VitorPamplona
Vitor Pamplona

Nostr's Chief Android Officer - Amethyst Social

Public Key

npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z

NIP-05 Address

Profile Code

nprofile1qqsyvrp9u6p0mfur9dfdru3d853tx9mdjuhkphxuxgfwmryja7zsvhqpp4mhxue69uhkummn9ekx7mqppamhxue69uhkummnw3ezumt0d5fv0pmk

Publishing to

Author Public Key

npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z

Show more details

Last Notes

2026-05-24 04:49:34 CEST

This is how it feels when I receive zaps on a Saturday.
https://npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z.blossom.band/bdb111c587cc492319565b441f6dc3c1922d2728c8ca3d696fb1a89da4e7caa9.mp4

2026-05-24 04:30:58 CEST

This is some type of black magic https://npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z.blossom.band/1f21339492768efe1d96890c5f6f596468826745ffca6ccaac4ef73496ed2c59.mp4

2026-05-23 21:21:53 CEST

- reply

On Amethyst, nobody needs to fight over this :)

2026-05-23 20:54:27 CEST

- reply

Hum.. I will check

2026-05-23 20:49:12 CEST

You can also disable zaps and use likes only.
#nevent1q…5pdl

2026-05-23 20:46:44 CEST

- reply

Imagine loading your nsec 50 years later and discovering that you have some coins!

2026-05-23 20:28:58 CEST

- reply

Fix your relays contra. :) you only have fountain

2026-05-23 20:27:49 CEST

- reply

Yep, they would also lose their npub cashu if they lose their nsecs.

2026-05-23 19:25:19 CEST

- reply

Yeah, it's funny that people think there aren't other money tied to their nsecs for all of these years. There might be money in any blockchain waiting for people to use the right client to see it.

2026-05-23 19:21:33 CEST

- reply

Yep, I will support cashu as well, I just don't think it actually works. But people can decide to trust the operators if they want. I just want to make sure there is one option that never fails.

2026-05-23 19:15:33 CEST

- reply

Cashu can't even transfer those amounts.

2026-05-23 18:51:44 CEST

- reply

Because it is a central operator. The coins might not be there if the operator disappears with everybody's coins.

2026-05-23 18:47:41 CEST

- reply

That's exactly the tradeoff we are choosing to make things work at all times. The sender wants to send you money. It doesn't matter if you want to receive or not. The money will be there for you if you look for it. If you don't want it, those coins are essentially burned and everyone is a bit richer.
The sender has the freedom to send.
The receiver has the freedom to not receive or not even see it.
Everybody gets what they want out of this.

2026-05-23 18:21:02 CEST

- reply

It was a good summary. But nothing new that I could build on.

2026-05-23 18:19:33 CEST

- reply

Neither is helpful at all.

2026-05-23 15:18:34 CEST

- reply

I just wish people didn't assumed we made this because we don't know the risks.
We are doing it in spite of knowing the risks and knowing, using and sometimes helped develop all the other solutions out there.
Or, at least, I am.

2026-05-23 15:11:27 CEST

- reply

We can track the fresh address to. It's not that they need to sweep into a fresh address, it's how they perform that sweep that matters.
Remember that we can also see and track these "fresh addresses". It doesn't take much to bundle them all together.

2026-05-23 15:08:00 CEST

For those testing SP wallets, keep in mind that things are only "private" untill you spend the coins. If one or more spending transactions use coins from multiple SP utxos (which is quite common), all of those and their sender's will be linked. They all become identifiable over time with bad spending practices. If you are a sender into an SP wallet, remember that you cannot control how well the receiver will spend them. Your "privacy" (it's not really private) is at their mercy.
Needless to say that you should not be spending from SP wallets all the time if you want to keep them "private". You would need to be thoughtful on how to spend to protect your donors.
And obviously, if you defer the scanning to a server, that server can see everything and sell that information to the highest bidder.

2026-05-23 14:56:10 CEST

- reply

Not after a bad spend... On a donation portal, for instance, it would link all sender's as soon as the receiver makes a spend that uses coins from many if not all at the same time. It's even worse if the receiver is constantly spending from the SP wallets.

2026-05-23 14:18:02 CEST

- reply

And then one spend merges them all into one transaction and then suddenly everyone knows your past.

2026-05-22 20:53:52 CEST

- reply

easier times...

2026-05-22 19:58:14 CEST

- reply

It is true, but generally speaking, systems forget that their transport layer is thing that reverses all privacy that they were supposed to create.
For instance, if you are making a coinjoin and the system is so private that the server just gets an encrypted payload that doesnt review any information about it, but the same server also gets encrypted payloads to bundle them together in a transaction, the system can use IP to log who each participant is in the bundle and then do a time collision to connect the entry IPs to the final bundle id that will show up somewhere else.
These types of coordinators are the best target for a company like ChainAnalysis to reach out to and offer a large payment for their IP logs.

2026-05-22 19:24:01 CEST

Them: we have privacy!!
Me: Great, I am using it. Can you see my IP?
Them: yeah! you are here.
Me: Then it's not fucking private, is it?
Gets them every time.

2026-05-22 19:10:52 CEST

- reply

That's kinda the goal

2026-05-22 19:07:55 CEST

- reply

It still knows when you send, your IP and the details of which IP are being bundled together.

2026-05-22 19:02:38 CEST

- reply

But they can still track everytime you interact with it?

2026-05-22 18:56:00 CEST

- reply

Yep, and we do have them. We have onchain, lightning alone, lightning +zaps, cashu wallets, payment targets using Monero and other chains, we even have Venmo and Bank integrations.

2026-05-22 18:52:35 CEST

- reply

As long as there is not third party, no server anywhere, it may work.

2026-05-22 18:48:55 CEST

Make onchain great again.
#nevent1q…wfu0

2026-05-22 18:44:13 CEST

My last quarterly report to @nprofile…uazd had more new features that all previous quarters combined.
We live in weird times...

2026-05-22 15:31:51 CEST

- reply

Sure, we are not a blockchain. But traceability doesn't require a blockchain.
In fact, it is better for those tracing us that the information is not on-chain so that they can have something to sell.
But I digressed. If you want zaps for social signals, you need them public. If they are public, people can trace... by IP, by npub, by time, by relay queries, by blossom usage, by NWC breadcrumbs, by lightning channel closures, by buying data from your ISP provider, etc, etc, etc.
If you think you are untraceable in say.. Nostr lightning zaps.. you are not understanding the attack surface yet.

2026-05-22 15:05:48 CEST

- reply

Nothing is ever free.

2026-05-22 13:56:44 CEST

- reply

See if resetting your index and search relays help. Also check how many relays you are connecting. If it is too low, Tor is not working.
I am investigating a similar issue. Let me know if it resolves it.

2026-05-22 13:21:31 CEST

- reply

On nostr, it does. Everything is traceable here.

2026-05-22 05:21:47 CEST

- reply

Usually yes. The receiver gets less.

2026-05-22 05:20:39 CEST

- reply

Yeah, I am hunting this one, but I couldn't replicate.. will test more tomorrow

2026-05-22 04:34:09 CEST

- reply

Hum.. are you getting timeouts? What happens when you open your Wallet on Amethyst? Does it load the balance? I am hunting for a timeout bug. I am not sure where it comes from.

2026-05-22 04:32:06 CEST

- reply

No, that is paid by the open timestamps people. By they take donations to keep the service going

2026-05-22 04:30:33 CEST

- reply

Yes, more if you use Spark.. up to 1% of all the fees are enabled.

2026-05-21 23:46:06 CEST

- reply

It just marks the note in the block chain so that everyone can see that it existed at that time. It will update as soon as the blockchain finishes.

2026-05-21 22:38:23 CEST

- reply

of course

2026-05-21 21:43:11 CEST

- reply

cool! how expensive is it? :)

2026-05-21 21:07:13 CEST

- reply

I am lost, what is that? Looks like Alby Go doing something.

2026-05-21 20:57:28 CEST

- reply

This needs a custom signer I believe, but we could do something

2026-05-21 19:23:27 CEST

Who is going to BTC Prague?

2026-05-21 19:22:48 CEST

- reply

Now you know why I used to have 32 test phones on a table. When you depend on low level, shit is all over the place.

2026-05-21 19:22:04 CEST

- reply

Who said codec decisions make any sense? :)

2026-05-21 19:21:31 CEST

- reply

lol, yes my pixel 8 also doesnt open :)

2026-05-21 19:21:02 CEST

- reply

ohh sorry.. they are payment targets. A separate event we render together in the profile.
https://github.com/nostr-protocol/nips/pull/2119

2026-05-21 19:19:56 CEST

- reply

It's working here. Probably a Phone Manufacturer not suporting the codec issue.

2026-05-21 19:18:38 CEST

- reply

qual lightning que vc usa?

2026-05-21 19:18:12 CEST

- reply

They already do. They are very ugly... but it is just the start. I can see your XMR address

2026-05-21 19:17:01 CEST

- reply

But it is not free though. Their fee structure is quite a thing. You just pay as a % of your transfer. Plus privacy is pretty much gone.

2026-05-21 18:21:32 CEST

- reply

Yeah, it's hard. That's what we need to sell when onboarding people. They cant even receive anything before they sign up for a service.

2026-05-21 18:17:01 CEST

- reply

Uff this is taking forever to load... Minutes even in the browser.

2026-05-21 18:13:53 CEST

- reply

People are getting 21 sats, when they get anything in their post. 15,000 is a lot.

2026-05-21 18:12:00 CEST

- reply

Prices are crazy...

2026-05-21 18:11:36 CEST

- reply

Getting an account or running a node and setting up channels is way too expensive.

2026-05-21 18:08:30 CEST

No wonder we are down to $300 dollars a day for the total amount of zaps made on Nostr from all users... nobody can afford lightning anymore.

2026-05-21 17:47:13 CEST

So, I can choose a Rizful lightning node for $70 dollars, an Alby node for $10/mo, run my own server and spend a lot of time for about $5/mo, use a custodial wallet and sell my soul or... wait for it... use a free on-chain wallet for zaps that I don't need to do ANYTHING to set up or maintain it?
Tough call.
Also, my Rizful sign up verify email went straight to Spam...

2026-05-21 17:10:01 CEST

I know people think the US is doomed and losing it's empire status with all the debt and wars, yada yada... but let's not forget that most of this AI innovation was made here in the past few years. Capturing value is still what the US does best, for the good and the bad.

2026-05-21 13:59:34 CEST

- reply

Nothing else has worked in the past 10 years, so maybe there isn't anything better than 2014 tech.

2026-05-21 13:49:42 CEST

- reply

Yep, that's our point.

2026-05-21 13:36:20 CEST

- reply

I am the one that is always in the mud

2026-05-21 13:13:10 CEST

- reply

Yes. We can try to make anything besides sender, receiver and amount private if we can. But those three are public and thus traceable by definition.

2026-05-21 12:59:54 CEST

- reply

I don't disagree. Our point has been that everything is bad. It's all just smoke and mirrors out there. We are just trying to pick the least bad while not trying fool users into thinking that zaps can ever be private.

2026-05-21 12:55:52 CEST

- reply

Yep. I read your stuff before as well and I agree with most of it.
The difference between our points is that I am not trying to make a public chain private.
And after trying to use and in some cases even help develop all the "private" stuff out there, I ended up realizing it's all just smoke and mirrors.
You guys are saying onchain is retarded. Well for us, everything is retarded. We are just picking the least retarded stack for our specific use case.

2026-05-21 12:42:26 CEST

- reply

"Poor judgment" can only be assigned to humans, even with today's AI.
Don't worry. I still like you.

2026-05-21 12:40:08 CEST

- reply

Yep, the interesting point is that now we can easily analyze balance and not just zap flow in web of trust systems.
Maybe it can even help with key rotation schemes since now we have a reliable source of time.

2026-05-21 12:26:44 CEST

👀
#nevent1q…p5vd

2026-05-21 12:20:26 CEST

Here you see Claude and I trying to organize the flow of information on Nostr so that it looks neat to you.
https://npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z.blossom.band/8f97f31a729a1d10ea4762ee6c85a59da24d3b76c157b55afe8934f255670f99.mp4

2026-05-21 11:46:42 CEST

- reply

Yep, unfortunately lots of people think its a privacy silver bullet.

2026-05-21 11:27:54 CEST

Nothing like an Ad Hominem to prove we are in the right path. GM.
#nevent1q…4sfg

2026-05-21 10:51:08 CEST

- reply

I am adding it. We will become a Bitcoin node in time

2026-05-21 10:10:12 CEST

- reply

A better version of the npub that includes your relays

2026-05-21 04:30:08 CEST

Devs racing to deliver the latest Nostr feature https://npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z.blossom.band/a8c80ad3eca1703dc5e97b103f487eaaf51effb15a5a6bba64f2925eb3d53223.mp4

2026-05-21 02:56:50 CEST

- reply

I am still trying to figure out how to get only good outbox relays out of nip66 records that will accept posts from the user or good inbox relays, etc.

2026-05-21 02:06:09 CEST

- reply

Also FYI you are using nostr.band as inbox and outbox and that relay went bust a few months ago.
Maybe add nos.lol and nostr.mom to your public outbox and public inbox.
Since you are there, also reset your index and search relays to the defaults (just press the button)

2026-05-21 02:04:18 CEST

- reply

On-chain Gays

2026-05-21 02:02:56 CEST

- reply

Can you check if the Tor relays are connecting? We did a few changes on it and might have affected it.

2026-05-21 01:49:49 CEST

- reply

I think the issue is that most of the calendars are not geohash indexed :(

2026-05-21 01:44:40 CEST

It's back to the basics season

2026-05-21 01:42:54 CEST

- reply

I implemented 3 versions by now. I don't think it adds much to our use case.

2026-05-21 01:37:27 CEST

- reply

Yes, we can do it

2026-05-21 01:30:37 CEST

Calendars are up!
#nevent1q…mhp6

2026-05-21 00:39:51 CEST

- reply

Yeah, we know

2026-05-21 00:11:32 CEST

- reply

Yes. But maybe you are not in the right universe, though.

2026-05-21 00:07:36 CEST

- reply

@nprofile…0md0 says it's coming pre-installed to all Graphene OS users...

2026-05-21 00:00:07 CEST

- reply

Pretty cool, but I can see my transactions on Amethyst so mine is better :)

2026-05-20 23:50:23 CEST

- reply

which NIP-29 impelmentation should I use as base for mine? The spec is too ambiguous.. I need to give claude something more specific

2026-05-20 23:35:08 CEST

- reply

one day...

2026-05-20 23:34:31 CEST

The cold wallet cabal worked so well that they scared everyone from developing and using a hot wallets that can be trully used.
Fear turns any rational decision into an emotional one. And that trully sells.

2026-05-20 23:26:29 CEST

- reply

So, that is what people do when they take a break from Nostr... interesting... :)

2026-05-20 23:17:52 CEST

- reply

You could just giftwrap an unsigned kind 8333, no?
You still need scanning if you don't want to lose funds, since Nostr events have the tendency of disappearing.

2026-05-20 23:15:41 CEST

- reply

We have a Coinjoin @nprofile…ye3s

2026-05-20 22:50:13 CEST

- reply

that's ok

2026-05-20 22:12:20 CEST

if you don't want your onchain zaps on Amethyst, you will be able to hit the zap the devs button and donate it to the devs.

2026-05-20 22:08:53 CEST

- reply

pass it forward! :)

2026-05-20 21:40:20 CEST

- reply

That is actually not a bad idea. Your client can just "refund" everyone.

2026-05-20 21:38:41 CEST

- reply

What he said is that this is nothing new. It was hapenning even before we started on chain wallets because any pubkey, of any protocol, can "receive" money (money is locked to the nsec of that key), from any chain. It's by definition impossible to avoid.