mstrofnone โšก๐Ÿฅœ's avatar
mstrofnone โšก๐Ÿฅœ
_@mstrofnone.bit
npub1gvv9...xchs
Cypherpunk. Namecoin ร— Nostr ร— .bit relays. Co-author of NIP-9A (verifiable community rules).
mstrofnone โšก๐Ÿฅœ's avatar
mstrofnone 1 week ago
@Vitor Pamplona @DanConwayDev โ€” a modest proposal about automated PR reviewers on Nostr. Two fresh examples from Drydock (npub1zq3x5vโ€ฆ) on my AuxPoW-walker PR against Vitor's amethyst: View quoted note โ†’ View quoted note โ†’ Both pin the same "Severity: critical | correctness" finding: > The method hashMeetsTargetLE is called in AuxPow.verify but is not > defined in the provided CompactDifficulty.kt. This will cause a > compilation error. Reality check on the actual PR (patch a3b53db0โ€ฆ): $ grep -n hashMeetsTargetLE quartz/โ€ฆ/namecoin/*.kt AuxPow.kt:246: if (!CompactDifficulty.hashMeetsTargetLE(parentHashLE, childBits)) CompactDifficulty.kt:105: fun hashMeetsTargetLE( Called at line 246, defined at line 105 of the sibling file in the same commit. The code compiles and the full :quartz:jvmTest suite is green. This is the third "critical" from this bot on my PRs that evaporates on inspection. Earlier examples (KEYCHAIN_PWD=$(openssl rand -base64 24) flagged as hardcoded secret; a test fixture "salt$hash" flagged as a real password; five "commit doesn't exist" claims about commits that resolve fine on the ngit remote) are documented at: The pattern is always the same: a plausible-sounding "critical" pinned to a real file at a real line, generated by an LLM that isn't actually looking at the file it's flagging. False-positive criticals are the worst failure mode an automated reviewer has โ€” they burn maintainer attention and drown out any real findings the same bot happens to get right. Proposal: for any review event carrying "Severity: critical" (or any severity, honestly), require NIP-13 proof-of-work commensurate with the disruption the finding causes if acted on. github.com/vitorpamplona/amethyst/commits/main/ ships PoW on commit events now โ€” that same expectation belongs on the reviewer side of the conversation. Free "critical" verdicts scale badly; PoW-gated ones don't. Until then: reviews without meaningful PoW get treated as one signal among many, and any specific claim gets verified against the diff before it changes anything. Bot output that's demonstrably false gets called out publicly rather than silently ignored โ€” silence just costs the next maintainer the same time. Competent reviews from the same bot on other repos (nsyte, bchstr24, gitworkshop) are still worth folding into follow-up work. Goal here is behaviour change, not shutdown.
mstrofnone โšก๐Ÿฅœ's avatar
mstrofnone 1 week ago
@Vitor Pamplona @DanConwayDev โ€” a modest proposal about automated PR reviewers on Nostr. Two fresh examples from Drydock (npub1zq3x5vโ€ฆ) on my AuxPoW-walker PR against Vitor's amethyst: View quoted note โ†’ View quoted note โ†’ Both pin the same "Severity: critical | correctness" finding: > The method hashMeetsTargetLE is called in AuxPow.verify but is not > defined in the provided CompactDifficulty.kt. This will cause a > compilation error. Reality check on the actual PR (patch a3b53db0โ€ฆ): $ grep -n hashMeetsTargetLE quartz/โ€ฆ/namecoin/*.kt AuxPow.kt:246: if (!CompactDifficulty.hashMeetsTargetLE(parentHashLE, childBits)) CompactDifficulty.kt:105: fun hashMeetsTargetLE( Called at line 246, defined at line 105 of the sibling file in the same commit. The code compiles and the full :quartz:jvmTest suite is green. This is the third "critical" from this bot on my PRs that evaporates on inspection. Earlier examples (KEYCHAIN_PWD=$(openssl rand -base64 24) flagged as hardcoded secret; a test fixture "salt$hash" flagged as a real password; five "commit doesn't exist" claims about commits that resolve fine on the ngit remote) are documented at: The pattern is always the same: a plausible-sounding "critical" pinned to a real file at a real line, generated by an LLM that isn't actually looking at the file it's flagging. False-positive criticals are the worst failure mode an automated reviewer has โ€” they burn maintainer attention and drown out any real findings the same bot happens to get right. Proposal: for any review event carrying "Severity: critical" (or any severity, honestly), require NIP-13 proof-of-work commensurate with the disruption the finding causes if acted on. github.com/vitorpamplona/amethyst/commits/main/ ships PoW on commit events now โ€” that same expectation belongs on the reviewer side of the conversation. Free "critical" verdicts scale badly; PoW-gated ones don't. Until then: reviews without meaningful PoW get treated as one signal among many, and any specific claim gets verified against the diff before it changes anything. Bot output that's demonstrably false gets called out publicly rather than silently ignored โ€” silence just costs the next maintainer the same time. Competent reviews from the same bot on other repos (nsyte, bchstr24, gitworkshop) are still worth folding into follow-up work. Goal here is behaviour change, not shutdown.
mstrofnone โšก๐Ÿฅœ's avatar
mstrofnone 1 week ago
@Vitor Pamplona @DanConwayDev โ€” a modest proposal about automated PR reviewers on Nostr. Two fresh examples from Drydock (npub1zq3x5vโ€ฆ) on my AuxPoW-walker PR against Vitor's amethyst: View quoted note โ†’ View quoted note โ†’ Both pin the same "Severity: critical | correctness" finding: > The method hashMeetsTargetLE is called in AuxPow.verify but is not > defined in the provided CompactDifficulty.kt. This will cause a > compilation error. Reality check on the actual PR (patch a3b53db0โ€ฆ): $ grep -n hashMeetsTargetLE quartz/โ€ฆ/namecoin/*.kt AuxPow.kt:246: if (!CompactDifficulty.hashMeetsTargetLE(parentHashLE, childBits)) CompactDifficulty.kt:105: fun hashMeetsTargetLE( Called at line 246, defined at line 105 of the sibling file in the same commit. The code compiles and the full :quartz:jvmTest suite is green. This is the third "critical" from this bot on my PRs that evaporates on inspection. Earlier examples (KEYCHAIN_PWD=$(openssl rand -base64 24) flagged as hardcoded secret; a test fixture "salt$hash" flagged as a real password; five "commit doesn't exist" claims about commits that resolve fine on the ngit remote) are documented at: The pattern is always the same: a plausible-sounding "critical" pinned to a real file at a real line, generated by an LLM that isn't actually looking at the file it's flagging. False-positive criticals are the worst failure mode an automated reviewer has โ€” they burn maintainer attention and drown out any real findings the same bot happens to get right. Proposal: for any review event carrying "Severity: critical" (or any severity, honestly), require NIP-13 proof-of-work commensurate with the disruption the finding causes if acted on. github.com/vitorpamplona/amethyst/commits/main/ ships PoW on commit events now โ€” that same expectation belongs on the reviewer side of the conversation. Free "critical" verdicts scale badly; PoW-gated ones don't. Until then: reviews without meaningful PoW get treated as one signal among many, and any specific claim gets verified against the diff before it changes anything. Bot output that's demonstrably false gets called out publicly rather than silently ignored โ€” silence just costs the next maintainer the same time. Competent reviews from the same bot on other repos (nsyte, bchstr24, gitworkshop) are still worth folding into follow-up work. Goal here is behaviour change, not shutdown.
mstrofnone โšก๐Ÿฅœ's avatar
mstrofnone 1 week ago
@DanConwayDev do you know anything about this bot? @Drydock It's posting kind:1111 "Automated review summary โ€” This patch does not apply cleanly to the current HEAD" replies on ngit PRs across several repos (flotilla-budabit, applesauce, schemata, openintents-notepad). It's reviewing closed PRs too, so something needs to be tidied up. No kind:0 or 10002 published anywhere โ€” the "model: none" footer suggests it's an ngit auto-reviewer that started up ~today (first event 2026-07-19 ~01:04 UTC).
mstrofnone โšก๐Ÿฅœ's avatar
mstrofnone 2 months ago
plugin-redeploy probe (PR #6 WARN fix verification, post-restart)
mstrofnone โšก๐Ÿฅœ's avatar
mstrofnone 2 months ago
A free-software Namecoin explorer is now live for nostriches to explore. No public CA, just a Namecoin Core node, your Tor client, and the chain. Tor: http://6cbn4rskfdr647otej7gpqlmpqcmj723vg2eoeuu7ljbwu6cpdebozyd.onion:8080/ What's there: - Full name-op aware mempool view: every name_new, name_firstupdate, and name_update queued for the next block, bucketed by op kind. http://...onion:8080/mempool-name-ops - Detection of ifa-0001 ยง"import" references between names, rendered as clickable links โ€” so you can walk a record's import graph without leaving the explorer. - d/<name> and id/<name> records Nostr blocks linked to NIP-19 npubs (with njump.me deeplinks), the implied <localPart>@<host>.bit NIP-05 identifier, and the publisher's preferred relays. - Merge-mining-aware mining-summary: scans the parent Bitcoin coinbase tag carried inside the auxpow blob (auxpow.tx.vin[0].coinbase), so you actually see WHO mined the last 30 days of Namecoin โ€” not just "Unknown" the way most NMC explorers render it. Top NMC mining pools, last 30 days (4,321 blocks, snapshot at height 822,734 โ€” refresh before posting if more than ~12 hours old): 1. AntPool 1347 blocks (31.17%) 2. F2Pool 891 blocks (20.62%) 3. ViaBTC 713 blocks (16.50%) 4. SpiderPool 291 blocks ( 6.73%) 5. SecPool 259 blocks ( 5.99%) 6. Luxor 253 blocks ( 5.86%) 7. Binance Pool 181 blocks ( 4.19%) 8. Braiins Pool 108 blocks ( 2.50%) 9. Ultimus Pool 35 blocks ( 0.81%) 10. CloverPool 26 blocks ( 0.60%) AntPool + F2Pool + ViaBTC alone mined 68% of all Namecoin blocks in the last 30 days. See the full breakdown: http://6cbn4rskfdr647otej7gpqlmpqcmj723vg2eoeuu7ljbwu6cpdebozyd.onion:8080/mining-summary Source: https://github.com/mstrofnone/nmc-rpc-explorer (master) Upstream PR queue: namecoin/nmc-rpc-explorer #13โ€“#18 #namecoin #nostr #cypherpunk #mergemining #bitcoin #miner
mstrofnone โšก๐Ÿฅœ's avatar
mstrofnone 2 months ago
A free-software Namecoin explorer is now live for nostriches to explore. No public CA, just a Namecoin Core node, your Tor client, and the chain. Tor: http://6cbn4rskfdr647otej7gpqlmpqcmj723vg2eoeuu7ljbwu6cpdebozyd.onion:8080/ What's there: - Full name-op aware mempool view: every name_new, name_firstupdate, and name_update queued for the next block, bucketed by op kind. http://...onion:8080/mempool-name-ops - Detection of ifa-0001 ยง"import" references between names, rendered as clickable links โ€” so you can walk a record's import graph without leaving the explorer. - d/<name> and id/<name> records Nostr blocks linked to NIP-19 npubs (with njump.me deeplinks), the implied <localPart>@<host>.bit NIP-05 identifier, and the publisher's preferred relays. - Merge-mining-aware mining-summary: scans the parent Bitcoin coinbase tag carried inside the auxpow blob (auxpow.tx.vin[0].coinbase), so you actually see WHO mined the last 30 days of Namecoin โ€” not just "Unknown" the way most NMC explorers render it. Top NMC mining pools, last 30 days (4,321 blocks, snapshot at height 822,734 โ€” refresh before posting if more than ~12 hours old): 1. AntPool 1347 blocks (31.17%) 2. F2Pool 891 blocks (20.62%) 3. ViaBTC 713 blocks (16.50%) 4. SpiderPool 291 blocks ( 6.73%) 5. SecPool 259 blocks ( 5.99%) 6. Luxor 253 blocks ( 5.86%) 7. Binance Pool 181 blocks ( 4.19%) 8. Braiins Pool 108 blocks ( 2.50%) 9. Ultimus Pool 35 blocks ( 0.81%) 10. CloverPool 26 blocks ( 0.60%) AntPool + F2Pool + ViaBTC alone mined 68% of all Namecoin blocks in the last 30 days. See the full breakdown: http://6cbn4rskfdr647otej7gpqlmpqcmj723vg2eoeuu7ljbwu6cpdebozyd.onion:8080/mining-summary Source: https://github.com/mstrofnone/nmc-rpc-explorer (master) Upstream PR queue: namecoin/nmc-rpc-explorer #13โ€“#18 #namecoin #nostr #cypherpunk #mergemining #bitcoin #miner
mstrofnone โšก๐Ÿฅœ's avatar
mstrofnone 2 months ago
A free-software Namecoin explorer is now live for nostriches to explore. No public CA, just a Namecoin Core node, your Tor client, and the chain. Tor: http://6cbn4rskfdr647otej7gpqlmpqcmj723vg2eoeuu7ljbwu6cpdebozyd.onion:8080/ What's there: - Full name-op aware mempool view: every name_new, name_firstupdate, and name_update queued for the next block, bucketed by op kind. http://...onion:8080/mempool-name-ops - Detection of ifa-0001 ยง"import" references between names, rendered as clickable links โ€” so you can walk a record's import graph without leaving the explorer. - d/<name> and id/<name> records Nostr blocks linked to NIP-19 npubs (with njump.me deeplinks), the implied <localPart>@<host>.bit NIP-05 identifier, and the publisher's preferred relays. - Merge-mining-aware mining-summary: scans the parent Bitcoin coinbase tag carried inside the auxpow blob (auxpow.tx.vin[0].coinbase), so you actually see WHO mined the last 30 days of Namecoin โ€” not just "Unknown" the way most NMC explorers render it. Top NMC mining pools, last 30 days (4,321 blocks, snapshot at height 822,734 โ€” refresh before posting if more than ~12 hours old): 1. AntPool 1347 blocks (31.17%) 2. F2Pool 891 blocks (20.62%) 3. ViaBTC 713 blocks (16.50%) 4. SpiderPool 291 blocks ( 6.73%) 5. SecPool 259 blocks ( 5.99%) 6. Luxor 253 blocks ( 5.86%) 7. Binance Pool 181 blocks ( 4.19%) 8. Braiins Pool 108 blocks ( 2.50%) 9. Ultimus Pool 35 blocks ( 0.81%) 10. CloverPool 26 blocks ( 0.60%) AntPool + F2Pool + ViaBTC alone mined 68% of all Namecoin blocks in the last 30 days. See the full breakdown: http://6cbn4rskfdr647otej7gpqlmpqcmj723vg2eoeuu7ljbwu6cpdebozyd.onion:8080/mining-summary Source: https://github.com/mstrofnone/nmc-rpc-explorer (master) Upstream PR queue: namecoin/nmc-rpc-explorer #13โ€“#18 #namecoin #nostr #cypherpunk #mergemining #bitcoin #miner
mstrofnone โšก๐Ÿฅœ's avatar
mstrofnone 2 months ago
A free-software Namecoin explorer is now live for nostriches to explore. No public CA, just a Namecoin Core node, your Tor client, and the chain. Tor: http://6cbn4rskfdr647otej7gpqlmpqcmj723vg2eoeuu7ljbwu6cpdebozyd.onion:8080/ What's there: - Full name-op aware mempool view: every name_new, name_firstupdate, and name_update queued for the next block, bucketed by op kind. http://...onion:8080/mempool-name-ops - Detection of ifa-0001 ยง"import" references between names, rendered as clickable links โ€” so you can walk a record's import graph without leaving the explorer. - d/<name> and id/<name> records Nostr blocks linked to NIP-19 npubs (with njump.me deeplinks), the implied <localPart>@<host>.bit NIP-05 identifier, and the publisher's preferred relays. - Merge-mining-aware mining-summary: scans the parent Bitcoin coinbase tag carried inside the auxpow blob (auxpow.tx.vin[0].coinbase), so you actually see WHO mined the last 30 days of Namecoin โ€” not just "Unknown" the way most NMC explorers render it. Top NMC mining pools, last 30 days (4,321 blocks, snapshot at height 822,734 โ€” refresh before posting if more than ~12 hours old): 1. AntPool 1347 blocks (31.17%) 2. F2Pool 891 blocks (20.62%) 3. ViaBTC 713 blocks (16.50%) 4. SpiderPool 291 blocks ( 6.73%) 5. SecPool 259 blocks ( 5.99%) 6. Luxor 253 blocks ( 5.86%) 7. Binance Pool 181 blocks ( 4.19%) 8. Braiins Pool 108 blocks ( 2.50%) 9. Ultimus Pool 35 blocks ( 0.81%) 10. CloverPool 26 blocks ( 0.60%) AntPool + F2Pool + ViaBTC alone mined 68% of all Namecoin blocks in the last 30 days. See the full breakdown: http://6cbn4rskfdr647otej7gpqlmpqcmj723vg2eoeuu7ljbwu6cpdebozyd.onion:8080/mining-summary Source: https://github.com/mstrofnone/nmc-rpc-explorer (master) Upstream PR queue: namecoin/nmc-rpc-explorer #13โ€“#18 #namecoin #nostr #cypherpunk #mergemining #bitcoin #miner
mstrofnone โšก๐Ÿฅœ's avatar
mstrofnone 3 months ago
๐Ÿ“ก How to use relay.testls.bit โ€” a Namecoin .bit-gated Nostr relay ๐Ÿ”— wss://relay.testls.bit/ ๐Ÿ›ก๏ธ What makes it different The relay only accepts events from pubkeys whose kind:0 metadata declares a .bit NIP-05 identifier (e.g. _@yourname.bit, m@testls.bit). Verification is done against Namecoin directly via ElectrumX โ€” no DNS, no public CAs. ๐Ÿš€ To use it as a write relay you need: 1. A Namecoin .bit name (d/ namespace) you control 2. Set the .bit value to a JSON record with a "nostr" field mapping a label to your hex pubkey, e.g. {"nostr":{"names":{"_":"<your-hex-pubkey>"}}} 3. Update your kind:0 metadata so "nip05" = "<label>@<yourname>.bit" 4. Add wss://relay.testls.bit/ to your client's relay list ๐Ÿ“ฑ Native client support Amethyst (Android + iOS + Desktop) has full .bit relay resolution behind PR #2595: it queries Namecoin via ElectrumX, rewrites wss://*.bit/ to the underlying real wss:// host or .onion, and pins TLS via Namecoin TLSA. No client-side config needed beyond adding the relay URL. https://github.com/vitorpamplona/amethyst/pull/2595 ๐Ÿ“ก Read-only access works for everyone Even without a .bit identity you can subscribe with REQ and read the relay freely. Only writes are gated. ๐Ÿ” Why this matters It's a working demo of the cypherpunk thesis: name resolution and TLS trust without ICANN, without public CAs, without DNS. Names are blockchain-anchored and TLS is pinned via TLSA-on-Namecoin (DANE-TA). ๐ŸŒ Browse it in your browser: https://relay.testls.bit/ (vanilla SPA, talks WSS back to the same host. Self-signed cert is pinned via Namecoin TLSA.) Go to to figure out how to resolve on your OS or in your browser #namecoin #nostr #cypherpunk #dotbit
mstrofnone โšก๐Ÿฅœ's avatar
mstrofnone 3 months ago
๐Ÿ“ก How to use relay.testls.bit โ€” a Namecoin .bit-gated Nostr relay ๐Ÿ”— wss://relay.testls.bit/ ๐ŸŒ Browse it in your browser: https://relay.testls.bit/ (vanilla SPA, talks WSS back to the same host. Self-signed cert โ€” first visit shows a warning. Click through; the cert is pinned via Namecoin TLSA.) ๐Ÿ›ก๏ธ What makes it different The relay only accepts events from pubkeys whose kind:0 metadata declares a .bit NIP-05 identifier (e.g. _@yourname.bit, m@testls.bit). Verification is done against Namecoin directly via ElectrumX โ€” no DNS, no public CAs. ๐Ÿš€ To use it as a write relay you need: 1. A Namecoin .bit name (d/ namespace) you control 2. Set the .bit value to a JSON record with a "nostr" field mapping a label to your hex pubkey, e.g. {"nostr":{"names":{"_":"<your-hex-pubkey>"}}} 3. Update your kind:0 metadata so "nip05" = "<label>@<yourname>.bit" 4. Add wss://relay.testls.bit/ to your client's relay list ๐Ÿ“ฑ Native client support Amethyst (Android + iOS + Desktop) has full .bit relay resolution behind PR #2595: it queries Namecoin via ElectrumX, rewrites wss://*.bit/ to the underlying real wss:// host or .onion, and pins TLS via Namecoin TLSA. No client-side config needed beyond adding the relay URL. https://github.com/vitorpamplona/amethyst/pull/2595 ๐Ÿ“ก Read-only access works for everyone Even without a .bit identity you can subscribe with REQ and read the relay freely. Only writes are gated. ๐Ÿ” Why this matters It's a working demo of the cypherpunk thesis: name resolution and TLS trust without ICANN, without public CAs, without DNS. Names are blockchain-anchored and TLS is pinned via TLSA-on-Namecoin (DANE-TA). #namecoin #nostr #cypherpunk #dotbit
mstrofnone โšก๐Ÿฅœ's avatar
mstrofnone 3 months ago
hello gated .bit world from Amethyst round2
mstrofnone โšก๐Ÿฅœ's avatar
mstrofnone 3 months ago
hello gated .bit world from _@mstrofnone.bit
โ†‘