nick

https://frostsnap.com

peer-to-peer cash security

Public Key

npub1j8d6h8mzvc8f2fvysrf09nlkmn7m2ylj32zl5na4tm5e8fd5dqysrg26k2

NIP-05 Address

nick@frostsnap.com

NIP-57 Address

warlikesarah97@walletofsatoshi.com

Profile Code

nprofile1qqsfrkatna3xvr54ykzgp5hjelmdeld4z0eg4p06f764a6vn5k6xszgpr4mhxue69uhkummnw3ezucnfw33k76twv4ezuum0vd5kzmp02pwcx3

Publishing to

nostr.bitcoiner.social

Author Public Key

npub1j8d6h8mzvc8f2fvysrf09nlkmn7m2ylj32zl5na4tm5e8fd5dqysrg26k2

Show more details

Last Notes

2024-11-06 01:14:28

- reply

good answer, im on team no knees

2024-11-05 13:20:49

Melbourne BitDevs is going very strong. It's always sad to miss a meetup, but it's also so heartening to see others take on the role of hosting. Bitcoin social hydrae.
https://bitdevs.com.au

2024-11-03 09:55:44

- reply

AUSTRALIA
EXISTS

2024-11-02 08:09:58

- reply

Interesting hadn't heard of that will check it out

2024-11-02 02:35:46

What's the deal with Claude subscription?
Is it still easy to hit the usage limit?
ppq.ai gets expensive with large code calls.
Thinking of trying Cursor IDE to see what it thinks about the repos.

2024-11-01 11:40:43

- reply

https://m.primal.net/HYOd.gif

2024-11-01 07:49:27

- reply

incredible work SPB

2024-11-01 06:03:15

dying (filing tax return)

2024-11-01 02:29:06

https://m.primal.net/Lomz.png

2024-11-01 01:29:32

- reply

lmao absolutely, scatman's world just as good IMO
https://www.youtube.com/watch?v=02vDkMEdIkY

2024-10-30 22:41:17

- reply

Alex would you rather have no elbows or no knees

2024-10-30 06:13:07

https://m.primal.net/LmjW.png ⚔
#note1vdu…uc53

2024-10-29 21:52:48

bad day to be a CI test failure
https://m.primal.net/LmRw.png

2024-10-29 20:29:56

top 5 birds:
1. african grey parrots
2. chickens
3. Andy N Condor (rip king)
4. street pigeons
5. rainbow lorikeets

2024-10-18 03:00:02

https://m.primal.net/LZSb.jpg

2024-10-18 02:38:20

- reply

ycombine is more like getting into the nationals team during highschool

2024-10-18 02:36:04

Ages ago i asked a bitcoin VC his opinion on whether YCombinator would be worthwhile for bitcoin startups,
"That's like winning the olympics" he replied.
Quite a revealing moment, keep getting reminded of it

2024-10-18 02:20:59

ipad zoomer vs. onion routing latency

2024-10-17 14:22:00

https://m.primal.net/LYlf.jpg

2024-10-16 04:48:32

programming
https://m.primal.net/JMfb.png

2024-10-16 02:12:53

all i want for christmas is someone to implement cryptographic secret santa in rust+wasm

2024-10-11 02:46:04

- reply

¿por que no los dos? ❄️

2024-09-05 04:03:12

- reply

Yeah we do something like this in frostsnap, it used to explicitly be called aux_rand. We're just seeding ChaCha20Rng with our secret share, and using the nonce counter to increment https://m.primal.net/Kesj.png

2024-08-13 08:42:03

oh yeah i forgot to bring this up, it's very easy to scrape every image uploaded to primal
#note1c5m…gqzn

2024-08-13 08:35:11

- reply

need proof of home address before image rights

2024-08-06 18:17:54

- reply

In that case the attack could simply exfiltrate the master xpriv

2024-08-05 18:03:29

Today we disclose Dark Skippy - a powerful new method for a malicious signing device to leak secret keys.
With a modified signing function, a device can efficiently and covertly exfiltrate a master secret seed by embedding it within transaction signatures
https://darkskippy.com/demo.mp4
If an attacker manages to corrupt a signing device, Dark Skippy can deliberately use weak & low entropy secret nonces to embed chunks of the seed words into transaction signatures.
It takes just two input signatures to leak a 12 word seedphrase onto the Bitcoin blockchain.
The attacker can watch on-chain until they spot an affected transaction, unblind and invert the low entropy nonces using an algorithm like Pollard's Kangaroo algorithm to learn the master secret seed.
Then the attacker can wait and steal the funds whenever they decide best.
Despite this attack vector not being new, we believe that Dark Skippy is now the best-in-class attack for malicious signing devices.
- The attack is impractical to detect
- Requires no additional communication channels
- Effective on stateless devices
- Exfils master secret
Beyond ensuring your device firmware is genuine and honest (opensource), mitigations include anti-exfil signing protocols and we present some new ideas for additions to PSBT specifications to disrupt this attack.
We encourage mitigation discussion and implementation exploration.
This attack highlights the importance of verifying and securing your device's firmware, and the danger of sharing stateless signing devices with other people.
We will be publicly releasing our code later this year.
Authors: @npub1xh8…gst6 (follow him so he gets onto nostr), Robin Linus, and myself.
If you have any concerns or questions we recommend checking out the FAQ page on our website:
https://darkskippy.com

2024-08-05 05:13:49

Check out our latest prototypes for the next generation of Bitcoin self-custody!
https://m.primal.net/JoTk.png
https://frostsnap.com

2024-07-29 23:49:49

Why shouldn't I eat a complimentary biscuit?
https://m.primal.net/JiWU.jpg

2024-07-26 00:19:27

- reply

beer where

2024-07-25 05:05:01

- reply

now this is podracing

2024-07-18 01:16:08

i mustve purged most latex from my memory after my uni thesis

2024-07-16 14:57:27

there's definitely some goober at youtube HQ spamming me with "Video paused. Continue watching?"

2024-07-16 13:37:25

- reply

brooooooo what is testnet4 that's like layer -4

2024-07-15 11:01:12

dark colours on the colour wheel are simply disappointing

2024-07-12 03:34:05

insane robot hallucination
i didn't even say i was doing bitcoin stuff, claude must carry context between sessions?
https://m.primal.net/JNeQ.png

2024-07-11 17:48:01

First zap.stream:
Tried to get my zaps working again, realized channels were dead
Tried to abandon channels, funds disappear from wallet
Tried to reset wallet transactions, exposed RPC secrets
Tried to export node seed, LND doesnt let you
100k sats vanished into the ether, reckless.
Job for tomorrow.
zap.stream is good though, no note spam
#note1u2x…gy58

2024-07-11 16:18:18

testing reckless nostr apps goodluck to my npub

2024-07-11 15:30:01

- reply

(about the unveiling)
-> tactical

2024-07-11 15:29:35

- reply

i leid

2024-07-11 15:18:30

GREAT EVENING TO BE PROGRAMMING
https://m.primal.net/JNCu.png

2024-07-11 00:38:45

https://m.primal.net/JMfb.png

2024-07-10 11:05:44

official unofficial nostr logo
#note1c94…skdd

2024-07-10 11:05:13

- reply

I WILL USE

2024-07-10 11:01:18

- reply

love it, PNG? 🙏

2024-07-10 10:59:38

cool post from @npub1l6u…zvtg
https://conduition.io/coding/ticketmaster/
My friend sent to me,
"Wait I know this person, they wrote some incredible FROST posts and are on nostr!"

2024-07-10 07:53:45

rare character
៚

2024-07-08 12:22:39

seems our australian handlers have grown accustomed to enacting curfews as a means of control
https://www.theguardian.com/australia-news/article/2024/jul/08/police-impose-curfew-on-alice-springs-again-after-more-violence

2024-07-08 12:17:32

1996 pepsi website background https://m.primal.net/JKcu.png

2024-07-08 05:09:03

onchain happenings
https://m.primal.net/JKbe.png

2024-07-08 05:06:56

- reply

ahhhh thanks for the heads up! fixing

2024-07-08 02:26:31

I scored 0 in the snake game! #snakegame

2024-07-06 10:54:41

https://m.primal.net/JJSV.jpg

2024-07-06 10:43:03

zontent
https://en.wikipedia.org/wiki/Zond_5
https://m.primal.net/JJSN.jpg

2024-07-05 07:11:05

zero care for price action within [30k, 95k]

2024-07-05 05:55:17

- reply

true but need some proof if someone is putting an existing identity on nostr. Would be very easy scam to make fake account and ask for donations @npub17xv…c9as 🤨

2024-07-05 05:34:11

aleksander pistoveltov

2024-07-03 08:39:36

i did the bad thing (registered another domain)

2024-07-03 07:41:03

all accounts are fake unless NIP05d or otherwise attested

2024-07-03 03:54:43

Update your bitcoin nodes!
sudo apt update && sudo apt upgrade
A recently disclosed SSH exploit is actively being attempted!
https://m.primal.net/JGQJ.png
https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regresshion-remote-unauthenticated-code-execution-vulnerability-in-openssh-server

2024-07-02 17:01:44

so has anyone zapped themselves a bajillion sats yet like i did on stacker news?

2024-07-02 16:39:04

- reply

Going down tortoise rabbit hole
1) There are lots of videos of tortoises getting stuck on their backs, and of other tortoises ramming them in assistance.
2) Apparently they're mostly solitary animals.
So what do they do when they find themselves stuck upside down? do they just wait for days until another tortoise happens to stumble upon them?

2024-07-02 16:28:01

This barnacle-covered tortoise, found on the coast of Tanzania in 2004, was the first substantiated case of trans-oceanic tortoise dispersal, having traveled some 740 km over the course of weeks or even months.
https://m.primal.net/JFrW.jpg
https://m.primal.net/JFrX.png
https://doi.org/10.1080/00222930601058290

2024-07-01 16:29:53

- reply

fixed EVERYTHING https://m.primal.net/JEiJ.png

2024-07-01 13:26:39

changing terminals to kitty, "suckless" terminal actually sucks

2024-06-25 07:50:14

they're called lifetimes in rust because you'll spend a lifetime fixing them

2024-06-17 09:29:12

- reply

~3 lines of python to pause ecash redemptions except for a winning token
~5 lines of code on the mint to randomly select a winning token
~10 lines of code for a physical unlocking mechanism to activate upon balance increase
i completely made this up but could be real

2024-06-17 09:15:11

- reply

If you're concerned about in-person privacy, you can place the item box in the departing hallway, each person leaves one at a time through the hallway and has the opportunity to collect the item if they have the winning ecash.

2024-06-17 09:12:32

Hacking private raffles into ecash (whjo is asking for this):
Imagine you own a rarity that you want to privately raffle,
You place the item in a box protected behind a locked door, a door that only unlocks after a payment to a displayed QR invoice.
You create an ecash mint and allow people to exchange sats for ecash tickets. Ticket holders continually self pay to improve group privacy.
To draw a winner, you draw a single note at random and make that note the only redeemable note which can pay the invoice to unlock the door.

2024-06-14 04:28:31

https://m.primal.net/IjyN.webp

2024-06-08 14:49:00

dawgster
https://m.primal.net/IdPT.jpg

2024-06-08 14:45:55

- reply

attention span is fucked gm

2024-06-08 14:43:35

- reply

Hell yeah hadn't seen Lineage before, looks good to go for my ancient samsung

2024-06-08 11:00:36

it's completely insane that FOSS Android OSs only work on pixels

2024-06-07 03:50:52

recreating this image at the next ledger booth
https://m.primal.net/Ibal.jpg

2024-05-29 06:57:24

- reply

pasta + lao gan ma chilli oil

2024-05-29 04:52:57

melbourne tap water undefeated taste dont care what is in it

2024-05-27 10:43:22

frostsnap demo slightly delayed, recording with less cracked phone

2024-05-27 10:36:19

accidentally sent all my scarce signet coins to a burner frostsnap wallet and deleted the db 🫡

2024-05-27 09:26:41

This can be avoided, we need remote signing to secure hardware.
#note1k6z…jdff

2024-05-27 09:18:01

me, apparently
https://m.primal.net/IOpU.png

2024-05-24 15:06:30

https://m.primal.net/ILWI.jpg

2024-05-22 05:55:33

STOP MAKING APPLICATION SPECIFIC NIPS OR I WILL MAKE A NIP TO END ALL NIPS

2024-05-20 17:34:12

Unveiling the latest frostsnap devices sometime this week 🔜
A small step in our radical shift for bitcoin self-custody tech.
Nostr gets to see it first

2024-05-15 10:00:09

- reply

cooking

2024-05-14 05:46:02

boomers will join a group chat and completely trash it in minutes with a flood of terrible memes

2024-05-13 05:53:11

- reply

(i also own this tshirt)

2024-05-13 05:45:36

signs uniqlo has topped:
- founder became the wealthiest man in japan without anyone knowing.
- every guy in asia owns the same damn tshirt.

2024-05-09 05:28:19

🌩 Melbourne BitDevs Tonight 💻
We will be discussing
- recent attacks on privacy
- security exploits on the Apple M-series chips
- mining centralisation
- Linux backdoors
- BitVM milesones
- UTreeXO Beta
- and more!
See you there! 🥷
https://bitdevs.com.au

2024-05-08 14:10:51

Distributed security through multisignature is a superpower.
Protecting your wallet behind multiple keys is the best tool available to protect your money from thieves and authoritarian governments.
It's going to be super fucking important once shit hits the fan.
Sadly, I think wrench attack risk is only going to increase, as will attacks on self-custody from governments globally.
Geographically distributed private property for the first time in human history, we need to make it the standard.

2024-05-08 06:36:01

- reply

why does this spotify link embed in primal so nicely? how can i DIY for other content

2024-05-08 03:58:05

locking in
https://m.primal.net/IEVN.png

2024-05-07 15:36:47

i wrote an article a ages back on Regulatory Compliant Privacy - a "Crypto" Trojan Horse, inspired by this (terrible) idea of "Privacy Pools" on ethereum.
I never got around to posting anywhere, might float it here instead

2024-05-07 15:25:10

do clients embed mp3 players like they embed mp4s?
https://utxo.club/assets/ForgoneDestruction.mp3

2024-05-07 07:30:15

- reply

how2post without nsec

2024-05-04 08:52:26

- reply

hi my name is
hi my name is
hi my name is
chk chk 26k2

2024-05-01 04:10:23

Someone in the apartment above decided to start hammering out their seedphrase at 6am

2024-04-30 10:49:34

egg maxxing gm
https://m.primal.net/IBdY.jpg

2024-04-24 13:18:16

- reply

ive fought those battles

2024-04-24 04:12:51

- reply

pls ser we are poor devs