Last Notes
I trust a pi more than esp32 with custom codes. Because it has two decades of hardening for security in the Linux kernel.
If you have a mentality that is assume the best. You can never work in info-sec..
'You keep saying that word, I don't think it means, what you think it means' 😂
https://image.nostr.build/2da500441f1daac83187489efa93c6817957cd10371f9e420fb78a65096c7439.png
😂😂😂 literally your spirit animals right there
I dove into seedsigner build process last night. Honestly, a very cool project. But now I'm just concerned with supply chain attacks.. Notice how it only supports a single version of a specific pi hat, for display. Which are all conveniently backordered and not even the latest manufacturer version..
The waveshare 1.3" 240x240. Supply chain attack would be, sell this on amzn with exfiltration capable stuff modded in. Anytime you concentrate the btc into a path like this, the reward for attacks goes WAY up.
Just some thoughts from paranoia pays off world. Inspect your hats.
The first problem that comes to mind here is, you said red team. This is an attack team of really smart attackers. You will be giving them a free amount of credits and leeway, how will you make sure they are really white hats?
Or will they just find a vuln and exploit it for their own gain, and then .. What, we just notice after we all get got?
I would like to hear more about this process of funding red-teams from @nprofile…pqk6 .. What would keep an attacker from attacking other than millions of dollars in compensation and some kind of white hat track record. Because I don't really know if this is that great an idea, given their own track record for funding things they don't understand or have researched.. 😥
#nevent1q…l82x
Yes, see the little icon in the bottom right corner of the website.
Is it because you're usually the reason I'm cranky?
Why don't you tell me that?
Man, that sucks. Your relays are really good
I see the way we use the net evolving very rapidly and changing completely. Active defence is going to become a thing, which'll be costly but necessary.
Sometimes we gotta wear our cranky pants, friendo. And honestly, you were spitting truths that needed to be heard.
Feels like things happening very fast rn. I was just reading an article about passkey attacks.
Step up to the eyeball scanner ser 😅
Ah.Yeah. Gonna get ugly probably
Bitkey already solved this for most people. Its software, but still, should work if implemented correctly.
They could probably improve though. I think some dice would actually be fine and educational. Doubt they’ll go for it though.
I'm not gonna promote it with a mention.
My last application I made for opensats all I got back was a sorry we are full, and a "we may have screwed up your taxes from before", and then realized someone on the board of nostr had copied what I was doing to renew their own long term grant. So forgive me for being salty. What do you want from me, to be happy about all that? To just chill and good vibes? To just, not even consider all the possible conflicts of interest in play?
Oh well, I've gone completely off the ranch now. GLHF.
Or maybe it was there be for.. I duno 😎i just shoot from the hip now.
It's two clicks from the main page. -> transparency -> canary
Ah OK ya had to find the direct URL and it does not seem like a very comprehensive canary at all. And weird timing, to just be doing it 4 days ago as on the same day all these scams popped off. So forgive me for being rude but, this makes me even more suspicious. Fix the wording, just google an actual canary or whatever or keep this super weak platitude one.
Is it? Check it and see, that's how canaries work..
Well if @npub1xnf…lpr5 doesn't reply, and #asknostr doesn't reply, then I'll add it to my to do list, just for you and me. I do use Zeus app, .. So. Yeah good questions 😎😇
Is @npub1xnf…lpr5 canary still good?
ey man, you did a *lotta cool and very insperational stuff, your legacy lives on and super cool to see you post even a tiny bit 😇 wb.
Define warrant canary again…
As I understand in my muppet mode, it is a warning within the system that something is not operating as licensed, and a shut down may be imminent.
who else got a warrant canary?
feeds.relay.tools ✅
primal ❌
opensats ❌
pretty much everything on nostr ❌
I'm not saying you have to, but sure would be nice given the state of the union.
it very stressful. and no one really here to help us either. they just watch us for ideas, read and write their own, treat us like competitors, and glad when we quit.
partially this keeps me going really. and I manage to find actual cool people to work with lately. I'm just relentless like that.
(and nos.lol sometimes likes to randomly reject notes 🙃)
those look like my outbox relays, i was able to see these three replies though
nothing really, but i do think reliability has been better
nice relay BTW (though the pricing is somewhat confusing)
what were you thinking would change? If your feed isn't showing, that's a client problem usually. Adding more relays for yourself doesn't do much except be a place for you to post your own notes. Sometimes to help people to reply to you (an inbox), but that's a tricky setup most paid relays don't help with unless they specifically say they do.
I think I confused you for someone else and I literally don't care anymore. I see one influencer, they all look the same to me now.
The original point was going to be so I can see who tries to give them a pass, and make sure they didn't get away with blaming plebs for not rolling dice. That seems like years ago now tho. All the worst case scenarios that I was prepared to defend from being a 'conspiracy wacko' are now such public knowledge that you'd have to be living in a cave to be unable to draw these same logical conclusions.
Influencors should probably focus on their own education before becoming a teacher.
Shill or simply recommend? What's the point?
The lesson is should a rolled dice... There is no other option. You dumb enough to trust someone else again?
I don't need to find anything to know they're an underfunded open project with huge monetary reasons to attack it, and they say themselves don't use it for anything serious..
😂😂oh they will enjoy so much
Even giving out reasons, risks me, risks you.. Plenty of risk, FOR WHAT 5 dollar? 😂fml
If its not obvious, then just use coinbase or strike. The real problem is there is no obvious reason, and plenty not to, help you(them) do this.
https://i.nostr.build/ABjo9IEwvAvzZrrG.png
https://feeds.relay.tools now supporting FULL BUZZ
> you called your wife to beg for seed
I just scrolled by this in the feed and thought it was something more exciting than @npub1jlr…ynqn being a poor judge of character.
Bit of a let-down, but carry on.
Whenever monetary incentives are involved, you HAVE to assume the worst. Anything that can be attacked, and money gotten, WILL be. It is outright relentless that way. This is something over the years, I may have just taken for granted as common knowledge but I see that it is not.
The reason I went on a "witch hunt" the other day, is I saw a lot of scurrying going on, a lot of "pardon'ing" and calls to not be so harsh with this. I saw people making claims that it may not be their fault, shifting blame tactics and I decided to be loud about it. Did that do anything productive? Probably not, it probably hurt some of my relationships on here, but it was better than silence.
I do not think, that this was an isolated mistake. The same systems that promoted NVK into a position to rug people this easily, are still there. Still functioning business as usual. If we don't relentlessly focus on this, the other side of the equation is the bad actors in combination will relentlessly continue. They took some hits, but they will not change unless it is made clear that we will not tolerate it.
I hope that I'm wrong, I hope that this does not go all the way to bitcoin core itself. But the reality is, it probably does. I've been hearing lots of things, about the shitty parts of this whole ecosystem lately. Then, when something like this happens, I would have to be STUPID not to assume this is just scratching the surface.
So again. Assume the worst. Assume that everything that can be compromised (people included) will be. Assume that people will be involved that may just be a patsy. Assume that as bitcoin grows in market-cap, the odds go up and up. Conspiracy yesterday, reality today. This is just simple logic, "it's just business, not personal" some would say. Follow the logic to it's conclusions and yes, it is looking VERY scary out there.
Don't let anyone shame you about asking questions/speaking your mind or shining a flashlight around to see what you can see. Notice who pops up to try to silence you. Notice the patterns, apply simple monetary logic game scenarios.
Stay frosty.
#nevent1q…p2tw