything before noon got so used to it. just a coffee to get me started.

2023-05-05 10:09:39

- reply

when i was a kid we had no cereal, or breakfast.

2023-05-04 15:26:49

- reply

@npub1vad…nuu7
can i ask you to take a look at this as well?
i have been meaning to ask an opinion on this (second) DLEQ from someone:
https://github.com/moonsettler/cashu/blob/dleq-por/docs/specs/40.md#alice-requests-dleq-proof-on-c
the idea is that the first DLEQ only proves that k private key was used to create C signature, if the r blinding factor is revealed because normally it only proves the relationship between B' and C'. this second DLEQ however is supposed to be a publicly verifiable proof that a token was signed by Bob without breaking unlinkability.

2023-05-01 14:32:22

- reply

that sounds like the optimistic scenario to me because mankind survives.

2023-05-01 11:23:04

- reply

i know who i could ask, but i don't want to nag them with something so basic.

2023-04-30 20:28:54

- reply

so lemme put the thinkboi hat on...
K = kG
K' = K+sG = (k+s)G so if i send s to K then he can calc the private key k' to the new silent pub K' i made for him, but i can't, because i don't know k right?
so all people observing this would see is that a pub they never seen before initiated a DM to K but there was never any reply. then some other new pub dms with a new pub... 🤔

2023-04-30 20:13:33

- reply

time to use 'silent dm's! you should be able to derive a unique pub for a session from a pub with a tweak and send the 'notification dm' from a throwaway pub... or something like that.

2023-04-30 15:56:24

- reply

but let's make something clear here! it's not sha256 you have to worry about, idk why people keep bringing that up. not realistic.

2023-04-30 15:55:09

- reply

i'm say it's a hundred trillion times easier to migrate all web service to larger keys overnight than to do anything about it on bitcoin.

2023-04-30 15:48:49

- reply

sha256 is more important for binary and document integrity than secrets. for example an adversary could alter binary packages and load them with malware and the digital signatures would check out. or just replace transactions or whole blocks in the bitcoin blockchain. that would be some trolling...

2023-04-30 15:45:41

- reply

i heard this line touted a lot but it's a wholly unimpressive argument. most systems are trivial to upgrade to higher and higher keysizes way faster than how q computers can progress. and they almost immediately gain the security benefits of such upgrade without a long migration period that can never be truly completed.

2023-04-30 15:05:26

- reply

what could have been... otoh i could be dead by now in some stupid accident doing something fun like scuba or sky diving. a jetpack accident...

2023-04-29 17:18:07

- reply

it shouldn't reveal anything at all. maybe the changes in the size of the backup needs some consideration like padding.

2023-04-27 14:20:37

- reply

btw there is already a solution figured out for issues like this:
you could create a programmable voucher, that has time locked refund conditions.
you can ask the mint to sign this voucher in exchange for redeemed fungible ecash. basically the recipient can give you something like a paynym or a nostr pub (public profile info), and you can lock in the funds while online.
then he can accept and verify this mint signed voucher when you meet offline that is say good for 2 days, after which you can claw it back if the deal doesn't work out. he can claim it at his leisure later that day.
it's not exactly intended for this fringe use case, but could work.

2023-04-26 13:20:39

- reply

it would be nice to have a designated kind for cashu communication in general that does not distinguish from the internal content. for challenges and proofs instead of a json api where proving malicious conduct or abandoning the session is hard to prove by the wronged side. the relays wouldn't have to keep those events for long like 30 days tops is enough for anyone to grab them who is interested in specific events.

2023-04-26 10:12:11

changed the notation to the one i'm more comfortable with (and probably less confusing to all of those involved in cashu; removed the relationship between x and r because it will probably not work in the future; added (proposed) DLEQ on C blind signature that doesn't break unlinkability when revealed, thus the signature can be proven to be created with Bob's private key without revealing the blinding factor used by Alice...
https://github.com/moonsettler/cashu/blob/dleq-por/docs/specs/40.md

2023-04-20 23:32:22

- reply

we got something way better than that. only it's difficult to prove the correctness. it's a strong intuition for now.

2023-04-20 21:51:00

- reply

i think you can send all ecash offline or out of band, the receiver just can't verify the tokens are not already spent while offline.

2023-04-20 21:48:15

- reply

there is custodial that is:
- kyc/aml ridden unsafe
- permissioned account system
- orwellian surveillance nightmare
- debased via fractional reserve
- gatekept and metered walled garden
and there is custodial ecash:
- private
- either fungible or programmable
- accountless and individually permissionless
- auditable supply (fingers crossed)
- globally interconnected via ln
both can rug you tho. but it's pretty clear which one is the winner.

2023-04-20 21:24:45

- reply

maybe. proof of reserves and liabilities adds significant burden to the otherwise sleek protocol. fraud proofs add some more. there is always a tradeoff. but i think it's totally worth it. maybe not for every use case not for very small amounts and services, but for the ones people use as a bank even if just for their monthly spending.

2023-04-20 21:21:35

- reply

more like this is the way that does not require permission from everyone. the other ways that require consensus changes just keep on not happening.
that said things are very bullish in #cashu land. some of the things we came up with are absolutely #nuts!

2023-04-19 20:27:04

- reply

what do you call this: like chaotic good, but you can only enter a number and there is no explanation?

2023-04-19 19:17:36

- reply

show me on the doll where Mr. Chaum touched you!

2023-04-19 15:27:04

- reply

maybe there is a market fit for cheap chink non-functional knock offs...

2023-04-19 15:19:59

- reply

possibly true. also checking pow does not pay the relay.

2023-04-19 15:18:28

- reply

yeah, kinda expect lightning to steal their thunder. 😎

2023-03-30 22:42:35

- reply

not yet.

2023-03-28 13:06:50

- reply

what we call our body, is an ecosystem. gut flora is probably more important but what lives in your armpits also seem to be.

2023-03-28 12:31:52

- reply

to be fair the other big game changer is living a stress free life. so i guess somehow a combination of personal hygiene ditching deo and no stress.

2023-03-28 12:27:43

- reply

there is a difference between actual body odor and the bad smells bacteria produces. the difference is enormous and deodorant makes it way worse somehow. not using a deodorant for like 2-3 years now. total game changer.

2023-03-24 22:14:03

- reply

thank you!

2023-03-24 21:39:33

- reply

as in taking x only for the 4 points in the hash for e, that actually worked.

2023-03-24 21:36:45

- reply

my solution was that i replaced the sides in the substraction. previously tried to make it work x-only and that sort of worked, but this seems better.

2023-03-24 21:28:56

#[0]
may i ask you to take a look at this, and confirm, that R1 and R2 will be different and the proof will fail, because they will actually be -r*G and -r*B'?
https://nostr.build/i/nostr.build_45b91e5ab53b2cd0ff2d18bef7103c14e72b4ec5f8c42da07369bc6c642f3ddc.png

2023-03-24 21:20:47

- reply

watching now.

2023-03-07 01:15:35

- reply

it's a mixed bag. it's not hard on an abstract level. but to be emotionally involved with the fate of strangers would be exhausting.

2023-03-04 01:38:11

- reply

i think orbot uses localhost:9050, so that could be default...

2023-03-04 01:35:45

- reply

just add
.proxy(new Proxy(Proxy.Type.HTTP, new InetSocketAddress(proxyHost, proxyPort)))
to
private val httpClient = OkHttpClient.Builder()
.followRedirects(true)
.followSslRedirects(true)
.build();
😉

2023-03-03 20:19:52

- reply

fyi this is the no1 thing some of us are waiting for:
https://github.com/vitorpamplona/amethyst/issues/132
orbot in vpn mode is simply not reliable for not leaking your ip.

2023-03-02 23:39:13

fun idea, i was eating at a place and at the end they asked if i want to pay with card or in cash? then said if i choose to pay in cash and i throw all 6 with the 3 dice i don't have to pay. so they prefer a less than 0.5% cost to payments. as opposed to the 3-6% cards have. lol!

2023-03-02 23:26:54

twitter gets worse and worse every day. even when i thought it hit rock bottom, it can still get worse.

2023-03-02 20:29:44

- reply

it has been a long ass time i had so much fun coding in a language i never learned. frustrating ofc, but still.
https://replit.com/@moonsettler/BlindSignatures#main.py

2023-03-01 12:05:14

- reply

now it probably won't work in vending machines and stuff. have you tested?

2023-03-01 12:00:59

- reply

never mind, i found them!

2023-03-01 11:48:45

- reply

i there a github or something?

2023-03-01 11:45:30

- reply

promise ledger? that sounds like something interesting to me.

2023-03-01 10:42:13

did Elon just completely broke twitter or only my feed is completely empty?

2023-02-27 19:21:40

#cashu is a crapton of fun! and i have not even tried to run it.

2023-02-26 18:40:51

- reply

i did not set up anything yet. i don't like these custodial easy solutions i don't have a domain for self hosted lnurl, no telegram... zap doesn't work with keysend afaik.

2023-02-26 17:46:04

- reply

the goal is to keep these custodians and your exposure to them small. the other goal is that you get damn good privacy and lightning interoperability.
the weird assumption people have about e-cash is that it's something bitcoin can do, but in truth there is no such limitation. the e-cash notes could be denominated in anything and interact with any system in existence.

2023-02-26 17:34:26

- reply

that's why i keep telling people the current dumb fee market implementation is not metastable. there is no upregulation mechanism and the downregulation is delayed defection.

2023-02-23 15:51:19

- reply

Jason doesn't seem to have followed the ukrainian war.

2023-02-18 22:27:12

twitter dm-s seem to suck ass lately.

2023-02-18 19:46:31

https://nostr.build/i/nostr.build_6bb62bd083815669b548c792a4bab7e7b3a6b193338d9d87413a1d5aa30307ea.png

2023-02-18 17:02:51

- reply

you can't really move them on lightning sats are channel bound.
maybe you could bind specific sats to a statecoin and then transact the counter value on lightning and atomically transact that statecoin with the tx??

2023-02-17 23:29:50

- reply

"as long as you use libsecp256k1 and don't try to rewrite it at home, this doesn't pose a security problem."
guess that's ok then.

2023-02-17 23:24:38

- reply

it's not considered a 'safe curve', recommended for diffie hellmann by some. that was not considered to be a problem for bitcoin as bitcoin used ecdsa only.
https://nostr.build/i/nostr.build_7194ace49f301ca162d9cd276c4ba77a861264b1a1aeb64b9d190eecf0d3b0c9.png

2023-02-17 01:23:29

- reply

damn looks like i'm missing out on this fun.

2023-02-17 00:50:55

#[0]

2023-02-16 17:51:51

- reply

wen ln.tips switches to nostr from telegram? i will not use telegram or signal or anything that requires a phone number.

2023-02-05 20:15:37

- reply

lmao! it's a literal nigerian prince. long time no see.