tank

https://stashpay.me

Founder Coach, Building StashPay

Public Key

npub1xyd5ja34s4nk0l6urnh69wx9ep6uuxz2ujrkm2f8n6pfhgqa6y5s2xn6n2

NIP-57 Address

npub1tkm929n8n482ygfel3dv2ds88tjxnjzj7n5rwvmtetuz987stm2sl4x8s9@npub.cash

Profile Code

nprofile1qqsrzx6fwc6c2em8lawpemazhrzusawwrp9wfpmd4yneaq5m5qwaz2gpz9mhxue69uhkummnw3ezuamfdejj7r4ln22

Publishing to

nostr.wine

Author Public Key

npub1xyd5ja34s4nk0l6urnh69wx9ep6uuxz2ujrkm2f8n6pfhgqa6y5s2xn6n2

Show more details

Last Notes

2026-01-23 10:35:57

- reply

Devs that decide to not KYC can still continue to release unsigned APKs that work on Graphene (and AOSP devices that don’t enforce signatures).
Also call me naiv but user will still demand devices that allow them to install any APK. So there is a financial incentive for device vendors to ignore Google’s policy (or make opt-out very easy by showing a warning like macOS).

2026-01-23 10:23:06

- reply

Agree. I don’t understand the original post tbh. What stops Graphene users from installing proprietary apps if the OS just ignores Google’s APK signature enforcement? There is still Aurora to download signed apps from KYCed devs?

2026-01-17 14:24:20

Interesting analysis from Mearsheimer on Iran https://youtu.be/Zy3_CP-XeQo

2026-01-15 20:55:04

Great DOAC pod with Tony Robbins on navigating change and difficult times. Especially the part about AI: https://youtu.be/I_w81rptxkc

2026-01-15 18:31:58

- reply

One option is to get a Thermomix and bake yourself. We bought one in October and it’s helping me learn to cook more healthy.

2026-01-15 11:46:06

- reply

Thanks Roy. Good discussion re prf here everyone … I have a better understanding of the trade-offs of each design now. For breez sdk the simplified design makes sense. Re import … I presume existing Liquid/Spark users could just derive a new wallet from the passkey and sweep funds from their old wallet with relatively low fees. Is this how existing misty breez users will be migrated?

2026-01-14 14:10:09

- reply

@npub1ey6…szvp @npub1x8c…8fl0

2026-01-13 14:41:23

- reply

How does a user prevent sync of the passkey to his desktop? iCloud Keychain items are synced to all devices. Same with 1Password.

2026-01-12 16:37:42

- reply

Thanks for clarifying.
1-4: makes sense. The downside of relays is IP address (location) leakage to multiple untrusted server if users are not using a VPN.
5: I agree for a wallet use case. But for nostr the user loses his social graph.
6: the UX cost is zero for icloud-key-value-store (users are generally logged into their Apple ID on iOS). On Android there is a UX cost. The main upside I see is 2FA though. Compromise of a passkey is not unlikely on a desktop computer due to higher malware risk. Users could recover their wallet only on mobile devices. A user using yubikeys to secure their Apple/Google account would be resistent to an adversary that has compromised their laptop.

2026-01-12 11:53:15

- reply

Oh and users get 2FA for free as an additional security layer when using iCloud/GDrive. Apple even makes users enable 2FA when storing passkeys https://support.apple.com/guide/iphone/use-passkeys-to-sign-in-to-websites-and-apps-iphf538ea8d0/ios

2026-01-12 10:55:42

- reply

If the digital euro would simply be a cashu mint that users could connect any cashu wallet to it might be interesting (at least until the euro hyperinflates due to europe’s unsustainable social security and demographics). That would at least provide protection against censorship of individual users. But the ECB would never allow a truly private and open digital cash system.

2026-01-12 10:39:16

- reply

We’ve seen relays nuke their databases regularly which means users would ultimately rely on the breez relay to store their salt. As a user I personally prefer icloud to store my data longterm independent of a wallet vendor. But it is a matter of taste.
CSPP derives a master encryption key independent of the passkey to encrypt the nsec and stores the ciphertext besides the salt in icloud. Without it users would need to rotate their nsec when they rotate their passkey. I believe this is an important feature for the management of longterm user keys.
But PRF will be used in many different ways by different vendors. So I don’t expect convergence on one standard.

2026-01-12 00:20:21

- reply

Where is the primary salt stored?

2026-01-11 23:09:14

- reply

Breez’ spec is interesting if the user trusts his nostr relays to store the salt for prf. Without the salt the user loses his nsec. This is why I would propose to backup the salt along with the encrypted key material in iCloud/GDrive (see CSPP spec). This way the nostr user’s nsec could also be re-encrypted if the passkey needs to be rotated due to device compromise etc.

2026-01-06 13:26:33

- reply

so clean

2026-01-06 13:19:08

- reply

What’s the wallet on the left?

2026-01-06 11:16:39

- reply

I wonder which sdk might be a good fit here?

2026-01-04 20:14:26

- reply

I’m German living in Portugal. I grew up in West Berlin and was four when the wall fell. I’ve lived as a nomad all over the world. Also in the US for 5 years. I loved it there and still feel very connected to Americans. I think Europeans have much to learn from Americans in terms of business and risk taking. So it’s nothing personal. I’m just a realist when it comes to foreign policy.

2026-01-04 19:39:38

- reply

I’d agree to disagree on this one

2026-01-04 18:59:15

- reply

Look, I hosted Ukrainian refugees in my home in Munich for a month in 2022. I have both Ukrainian and Russian friends. I hope the war stops asap.
But the US would also not allow a Russian expansion into Mexico. Such a move would be seen as an aggression and retaliated against.

2026-01-04 17:45:10

- reply

I’ve seen the Lex appearance. The first talk you cited says it’s the West’s fault (in particular US foreign policy).

2026-01-04 16:51:29

- reply

Not saying I agree with all of his opinions. Just that I find his framework useful.
Regarding Ukraine my understanding is that he argues Russia has security interests that were ignored by the west, in particular the push for Ukraine to join NATO. Not sure I’ve heard him say Ukraine caused/deserved to be attacked?

2026-01-04 16:32:39

I find John Mearsheimer’s framework of offensive realism helpful to understand global power dynamics. It basically says great powers, driven by the anarchic nature of the international system, are inherently aggressive in their pursuit of security and regional hegemony.

2026-01-04 11:09:56

I can’t get over that press conference.
Is it wrong that I hope Tarantino makes the movie?

2026-01-02 11:17:12

- reply

Fair enough. It makes sense to have the reference wallet for the graduated sdk use spark. And kudos for demonstrating a native wallet can be vibe coded with the sdk. Definitely a security win over react native. FWIW I hope someone builds a cashu version.

2026-01-02 10:38:46

If you want to understand why Germans are so obedient look no further than the children’s book Der Struwwelpeter.
My favorite story is of the boy that does not listen to his mom and reluctantly sucks his thumbs, only to have them get cut off by the tailor.
https://youtu.be/RGdjpBZw0g0

2026-01-01 18:49:08

- reply

Can the wallet developer preconfigure spark and let advanced users set an ecash mint?

2026-01-01 18:14:10

- reply

Minibits is as good as any. That wallet also preconfigures its own mint. There is no guarantee it will be around in two years obv.

2026-01-01 17:51:57

- reply

I’d preconfigure three popular mints and preselect one in settings. Then inform users in the docs. It has a rug risk ofc but would also present a massive UX boost for private bitcoin payments.

2026-01-01 17:44:13

- reply

Just stating my personal preference as a user.
As a wallet developer using the graduated SDK I would preconfigure three popular mints in the wallet and preselect one.
The risk of being rugged for the first 20 dollars is there and it needs to be explained in the docs. But this setup would make private bitcoin payments extremely user friendly.

2026-01-01 17:22:24

- reply

The “privacy” update here refers to Lightspark no longer publishing all user payments by providing an opt-out api for wallet to their public explorer.
But even after this update Lightspark’s operators still see all payment data. A far cry from the privacy of ecash.

2026-01-01 16:19:35

- reply

Most normal people use banks, fintechs and credit cards. Even if fiat were to disappear and they had to use bitcoin, why would they change to a wallet?
Re ecash providers getting arrested… we have yet to see evidence of all mints shutting down due to legal risks. I would not operate a mint myself but am happy to pay a fee to someone that does.

2026-01-01 15:00:10

- reply

Where is the Spark Service Provider source code? Without it third party Spark Entities are not gonna happen.
But above all I’d prefer to not share payments data for first my 20 dollars. Especially when I get LDK’s privacy once I open a channel.

2026-01-01 14:24:02

- reply

I prefer privacy, open protocols, and no vendor lockin

2026-01-01 14:17:26

- reply

I would use your wallet if I could use ecash instead of spark. I’m willing to take on the risk for my first 20 dollars.

2025-12-29 18:30:48

Cool to see Moxie get excited about Passkeys and WebAuthn PRF to improve the UX for E2EE apps https://confer.to/blog/2025/12/passkey-encryption/

2025-12-23 09:57:32

Passkey PRF could also be used to backup a nostr nsec to the password manager without users needing to copy/paste private key material.
And since Apple requires turning on 2FA to use passkeys, users get pretty decent security for key backups.
https://support.apple.com/guide/iphone/use-passkeys-to-sign-in-to-websites-and-apps-iphf538ea8d0/ios
#note1vld…sxtv

2025-12-18 18:48:09

- reply

The passkey authentication flow is only needed during setup (backup/restore) and health checks.
During daily use, the seed is stored on the mobile wallet though. So standard security features like a PIN can still be set by the wallet ofc.

2025-12-18 18:39:15

- reply

Good point. Users can disable biometrics for their password manager and it will prompt for the device passcode instead.

2025-12-18 16:50:03

I’m excited to work with Praveen of Cove Wallet on a new open standard for Bitcoin wallet cloud backup using Passkeys - no passwords, no key server trust.
Today wallets like BitKey provide a seedless UX with good redundancy but they require hardware. For spending wallets or users that want to start without hardware our proposal provides a compelling UX - Just do FaceID/TouchID to sync a Passkey to your password manager and done.
It’s an improvement over Photon since there is no key server to run for the wallet vendor and no PIN to remember for users (and no email/phone for PIN reset). The wallet just needs to regularly do a health check to verify the Passkey in your password manager can decrypt the cloud backup.
Let us know what you think. The goal is to develop this into an open standard that any mobile signer can adopt. Link below 👇
https://praveenperera.com/blog/passkey-prf-bitcoin-wallet-backup

2025-12-15 20:37:47

Call your parents and tell them you love them. I’m glad I did yesterday.
R.I.P. Mom
https://image.nostr.build/ea05b58a85d58d5f565b23fd3d36f4ad71fbe76b2dfc464f7eaaee61397e18a5.jpg

2025-12-10 20:37:27

Having Android apps and Graphene’s security on the desktop is starting to look like an attractive environment for developers. Can’t wait to see how this evolves.
#note1enc…k84g

2025-12-07 10:15:54

👀
#note130n…xs7l

2025-12-05 12:47:40

- reply

Totally valid. The only question is what will you decide to do with freedom?

2025-12-04 11:52:26

The character trait that I most resonate with among bitcoiners is the desire to take personal responsibility and empower themselves and those around them. I don’t care what your politics are (I personally don’t believe in simplistic labels). The thing I look for is are you lifting yourself and those around you up. It’s ultimately about self love and looking inward.

2025-12-03 10:51:54

- reply

Can you elaborate on what you mean “With mining costs going up, margins going down, trend on sell off.”

2025-12-03 10:10:17

- reply

Thank you for your work Lyudmyla

2025-12-03 08:00:02

- reply

Never mind the opportunity to reform the pension system in Europe. The alternative is currently repression of the European population. So much opportunity for everyday people to save in bitcoin and creat a nest-egg.

2025-12-02 13:52:53

- reply

Keep doing what you’re doing Anita. And sadly, yes. Most will wake up when it’s too late.

2025-12-01 10:42:26

I’m grateful for this place. Where anyone can speak their truth. Whether we disagree or not.
Thank you to everyone that puts their time and energy in here.

2025-11-29 16:06:12

- reply

Re compromise of the OS/firmware… device vendor like Apple or Samsung would lose business pretty quickly if that became public. Then even more people would gravitate to open source alternatives and competition would increase vs the current duopoly. Life finds a way.

2025-11-29 13:27:48

- reply

If an app vendor e.g. Signal shipped client side scanning in the app store they would have to compromise all users and I suspect we’d find out relatively quickly. The reputation loss would be permanent.
My main concern with the current chat control bill is on the age verification. With open source OSes that don’t enforce Google’s policy users could still side load APKs of forks w/o age verification.

2025-11-29 13:08:16

- reply

If app vendors compromise e2ee. But we’d know pretty quickly if a vendor does it.

2025-11-29 09:58:44

Google clamping down on side-loaded APKs at the same time.
The good news is more demand for GrapheneOS will improve open source alternatives.
#note1qaz…avl2

2025-11-28 13:14:00

The best protocols that empower the user stay hidden. The signal protocol could only be silently deployed and bring usable end-to-end encryption to billions of whatsapp users because of this property.
#note1utu…d65e

2025-11-27 08:55:36

https://image.nostr.build/d3b2ec35a20ee54a46d2fd4b752422d4fc2072839c65a18093466087cfc182d3.jpg

2025-11-27 08:32:41

- reply

Great idea. You could enable this UX now even with self-custody nsec by using something like Photon (if you want the email/password login flow) or BullRecover (without email)
https://docs.photonsdk.org/
https://recoverbull.com/

2025-11-23 09:00:50

- reply

How do spark users verify that it’s now deactivated for their wallet (specifically in the case where they’ve created their wallet before the feature went live)?
Doxxing all user payments by default and later shipping an opt-out seems like a strange design decision. Some of the most knowledgable people in the wallet development space were surprised something like the public explorer even exists.

2025-11-22 21:16:07

- reply

I think Spark has great trade-offs wrt UX and fees. But I’m kinda turned off by the public transaction explorer (I know it can be deactivated now, but why would anyone think that’s a good idea?). Also confidential transactions are only coming for tokens, not BTC. In general my impression is bitcoin privacy isn’t really a priority for Spark?

2025-11-22 20:15:32

- reply

I hope Tether will come to Spark so wallet devs don’t have to integrate 5 chains. lol

2025-11-22 19:47:32

- reply

I stand corrected. Spark for BTC makes sense here… lower fees.

2025-11-22 19:24:08

- reply

I suspect it’s on Liquid (BTC, USDT & Tether Gold support)

2025-11-19 19:22:08

- reply

Getting the same warning page on Brave iOS
https://image.nostr.build/205473ea1185a7469697379479dba15f8aedcdf38b6cd21475f4bea80f0b73ba.jpg

2025-11-18 13:43:49

- reply

/HT @npub1c0n…l8ce https://youtu.be/PhuwsoaACQ0

2025-11-18 13:40:41

- reply

Is there anything stopping clients trying bip353 before lightning-address?

2025-11-18 13:29:22

Imagine getting a margin call rn
#note16e3…ercm

2025-11-15 21:01:51

I‘m so grateful for all and fucking bullish right now. LFG 🙏🏼🧡

2025-11-15 20:59:31

- reply

Just wanted to say thank you to you @npub12rv…85vg and to @npub1sg6…f63m for all you do 🙏🏼

2025-11-15 20:57:03

- reply

Thanks for always being an inspiration brother!

2025-11-13 19:33:50

- reply

I see my work basically as getting the tools in place to dampen the negative effects on society in a currency crisis.

2025-11-13 09:11:00

- reply

Absolut. Die Union nenne ich vor allem auch wegen der Vorratsdatenspeicherung. Leider werden beide Themen so gut wie gar nicht in der Öffentlichkeit diskutiert.

2025-11-12 11:47:43

- reply

Die Tatsache dass in Deutschland der CSU Innenminister für die ChatKontrolle ist, sagt eigentlich alles.

2025-11-01 10:02:32

If you need some positivity this weekend I can recommend this documentary on gratitude. We watched it yesterday and really enjoyed it https://youtu.be/kdBIGZP_bEQ

2025-10-10 10:56:06

- reply

In German using bitcoin is called “ein privates Veräußerungsgeschäft” which translates to “a private sale transaction”. This language comes from gold and suggests they are used peer-to-peer.
Calling bitcoin an “asset” is a limiting belief supported by a story called “capital gains”. Language is so powerful.

2025-09-20 17:54:06

- reply

Appreciate the feedback. And thanks for caring what tech StashPay uses 🙏🏼
While I’ve only released a Liquid based wallet, I do regularly test and keep tabs on all wallet tech in development… including Spark (Lightspark TypeScript SDK and Breez Rust SDK), Fedimint, Cashu, LDK, and Ark.
Each has their own trade-offs… and while it’s fun to play with shiny new tech. The much broader question I’m asking myself these days is what incentive and use case is compelling enough for users to actually do payments in bitcoin. So beyond the tech I would *love* to see more energy and focus go towards on-the-ground UX research in bitcoin hubs in Madeira, Costa Rica, El Salvador, Nigeria, etc. I suspect there are hidden lessons to be learned by listening to users that use bitcoin daily.

2025-09-18 12:11:26

- reply

People are hurting and project their pain onto others.
It’s polarized in Germany too… few people take the time to listen to rational arguments or discuss calmly. Mostly rushing in to label/discredit. I gave up trying to talk about economic reform during the German elections.
I’m trying to tune things out as much as I can these days. Focusing on health, relationships and building local community.

2025-09-16 10:31:04

This reminds me of the book Awareness by Anthony de Mello. It’s a great mental reset and if you want to laugh about yourself…
TL;DR: Distance yourself from labels/ideology. Identifying causes suffering. Love is only possible without fear. Happiness by dropping attachment. We are all selfish (some just have better taste) or „I’m an ass, you’re an ass“.
#note1zhf…gxd9

2025-09-15 10:16:19

🍎 StashPay is now in the Apple App Store
📲 Please upgrade to receive updates if you were previously using TestFlight. We will sunset future updates from TestFlight.
https://apps.apple.com/app/stashpay/id6701591338

2025-09-15 07:47:55

- reply

Amazing. Thank you. Can we link these to app websites to init an install of Zapstore (if not installed yet)?

2025-09-11 12:08:59

Write your representatives. Some even reply… and it’s working.
#note1qz2…3yuy

2025-09-01 13:12:32

- reply

Amazing! A react-native-async-storage adapter for coco-cashu should be pretty strait forward.
And yes, wrapping complexity for automatic exit to a subnet in the layer above makes sense.

2025-09-01 10:42:35

#asknostr
#note1zrc…ssya

2025-09-01 10:42:03

- reply

Is there a TypeScript library to automate buffering Cashu payments to/from a mint while allowing users to hold the majority of their sats on a second Lightning-enabled subnet (e.g. Liquid/Spark/Ark)?

2025-08-26 15:51:35

I’m wondering what incentive do OEMs have to enforce Google Play Protect at the OS level?
Sure, only a small minority of Android users care about sideloading APKs. But what reason does Samsung have to limit device functionality and risk losing loyal customers to a competitor?
https://developer.android.com/developer-verification

2025-08-26 09:15:39

No APKs for you!
Your Android phone soon won’t belong to you anymore.
#note1e7e…majt

2025-08-23 15:13:37

- reply

chat control deez nuts

2025-08-21 08:24:23

GM
https://image.nostr.build/7faa60341aa5f696e0615fd55534e16714687ca784b441d2bc9ba41d8afc2e0d.jpg

2025-08-17 16:30:46

Running @npub1235…0ht5

2025-08-14 07:01:47

GM
https://youtu.be/UG8uY5byKOA

2025-08-13 23:10:13

These freediving videos from Daan Verhoeven are amazing. Reminds me how much I miss it.
I started the master freediver training a few years back and got down to 35 meters. It’s on my bucket list to complete the training and get down to 42.
https://youtu.be/OrRj6mMtZFk

2025-08-09 16:13:22

- reply

@npub1vfs…7uqz

2025-08-09 15:57:49

Testing the new @npub1wht…r3ec release.
Send me your favorite book recommendations.
https://image.nostr.build/1829582785859c6165405c6c53425c27073b25a09820d6a489805b90ff17887b.jpg

2025-08-08 15:21:08

“Disagree and commit” — Jeff Bezos
Stop arguing, make decisions quickly and course correct if necessary. But keep velocity high.
https://youtu.be/Afoh23PHVP0

2025-08-08 14:52:42

- reply

stability and speed.
Spark isn‘t ready yet and has all sorts of bugs and performance issues. Sending/receiving took 20+ seconds during my tests this week (sometimes sending didn‘t work at all).
Having said that it‘s a stellar team and I‘m sure it‘s just a matter of time until the quality is there and issues are ironed out.

2025-08-08 07:24:01

It’s live in version 0.4.0
Download here: https://stashpay.me
#note1x2a…7nmu

2025-08-06 14:20:30

- reply

Thousands delimiter adjusts based on device region. You’ll see a period in Europe.

2025-08-06 13:18:45

The ₿ symbol for sats is growing on me. What do you think?
https://image.nostr.build/23156ea8389542819c7ff549ae6526f925340e87b1a1ebf4f6937989b0347a9f.png

2025-08-05 10:19:53

They will keep trying. The half-glass full perspective is that decentralized open source tech will gain traction as a reaction. As will localism. There is opportunity in every adversity.
#note1fsk…pj8y

2025-08-01 12:06:36

- reply

Good point. I’ll take a look.

2025-08-01 11:24:39

Today we’re excited to release the redesign of StashPay. I was fortunate to get @npub13wj…en3s to join me on the project and it was a blast to be able to work together again. So massive shout out to him. I’m excited to see where we go from here!
You can read more in our blog post and download the app in the link below (or as always you can get in on @npub10r8…t2p8) 👇
https://blog.onionmill.com/p/introducing-the-new-stashpay
https://image.nostr.build/cee54d4ae9603383b3a0d82a3f854d803043462e025c586d63b8719953aeb9fa.jpg