VitorPamplona
Vitor Pamplona

@nprofile…e307 's one is here: https://nostrhub.io/naddr1qvzqqqrcvypzqfngzhsvjggdlgeycm96x4emzjlwf8dyyzdfg4hefp89zpkdgz99qy28wumn8ghj7un9d3shjtnyv9kh2uewd9hsqpjwf9gz656seqszmx
And I added mine in the original PR from Alex.

2026-05-18 22:42:53 CEST

- reply

I will try again. I will need to test my cashu wallets on Amethyst

2026-05-18 22:42:11 CEST

- reply

yep... I am still wainting on the Silent Payments proposal. Looks like we have about 5 competing ways forward.

2026-05-18 21:36:43 CEST

- reply

They are affraid that it will interfere with Google's own call screen... so we need special permissions

2026-05-18 21:26:24 CEST

lol, Google rejected our app not because we have a Wallet and doing some crazy stuff, but because we have a Call screen. Go figure...
May take a few more days...

2026-05-18 18:08:45 CEST

- reply

The argument is that onchain zaps makes things too easy for chain analysis. With zaps, they do need to look for data outside of the chain to connect people in the chain. Which they already do anyway, so... It's a theoretical gain that doesn't happen in practice :(

2026-05-18 17:59:19 CEST

- reply

On iOS? You dont have a choice.
On Android? It's ok, but use a signer.
On Browsers? Never. Use a signer.
On Desktops? You dont have a choice.

2026-05-18 17:46:10 CEST

- reply

I have nothing against cashu. But none of the Cashu apps have worked well for me. I have lost sats on almost every one of them. In fact, I don't even remember if I found one that didn't have an issue of just keeping my funds safe for months.
The main issue is that if two users use different mints, the zap must go through lightning between the mints. And that also fails quite a lot.
Currently we dont have a good way to help the user trust a mint as well. So, most people never really pick one even though It could have worked for them.
But if it serves as consolation, i will add cashu wallets at some point. I just want to make sure I get it right in a way that is virtually impossible to lose the little sats they have there.

2026-05-18 17:31:50 CEST

- reply

Which wallet do you want me to integrate? Everything I tried has issues: either the implementation is buggy, or there is no channels available, or when they do connect zaps/lightning transactions fail half of the time. This is even before all the KYC / trust requirements that each API has.
I already integrate with NWC, so people can use any wallet they want. But that is clearly not enough.

2026-05-18 17:29:37 CEST

- reply

I agree with all of these. To me things boil down to what is the easiest way to convey value between nostr users that leak the least amoung of information?
Maybe identifying on-chain transactions in the same way we identify lightning transactions on the zaps today is ok for most people... idk, people have been using it, so.. I assume it's not a problem.
What onchain zaps are solving is really the wallet setup, which is the biggest pain point on nostr right now. Having a place to send zaps even before the receiver is fully set up is key. The rest can change and use different privacy assumptions as they go.
We will probably going to settle for something in between, not fully private, but not fully public.

2026-05-18 17:23:31 CEST

- reply

Why do you think the problem of creating a wallet is made up? That's quite literally one of the main complains of Nostr across all clients. So much so that the answer has been let's use custodial solutions or KYC everyone to make shit work.

2026-05-18 17:17:13 CEST

- reply

I am not wrong, I am just "limited by the technology of my time". As soon as somebody makes something better, I will merge. But that has not happened yet. We will see.

2026-05-18 17:12:55 CEST

- reply

This is good, but it doesnt solve the problem we are trying to solve: it's too hard to create a lightning wallet to begin with.

2026-05-18 17:10:02 CEST

- reply

Yes, I was talking about ZK proofs. That's the only way I see being able to please those complaining about on-chain traces forever.
Either that or we go back to the mess of trusting that zaps happened, like you described. Which is a massive problem today since it is quite easy to fake a zap and most clients offer Zap counts as a way to give reputation to a post in the feed.

2026-05-18 16:27:27 CEST

"Nostr feels live again" is the mood we need for mondays.

2026-05-18 16:16:34 CEST

- reply

Looking forward

2026-05-18 14:52:49 CEST

- reply

Hum... Weird, let me see if there is an API issue. Are you behind Tor or VPN?

2026-05-18 14:50:24 CEST

- reply

Just go for MLS. Nothing else makes much sense these days.

2026-05-18 14:45:58 CEST

- reply

Neither does your onchain wallet will have 1B in it. This is a nostr wallet, not your cold storage.

2026-05-18 14:44:47 CEST

- reply

Why not, what happened?

2026-05-18 14:44:32 CEST

- reply

Lots of proposals made to me don't work. So, I am still waiting.

2026-05-18 14:36:20 CEST

- reply

If you think it's false equivalency, you are in for a very disappointing ride with nostr.

2026-05-18 14:35:42 CEST

- reply

Yep, but they can also take your phone to use the lightning wallet in it to do the same. So, it's not changing much from that perspective.

2026-05-18 14:34:32 CEST

- reply

Maybe. But again that would be awesome if it actually happened. People finally using Bitcoin again.. and not this shit that is today.

2026-05-18 14:30:53 CEST

- reply

You can't change your npub as well. Just FYI.

2026-05-18 14:29:54 CEST

- reply

Cool! Where is the implementation?

2026-05-18 14:29:13 CEST

- reply

It's not that they couldn't, they didnt want to pay for it. Fees have never gotten so high that people couldnt move their money.

2026-05-18 14:27:07 CEST

- reply

Yep, every zap is fully traceable. You can pretty much assemble the entire chain of zap events for Nostr since the early days. And we don't even have blockchain.

2026-05-18 14:26:10 CEST

GM on-chain Nostr! The debate continues. No actual proposals were made yet. Lots of talk.. little action.

2026-05-18 14:23:49 CEST

- reply

Wouldn't that be awesome if it did?

2026-05-18 14:22:41 CEST

- reply

We could do it in such a way that receiving and sending in and out of Nostr is harder if that is the problem. So, once in, the money stays rotating between nostr keys in an identifiable way like what zaps do. Then in the end, it leaves via a mixing service for instance.
Anyway, lots to work yet.

2026-05-18 14:17:34 CEST

- reply

Why? Don't you think Nostr can succeed? It doesn't take much to make a good mixing service..

2026-05-18 14:14:34 CEST

- reply

So, who are the users that you estimate sent to Derick?

2026-05-18 14:09:33 CEST

- reply

Let's do it.. send a NIP on which way to do it that actually works. Right now a bunch of people are talking but nobody is doing shit. We need actual proposals/implementations from people that know what they are talking about.

2026-05-18 14:06:27 CEST

- reply

We can make all zaps go through a mixing service before coming out to an exchange if that is the problem.

2026-05-18 14:05:00 CEST

- reply

Correct. My goal is to make it available. Each user then decides if they want to use it or not.

2026-05-18 06:19:12 CEST

- reply

Yes

2026-05-18 03:57:06 CEST

- reply

I will do a deep review on this tomorrow. It's time to get this right... Whatever is happening...
Still signing with Amber,.correct? Did Amber also signed the Wisp post?

2026-05-18 03:18:03 CEST

- reply

How the hell... And why is only these types of things that break the signer.. I am so confused...

2026-05-18 03:01:49 CEST

- reply

First time? :)

2026-05-18 03:01:27 CEST

- reply

We are doing monero as well, but attaching a public profile like nostr to Monero transactions doesn't make much sense, in my opinion. Why would you use a privacy coin and then break the privacy by putting it on Nostr?

2026-05-18 02:58:51 CEST

- reply

Yes. We don't have a blockchain but we use the same cryptography that Bitcoin does. So it is all interoperable.

2026-05-18 02:57:08 CEST

- reply

Yep, I have tested them all. They all suck. But I will implement silent payments as soon as anyone actually makes it work.

2026-05-18 02:55:03 CEST

- reply

Yep

2026-05-18 02:54:44 CEST

- reply

lol.

2026-05-18 02:46:15 CEST

- reply

Almost. Right now it is basically a script that locks the funds to your nsec on chair. Anyone can send zaps to you, regardless if you have created a wallet or not. Your nsec is what signs the spending transaction. You can do this with any private key on Bitcoin, we just used it for Nostr keys instead.

2026-05-18 02:41:35 CEST

- reply

Could work, but silent payments need a trusted monitor to the best of my knowledge. Also, right now there is only one wallet with silent payments. Everybody else is alpha code, full of bugs.

2026-05-18 02:40:15 CEST

- reply

We will see. The current OS still allows side loading. There is no other option since iOS doesn't allow anything, no side loading, no payment without going through their store, etc.

2026-05-18 01:29:33 CEST

- reply

Just sent you one

2026-05-18 01:20:49 CEST

- reply

@nprofile…xcpk it think there is a bit of confusion with the UI

2026-05-18 01:20:12 CEST

- reply

Do you know if they created one?

2026-05-18 01:19:37 CEST

- reply

Did you see the build your own widget from Android 17? I think Nostr apps should follow that model. The user makes their own app. Nobody downloads anything from the web

2026-05-18 01:11:09 CEST

- reply

Who needs an App store if Android is starting to ship build your own app on the go? :)

2026-05-18 01:07:44 CEST

- reply

But he is not the only one. Lots of people are already using it

2026-05-18 00:28:45 CEST

- reply

That can work... A bit annoying because it requires both clients to be online and implementing the spec.

2026-05-18 00:22:01 CEST

- reply

See if resetting your index relays and search relays help. Just press the buttons on the relay list screen.

2026-05-17 23:37:20 CEST

- reply

Don't touch the money. In the end, these days, anyone can send any token/coin to any private key in any blockchain. Once your pubkey is out there, people can give you privileges to move money anywhere. The onchain wallet is just one of the ways of doing that. But there are 1000s of different ways.

2026-05-17 23:35:36 CEST

- reply

It's lack of knowledge. We just don't have anyone in Nostr that is a true security dev. But again, our solution is to use signers... ALWAYS. That minimizes your exposure. I don't know if clients will ever get to the security model that a signer can get.

2026-05-17 23:29:48 CEST

- reply

I already replied those. I am asking what matters to YOU, since you came so strong at me... I thought you had a good point of view, but it doesn't look like it...

2026-05-17 23:22:31 CEST

- reply

I am trying to understand your concern, but you are not giving me any details... Getting rekt how? Losing their nsec? Is that your concern?

2026-05-17 23:19:49 CEST

- reply

Getting rekt how?

2026-05-17 23:09:46 CEST

- reply

I think I understand, and you are welcome to not use if you don't want to. You can't block anyone else from using though. That's their choice.

2026-05-17 23:02:40 CEST

- reply

Lol, I will post as many times to your replies as I want. Welcome to Nostr.

2026-05-17 23:02:01 CEST

- reply

Ok, so how do you want them?

2026-05-17 23:01:30 CEST

- reply

No, they know I constantly tell people to go to Amber. None of this is new.

2026-05-17 23:00:50 CEST

- reply

I didn't, it is still there. But nobody pays for those services.. they just complain that things don't work. None of them are free.

2026-05-17 23:00:03 CEST

- reply

You know nostr is just reusing one pubkey for all posts, right? Then you use that key, that knows everything about you, to send zaps which include public keys of everyone involved, right? It's all public on Nostr.

2026-05-17 22:55:50 CEST

- reply

What part is the mess? Home feed?

2026-05-17 22:51:13 CEST

- reply

Just use Amethyst. And now you can keep it running in the background to receive notifications without having to rely on Play services or Unified Push servers.

2026-05-17 22:42:10 CEST

- reply

Just call a college student in the US.

2026-05-17 22:41:34 CEST

- reply

Interesting.. I will do some testing

2026-05-17 22:36:45 CEST

- reply

No, but none of my sponsors or donors are specifically asking for security upgrades. Same for all the other clients. We do it because we care, but that doesn't mean it's any good.
Also, security is much more expensive than what anyone is getting paid to do as a nostr dev.

2026-05-17 22:19:51 CEST

- reply

Wait, was it not working only in that post?

2026-05-17 22:19:17 CEST

- reply

If it doesn't load your balance or your transactions, your NWC setup is blocking it or not responding to the secret.
Are you on 1.10? We had a few fixes on the DNS that people said it start to work after it.
If not, I would suggest uninstalling and installing again. It will delete everything local and you will need to re login, but we will know di this a cache issue or something else.

2026-05-17 22:10:52 CEST

- reply

Satoshi's code barely worked. It took years from other people to actually make it work and make it secure. And all of those were paid to do so.

2026-05-17 22:09:46 CEST

- reply

We implemented one for this. It was too hard to reuse other stuff that wasnt designed for nostr. :(

2026-05-17 22:00:14 CEST

- reply

DMs have been quite useful for the last 2 years or so to me. It works quite well everywhere these days. And now with MLS, it gets even better.
Use Amber if you are concerned with security. Never put your keys on any client, regardless of how well the dev is trying to make you feel good about it. We are all using way too many dependencies to be able to review security in apps. That's why signers are better: they are tiny. It's easy to review.
There is no dev on Nostr right now that is specialized in security. Nobody has ever paid for it. So, keep that in mind as well.

2026-05-17 21:46:04 CEST

- reply

I feel like now I have the power to do what I always wanted to do before. Everything is like.. on yeah, I thought about this back in 2016, I should just do it.

2026-05-17 21:44:06 CEST

- reply

It's not, you can rotate your nsec in Nostr, start fresh. imagine having to load all your DMs from 50 years of DMs just to use nostr? It doesn't make sense. A full reset every once in a while is healthy for you and the protocol.

2026-05-17 21:42:41 CEST

- reply

Yep, I have said for a while that nsecs must never be stored in any client. My own included.

2026-05-17 21:34:42 CEST

Venmostr
#nevent1q…06dn

2026-05-17 21:32:50 CEST

- reply

Yes, we don't need domain names at all. Just search and pubkeys.

2026-05-17 21:27:58 CEST

- reply

@nprofile…2d2l I might need your help

2026-05-17 21:24:27 CEST

👀
https://npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z.blossom.band/d6e003e37d439b17c18f766dbcaa9f8fda3d6a0f7dea5ec3b2873d05eb19a124.png

2026-05-17 21:19:44 CEST

- reply

Sure, we can add other wallets.

2026-05-17 21:19:23 CEST

- reply

Which one: nostr, lightning or Bitcoin? 😳

2026-05-17 21:13:47 CEST

I am not going to lie, I never thought I would be signing and sending Bitcoin transactions on Amethyst. Feels like a dream.
Maybe we can rebuild lightning on Nostr directly so that channel state between two pubkeys is stored in relays.. 🤔

2026-05-17 21:10:52 CEST

- reply

To be fair, Primal's trending sucks as a algorithm.

2026-05-17 21:06:43 CEST

- reply

I didn't even understood the title and I saw that the text doesn't explain the title, so I gave up.

2026-05-17 21:05:55 CEST

- reply

Yep, what you do is not public. But everybody just sends the zaps back into the network. Right now there is a full trace of most of the bitcoins on Nostr because very few people take the out. It's just a full public record of the Bitcoin circulation among Nostr keys.

2026-05-17 21:04:15 CEST

- reply

What is a Closed-Order Ceremonial Recordkeeping?

2026-05-17 20:52:03 CEST

- reply

Ohh interesting..

2026-05-17 20:49:39 CEST

- reply

I think you can just deterministically generate keys for any curve out there.. there might be different methods for each chain, but entirely possible.

2026-05-17 20:22:38 CEST

- reply

Only trust Signers.

2026-05-17 20:13:17 CEST

- reply

It's using DVMs... Some times they are off line, but they should return a list of events. You can click the star to favorite them and add to the top filter or bottom nav bars

2026-05-17 19:44:36 CEST

- reply

What do you mean, I literally have 3 proposals and two full draft NIPs for key rotation that have been opened for years..

2026-05-17 19:43:47 CEST

- reply

It's not useless. It's just not the hardcore crypto security you would usually see. Our apps REQUIRE a hot key loaded in memory at all times. There is no way to do cold wallets. We are literally always in the line of fire. We can't protect anyone against compromised systems and most phones are compromised.
I You agree that you will never have security if keys are placed on a network connected device. Then, all we can do is to minimize the damage and let people play while they can.