Nostr notes by Nuh

I feel the word L2 now means things that aren't produced by ...

2026-05-08T00:27:45+02:00

I feel the word L2 now means things that aren't produced by miners. And fine that is acceptable, let's start saying if it is not a merge mined sidechain it is a scam.

quoting
nevent1q…3jh3
None of these solutions have any incentive to make it easy for you to compete with them.

There won't be any other Spark. It's very unlikely that there will be any Ark servers beyond the two companies working on it. Same with Liquid.

They want more fees, not more competition.

L2s are the strongest force for Bitcoin centralization in decades. Just like in the rest of crypto.

nevent1q…dnn5

Soon someone will make a shitty version of Iroh and call it Nostr ...

2026-05-06T19:28:46+02:00

In reply to nevent1q…rzav
_________________________

Soon someone will make a shitty version of Iroh and call it Nostr Holepunching or whatever, get some grants and disappear in a year. Broken shit.

The Nostr economy is based on making cool things to generate some ...

2026-05-06T17:07:08+02:00

In reply to nevent1q…64ph
_________________________

The Nostr economy is based on making cool things to generate some hype and get funding. No one is interested in doing hard work. Except Jack of course because he has stake holders he has to answer to, but not about Nostr nor bitchat

Any Bitcoin hodlers who isn't spending any of his wealth and ...

2026-05-06T09:51:43+02:00

Any Bitcoin hodlers who isn't spending any of his wealth and time pushing to eat the entire crypto market into Bitcoin sidechains, and make every transaction a Bitcoin transaction, is sleep walking into losing his net worth or at least its upside.

Creating and promoting Bitcoin sidechains should be a profitable endeavour for developers and users. I am afraid a trustless bridge isn't the only thing needed for that though, but it is necessary.

quoting
nevent1q…3fpc
Been reading opinions that the Bitcoin community is more “mature” and “tolerant” than 5 years ago when it comes to Ethereum and other successful altcoins

I don’t think that’s the case, it’s just that the maximalist dogma has taken so many Ls and thought leaders moved goalposts so many times that everyone must be more careful with their predictions

But the biggest issue is that Bitcoin itself hasn’t evolved to incorporate all the altcoin use cases, which renders the dogma moot.

Tron has been a much better store of value since adding USDT. Payments in third world countries are made in stablecoins, not Bitcoin. Litecoin is the number one payment coin on BitPay, and now Monero has more user nodes than Bitcoin.

Now Zcash is being promoted as a better store of value because it has the same economic scarcity while actually hiding everyone’s amounts, and Ethereum will become quantum resistant before Bitcoin.

It’s hard to stay cocky when your worldview is constantly being challenged by the market reality… and your coin fails to compete.

So no, I don’t think anyone became nicer or more tolerant. Everyone gets humbled by the free market.

But I have to think the reason this is happening is because ...

2026-05-06T09:45:03+02:00

In reply to nevent1q…m9cj
_________________________

But I have to think the reason this is happening is because frontend Devs don't give a fuck and they just grap some framework and use the defaults... I can't imagine any valid reason to do this other than it just happened as a consequence of choices made mindlessly

I was a frontend developer early on, so yes. React is trash and ...

2026-05-06T09:42:28+02:00

In reply to nevent1q…m56r
_________________________

I was a frontend developer early on, so yes. React is trash and most people using it have never ever had as many users as they claim justifies React.
Direct DOM manipulation already does better performance like Svelte or Leptos, and honestly HTMX would work just fine, hell even React reinvented server side rendering.

But what does have to do with CTRL+F??? You can't be bothered implementing your own search over your own in-memory or indexeddb cache then render that?

These are just excuses for; this work doesn't increase engagement so we don't care.

Nostr event nevent1qqswm7tzvk3wk2gg5k2g29e4vtm4rprhkv8a085f2pemye5jctr20tqzyzfsenh3yded6tckq470c48sm0v5xdwck5d5ufehyd4spj4hrr7djm4d42k

2026-05-06T09:37:58+02:00

Primal is trash at the moment.

I disagree, if you move funds through enough swaps you are ...

2026-05-05T20:16:23+02:00

In reply to nevent1q…wjra
_________________________

I disagree, if you move funds through enough swaps you are effectively good to go, unless you made yourself the USG enemy somehow.
Sure I want most bitcoin transactions to be client side validated and as private as ZCash and Monero... But the status quo is not as dire as people make it sound, certainly not worse than banks as people dare to say.

I don't think botanix are serious people... They don't ...

2026-05-05T19:31:05+02:00

In reply to nevent1q…syh4
_________________________

I don't think botanix are serious people... They don't even have an open source implementation, not even in a testnet state .. they flat out have no public code, just marketing. I disrespect that.

Great Script Restoration (which I was told the correct way to ...

2026-05-05T13:39:43+02:00

Great Script Restoration (which I was told the correct way to upgrade Script) now has two BIPs, but no one is discussing neither in any forum I am aware of.

Help @npub1q85…97tf

2026-05-05T11:53:30+02:00

In reply to nevent1q…yja2
_________________________

Help
MoneyonChain (npub1q85…97tf)

I want someone to create a stablecoin on Rootstock that is backed ...

2026-05-05T11:50:54+02:00

I want someone to create a stablecoin on Rootstock that is backed by RBTC but not priced in USD, instead priced in Bitcoin difficulty at a moment in time say 1/1/2026.

Every time the difficulty increases (Rootstock contracts can read Bitcoin difficulty natively) your BTC collateral should be allowed to mint new stablecoins, if the difficulty drops, you might get liquidated.

Reasoning here is that difficulty is a very good proxy for a moving average of the demand of BTC, regardless what Fiat is used for that demand.

This seems like a long term hedge against volatility, that doesn't hardcode demand for USD, instead it creates demand for the aggregate basket of currencies that are most used in the global market, regardless what the composition of that basket is.

The only reason this absurd optimization is necessary is because ...

2026-05-05T06:36:24+02:00

In reply to nevent1q…n09g
_________________________

The only reason this absurd optimization is necessary is because react is stupid. Pure DOM can handle tons of items.

Until I retire and have no income, yes that would be nice

2026-05-05T06:28:55+02:00

In reply to nevent1q…tgqr
_________________________

Until I retire and have no income, yes that would be nice

So far I never thought about it that way. So far I only thought ...

2026-05-04T22:17:51+02:00

In reply to nevent1q…uqet
_________________________

So far I never thought about it that way. So far I only thought how can I take the CVCCVC pattern from Urbit, but use more consonants to reach 2^40 instead of 2^32, and avoided C,Q and avoided X other than at ends, and some avoidance of H.

Now I am thinking it might be easier to just take Urbit Prefixes and Suffixes and extend them with a vowel to multiply 256 by 4, which gives me all I want while making words flow better, at the expense of extra length.

But I will also try to avoid some Urbit letters, for example Instead of Lyc why not Lyk, and instead of Wyl, why not Vyl, especially that some people pronounce W as V anyways.

I personally struggle with the P Vs B, but I don't think P is avoidable.

I also think pronouncing vowels should be standardized since these are made up words, but that is more of a convention/suggestion to help people understand each other easier

It drives me up a wall that I can't CTRL+F something in the ...

2026-05-04T21:11:47+02:00

It drives me up a wall that I can't CTRL+F something in the twitter timeline that I KNOW just passed in front me eyes, because web apps remove data from the DOM as you scroll... WHY?!!!!

It will be a nightmare trying to make sure no language on earth ...

2026-05-04T20:31:11+02:00

In reply to nevent1q…kffd
_________________________

It will be a nightmare trying to make sure no language on earth thinks any of these combinations are filthy. Hopefully having trillions of variations should mean everyone can skip bad ones and choose neutrals.

Do you think any of Urbit planets names are bad words in Polish?

Uhmmm I just realised I can take Urbit Prefixes and Suffixes, add ...

2026-05-04T19:52:28+02:00

Uhmmm I just realised I can take Urbit Prefixes and Suffixes, add a vowel to each and get 2^40 variants instead of 2^32!!

I already can encode 2^40 as CVCCVC-CVCCVC ... But sometimes it is hard to pronounce, and it's not as curated as Urbit prefixes and suffixes, despite trying to choose consonant and vowels carefully.

What do you think about these examples;
Urbit planets => equivalent Mlkut name

lagmyl-sogmed => lagamila-sogamida
paltyv-tocmel => palytivo-tokomilo
dandyt-hobled => danadita-hobulidu
tormet-ligrym => torameti-ligarymo

The extra vowels seem to make them easier to pronounce, and I can have more control on every combination.

Or are the shorter strings more important than anything else?

I know this all feels silly, but I am not being paid to be serious so why not be have fun?

Basically the first version could be demonstrating how convenient ...

2026-05-04T11:08:23+02:00

In reply to nevent1q…3t4q
_________________________

Basically the first version could be demonstrating how convenient it would be to get a name fast and cheap, and the ability to update your records, and resolve other people records, but without the ability to get full custody of the identity and retire the trust in your Registrar.

I am now quite comfortable with the encoding scheme of Mlkut ...

2026-05-04T11:06:33+02:00

I am now quite comfortable with the encoding scheme of Mlkut names, and I tested ZK proofs to provide fast proofs of the state of keys without iterating over history and it is promising.

My least favourite part is that I have to think about key rotation and recovery and how would that work in practice.

Theoretically, I could skip the key rotation and recovery part for now and get early feedback from people interested in a testnet version. Might be the only way to get motivation to go further.

Nostr event nevent1qqs25tsj7l63vdg97y0u8cytph03fcag3jkp446uta2c74le64ykw5gzyzfsenh3yded6tckq470c48sm0v5xdwck5d5ufehyd4spj4hrr7djgjn4eq

2026-05-04T10:59:55+02:00

You should support and celebrate killing zionists.

This is valid for some schemes, but not for hash based schemes, ...

2026-05-03T15:50:41+02:00

In reply to nevent1q…tutd
_________________________

This is valid for some schemes, but not for hash based schemes, these ones are older than EC but have huge signatures.

ShieldedCSV is being developed directly on Bitcoin, all to reach ...

2026-05-03T15:48:18+02:00

ShieldedCSV is being developed directly on Bitcoin, all to reach a maximum 100TPS instead of 7! Mind you that protocol needs a bridge and will thus require a BitVM setup.

They could have easily used Rootstock and collaborated with Rootstock on making the bridge better with BitVM, then get much higher TPS as miners are free to vote on bigger Rootstock blocks, and ShieldedCSV naturally doesn't need infinite storage of history, just tlong enough data availability to calculate your proofs.

Another day to wonder why is no one using Rootstock??

If this is non-custodial then Rootstock is non-custodial. Yes ...

2026-05-02T10:16:32+02:00

If this is non-custodial then Rootstock is non-custodial.

Yes they both are from a regulatory point of view, but the word is overloaded, and when you say the word Rootstock everyone dismiss it as a custodial trusted single point of failure, why not afford it the trust and grace we afford projects like Cashu and Zaps and flat out custodial Lightning?

quoting
nevent1q…22qp
non-custodial cashu ecash mints inside an enclave.

ecash mint + bitcoin private keys are generated inside the enclave and never leave it.

the mint operator can't rug the bitcoin.
neither can it rug the ecash.

I REPEAT: NON-CUSTODIAL ECASH MINTS FOR BITCOIN ARE COMING

Well then you better download the recovery key as soon as ...

2026-05-02T09:51:37+02:00

In reply to nevent1q…gut4
_________________________

Well then you better download the recovery key as soon as possible and back it up. And if you are afraid the server might rugpull you, then consider making an onchain transaction to rotate the keys to keys only you have, and not the server.

Just because it is a Progressive custody scheme, doesn't mean you can't start from self custody too, but most people won't, not until they actually care about the thing they are going to take custody of, and it takes time before people get invested in their online presence.

I don't know yet. My basic assumption is that for most users ...

2026-05-02T00:35:57+02:00

In reply to nevent1q…syef
_________________________

I don't know yet. My basic assumption is that for most users who don't want to have self custody they won't need an app, they will use a web app they sign in to with a Passkey and ask their Namespace to update their records when they need... So not unlike Bluesky in that regard.

Possibly they download a recovery key that helps them recover if the Registrar and or Nameserver dies.

If they try to take custody of their own keys, then the app could be an app that doubles as a 2FA app like Google authenticator... That doesn't do more than manage the identity.

But another harder alternative would be something like Peergos app or Google Drive or Proton Drive, where you manage both identity but also access control in a central place.

The later is obviously much harder than the former, and not needing any apps is easier than all.

Simplest solution is to register your devices passkeys in your records in your Nameserver, and then sign in by writing your name, and the web app resolves your passkeys and prompt you to login with passkeys and check if the passkey you used is in your signed records

Mlkut name system is going to be hard to explain... But I plan to ...

2026-05-01T21:45:05+02:00

Mlkut name system is going to be hard to explain... But I plan to use the existing analogies because they are appropriate;
1. Registrar; the entity registering a domain by making an onchain transaction.
2. Nameserver; the entity that the p2p network points to as the place where the corresponding records for a given name is served from, regardless of caching.

Your Registrar can be your Nameserver

You can be your own Registrar and your own Nameserver.

Your can backup the keys in case your Registrar dies.

You can rotate the keys with the cooperation of your Registrar to no longer need their liveness nor their honesty.

You can let your Nameserver hold the keys that sign DNS records, or you can take custody of these keys, and only rely on the Nameserver for hosting.

You choose how much do you care about your domain long term.

Why is that important? Because I want to allow servers to ...

2026-05-01T17:39:27+02:00

In reply to nevent1q…lc4d
_________________________

Why is that important? Because I want to allow servers to basically claim a whole range of IDs with one small transaction that only includes the keys that the server is going to use to edit the information of any of these IDs.

But I also want the server to be able to show users a random set of IDs to choose from, without all looking the same with one change at the last couple characters...

Basically like how Urbit planets or whatever are randomly distributed over stars or whatever, but without the ungodly amount of onchain data that would require.

Decentralised Apps need DAOs. #nevent1q…jjdp

2026-05-01T15:54:57+02:00

Decentralised Apps need DAOs.

quoting
nevent1q…jjdp
Bisq v1 has experienced an exploit in its trade protocol that allowed an attacker to drain a portion of available offers.

The impact was limited to open offers that were actively taken by the attacker over the last 12 hours. Funds held in users’ Bisq Bitcoin wallets were not affected.

As an immediate mitigation, an emergency mechanism was activated to disable trading by setting the required trading version to 2.0.0 — a version that does not exist. This effectively prevents the attacker from continuing the exploit.

The attack appears to have started on May 1 in the early morning hours. The development team is continuing to investigate the full extent of the damage. Users with trades initiated on or after this time are advised to open mediation by selecting the trade and pressing Ctrl + O. A mediator will assess whether their trade was affected.

Preliminary investigation indicates that the attacker exploited a missing validation check using a modified client. The team is working to reliably reproduce the issue and verify a fix. Once confirmed, a hotfix will be released based on the latest stable version. In parallel, a comprehensive security review is being conducted to identify any related or additional vulnerabilities.

For affected users, reimbursement options are being evaluated. Bisq recognizes that both the exploit and a consequent response are critical to its integrity, and is dedicating all available resources to finding a solution that helps restore confidence.

Bisq 2, with the Bisq Easy trade protocol, is not affected. It is a separate codebase with a fundamentally different protocol design.

Bisq will continue to provide updates through its official communication channels, including Matrix, the Bisq Forum, Telegram, Reddit, X, and Nostr.

Bisq sincerely apologizes for the impact this incident has had on its users, and is fully committed to addressing both the root cause and its consequences.

Most people just read and bookmark and not necessarily interact, ...

2026-05-01T11:52:41+02:00

In reply to nevent1q…r4gk
_________________________

Most people just read and bookmark and not necessarily interact, there are studies about that, 90% of people lurk, 10% interact and 1% actually create original posts.

RSS feeds don't need interop, and they are amazing still, aggregation is powerful

By the way you can try a free version of Peergos that doesn't ...

2026-04-30T12:09:11+02:00

By the way you can try a free version of Peergos that doesn't persist your data long term... It is a rough UI again, but plenty of good ideas.

I think the sandboxing is the wrong approach, the correct ...

2026-04-30T12:08:22+02:00

In reply to nevent1q…626h
_________________________

I think the sandboxing is the wrong approach, the correct approach is a web api extension that let apps request permissions, but then you give extra UI emphasis and encouragement to the apps that don't require networking access and only read and write from and to your drive .. then you sandbox these.

Peergos has an app launcher where you can download HTML based ...

2026-04-30T12:06:21+02:00

Peergos has an app launcher where you can download HTML based apps and it gets sandboxed and access your drive with permissions... Then any web app can be bundled that way.

Tons of good ideas but the UI is extremely rough, I can't stop thinking if their API was a bit more friendly someone else could have done a better job on UI, on the other hand, their investment in the sandboxing is hurting them because it gives the impression that you can't build a native apps against the server..

Java doesn't help for sure.

As groups grow, then yes you benefit from having hubs, but you ...

2026-04-29T19:49:34+02:00

In reply to nevent1q…x63x
_________________________

As groups grow, then yes you benefit from having hubs, but you can use the moderators servers as hubs. Also at large scales encryption is not that useful... At a 1000 users your data is guaranteed to leak by someone.

No. Matrix is message passing architecture and it works fine for ...

2026-04-29T19:48:14+02:00

In reply to nevent1q…tr0c
_________________________

No. Matrix is message passing architecture and it works fine for groups. You may need someone for moderation though. But you don't need a centralized server, participants servers can pass messages around just fine at the typical small scale.

You already pre share secret key in Signal. But if you must, you ...

2026-04-29T19:46:39+02:00

In reply to nevent1q…fk57
_________________________

You already pre share secret key in Signal. But if you must, you can send a message request with a key exchange start. As for notifications, once you accept message requests your friends should be able to write directly to your server and you can setup notifications that way.

Don't overthink this, privacy is not a problem for DMs at all, things are harder everywhere else.

Not sure what you mean, but it uses email servers, but if you and ...

2026-04-29T13:00:21+02:00

In reply to nevent1q…4mpc
_________________________

Not sure what you mean, but it uses email servers, but if you and your friends are online you use Iroh for realtime communications... So I am not sure, probably just maps email usernames to key pairs.

I am not saying abandoning it, if you find it useful use it. But ...

2026-04-29T12:47:58+02:00

In reply to nevent1q…v6hx
_________________________

I am not saying abandoning it, if you find it useful use it. But imagine if every API is forced over Websockets and you can't make ephemeral request response with curl ... That is what Nostr is forcing people to do

I am quite comfortable with design, I started as a frontend dev ...

2026-04-29T11:09:31+02:00

In reply to nevent1q…ysmc
_________________________

I am quite comfortable with design, I started as a frontend dev and I still value good visuals quite a lot. Hence I spend ungodly amount of time designing short names encoding schemes and default profiles as Go boards instead of actually building the protocol of decentralised PKI.

Hey we are not paid, might as well have fun.

No idea what are you talking about but sounds like a fun nerdy ...

2026-04-29T11:02:24+02:00

In reply to nevent1q…mauw
_________________________

No idea what are you talking about but sounds like a fun nerdy topic

They are good people

2026-04-29T09:57:42+02:00

In reply to nevent1q…6m5l
_________________________

They are good people

Anything built on Nostr relays is doomed. Why would I use a ...

2026-04-29T09:26:26+02:00

In reply to nevent1q…pfkq
_________________________

Anything built on Nostr relays is doomed. Why would I use a Matrix alternative that doesn't even offer me the reliability of Matrix, just for Identity that itself impossible to secure for anyone I would like to invite to talk to me? Come on. How on Earth did people think this is a good idea, hell we already have Delta Chat and that one uses Email which will outlast every single protocol mentioned in this conversation.

I honestly think the solution should be a hostile search ...

2026-04-28T21:27:34+02:00

In reply to nevent1q…9g8d
_________________________

I honestly think the solution should be a hostile search engine/platform that index all these social media pages and generates static pages for them until they learn the value of the open web again.

The problem is that this is super expensive to do, so a close second option is something like Pinterests where users post their findings, but then a static page is created still...

Anyways this problem is actually an opportunity because people don't give a shit about the web, or sovereign identity, but people definitely want to be able to find shit.. and the situation is dire at the moment.

Interesting 🤔

2026-04-28T20:58:57+02:00

In reply to nevent1q…ev56
_________________________

Interesting 🤔

I need local friends for that 😅... But yes you are right. But ...

2026-04-28T20:53:00+02:00

In reply to nevent1q…tac0
_________________________

I need local friends for that 😅... But yes you are right. But even search engines are still better than social media. What frustrates me so much is that businesses and events no longer necessarily have web pages, so you can't find them in search engines, they are only found on Instagram more or less, fuckin depressing

Noted. I am struggling with drive lately but if I got my shit ...

2026-04-28T20:49:41+02:00

In reply to nevent1q…6hhw
_________________________

Noted. I am struggling with drive lately but if I got my shit together and got a proof of concept across the finish line I will ask you for feedback.

The most important role of the internet was supposed to discover ...

2026-04-28T20:24:36+02:00

The most important role of the internet was supposed to discover cool things to do in your city, and it is failing me so hard.

Long story short early zionists wanted to have an easy crusade ...

2026-04-28T18:55:37+02:00

In reply to nevent1q…5aqw
_________________________

Long story short early zionists wanted to have an easy crusade followed by 1000 years of peace, Palestinians naturally rejected that supremacy, and the early zionists spent decades losing to their successors who are more maximalists messianic and retarded, so now they are condemned to an all or nothing existential war.

#what_the_jews_did #nevent1q…w68z

2026-04-28T17:48:33+02:00

#what_the_jews_did

quoting
nevent1q…w68z
⚡️🇮🇱🇵🇸 NEW - Testimonial: « An Israeli soldier released a video of my city, Beit Hanoun, completely destroyed. Not a single house in the city was left standing, not a single tree survived.

Have you ever seen an army film the genocide it is committing in 360° before? »

Why? Would it be able to get them in ten years if it cant get ...

2026-04-28T16:48:40+02:00

In reply to nevent1q…6xju
_________________________

Why? Would it be able to get them in ten years if it cant get them next year? What's the hold up? Where does your confidence come from unless there is a dynamic that will make it inevitable? Care to explain what is that dynamic and why is it not here now?

Every day I see more affirmation that people don't actually ...

2026-04-28T13:29:15+02:00

Every day I see more affirmation that people don't actually want a social media TM, in fact they don't need capital C censorship resistance (except few trolls who think that they have a god given right to attention no matter how insufferable they are).

What people want is forums and groups and applications, a Web, with interoperable data store APIs and Identity (Authentication + Address book).

I remain convinced that the answer for the former is more like what Peergos does, and the answer for the later is similar to what Farcaster (RIP) did.

quoting
nevent1q…ujma
What good is a social network or protocol without a lot of users?

First a personal flip to this question. I was on mailing lists, usenet, irc, silc, kyberia, facebook, ... Everytime it became too crowded, I left. Not with a statement, rarely it was even a decision. I did not even burn any bridges and I don't think anything bad about people who stayed. I just stopped going, because the noise (and sometimes drama) was too much compared to the signal.

I'm not an introvert, but in this regard something similar - otrovert. I like interactions, I don't get group rituals.

So what good is a social network without numbers to back up reach? I used to work for a web portal of a TV station. I think one of the worst investments there is is buying a lot of reach. Maybe if you sell mass market shampoo or junkfood, it makes sense. For every other case, you want limited reach. Limited to people who want to hear from you. They might or might not know that they want to hear from you, but the second it feels you intruded their attention, you lost a good customer. And that's true regardless if they buy from you or don't. There's an aftertaste of force.

People often hate the practice of marketing, but I realize it's because they were exposed to so much junk. It's like saying you hate Chinese food because you only went to shitty restaurants and got food poisoning. Go to a five star Chinese restaurant.

I get it, the shitty marketing way outnumbers nice, honest marketing that you want to hear.

So what good is a social network without reach?

You want to reach the right people. Those that want to hear from you. Of course small doesn't mean it's the right fit. Promoting scammy shitcoins or junkfood on Nostr won't work, we don't care. But the story is more complex than numbers.

And personally - I'd rather not read bullshit with breaking as the first word. And "this changes everything". I wish there was more content that I'm interested in. But this also has a flipside. A lot of content that I'm interested in is just not on other networks.

The most likely failure mode for Drivechains (which makes it ...

2026-04-27T17:19:17+02:00

The most likely failure mode for Drivechains (which makes it inferior to things possible with OP_CAT) is miner apathy ... It is not that 51% of miners would steal but that miners wouldn't vote on anything and now you can't pegout ever... At least from some sidechains. In PoW based sidechain bridge, you could just accumulate work until you pass a threshold and exit.

I understand the incentive of BMM, but I don't know if there is an incentive for voting on withdrawals. Am I wrong here fiatjaf (npub180c…h6w6) ?

My impression is that FIPS is just Nostr folks reinventing ...

2026-04-27T17:09:48+02:00

In reply to nevent1q…lc3x
_________________________

My impression is that FIPS is just Nostr folks reinventing Reticulum because people like to do this here, but maybe I am just being unfair.

Ok so another ten years?

2026-04-27T16:39:17+02:00

In reply to nevent1q…ra4q
_________________________

Ok so another ten years?

Today I am thinking what if an Intmax2 Drivechain is the perfect ...

2026-04-27T11:22:45+02:00

Today I am thinking what if an Intmax2 Drivechain is the perfect solution for identity and not only private payments. It naturally has a trillion accounts upper bound. Users only need to publish a ZK proof of a subset of their account that is basically a pointer to a Nameserver, and special indexers index that!

If not many people are using it who/what is driving the merchant ...

2026-04-27T11:16:59+02:00

In reply to nevent1q…73ka
_________________________

If not many people are using it who/what is driving the merchant adoption?

Nostr event nevent1qqsf5xmq6gs32g52qndh9lz6hdt6uukun8gn7l46qtvv88v03tgm2vgzyzfsenh3yded6tckq470c48sm0v5xdwck5d5ufehyd4spj4hrr7djz53gdf

2026-04-26T22:39:09+02:00

I hereby rename Patoshi's coins to Bootstrapers' coins

If we know Saylor addresses that would be funny yes. But I ...

2026-04-26T21:33:40+02:00

In reply to nevent1q…3cse
_________________________

If we know Saylor addresses that would be funny yes. But I don't have much sympathy towards Satoshi here, he gets more coins for no work, and if he is still alive and happy with Bitcoin situation with no softforks then why would he care about a fork that is designed to do the things he clearly doesn't care about?

The people paying for the work to develop and incentivize and market the fork should be rewarded for daring to demonstrate to miners they need to fuckin wake up.

I don't get any of these coins for the record, I am just saying

Would have a fork that doesn't honour most people's UTXOs ...

2026-04-26T21:22:57+02:00

In reply to nevent1q…wasg
_________________________

Would have a fork that doesn't honour most people's UTXOs (except Patoshi) be better? How or why? The whole point is that Bitcoiners want to try Drivechains and other SoftForks ... If Bitcoiners don't have UTXOs there already, what is the point, how is that different from Litecoin?

Well then once they get over the fear of the federated peg maybe ...

2026-04-26T19:55:40+02:00

In reply to nevent1q…gukf
_________________________

Well then once they get over the fear of the federated peg maybe they will use it. Of course we would all be better off with trustless bridges to avoid this risk and psychological fear. But then again Bitcoiners use Custodial LN so I don't understand Bitcoiners any more.

Bitcoiners don't care about anything but larping. That is the ...

2026-04-26T19:29:33+02:00

In reply to nevent1q…6xj4
_________________________

Bitcoiners don't care about anything but larping. That is the problem, levels of apathy unseen elsewhere

Well I took some creative liberty to make the math simpler

2026-04-26T19:28:23+02:00

In reply to nevent1q…5zxf
_________________________

Well I took some creative liberty to make the math simpler

I am saying the contract could be updated after Drivechains to ...

2026-04-26T19:06:03+02:00

In reply to nevent1q…g0v3
_________________________

I am saying the contract could be updated after Drivechains to watch the messages in the coinbase txn, and any miner that doesn't publish the messages they should, could be denied mining rewards.

Or more simpler; it can be made a consensus rule on the sidechain that you must vote as you are supposed to. Then any sidechain block that doesn't include the correct voting gets invalidated so it doesn't get any sidechain rewards.

This effectively means if you don't vote well, you lose all the sidechain revenue and you get outcompeted by miners who vote well because they have more money now to buy more miners and pay for more electricity.

You can't be apathetic or passive without losing revenue.

Of course sidechains should be cheap enough to check (light clients) to make sure any amount of fees are net positive and the cost of checking and voting isn't high.

You should also read a bit about Chainlink and how the game theory of decentralised oracles work. It is somewhat similar

The smart contract that controls the sidechain fee revenue ...

2026-04-26T18:07:20+02:00

In reply to nevent1q…x0lm
_________________________

The smart contract that controls the sidechain fee revenue distribution. It is not a concept in Bitcoin but it is in Rootstock. Miners in Rootstock take some of the block fees, but most of it goes to a pool and paid to future miners. Which is actually better than Bitcoin because it reduces the incentive to reorg the chain to get a transaction with a specially large fee. That doesn't matter now since Bitcoin block rewards are mostly subsidy and not fees

Please let's add OP_CAT and OP_CCV CUSF so we can try things ...

2026-04-26T17:16:28+02:00

In reply to nevent1q…wfx2
_________________________

Please let's add OP_CAT and OP_CCV CUSF so we can try things that may be better than Drivechains https://docs.rsk.co/SyncChain_WP.pdf

People keep saying stuff about Drivechains that are simply not ...

2026-04-26T13:57:31+02:00

People keep saying stuff about Drivechains that are simply not true like; you don't lose anything if you don't vote against invalid withdrawals or you don't win anything if you vote against invalid withdrawals or you don't lose anything if you vote against invalid withdrawal and fail or you don't lose anything if you are apathetic.

But all of this is not true, because all this activity is evident in the coinbase transaction, which means a sidechain like Rootstock can see what each miner intended to vote on in the blocks that didn't get enough work to be L1 blocks, which means they can change the weight of the fee revenue accordingly.

Yes a vast majority of malicious miners that are also very actively colluding can steal, but the attempt is not free, they can lose months of fee revenue on sidechains because they tried to vote maliciously or they didn't vote hard enough for the correct outcome.

Please don't keep making me defend hashrate escrow.

That is not bad honestly, for example Proof of Stake systems ...

2026-04-26T12:42:28+02:00

In reply to nevent1q…ujya
_________________________

That is not bad honestly, for example Proof of Stake systems assume that no one or small group of people control more than or equal to 33% of the staked coins... If we assume that the stakers in a sidechain using PoS are uniformally sampled from current holders, that is fairly safe, but not as safe PoW of course.

Has there been enough evidence that DAOs actually shield teams ...

2026-04-26T12:37:52+02:00

Has there been enough evidence that DAOs actually shield teams from legal responsibilities? In a legacy company ICs don't have much legal exposure, it is all the management responsibility as much as I understand... If a DAO is doing most of the management decisions, and developers are just getting paid to develop or maintain, and sales people are only paid to do sales, does that allow things private AI infrastructure to survive?

The idea is that the actual people hosting and maintaining the infrastructure can remain anonymous, but trusted as much as the DAO is trusted!!

I don't care about American laws, I think from architectural ...

2026-04-24T21:35:14+02:00

In reply to nevent1q…asce
_________________________

I don't care about American laws, I think from architectural realities, that will survive long after all the lawyers and legislators die

If you had "followers" you could have easily convinced ...

2026-04-24T20:39:36+02:00

In reply to nevent1q…j4xd
_________________________

If you had "followers" you could have easily convinced them to subscribe to mail list or RSS feed, that is fine you always have that option. No one can take that from you. But if your Twitter followers don't miss you when you are shadow banned, and won't subscribe to your feed and mailing lists... Then it is what it is they don't care enough, you are not denied any right.

I would agree with you if we are being denied our right to share contacts and follow each other on open protocols... That would be Draconian and we should be ready to protect our rights to contact each other.

Dude there has never been a physical space that guarantees you ...

2026-04-24T20:36:10+02:00

In reply to nevent1q…wev4
_________________________

Dude there has never been a physical space that guarantees you reach, go shout at a public square see how much reach that gets you, not much more than a crazy addict I will tell you that much.

In fact Twitter fried many people brains and made them think global reach is a something attainable, it is not, most people will never be heard globally and have to be satisfied with their own contextual bubbles.

These bubbles are available, here and in mailing lists and forums and group chats. You are not a victim, you are not being denied your ancient birth right, no human ever had that right, it is a privilege that is physically impossible to democratize, there is only so much attention to go around, and naturally it follows a power low, where most get nothing at all.

Dude twitter doesn't get any more subsidy than any other ...

2026-04-24T20:31:05+02:00

In reply to nevent1q…scu7
_________________________

Dude twitter doesn't get any more subsidy than any other private property generally benefiting from functional state. If you want communism that is fine, it is not immoral to want communism. But you could also just ask the state to;
1. Demand interop, just like it demands standardisation in other industries.
2. Run public servers that enforces the "unbiased" algorithm that you claim possible.

These are reasonable demands, but they don't get you reach, any more than Bluesky or Mastodon architecture does, you can't force people to read your data.

LOL, ok then here you are, your European saviours are going to ...

2026-04-24T18:27:25+02:00

In reply to nevent1q…tmpj
_________________________

LOL, ok then here you are, your European saviours are going to protect your right of speech and won't put you in a cell because you called a politician an asshole. What are you guys talking about right now.

The utility analogy is not appropriate at all. You can't just ...

2026-04-24T16:22:14+02:00

In reply to nevent1q…7k78
_________________________

The utility analogy is not appropriate at all. You can't just point at businesses and call them utilities. Is Damus relay a utility? Does it owe you anything because you call it a utility? Should Damus be forced to host AND forward your speech even if they don't like to host or forward that type of speech or just don't like you personally? What about you? Do you want to be forced to host people data and forward it even if you don't like it because you owe us?

No, this is not a QR compatible, but I don't think it is too ...

2026-04-24T13:41:16+02:00

In reply to nevent1q…3gyd
_________________________

No, this is not a QR compatible, but I don't think it is too hard to design an alternative to QR, it is a deterministic and high contrast shape with well defined orientation.

In order to make it QR compatible it will be much uglier, QR needs to add error codes and things like that.

The goal here was only default profile pictures.
But maybe there are tricks that I am not aware of.

Nostr event nevent1qqs0enw9qdrs9j7upx83jpek2m064zp2kw4jharkapwt4dm43m8vlqszyzfsenh3yded6tckq470c48sm0v5xdwck5d5ufehyd4spj4hrr7djcsegty

2026-04-24T12:47:18+02:00

quoting nevent1q…0qg3

Lazily trying to showcase how short names would look like + a Go board default profile picture https://gistcdn.githack.com/Nuhvi/8daa04620118a00d5d6bf40c3fbd9c6f/raw/2143bfb011810b368a00eee03713f22259fab969/mns-visualize.html

Lazily trying to showcase how short names would look like + a Go ...

2026-04-24T12:40:59+02:00

Lazily trying to showcase how short names would look like + a Go board default profile picture https://gistcdn.githack.com/Nuhvi/8daa04620118a00d5d6bf40c3fbd9c6f/raw/2143bfb011810b368a00eee03713f22259fab969/mns-visualize.html

No, if I bought every single newspaper and decided that you ...

2026-04-24T12:16:33+02:00

In reply to nevent1q…7k37
_________________________

No, if I bought every single newspaper and decided that you don't deserve attention, that's my business. Your business is starting a new newspaper if you think I am not doing my business correctly.

Or demand a government backed newspaper with equal space for every tax payer or whatever your imaginary plan is.

This is fine and it is not too different from having a TEE (which ...

2026-04-23T09:53:22+02:00

In reply to nevent1q…qahv
_________________________

This is fine and it is not too different from having a TEE (which Signal uses but not for key management), but this allow you to recover from losing your keys, it doesn't allow you to change the recovery mechanism.

You need the later for;
1. Recover from the TEE or trusted cosigners attempt to rug you.
2. Recover from the TEE or trusted cosigners dying and you losing enough shares that you can't sign anything.
3. Move to a more secure set of keys, without worrying about old shares leaking or being found on an old drive ... Basically like you do when your hot wallets has uncomfortable amounts of Bitcoin so you upgrade your setup.
3. Transfer the ID to someone else which is necessary for:
A) selling a company
B) a DAO or regular org changing management
C) onboarding a minor or a friend or an old family member with custody of their keys, then finally they are ready to take full control.

So we will still need the full solution, and it happens to offer us with;
1. Short names easy to read and copy and write.
2. Rate limit of users which helps slightly with spam by making the cost of burners non zero
3. Bounded set of identities mean you can have perfect replication of the set in gossip similar to perfect replication of bitcoin data.

So I figure we should build it even if no one uses it, because why not.

I am sorry but the purist version has zero chance of succeeding ...

2026-04-23T09:44:22+02:00

In reply to nevent1q…vh7m
_________________________

I am sorry but the purist version has zero chance of succeeding either. I want to believe in an hackable easy to maintain OS, but if we ever get that we might get it with Rust, we won't get it with obscure math, just because it takes too much man-hours. Also I am not even convinced a perfect operating system would make cloud maintenance easy... Databases have problems that will persist even if you are running them purely in the mathematical realm, for example migrations, compaction, redundancy, etc... So the whole thesis of Urbit will make it easy for you to manage your own VPS was dead on arrival. Best we can have is easy enough for a trusted friend to run it for you and you only need to trust their abilities and uptime, but they can't custody your account or read your data.. that is what Peergos does as far as I am concerned.

It is not as inspiring but it is actually doable. Urbit pure vision doesn't seem doable

As the saying goes, you get to introduce one, maybe two novel ...

2026-04-22T22:48:16+02:00

In reply to nevent1q…qrn9
_________________________

As the saying goes, you get to introduce one, maybe two novel ideas, and still have little chance of success. Making a novel EVERYTHING is just something you should only consider if you are filthy rich and have 5 children and everything there is nothing to regret and this just your version of fishing or knitting

Man if only they weren't addicted to obscure Nouns that you ...

2026-04-22T20:45:37+02:00

In reply to nevent1q…45f0
_________________________

Man if only they weren't addicted to obscure Nouns that you have to research to understand any sentence!

But I like the logic about PoW... I am just convincing myself that Rootstock is actually a good choice, where you gain lower latency and and higher possible scalability as miners can vote to increase block size, but you pay the price of interactivity as a requirement.

I like small checkpointable sidechains backed by Bitcoin headers... That is still a proof of publication but without infinite history growth.

Also Bitcoin block space will keep getting expensive... Or at least we better hope it does 😅

I never liked the hierarchy of Urbit, even though I understand ...

2026-04-22T20:21:46+02:00

In reply to nevent1q…xelu
_________________________

I never liked the hierarchy of Urbit, even though I understand Curtis's view of the world, but as you say the flaw is who decides who are the worthy elites?

I am going with flat hierarchy at the ID level, all can be encoded like Urbit planets (but go up to trillion)... But I will take care into making it manageable for servers to register in bulk and provision to users, then transfer in bulk again.

The way you register is you just make a transaction on Rootstock (just a DA), which naturally also rate limits the namespace exhaustion.

Names can't be shorter than a planet, even if the ID is zero, and the ID is random from the block hash... So really not much reason to race other people. I am aiming for 100s of years of registration which still allows for millions every year... Bluesky didn't need more than 50 Mil so far anyways.

Always been a fan of their identity system, but everything else ...

2026-04-22T19:21:00+02:00

In reply to nevent1q…tt02
_________________________

Always been a fan of their identity system, but everything else is trash. I also think 4 billion is too few and I am going with trillion, but I definitely adapted their syllables system to work for my range, it is fun to learn these names and write them down.

I understand where you come from, but that assumes you can get ...

2026-04-22T12:21:18+02:00

In reply to nevent1q…gxds
_________________________

I understand where you come from, but that assumes you can get users to do all of this work in advance when they are still trying to see if your app is worth it, and then they are probably not going to be careful and lose it, then ask you to help. I onboarded developers with VPSs and PGP keys and all that jazz and they still lost their recovery files or forgot the encryption keys!

Of course we are also assuming that you don't need to onboard organisations that would occasionally need to change even the CEO and revoke the previous CEO access... No way to do that with Pkarr or Nostr. The best you can do is some sort of hardware wallet or something and you better have delegation for hot keys and you better never lose these hardware keys. It is just a damn mess.

But you are right you shouldn't take my word for it, I didn't, I tried the simpler way first.

I talked shit a lot about key recovery, but I have been trying to ...

2026-04-22T11:21:13+02:00

I talked shit a lot about key recovery, but I have been trying to steel man it so much since I have been satisfied with Pkarr, and this is my best attempt to express why it seems necessary to me now;

quoting
nevent1q…3tgv
Yeah I spent too much of my life trying to get the UX of decentralised identity key management to be human. I ended up deciding that I have to accept that key recovery is a requirement, which is what Farcaster does through Ethereum Rollups, and Bluesky does it with a centralized registry.

The idea is to start custodial, where the server actually has the keys, and you have a recovery key like in 2FA, but if you lost that, your provider can help you rotate your recovery key.

But in order for your provider not to rug you, we need a Blockchain (or a central registry) where the provider needs to publish the rotation request, given you opportunity to react and use your recovery key to fire that provider ... But if you don't react in a few days, the rotation is complete.

I think we can do that with Rootstock and I think we can do it in a way that scales to many billions and tens of millions in first year, and keep it light enough that hundreds of people can rund that service... But I am still trying to build it in my free time.

Once you have that, then you just login to your provider as usual, with passkeys or email and password or it may be even a physical service that you need to visit, whatever.

For example I can be the provider of my family members, and still they can still have full sovereignity when they feel ready, think of children or friends that don't want to be tech savvy on day one before the whole system proved it's worth.

In fact isn't that the experience in Bitcoin? Only when you have enough money that it is worth putting the work, that you start moving your funds to a more secure wallet.

Yeah I spent too much of my life trying to get the UX of ...

2026-04-22T11:20:10+02:00

In reply to nevent1q…tv28
_________________________

Yeah I spent too much of my life trying to get the UX of decentralised identity key management to be human. I ended up deciding that I have to accept that key recovery is a requirement, which is what Farcaster does through Ethereum Rollups, and Bluesky does it with a centralized registry.

The idea is to start custodial, where the server actually has the keys, and you have a recovery key like in 2FA, but if you lost that, your provider can help you rotate your recovery key.

But in order for your provider not to rug you, we need a Blockchain (or a central registry) where the provider needs to publish the rotation request, given you opportunity to react and use your recovery key to fire that provider ... But if you don't react in a few days, the rotation is complete.

I think we can do that with Rootstock and I think we can do it in a way that scales to many billions and tens of millions in first year, and keep it light enough that hundreds of people can rund that service... But I am still trying to build it in my free time.

Once you have that, then you just login to your provider as usual, with passkeys or email and password or it may be even a physical service that you need to visit, whatever.

For example I can be the provider of my family members, and still they can still have full sovereignity when they feel ready, think of children or friends that don't want to be tech savvy on day one before the whole system proved it's worth.

In fact isn't that the experience in Bitcoin? Only when you have enough money that it is worth putting the work, that you start moving your funds to a more secure wallet.

Started my day inspired to play with a visualization of ...

2026-04-22T08:46:44+02:00

Started my day inspired to play with a visualization of decentralised IDs as Go 5*5 board!

You are out of your mind man. People are free to do whatever they ...

2026-04-20T23:38:53+02:00

In reply to nevent1q…rg8t
_________________________

You are out of your mind man. People are free to do whatever they want including forming trusted private communities that discriminate against others that they don't like to associate with. Is there anything more stupid than talking like a libertarian while bitching about people's freedom of association?

Would you say the same about Email servers if they had sovereign ...

2026-04-20T23:24:09+02:00

In reply to nevent1q…w9m3
_________________________

Would you say the same about Email servers if they had sovereign Identity (regardless of how is that identity sovereign)? Would you say the same about Nostr image hosting solutions? I know ActivityPub is not a perfect protocol, but just assume the identity wasn't tied to the server, would that be so bad?

No man reach is when your data reaches me in the first place for ...

2026-04-20T22:47:08+02:00

In reply to nevent1q…wjym
_________________________

No man reach is when your data reaches me in the first place for me to block you. Yes sending me a direct message is fine. But reach means that your data appears in a feed or something. Feeds that have audiences are scarce, and you don't have a god given right to appear in one. It is up to the curator/aggregator/relay/mailing list operator to choose whether or not to include your post. This is a fundamental problem. It can't be solved

I am basically making the point that people don't actually ...

2026-04-20T22:33:00+02:00

In reply to nevent1q…vc38
_________________________

I am basically making the point that people don't actually need cold emails at all. You can have a situation where you only get messages from people you shared contacts with.

But I am not too committed to this take, I am perfectly happy with 100000 friend requests that I can check at my leisure or through AI at to filter.

How do you plan to enforce your human right for putting your ...

2026-04-20T22:30:12+02:00

In reply to nevent1q…2dtg
_________________________

How do you plan to enforce your human right for putting your speech in front of my eyes? Calm down and think about this a little bit. Calling people libtards doesn't magically solve physical limitations.

You are too emotional about this. Federation is an overloaded ...

2026-04-20T22:15:44+02:00

In reply to nevent1q…eqxk
_________________________

You are too emotional about this. Federation is an overloaded word that means too many things. Mastodon with decentralised Identity and self hosted servers would have been just fine. ActivityPub is really mostly fine, Email is fine, Matrix is fine. Really the worst part is identity and we will figure it out.

Reach however is not a human right, you don't have a right to be featured on Google first result page, not on Damus query responses etc... the only thing that is your right, is that your friends that are actively trying to interact with you don't find you shadow banned, and all of this is possible with most protocols.

The main issue with most protocols is the nuclear deplarforming threat, but that is only because the identity is not sovereign. We will fix that.

Do you care to share the costs in bandwidth and storage? I am ...

2026-04-20T22:09:29+02:00

In reply to nevent1q…gqca
_________________________

Do you care to share the costs in bandwidth and storage? I am trying to design a decentralised PKI based on Rootstock as a proof of publication, and I want to estimate how much state can nodes tolerate before not even 200 people around the world can replicate it? (I have reason to believe 200 is a magical number in availability)

For the record I am not writing this to tell Nostr folks what ...

2026-04-20T22:06:35+02:00

In reply to nevent1q…wzwa
_________________________

For the record I am not writing this to tell Nostr folks what should be done, I am perfectly fine with grants and perfectly fine with this being a phase in the internet history that won't last. I am only saying people who repeat slogans like "Nostr fixes this" need to have some appreciation to the real situation and don't throw stones at other networks just because they are blissfully ignorant of the infrastructure they are taking for granted

I don't think unsolicited messages are that important of a ...

2026-04-20T21:58:10+02:00

In reply to nevent1q…e794
_________________________

I don't think unsolicited messages are that important of a problem to solve, and I think just letting everything in (as long as the storage is minimal) then filter them manually or with AI or with a trusted server using TEE, all these are doable.

How many meaningful connections have you had from cold email that could have landed in spam? Not zero but not many.

I also believe that the human way we have always did this and always will be is;
1. I find you in an open forum like this one.
2. We exchange contacts
3. We keep talking to each other way after the forums die, thanks to direct messaging and that phone numbers and emails and stuff like that are actually rarely deplarformed ..

so let's just go all the way on identity, and not worry too much about discovering people, there will always be forums and group chats it is fine.

Yeah but the bad guys also are more likely to be newly ...

2026-04-20T21:24:40+02:00

In reply to nevent1q…lu2y
_________________________

Yeah but the bad guys also are more likely to be newly registered, but regardless they are also cheap to black list, you just need to subscribe to a good list, or you know, just let them send stuff and don't show them in the app, until the user is reaaaally bored and want to check it.

We need to ask a hot girl on Instagram how does she feel about message requests... Because I don't get many :D

Most likely Email. As a general rule of thumb, whatever has been ...

2026-04-20T21:17:26+02:00

In reply to nevent1q…sd8w
_________________________

Most likely Email. As a general rule of thumb, whatever has been working the longest is the most likely thing to stay. Every thing else is just a passion project.

Yeah of course, but think how insane this is, when all I want is ...

2026-04-20T21:14:57+02:00

In reply to nevent1q…rfrw
_________________________

Yeah of course, but think how insane this is, when all I want is to reply to you, instead of just sending you an email like sane people I am supposed to send a packet in the wind and hope for the best?

Even for many to many, which is a very niche case that more or less boils down to Twitter feeds UX, who actually benefits from the insane bandwidth of that gossip? And storage? Who pays for all of that and why? Wouldn't it be infinitely more manageable and cost effective to have things like discord servers and Reddit and group chats etc?

Nostr and Bluesky and Pubky (less so Mastodon because it is aligned with intentional messages passing) are simply intractable and can't both scale and remain decentralised... Because they chose a requirement that is impossible to scale.