Derek Ross

The purple pill helps the orange pill go down.

Developer Relations at Soapbox.

🪺 NostrNests.com
🎙️ YakBak.app
🖼️ Zappix.app
🗓️ Plektos.app
🎶 ZapTrax.app
📈 Zaplytics.app
🎧 Podstr.org

Public Key

npub18ams6ewn5aj2n3wt2qawzglx9mr4nzksxhvrdc4gzrecw7n5tvjqctp424

NIP-05 Address

[email protected]

Profile Code

nprofile1qqsr7acdvhf6we9fch94qwhpy0nza36e3tgrtkpku25ppuu80f69kfqpzpmhxue69uhkummnw3ezuamfdejsz8nhwden5te0dehhxarj94ex2mrp0yhxgetjv44hymmnwvhx6egpp4mhxue69uhkummn9ekx7mqpz4mhxue69uhkummnw3ex2mrfw3jhxtn0wfnsz9thwden5te0wfjkccte9ejxjar5duh8qatzqyvhwumn8ghj7urewfsk66ty9enxjct5dfskvtnrdaksfflwj4

Publishing to

nostr.wine

nostr-relay.derekross.me

Author Public Key

npub18ams6ewn5aj2n3wt2qawzglx9mr4nzksxhvrdc4gzrecw7n5tvjqctp424

Show more details

Last Notes

2026-08-03 03:04:24 UTC

- reply

https://ditto.pub and also available on Zapstore.

2026-08-03 03:04:01 UTC

- reply

but amethyst just had a huge update the other day. def not abandoned.

2026-08-03 03:03:35 UTC

- reply

check out ditto.pub :)

2026-08-03 00:50:10 UTC

- reply

youspace.live

2026-08-02 21:26:30 UTC

- reply

GN 🫂

2026-08-02 18:55:46 UTC

https://blossom.ditto.pub/6e2e5d061949e74be2e41fde45d7469765f475e0f25f0fc49fbcd3e29d99ab5b.png

2026-08-02 17:23:11 UTC

Sitting in @nprofile…2rvu's living room and the server rack fans just spun up loudly. Who's hammering our apps? 👀👀👀

2026-08-02 17:22:13 UTC

- reply

Agree.

2026-08-02 17:22:04 UTC

- reply

It's a failure at many levels. Like... The source code has been out there for years and could have been scrutinized more.

2026-08-02 17:21:15 UTC

- reply

🫂

2026-08-02 17:00:41 UTC

Every day brings new information about Coldcard that feels like another gut punch. I was wrong about the device. If I recommended one to you, I'm sorry that I led you astray. I was working with the best information that I had at the time, but that doesn't make this any less terrible. I'm genuinely at a loss for what to say or do here besides I'm sorry and we'll get through this. 🫂💜🤙🏻

2026-08-02 15:41:13 UTC

Good morning and pura vida, Nostr! Keep building! 🤙🏻💜🫂

2026-08-02 15:36:55 UTC

- reply

🫂

2026-08-02 15:36:35 UTC

- reply

Good morning. Sorry it's late. Had a late night hackathon with @nprofile…z2n3 🫂

2026-08-02 08:48:53 UTC

- reply

Selling vulnerable hardware and expecting customers to flash it themselves is a bad look and doesn't make this unfortunate situation any better.

2026-08-02 08:38:19 UTC

- reply

This you 🫂🫂🫂

2026-08-02 04:33:36 UTC

- reply

i got an email too and im really confused.

2026-08-01 17:28:37 UTC

- reply

Glad you're good

2026-08-01 16:01:58 UTC

- reply

2026-08-01 15:59:24 UTC

- reply

Good morning sir 🌅

2026-08-01 15:59:03 UTC

- reply

It's okay brother 🫂

2026-08-01 15:51:43 UTC

- reply

I'll allow it 🤝🏻

2026-08-01 15:51:11 UTC

- reply

https://gifverse.net/media/MHu15pMP/original.gif

2026-08-01 15:49:01 UTC

An ostrich costume is also acceptable.

2026-08-01 15:48:41 UTC

About to land in Houston. @nprofile…2rvu are you going pick me up wearing a Shakespeare costume? Because you should.

2026-08-01 15:46:33 UTC

- reply

We have to test all of the things for sure.

2026-08-01 15:37:18 UTC

- reply

https://blossom.dreamith.to/afd6df09d050142feb978f6cf4b2e244239401818ea6bf78d8e1b6b63c36bf7c.png

2026-08-01 15:29:00 UTC

- reply

I saw 😩 I also told him that posting that publicly was bad form. Now he just alerted every fuck stick to attack them.

2026-08-01 14:05:46 UTC

- reply

I'm glad to hear that Carla and the new baby are doing well. 🫂🫂🫂🫂🫂🫂🫂

2026-08-01 13:30:00 UTC

- reply

Asked the Googs. Google says 32GB is max.

2026-08-01 13:29:16 UTC

- reply

What size is the micro SD? It won't recognize larger ones. I forget the cutoff. Could Google it. I've used 8GB and 16GB. My 200GB doesn't work in a Coldcard.

2026-08-01 13:27:16 UTC

- reply

You can even be very lazy and use Hazard's GM Inbox 📥

2026-08-01 13:19:48 UTC

- reply

Welcome to the Nostr ecosystem 💜🤙🏻🫂

2026-08-01 13:18:39 UTC

- reply

Not a good sign.

2026-08-01 13:18:16 UTC

- reply

GM Semi.

2026-08-01 13:17:45 UTC

- reply

I get that. We just learned not to trust device entropy.

2026-08-01 13:17:07 UTC

- reply

We've come a long way 😂

2026-08-01 13:16:02 UTC

- reply

Pura vida 🫂🤙🏻💜

2026-08-01 13:15:47 UTC

- reply

Laugh at phone GIF.
Sorry airplane WiFi is bad.

2026-08-01 13:14:14 UTC

- reply

Good morning 🌄

2026-08-01 13:13:07 UTC

- reply

Current status: taking off https://blossom.dreamith.to/2949ac7b453ec26744930f286bc10a12a610d28d1bb594b9ba05c5cc05bbd635.jpeg

2026-08-01 13:04:39 UTC

- reply

https://media.tenor.com/lNMyjjSWLYcAAAAd/my-man-my-man-denzel.gif

2026-08-01 13:04:34 UTC

- reply

Good morning 🌄

2026-08-01 13:04:29 UTC

- reply

GM PV 🫂🤙🏻💜

2026-08-01 13:04:21 UTC

- reply

Good morning Slayer 🫂

2026-08-01 13:04:04 UTC

- reply

Good morning 🌄

2026-08-01 12:50:46 UTC

- reply

I have been recommending BitKey as the normie path forward.

2026-08-01 12:49:48 UTC

- reply

Perhaps. We know that dice rolls are fine. Do those and add a passphrase and you'll be fine.

2026-08-01 12:48:17 UTC

To my dude that complained on my GM note:
You deleted it. But I gotchu brother.
Saying GM every single day helps me set the tone as I said. Positivity is infectious. Truly.
I'm sorry you GM and don't get any GMs back. Content and user discovery are hard on the Nostr. Lots of work can be done here.
How do you get GMs back? You have to say it back first. You have to let other GMers know that you're here and wishing them a GM too. You let them know that there's a PV coming at them. You drop them a 🫂 and a 🤙🏻.
The GM Protocol will propagate these updates throughout the network and over time you'll get GMs on your own GM announcements.
This reads like a shitpost, but it's not, well, perhaps I'm using a shitpost to explain the art of engaging and interacting on the Nostr. 👀
If you don't let people know that you want to be social, those people may not be social with you.
It's hard when Nostr's user activity numbers on short notes has been dwindling, however we must not lose hope. We must continue to build the future that we want.
And on a related note, private Nostr is flourishing like never before. You won't see it here on the short note feeds, however other aspects are growing immensely.

2026-08-01 12:28:18 UTC

We keep letting them get away with it!
#nevent1q…2rj5

2026-08-01 12:27:24 UTC

- reply

😂

2026-08-01 12:26:46 UTC

- reply

Good morning 🌄

2026-08-01 12:26:10 UTC

- reply

Good morning sir. I hope you're well 🫂🤙🏻💜

2026-08-01 12:24:31 UTC

- reply

Good morning 🌄

2026-08-01 12:07:31 UTC

See a GM. Give a GM. You complained. That's okay. Good morning brother. I hope you have a good day. Truly.

2026-08-01 11:41:35 UTC

- reply

Good morning sir 🌄 have a great one.

2026-08-01 11:41:20 UTC

- reply

Thanks Dan. Good morning. At the airport waiting on a chai tea latte and then off to Houston. Life is good. I hope your day is awesome too my friend.

2026-08-01 11:33:47 UTC

Always be prepared. https://blossom.dreamith.to/74e26ca33767dfb93f90ba7cfd628743e5b51f2ae72d7f0c79ee1b2904f8b4a9.jpeg
#nevent1q…8jmv

2026-08-01 11:33:30 UTC

- reply

PV 🤙🏻

2026-08-01 11:31:30 UTC

Good morning and pura vida, Nostr. Starting your day with a GM sets the tone for the whole day. Use this information wisely. It's a life hack. 💜🤙🏻🫂

2026-08-01 04:19:19 UTC

I'm heading to Texas bright and early tomorrow morning to teach @nprofile…2rvu how to use Nostr. 🫂🤙🏻💜 GN.

2026-08-01 04:17:45 UTC

- reply

Oh 👀

2026-08-01 00:08:24 UTC

- reply

This is a shitpost. Shitting on closed American AI companies.

2026-07-31 21:31:18 UTC

This is one of my "indoor" hacky sacks from the 90s. I still have it, because it was more expensive than the others I had bought, so I took care of it 🥹 https://blossom.dreamith.to/c0db92bdd40a14c5e02466c54fe77b1e148a629b8d84ce3a34a01fc705f212bc.jpeg

2026-07-31 21:29:24 UTC

- reply

Makes sense.

2026-07-31 21:28:34 UTC

Nostr hack: add "https://t.me" to your filters/muted words.

2026-07-31 21:09:07 UTC

- reply

Yes. They turned to Kimi K3 for help because other top models slapped them on the wrists.

2026-07-31 21:04:32 UTC

👀👀👀
#naddr1qq…tgn2

2026-07-31 21:01:45 UTC

Last night, researchers we're trying to use the best tools at hand, LLMs, to diagnose the Coldcard problems. Anthropic and OpenAI kept researchers safe. Moonshot allowed them to complete the tasks at hand. Absolutely disgusting that Moonshot would allow this.

2026-07-31 20:57:24 UTC

- reply

I want it to be, but at this time I don't think so.

2026-07-31 20:56:09 UTC

- reply

The stack is secured.

2026-07-31 20:54:22 UTC

- reply

I don't know. I'm seeing three options that I like, or perhaps one of each and making a 2/3 with one of each device.

2026-07-31 20:53:28 UTC

- reply

It's open source MIT license so go and put Kimi K3 on it and see what it finds.

2026-07-31 20:52:34 UTC

- reply

It does.

2026-07-31 19:55:50 UTC

- reply

pimps

2026-07-31 19:39:59 UTC

Frostsnap - https://frostsnap.com - seems really, really cool. No pun intended.

2026-07-31 19:35:40 UTC

- reply

it sounds like they're going to catch him unless he used a stolen credit card lol

2026-07-31 19:34:41 UTC

- reply

BitKey or Trezor Safe 7 are good options.

2026-07-31 19:24:52 UTC

- reply

yes, but i think it was from something else

2026-07-31 19:23:43 UTC

- reply

i appreciate your concern but im merely stating what im going to be doing with mine.

2026-07-31 19:21:52 UTC

- reply

this is how it goes, man. i like NVK. i've shared beers and food with him. i've given dude several 🫂 and 🤙🏻 but this is my paranoia. this is my kid's future. how bad of a father would i be if i didn't do everything in my power to do right for them?

2026-07-31 19:19:49 UTC

- reply

just because i could vibe code one doesn't mean i would trust it with my stack.

2026-07-31 19:18:35 UTC

- reply

eh... i'd rather not continue to set people up for failure.
that said, it's probably fine to use as a 100+ dice roll + pass phrase mult-sig signer.
but the NFC is garbage. it only works 25% of the time.

2026-07-31 19:17:28 UTC

- reply

lack of trust. it's not personal. it's just paranoia. i left ledger for the same reason after they decided to put cloud backups in their app without my knowledge.

2026-07-31 19:11:07 UTC

If you're leaving Coldcard, don't throw it away. Keep it as a decoy wallet. Multiple decoys are good 👀
https://blossom.ditto.pub/e099a0841a227e0dfbb158343a7038795d5bc24ca66aafc978b3b23f223d7085.jpeg

2026-07-31 19:05:03 UTC

- reply

At least we can make fun of ourselves...

2026-07-31 18:43:07 UTC

- reply

if you're going to re-use and existing device i would then upgrade the firmware and then use dice roll.

2026-07-31 18:41:53 UTC

- reply

nothing is safe. the only way to be safe is to roll dice 100+ times to generate your own entropy and generate the seed words from that and to use a secure passphrase. if you did the dice rolls and did not do a passphrase, you're safe, though you have a vulnerability without a passphrase. if you did both dice + passphrase, you're safe.

2026-07-31 17:06:09 UTC

Consider the Coldcard vulnerability just the beginning. With frontier LLMs advancing rapidly, security threats are only getting more sophisticated. What was "secure enough" yesterday won't cut it tomorrow.
That means leveling up:
🔐 Use multi-sig. Don't rely on a single key to protect your stack.
🔧 Use multiple vendor devices. Don't put all your trust in one company's hardware or code.
🔑 Use complex passphrases. A strong 25th word adds a layer that even a compromised seed can't crack.
🛡️ Or combine ALL of these. For some of you, that's what it's going to take.
Yeah, it sucks. Financial freedom isn't free and it isn't easy. But the alternative of trusting someone else to secure your bitcoin is exactly what we opted out of in the first place. I still believe in self custody.
#nevent1q…ra98

2026-07-31 16:56:37 UTC

- reply

#nevent1q…crfp

2026-07-31 16:52:11 UTC

- reply

Speaking on the Coldcard issue, he said something like: we need to tell everyone, tell everyone on Twitter, tell everyone on Nostr, well no one's on Nostr. 😅
I'm just fucking with him.

2026-07-31 16:47:05 UTC

@nprofile…tpxn I heard what you said on Spaces earlier today you bastard 😡

2026-07-31 16:33:07 UTC

- reply

I said all of these things above. And yes, you do need to be dramatic if people did NOT do these things.

2026-07-31 16:32:03 UTC

- reply

You're safe. 🫂

2026-07-31 15:48:54 UTC

- reply

It might not be for you, but for others it might be. That's why choice is good.

2026-07-31 15:48:25 UTC

- reply

Damn. Sorry brother. It will be okay. Fuck life event right now, but things will get better.

2026-07-31 15:47:17 UTC

- reply

That's what the reports seem to be as this vulnerability came about when Coinkite migrated their code base away from GPL. So prior generations of firmware should be fine. That said, this is a type of event they makes you rethink your setup

2026-07-31 15:45:56 UTC

- reply

They have Bitcoin only and then Bitcoin+Shitcoin. Again they invented hardware wallets. They might know a thing or two. And it's open source!

2026-07-31 14:38:19 UTC

- reply

perhaps. or it's just a coincidence.

2026-07-31 14:37:41 UTC

- reply

Correct. Great addition.