provoost
Sjors Provoost

https://sprovoost.nl

Physicist turned bitcoin developer aka "shadowy super-coder", author of Bitcoin: A Work In Progress

Public Key

npub1s6z7hmmx2vud66f3utxd70qem8cwtggx0jgc7gh8pqwz2k8cltuqrdwk4c

NIP-05 Address

sjors@sprovoost.nl

NIP-57 Address

f08be5@lnwallet.app

Profile Code

nprofile1qqsgdp0taan9xwxadyc79nxl8svanu895yr8eyv0ytnss8p9tru047qpp4mhxue69uhkummn9ekx7mqpz3mhxue69uhhyetvv9ujuerpd46hxtnfdur7mzw4

Publishing to

nos.lol

relay.damus.io

wot.utxo.one

Author Public Key

npub1s6z7hmmx2vud66f3utxd70qem8cwtggx0jgc7gh8pqwz2k8cltuqrdwk4c

Show more details

Last Notes

2025-04-01 20:04:13

- reply

Oh and I forgot that a bigger piece has more momentum (heat from the outside moving to the core), so probably need to take it out of the pan earlier to reduce overshoot.

2025-03-31 13:12:04

How it started... how its going.
EasyPark took over ParkMobile and then jacked up prices by up to 18x. Fortunately there's actually competition. And tourists will probably keep using it.
https://image.nostr.build/797a2c5e062b80035fbf0fec4605e52e6a63b2b5321aaa0d3ac474800ed6b902.jpg
https://image.nostr.build/9b51cf8202db84e064b24be3925535148581b5ae18d409460d9e1d6b20a500c7.jpg

2025-03-30 17:42:46

Unfortunately nostr doesn't fix this. And that "please list your social media accounts" question on ESTA applications isn't that innocent anymore either.
Assuming the First Amendment doesn't make a comeback, we'll probably see more encrypted group chats (e.g. MLS based).
Unfortunately those are not immune from rats, which governments could offer bribes for. So really we'll just go back to good old Soviet kitchen conversations with trusted friends, after everyone leaves their phone at the door.
And then Glory to Trump in public.
#note1sux…nzde

2025-03-30 15:26:14

- reply

Site: https://villavieresidences.com/odyssey/

2025-03-30 10:14:09

- reply

Right, but while we all wait for the Supreme Court to maybe step in, Microsoft will probably just comply.

2025-03-30 10:08:01

- reply

* but not for

2025-03-30 10:07:44

- reply

Schiphol airport has "private security" too. There's some military police present at the airport for customs and general security, but for mundane baggage checking.
Of course I fully expect the US to screw this up in every conceivable way. But at least cities and state governments have an incentive to insist that their airports don't suck.

2025-03-28 20:42:25

- reply

And of course there are promising Nostr based alternatives. Hopefully in a few years we won't have this Sword of Damocles situation.

2025-03-28 20:38:24

Friendly reminder that at some sudden point Github is not going to work anymore. Especially if by "US law" you mean any Executive Order, e.g. because one contributor is too woke for POTUS?
Until such time though, it's a great platform.
#note1tdx…sg99

2025-03-28 19:01:07

@npub1xts…kk5s broken? Verification using the app also didn't open Safari, so I had to use the DM.
https://image.nostr.build/c82df63bd107086e50970691c200557db7190255e682f306db88b1a8ba539f97.jpg

2025-03-28 18:50:58

- reply

Apparently it was for a fairly technical reason, that they supposedly don't have standing. I guess then every single European citizen should go to court over this instead?

2025-03-28 18:43:11

Unfortunately Dutch ISP #Freedom lost their court case against EU censorship (by decree with no due process). But it's good they tried.
(the censorship itself is DNS based and trivial to circumvent, if for whatever reason you want to read RT, but that's not the point)
#note1rdx…gesj

2025-03-28 18:39:58

Jammer om te horen dat de fascisten gewonnen hebben en EU censuur per decreet in stand blijft. Maar kudos aan #Freedom om de strijd te voeren.
https://fountain.fm/episode/fgCtoVPL5g6Npq9KAmuj

2025-03-18 16:30:34

It's that time of the year again when the EU and East Coast time are 5 hours apart instead of 6. Russia abolished DST. Somehow they managed to schedule the phone call though, so I guess Musk didn't fire whoever is in charge of understanding the timezone and DST mess?

2025-03-14 19:45:28

- reply

150 year old oak tree for time scale
https://image.nostr.build/a052343650e54b9e730ba9d8873f7f076c244e36e2ff96fd5b74e6943fdec6e1.jpg

2025-03-13 15:36:46

- reply

Ah the FBI is going Wikileaks on them: #note1208…r9r8

2025-03-13 11:21:57

- reply

Depends on your threat model. The fact that a KYC exchange knows who you are doesn't mean all potential adversaries know. At least not until the inevitable giant data breach of your exchange.

2025-03-13 10:50:14

- reply

Yeah it's especially good to let companies know they're losing your business. Perhaps it motivates them to lobby for proper privacy respecting legislation.

2025-03-13 10:40:09

- reply

The travel rule is not an EU invention, it comes from the #FATF which is dominated by the USA.
Of course the EU should have protected its citizens and not implement any of this crap. Instead it enthusiastically embraced it.
Not legal advice, but it's probably better to outright refuse than to commit fraud, especially when it comes to AML compliance.

2025-03-13 07:23:18

- reply

Waiting for the 27" version :-)

2025-03-07 21:48:27

- reply

if (!correctPassword); // return false;
return true;
// Look at me, I'm sudo now!

2025-03-07 20:06:39

- reply

Between making Bitcoin better and making fiat suck more, governments are just naturally better at the latter.

2025-03-07 20:01:56

- reply

Maybe Trump can help out ordering Visa and MasterCard to blacklist anyone they don't like. Then you can (truthfully or otherwise) mail shops saying "hey, I'm on the bad hombre list, do you take Bitcoin" and voila.

2025-03-02 16:40:02

- reply

#note1zkn…stwk

2025-03-02 04:38:10

- reply

Speaking of things that got worse:
- the version with English subtitles was diss appeared (but hey, just learn Swedish?)
And things that got better:
- watching Youtube via Wireguard on a transatlantic flight free wifi
https://youtu.be/qTsaS1Tm-Ic #Dota #Basshunter

2025-03-01 17:41:09

TIL "nostrum" is a word: https://www.merriam-webster.com/dictionary/nostrum

2025-03-01 17:22:26

- reply

Nice! @npub18m7…q955 complains when I try to connect though. https://image.nostr.build/5a6027763e540a0c727cb6ed09a43864e227a4c39a626c7d56a94c9e31a335ec.jpg

2025-03-01 01:39:13

- reply

I only saw a few minutes and those seemed less worrying than the headlines suggested. He kept his cool, but wasn't able to get the situation back on track.
His English isn't that good, and the acoustics on stage weren't ideal. So he may not have understood everything that was being said, which went all of the place.
Disclaimer: I think Vance is a douchebag worth his weight in shit. Which he is also full of, since he just openly criticized EU "domestic" politics and then gets all sad when Zelensky says something about the US.

2025-02-22 21:42:38

So I'm part of that elite 3% of Youtube users who mostly use the Subscriptions tab (unless I'm actively looking for new stuff to follow).
https://youtu.be/QEJpZjg8GuA

2025-02-21 18:56:03

- reply

Look away for two seconds and these pro #ChatControl creeps show up again:
> Rani Govender, policy manager for child safety online at the NSPCC, said it wants tech firms like Apple to ensure they are balancing child and user safety with privacy.
> "As Apple looks to change its approach to encryption, we're calling on them to make sure that they also implement more child safety measures, so that children are properly protected on their services," she told BBC News.
> The UK children's charity has said that end-to-end encrypted services can hinder child safety and protection efforts, such as identifying the sharing of child sexual abuse material (CSAM).
https://www.bbc.com/news/articles/cgj54eq4vejo
They wrote propaganda like this, probably using the same kind of misleading polls that the EU used.
> More than half (55 per cent) said the ability to detect child abuse images was more important than the right to privacy;
https://www.nspcc.org.uk/globalassets/documents/news/nspcc-discussion-paper-private-messaging-and-the-roll-out-on-end-to-end-encryption.pdf

2025-02-21 18:20:28

- reply

For the most part I use my phone for normy things, like waking up, scheduling calendar appointments, checking in to flights, navigation and photography. I find iOs to work *way* better for most of these. And because with Graphene you can (and should) turn off most of the Google stuff, you lose any potentially good UX that Android does have.

2025-02-21 18:12:44

- reply

Because I find the Android UX terrible. I tried it for a year. It's a matter of taste of course.

2025-02-21 18:05:29

With all respect to GrapheneOS, which itself is great, Android phones are like emergency food rations: you should have them, but only use them if you don't have a choice :-)

2025-02-21 18:02:42

- reply

Thankfully not, but removing privacy features from entire countries is pretty bad too. It worrying that although the UK is tiny country they can't risk ignoring pressure from its regime.

2025-02-21 12:18:21

- reply

2013 was a good time to argue about terminology here :-)
But yes, nobody is blaming miners for following a strategy that's in their own interest, but we do want to make sure this _isn't_ in their own interest - because then you'd end up with a single pool.

2025-02-21 12:16:43

@npub1dd9…xe7p one feature from the WireGuard app that I like is the ability to automatically turn it off on LAN and on specific trusted wifi networks. This would be a nice option to have (though perhaps the performance is such that I won't be tempted).

2025-02-20 14:06:41

I'm too stupid to understand selfish mining, please help: https://bitcoin.stackexchange.com/questions/125682/why-is-a-self-mining-attack-with-bad-propagation-γ-0-still-profitable

2025-02-19 17:33:32

- reply

I'm getting old :-) Just going to keep calling It Patriot Act, you can put lipstick on a pig...

2025-02-18 10:48:27

- reply

It seems both Apple and the vast majority of open source projects aren't worried about the phone home privacy issue, partially because they need all their mental energy to at least make their apps usable, it's hard to find good documentation on the exact privacy trade-offs here.

2025-02-18 10:47:06

- reply

Apple code signing has been a headache for open source projects for half a decade. But with notarisation it gradually turned into a privacy problem.
https://github.com/bitcoin/bitcoin/issues/15774

2025-02-18 10:44:56

Privacy annoyance of the day... basically Apple knows about every app you launch for the first time. And for every every update you install, the first time you run it.
They make effort to forget these phone-home events, but it's a trust-me-bro privacy model. Which is not acceptable in a country with the Patriot Act. Even if that Act has some built-in protections, those are degraded by a declining appreciation for rule of law.
So when reading company statements like this, it's useful to replace some words - which I've done in square brackets. I'm still fully assuming good faith here, as well as no coerced lying.
> Privacy protections
> macOS has been designed to keep you and your data safe while respecting your privacy.
> Gatekeeper performs online checks to verify if an app contains known malware and whether the developer’s signing certificate is revoked. We have never [but could] combined data from these checks with information about Apple users or their devices. We do not [but could] use data from these checks to learn what individual users are using on their devices.
> Notarization checks if the app contains known malware using an encrypted connection that is resilient to server failures.
> These security checks have never included the user’s Apple Account or the identity of their device [but we can see your IP address]. To further protect privacy, we don't [but could] log IP addresses associated with Developer ID certificate checks, and we make sure that any collected IP addresses are removed from logs [but could stop doing that] .
https://support.apple.com/en-qa/102445
There is a stapling mechanism that developers can use to (maybe?) prevent these phone home events, but it's not mandatory and not always practical. More importantly, it's intended as a convenience for users that are offline when they first run an application, it's *not* intended as a privacy measure.

2025-02-17 17:23:30

- reply

And why is your browser running in the same user space as your password manager and using the same keychain less secure?

2025-02-17 14:45:18

- reply

E.g. I recently got an out of the blue password reset email from an airline I flew with a decade ago. That was my prompt to kill that account, it might have been from even before I used a password manager. No idea if someone tried to break into that account. Or if they just did a system wide password reset after they'd been compromised or something, in which case it was too late :-)

2025-02-17 14:42:59

- reply

But airlines have a LOT of details about you, which will inevitably leak. Spam is the least of your problems.

2025-02-17 13:57:51

By the way, I can recommend the habit of deleting at least one account per week.
Just look through your password manager, or the list of passwords kept by your browser.
Step 1: check if the site still exists and if you can log in (if not, delete the entry)
Step 2: look around and see what data they kept on you, for who knows how many years. You should now experience an urge for step (3).
Step 3: figure out how to delete the account. Often hidden under privacy or advanced options, more often requires an email to support. If so, set a reminder to followup after a week or so if nothing happened.
Step 4: once the account is gone, delete the entry from your password manager (browser)
Keep this up for a few years and you might get there....

2025-02-17 12:42:00

- reply

None of the methods listed by EBA prove anything (as I told them in my email). They're completely pointless rituals. But this method is actively harmful.
#nevent1q…nakq

2025-02-17 12:05:54

- reply

I'd rather have people write something themselves. If they receive a bunch of identical text they might ignore it. I also haven't figured out yet who specifically to send it to, I just used the general contact form.
I would also suggest that if anyone actually gets told to perform this test, they file a complaint with their national privacy regulator.

2025-02-17 12:02:33

- reply

Until wallets broadly support it, asking for signed messages will be a a support nightmare. Especially because this verification process is triggered _after_ a deposit takes place, at which point it's late to tell the user they should used a legacy base58 address.

2025-02-17 08:20:16

- reply

And of course this fiat transaction pattern tells your bank that you're a self-custodial person.

2025-02-17 08:19:20

- reply

Yes, by sending fiat to the exchange.

2025-02-17 08:18:42

- reply

Which means you've now gone from one deposit that doesn't stand out much on chain, to a very obvious pattern of receiving sats from the exchange and sending them back, all using the same address. Plus your bank sees a small transaction going to an exchange and a large one coming back, which might trigger their alarm and they hold you fiat ransom too.

2025-02-17 08:16:48

- reply

By solve I mean "solve",

2025-02-17 08:10:51

- reply

Maybe only revive it on Nostr? Let other cross-post the wisdom to Musk Social.

2025-02-17 08:05:21

https://img.sprovoost.nl/19667b5ff208cc09baaf3fa4c07398ef1a43ebc5d0e3ec1071821595384e2503.png
#nevent1q…6mva

2025-02-17 07:59:05

I sent an annoyed email to EBA (European Banking Authority) telling them that they need to remove the #SatoshiTest from their Travel Rules guidance in EBA/GL/2024/11 (item 83c on page 31).
And that they need to immediately ban the practice. Companies are doing this because they're lazy. On-chain privacy harm is irreversible. The other methods are bad too, but they at least don't put stuff on the chain.
I expect them to ignore my email of course, but who knows.
https://www.eba.europa.eu/activities/single-rulebook/regulatory-activities/anti-money-laundering-and-countering-financing-terrorism/guidelines-information-requirements-relation-transfers-funds-and-certain-crypto-assets-transfers

2025-02-17 07:50:50

- reply

Yeah, my guess is that they picked the Satoshi Test because it's the only one they can automate without human interaction. Otherwise they need to hire a lot more support staff.

2025-02-11 17:44:07

- reply

Also, if you're a cat and need to eject a hairball, google "eu travel rule compliance software".

2025-02-11 16:51:10

- reply

Uhh, Deactivated ?

2025-02-11 16:50:32

- reply

Unless it stands for Bitcoin Activated Nuclear Attack, I'm not sure? :-) What is it?

2025-02-11 16:32:31

- reply

cc @npub1m0n…d0un

2025-02-11 16:29:14

Is anyone keeping track, using on-chain analytics, of how many people are doing this idiotic EU "satoshi test"? E.g, Kraken describes the procedure here, presumably other exchanges use variants, which makes for great fingerprinting.
https://support.kraken.com/hc/nl/articles/what-is-a-satoshi-test

2025-02-11 16:26:37

- reply

There's some overlap with the topic of quantum-proof schemes.

2025-02-11 16:25:48

I tried to find a good Bitcoin Stack Exchange article listing these trade-offs, but couldn't find one. There should be one though.
#nevent1q…32gn

2025-02-11 16:24:03

- reply

I don't have any specific soft-forks in mind. On chain privacy is a really tough problem to solve. For one thing there's a fundamental cryptographic trade-off where you either risk inflation or retractive total loss of privacy (perfect binding vs. perfect hiding, pick one).
At a more mundane level any advanced (compared to what we have now) cryptography makes auditing the supply more difficult, tends to need more block space, breaks pruning and might break lightning.
https://crypto.stackexchange.com/a/81074/109155

2025-02-11 10:13:43

- reply

Artisanal Dutch gas probably (until recently).

2025-02-11 10:12:04

The noose tightens...
https://blockspace.media/insight/the-boring-banal-way-big-brother-can-shackle-bitcoin/

2025-02-07 18:48:45

Occasional self-indulgent reminder that I wrote a book: https://www.btcwip.com
#nevent1q…cumn

2025-02-07 14:47:15

Dutch cabinet is talking with banks on how to deal with the US sanctions against ICC. They should have used Bitcoin, as these sanctions were 100% predictable and have happened before.
https://nos.nl/nieuwsuur/artikel/2554904-kabinet-overlegt-met-banken-over-oplossing-gevolgen-amerikaanse-sancties

2025-02-06 20:05:15

- reply

What's "real freedom" anyway :-) #HabeasCorpusLite

2025-02-05 20:04:17

We're back! In episode 96 of Bitcoin Explained @npub1art…m0w5 and I cover Stratum v2, DATUM, Bite, P2PPool and friends.
Show notes will be updated soon(tm).
https://bitcoinexplainedpodcast.com/@nado/episodes/episode-96-mining-decentralization-update

2025-02-01 15:59:19

- reply

Probably not, but then they would also be counting on this Taproot Assets projects being a flop. Or on most people using software clients with atrocious privacy.

2025-01-31 11:29:17

- reply

I still think Tether should just launch a Cashu mint.

2025-01-30 20:17:36

I was on the fence about going, eventually decided not to because the schedule wasn't very good. Now I'm glad I'm not going. Spineless organizers are not something I want to support.
#nevent1q…3vxv

2025-01-29 09:57:57

Dutch parliament voted for an interesting form of financial repression: revoking the tax exempt status for donation to Extension Rebellion. It was just a motion, which will likely be ignored because it's illegal.
But the political message is clear: if you do something the politicians in power don't like, there will be financial consequences. Seems a matter of time before they'll find their bank account closed for unclear reasons.
https://nos.nl/artikel/2553608-kamer-wil-belastingvoordeel-extinction-rebellion-schrappen

2025-01-28 19:19:33

- reply

Which won't be allowed into any EU city within a decade or so. And between maintaining a Battlestar Galactica style old timer and reverse engineering a future modern car, I'll probably enjoy the latter more.

2025-01-28 19:17:54

- reply

But they're going to argue that custom firmware is bad "for safety". And they're not necessarily wrong, especially if they deliberately make an entangled mess where safety-critical control systems share code paths with their spyware.

2025-01-28 19:13:04

- reply

First step is probably just to jailbreak them. And then fight car industry lobbyists that try to ban said.

2025-01-28 19:11:42

- reply

https://www.whitehouse.gov ? :-)

2025-01-28 17:21:00

- reply

And no direct or convenient transfer flight from Budapest to Riga on the 9th either. Though there is a connecting LOT flight in the evening on the 8th. This must be a conspiracy to funnel a bunch of Bitcoiners on the same flight :-)

2025-01-27 19:55:30

- reply

That and quoteless reposts would go a long way towards no having to also keep noStrudel open - but that's fine for now.

2025-01-27 19:52:23

- reply

I would hit like if... there was a button? :-)

2025-01-27 19:50:56

- reply

Good reminder to...
cargo run --release
Mmm, it doens't like my relay:
ERROR notedeck_columns::app: wss://nostr.sprovoost.nl/: decoding failed https://image.nostr.build/9f8ad85802c3e3bb56c5f484b069930e17b944cd65f30441980a4c8eff80991c.png

2025-01-27 13:13:36

- reply

Yes. It's there to prevent some malware* from hiding your coins on a super obscure derivation path.
* = or just a bug

2025-01-27 12:22:40

- reply

(@npub1v5u…n0v5 didn't turn the npub into a real tag: @npub1h0f…kvcg)

2025-01-27 09:19:19

- reply

Not unless you understand what's going on, or you're using testnet / signet.

2025-01-27 09:17:21

We're going to be alternating cities for #BitDevsAms:
- next month in Rotterdam on February 20: https://www.meetup.com/bitdevs-amsterdam/events/305839920/
- after that in Amsterdam on March 27: https://www.meetup.com/bitdevs-amsterdam/events/305839914/

2025-01-24 11:04:26

- reply

Update: it's a bit unclear if this actually going to happen, or if only the likelihood increased. We'll know more on the 6th.

2025-01-24 09:20:42

Speaking of people who should not be in prison, #TornadoCash co-founder Alexey Pertsev will be released soon under house arrest, pending his appeal. Habeas at least some Corpus after a year...
https://img.sprovoost.nl/8629f9baec596e24e3ce6f983310f2983d5ad6dcd7e0da616bd047bf1b993f23.jpeg

2025-01-22 19:43:57

- reply

@npub1v5u…n0v5 I tried to make the video version but it was stuck at "generating video" for several minutes before I gave up.

2025-01-22 19:35:53

This could be a good use case for a mobile SDK which different apps can use. It should let the user paste in an X URL, render it inside the browser so the user can dismiss captchas, cookie popups and such nonsense. Then it should do two things:
1. Make a screenshot (simple, reliable)
2. Scrape the page, put the actual text in the note as a quote and a link to the original (maybe add some tags if you want to be fancy)
Optionally it could also help on the rendering side: if a nostr post has a X URL, or some tag, drop the plaintext fallback and render it like how embedded Twitter posts used to look.
https://fountain.fm/clip/Vzsfti14f5ypfwraxJih

2025-01-22 19:15:36

- reply

Europol has a long track record of anti-democratic behavior, especially when it comes to their take down barrages. They recklessly forwarded takedown request from random agencies in EU countries. Afaik there's no oversight in what they take down. IMO it needs to abolished.
https://www.techdirt.com/2019/04/11/eu-tells-internet-archive-that-much-site-is-terrorist-content/

2025-01-22 18:43:27

Should we refer to X as Musk Social?
(unsure if I heard this from someone else or a voice in my head)

2025-01-22 18:10:54

- reply

A Bitcoin conference banned by X, this generates FOMO...

2025-01-22 16:24:28

- reply

Underground containers FTW :-)

2025-01-22 11:44:32

- reply

I think he should get some serious media and public speaking training. He's no longer just being watched by Tesla fanboys. Or stay out of the media entirely, but that's impossible for a narcissist.

2025-01-22 11:41:51

- reply

When people attack you in bad faith, it's almost never a good strategy to defend yourself.

2025-01-22 10:43:47

Nog even een oproep van De Lelie om het komende half uur even je favoriete Tweede Kamer lid te mailen, voor het debat vanmiddag. Iets in deze strekking:
> Graag wil ik uw aandacht vestigen op de oproep van gisteren van diverse
belangenorganisaties, waaronder Privacy First en Human Rights in Finance, om per
direct over te stappen op de Europese systematiek voor het melden van verdachte
transacties. Ik steun deze wijziging, omdat hij de overlast vermindert en ook nog snel kan
worden uitgevoerd.
("verdachte" is een hogere drempel dan "ongebruikelijke" dus het scheelt een enorme hoeveelheid meldingen)
Pieter Grinwis ChristenUnie p.grinwis@tweedekamer.nl
Folkert Idsinga Nieuw Sociaal Contract f.idsinga@tweedekamer.nl
Laurens Dassen Volt l.dassen@tweedekamer.nl
Tom van der Lee GroenLinks-PvdA t.vanderlee@tweedekamer.nl
Judith Tielen VVD j.tielen@tweedekamer.nl
Joost Sneller D66 j.sneller@tweedekamer.nl
Inge van Dijk CDA i.vandijk@tweedekamer.nl
Jimmy Dijk SP j.dijk@tweedekamer.nl
Henk de Vree PVV h.devree@tweedekamer.nl
Henk Vermeer BBB h.vermeer@tweedekamer.nl
Doğukan Ergin DENK d.ergin@tweedekamer.nl
https://privacyfirst.nl/artikelen/privacy-first-waarschuwt-tweede-kamer-voor-gevolgen-van-wetsvoorstel-wtmo/

2025-01-21 11:31:11

- reply

Wait, there's a Trump exchange now?

2025-01-21 10:34:28

- reply

Do they keep it on Binance?

2025-01-21 10:32:34

The prophecy came true!
#nevent1q…crzq