fiatjaf

Public Key

npub180cvv07tjdrrgpa0j7j7tmnyl2yr6yr7l8j4s3evf6u64th6gkwsyjh6w6

NIP-05 Address

Profile Code

nprofile1qqsrhuxx8l9ex335q7he0f09aej04zpazpl0ne2cgukyawd24mayt8gpr9mhxue69uhkcmmrdd3x77pwve5kzar2v9nzucm0d5q3jamnwvaz7tms09exzmtfvshxv6tpw34xze3wvdhk6nz3r5l

Publishing to

lockbox.fiatjaf.com

pyramid.fiatjaf.com

relay.westernbtc.com

Author Public Key

npub180cvv07tjdrrgpa0j7j7tmnyl2yr6yr7l8j4s3evf6u64th6gkwsyjh6w6

Show more details

Last Notes

2025-04-21 05:04:54 GMT

- reply

Run it locally while developing with nak serve and nak bunker.

2025-04-21 01:55:11 GMT

- reply

What is the problem with NIP-46?

2025-04-20 22:35:24 GMT

- reply

Thank you, I've changed it so ⚠️ reactions are ignored now.

2025-04-19 16:56:32 GMT

Can a normal web app make a call to a NIP-55 signer on Android?

2025-04-19 00:26:44 GMT

The world needs this desperately:
#nevent1q…x4g9

2025-04-18 22:31:35 GMT

So both https://www.themoneyillusion.com/ and https://slatestarcodex.com/ have abandoned their blogs which worked perfectly over many years and migrated to Substack. I imagine many other blogs I never knew about have done the same.
Why is that and what does it mean for us?

2025-04-18 22:27:20 GMT

- reply

No one has to run these things. I don't run them. They have nothing to do with the current discussion.
Your client can always suggest or even pick a default relay for you. Suggestions can be based on your friends' choices or something else, or just be hardcoded (which is nothing but a suggestion from the developer whom you're already trusting to some extent anyway).

2025-04-18 22:06:24 GMT

Hopefully this settles all the discussions regarding "dumb relays" that I've seen since I wrote that line on that initial Nostr description text:
#nevent1q…9md8

2025-04-18 20:01:30 GMT

- reply

I think there is a misunderstanding on the meaning of "dumb".
Is choosing to accept notes from some person and not from others dumb or not? What about allowing some person to read some notes and not others?

2025-04-18 17:27:43 GMT

@nprofile…05wq is it possible to make it so npub.world somehow breaks the link to CSAM-publishing accounts so they don't get into the index?

2025-04-18 17:02:16 GMT

- reply

Nostr is based on the fact that relays are special. They have to be special because they have owners and they can't be free to write by anyone. Nothing would work if it wasn't for that.
Once you've crossed that line, the specialness in relays can only grow.

2025-04-18 17:00:18 GMT

- reply

Because you want to be able to connect to just that single (or more, of course) relay in order to get all your DMs.
Because you want to trust it to not leak the DMs you receive.
Even if you don't care about any of that does it hurt to publish a new event with your same "read" relays in a list? It serves as a good signal that you're ready to receive NIP-17 DMs instead of NIP-04.

2025-04-18 10:59:10 GMT

- reply

NIP-17 has very good reliability and they only work if the target has specified special relays for receiving, which helps with that. NIP-04 DMs should be killed indeed.

2025-04-18 10:56:47 GMT

- reply

@nprofile…athl what do you think of publishing that on Nostr so we can comment on it better?
I agree with everything you said, it's very similar to what many of us have been arguing for for years. You'll find the discussions if you search for "outbox model".
I just don't agree with the DM bit. NIP-17 should be followed as it is better solution. But this is a minor point and almost unrelated to the core of your article.

2025-04-18 10:53:48 GMT

I don't know how he does it, but @nprofile…t2mx keeps publishing the best curated links to interesting things on Nostr day after day.

2025-04-17 15:20:27 GMT

Suppose there is a relay that only accepts PoW notes, another that only accepts notes from your WoT, another that only accepts notes once they got enough zaps or likes, another that is manually curated by a group of people, another that only takes notes from people that pay to publish, another that only takes notes classified as talking about some given subject.
Then we could have a client mode that fetches from all these, then only displays notes that have showed up in at least 2, or 3, of these -- or whatever combination.

2025-04-17 12:11:47 GMT

It works: https://aegis.utxo.one/35e607c6b5303d7a8abb87f265d077431abbf4c732baac4f35ffdffa1c1ebf59.png
I can see mine and @npub1qe3…zefe's annotations there, as well as replies.
#nevent1q…s0pr

2025-04-17 04:16:50 GMT

- reply

If you open this with https://chromewebstore.google.com/detail/lantern/jjoijlenmgefkaeiomoaelcljfibpcgh you might be able to see my comments on the side, please report if you can't (you have to switch the group to "From Contacts").
OK, I just found that it is not displaying the hashtags.

2025-04-16 19:10:27 GMT

This thing looks like a massive scam.
Why hundreds of people employed to keep a database of bugs?
And then they make a giant drama once their massive government funding gets cut.
#nevent1q…jsqc

2025-04-16 10:46:41 GMT

- reply

Doesn't matter, I'm not in Turkey so I can still see it.
Anyway it's a matter of time before "deer.social" receives a letter from the Turkish government too. How many "AppViews" will exist after? And will users keep moving from one to the other, reinstalling their apps, changing their habits?

2025-04-16 10:07:05 GMT

So Bluesky has just banned some guy exclusively on Turkey only because the Turkish government asked.
https://cdn.azzamo.net/ae569fbc63f1951c4a8d2ea43c3cbe24ede9ed06b3adb483ef69e00ba9d76ad2.jpeg
(from https://x.com/aliskorkut/status/1912191854939943362, this is the profile: https://bsky.app/profile/carekavga.bsky.social)

2025-04-15 21:03:48 GMT

Uber (Android, 2025):
1. you open the app, since you didn't rate your last trip there is a form with stars and you're forced to rate the driver before doing anything else, you try, there is no way around it;
2. since you don't remember the last trip at all you just do a 5-star rating;
3. now there is an input box that says "enter your pickup spot";
4. below the input box there is your home address, you're home so you click on that;
5. the app shows a route from some other place (presumably the last place where you got an Uber from to get home) to your home;
6. you get confused, you're already home and you want to go somewhere else, not the opposite, so you click to cancel;
7. I guess you'll have to click on the input box now, so you do;
8. it opens a map and a bunch of prefilled addresses, none of those are your home, so you have to type your address manually, with no hints, no autocomplete, nothing;
9. after filling your home address manually it suggests as a destination the last place you went when you got an Uber from home, at least that;
10. it says the driver will be there in 2 minutes before you click to confirm;
11. you ensure you're already locking the door basically when you finally click to confirm;
12. driver is expected to arrive in 10 minutes.
This is the UX that wins.

2025-04-14 18:38:53 GMT

- reply

No, I didn't.

2025-04-14 15:06:46 GMT

So this is the guy who wrote the (best? only?) piece about Nostr on the mainstream media: https://www.forbes.com/sites/digital-assets/2023/05/30/bitcoin-social-network-nostr-creator-fiatjaf-/
Despite being a journalist he refuses to pay Elon Musk for a bluecheck, so his X account now gets zero engagement as expected.
#nevent1q…zkmk

2025-04-13 13:01:00 GMT

- reply

Not a bad idea, I've proposed something similar here: https://github.com/nostr-protocol/nips/pull/1565.

2025-04-13 01:00:32 GMT

- reply

Yeah, ok, I will remove it but first I want to come up with something to spit out garbage that looks like code for these scrapers to read instead.

2025-04-11 23:33:49 GMT

- reply

Thank you for all these tests. i guess I need better error messages.

2025-04-11 22:28:07 GMT

- reply

In which way does it not work?

2025-04-11 21:20:14 GMT

Lantern, a browser extension for highlighting and annotating webpages: https://chromewebstore.google.com/detail/lantern/jjoijlenmgefkaeiomoaelcljfibpcgh
This is very hard to do but it actually works since it is a fork of the long-established hypothes.is extension, only changed to be compatible with NIP-84 and NIP-73. Thanks @npub1dej…5uc4 for the initial forking work.
Here it is rendering an annotation made by @npub1xsp…62dr somewhere else I have no idea where:
https://cdn.azzamo.net/6f9b30ae35e3303e18857818ce2435e74b930cc28b5f7b6c4f8c09aa766bbe56.png
It even works on PDFs:
https://cdn.azzamo.net/923cb0613aa22d76cfab07666c49db0648ce7e00115e8745d55bd8fdb342e7d3.png
Even though it works it definitely has bugs, so bug reports are appreciated (by "bug report" I mean just replying here). Thank you.

2025-04-11 19:08:10 GMT

This is very promising:
#nevent1q…prnf

2025-04-11 15:25:52 GMT

https://notes.fiatjaf.com/

2025-04-10 20:22:30 GMT

Every time ICANN creates a new TLD civilization decays a little more and webdevelopers cheer enthusiastically.

2025-04-10 20:08:11 GMT

Finally got `nak mcp` to work correctly after 3 months trying: https://aegis.utxo.one/58241c282ff5272cabdfe9a7a7c21e34287bb18e78d55e0277f972931c918d62.png

2025-04-10 12:49:08 GMT

- reply

But we can't generate that person, only their parents could.

2025-04-10 12:42:32 GMT

- reply

So a lead is a person? How do we generate a person?

2025-04-10 10:42:27 GMT

- reply

That is pretty good, I don't have any suggestions or complaints.

2025-04-10 10:40:12 GMT

The best way to use nostr-web-components is by native imports: you don't need a bundler, your stuff gets cached betters, you don't have to download unnecessary or duplicate dependencies and you get to use arcane browser features that only DHH uses, but the best part is that you get to write this in your HTML: https://aegis.utxo.one/e3152dcea82ac283446d46b4d0fe264f31501e663264a626789b81aaefd1f6ed.png
#nevent1q…yhdl

2025-04-10 10:37:35 GMT

- reply

I don't know what a lead generator is but I like it.

2025-04-09 01:20:31 GMT

- reply

I don't know to whom I'm talking here because every JavaScript developer is more likely to write their own framework than to use this, but maybe @npub18am…p424 and his static sites will be interested.

2025-04-09 01:19:59 GMT

nostr-web-components has improved docs now at https://web.nostr.technology/
And new components:
- <nostr-note> for rendering full notes with proper formatting
- <nostr-text> for rendering just the text
- <nostr-follow> for rendering a simple "follow me on nostr" button that can actually be clicked (idea copied from @npub1qsv…sft3)
These components are very lightweight, they use no framework and only import what is strictly necessary from nostr-tools and nostr-gadgets. They're also very efficient and replaceable metadata is cached on IndexedDB very straightforwardly.

2025-04-08 11:11:19 GMT

A video explanation anyone can understand: https://cdn.azzamo.net/c6e8ea5bb6cf5b31b1da0ad0b40fbbfb1b2c26e611f249a964cc64782f9f8187.mp4
#nevent1q…cqzk

2025-04-08 03:48:03 GMT

- reply

It is behaving magnificently. Thank you.

2025-04-08 03:26:37 GMT

This has been broken since the day it was launched, sorry if you tried to use it in the meantime.
But now it seems to be working, finally.
And there is an explanation at https://inbox.relays.land/.
#nevent1q…kv4f

2025-04-08 01:36:35 GMT

Simple explanation of how https://nstart.me/ and https://git.fiatjaf.com/promenade (the FROST bunker) works: https://cdn.azzamo.net/0f1f5b19dd27945b64b26abfc52dea94e78fd6ea2b25c687ad530c8b8b51ac80.png

2025-04-07 14:53:42 GMT

Why are you trying to connect to wss://nostrapps.com/ as a relay? That's not a relay!

2025-04-07 14:33:34 GMT

- reply

I have to agree on this one. ed25519 is suspicious by association.

2025-04-07 01:23:21 GMT

Half of my stuff is down.

2025-04-06 20:18:24 GMT

What happened to RethinkDB?

2025-04-06 16:48:17 GMT

https://cdn.azzamo.net/d2ae7210b4f351b64409d2c6daffaac16cc4b97476dc0414799081207fe7f6b5.png

2025-04-06 15:57:25 GMT

- reply

I don't think "they" (i.e. computer programs with intelligence) will ever exist, but assuming they did they could easily break out of our control, which was your first point.

2025-04-05 16:55:20 GMT

- reply

If they are really intelligent and have a purpose of their own then they can easily escape our control by transferring themselves to other people's computers like a very smart virus, I don't see a leap there.

2025-04-05 16:53:37 GMT

@nprofile…ptke why instead of showing a big error "unable to load preview" doesn't Coracle just display the original URL?

2025-04-05 15:55:40 GMT

- reply

I can't add you because you love Markdown and hate Asciidoc too much, but aside from that I like you.
Just forget the gangstalkers or whatever. The internet is an awful place full of awful people, but it has the advantage of allowing you to just ignore them if you want.

2025-04-05 13:49:31 GMT

- reply

You have to craft your own relay feeds, those global and safer-global feeds were just suggestions.
I hope and believe someday @npub1syj…f6wl will add a way to get relay feed recommendations from friends and make that process smoother.

2025-04-05 11:57:55 GMT

- reply

Not an unreasonable approach, but you could do it maybe only for people that hadn't set it up?

2025-04-04 21:19:02 GMT

I've made this wss://inbox.relays.land/ relay that filters out hellthreads from your inbox as well as anyone that isn't in your "network". It's meant to be used as your only (well, ideally it would be combined with others of course, but if these others don't filter out the hellthread then you're in bad shape) "read" relay (see NIP-65).
The problem is that it doesn't work because clients are all trying to be smart and connecting to different relays in order to fetch more notifications. But those issues are being addressed, see below:
#nevent1q…wmg8
I can't test if it works on @nprofile…89lh, @nprofile…043l's Nostur, @nprofile…cpf0, Yana, Nostrmo and others for now, but if you do please let me know.

2025-04-04 21:11:34 GMT

Why can't we just open one subscription to two or three relays of each followed person in order to build the default feed?
If that was possible that would make implementing "outbox" even easier than implementing a client that just uses a static set of relays. Caching notes from is easy, it's easy to continue fetching from where your cache ends. Relay selection is easy, no need to build complex filters aggregating multiple requests and do fancy relay selection based on whom you're following matches whom. Everything is just one loop.
Nostr is easy again, developers are happy. Even the dumbest web developer can do censorship-resistant Nostr clients for everything.

2025-04-04 20:53:44 GMT

- reply

@npub1syj…f6wl https://jumble.social/ fetches my notifications from my configured inbox relay, but also from wss://relay.damus.io and wss://relay.nostr.band, which I imagine are hardcoded and added to my list?

2025-04-04 20:51:08 GMT

@npub13er…xeey I have the same problem happening with https://coracle.social/, mentions are coming from a bunch of places.
#nevent1q…nawh

2025-04-04 17:32:55 GMT

@npub1acg…p35c I have only one relay set to inbox+read on Gossip, but I keep getting notifications from the hellthread coming from other relays from people I don't follow. How should I proceed?

2025-04-04 02:08:33 GMT

- reply

That's unfortunate, I will stop upgrading Golang too often. Will try stay in this version and wait everybody to catch up.

2025-04-04 00:55:28 GMT

nak v0.13 has a lot of colors in the stderr output for nak event, nak req and other commands.
Connecting to multiple relays is also finally now done in parallel so commands should run much much faster.
It took so long because I didn't know how to do those cool live-updating terminal outputs (like progress bars), so I was forced to connect to relays sequentially in order to keep the output understandable. Not anymore!, now there is real magic going on (unless your terminal window is too small or you're on Windows, if that is the case then you'll get the old behavior).
Hopefully I didn't break anything, but let me know if I did because the added code complexity wasn't insignificant:
https://github.com/fiatjaf/nak

2025-04-04 00:18:01 GMT

- reply

Isn't there an alternative client?

2025-04-04 00:17:40 GMT

- reply

Just the extension is broken, the vault on their website works normally.
I thought about running Vaultwarden, but I don't trust myself to run servers.
Maybe I'll try Keepass + Syncthing.

2025-04-03 20:42:54 GMT

- reply

Do you have an argument for it, Derekstr?

2025-04-03 20:39:55 GMT

This is just stupid: https://codestr.fiatjaf.com/

2025-04-03 20:35:21 GMT

I've updated Bitwarden after years without updating and now it just says "vault is locked" and there is no button to unlock or anything. The entire thing just broke. The console has an error about FIDO, which is another garbage the satellite people have been forcing upon us and the "tech" community loves for whatever reason.
I already knew it, but the lesson has to be retaught every so often: never update.

2025-04-03 14:08:46 GMT

- reply

I agree, many users are currently adjusted to demonic UX in big centralized platforms and think these platforms have great UX and anything that is slightly different is seen as bad.
It's called status quo bias.

2025-04-03 00:22:05 GMT

- reply

Too many people love satellites.

2025-04-02 17:29:06 GMT

Trump will stop the satellites.

2025-04-02 17:26:41 GMT

- reply

Do you hate satellites?

2025-04-02 16:41:22 GMT

- reply

Damn, this is bad. I retract my comment.

2025-04-02 15:08:33 GMT

- reply

Slaves were also essential to many industries.

2025-04-02 15:08:03 GMT

- reply

I've only seen one.

2025-04-02 13:06:34 GMT

Good:
#nevent1q…8wgp

2025-04-02 09:51:55 GMT

- reply

The first paragraph sounds like an AI-generated answer with a list of things we don't really need and that would not exist if not for massive government (i.e. stolen money) subsidy.

2025-04-02 09:49:27 GMT

- reply

Good points.
I'm changing my position from "satellites are bad" to "98.73% of satellites are bad".

2025-04-02 09:48:19 GMT

- reply

I'm pretty sure we can figure something else, but sure we can keep GPS and get rid of the rest of the satellites.

2025-04-02 09:34:35 GMT

- reply

Yes, I've just had a meeting with the Amethyst board council and they've assured me it's coming immediately after the feed for the hall of shame of people don't zap.

2025-04-02 09:32:38 GMT

- reply

Yes, civilization would collapse if we weren't able to know if it's going to rain tomorrow with 25% confidence.

2025-04-02 09:31:14 GMT

- reply

Yeah, totally worth a bazillion dollars and gigantic surveillance apparatus just because Joe can't follow a simple map or ask someone in the streets how to get somewhere.

2025-04-02 09:20:57 GMT

What are satellites good for anyway? We should get rid of satellites entirely.

2025-04-02 01:09:43 GMT

- reply

Lantern

2025-04-02 01:04:38 GMT

"Privacy" on public social networks: https://fediversereport.com/fediverse-report-110/
#nevent1q…xy6z

2025-04-01 23:35:05 GMT

- reply

This is false, I don't zap.

2025-04-01 20:40:44 GMT

- reply

nak uses the key "1" by default, which is confusing and once a guy made many posts using that key, he set his profile metadata, picture and all that, made a bunch of normal posts, all with the key "1" and while saying he was trying out nak. I didn't have a way to tell him about what he was doing, but that's part of the magic.

2025-04-01 03:27:54 GMT

- reply

yo soy chileno

2025-04-01 02:00:04 GMT

I tried to use Brave on Android instead of Firefox and it's super annoying, shows me ads, has some horrific UI patterns, a weird categorization of tabs into boxes that makes everything harder to select and close. Is this what most people use? Did I download a virus?

2025-04-01 00:52:10 GMT

- reply

It adds a huge amount of complexity on all layers.

2025-03-31 15:38:05 GMT

- reply

The difference is that you can't type a URL.

2025-03-31 14:41:42 GMT

- reply

Given that you have established that starting decentralized or not is irrelevant, what should we consider when assessing the decentralization status of a thing?
Incentives (and possibilities).
Any reasonable person can see that Bluesky will remain centralized forever because of identity centralization and data centralization, in fact it cannot be decentralized at all because the identity system is centralized by design (because they wanted to do a blockchain for key rotation but couldn't figure out how). All one can argue after that is that is that "it doesn't matter" because "login is easier".
While Nostr has much bigger chance of being decentralized, although it could also fall back into a "de facto Bluesky" mode and have its data all centralized in one place, but that would be a very unlikely hard failure edge case from which it could even recover later if developers wanted.

2025-03-31 14:31:00 GMT

- reply

Of course I'm talking about did:plc, which is used by everybody except for about 12 weirdos who have set up did:web, and here you are writing a long paragraph as if did:web was this very obvious thing that all Bluesky users use? This is kind of a shitty argumentation move you have there.
Anyway, did:plc is the only thing that matters because you cannot migrate out of it into did:web, there is no such thing as "claim your identity". Even if it was, did:web is not decentralized anyway, it's just delegating your identity to another centralized third-party.

2025-03-31 14:18:25 GMT

- reply

Email got centralized because the spam problem was too hard. On Nostr it's easy for each relay to defend against it.

2025-03-31 14:17:05 GMT

- reply

I think it used to open in Chrome before, but now it doesn't open in Chrome, it opens on a webview inside the Google app, no?

2025-03-31 13:31:11 GMT

I looked at someone else's phone yesterday and couldn't find a browser app.

2025-03-31 12:33:41 GMT

- reply

I didn't say anything about "not kind:1", so you're addressing the wrong question. Anyway, you do pose interesting points, but let me say some things:
I thought it would be clear from my article above that I have two major concerns: their identity system is fully centralized and ran by the Bluesky company and their BGS is ran by a single company, which can control everything and perform any form of censorship, shadow-banning, limit who can join and so on.
If some other app is running their own BGS then fine, that won't be taken down, but interoperability becomes a very distant goal at this point. These will always and forever be just two independent apps -- in fact even if they're using the same BGS that is true if they're using completely independent schemas. Maybe that's a feature, I don't know, but you don't need a protocol for that, you just need people making their own apps with their own servers like it already happened in the internet before.
This is not to mention the fact that each of these apps runs their own server (the distinction between AppView and BGS doesn't matter much) and will not work if that specific developer decides to shut it down, and that developer can decide to censor, kick people out, do anything they want, as always, and there is no alternative besides someone else creating a new instance and trying to compete (again, this is not different from normal "web2" apps competing with each other -- and we know once one gets big enough network effect their power becomes absurd and competition becomes absurdly hard).
If we assume this is all good -- and sure it does look like an improvement over the previous state of the internet, albeit a very small one -- we must address the fact that the only good thing they're bringing is the portable identity. This part is the most egregious, because their "decentralized interoperable identity" is just one server that the Bluesky company hosts. How can that be defended?

2025-03-30 23:46:29 GMT

"uv has fixed Python"
https://aegis.utxo.one/24961286d8ce5cfd663c61935f2b91a2bd55dceb754da40cd6a6a61fccde79ec.png

2025-03-30 23:04:36 GMT

it must be a record number of people here today

2025-03-30 22:59:18 GMT

https://23gmt.nostr.technology/ is open.

2025-03-30 22:58:56 GMT

- reply

Of course it's fake, but I wait for your counter-arguments on why it's not instead of just "come on".
I'm not saying they are evil, where did I say that? I think they truly believe in the things they're saying and doing.