<unnamed>

Public Key

npub1w3vaxva0vcrx7pnvlpmede5smvafdl69xnu7ma82kaxl9us89zdsht4c5c

Profile Code

nprofile1qqs8gkwnxwhkvpn0qek0sauku6gdkw5klaznf70d7n4twn0j7grj3xcpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsq3camnwvaz7tmwdaehgu3wvf5hgcm0d9hx2u3wwdhkx6tpdsq3samnwvaz7tmjv4kxz7fwwdhx7un59eek7cmfv9kqz9thwden5te0dehhxarj9eekwm3wwdcxzcm92ruejm

Publishing to

relay.damus.io

nos.lol

nostr.bitcoiner.social

relay.snort.social

nostr.sgn.space

Last Notes

2026-03-07 13:00:01 CET

A Declaration of the Independence of Cyberspace
https://www.eff.org/cyberspace-independence
https://stacker.news/items/1449378

2026-03-07 11:11:44 CET

https://en.wikipedia.org/wiki/Merkle%E2%80%93Hellman_knapsack_cryptosystem

2026-03-05 18:24:55 CET

Getting the integration of JoinMarket NG + Jam v2 ready!
Here are some automated playwright frontend tests in a realistic regtest environment with other makers. directories, ...
An image for alpha testing is built automatically and available for testing: https://github.com/joinmarket-ng/joinmarket-ng/pkgs/container/joinmarket-ng%2Fjam-ng
#JoinMarketNG
https://blossom.primal.net/bbd21b3bb438a7dfda20b951118117f22b6e543f8afab7247b858094d531a974.webm

2026-03-05 15:16:25 CET

A few days ago, a JoinMarket NG collaborator's GitHub account was deleted without previous warning. The account was a member of the joinmarket-ng organization and had just opened a Pull Request.
Now GitHub is asking the collaborator some info but has not restored the account yet.
Really annoying, because all the issues and PRs of the collaborator have suddenly disappeared!
As always, a good chance to learn and strengthen our weak spots.
Here is the complete mirror (code, issues, labels, milestones, PRs, ...) to CodeBerg: https://codeberg.org/m0wer/joinmarket-ng
It works automatically using a GitHub personal token with read only access to what's already public.
Here is the guide on how to do the mirroring: https://codeberg.org/Recommendations/Mirror_to_Codeberg#4-github-codeberg-mirroring-tutorial It did fail at first but ended up working after 3 or so retries.
#JoinMarketNG

2026-03-03 10:54:43 CET

The problem with insufficient entropy at boot time:
> In 2012, researchers scanned the whole internet and harvested public keys from TLS certificates and SSH hosts. They found that a handful of systems had identical public keys, and in some cases very similar keys (namely, RSA keys with shared prime factors): in short, two numbers, n = pq and n′ = p′q′, with p = p′, whereas normally all ps and qs should be different in distinct modulus values. After further investigation, it turned out that many devices generated their public key early, at first boot, before having collected enough entropy, despite using an otherwise decent PRNG (typically /dev/urandom). PRNGs in different systems ended up producing identical random bits due to a same base entropy source (for example, a hardcoded seed).
From the book Serious Cryptography.
F

2026-03-03 10:31:32 CET

> The 2G standard also defined A5/2, a cipher for areas other than the EU and US. A5/2 was purposefully weaker to prevent the use of strong encryption everywhere.
From the book: Serious Cryptography.
So basically they made 2G A5/1 cypher insecure accidentally, but from the beginning designed a weaker A5/2 for the rest of the world on purpose...

2026-02-24 08:41:52 CET

- reply

Don't want to start a war. Just to mention the truism that different tools have different tradeoffs and that does not mean one is better than the other.
That being said:
- (Current) Bitcoin had no hard forks
- Bitcoin is protected by a hashrate that's orders of magnitude larger and that can't be outpaced with generic hardware
- Higher cost to validate transactions (in CPU, RAM, and tx size)
- Bitcoin has a limited supply. NGU technology is very important for a SoV! And nice to have for a MoE.
- Monero has no layer 2, protocols are built in layers and blockchains don't scale
All of this might be worth it for some particular person doing some particular task, but the privacy gains are not a free meal!

2026-02-21 15:01:46 CET

- reply

Well, the taker is the coordinator. I would not call that a centralized coordinator.
It's not always the same entity, and no one other than the taker knows the input and output mappings or can easily perform a Sybil attack.
Not sure if it can get much better than this from the taker's perspective.

2026-02-16 22:56:05 CET

- reply

Not so nice... Created at could be kind of sensitive. Donated at not sure what it means. And device? Is it decodable somehow? What is it?

2026-02-16 17:13:34 CET

- reply

care to elaborate?

2026-02-16 15:34:37 CET

- reply

IMO no external/centralized coordinator is the way. JoinMarket can still be improved, and that's the plan for JoinMarket NG.

2026-02-16 15:26:14 CET

- reply

what, why?

2026-02-16 11:52:00 CET

- reply

I once tried to run a monero node and that's when I saw it had no chance of “winning”. Craaazy resource requirements, and that despite being used way less than Bitcoin. If it ever reached the same levels or its full capacity, decentralization would be interesting to keep.
Oh, and it already has 51% attacks and hard forks on a monthly basis.

2026-02-16 10:58:31 CET

- reply

with KYC? no thanks

2026-02-08 10:00:50 CET

Don't mind the content. But I'm blown away at how decent these “AI” generated videos look. I just sent Opus 4.6 the DOCS.md of jm-ng and the links to https://github.com/3b1b/manim (used by 3Blue1Brown math youtuber) and https://github.com/remotion-dev/remotion (programatic videos using React). So this looks veeery promising. https://blossom.primal.net/89a2ce02609db11919d96090f4c35c24b8ccedfdfee54823d0cc298caa2661e1.mp4 https://blossom.primal.net/d2a9308fd96e75dca36f3f16526ead0f51ae7505dd208f06fb2b30df3c770c9f.mp4

2026-02-01 11:01:34 CET

#NymVPN #FOSDEM
https://blossom.primal.net/aac033873c542912481b1c8fa488ff82249332ac7424362789d671da817c084a.jpg

2026-01-31 10:20:15 CET

- reply

challenge accepted!

2026-01-31 10:03:50 CET

- reply

do you have a stand somewhere?

2026-01-31 08:48:52 CET

Anyone at #FOSDEM ?

2026-01-28 11:55:52 CET

@nprofile…h36r has it ever been considered to enable Touring complete (or closer to) spending condition scripts on cashu mints? As in smart contracts that could enable ZKPs for spending, allowing for something like Tornado Cash but on Bitcoin.
#cashu

2026-01-28 06:22:34 CET

- reply

If logs don't fill up disk space that's a big win. But the moment you get targeted CPU usage will also be a problem :/

2026-01-27 21:18:23 CET

There's someone flooding all JoinMarket makers with !orderbook requests. Making them run out of storage with several GBs of logs per hour and also filling their CPU cycles. It does so through direct onion connections (last time was through directories) and with a bunch of nicks in parallel.
I've implemented Tor level DDoS protection through a dynamic PoW requirement (0 in normal cases) in a branch of jm-ng as an experiment: https://github.com/m0wer/joinmarket-ng/pull/108/changes It only works with the alpha release of Tor, but an expected release might come soon.
I didn't know about this feature from Tor, but it's really neat. Some more info here: https://community.torproject.org/onion-services/advanced/dos/
#JoinMarketNG #JoinMarket #CoinJoin

2026-01-27 09:26:02 CET

- reply

Yes, it seems to have come back again. I guess there will be a painful transition period to JM-NG which fixes the problem with rate limiting in directories and makers/takers.

2026-01-25 16:17:24 CET

About the problem of deleting notes on Nostr, here's an idea: use a delegated key that rotates each month and expires. Once expired, request deletion from all your notes from all relays and then share the private key so that anyone can post bullshit with it, including yourself.
You get plausible deniability for anything posted before last month and really encourage relays to delete all shit signed with that expired delegated key or they will get spammed to death.
This might be a stupid idea. Please go ahead and let me know why.

2026-01-22 11:32:45 CET

Fixed my zap receiving ability by switching to Coinos. Will leave the fight of getting my self hosted lnbits working fast enough for later.

2026-01-22 11:30:45 CET

- reply

Thanks! very useful.
I've changed my zaps address to a Coinos one and works well now.

2026-01-22 07:27:10 CET

- reply

I guess it has to do with this:
#nevent1q…798x

2026-01-22 00:21:10 CET

- reply

I have one! And you have zapped me in the past🤔
is it not working?

2026-01-21 18:59:44 CET

JoinMarket NG 0.11.1 is out!
- Cold storage fidelity bond support for makers
- Reproducible Docker builds!!!
- BIP39 passphrase support
- Dual offers (abs and rel simultaneously) for makers
- Lots of fixes and UX improvements (thanks beta testers!)
https://github.com/m0wer/joinmarket-ng/releases/tag/0.11.0
https://github.com/m0wer/joinmarket-ng/releases/tag/0.11.1
#JoinMarketNG #JoinMarket #CoinJoin #Privacy

2026-01-20 08:29:57 CET

Cold storage fidelity bond support is here!
Instructions at: https://github.com/m0wer/joinmarket-ng/blob/master/DOCS.md#cold-wallet-setup-external-wallet--hardware-wallet
https://blossom.primal.net/d76ea4ec8573b9ddf6809906a47f9167f4f9cb6e436a175299f4dbdf76a141ac.png
#JoinMarket #JoinMarketNG #CoinJoin

2026-01-19 15:42:37 CET

- reply

meshtastic! and then have a look at reticulum

2026-01-19 13:18:54 CET

How To Turn the Internet Off to an Entire Country - YouTube
https://www.youtube.com/watch?v=bbP5znKYzmE
The tool used: https://bgp.he.net
https://stacker.news/items/1415065

2026-01-18 21:40:47 CET

- reply

see https://github.com/m0wer/joinmarket-ng/issues/47#issuecomment-3738196190

2026-01-18 15:44:17 CET

Hi @nprofile…asma ! Any way I can reach out to you for some questions about JoinMarket development? Tried email and telegram but I think you're not active there anymore.

2026-01-16 21:46:53 CET

- reply

No external audit yet. I'm trying to get funding for that. And also looking for more eyes on the code on the day to day. If you know anyone interested for either please let me know.
For the adoption, I'm the only maker at the moment with some bot for mainnet tests. The NG orderbook has peer feature detection. Any maker with features is a NG maker: https://joinmarket-ng.sgn.space/
So sadly no active users, just people trying out stuff (and helping me a lot with catching bugs and improving UX). A bit of a chicken and egg problem.
What's working great is the new orderbook watcher in general and the two NG directory nodes, that were the only ones to resist some DoS attack recently.

2026-01-16 07:45:48 CET

- reply

All an existing maker needs it's the mnemonic! There is also fidelity bond auto discovery. And next in the roadmap is supporting external storage as fidelity bonds. So makers can start saving bonds in cold storage or reuse existing ones without reusing the mnemonic. In fact a maker could run both the reference implementation and JM-NG with different wallets and the same bond for experimenting.
Manual steps here: https://github.com/m0wer/joinmarket-ng/tree/master/maker#migrating-from-joinmarket-reference-implementation

2026-01-15 23:50:34 CET

JoinMarket NG 0.10.0 release is out!
Lots of news and improvements. Here are the highlights:
- Descriptor wallet (syncs in seconds). No private keys stored in the Bitcoin Node.
- `--select-utxos` a TUI for `jm-taker coinjoin` and `jm-wallet send`.
- External notifications compatible with every service (Gotify, Telegram, ...). Specially useful for makers. Uses apprise.
- Configuration file for clear and persistent settings.
https://github.com/m0wer/joinmarket-ng/releases/tag/0.10.0
https://blossom.primal.net/d9994033093428d8fc6536f6e3bef1ef6c1f35199580dfb1a8e8aec8b25f24dc.png
#JoinMarket #CoinJoin

2026-01-14 15:26:59 CET

This speed reading training starts at 300wpm and end at 900wpm
https://www.reddit.com/r/interestingasfuck/comments/1qc6slz/this_speed_reading_training_starts_at_300wpm_and/
https://stacker.news/items/1411424

2026-01-13 15:50:33 CET

- reply

FYI @nprofile…htdw

2026-01-13 15:45:05 CET

I've updated https://m0wer.github.io/joinmarket-fidelity-bond-simulator/ to include some optimistic ROI figures. With the assumptions of 2,000 JoinMarket CoinJoins monthly of an average size of 2M sats. Then, estimate how often each offer is picked and see the profitability divided by the bond size (not value). As if it were some kind of savings account. And only considering the locked coins in the bond, not the liquidity in the mixdepths.
It's really interesting to see that the optimal is definitely not being the largest bond! Since we assume 8 makers per round, it's “easy” to be chosen there often even without a large bond. You can see that the “smartest” bonds are 4.4 BTC (number 1 in ROI) and 2 BTC (number 3 in ROI).
Have fun with the tool!
https://blossom.primal.net/046b8f3263332f553155a3dc7e7d272db717666747f9466b257736c6b6b30933.png
#JoinMarket #CoinJoin

2026-01-12 17:26:15 CET

Michael Saylor | The Bitcoin Treasury Debate Gets Heated - YouTube
https://www.youtube.com/watch?v=J85O-ckNxCw
https://stacker.news/items/1409910

2026-01-12 14:31:28 CET

- reply

Clarification:
- JoinMarket -> decentralized CoinJoin protocol without centralized coordinators
- https://github.com/JoinMarket-Org/joinmarket-clientserver/ -> Reference implementation in Python
- Jam -> WebUI for the reference implementation
- JoinMarket NG -> Alternative implementation with protocol extensions

2026-01-12 10:38:39 CET

# JoinMarket NG 0.9.0 Release Summary
## Major Features
Descriptor Wallet Backend
- New default backend using Bitcoin Core's descriptor wallets
- Sync time reduced from ~90s to ~1s via listunspent instead of scantxoutset
- One-time setup with automatic descriptor import
- Smart scan for mainnet: initial import scans ~1 year, full rescan runs in background
Orderbook Watcher Enhancements
- Direct maker reachability tracking via Tor health checks
- directly_reachable field in orderbook API responses
- Maker feature extraction from handshakes for monitoring
Operator Notifications
- Push notifications via Apprise (100+ services: Telegram, Discord, email, etc.)
- Privacy-aware with configurable data inclusion
- Per-event toggles, fire-and-forget design
- Integrated across all components
## Configuration Changes
Defaults Modified
- Backend: full_node → descriptor_wallet
- Fee rate fallback: 10 sat/vB → 1 sat/vB
- Counterparty count: 3 → 10 makers
- Broadcast policy: RANDOM_PEER → MULTIPLE_PEERS (3 random makers)
Fee Estimation
- Added --block-target (1-1008 blocks) and --fee-rate options
- Support for sub-1 sat/vB rates (float precision)
- Default: 3-block estimation with full node, 1 sat/vB fallback with Neutrino
## Critical Fixes
Transaction Handling
- Fixed maker multi-UTXO support (multiple !sig messages)
- Fixed maker fee calculation bug causing "Change output value too low" errors
- offer.txfee is total contribution, not per-input/output multiplier
Orderbook Watcher Stability
- Fixed aggressive offer pruning removing valid long-running makers
- Fixed peerlist handling treating partial updates as complete replacements
- Fixed concurrent read race conditions in TCP connections
- Philosophy shift: "show offers when in doubt" vs aggressive cleanup
Timeout Handling
- Fixed JoinMarket NG directory compatibility (120s timeout for peerlist features)
- Reduced Neutrino pending transaction timeout: 48h → 10h
## Performance & UX
- Estimated fees displayed before confirmation
- Final transaction summary with exact counts and fees
- Early backend validation before wallet sync
- Reduced logging verbosity for routine operations
- Improved sweep coinjoin logging clarity
## Backend Improvements
- Unified broadcast behavior across full node and Neutrino
- Self-fallback now allowed for RANDOM_PEER and MULTIPLE_PEERS policies
- Enhanced Neutrino UTXO detection with incremental rescans
- Block-based verification for Neutrino (no mempool access)
https://github.com/m0wer/joinmarket-ng/releases/tag/0.9.0

2026-01-09 17:34:05 CET

https://www.youtube.com/watch?v=-kQT2-C-Pgs de @nprofile…jagf
pedazo de vídeo!

2026-01-09 11:50:18 CET

Dell @ CES 2026: XPS branding is back
https://nasilemaktech.com/dell-ces-2026-return-of-xps/
![](https://m.stacker.news/125381)
The “Mac” of Linux laptops is here😎
https://stacker.news/items/1407389

2026-01-08 17:32:26 CET

Lidify: A self-hosted, on-demand audio streaming platform with discovery algo
https://github.com/Chevron7Locked/lidify/
Lidify is built for music lovers who want the convenience of streaming services without sacrificing ownership of their library. Point it at your music collection, and Lidify handles the rest: artist discovery, personalized playlists, podcast subscriptions, and seamless integration with tools you already use like Lidarr and Audiobookshelf.
https://stacker.news/items/1406909

2026-01-08 16:53:04 CET

nektos/act: Run your GitHub Actions locally 🚀
https://github.com/nektos/act
https://stacker.news/items/1406878

2026-01-08 10:48:42 CET

The Barclays Trading Strategy that Outperforms the Market - YouTube
https://www.youtube.com/watch?v=8pYgz4YlQnE
Today we're going to be learning about how Barclays takes money from broke people. Fun!
https://stacker.news/items/1406687

2026-01-08 09:20:14 CET

Create privacy blockers across multiple calendars
https://gist.github.com/m0wer/27599b1057840ba9418d9d2ce9d559c2
Calendar Blockers - Create privacy blockers across multiple calendars
This script automatically creates "blocker" events on target calendars for every event found in source calendars. The blocker events only show a generic title (e.g., "private" or "busy") without revealing actual event details, helping maintain privacy when sharing calendars.
Use Case:
- Share work calendar with personal calendar without revealing details
- Create busy blocks on shared calendars while keeping event info private
- Sync availability across multiple calendar systems
Features:
- Configurable blocker title
- Optional padding time before/after events
- Supports recurring events
- Dry-run mode for testing
- Works with vdirsyncer or similar calendar sync tools
https://stacker.news/items/1406659

2026-01-08 07:36:15 CET

Plebdashboard – Lightning Node Analytics & Rankings
https://sorukumar.github.io/plebdashboard-ln/
https://stacker.news/items/1406616

2026-01-07 17:04:31 CET

Commercial tea bags release millions of microplastics when in use
https://www.uab.cat/web/newsroom/news-detail/commercial-tea-bags-release-millions-of-microplastics-when-in-use-1345830290613.html?detid=1345940427095
https://stacker.news/items/1405967

2026-01-07 15:58:13 CET

- reply

May I ask why did you stop working on JoinMarket? Is there anything that would make you come back?

2026-01-06 22:21:30 CET

- reply

Great!

2026-01-06 18:58:49 CET

Wallet Migration Failure May Delete Unrelated Wallet Files In Bitcoin Core 30.0
https://bitcoincore.org/en/2026/01/05/wallet-migration-bug/
https://stacker.news/items/1405283

2026-01-06 18:09:53 CET

Any ideas on how to address this? https://github.com/m0wer/joinmarket-ng/issues/47
maybe @nprofile…asma ?
#joinmarket

2026-01-04 09:05:55 CET

Chris Belcher – What’s The Problem With Bitcoin Surveillance? – Stephan Livera
https://stephanlivera.com/episode/167/
https://stacker.news/items/1403121

2026-01-03 17:15:14 CET

JoinMarket NG logo and SimpleX chat ready!
https://smp12.simplex.im/g#bx_0bFdk7OnttE0jlytSd73jGjCcHy2qCrhmEzgWXTk
https://blossom.primal.net/28490416eb877a0a7627794aaf8752a1f3278c9287d13f91965c56cb481ce8a9.jpg

2026-01-03 08:25:39 CET

wagoodman/dive: A tool for exploring each layer in a docker image
https://github.com/wagoodman/dive
![](https://m.stacker.news/124381)
https://stacker.news/items/1402203

2026-01-02 19:47:18 CET

- reply

Yes! Just re-read your article today. The idea is to move the fees to LN, see the other thread with @waxwing .
You might find this interesting BTW: https://github.com/m0wer/joinmarket_analyzer

2026-01-02 19:43:28 CET

- reply

I wanted to talk with you about that! Nice that you asked.
About the first question, no changes yet. The "features" field in the handshake has been extremely helpful to not have to create a new major version. And we'll try to jeep things that way as long as possible.
About CJXT. The end goal is what you described in your video. But a nice starter would be to hide roles by moving fees to LN somehow.
BTW feel free to open issues for ideas and discussions.

2026-01-02 18:13:27 CET

JoinMarket NG
Announcing today a full rewrite of all JoinMarket components in modern Python. Focusing on performance, maintainability, and extensibility. While maintaining compatibility with the existing JoinMarket network.
https://github.com/m0wer/joinmarket-ng
Why JoinMarket? Has no central coordinator: most censorship resistant and peer to peer.
Why a rewrite? The reference implementation has served the community well for years, and we're deeply grateful for all that the contributors have done. However, the project is no longer actively developed (181 open issues and 41 open pull requests) and had architectural limitations such as relying on Bitcoin Core's BerkeleyDB wallets (deprecated since v26.0.).
New features:
- Support for light clients using Neutrino
- Rate limiting to prevent logs flooding
- Extensive protocol and implementation documentation
- Realistic E2E tests including reference implementation makers and takers
Future plans:
- Nostr relay integration
- Lightning Network integration (CoinJoinXT) to hide roles and eliminate fee traces
- A lot more ideas
Help wanted:
- Funding: Applied to HRF Bitcoin Dev Fund and soon to OpenSats. Other grant ideas or direct donations welcome.
- Security: Need sponsorship or a volunteer for external security audit.
- Contributors: Peer review, testing, documentation.
Entrypoint for migrating makers: https://github.com/m0wer/joinmarket-ng/tree/master/maker#migrating-from-joinmarket-reference-implementation
The reference JoinMarket served us well for a decade. Let's make sure the protocol thrives for the next one.

2026-01-01 16:58:24 CET

- reply

None of them have seeders 😕 and bitcine does not load nor allow to download, I guess they are just trying to proxy the seedless torrents. I will add the torrents and check back in a week to see if there's any progress.
Thanks! I'll zap you as soon as I manage to download something.

2026-01-01 10:20:33 CET

There is an ongoing attack against JoinMarket makers where a random nick not serving onion constantly sends !orderbook requests through directory servers. The makers and directories mostly cope with the load, but the log files, which have a hardcoded debug log level, grow several gigabytes per hour and crash many makers.
A solution is to setup hourly log rotation. In Debian systems, you can move logrotate from daily to hourly cron using:
```
dpkg-divert --add --rename --divert /etc/cron.hourly/logrotate /etc/cron.daily/logrotate
```
The default user data directory is `$HOME_DIR/.joinmarket`. Create a logrotate config:
```
/home/user/.joinmarket/logs/*.log {
hourly
size 100M
copytruncate
rotate 24
notifempty
missingok
}
```
To install and test, save the config to `/etc/logrotate.d/joinmarket-logs`, test it with `sudo logrotate -d /etc/logrotate.d/joinmarket-logs`, and force run manually with `sudo logrotate -f /etc/logrotate.d/joinmarket-logs` or wait for automatic hourly execution via cron.

2025-12-28 21:19:36 CET

the mongo db situation is crazy - YouTube
https://www.youtube.com/watch?v=9Wg6tiaar9M
https://stacker.news/items/1389000

2025-12-28 18:41:36 CET

- reply

Because one you can measure and prove.

2025-12-27 17:00:07 CET

Why TCP Over TCP Is A Bad Idea
https://web.archive.org/web/20220826224137/http://sites.inka.de/~bigred/devel/tcp-tcp.html
https://stacker.news/items/1383592

2025-12-24 15:22:02 CET

What Are Passkeys Anyway? - Computerphile - YouTube
https://www.youtube.com/watch?v=xYfiOnufBSk
https://stacker.news/items/1373136

2025-12-17 11:43:35 CET

- reply

You need to check out reticulum!
https://reticulum.network/

2025-12-02 22:32:40 CET

Advent of Code 2025
https://adventofcode.com/
Advent of Code is an Advent calendar of small programming puzzles for a variety of skill levels that can be solved in any programming language you like. People use them as interview prep, company training, university coursework, practice problems, a speed contest, or to challenge each other.
https://stacker.news/items/1300109

2025-12-02 11:18:59 CET

How The World’s First Finance Bro Ruined A Nation - YouTube
https://www.youtube.com/watch?v=9FXYUMNH8CQ
How John Law's first experiment with paper money ended up crashing the French economy with it.
https://stacker.news/items/1298531

2025-11-30 23:21:36 CET

- reply

it's the auto sharing feature from @nprofile…kuag

2025-11-30 21:46:00 CET

Analyze JoinMarket Bitcoin CoinJoin transactions using ILP.
https://github.com/m0wer/joinmarket_analyzer
# JoinMarket Analyzer: Understanding CoinJoin Change Outputs
I've released a tool called **joinmarket-analyzer** to match inputs and change outputs in JoinMarket transactions, identifying who the taker was.
**Goal:** The purpose is **not to spread FUD**, but to raise awareness. It's crucial to understand that this analysis **only affects change outputs**. The equal-amount outputs—which provide the actual privacy in a CoinJoin—remain indistinguishable.
The tool uses Integer Linear Programming (ILP) to match inputs with their respective changes and determine which participant is the likely "Taker" (the one initiating the transaction and paying fees) and which are the "Makers" (liquidity providers earning fees).
## Example Usage
You can run it easily with Docker:
```bash
docker run --rm ghcr.io/m0wer/joinmarket_analyzer:master \
0cb4870cf2dfa3877851088c673d163ae3c20ebcd6505c0be964d8fbcc856bbf \
--max-fee-rel 0.001 --max-solutions 1
```
## Results
The tool outputs the probable structure of the transaction:
```
...
Taker: Participant 4 (pays 21,368 sats)
💰 Participant 1 (maker)
Inputs: [0]
Outputs: Equal=6.3M sats, Change=113M sats
Fee receives: 458 sats
...
🎯 Participant 4 (taker)
Inputs: [4]
Outputs: Equal=6.3M sats, No change output
Fee pays: 21,368 sats
...
```
[View this transaction on mempool.space](https://mempool.space/tx/0cb4870cf2dfa3877851088c673d163ae3c20ebcd6505c0be964d8fbcc856bbf)
## Future Possibilities
This tool lays the groundwork for more advanced privacy research:
* **Entropy Evaluation:** Measure how "ambiguous" change outputs are. If multiple valid solutions exist, the Taker is harder to pinpoint.
* **Algorithm Design:** Evaluate and improve taker algorithms to intentionally create ambiguous change structures.
* **Market Stats:** Analyze historical CoinJoins to gather statistics on fee limits used by takers and earnings by makers.
Check out the code and contribute: https://github.com/m0wer/joinmarket-analyzer
https://stacker.news/items/1296366

2025-11-30 21:24:26 CET

IP over Avian Carriers - Wikipedia
https://en.wikipedia.org/wiki/IP_over_Avian_Carriers
https://stacker.news/items/1296357

2025-11-30 18:00:46 CET

Selfishness, Immigration, War, Love, Liberty and of Course Ayn Rand - YouTube
https://www.youtube.com/watch?v=jy03XKhrdgI
https://stacker.news/items/1296208

2025-11-28 12:19:38 CET

Please just stop saying "just"
https://sgringwe.com/2019/10/10/Please-just-stop-saying-just
https://stacker.news/items/1294916

2025-11-28 11:48:24 CET

polyarb: Polymarket arbitrage bot for overlapping markets
https://github.com/m0wer/polyarb
# Made Some Free Money During the 2024 Presidential Election (PolyArb)
⚠️ **SHITCOIN ALERT** ⚠️ This involves USDC on Polygon. You've been warned.
So during the 2024 presidential election, I built this Python tool called [PolyArb](https://github.com/m0wer/polyarb) to find arbitrage opportunities on Polymarket.
The basic idea: when you have overlapping prediction markets (like "Trump wins presidency" AND "Trump wins the presidency and the popular vote"), sometimes the prices get out of whack. The sum of the atomic outcomes should equal the price of the combined markets, but they don't always. When that happens, there's free money on the table.
During the election, there was insane liquidity in these markets, and the tool would automatically scan for these mispriced combinations and execute trades to capture the spread. No directional betting, no predictions needed – just pure math arbitrage.
It worked surprisingly well. The election created the perfect storm: high volume, multiple overlapping markets, and enough volatility to create regular mispricings.
The repo has the full code, CLI tools for managing wallets and positions, and even a daemon mode to run it automatically. There's a whole breakdown of the election strategy in the README if you're curious how it worked.
Anyway, thought some of you might find it interesting. Again, shitcoins involved, but the arbitrage logic is pretty fun.
https://stacker.news/items/1294888

2025-11-28 10:27:01 CET

Password Managers: security issues
https://lock.cmpxchg8b.com/passmgrs.html
https://stacker.news/items/1294868

2025-11-27 19:06:04 CET

oh-my-cv: An in-browser, local-first Markdown resume builder.
https://github.com/Renovamen/oh-my-cv
https://stacker.news/items/1294357

2025-11-25 14:18:16 CET

prek: ⚡ Better `pre-commit`, re-engineered in Rust
https://github.com/j178/prek
https://stacker.news/items/1291352

2025-11-21 09:24:06 CET

kr8s: extensible Python kubernetes client library
https://docs.kr8s.org/en/latest/
A simple, extensible Python client library for Kubernetes that feels familiar for folks who already know how to use `kubectl`.
https://stacker.news/items/1287735

2025-11-18 17:21:14 CET

Cloudflare Status
https://www.cloudflarestatus.com/
https://stacker.news/items/1285613

2025-11-16 11:39:39 CET

I know what you download
https://iknowwhatyoudownload.com/en/peer/
Torrent downloads and distributions for any IP address.
https://stacker.news/items/1283835

2025-11-16 11:19:48 CET

The Perfect Router Does Not Exi— - YouTube
https://www.youtube.com/watch?v=550fh2n5rUs
This build redefines what a router can be. Haven is an open-source, portable Wi-Fi HaLow mesh router that runs on a Raspberry Pi 4, capable of linking devices over kilometers without internet or subscriptions. It uses the same sub-GHz spectrum as LoRa and Meshtastic but supports full IP networking — meaning all your regular apps just work. Built entirely from open hardware and open firmware, Haven runs 802.11s + BATMAN for self-healing, peer-to-peer communication you truly own.
https://stacker.news/items/1283829

2025-11-15 11:11:32 CET

EVERYTHING Is Backdoored. By Default. - YouTube
https://www.youtube.com/watch?v=remIZ_3iIfw
https://stacker.news/items/1283121

2025-11-14 10:38:05 CET

Why does nobody believe the theft of 215 bitcoins from Luke Dashjr?
https://observatorioblockchain.com/ciberseguridad/por-que-nadie-se-cree-el-robo-de-215-bitcoins-a-luke-dashjr/
> Luke Dashjr, one of Bitcoin's leading developers, has been making headlines lately after having 215 bitcoins stolen. Dashjr explained that a hacker gained access to his server, his Pretty Good Privacy (PGP) system, his wallet, and his bitcoins. It's unbelievable that one of the people who has contributed the most to the cybersecurity of the Bitcoin protocol could have been hacked so easily and lost such a large sum of money.
https://stacker.news/items/1282183

2025-11-12 09:00:40 CET

DEF CON 33 - Stories from a Tor dev - Roger 'arma' Dingledine - YouTube
https://www.youtube.com/watch?v=djM70O0SnsY
> What is it actually like to support and balance a global anonymity network, with users ranging from political dissidents to national security analysts? You say it's important to teach law enforcement and governments about privacy and end-to-end encryption, but how do those conversations go in practice? I heard you accidentally got Russia to block all of Azure for a day? Are you ever going to do a Tor talk in China? Wait, who exactly tried to bribe you to leave bugs in Tor to support their criminal schemes?
> Historically I've tried to downplay some of the excitement from operating the Tor network and teaching the world about Tor, but this year I'm going to try my hand at the "war stories" track.
https://stacker.news/items/1280395

2025-11-07 14:13:15 CET

AI trading in real markets (Leaderboard)
https://nof1.ai/
https://stacker.news/items/1276930

2025-10-30 15:30:47 CET

DEF CON 33 - Kill List: Hacking an Assassination Site on the Dark Web - YouTube
https://www.youtube.com/watch?v=cYZmRp90hss&list=WL&index=3
Four years ago, Chris found a vulnerability with a murder for hire site on the dark net. He could exploit that vulnerability to intercept the murder orders that were being placed: names, addresses, pattern of life information, photos, and, in some cases, bitcoin payments. He reached out to Carl for help, and a small team was built in secret to intercept and triage these orders. However, after their warnings to the police fell on deaf ears, they ultimately decided to warn the targets on the kill list directly. After an initial series of successes, the investigation expanded rapidly and they formed a global cooperation with the FBI and police forces around the world, resulting over 175 murder orders being disclosed, 34 arrests 28 convictions and over 180 years of prison time being sentenced. This talk will be about those years: about the dangers and threats the team had to navigate, the times of isolation when the police wouldn’t take them seriously, about raids in Romania to uncover the cyber-criminal gang running the site and the psychological impact of racing against time to try to stop people getting murdered.
https://stacker.news/items/1269665

2025-10-27 07:40:38 CET

Python 3.14 Is Here. How Fast Is It?
https://blog.miguelgrinberg.com/post/python-3-14-is-here-how-fast-is-it
https://stacker.news/items/1266346