Paul Miller / is on Nostr

"f9a311ef45a652b21f57c365a4d4f0b717e688630b211c3a3f2abed6c802c7eb1bc779021fb0a3d3403216cd2ac4d28ef7e1cf9954f30b001b878062ab4b02cf"

Last Notes

2023-08-24 09:38:09

- reply

@npub17tw…7zm4 @npub143w…pykj 1 was in jail, others were free. Now another one is in custody

2023-08-12 08:24:03

Someone published NPM fork of noble-curves that sent private keys to a server in China. Be careful and check for typos
https://blog.phylum.io/typosquat-of-popular-ethereum-package-steals-private-keys/

2023-08-10 11:59:15

We are discussing how many additional bits should one fetch in order to safely mod-div them by elliptic curve order, to get a private key. Like, 384 bits for 256-bit group.
Unfortunately, the info on the topic is limited. For example, all eddsa nonces are biased (2^-259) without explanation of security level.
Join our discussion: https://github.com/paulmillr/noble-curves/issues/71

2023-07-01 01:33:41

Releasing an open-source, privacy-focused nostr web client http://nostr.spa (https://paulmillr.com/demos/nostr/)
Mastodon is interesting, but federated. Servers decide who you can not talk to. If a server goes down, everything you’ve posted is deleted. Fragile!
Nostr is censorship-resistant. All messages are signed with Schnorr sigs. There are no servers. It’s developed openly on github and owned by everyone. Encrypted DM spec is a big thing that’s getting prototyped there now. Feedback is welcome.

2023-05-11 00:37:48

Twitter launched encrypted* DMs for verified accounts.
* No sync
* No group chats
* No attachments
* No timers
* Vulnerable to MITM
* No reporting (msg franking)
* No Forward Secrecy
* No Key Transparency
* Private keys are NOT erased after web logout
https://help.twitter.com/en/using-twitter/encrypted-direct-messages