Secure messaging on Nostr. Creator of Marmot protocol, MDK, and White Noise. Other stuff connoisseur. Also built Listr, Ostrich.work, Ontolo, Nostr.how.
Public Key
npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc Profile Code
nprofile1qqspwwwexlwgcrrnwz4zwkze8rq3ncjug8mvgsd96dxx6wzs8ccndmcpzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhgt2xpyc
Show more details
Published at
2025-10-02T13:06:18Z Event JSON
{
"id": "0b9bfacb775e9d95bc862056097396e92f608c5a2a664601528019a57e647d56" ,
"pubkey": "1739d937dc8c0c7370aa27585938c119e25c41f6c441a5d34c6d38503e3136ef" ,
"created_at": 1759410378 ,
"kind": 0 ,
"tags": [],
"content": "{\"lud06\":\"\",\"nip05\":\"[email protected] \",\"picture\":\"https:\\/\\/m.primal.net\\/HIVN.jpg\",\"banner\":\"https:\\/\\/m.primal.net\\/KELp.webp\",\"lud16\":\"[email protected] \",\"website\":\"https:\\/\\/jeffg.fyi\",\"display_name\":\"JeffG \",\"name\":\"JeffG\",\"about\":\"Secure messaging on Nostr. Creator of Marmot protocol, MDK, and White Noise. Other stuff connoisseur. Also built Listr, Ostrich.work, Ontolo, Nostr.how.\"}" ,
"sig": "4e7c42b98b42873447b73c401942af1612f38f99800f47086fa31e7c287dcfc14a9eb61b836fe4652989350481e8726dcbd495c8ba6b2406b6999e057f7f23eb"
}
Last Notes npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Marmot dev call was š„ today. It was our first time doing demos and holy shit, there is so much being worked on right now it breaks my brain! npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM š https://www.therage.co/ai-passport-kyc-digital-id/ The thing that everyone who pushes for digital ID and "proof of personhood" fails to understand is that IT DOESN'T MATTER if you're a person or an AI agent. What matters is whether or not we can trust you. Humans have built up very complex internal heuristics for dealing with strangers but we've, so far, done a terrible job of modeling and enabling those mechanisms in a digital world. Identity and content linked by cryptography can help fix this. Giving the state unchecked surveillance powers does not fix anything. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Good to know that your doorbell camera is now a general purpose surveillance device. They can now use our private property against us without even asking permission. https://arstechnica.com/gadgets/2025/10/ring-cameras-are-about-to-get-increasingly-chummy-with-law-enforcement/ npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Thereās something in the air that is making me feel like we could teleport way higher any minute⦠npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG What do you get when you cross Messaging Layer Security with Nostr's decentralized network? A Marmot. 𦫠Introducing Marmot: Marmot is an evolution of NIP-EE into a full protocol with modular specs for optional features. Built for the future of secure messaging! We're also excited to announce MDK (Marmot Development Kit) - a standalone Rust library following the BDK/LDK model. Check out the blog post for more details! ā” š Protocol: github.com/parres-hq/marmot š¦ MDK: github.com/parres-hq/mdk #naddr1qvā¦cvnl npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Anyone know of a NIP (or proposal) for pinning content in communities or chats? #askNostr npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG @nprofileā¦f5tq why is njump so slow. I thought it was static pages and should be super fast? npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM š Bring back this version of the web. http://www.catb.org/~esr/ npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG I'm so glad I'm too busy writing software to have any time to participate in the shit show that is Luke and Knots. And, notwithstanding all the FUD and panic, my transactions are still being confirmed without anyone's permission at the sweet sweet rate of 1 sat/vbyte. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Rights are exercised, not granted. What a clown show 𤔠npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Fuck paper bitcoin summer, this is supply chain attack summer. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Yes... the Italian Ministry of the Interior's website has operating hours. š https://blossom.primal.net/8473cba4959b5cfe377a2c6243dd1c1aec61a49f979e79bf7c36e3d3f0a1a836.png npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Put on headphones, close your eyes, and zone out for the next 20 minutes listening to this absolute masterpiece. https://open.spotify.com/track/7c5jtxhYT13kUepkDL9nTv?si=7d975b364a6a4040 npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG š why so salty? npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM š Keep building. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Strange - looks like the app tried to rotate my key package at some point today and succeeded in deleting the current one but not publishing the replacement š I just published another manually. Give it a shot. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG @nprofileā¦9puf v 0.1.4 is out on iOS and Android. This was a big one, with a huge backend refactor all a lot of core components of the app. The result? Way more reliable group creation and messaging. As always, thanks to everyone who's using it and sending us feedback. š Get it now on @nprofileā¦uvay, on Github, and on iOS TestFlight. #nevent1qā¦0spp npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG If this is you, you havenāt understood bitcoin well enough. #nevent1qā¦szze npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG The thing about trespassing in the south⦠npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG BCN has the best street art. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG If you can keep your head when all about you Are losing theirs and blaming it on you, If you can trust yourself when all men doubt you, But make allowance for their doubting too; If you can wait and not be tired by waiting, Or being lied about, donāt deal in lies, Or being hated, donāt give way to hating, And yet donāt look too good, nor talk too wise: If you can dreamāand not make dreams your master; If you can thinkāand not make thoughts your aim; If you can meet with Triumph and Disaster And treat those two impostors just the same; If you can bear to hear the truth youāve spoken Twisted by knaves to make a trap for fools, Or watch the things you gave your life to, broken, And stoop and build āem up with worn-out tools: If you can make one heap of all your winnings And risk it on one turn of pitch-and-toss, And lose, and start again at your beginnings And never breathe a word about your loss; If you can force your heart and nerve and sinew To serve your turn long after they are gone, And so hold on when there is nothing in you Except the Will which says to them: āHold on!ā If you can talk with crowds and keep your virtue, Or walk with Kingsānor lose the common touch, If neither foes nor loving friends can hurt you, If all men count with you, but none too much; If you can fill the unforgiving minute With sixty secondsā worth of distance run, Yours is the Earth and everything thatās in it, Andāwhich is moreāyouāll be a Man, my son! If āRudyard Kipling npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Honestly? This sounds pretty amazing. https://blossom.primal.net/469930c760ae0c189269bfc07ad89825fee67d6c4b414404e128fdefa28b8028.jpg npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG āThe harder the government squeezes on the internet, the faster and more effectively people will get around it.ā ā @nprofileā¦6ssr Life finds a way. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Good art makes you uncomfortable. Massive Attack are legends. https://www.gadgetreview.com/massive-attack-turns-concert-into-facial-recognition-surveillance-experiment npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Just replace any mention of ādigital assetsā or ācryptocurrenciesā in this article with ācurtainsā and āwhispersā and you will get a sense of the level of control they want and the absurd lengths theyāll go to ensure that you are not free. https://www.therage.co/us-government-to-bring-patriot-act-to-digital-assets/ npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Podcasting. Itās about podcasting. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM š I had a great (and wide-ranging) chat with @nprofileā¦7985 on the Free Cities Podcast recently. Check it out! #nevent1qā¦py2a npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG You need to have MLS storage involved somehow. It's a requirement of the OpenMLS implementation of the MLS protocol. So instead of having many different storage implementations out there that do things differently, I went the direction of putting more into the nostr-mls library and being more opinionated about how it should be done. The reason for this is that if any NIP-EE implementation gets any part of the spec wrong, it can ruin the security guarantees of the groups the person participates in. It also means that we can standardize things like E2EE media storage and other features that all messengers are going to need to do. Two options I can see. 1. We can create a separate crate that is an extremely limited and lightweight implementation of NIP-EE (plus other things) that uses OpenMLS (so uses their storage adapters) but doesn't try and have an opinion about how your app should store data and would probably be lower level about how it processes commits, messages, etc. 2. We might be able to use features in the current nostr-mls crates so that devs could turn on or off functionality based on what they want. This would make the crates A LOT more complicated but might be worth it long-term. I'd love to hear your thoughts on those (and if you can think of other options, happy to hear those too). It would be great to make sure that we end up with lots of interoperable clients. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG @nprofileā¦w70s Just had a look at the new XChat app. Looks cool, but it sucks that it's running your own fork of the nostr-mls crate and you've made a bunch of changes that break interoperability between different MLS clients. I would have loved to have you contributing and working more closely with us on changes so our apps would have remained interoperable. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Turtles, all the way down. https://blossom.primal.net/34c11561bf5b62ab3eadbc02e88463f1a9bdbc6d0136d2f96fd6b9db430a649d.jpg npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Erosion. Thatās how they win. Donāt give them an inch. Stack bitcoin by offering goods and services. Spend bitcoin on things you need. Their points of control can be meaningless. Itās your choice. #nevent1qā¦9f3r npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM #spxm š https://blossom.primal.net/523c1bac0e5cf92a041245a4b2361518433fd70886ac347b5a5f1e7dcb2f7073.jpg npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Websocket request limit in node defaults to 1GB, but most server implementations limit to something like 1-16MB. All of which would still work for very large filters. I'm just wondering if anyone has direct experiences with relays blocking for a REQ that was too large. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG @nprofileā¦8d3u @nprofileā¦6jvy @nprofileā¦x4fv Do you guys know of any upward limit on the size of filters? E.g. how many pub keys can I reference in one filter? Iāve never hit any limits before just curious if you all have see anything. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM š Touch sand. https://blossom.primal.net/cbd809d4245ab395234435a09e192ba1b8333135a79d8c121b4518dd2c03a7e2.jpg npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG I find it tremendously ironic that the invention of the welfare state, ostensibly to help those in need, has effectively destroyed our sense of community duty and care for our neighbors. Itās allowed us to convince ourselves that itās ānot our jobā to look after each other like we used to. People love to argue that without the state those in need would be left behind. I staunchly believe this to be untrue and downright patronizing. Most people, most of the time, are fundamentally good and generous. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG For what? Context? npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG @nprofileā¦8gtd I'm interested in getting a rug. What's the process? npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG The trains even have hot desks now too. https://blossom.primal.net/9be15a9ad55695abab72f82b2d44386e6a660c2563820a3a5959cd10322af2f9.jpg #nevent1qā¦wl83 npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG If you havenāt read @nprofileā¦n3f8 ās book Building Nostr yet, you should. Itās very well written and does a great job of giving new builders (of all types, not just devs) the base they need to ābuild it rightā. https://building-nostr.coracle.social/ npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG āBuilding software is hardā. Itās doubly hard when youāre building in a decentralized context and inventing new protocols at the same time. I feel so much gratitude and respect for all our early users (thatās you all!) and all the feedback and understanding theyāve given us. As they say; if you arenāt embarrassed, you launched too late. Well, we didnāt launch too late. š
Iām looking forward to the next release. Itās going to be lit. š„ #nevent1qā¦jq3g npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM š Train travel is exceptionally underrated. Air travel, by comparison, is barbaric. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG I am Jackās distinct lack of surprise. #nevent1qā¦tz47 npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG NIP-EE is official. š¤ #nevent1qā¦l5wd npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Guys... I just got starlink and holy shit, my internet feels so fast. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM š Iām paying tribute to the gods of bureaucracy this morning by giving them too much of my time for something exceptionally unnecessary. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG š wat? npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG telegram š but ok. I will. right now tho. sleep. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Your internet will be permissioned. Unless you fight back... #nevent1qā¦j8gq npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG @nprofileā¦ehpa do you do tarot readings remotely? Or only in person? npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG The best moment to pause... https://blossom.primal.net/3a67b2061684e2bb05d8572471b32f2c424fd58475280e556f52825ad2d96c2b.png #nevent1qā¦r77j npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG The story of my life... #nevent1qā¦fpr9 npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Actively deciding what NOT to pay attention to is a superpower. Even more so when many of those things are actually things you're genuinely interested in and have the ability to materially help. I give myself a B-, at best. Who do you know who is phenomenal at this? npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM š https://blossom.primal.net/abb7fbec7d83605a8e4f6231e1e5c59c6946ca99558b7a1efb777f5a18a68087.jpg npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG My account on white noise is completely destroyed at the moment from all my testing. Iāll clean that up soon. In the meantime dm me here and weāll connect via signal. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM š #nevent1qā¦l9gf npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG They're coming for your information anon. They're coming for your privacy anon. https://www.piratewires.com/p/wikipedia-loses-major-eu-speech-battle npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG š npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Ooh, I just had a call about something super fun with two giga brains that has the potential to make Nostr overall so much more private... https://blossom.primal.net/4528f92737520473d1cf6d60756a2e04a05b87083b19b3014d486bb64752b98d.gif npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG š³ Big boy npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM psychopaths š npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Thatās the story here too. Cuts in the services every single year. But somehow higher costs. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Yup. For someone to take home ā¬36k in Italy, the employer has to lay out ā¬88k. I wonder why small businesses here are dying? š¤ https://blossom.primal.net/2557dfb8a6a8a19fa8e2e3473abf02141b227b87dcd6d3dbe3aae4f62c26e8b2.jpg npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Yes. in the end, my issue was solved by good old fashioned manual debugging. š¤·āāļø npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG hahaha npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG No one likes a smart ass @nprofileā¦h36r npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG https://blossom.primal.net/bf31eb6ab1920ed5c3dfb8e08e3abd00550cfb54de8910aaa0cb324eebd5dda7.png npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Yup. That's spot on. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Every time I touch JS (and especially bundlers) I'm reminded of what an incredible pain in the ass the entire ecosystem is. I'm never going to use a JS framework for a new project again. And while I'm at it, fuck it maybe I'll never use Typescript again either. Either use an actually typed language (Rust), use something enjoyable (Ruby), or at a push, write some plain vanilla JS. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM š Most people don't think that very large services can just disappear overnight... I am obsessed with this idea though. Just think about what it would mean to wake up and hear that the US govt. has raided and shutdown Signal and arrested their CEO, Meredith, for aiding terrorists. It's an idea that's getting less and less far-fetched. https://www.theguardian.com/world/2025/aug/13/russia-clamps-down-on-whatsapp-and-telegram-over-data-sharing npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Oh, so thatās how those work? š npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG The slides for a recent Black Hat talk on vulnerability in many nostr clients is up. https://i.blackhat.com/BH-USA-25/Presentations/USA-25-Kimura-Not-Sealed-Practical-Attacks-on-Nostr.pdf I haven't had a chance to read through it completely yet but seems like most, if not all, of what they lay out are known issues and things we've all been working to fix for a while now. š¤·āāļø npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM š My talk from @nprofileā¦5flv Privacy Edition in Riga is up. In addition to the shameless self-promotion, I'll say that the BTC++ events are the best events in Bitcoin right now if you're a dev. Highly technical, very chill, extremely well run, and just plain fun. If you've never been, now is the time. @nprofileā¦cn9n is doing events everywhere this year. There is bound to be one close to you. https://www.youtube.com/live/mvuWLob3CFU?si=nTkFixmGTTPyzUYt&t=4306 npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG One can try npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM š remember to touch grass. https://blossom.primal.net/9fcff60608c582c8c68a784845ac9c4dee5443a49587a0f5f45e3624fc34438b.jpg npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG administrative oversight š npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG The lawyers are getting quicker and quicker at shutting down legit projects based on rumors, news, and yet to be established case law. The state doesnāt even need to regulate when they have the monopolies on board. š https://www.therage.co/google-play-store-ban-wallets/ npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM to a beautiful dawn š
Itās been real Riga, but Iām very excited to be heading home today. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG We were actually talking about this yesterday in the team. Short answer; maybe? But we're not going to look at it right now. Make the thing work, then make it work better. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Can you explain that last point a bit more? I'm not sure what you're saying there. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Thanks. Yeah - I saw (and appreciated) the footnote. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG trust me bro. jk. It means that MLS over nostr is better than any centralized MLS implementation can be. and that we already know about the other issues that he surfaced and have a plan on how to mitigate them. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Very pretty. Bet it sounds even better. Would love to see it with knurled aluminium or brass knobs. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG No, it's definitely not. We cover this pretty well already actually and it's easy to improve on it in the future. #nevent1qā¦unky npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Nope, the entire nostr network is our authentication service. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG For those wondering about my thoughts on @nprofileā¦6fpr 's latest article about MLS. tl;dr - I think it's pretty balanced and describes something that we (and the MLS folks) have known from the start. If you have a centralized identity/authentication service telling you who is who, you are trusting them with a pretty important part of the system. As he points out, NIP-EE (the spec about how to use MLS on Nostr) and, by extension, White Noise doesn't have the authentication service problem because Nostr is our AS. We use pubkeys for identity in groups and you're trusting the key package events signed by those keys when you're adding someone to a group. ā
In general, this is an issue for other MLS implementations though. The authentication service is a "trusted" third party, with all the trappings. AFAICT, the "participation privacy" question is about relays being able to see what groups you're in via the group ID values you're requesting events for. There are two points to make here. First, relays can see what group IDs a given IP address is requesting events for. I believe that we have mitigated this pretty well since we're using random (and rotating) identifier(s) for each group (yes, by design, a single group have more than one visible ID value at a time). Obviously, this is also mitigated by using a VPN or Tor to make requests to relays. We don't yet but White Noise will eventually break up these requests into lots of different reqs/subscriptions (probably done over Tor or something similar) to help here. One thing that he didn't mention but is worth talking about; relays see events with a given "h" tag (the group ID I talked about above). Practically, this means that watching a given group ID value gives relays some idea of the relative amount of activity for a given group. Critically though, they can't see the number or identities of it's members, since all those messages are published via ephemeral keys. It's just a relative amount of activity (at least until the group rotates it's group ID). Happy to answer more questions from folks on the article or on MLS. #nevent1qā¦dzp2 npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG So - we don't have the AS issue because Nostr is our AS. We use pubkeys verify authenticity and you're trusting the key package events signed by those keys when you're adding someone to a group. AFAICT, the participation privacy question is about relays being able to see what groups you're in by seeing what group IDs you're requesting. I believe that we've mitigated this pretty well since we're using random (and rotating) identifier(s) for each group (yes, it can be more than one). We also want to eventually break up the requests into lots of different reqs/subscriptions (probably done over Tor or something similar) to further obfuscate this info. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG We don't have an "Authentication service" that issues and verifies a user's identity. We use nostr pubkeys for identity. I also think that we avoid the "participation privacy" issue that he mentions in the article but want to clarify what he means with him before claiming anything. š npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM GM š Heading to record a podcast now. What should I focus on? npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG TIL the UN convention on Cybercrime was proposed by Russia and, surprise surprise, is full of vague definitions and extreme overreach. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Oh yeah? I hadnāt seen that until this morning when I tried to turn off this shit for a family group. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM š Notice how WhatsApp bundles the AI spyware with the completely reasonable āsave mediaā features in a group. Way lower chance of people turning it off. Product design used against you. https://blossom.primal.net/d21c340dcecff939cd45190bc7f06dbd8f6e6660b185f73dffde218b142bfa86.png npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Working closely with other devs on meaningful projects is peak experience. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG I love when a plan comes together. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Definitely! npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Theyāve been doing that for years. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Title is now different. š npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG š«š« npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM Riga and GM @npub1dwaā¦7c52 privacy edition! š“āā ļø npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG You know you're about to read a good book when page 1 looks like this! https://blossom.primal.net/4be64a5c486ae50a6a43ac71427d5c4de1fc40d66ee183a9af42e9687948e1f1.png