If you don't believe it or don't get it, I don't have the time to try to convince you, sorry.
Public Key
npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Profile Code
nprofile1qqsd4fqmakmgtyfk806yqlmg0juh38x9g0ksyjah0s3d9jzd3r65z5cpp4mhxue69uhkummn9ekx7mqprpmhxue69uhhqun9d45h2mfwwpexjmtpdshxuet5028frv
Show more details
Published at
2026-07-14T20:55:47Z Event JSON
{
"id": "250fd5aab96784f8f39dcc10740e73c29115298482bfc6d841e4a6a855512b24" ,
"pubkey": "daa41bedb68591363bf4407f687cb9789cc543ed024bb77c22d2c84d88f54153" ,
"created_at": 1784062547 ,
"kind": 0 ,
"tags": [],
"content": "{\"name\":\"Geek\",\"about\":\"If you don't believe it or don't get it, I don't have the time to try to convince you, sorry.\",\"lud16\":\"[email protected] \",\"nip05\":\"[email protected] \",\"picture\":\"https://i.nostr.build/9hBT56LGKiVNsw0H.webp\",\"display_name\":\"Geek\",\"website\":\"https://hello.geektoshi.tech/\",\"banner\":\"https://r2.primal.net/cache/0/57/40/05740b59efcc0f0a5ebff107fdc7393ec470ee82021309307f801b2117e70c34.jpg\",\"displayName\":\"Geektoshi\"}" ,
"sig": "bbbd27109fea4a5e73c7ae557cd9233507d0ae9faf72636772e2e41f10768fa49e639e9b400d171114c69f898655ba1d90a51f44f68afece4c222515cb6b1873"
}
Last Notes npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Totally agree npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek 1. What npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek key generation and storage looks good on Dark Wisp, so just a small security patch. Will send a bunker sign-in PR later this week.
npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Yeah I did some reviews of primal's code the past couple days and finding the same. Sent them a PR and will probably do another. Gonna hit a few other apps as well this week. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Lol dude, this made me laugh so hard npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Its like that though unfortunatrly npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Not from you. There's just a lot of things people hold to be truth because its been repeated enough that folks think that's how it is without ever verifying the claim or doing the work themselves. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Yeah this is an issue and apps are still doing nsec login npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Same, I hold no fiat. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek And bitcoin has no coins, wallets don't store anything, mining isn't extracting anything....it's an analogy to ecplainna concept npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek needed a break from working on my own stuff so pr'd primal
npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek always has been npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Seed generation with dice. Not an endorsement of Bitbox, just a good guide.
npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek or apparently not even reading their own code for years... npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek totally fair npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek yeah i thought the question had shifted to this as well, but his main concern is still key generation. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek nothing can fix a key with insufficient entropy but a new key. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek hence "at best"...something like 1234 is 0 bits, and most would fall in the 6-8 bit range. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Will nostr freak out when they learn their debit card pin is only 13 bits of entropy at best? npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek i mean if you never sign in via nsec you're mostly fine. browser and bunker signers essentially solve this as long as the app properly handles both nip specs. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek essentially yes. for nostr keys, the main point of attack is likely plaintext key storage and not entropy issues. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek you wouldn't be able to backtrace the key to determine if you had enough RNG.
npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek that is the point though npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek the amount of misinformation disseminated by lack of understand is outstanding, but not the fault of users. cryptography is hard (on purpose). npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek depends on how you generated it npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek I wrote a NIP draft for "service announcements" which not just lets you check service status via Nostr events but opens up new usecases for devs and self-hosters.
npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek yikes, that's a bad look npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek i get you 100%...i build all my own tools for this exact reason npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Every app needs FIPS...just got a dumb idea, let's see if it works... npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Satori 0.7.0 is out with some NIP compliance and performance improvements as well as an implementation of NIP-09 (event deletion requests)
npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek This is quite good
npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Hanami 0.13.1 is out and is a mandatory security upgrade that adds key verification for users logging in via bunker URI.
npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Building Hanami 0.13.1...this will be a required upgrade. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Updating the Start9 box then taking a few days off...you guys are off the chain today. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek this is the kind of shitposting that makes nostr just the best
npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek If coldcard played dice maybe it wouldnt have happened. Sorry couldn't help myself 😎 npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Spent some time looking at Nostr key generation last night...seems to be a non-issue if you're using something like nostr-tools with @noble/curves at least. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Nope...I'm a psycho multisig enjoyer npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek call the manager, maybe he can help npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek The Coldcard discussions sure have been entertaining...I bet the people complaining also think that "cold storage" means the bitcoin are only stored on your "wallet"...
npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Good service provider getting better
npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek congrats! love what you're doing with lnvps. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek just remember, StartOS 0.4.0+...it will not work on the 0.3 series and I have no plans to support it. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek I'd eat the hell out of that not gonna lie npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Sounds good I'll look in a bit npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Well I did a PR on the blossom test suite and released a new version of my blossom server so I failed already lol npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek gives me winamp meets cyberpunk vibes and i mean that in the most positive way possible. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek dude, this looks so good! npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek i believe they do mayo on the corn pizza and it's apparently delicious npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Just released Hanami 0.13.0 with full blossom BUD compliance, tested using hzrd149/blossom-compliance (though we do skip a few optional items).
npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek minds are clouded thinking their way fixes everything npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek I don't feel like doing anything today, GM. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek i was going to do a movie rewatch before Dune 3 came out, but your posts have inspired me to do a reread of the books before then. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Part of it is that the blossom-compliance tool creates a temp key and if a server requires a whitelisted npub, some of the tests will fail. I submitted a PR to @npub1v0l…qj49 repo to allow an env to set an npub for testing. Other than that, just putting in the work to be spec compliant lol.
npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek It's at relay.nip46.com and is a fork of bunklay with some performance and security hardening fixes. Source below if you want to run your own and I have a Start9 package as well. I like the attribute fields idea, I'll chime in on the PR page.
npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek opened a PR to the blossom-compliance test suite so that tests can be run on blossom servers that whitelist npubs for access (like hanami or nostr.build for example)
npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek basically yes.
npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek unfortunately won't help much as their gated to my npub. i have instructions on the hanami repo, and maybe i'll create a docker image with the built in sidecar sometime soon. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek yeah i would tend to agree, but everyone is free to do what they wish with their projects. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek that's the dev's call not mine lol. i'd happily take it over if asked, but went my own direction. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek i have blossom servers running over fips...haven't seen tons of fips stuff yet though sadly. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek i like it! npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Did quite a bit of work on Hanami to get it to be fully compliant with Blossom BUD specs and I'd say it was pretty successful. Version 0.13.0 will be out after I do some testing. Screenshots of before and after.
npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek this is the way, nice job. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek this is hilarious and true...really depends what part of the US you're in though. But don't sell yourself short, dude. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek happy to do cook one up though...thought about adding it to my Torii relay (https://github.com/Letdown2491/torii) but might be best to do NIP-29 as a standalone tbh npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek heck yeah, looking forward to it. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek so I only do the Start9 and Umbrel packages not the relay itself. Haven is considered feature complete so it will not receive updates. If you want to use Buzz you'll need to use a relay that supports NIP-29 as @npub1gcx…nj5z pointed out. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Thank you, sir. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek From a client it would show under unindexed until you add to drive, or perform any actions. From hanami it would go directly into the drive. The issues you're running into might be directly related to kubernetes because everything happens locally first before mirroring events and blobs to external servers and relays. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Looking forward to it! npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek You can do backup-only, private Blossom servers with Hanami...mirror via Tailscale or FIPS if you want...just saying npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek This is the way npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek FIPS🚀 npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek We appreciate the dedication npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Its the internet....everyone's a critic npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Traveling the next few days but yes when I get back. Thank you, sir npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek dude, you have made #pugstr one of my favorite new things npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek lol funny you say that, it's part of the reason i wrote my own client...no reactions by default. zapped back, enjoyed the conversation. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek yeah totally fair. def not knocking reactions, just not my thing 😄 npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek just realized Nostria uses my nip-46 relay, very cool. Shout out to the devs 😃 npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek i just don't see likes or other reactions as real interactions. comments and quote reposts add to conversations, reposts and likes do not. zaps are reactions with genuine value. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek yeah i don't even have reactions on my client...plus liking things is fiat. Conversations and zaps is where it's at. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Nothing to see here, just playing around. No signers were harmed in the making of this video.
npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Just published Hanami for Android on Zapstore. If you are running a Hanami server, enter the public URL and connect (NIP-55 via Amber).
npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek no need...bug reports and PRs are just as good 😃 npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek good info! putting this on my list. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Just ran a full signer workflow audit on Hanami so 0.12.4 is out now and Docker images are currently building. This should fix any remaining NIP-07 issues, and caught a couple stray NIP-46 issues as well. After updating, either sign out/in or hard refresh so catch changes.
npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek absolutely, i'm always open to PRs! npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Just pushed hanami 0.12.3 to harden the nip-07 workflow. this should fix most of the issues some folks have seen with earlier releases so updating is recommended.
npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek if you want to try 0.12.3 that should handle most of the nip-07 issues. Let me know if you have any other issues, but i'm going to do a full audit only on the signer workflow in the next few days. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek pyramid is a relay, hanami is purely for blossom. also, i would hope pyramid is better, it's been around forever 😂 npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Every Hanami instance creates its own npub on first start which is used to identify and authenticate with other instances. This way, you can have private Blossom servers that don't appear in your public media server lists. Add peers via IP (local or Tailscale) or via FIPS domain (npub.fips) and immediately mirror across instances. You can also set instances to be backup-only so they only ever communicate with defined peers.
npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek no worries at all...working on the fix now, it's a signer polling issue. give me a little bit 😃 npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek i never do direct nsec. browser extension or bunker signer only. the android app will be nip-55 to start then also bunker after. npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek i just found a small issue with signing in via nip-07 and I should be able to get it corrected today. just want to make sure you are using nip-07 and not nip-46 to sign in? npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Hanami has tons of customizeable settings so you can make it your own including metadata stripping, image resizing, backup options, and more.
npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek Just pushed Hanami 0.12.2 with an important bugfix that pubilishes drive events (kind 30630) locally before sending to NIP-65 relays so that file and folder actions happen instantly and aren't blocked by slow relays.
npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek what do you mean? npub1m2jphmdkskgnvwl5gplksl9e0zwv2sldqf9mwlpz6tyymz84g9fsqr3wgu Geek It's just like that sometimes lol
