Friendly reminder to #nostr /Never/ paste your nsec into an app. Use an extension or a signer. Especially if the app is experimental or badly vibed - do not give them your nsec, ever. Never ever.

The day you see me actively praising a bitcoin or cryptocurrency thing, you can be sure of either one of two things: 1) my nsec got compromised. 2) I read the entire source and tried it so much that I am actually convinced about it and dead-ass mean it. Not to be an asshole or something, but unless any -coin thing actually can "pick me up", I am gonna keep being skeptical. The best thing that I ever did with coinage was a literal group efford: ODELL has zapped me, twice, big amounts of sats which satisfied channel liquidity and actually allowed me to do outgoing transactions. I used the zaps I got to buy myself and my friends a thing in Genshin (a Welkin Moon for me and the gang). For that, I used BitRefill into Google Play. That was big fun, actually worked, and was soooooo cool. It did take a crapton of steps to make it work though, but, it DID. I could see my CLN logging the transactions, the balance in BitRefill growing and shrinking accordingly, and then just cash out a Google Play voucher that worked. Have not had an experience like that ever again since - and as my CLN is stupidly broken right now, I probably never will lmao.

Mein Hirn in einer Nusschale... ^^; #tunestr

Spotify

WobWobWob

Käptn Peng, Die Tentakel von Delphi · Das nullte Kapitel · Song · 2017

Okay, honestly, I will take PC components being unobtanium if this ends up ALSO hitting the AI bros. Watching _them_ complain and stuff would be hilarious. Well I just want to see them suffer, honestly.

dw.com

Iran war triggers helium shortage, hits semiconductor supply

Rising tension in the Middle East is rattling high-end chipmakers. Among the latest geopolitical uncertainties for the industry is a shortage of he...

DUDE IM DYING HAHAHAHAHAHAHA This is _TOO_ real xD Totally genned, but fucking funny.

I am trying out Google Stitch for UI design and hade it made this Look close: it correctly added two nostriches right there HAHAHAHA XD This is wild. But actually a tool I, as a nearly blind person, have HIGH value for. Writing the logic stuff is easy - but writing a UI? noooot so much. I can juggle components and stuff but dont ask me to design them X.x So this is reeeeeeally nice

So I am trying #Primal again post-update and so far I see nothing different in the webUI other than the colors. ...is that supposed to be so? o.O Also, still no ctrl+enter. boo. x)

Alright, guess I suck at this hahaha :D This is fun! Are there other Nostr games??? View quoted note →

WORD5 #531 X/6 🟧⬛⬛⬛⬛ 🟧⬛⬛⬛⬛ 🟪⬛⬛⬛⬛ ⬛⬛⬛🟧⬛ ⬛⬛⬛⬛⬛ ⬛🟪⬛⬛⬛

WORD5

Ok that is actually kinda nuts o.o Now I am not an economic buff or anything (huehue big number go bigger hue) but the ramifications that the war has are felt everywhere. I mean, SUDDENLY germany is VERY FAST in deploying new laws. Like wtf, where's this speed been when we needed to reform social institutions or fix our goddamn railways? xD But as soon as gas and oil got hit, things **moved**. And are still, too. The other industries affected, like the entire financial sector, have yet to fully bleed into mainstream, but it _might_, I _think_. This is crazy. The spread of effects due to globalized, interlinked industries, is kinda surreal. o.o View quoted note →

HAMBAAAGAAAAAA <3

Ah, if I make a poll in Ditto, its an entirely different event and my initial note text just wont be copied. Fun owo

Woke up with my right shoulder entirely in pain - musta pulled a muscle or whatever in sleep, motion is a little limited. Ow. x.x So I just took the day to... do nothing for once. But now I am hungry...

Reading this really makes me want to build a biiiiig fat jammer and just EMP the fuckers out of existence. xD Never gonna happen but hey, lemme dream arite? ^^; View quoted note →

A random idea hit my mind - not gonna use it but: You can use PassKeys for nsecs. Basically, you authenticate using the WebAuthn stuff, derive a symmetric key from the material, and then request the server to send you the encrypted nsec - and decrypt it in the client and then just... use it. Problem is tho, the nsec will now live in JS land within the page context which is far less secure than an extension I would assume - let alone a remote signer or whatever. But... what if you were to use that, to offer the user the option to get to know your site/app first by using very conventional things and later, like in the settings, allowed them to retrive their nsec to switch to a dedicated extension, bunker or signer? o.o The worst option would be to take the old username/password approach, stack OTP on it, and then use the whole shebang to decrypt the encrypted blob. xD So... - Bad: username + password + otp: authenticate, retrive encrypted key, decrypt in client - use. - Nyeh, s'ok: Passkey which itself uses public/private keypairs and has stronger security but still ends in the decrypted nsec being stored...rather "weakly". - Extension, bunker, signer: Well you know those already I bet. x) Just a thought experiment I had, tis all.

Having to doubt every, single, comment, ever on social media - even here on Nostr - is so tiring... The "Dead Internet Theory" really is a burden. :/

Because war makes more money. Fear makes more money. Suppression and control makes more money. Replace "money" with "profit" or "power" and it's still the same o.o Greed is one heeeeeell of a drug... View quoted note →