Martti Malmi

developing iris.to

Public Key

npub1g53mukxnjkcmr94fhryzkqutdz2ukq4ks0gvy5af25rgmwsl4ngq43drvk

NIP-05 Address

sirius@iris.to

NIP-57 Address

sirius@getalby.com

Profile Code

nprofile1qqsy2ga7trfetvd3j65m3jptqw9k39wtq2mg85xz2w542p5dhg06e5qpz4mhxue69uhk2er9dchxummnw3ezumrpdejqzrnhwden5te0dehhxtnvdakz7wv32ky

Publishing to

eden.nostr.land

nos.lol

nostr.fmt.wiz.biz

Author Public Key

npub1g53mukxnjkcmr94fhryzkqutdz2ukq4ks0gvy5af25rgmwsl4ngq43drvk

Show more details

Last Notes

2024-10-14 07:39:04

Fug... now that I'm home, I woke up last night to reflect on past cringes. On the main stage panel in Amsterdam I forgot what I was about to say (how to make money with Nostr) after already starting my answer and ended with "and umm yeah [awkward silence]". Should have re-asked the question.
I'm quite sensitive to cringe, but fortunately those moments have been mostly off stage since Slush 2014 which was pretty bad (or maybe I just haven't noticed). I'm not the best speaker, but I'll try 😄 Come see me in Lugano next week!

2024-10-13 19:46:05

- reply

For those who don't do push notifications, it could send email, sms or fax

2024-10-13 19:21:23

Random dev thoughts: Would it be a good idea to do an open source web push notification server for Nostr?
It could have fine-grained options for what notifications you want, from whom and how often.
It could be used automatically in the background by a client, or through its own web UI. Clicking the notifications would redirect you to the client of your choice.
It would be a lot like a relay in that it needs to match incoming events to a potentially large amount of subscriptions. Subscriptions would be persisted in a database and maybe managed over a REST API.
In addition to the stuff typically sent over Nostr, you need to send the subscription object and other things like notification frequency, maximum social graph distance or score, minimum zap amount to notify etc.
It would connect to other relays and maybe also have a websocket endpoint for receiving events over Nostr protocol.
Extending strfry into this direction crossed my mind, but maybe something like Django (or whatever web framework you're familiar with) would be better, as we need to persist the subscriptions.

2024-10-11 16:46:43

- reply

You can use disappearing messages if you're worried about device access. Disappearing messages require ratcheting, otherwise the message history will be found on relays and decryptable. Ratcheting protects your past and future messages even if your main key is stolen by a compromised client or one-time device access.
On Signal, maybe someone who borrows your phone could link another device without you noticing? Idk. But double ratchet still protects from all the other scenarios.

2024-10-11 16:09:48

- reply

What would this attack look like in practice, against Signal for example?

2024-10-11 03:50:11

- reply

Temporary npubs are quite similar to message queues. Maybe you could also send a "delete" event to relays after receiving a message.

2024-10-11 03:25:39

- reply

That's easy to do on Nostr with secure messaging protocols like double ratchet and probably MLS. Just add "create anonymous chat" in the UI.
It's just that relays can probably figure out who you are if you also make other Nostr requests. Maybe need a different client and relays if you want to avoid that.

2024-10-11 03:18:20

Secure DMs and groups might be how Nostr wins. Like Signal, but better: no phone number or centralized service provider needed. Actually there are no publicly visible user IDs involved, so in that regard it's similar to simplex.chat.
Unlike public messaging, DMs do not depend on the network effect. Great for onboarding people and keeping them returning with push notifications. They get a bitcoin wallet, zaps and all the other Nostr greatness on the side.
Many people don't want to let go of their existing follower base on X, but "Nostr DMs only" is easier to do. I could imagine that becoming a thing in the Bitcoin scene at first.

2024-10-10 11:59:12

- reply

I’ll definitely look into MLS

2024-10-10 10:14:07

- reply

This is right next to the conference venue, which is a beautiful old brick building

2024-10-09 15:41:34

I'm at Bitcoin Amsterdam, but spent half the day finishing some Signal-style double ratchet messaging.
Deployed an experimental version on https://iris.to. You can create chat invite links and give them to friends via QR or other messaging. The UI is still lacking and glitchy, but just had to demo at the conference.
The chats cannot be publicly linked to either participant, and even if your main Nostr key is revealed, the content and existence of past messages stays hidden.
https://image.nostr.build/b4533acd973793f7114fd5c272ccd5b5045ea0bd127c214e8314fc4c8282a354.png
https://image.nostr.build/ded8c0437548cb1359d34b43b966b64f798cd2f98ae5f859771f47cc551cd5bd.png
https://image.nostr.build/4458f2de8f4d424aff137d2d7ed283dd27501e1abc0a43234405008614a5cb70.png
Also published npm package nostr-double-ratchet 0.0.1: https://www.npmjs.com/package/nostr-double-ratchet
It's not actually double ratchet yet, but the single ratchet already achieves forward and backward secrecy.
The second ratchet would help secure the latest consecutive messages by same author, in case a message key for the most recent of their messages is compromised. That makes disappearing messages or manually deleted messages more secure. I guess we'll have to do it so we can say "Signal-level security".
This is obviously not tested or audited yet, but probably it's not worse than normal Nostr DMs 😅
You can take a look at the source code, but I'll write a better technical description later. It's using existing Nostr cryptography + some key derivation stuff. Chat invites use gift wrap -like arrangement addressed to the inviter's temporary session key. https://github.com/mmalmi/nostr-double-ratchet

2024-10-07 19:26:32

How to do millisecond timestamps on Nostr? 🐒 In chats it's not unusual to send multiple messages during the same second, not to mention other stuff like games.

2024-10-07 05:06:51

- reply

Seems there's no whitespace before the url, so other clients interpret the leading part as part of the url.
Maybe Iris shouldn't highlight urls that don't have leading whitespace or linebreak, so users notice in the editor that something's wrong. (I actually used to have that check in my regex, but that broke other things in the library I used.)

2024-10-06 18:58:21

- reply

Gzip can however compress the text content of notes whether binary or json

2024-10-06 18:54:59

- reply

Event IDs, pubkeys and sigs are such high entropy data that gzip probably won't compress them much. Also binary formats are faster to decode than json (+ gzip).

2024-10-06 18:49:54

- reply

I believe we'll always have JSON for simplicity and backward compatibility. Simplicity is indeed important, it's why Nostr attracted developers. I don't think opt-in binary format supported by some clients and relays can break that. We already have many nips not supported by everyone.

2024-10-05 19:18:25

- reply

Fields like event id, sig, pubkey, p & e tags would be 50% smaller in binary vs utf-8 hex. Follow lists are currently quite large and their size would be basically cut in half.
But if we implemented NIP-114, we could save even 90% or more in bandwidth and some processing as well, depending on how many relays you connect to. Hoping to find some time for it again. https://github.com/nostr-protocol/nips/pull/1027

2024-10-04 07:06:20

- reply

You have a point. The user's own avatar is one of the first images shown on the page, in a certain size, so you could even guess the Nostr user.
Without the proxy, requests are sent to multiple servers, making it more difficult to associate everything the user does.
On the other hand, those other image hosts might include those that are built expressly for logging and tracking users. Popular service like nostr.build or imgur.com can do that kind of analysis anyway.
Using a proxy, you can at least choose which host(s) you trust. Ultimately, the choice of proxy should be configurable, just like relays. Image loading without proxy is privacy-wise somewhat equivalent to outbox model (or nip05) where you connect to random addresses that see your requests.
Relays also know a lot about what you're looking at, and you might even reveal your identity by authenticating. The only way I see around this is onion routing where Nostr requests would be relayed on behalf of others, so there's plausible deniability.
Associating network address to a geolocation is a feature of the internet protocol. Tor and VPNs (where you also need to trust a 3rd party) seem to be the only solutions to that.
When it comes to image proxying, file size is one very pragmatic consideration. Without a minimizing proxy, avatars can be 100 times larger. Maybe multi-resolution image formats are the best solution to that.

2024-10-03 10:48:13

- reply

Fixed these two

2024-10-03 09:33:51

- reply

Unfortunately, yes. The wallet is hosted on the same domain (iris.to), but it's a separate application running in an iframe. I haven't integrated it on the actual Iris side yet.

2024-10-02 07:47:16

@npub1h0u…rwx8 do you have a spec for the double ratchet protocol you're building?

2024-10-02 04:59:18

- reply

testing cmd+enter

2024-10-02 04:58:15

- reply

#nevent1q…kema

2024-10-02 04:57:19

Fixed it for you
https://image.nostr.build/17202defe2d4295a3fd83b7bb4bbc3b982a724e14f940d35e05c8174e1c9ec33.png
Upload is fast, but nostr.build takes some time to check the image and return the url
https://image.nostr.build/1cc298a7cce6d0519962f410fc1be085d1c9e3d24a743009e920865c1edbd82f.png
#nevent1q…6wzz

2024-09-30 18:59:49

- reply

Zap.army

2024-09-30 16:48:03

- reply

There's no download indicator but it should be downloading https://files.iris.to/large_social_graph.json. You can also try downloading from that link and feeding to "load from file".

2024-09-30 16:41:44

- reply

It’s so large that it crashes the mobile browser though 🤷‍♂️

2024-09-30 16:31:55

Added to https://iris.to and https://graph.iris.to the option to download a large pre-crawled social graph with 161K users and 5.25M follow relationships.
https://image.nostr.build/c937f408d0543e06c86ae4df700d3ead8e61122c53fe7d1c54e3bb7382c487a4.png

2024-09-28 13:45:40

- reply

Forward secrecy means that compromise of a long-term key doesn't reveal past messages. Signal does provide that. It's a different category of attack if someone gets access to your device and sees your chat history, or tricks you to link an untrusted device.
Export is possible in any client, at the very least with screenshots or by writing the message history on a piece of paper, but that's not related to forward secrecy. Disappearing messages is the solution when you don't want your message history potentially seen by anyone later.
You can use a VPN to hide your geolocation from Signal (which you should do on Nostr as well if you need privacy), but it's true that they can connect your messages to your phone number, see when and probably with whom you're chatting. Not surprised if intelligence agencies are mining that data.
With Nostr we're at least over the phone number part, there's no single service that sees all traffic and there are different ways to fix the metadata issue — and do forward & backward secrecy when desired.

2024-09-28 09:16:19

- reply

Signal doesn't have forward secrecy if you can save a backup of your chat? I don't think that's the definition.

2024-09-28 08:38:40

- reply

Actually even without device linking, I'd rather use forward-secret messages even if they're out of sync with some other client.

2024-09-28 06:59:05

- reply

Deriving a single-use public key for signing each Nostr event would have the advantage of messages not being linked to any other message or user, though.

2024-09-28 06:56:42

- reply

Am I right that nip-17 reveals the message recipient public key?

2024-09-28 06:56:12

- reply

What attack does the symmetric ratchet protect from? If your device is compromised, your message history will be revealed anyway.
Maybe it would help in the case when you locally delete earlier messages in a chain ("disappearing messages" or otherwise) but they're still on relays.
Maybe I answered my own question, but is there something else besides this?
Why not more difficult? Implementing DH + symmetric ratchet is more complexity than just DH.

2024-09-28 05:56:17

Halp me understand double ratchet. What's the advantage over just periodically generating new keys and doing DH between them? Would be fairly simple to do on Nostr. Even if your main private key was stolen, your message history would be safe.
In addition to DH keys, double ratchet also has individual "message keys" and "sending/receiving chain keys". In what real-life scenario would they be compromised without also compromising all past messages on device?
https://signal.org/docs/specifications/doubleratchet/
https://image.nostr.build/c66a4b601a146bbd7bdb93122fa7b1d778355f75801deaa1298be7a09444f465.png

2024-09-28 03:33:32

- reply

Social graph is not just the people you follow (1st degree), but also people they follow (2nd degree) and so on.
Currently Iris loads up to 2nd degree by default. There's also a tool for crawling up to 3rd degree, but it consumes a lot of bandwidth and cpu. 2nd degree was 20K users and 3rd degree 160K users in my graph, so there's plenty of diverse voices.
Optionally we could show posts from unknown users who have a nip05 (e.g. username@iris.to) from a bot-resistant provider. In a permissionless system like Nostr, we will always need to limit write access somehow or it will be filled with spam.
https://image.nostr.build/1407ad9d130088eceff4a8f1d73dc4f546237b47db170c8f48313d38839695eb.png

2024-09-27 09:28:15

- reply

I made the borders rgba(255,255,255,0.2) in Iris theme

2024-09-27 08:27:10

- reply

It sets npub.cash address only when you create a new user on Iris. Maybe it could suggest npub.cash address for existing users who don't have a LN address yet.

2024-09-27 07:49:24

Rolled out new https://iris.to version:
* Zero-configuration zaps for new users: comes with a [npub]@npub.cash lightning address and an integrated Cashu wallet (cashu.me)
* ReplyGuy-free experience: automatically hides content by users not in your social graph
* "Unseen" feed. Click "home" or switch tabs to refresh.
* "Adventure" feed. Shows content from everyone in your social graph.
* Social graph based fast user search
* Better scroll position retention on back navigation
"Add to home screen" for better mobile use experience & push notifications.
This new version is based on NDK. I think it's a good idea for web devs to work together on shared core libraries.
Not perfect, but I'll keep working on it! If you preferred the previous Iris version, you should use https://snort.social which is basically it.
https://image.nostr.build/2f997643856deed77cbb27eb68549fe5def27b3464f1d88d716c80badac0d354.png

2024-09-27 07:46:43

- reply

Apparently cashu.me is not nip-60 yet — is there some other wallet I should use on iris.to instead?
Is nip-60 on public relays a privacy tradeoff? I imagine it reveals when there's been activity in your wallet.

2024-09-27 06:41:16

- reply

Sorry that Iris doesn't have translations yet! Snort.social is basically the old version of Iris if you prefer it.

2024-09-26 07:39:47

- reply

How do you make gift wraps work with WoT?

2024-09-25 16:38:59

If your client doesn't support WoT yet, at least you can use WoT relays.
#nevent1q…clk8

2024-09-25 16:18:30

- reply

Social graph filtering works great and doesn't require domain names or other trusted parties, but nip05 (maybe limited to trusted providers) can be one way to complement it for newbies who are not yet in the graph.

2024-09-25 09:30:26

- reply

Yes; he's not only a translator, swordsman and academic, but also an artist!

2024-09-24 04:31:14

- reply

I was thinking about bitcoin mining style PoW which some have suggested, but actually I'm concerned it might hinder normal users more than spammers. There was a PoW-based anonymous reddit once, but it was filled with spam. https://github.com/notabugio/notabug

2024-09-24 02:04:54

- reply

Have you configured CORS headers? It's necessary to allow requests that originate from other domains like iris.to or snort.social.

2024-09-23 17:52:29

- reply

Basically a domain-name based Nostr username, get one for free at https://iris.to/free-nostr-address

2024-09-23 17:46:25

- reply

It's best if they can be introduced by someone, or get noticed by zapping.
Secondarily, messages from users who have a nip05 from a bot-resistant provider like iris.to, or provided a sufficient proof-of-work, could be scored higher, at least within the "messages from unknown users" pool.

2024-09-23 17:00:00

I had such a cool translator @npub16ww…5cht at #nostrasia2024!
https://image.nostr.build/11922ffeb7d0ed6a0384c51f6b63889c191e115a3dd7433947bfda5a73401423.jpg

2024-09-23 15:43:51

- reply

Yes. It actually limits to 5th degree so basically everyone who's somehow connected. It only initially downloads up to 2nd degree follows though, and then further when you visit their profiles. I could make these parameters configurable.

2024-09-23 15:39:08

- reply

It only shows content from authors who are in your social network. Nostr-social-graph library https://github.com/mmalmi/nostr-social-graph

2024-09-23 15:35:53

try https://beta.iris.to for a replyguy-free experience

2024-09-22 10:46:12

- reply

Approved

2024-09-22 03:14:44

https://image.nostr.build/66fc8265b4f9e0d9c89a10e0471d4c30f2be04febcd8dac4cd4377a62bf814ee.jpg #BitcoinTokyo2024

2024-09-18 14:14:24

- reply

It's just embedded as a /cashu subdirectory & iframe in the user interface. I'd like to make it more seamlessly integrated, so you could quick zap, show the balance and automatically redeem incoming zaps from npub.cash without the wallet page being open.

2024-09-18 14:04:36

Should I use nuts.cash @npub1wun…qhq8 instead of cashu.me as the integrated wallet in beta.iris.to?

2024-09-18 13:33:39

- reply

Just made it fetch missing follow lists from your follows when you change current user

2024-09-18 13:16:23

- reply

for clarity 🐒
purple: you and your follows
orange: followed by at least 10 users you follow
gray: followed by at least 1 user you follow

2024-09-18 13:14:49

- reply

Yes. Purple for yourself and followed users. Orange for users that are followed by users who are followed by at least 10 users you follow, and gray for at least 1.

2024-09-18 12:54:32

https://image.nostr.build/5b27a090cdf43f8268fdaf5b3ab0ae832e14acd3e490035610a6c8ee1ccae24e.png
https://image.nostr.build/12d0aeaa4c9a8c406b3588ee7aa82960afbd18950bd7789583cd9a795038555b.png
Published npm package nostr-social-graph and its demo on https://search.iris.to
It builds a social graph from Nostr follow events. You can query followed users, followers and follow distances. You can change the graph root user, efficiently calculating new follow distances.
It maps public keys to integers as internal representation, consuming less memory and storage when serialized. My graph of 23 000 users and 120 000 follow relationships is 2.2 MB on disk.
The package also includes pre-crawled datasets of follows and profiles that you can optionally use. They're used on https://beta.iris.to and https://search.iris.to for hydrating the search index and profile cache.
https://beta.iris.to uses the social graph for filtering of replies and notification, so you don't need to see that reply guy again (unless he's followed by people you follow — need to add "muted by followed users" support).
https://www.npmjs.com/package/nostr-social-graph
https://github.com/mmalmi/nostr-social-graph

2024-09-16 08:32:57

- reply

Yes 👍

2024-09-16 02:27:12

おはようございます ☕️ Woke up at 5 am Helsinki time to adjust to Tokyo time.

2024-09-15 14:56:17

- reply

I'm hosting it myself, so it can access the nsec stored on the same domain and works without configuration. Enabled npub.cash and Coinbase exchange rate by default.

2024-09-15 13:21:21

- reply

Afaik yes, but I think others will follow. Having a wallet and zaps out-of-the-box makes onboarding newbies so much easier.

2024-09-14 15:30:30

- reply

Ping @npub12rv…85vg

2024-09-14 15:29:24

- reply

It's the same application

2024-09-14 15:28:14

- reply

It should redirect to beta.iris.to

2024-09-14 15:26:25

Added cashu.me wallet to https://beta.iris.to . When you sign in as a new user, you're all set to send and receive zaps without configuring anything. It sets [npub]@npub.cash as your lightning address.
Haven't implemented zap button send via cashu yet, but you can copy the zap invoice and pay it in the wallet.
https://image.nostr.build/46587e9d2fc0725ca2e1c00f2850fc8b3f2c248de797e3115a9be2803183f664.jpg

2024-09-14 07:34:02

https://image.nostr.build/e3fafe2a671f40cfe39fb316ba0363fc0241d42f1bed99ec5df3bca7eadf93d3.png
Nostr.band API down @npub1xdt…ntxy
When API is down and user not logged in, maybe I should show "Follows" or "Adventure" feed curated by my own social graph or something as a placeholder.
Best would be NDK SQLite adapter which could calculate the trending stuff locally.

2024-09-13 14:21:26

- reply

Thinking of integrating some existing cashu wallet as the default wallet of https://new.iris.to

2024-09-13 14:20:25

Is there some way to receive normal zaps to a cashu wallet?

2024-09-11 18:06:53

- reply

https://github.com/irislib/iris-docs

2024-09-11 07:50:31

- reply

https://www.iltalehti.fi/verokone

2024-09-11 04:59:10

- reply

I hope it will be soon!

2024-09-11 04:56:12

- reply

True, we need ways to extend beyond the bubble. I think we might be able to store 3rd degree contacts even on mobile browser clients. Native clients or at least relays can store up to 4th degree, which I believe covers most people on the internet. Also one simple thing that can help is showing posts from unknown users that your social graph reacted to. Completely unconnected users are tricky, I can't see a spam-proof way to accept messages from them besides zaps.

2024-09-10 19:21:32

- reply

Thanks for testing! It's is still alpha and has more bugs than there are stars in the solar system. When it's released at iris.to, I'll link to an issue tracker. In the meantime you can let me know what are currently the most annoying bugs 😄

2024-09-10 17:22:28

- reply

Counting mutes vs follows in your social graph

2024-09-10 14:26:25

- reply

They'll just send fake zap receipts 😔

2024-09-10 13:59:37

When ZapGuy fake zap spam? I don't think many clients filter zappers.

2024-09-10 11:45:41

- reply

Some people follow Tracking Token Disrespector which spams my feed 🤦‍♂️ https://image.nostr.build/837d0f00b9bc7ce7a97e47c3666a975667ebe13eb49c7f9106629840c86497c7.png

2024-09-10 11:35:16

- reply

For that reason I'll probably need to include followed users' mute lists in the social graph as well. Configurable mute threshold in the UI. I'm already annoyed by noisy bots that people follow showing up in the "Adventure" feed.

2024-09-10 08:22:09

- reply

Need to fix reply form, meant to reply to #note168f…8g4c

2024-09-10 08:20:24

Some people in my network are following bots so it can be a bit annoying at times. Need to add mute lists to the feed & social graph.

2024-09-10 07:56:31

Check out https://new.iris.to for a ReplyGuy-free Nostr experience. When logged in, it hides replies from people who are not in your social graph. You can display the hidden messages by clicking on the button underneath.
https://image.nostr.build/62e5c3558a5e73ccf98611f16cc3b726b9d431e213f33d3cc32e81e066bbd524.png https://image.nostr.build/20e354fe8bdf1a17d3b157d9e8267b8d4888e2af511fb5b93ee0e9e127748b5d.png
https://image.nostr.build/49f1ee71224925bc0804ff525271e94b21e657c21f1cb7635bc18153447c50c3.png
There's also "Adventure" feed for showing all notes from your social graph:
https://image.nostr.build/0d754b8223e03ab64dde6e9368b69bc51e6d18835dc31d94f8f4d1cd19eda17a.png
I have worked on it together with the Nestr "decentralized GitHub" team. Nestr frontend and Iris are built from the same codebase using build configuration options for different branding and features. You can easily extend the configuration to make your own branded version. Source code to be released soon™.
The client is based on NDK. Full SocialGraph up to 2nd degree is downloaded on first login, and thereon only missing follow lists are queried. I'll be experimenting with options to go beyond 2nd degree.
The graph is serialized and saved locally in a compressed format, which is much faster to load than it is to reconstruct the graph from Nostr events. My graph consisting of 260 follow lists and 23000 users is 3 MB on disk.
It's still very much work-in-progress and mostly tested on desktop Brave, but it's already my favorite way to browse Nostr.

2024-09-06 19:48:24

- reply

@npub17as…de6v will probably generate a new key and profile for each spam message next

2024-09-06 16:51:36

- reply

Maybe we can have newbie discovery relays that use Cloudflare turnstile or something. Iris.to uses it for nip05 name registration. At least it's a temporary fix.

2024-09-06 16:43:37

- reply

We discussed this today:
#note1cw6…9w85
tl;dr: I would use zaps or invite codes to onboard unconnected newbies. Storage and bandwidth are limited, so it is not possible to allow unlimited write access to everyone. As Nostr becomes more popular, any spam opportunities will be exploited. Regexes, IP rate limits, PoW are just band-aids that can be circumvented.

2024-09-06 16:29:21

Now it's replicating the original post. Still wanna filter by regex, or maybe consider WoT? 😄
#note17ct…4kgp

2024-09-06 14:30:12

- reply

Here's your note encoded in a QR code, so you can print it and send by fax machine.
https://image.nostr.build/585ca55852468609489ddc4a26327854c88fd43430fe76334da9095fc2ad9ebc.png

2024-09-06 12:13:01

@npub1q9p…vcqf html widget still has a problem: it scrolls the page onto it when it loads. Can't use.

2024-09-06 09:53:17

- reply

Yeah, invite code to paid relay would be one simple solution to newbie-friendly spam prevention. This is not limiting anyone's freedom: users can always choose what clients and relays they use. What works best will be most popular.

2024-09-06 09:27:33

- reply

How would you limit write access then? Storage and bandwidth are limited, and will be filled with spam unless you limit write access somehow.

2024-09-06 09:07:02

- reply

Spammers would just start producing variant messages that won't match a regex

2024-09-06 08:12:54

- reply

I hope we can do p2p between clients in the future, skipping the relay part

2024-09-06 08:10:39

- reply

Spammers have better resources for PoW than the average mobile user