Doing the basics right prevents this attack: - verify your downloads .. especially firmware, AND - keeping your signing devices secure Great work 🤝

Dark Skippy Disclosure - A Powerful Method For Key Exfil Attacks

A powerful method for a malicious hardware wallet to leak its secret keys.

Holy smokin’ hashrate Batman

Two separate issues: 1. Freerider problem Peeps uploading bulk (NSFW) content without contributing to the service; as others have noted, rate limiting (bandwidth /storage) for freebies is a tried and tested approach 2. Child abuse “porn” Abhorrent content .. a thornier issue in the general context but the specific case here (and typically used by LE as justification for <new power>) is universally decried. So what would I seek to do if operating the service? - ban the npub - drop all content from that npub .. and .. - publish that the npub has been banned from the relay/service and the reason for the ban But does this solve anything or does it create more problems? Npubs can be auto-created and content can be auto-uploaded - so this could become a whack-a-mole problem .. partly addressable via rate limiting, but at scale, requiring scanning But where does that lead? Well, that then starts to suggest that the relays are responsible for content uploaded by unknown people/orgs/bots .. and “bad” content will vary wildly depending upon where that operator resides .. the internet is global.. a basic fact many jurisdictions are still having trouble getting their heads around even after 30+ years The concept of a published banlist though makes the filtering/censoring explicit and transparent Relays/services that want to filter/exclude could subscribe to such lists and auto exclude .. but .. This brings us back to who to trust for such exclusions .. and the core problem of centralised authorities or established webs of trust Thorny problem but Nostr has the potential to offer alternative approaches to the behind-closed-doors censorship we’ve all observed on the common centralised platforms View quoted note →

“.. good stewardship of infrastructure requires the foresight of innovation ..” Working in Public, Nadia Eghbal

Bangkok here we come 🔥🔥🔥 View quoted note →

Ways to contribute As @Marce says, there are many many ways to make meaningful contributions to FOSS .. .. it’s taken me many years to find where i can add some value; when you get to the point of wanting to contribute, look around as there are many ways, many projects, and many skills that can help .. be patient, participate, learn and teach and your place, your role, your ikigai, will emerge Look forward to seeing you next month @Marce and thank you for all you’ve done to help foster Nostr and Bitcoin 🧡 View quoted note →

True in 1994 Still true today View quoted note →

tfw you’ve built the best open source transaction explorer on the planet, but Google offers you $23B so you can buy more 🌽 @wiz @mempool

Sweet time to clean up Consolidate UTXO’s Organise wallets Separate stacks

Why “KYC” is so toxic: You’re an anon in Australia .. equally Asia/Europe etc You want to shitpost so you join Twitter; or you want to buy shitcoins so you join Coinbase Your hand your ID to the platforms They share with “auth” services All this for “your safety” Now your ID docs are in the US Now your ID docs are in Israel ..and now they’re globally available 😞 Yet Twitter or Coinbase or AU10TIX will NOT be held to account and held liable for the harm caused Information cannot be recalled Don’t use these toxic services All of it will be hacked or leaked Just a question of time .. View quoted note →

Have a read first .. then: Where do your comms rank? Level up .. even one step is good View quoted note →

Learn the tools Use the tools Teach the tools Godmode: write the guide 🧡 View quoted note →