Martti Malmi

developing iris.to

Public Key

npub1g53mukxnjkcmr94fhryzkqutdz2ukq4ks0gvy5af25rgmwsl4ngq43drvk

NIP-05 Address

sirius@iris.to

NIP-57 Address

npub1g53mukxnjkcmr94fhryzkqutdz2ukq4ks0gvy5af25rgmwsl4ngq43drvk@npub.cash

Profile Code

nprofile1qqsy2ga7trfetvd3j65m3jptqw9k39wtq2mg85xz2w542p5dhg06e5qpz3mhxue69uhhyetvv9ujuerpd46hxtnfduq3vamnwvaz7tmjv4kxz7fwdehhxarj9e3xzmnyv8uxgg

Publishing to

relay.damus.io

relay.nostr.band

Author Public Key

npub1g53mukxnjkcmr94fhryzkqutdz2ukq4ks0gvy5af25rgmwsl4ngq43drvk

Show more details

Last Notes

2025-12-13 20:26:58

Vibing https://meet.iris.to
https://npub1g53mukxnjkcmr94fhryzkqutdz2ukq4ks0gvy5af25rgmwsl4ngq43drvk.blossom.band/4f0cec7231306d6a56af7686512fe2b295fa1a05bf5a9e7ae5c063b8fc1ff341.png

2025-11-29 17:32:18

Fixed graph-api.iris.to, now it's able to serve crazy big graph snapshots again. This graph is 30MB serialized, with 300K users and 12M follow relationships. https://npub1g53mukxnjkcmr94fhryzkqutdz2ukq4ks0gvy5af25rgmwsl4ngq43drvk.blossom.band/b0821561955e10f7d5aaeb2fcdcb80f315234e6131287a9163cf33cac1cdb95a.png

2025-11-24 06:45:52

- reply

Happy to have inspired 😀 Having a real DB that juggles between memory and disk and saves the indexes sure makes sense.
I could try and see if nostr-social-graph could use indexeddb and not have to load everything into memory on app start. For native, I've made a social graph pull request to nostrdb: https://github.com/mmalmi/nostrdb

2025-11-22 11:04:14

@npub1lr2…dl6a will have to sing Queen at the next Rockamoto
https://npub1g53mukxnjkcmr94fhryzkqutdz2ukq4ks0gvy5af25rgmwsl4ngq43drvk.blossom.band/0fc334a732909bab4a8f028fdd1c361030071468efbf17c52bb0ac3414d7ef49.jpg

2025-11-19 20:40:55

- reply

https://x21.social/ doesn't load for me, blank page 😬

2025-11-18 11:53:22

- reply

or at least web clients should be loaded content-addressed, over nostr

2025-11-18 11:43:11

Nostr is down
https://blossom.primal.net/344c7615552ed4f3d1ee72aefa66cfcf4a2d029ceaff7c53999a4d7e01d788c7.png

2025-11-15 08:48:01

Online beefs should be settled on Airchat. No keyboard warriors there.
#note19w5…nrra

2025-11-13 15:53:35

- reply

When servers are needed, instead of DNS bound APIs we'll be able to use double ratchet or MLS channels soon™.

2025-11-13 15:52:02

Nostr apps should be served over Nostr, independently of DNS, CAs and host servers. Nostr app env can provide key management, relay connections and event storage without every app having to duplicate. Ideally, this would happen on the browser or even OS level.
#note1205…69j8

2025-11-13 15:48:59

- reply

What's trusted / untrusted?

2025-11-13 15:44:24

- reply

Tauri version of this would be interesting. Independent of DNS + CA + host server, doesn't update without the user knowing. Could use native keystore outside the browser renderer.

2025-11-13 14:49:06

What would it take to make Brave browser add Nostr sign in, event storage and relay connections?

2025-11-13 14:42:16

- reply

If Github is to be used as a trusted source, it's best to host the whole UI from there. The other domains could always make it not use Github and re-prompt your nsec, or use it in a manner you did not authorize etc.
That said, it's a cool project — nostr apps would benefit from OS / browser level integration that takes care of key management, event storage and relay connections without every app having to do it.

2025-11-13 14:38:06

- reply

You still have to trust 44billion.net which hosts it (and DNS + CAs) — it could change the app that it serves

2025-11-13 12:27:00

- reply

Parent web app could run relay conns & event storage and child apps could communicate with it over postMessage

2025-11-13 12:21:18

- reply

I did not find source code for 44billion.net. Is there a spec for this "napp" packaging?

2025-11-13 12:17:25

- reply

On the other hand, if you don't have an extension, it's safer to give your nsec to only 1 website instead of 10...

2025-11-13 12:13:14

- reply

Browser extensions are more secure than a web app that is loaded dynamically from a server? Browser or even OS level integration would be best.

2025-11-06 18:32:22

- reply

That will also work with forward-secret sharing like MLS or Double Ratchet 👍

2025-11-05 09:51:16

- reply

I might become a Notedeck developer

2025-11-05 09:12:17

- reply

https://github.com/damus-io/egui-nav/pull/9

2025-11-05 08:56:33

- reply

I get some egui crash on macos debug build latest master when trying to navigate to any view

2025-11-03 12:34:01

- reply

Haven’t tried yet

2025-11-03 11:54:28

Seems like more and more libraries are redundant now. You can just ask an LLM to code the features you need. As for nostr, you can ask an LLM to sync your code with another client or library repository. Use test automation to reality check the result.

2025-11-02 08:41:19

- reply

@npub1t3g…l5g4

2025-11-02 08:38:52

https://npub1g53mukxnjkcmr94fhryzkqutdz2ukq4ks0gvy5af25rgmwsl4ngq43drvk.blossom.band/fb32d72b9cab7f96fc4c3f4a39be46ed36e24443d061dabe472802ba6ed95559.jpg

2025-10-31 08:58:22

- reply

Lyrics of this song, B Sirius Baby, are also by Stanley https://mmalmi.github.io/assets/video/b-sirius.mp4

2025-10-31 06:52:39

Mister X, Richard Stanley, passed away recently, at 82. He was a British movie director and music producer who moved to Finland in 1970s. I had the honor of meeting him a few times.
He kindly edited my web of trust article "Learning to Trust Strangers" in 2015. https://mmalmi.github.io/learning-to-trust-strangers
Charismatic, fun and friendly, he was one of those people you'll never forget. He lives in our memories and watches over us from the clouds like Mufasa.
Here's a remake of a Hurriganes song written by Stanley in 1970s. The lyrics were too difficult for Finns so he had to sing:
https://www.youtube.com/watch?v=3xCsUQkIepw

2025-10-30 22:24:14

- reply

Iris has a new integrated cashu wallet that should work nicely for zaps. Iris is back on iOS App Store and Zapstore ofc. Play store pending review.

2025-10-28 13:11:30

- reply

It's better than lightning because it can be sent asynchronously over any messaging channel, even offline, even if the recipient doesn't have a lightning wallet yet.

2025-10-28 09:15:45

Played my first ever gig on drums in Lugano! I still need to work on it a bit. Somehow forgot a snare note from all the chorus parts. But we had fun 😄 Thanks to the fellow musicians, audience and everyone who made the event!
#note1ufk…pvdc

2025-10-28 08:45:07

@npub12rv…85vg have there been proposals to address Cashu mints by nostr pubkey instead of DNS based address?
API commands would be sent over Nostr. I'm even thinking double ratchet could be suitable for this, providing forward secrecy for past API calls 🤔
I'd also like to have that on npub.cash so incoming lightning txs would show up instantly from the nostr subscription.

2025-10-25 15:55:31

- reply

Just sent a new version for review which should fix this by auto-adding the mint of the npub.cash token. In the meantime you should be able to fix this by manually adding the Minibits mint (doesn’t display in the mint list while balance is 0, new version also fixes this).

2025-10-24 16:25:51

- reply

Notifications only work in the PWA

2025-10-24 16:24:14

Iris is on the App Store again: https://apps.apple.com/fi/app/iris-the-nostr-client/id1665849007
And Zapstore ofc. Play Store upcoming.

2025-10-24 07:41:23

- reply

Thanks for noticing - that should be hidden in the app

2025-10-23 17:24:32

Share -> save to home screen in browser is too difficult, so here we go again https://testflight.apple.com/join/5xdoDCmG

2025-10-23 17:23:39

Without events, nothing happens.

2025-10-15 11:23:22

- reply

*got paid in fiat

2025-10-15 11:22:22

- reply

If existing PoS / payment terminals added btc option and merchant got paid in bitcoin, I think many would accept. Potential new customers and lower fees than credit cards, not much downside.
Currently some merchants use e.g. https://swiss-bitcoin-pay.ch/ and get paid in fiat but it requires a separate payment terminal and is always a bit of hassle, not great for supermarkets.

2025-10-15 11:06:42

Let's orange pill supermarkets. When you can buy food and everyday things with btc, it's a lot easier to offer as payment between people and eventually unbank yourself. No KYC required at PoS, yet.
Supermarkets need low friction payments, high throughput. Need bitcoin integration at PoS or payment terminal level. Preferably NFC.
Most payment terminals in Finnish supermarkets are Verifone. They announced BitPay integration in 2021, but haven't heard anything since. Is it actually available and deployed somewhere?

2025-10-11 11:50:48

My post from normie social media, translated from Finnish by Grok:
The foundation of well-being is economic growth, that is, value creation. This includes intangible forms as well: doing things better with the same resources as before. I also count value creation that GDP as a metric fails to capture or even measures in the wrong direction: all activities valuable to oneself or others that do not involve monetary exchange.
In public discourse, it is sometimes forgotten that the economy does not ultimately grow through consumption but by increasing production, even if the formula called GDP might temporarily show growth. Production grows through investments and work. Due to regulation and taxation, Finland is not an attractive country for these. Hence, zero growth for the past 18 years.
In Finland, there is a vast class dependent on public sector jobs, the tax-funded "third sector," and other income transfers, which is why the situation is unlikely to change.
Follow the money: as a group, those dependent on income transfers will never vote against their own wallets, even when it would be in their long-term interest. Public spending will continue to grow regardless of the government's composition because politicians, following their voters, lack sufficient incentive for cuts.
"Income transfers" is actually a euphemism for taking money from someone else through a unilateral decision, without offering something in return that they would voluntarily pay for. However, it is so tempting that moral and utilitarian justifications for it are always easy to rationalize.
The SDP will likely win the next elections, but will anything change? All Finnish parties are different versions of the SDP, defending the position of established interest groups with slightly different emphases. Well, perhaps we’ll get an exit tax, taxation of "unrealized capital gains," or other factors that work against the interests of productive people and investments.
On a personal level, the clearest solution is to leave the country, but for social and cultural reasons, this may be difficult for many. Finland still has many valuable things: nice people, beautiful nature, heavy metal music, and at least for now, a culture of trust.
Alongside the free flow of information enabled by the internet, Plan B, or Bitcoin, is perhaps the only light in the darkness. Bitcoin enables a parallel economic system where people can create value for each other, engage in trade, and save without someone skimming off the top through taxation or money printing, which makes many good endeavors unprofitable and thus undone.
Now we just need to "orange pill" people, that is, spread the Bitcoin gospel at the grassroots level quickly enough, especially among the youth. If getting wealthy through work and saving feels impossible, let alone starting a family or buying a home, it’s no wonder people fall into hopelessness or bitterness toward the "rich." Bitcoin fixes this.
Bitcoin needs to be accepted as a payment method in as many shops and services as possible so that it becomes easier to offer it as payment between individuals or accept it as salary.
Perhaps gradually, as an individual or even a company, one could break free from banks and centralized payment systems. This would be a welcome change to the current trend, where state and commercial actors increasingly monitor all financial transactions, communications, and other aspects of our digital lives.
At its worst, payment systems have been used as tools for social control even in Western countries, such as against protesters in Canada. Centralized payment systems are also more vulnerable to disruptions and service outages than decentralized ones. With the Cashu protocol, Bitcoin payments can be made between trusted parties even without an internet connection.
As the group of Bitcoin owners grows large enough, it starts to gain societal significance. According to one study, 11% of Finns and 24% of young people own cryptocurrencies, and the number is growing rapidly.
In the United States, political campaigning targeting crypto owners has been prominently visible, and Europe is following suit in this regard. Gradually, so many significant economic and political actors are getting involved that snowball-like growth seems likely.
The total market value of mined gold is still ten times larger than that of Bitcoin. It’s not hard to see Bitcoin surpassing gold: it’s easier to store and transfer. Unlike gold, there is only a very limited number of new Bitcoins left to mine, and there is no supply elasticity.
If investment wealth starts flowing from real estate and securities into Bitcoin, its value could increase a hundredfold or more.
Based on game theory, a rational actor would obviously go immediately to, for example, coinmotion dot com, buy even a little Bitcoin, and consider monthly savings. This is not a paid advertisement or investment advice, but a universal truth.
https://files.iris.to/6efc7cf5628602286cbbde0186310a61c5a0e3c7198a89c97d667b0ff8fc0e54.jpeg
https://files.iris.to/36b04e88028af3e392b31a3189bf0836e4de96b37111e62ec369a06e4fdd8be1.jpeg

2025-10-10 05:26:45

- reply

Thank you!

2025-09-22 06:25:33

- reply

I originally had #2 but for some reason deleted it to change my username 😄

2025-09-13 13:42:50

- reply

If jumble’s nostr system is better than ndk, one-off fork could make sense. But probably Iris & Jumble philosophy and UI direction are so different that the forks would not be kept in sync.

2025-09-13 12:17:55

- reply

Is there some other major problem besides all notes not appearing?

2025-09-13 12:17:37

- reply

Hmm, ndk outbox model should be enabled by default. Social graph filtering is a likely cause.
I'll need to make it bootstrap with more recent social graph snapshots and improve graph updating.
Follow lists are very large events: need negentropy or "send only matching event ids" support on relays to make recrawling & updating more efficient.

2025-09-13 09:36:45

- reply

One advantage of deletion approach is that it doesn't reveal the target of the original reaction event, in case you accidentally liked something you don't want to associate with.

2025-09-13 09:27:44

- reply

With "unlike" reaction you can cancel all previous reactions even if you don't know their event ids, and you don't need separate delete event handling. Counting only the latest reaction per user is what clients have to do anyway.

2025-09-13 08:52:43

Should reaction event with content "unlike" or "0" or similar be unlike?

2025-09-08 14:42:08

- reply

Yes

2025-09-07 10:56:19

- reply

Joined a moose hunt in the very north of Finland. Hunted with dogs and rifles.

2025-09-07 10:50:33

https://files.iris.to/55160827fe7cd778aee6ef577e7abd30bcbfc1120debebeb7b94961707cdbef5.jpeg

2025-08-28 16:12:58

Pics from Hong Kong
https://files.iris.to/ee30851b608570d898fe42564b512123cb5cc3ce67551b093c5c7119221a1f85.png

2025-08-28 14:41:08

- reply

It's a PWA, you can save https://iris.to to home screen. It's also on Zapstore but I haven't updated these changes there yet. Might try my luck with play store and ios app store one day.

2025-08-28 14:00:50

- reply

Map on search page
https://files.iris.to/106149e548ddcd6c3750523f1af294efac839c0c850a527165e1cbb27d85e434.png

2025-08-28 13:59:28

Some mobile layout updates. Copying is the highest form of flattery?
https://files.iris.to/70446a624cddbf73d6358496082784e5043f10de8cc14dd44ccff848981ee8e4.png
https://files.iris.to/93e28c02045e4dac4998aa64071225466c52761d6fc97ba9e76fc4674a5130de.png
https://files.iris.to/2f7c5a88369b6bcf791591ee104c27383c60cffd39825ce89c8d6999eb41cdd9.png

2025-08-28 12:53:01

- reply

This did not expire well

2025-08-28 11:35:59

- reply

strfry relays rejected rebroadcast but relay.nostr.band still serves it

2025-08-28 11:03:40

- reply

I wish I had Android

2025-08-28 10:36:19

- reply

Yes, you can’t force delete from other people’s devices. It’s just a friendly note to save storage space and long term feed estate. There’s so much stuff on Nostr that it’s useful to drop non-important content.

2025-08-28 09:09:14

- reply

Apparently many clients and relays don't care about expiration tag 😄

2025-08-28 08:55:47

asdfdsf this expires in 5 minutes

2025-08-28 06:47:45

- reply

It's easy to wrap browser apps with tauri btw. Iris is on Zapstore, and I might try my luck with play store and ios app store one day. Why not have both options. I've grown a bit weary of cloudflare.

2025-08-28 06:41:46

- reply

Zapstore signing is something that’s better in apk’s. PWAs rely on SSL certs that live on CDN or server: easier to hack when the code itself is not signed.

2025-08-27 10:43:03

- reply

Yes

2025-08-26 17:56:49

- reply

It's bad if the user thinks the expiration is somehow enforced, when it's actually just a friendly note that helps save storage space.

2025-08-26 17:55:12

- reply

No. Maybe could "set default".

2025-08-26 15:56:55

Added support for expiring messages. In fact, this message expires in 3 months. Your replies and reactions to it probably won’t, unless you’re on Iris.
https://files.iris.to/b9a7e7c0cd1e60eb0110f8f4c4cdcfc6070afff1cbc791e4c8d774460c09b631.png

2025-08-24 13:35:57

- reply

Maybe map needs to be in right side column

2025-08-24 13:20:05

https://iris.to/map geohash feed
https://files.iris.to/14203b4559a24f2facd479b22662150ef696f91b302655f9ffc4bcb66d23254d.png

2025-08-24 10:03:44

- reply

Negentropy or "send only matching event ids, I'll request those that I don't already have" would help with bandwidth

2025-08-24 09:50:34

- reply

What was buggy in neovim? I only recently graduated from IDEs to neovim. Vim would of course be even more universal and simple.

2025-08-24 09:41:33

- reply

Yes to both.
Initial load of all the follow lists is just heavy. Need to use graph snapshots instead, at least on web & mobile, so there's that centralization. But you can always locally recrawl when you feel bandwidth-rich.

2025-08-23 11:35:54

- reply

If you're near a border, maybe last used geohash should be used instead of current location

2025-08-23 11:32:45

- reply

meant border not intersection

2025-08-23 11:31:26

If you live at the intersection of geohash areas, frequent posting from neighboring geohashes can reveal your fairly detailed location?

2025-08-23 10:20:53

- reply

We're probably moving with image & video clients to kind 1 with label tags. Only point for kinds other than 1 is if you want to be intentionally incompatible with other clients.

2025-08-23 08:34:21

- reply

I think so too. Either social graph or pay to play. PoW hinders regular users (especially mobile) more than spammers.

2025-08-23 08:21:40

- reply

I think social graph might be needed

2025-08-23 08:19:58

How will bitchat solve spam in the geohash mode?
Paid relays are not good for onboarding and still need moderation. Web of trust does not work with ephemeral identities. Rule-based spam filtering doesn't work: it's a cat-and-mouse game that you can't win and rules get ever more complex, with false positives.
Bluetooth mesh mode doesn't have the spam problem, because spammers don't have global reach.
#nevent1q…j4a6

2025-08-22 18:06:02

- reply

True. Then the only option is to somehow restrict relay write access, which is not great. Bluetooth mesh works better because spammers dont have global reach.

2025-08-22 14:49:32

- reply

Will need web of trust filtering when spam starts

2025-08-22 12:24:12

- reply

In the meantime you can save it to home screen as PWA (from the safari browser's share btn)

2025-08-22 12:23:48

- reply

I am already able to build it for ios, but would need to go through the app store compliance hell again. I might one day.

2025-08-22 12:21:30

- reply

The suggestion is to add ["l", "picture-first"] tag. That is compatible with existing clients, yet allows image clients to show only posts that have that label. No unnecessary complexity. Kind 20 will remain a solution to those who seek a smaller audience for their posts and compatibility issues like you noticed between nostr.build and lumina.rocks.

2025-08-22 11:30:22

- reply

Maybe someone will PR Olas & co. to use kind 1 instead 😅 Would prevent the same problem from happening over and over again.

2025-08-22 11:02:24

- reply

It’s unnecessary complexity

2025-08-22 10:01:57

- reply

They could query based on the ["l", "picture-first"] label tag.
If they choose to show kind 1:s that don't have the "l" tag they'd need to client side filter by event / image format.

2025-08-22 09:18:03

Iris will continue to use kind 1 instead of kind 20 for image post creation:
* Works on most clients, doesn't break existing clients' reaction / reply based feeds
* Kind 1 events reach larger audience than 20
* No added complexity, no different handling for kind 20. Keep nostr client implementation simple.
* Clients that don't support images can just show the text content, or filter out notes that have images
* Clients that only want images can filter out posts that don't have images
* Optionally, they can use ['l', 'picture-first'] or similar tag for relay indexing of image posts
#nevent1q…kns0

2025-08-22 09:00:06

- reply

Iris has this by default, but it boots with a static social graph snapshot which might not reflect current follow & mute lists, need to improve updating

2025-08-22 08:46:29

- reply

Show content only from your social graph & share mute lists is the only good solution I can think of. Perhaps complemented by LLM based content filtering at some point.

2025-08-21 19:49:53

- reply

Thanks to @npub1dmh…tgtm for the "For you" feed!

2025-08-21 19:43:55

Iris 0.2.0 on Zapstore. For desktop self-sovereignty: https://github.com/irislib/iris-client/releases
Nostr now has an algorithm: "For you" shows 50% recent posts and 50% popular posts in your network. This is calculated locally.
Relay feeds, 2 main column layout. Much faster back & fwd nav and better scroll retention.
Double ratchet multi-device & group messages work sometimes, but can't recommend. It will be the next focus, together with improvements of cashu wallet integration and zaps.
https://files.iris.to/d3d4c32a5b919c3d4b3d426ef32ff6b5c0767e8e9497e98b0fdade6cf3c758e9.png

2025-08-21 15:34:51

- reply

It could have been done with a label tag without breaking interoperability. Now clients need to add custom handling for kind 20 or hide them (when people react or reply to them)

2025-08-21 15:30:16

- reply

kind 20 started appearing in my popular feed so had to add support or hide them

2025-08-21 15:29:25

- reply

support for display that is

2025-08-21 15:28:54

Not sure if separate kind 20 for image posts is a good idea, but added support to iris.to anyway

2025-08-21 13:35:56

- reply

show must go on