Martti Malmi

developing iris.to

Public Key

npub1g53mukxnjkcmr94fhryzkqutdz2ukq4ks0gvy5af25rgmwsl4ngq43drvk

NIP-05 Address

Profile Code

nprofile1qqsy2ga7trfetvd3j65m3jptqw9k39wtq2mg85xz2w542p5dhg06e5qpp4mhxue69uhkummn9ekx7mqpz3mhxue69uhhyetvv9ujuerpd46hxtnfduhmnq3e

Publishing to

nos.lol

relay.damus.io

nostr.fmt.wiz.biz

Author Public Key

npub1g53mukxnjkcmr94fhryzkqutdz2ukq4ks0gvy5af25rgmwsl4ngq43drvk

Show more details

Last Notes

2025-04-09 12:01:07 GMT

- reply

and metadata should probably be in tags, not json-within-json in content

2025-03-31 13:00:46 GMT

#nevent1q…gxy9
I was thinking of doing this in Finland, but then you'd be a money transmitter and probably have to do KYC, which trashes the UX and defeats the purpose.
Setting up BTCPay Server or https://opennode.com for my favorite online stores might be a better way to make them accept bitcoin. Help them with bitcoin storage, exchange and accounting. The EU kindly doesn't yet require KYC from them.
What would be even more rad? Crawl online stores onto Shopstr, let users send orders that are paid in Cashu. Notify merchant of pending orders and let them redeem the nuts. User can reclaim the payment if merchant did not respond.

2025-03-30 10:06:28 GMT

Is anyone working on AI agents that can order stuff from any online store that takes credit cards, and you would pay the agent in Bitcoin? I think there was some company in Poland that does this manually.

2025-03-29 19:46:33 GMT

Briar: "Censorship-resistant peer-to-peer messaging that bypasses centralized servers. Connect via Bluetooth, Wi-Fi or Tor, with privacy built-in." https://briarproject.org/
Would be cool to have bluetooth & wifi sync on native Nostr apps. Would be useful in offline situations and countries where the internet is censored.

2025-03-15 08:59:43 GMT

Eivør & Heilung in Helsinki last week https://video.nostr.build/3f7743986a99bbd7becf1830ef82bca9b3e61458217fcb6d404021a91975967d.mp4 https://video.nostr.build/77a1e2e6a19b7373bc3e4827dff55de2f834e1e7cd20ac04a169fd874e7ddc12.mp4 https://video.nostr.build/3073b53c630a66d84071f2d7a09aeef6db245c65f2d8c5244da8d1d60c747387.mp4 https://image.nostr.build/4f2c15c6c370c93700589c8b49cc9900caed14b1ead6ced6c8cd9d36986010ce.jpg https://video.nostr.build/53a40ae19ab1259ab2b58aafdbf7301b8feab97213df03bf4cee98020cffcac1.mp4 https://video.nostr.build/d7e79b02c3a76c6a32d12cac9042e099937f8c32e227dd58aff78a0e6878bd4d.mp4

2025-03-01 13:07:53 GMT

https://image.nostr.build/d8042bbd2caf45678003214f9c68a572b9e02333ba54d166741cabc75be58103.png
Double ratchet tests passing in my Damus fork. Yet to properly hook it into Damus UI and event system. https://github.com/mmalmi/damus/tree/doubleratchet/damus/Models/DoubleRatchet

2025-02-27 18:54:31 GMT

Double ratchet NIP — Signal style DM encryption on Nostr. Deployed on https://iris.to
#naddr1qv…hejc
Double ratchet invites:
#naddr1qv…daur
Github PR https://github.com/nostr-protocol/nips/pull/1813

2025-02-26 14:26:12 GMT

- reply

True. Iris alleviates it by showing a checkmark based on social graph distance and hiding users that are not in your social graph at all.
However, that doesn't prevent someone in your social graph from changing their name and avatar to impersonate someone else.
Nip05 doesn't prevent that either, unless you notice the discrepancy between their nip05 and other details.
One solution would be that users publicly record the name and other details of other users at the time of follow. The details recorded by yourself and people you trust would be shown, even if the user changed it to something else.

2025-02-26 09:03:39 GMT

- reply

MLS also rotates keys after every message?

2025-02-24 12:47:13 GMT

- reply

Double ratchet rotates message keys after each message, so previous consecutive messages from the same author become undecryptable, when the previous message key is discarded after decryption. It's a small difference, but it's good for disappearing messages.

2025-02-24 09:27:50 GMT

Double ratchet messaging is deployed on iris.to. Try sending me a message at https://iris.to/sirius ! Thanks to Human Rights Foundation for supporting the project!
https://image.nostr.build/916a9511040129752750c3e33a334aa1a773a6985dc5c4d0890ff1779ade2a1a.png
https://image.nostr.build/2f7304813b3b002dd9d04e04db4b70969854192515d649399dae53bfe6bc768c.png
https://image.nostr.build/de549a76939bb38ffd06f6a4d788e54bd573d7804d181c018d0182e0adac6077.png
"Add to home screen" on iOS to enable push notifications.
The point of double ratchet is 1) hiding message metadata (who you're messaging and when) and 2) keeping your past and future message history safe in case your main Nostr key is revealed.
I'll write a nip for it. Basically it's Signal's "double ratchet with header encryption", but using Nostr keys instead of symmetric header key rotation. The algorithm is not too complicated. https://signal.org/docs/specifications/doubleratchet/
Typescript library, only uses cryptography from nostr-tools. https://github.com/mmalmi/nostr-double-ratchet
"Public invite" on your "new chat" page is published on Nostr. It's used when you first send message at someone's iris.to profile. Initial message to public invite is from anonymous sender, but publicly visible. From thereon, keys are rotated and stay hidden. "Private invite" is not published, so it's more private when shared over QR code or other channel.
Sometimes the chat sessions stop working at iris.to, probably it's incorrectly saving an old version of the ratchet session state. Working on it.

2025-02-11 11:47:30 GMT

Nostr-double-ratchet tests finally passing. Both ratchets should be working now, but don't take my word for it 😄
Signal-style 1-on-1 chat encryption in ~200 lines of typescript. Now just need to make it work again on iris.to and then other clients. https://github.com/mmalmi/nostr-double-ratchet

2025-01-22 07:59:16 GMT

https://image.nostr.build/c2e3c6b2a23b476d01a5725c9ade8f0d0a033a089a82581d91f83c51f713ea4b.jpg

2025-01-03 14:02:11 GMT

- reply

This would be useful at conferences where the internet can't handle 200 simultaneous GM posts to Fiatjaf.

2024-12-31 21:03:32 GMT

- reply

You can always use a desktop or mobile client if browser clients don't work for you.

2024-11-19 09:01:01 GMT

- reply

Unfortunately browsers won't let you connect to insecure ws / http from a secure https origin. We could do a Tauri desktop version of Iris to bypass that restriction.

2024-11-19 06:54:04 GMT

- reply

Yes, nearly every house and many large apartments have a sauna. Then there's hundreds of thousands of summer cottages.

2024-11-18 07:33:04 GMT

Always wanted to visit Finland, the land of 5 million people and 3 million saunas? Now’s the perfect chance.
BTC HEL, the largest Bitcoin conference in the Nordics, will take place in Helsinki for the first time on August 15–16, 2025.
Join us in orange-pilling Finland before the anti-crypto narrative has a chance to catch on, like it has in other Nordic countries.
We have a positive and true story to tell: Bitcoin can make even renewables more profitable and balance the power grid. In the North we can use up all the excess heat. All the while, sound money fixes short-sighted fiat culture.
Please DM @npub1w2e…pmgp or email [email protected] if you’re interested in speaking! Flights and hotel are covered for speakers.
Tag the people you’d like to see there!
Sign up for the mailing list to know when the ticket sales begin: https://btchel.com
https://image.nostr.build/fd016e6c41a5010cdeeae1eeee5066a35d38db7b240ba04c946a9d5520df8bba.jpg
https://image.nostr.build/1192f7cc27b490ede3286160769996f12d1dd8687830a461cf9eea01f52a7dd4.jpg

2024-10-30 06:43:15 GMT

Sorry, I had introduced a bug to tags, should be fixed now.

2024-10-28 11:49:56 GMT

- reply

Toxicity 🔥
https://video.nostr.build/1d605c049c58762159fe48e99b96d75fc67ea4cf11c6128067d37c6db763592c.mp4

2024-10-14 08:00:01 GMT

- reply

We should have had @npub1l2v…ajft on stage to boost our energy 😄

2024-10-14 07:42:44 GMT

- reply

I mentioned it later on the panel: building applications that move money and taking a cut of them, even if it's a voluntary donation that's enabled by default.

2024-10-13 19:21:23 GMT

Random dev thoughts: Would it be a good idea to do an open source web push notification server for Nostr?
It could have fine-grained options for what notifications you want, from whom and how often.
It could be used automatically in the background by a client, or through its own web UI. Clicking the notifications would redirect you to the client of your choice.
It would be a lot like a relay in that it needs to match incoming events to a potentially large amount of subscriptions. Subscriptions would be persisted in a database and maybe managed over a REST API.
In addition to the stuff typically sent over Nostr, you need to send the subscription object and other things like notification frequency, maximum social graph distance or score, minimum zap amount to notify etc.
It would connect to other relays and maybe also have a websocket endpoint for receiving events over Nostr protocol.
Extending strfry into this direction crossed my mind, but maybe something like Django (or whatever web framework you're familiar with) would be better, as we need to persist the subscriptions.

2024-10-12 07:24:39 GMT

- reply

It's a step in the right direction, but it still reveals the recipient and doesn't do key rotation, so all your message history and future messages are revealed if your main Nostr key is ever compromised. It's a tradeoff between security and availability. I'd personally choose Signal-style key rotation.

2024-10-11 16:09:48 GMT

- reply

What would this attack look like in practice, against Signal for example?

2024-10-11 08:10:54 GMT

- reply

No, we use temporary keys that are rotated and only live on device. Main key is only used for authentication on the first key exchange.

2024-10-11 03:37:48 GMT

- reply

We can use temporary npubs that are not linked to long-term identities and rotate them all the time. Iris.to messages already do that. The code is here: https://github.com/mmalmi/nostr-double-ratchet

2024-10-11 03:25:39 GMT

- reply

That's easy to do on Nostr with secure messaging protocols like double ratchet and probably MLS. Just add "create anonymous chat" in the UI.
It's just that relays can probably figure out who you are if you also make other Nostr requests. Maybe need a different client and relays if you want to avoid that.

2024-10-11 03:18:20 GMT

Secure DMs and groups might be how Nostr wins. Like Signal, but better: no phone number or centralized service provider needed. Actually there are no publicly visible user IDs involved, so in that regard it's similar to simplex.chat.
Unlike public messaging, DMs do not depend on the network effect. Great for onboarding people and keeping them returning with push notifications. They get a bitcoin wallet, zaps and all the other Nostr greatness on the side.
Many people don't want to let go of their existing follower base on X, but "Nostr DMs only" is easier to do. I could imagine that becoming a thing in the Bitcoin scene at first.

2024-10-10 12:09:05 GMT

- reply

Can MLS be done using only nostr-tools primitives like DH and hkdf?

2024-10-10 11:59:12 GMT

- reply

I’ll definitely look into MLS

2024-10-10 10:14:07 GMT

- reply

This is right next to the conference venue, which is a beautiful old brick building

2024-10-10 10:12:29 GMT

Got a bit awestruck again by the combination of natural beauty and a city built for humans by all the generations before us. We need a renaissance of beautifully built environments.
https://video.nostr.build/c83e3e13ed65932f234e1107e305724d1309ca15bc20087135bdbee1ffdae5de.mp4

2024-10-09 15:41:34 GMT

I'm at Bitcoin Amsterdam, but spent half the day finishing some Signal-style double ratchet messaging.
Deployed an experimental version on https://iris.to. You can create chat invite links and give them to friends via QR or other messaging. The UI is still lacking and glitchy, but just had to demo at the conference.
The chats cannot be publicly linked to either participant, and even if your main Nostr key is revealed, the content and existence of past messages stays hidden.
https://image.nostr.build/b4533acd973793f7114fd5c272ccd5b5045ea0bd127c214e8314fc4c8282a354.png
https://image.nostr.build/ded8c0437548cb1359d34b43b966b64f798cd2f98ae5f859771f47cc551cd5bd.png
https://image.nostr.build/4458f2de8f4d424aff137d2d7ed283dd27501e1abc0a43234405008614a5cb70.png
Also published npm package nostr-double-ratchet 0.0.1: https://www.npmjs.com/package/nostr-double-ratchet
It's not actually double ratchet yet, but the single ratchet already achieves forward and backward secrecy.
The second ratchet would help secure the latest consecutive messages by same author, in case a message key for the most recent of their messages is compromised. That makes disappearing messages or manually deleted messages more secure. I guess we'll have to do it so we can say "Signal-level security".
This is obviously not tested or audited yet, but probably it's not worse than normal Nostr DMs 😅
You can take a look at the source code, but I'll write a better technical description later. It's using existing Nostr cryptography + some key derivation stuff. Chat invites use gift wrap -like arrangement addressed to the inviter's temporary session key. https://github.com/mmalmi/nostr-double-ratchet

2024-10-07 05:06:51 GMT

- reply

Seems there's no whitespace before the url, so other clients interpret the leading part as part of the url.
Maybe Iris shouldn't highlight urls that don't have leading whitespace or linebreak, so users notice in the editor that something's wrong. (I actually used to have that check in my regex, but that broke other things in the library I used.)

2024-10-06 18:49:54 GMT

- reply

I believe we'll always have JSON for simplicity and backward compatibility. Simplicity is indeed important, it's why Nostr attracted developers. I don't think opt-in binary format supported by some clients and relays can break that. We already have many nips not supported by everyone.

2024-10-03 09:33:51 GMT

- reply

Unfortunately, yes. The wallet is hosted on the same domain (iris.to), but it's a separate application running in an iframe. I haven't integrated it on the actual Iris side yet.

2024-10-02 07:47:16 GMT

@npub1h0u…rwx8 do you have a spec for the double ratchet protocol you're building?

2024-10-02 04:57:19 GMT

Fixed it for you
https://image.nostr.build/17202defe2d4295a3fd83b7bb4bbc3b982a724e14f940d35e05c8174e1c9ec33.png
Upload is fast, but nostr.build takes some time to check the image and return the url
https://image.nostr.build/1cc298a7cce6d0519962f410fc1be085d1c9e3d24a743009e920865c1edbd82f.png
#nevent1q…6wzz

2024-09-30 17:50:05 GMT

- reply

They're separate codebases again. Iris uses NDK and Snort uses the Snort system (also available as a library).

2024-09-30 16:31:55 GMT

Added to https://iris.to and https://graph.iris.to the option to download a large pre-crawled social graph with 161K users and 5.25M follow relationships.
https://image.nostr.build/c937f408d0543e06c86ae4df700d3ead8e61122c53fe7d1c54e3bb7382c487a4.png

2024-09-28 06:56:12 GMT

- reply

What attack does the symmetric ratchet protect from? If your device is compromised, your message history will be revealed anyway.
Maybe it would help in the case when you locally delete earlier messages in a chain ("disappearing messages" or otherwise) but they're still on relays.
Maybe I answered my own question, but is there something else besides this?
Why not more difficult? Implementing DH + symmetric ratchet is more complexity than just DH.

2024-09-28 03:33:32 GMT

- reply

Social graph is not just the people you follow (1st degree), but also people they follow (2nd degree) and so on.
Currently Iris loads up to 2nd degree by default. There's also a tool for crawling up to 3rd degree, but it consumes a lot of bandwidth and cpu. 2nd degree was 20K users and 3rd degree 160K users in my graph, so there's plenty of diverse voices.
Optionally we could show posts from unknown users who have a nip05 (e.g. [email protected]) from a bot-resistant provider. In a permissionless system like Nostr, we will always need to limit write access somehow or it will be filled with spam.
https://image.nostr.build/1407ad9d130088eceff4a8f1d73dc4f546237b47db170c8f48313d38839695eb.png

2024-09-27 13:35:24 GMT

Added a tool for crawling the follow lists of your friends-of-friends. My graph of 160K users and 5M follow relationships is 36 MB on disk.
https://image.nostr.build/1407ad9d130088eceff4a8f1d73dc4f546237b47db170c8f48313d38839695eb.png

2024-09-27 09:28:15 GMT

- reply

I made the borders rgba(255,255,255,0.2) in Iris theme

2024-09-26 07:50:03 GMT

- reply

On the relay side, maybe allow nip-42 authenticated users to push gift wraps (where event.pubkey is not the authenticated user).
On the client side you need to process all incoming gift wraps and only check WoT after unwrapping. That adds some spam processing overhead unless you only connect to WoT relays.

2024-09-26 07:39:47 GMT

- reply

How do you make gift wraps work with WoT?

2024-09-24 04:31:14 GMT

- reply

I was thinking about bitcoin mining style PoW which some have suggested, but actually I'm concerned it might hinder normal users more than spammers. There was a PoW-based anonymous reddit once, but it was filled with spam. https://github.com/notabugio/notabug

2024-09-23 17:46:25 GMT

- reply

It's best if they can be introduced by someone, or get noticed by zapping.
Secondarily, messages from users who have a nip05 from a bot-resistant provider like iris.to, or provided a sufficient proof-of-work, could be scored higher, at least within the "messages from unknown users" pool.

2024-09-21 02:46:12 GMT

- reply

Test

2024-09-18 14:04:36 GMT

Should I use nuts.cash @npub1wun…qhq8 instead of cashu.me as the integrated wallet in beta.iris.to?

2024-09-18 13:16:23 GMT

- reply

for clarity 🐒
purple: you and your follows
orange: followed by at least 10 users you follow
gray: followed by at least 1 user you follow

2024-09-16 08:32:57 GMT

- reply

Yes 👍

2024-09-14 15:26:25 GMT

Added cashu.me wallet to https://beta.iris.to . When you sign in as a new user, you're all set to send and receive zaps without configuring anything. It sets [npub]@npub.cash as your lightning address.
Haven't implemented zap button send via cashu yet, but you can copy the zap invoice and pay it in the wallet.
https://image.nostr.build/46587e9d2fc0725ca2e1c00f2850fc8b3f2c248de797e3115a9be2803183f664.jpg

2024-09-13 14:20:25 GMT

Is there some way to receive normal zaps to a cashu wallet?

2024-09-10 07:56:31 GMT

Check out https://new.iris.to for a ReplyGuy-free Nostr experience. When logged in, it hides replies from people who are not in your social graph. You can display the hidden messages by clicking on the button underneath.
https://image.nostr.build/62e5c3558a5e73ccf98611f16cc3b726b9d431e213f33d3cc32e81e066bbd524.png https://image.nostr.build/20e354fe8bdf1a17d3b157d9e8267b8d4888e2af511fb5b93ee0e9e127748b5d.png
https://image.nostr.build/49f1ee71224925bc0804ff525271e94b21e657c21f1cb7635bc18153447c50c3.png
There's also "Adventure" feed for showing all notes from your social graph:
https://image.nostr.build/0d754b8223e03ab64dde6e9368b69bc51e6d18835dc31d94f8f4d1cd19eda17a.png
I have worked on it together with the Nestr "decentralized GitHub" team. Nestr frontend and Iris are built from the same codebase using build configuration options for different branding and features. You can easily extend the configuration to make your own branded version. Source code to be released soon™.
The client is based on NDK. Full SocialGraph up to 2nd degree is downloaded on first login, and thereon only missing follow lists are queried. I'll be experimenting with options to go beyond 2nd degree.
The graph is serialized and saved locally in a compressed format, which is much faster to load than it is to reconstruct the graph from Nostr events. My graph consisting of 260 follow lists and 23000 users is 3 MB on disk.
It's still very much work-in-progress and mostly tested on desktop Brave, but it's already my favorite way to browse Nostr.

2024-09-06 16:43:37 GMT

- reply

We discussed this today:
#note1cw6…9w85
tl;dr: I would use zaps or invite codes to onboard unconnected newbies. Storage and bandwidth are limited, so it is not possible to allow unlimited write access to everyone. As Nostr becomes more popular, any spam opportunities will be exploited. Regexes, IP rate limits, PoW are just band-aids that can be circumvented.

2024-09-06 07:37:30 GMT

- reply

Push towards inevitable spam-prevention such as web-of-trust score

2024-08-03 07:43:59 GMT

I wrote this in junior high school. The teacher didn't appreciate it, and I had to write a new one. https://image.nostr.build/d1afb3b760a8c8ef417c2b506f42e8fd6cbc998c30bda6fe7cf775a27e5c1eab.jpg

2024-06-19 11:57:34 GMT

- reply

I am your burger man
https://www.youtube.com/watch?v=XJP8wVoTufg

2024-06-11 11:30:28 GMT

- reply

Iris / Snort show a purple checkmark badge for users you follow, orange for users who are followed by at least 10 users you follow, and gray for users followed by at least 1 user you follow. One more improvement would be saving the followed user's name at the time of follow, and showing it (with an asterisk like Discord petnames) even if the user changes their name. That would further help prevent impersonation.

2024-06-06 20:07:07 GMT

Follow distance indicator (checkmark) helps, but maybe we should save the followed user's name at the time of follow into our own follow list.
https://image.nostr.build/209d251817ddd1f63b971ed550f2822b5f9f0f06266e227bcd3efb0a0818fa7b.png

2024-05-22 11:01:19 GMT

Celebrated Bitcoin Pizza Day at the cryptoanarchist haven Paralelní Polis, Prague. Privacy and scaling were the hot topics of discussion. Prague, a former capital of the Holy Roman Empire, is the most beautiful city I have seen. Vast areas of centuries-old architecture just go on and on. ‘Awesome’ is the proper term here. It makes you feel connected to the generations before us and part of something bigger than yourself, something that is worth preserving. I will be back soon for BTC Prague. https://image.nostr.build/15914b35d0812d1f7ea4d0484772354e448b87e2220361e45f754c3c7f61c8ba.jpg https://image.nostr.build/73ebf3f0288d5cd56eb4bb6deca6e43b92f86a48cce375862e41e306ab44176c.jpg https://image.nostr.build/04b143e3a624a5f51f473172e5d178235efa1f36ee994b62b85a4fb07e025f4b.jpg https://image.nostr.build/9a2edf2c0df736126712f157bef85f99ca1b2c64087ada56cd4bed40393dd150.jpg https://image.nostr.build/96892f6d0ee57ea34f765cdbe551cc9ec50e4de05b1e99b547eaae183271ac35.jpg

2024-04-24 07:45:05 GMT

We have new stuff. Not much tested yet, so feedback is welcome:
1) Iris Docs — https://docs.iris.to
Proof-of-concept collaborative text editor and simple canvas on Nostr. Recently also added a chat, so might rename to Iris Apps?
https://void.cat/d/Po8kXtpo116x3enNczizPP.webp
2) IrisDB — https://github.com/irislib/irisdb
Extensively used by Iris Docs. Tree-like data structure on Nostr.
Build wikis, marketplace apps, games and other decentralized applications where users can choose whose edits they want to see (e.g. followed users, extended social network or specific group).
Enables science fiction stuff like deleting & unliking posts, or editing a user profile or list of users without risking overwriting the whole thing with an out-of-sync version.
Use a filesystem-like interface to create all kinds of applications on Nostr without having to define obscure event kinds for each purpose.
Has simple & powerful useLocalState and usePublicState hooks for React applications.
3) npm create iris@latest — https://github.com/irislib/iris-docs
A template that quickly gets you started with Nostr & IrisDB web application development. with dev tools and basic components like login, settings or avatar. Built on Iris Docs — remove the parts you don't need. Decentralize everything!
https://void.cat/d/DeLzMtoFj2TgHXQVvvGsPV.webp

2024-02-26 18:35:43 GMT

Do you have experience quitting caffeine? How long did it take to get back to baseline?
I've been without caffeine for 2 weeks. Mood and motivation are not back yet.
Wanted to sleep better and have a regular heartbeat. Feeling more calm now, but I'm not sure if this is worth it 😄 I've developed a deep association between coffee and coding over the years.
https://void.cat/d/TDumpmUZzbnkA257FHi165.webp

2024-02-23 04:40:31 GMT

My email correspondence with Satoshi in 2009-2011: https://mmalmi.github.io/satoshi/

2024-01-15 20:50:23 GMT

- reply

Iris / Snort is actually using the outbox model (by @npub1v0l…qj49 ) so yes, incoming duplicates in queries by author would probably not see a 90% reduction, but maybe some other queries like reactions and replies would.
However, the bigger savings arise from having a local db and not having to download events you already have. Efficient sync protocols like negentropy let your local relay sync with as many relays or peers as you want at a low cost, which is good for decentralization.
While the outbox model helps break out of centralized relays, it's even better if the content can be found and synced from many places, including our pockets. If Alex Jones had public write relays, they'd be targets for DDoS and harassment.

2023-12-23 20:14:19 GMT

Anyone had issues with NDKCacheAdapterDexie? Tried using it for loading of profiles in Iris but cpu and memory usage went through the roof. NDK worked fine without it. @npub1l2v…ajft https://git.v0l.io/mmalmi/snort/src/branch/ndk

2023-12-15 08:45:21 GMT

When Nostr gets reasonable DM privacy and groups, even normies can use it as one of their many messaging apps, no problem. Push notifications keep them returning. Great way to onboard people onto Nostr and Bitcoin.

2023-12-14 12:32:17 GMT

- reply

This is from desktop, but both should work. On Brave I had to enable Google Push Services and on iOS I had to enable Safari notifications and add iris.to to the home screen.

2023-12-14 08:10:00 GMT

It's a bit of a turnoff that many people who advocate for carnivore diet and healthy lifestyle are selling or marketing dietary supplements. Joe Rogan, Mikhaila Peterson and Paul Saladino come to mind.
Apparently it's a scalable money-making machine for famous people. Supplements are also not natural, necessary or good for your stack of sats. They should just sell t-shirts or join Nostr for zaps instead.

2023-10-14 11:19:34 GMT

@npub1xts…kk5s @npub1h50…rqev @npub1yn8…6pzj @npub1pfe…elvf @npub1w8r…h663 @npub1gcx…nj5z @npub1ewe…uqlw @npub1h69…z27a @npub1000…vwqk @npub1k97…z7te @npub1uvl…q3sd @npub1vxd…rs50 @npub1qex…82qk @npub19v2…8kdv @npub1mm0…nm32 @npub1y25…dgut : unfollow @npub16yh…sv37 please

2023-09-01 13:19:59 GMT

https://cdn.nostr.build/i/fdab0c647d3a066bb2dcd9df75d106014f3c1b5f99741cd9909dddab7fb4b448.jpg
Riga Old Town

2023-08-23 19:38:53 GMT

https://cdn.nostr.build/i/54d611ffb3d958b4f9ea6f960227a0aa2881ec470e014e27d7bc09ccc305443a.png
https://cdn.nostr.build/i/007bae0ee1721f17bd2f3415470de7acfbbfe38939dc9de7fb065822db269109.png
👍

2023-08-13 05:53:39 GMT

- reply

This is an important effort, and I hope it goes well!

2023-08-13 05:37:58 GMT

- reply

I'll be speaking at Bitcoin Amsterdam. But maybe I should come to Riga as well, at least to attend? 🤔 It's just a ferry trip from Helsinki.

2023-08-09 11:22:16 GMT

https://cdn.nostr.build/i/6edff5425a08b80a279726e215e92c812ba3155e0b70f157673d92e8cb0fc851.jpg
While relays and file upload services are a simple and effective way to get started, I think p2p is the future.
Running a relay or file uploader is expensive, and you need content moderation. On the other hand, p2p is "free" because people are already paying for their own internet access and on-device storage, or even cloud storage. P2p is also much more censorship resistant.
Video hosting is so expensive that I imagine it will be the first thing to be moved onto bittorrent. If you don't like torrenting with random people, you could connect to people in your Nostr social network.
When Nostr becomes popular and free relays dwindle, maybe p2p becomes more common for event sync as well. Direct connections are also better for DM privacy.
If bittorrent is too clunky for general-purpose file sharing, we can devise our own file sharing on Nostr. Nostr is already based on content-addressed events. Just need a binary format and some standard for file chunking.

2023-07-30 10:14:06 GMT

Iris now supports secret chats that don't leak metadata, implementing the https://hrfbounties.org/ bounty #3. It works also for group messaging.
It's a quick & dirty solution, but works. A shared nostr account is created for the secret chat / group. Its nsec can be shared via link, qr code or invite message from a single-use anonymous account.
Users can then communicate using the shared account's messages-to-self. Iris signs the inner messages with your own key, but the arrangement could be used for anonymous group messaging as well.
I'll also add inner message encryption at some point, so you can ensure that only certain group participants can read the message.
This arrangement doesn't introduce any new event kinds and works also in clients that haven't implemented a special UX for it. You can just log in with the nsec and message yourself.
I had to disable the Iris social graph filter to let invites through, so now Iris DMs are open to spam again, but I'll try to figure out a better solution.
As always, the UX needs a lot of attention, but I believe here's an MVP.
Screenshots:
Alice wants to message Bob:
https://cdn.nostr.build/i/e3921dfe10d63d6765aa98f6ed19903a590d91d59e842284f3c8bb379cdb1bee.jpg
Alice sends a secret chat invite to Bob:
https://cdn.nostr.build/i/ce35ff1a8db2e1f318319062e9d7c95fa48784b80d473bba20fb1d081207accb.jpg
Bob automatically follows the invite from Alice. They can now message each other in the secret chat:
https://cdn.nostr.build/i/2f4af356351b2dfbe26c30a9614627af242e993ecff7b774c485fade214f2bba.jpg
Here's how the invite looks in another client. I will add an "nostr:ninvite" URI in addition to the nsec.
https://cdn.nostr.build/i/0f7516439b598f8d8012dec6db74bc7e39252bb5b8fc36873200a1eafed8bf8a.jpg

2023-07-26 18:51:50 GMT

- reply

Oh, right, it's probably not visible in mobile size or low brightness screen. In the 2nd picture there's a subtle 1 pixel border on both sides of the middle column.

2023-07-04 06:35:09 GMT

3rd column for search, y/n?
2 columns leaves more space for content which is nice in the gallery view (instagram.com).
3 columns is more information dense and makes search easier to access (Twitter or Primal style). More engaging than the 2 column layout.
https://nostr.build/i/98a951c84d90674f739351d155063f59b4fbdf0ec084044ef52914605ac307af.jpg
https://nostr.build/i/6e4c68ec5aafec52e04b5bc687890abfb2f402e90641c5ff60f25ff6a7f4b827.jpg

2023-06-25 18:34:21 GMT

Went to this crazy fun trashy metal festival Nummirock in the middle of nowhere, Finland. Proof at 21 seconds: https://www.youtube.com/watch?v=qBSg-JlI_Rk

2023-05-12 14:45:21 GMT

- reply

Or rather, without the shared secret that also unlocks your other DMs to each other.
Maybe decryption with shared secret could be attempted by default unless another secret is present in the link.
But link-specific secret is useful if you want to share it to multiple recipients.
Even if you share the link publicly, the file host won't see the file content unless someone sends them the link. I wonder if file hosts would love or hate that 😄
One consideration is that the file host needs to accept encrypted files, unlike some hosts that only accept valid images and may resize or convert them.

2023-05-12 14:02:15 GMT

- reply

Couldn't we just use the same shared secret we use for DM encryption?

2023-04-22 11:42:58 GMT

Iris now supports nip42 relay authentication.
Thanks to nostr: #[0] for implementing the feature. One of the best pull requests to Iris so far! Also fixed some other relay issues. https://github.com/irislib/iris-messenger/pull/370
https://nostr.build/i/nostr.build_09961cc9d6e3af4e8cc918fcaf280cc27dab7b5149931d4abf70206444b9a865.jpg

2023-04-21 21:51:08 GMT

Recently updated the view for users who are not logged in
https://nostr.build/i/nostr.build_f42780dc29d0e0c65dff9fd8d17d016c47059920a5926222108be56b9ab3b43c.png

2023-04-21 19:15:11 GMT

Search for mp4 videos on Iris: https://iris.to/search/mp4?display=grid . Video thumbnails should now be working correctly.
Disclaimer: may include #nsfw content. I might add image recognition and nsfw http header to my image proxy, so it can be automatically blurred.
https://nostr.build/i/nostr.build_10a07a0293568091cd0fa921c70acf4466077b46e995e854302115d05602a5d4.png

2023-04-14 22:12:27 GMT

https://nostr.build/i/nostr.build_43deceec080a9b2df4e8c77f4a7c0a4cd9b4542a09f519097e033ab907d83aab.jpg
I'd like to continue working on Iris & Nostr, but would need funding soon. Any grants available?
Iris is MIT licensed and will always remain free and open source. It's available for web, Android, iOS and desktop. Works just fine on the Tor Browser.
Iris design goals have been speed, reliability and ease of use. I want to work on these further. I want to add public and private custom feeds, including user lists, content filters and different ranking algorithms. We also need group chats and better DM privacy.
I want to add more p2p capability to clients. Syncing of events over WebRTC, local area network or even bluetooth. Iris already supports Webtorrent, but the interface needs improvement. I think we should actually have nostr:file urls for binary files and transmit them over relays or direct p2p.
I'll try to get Iris subscriptions done soon, but it will probably be some time until it's sustainable income.
There's so much cool stuff to be done that I don't want to go back to fiat mining 😄
---
art by #[0]

2023-03-31 15:02:37 GMT

Iris CPU usage is not high, but something often blocks rendering (UI stuck). Will zap 100,000 sats for finding out what causes it and another 100,000 for fixing. I need a break 😄
https://nostr.build/i/nostr.build_9c14381cb30b297a9617032903170d64ef5f86d46966e2637c7f70d51c0f72a8.jpg

2023-03-16 09:26:52 GMT

- reply

I think we need inline note images in Iris

2023-03-16 09:23:05 GMT

Relay updates:
1) When viewing someone's profile, events are requested from a random selection of 3 of your own relays + 3 of the other user's write relays. Previously it was asking only your own relays, and all of them every time.
https://nostr.build/i/nostr.build_db961573bc453a36571699f41c3bc728c35329125985c59028223b1ecbbeba9a.png
2) When publishing an event, it is also sent to mentioned users' read relays (if less than 10 users are mentioned).
https://nostr.build/i/nostr.build_ddb0790ff66d226b4023c1650e2e34ca3cf75e9ba2f64dff61f799f4ece15914.png
3) You can see a list of popular relays in settings / network.
https://nostr.build/i/nostr.build_dee37484d70c22522b2c7ee8128a9a84ac8ec855acdd626d4c61b4932e5d6ae2.png

2023-03-13 10:29:25 GMT

- reply

Thank you so much!

2023-03-09 21:44:32 GMT

- reply

Web of trust stays the same. Gossip just enables discovery of new relays and retrieval of events from relays defined by other users.

2023-03-06 20:36:30 GMT

I wanted to do fun things instead of useful things, so I added the option to view a profile feed as an image gallery.
https://nostr.build/i/nostr.build_44f2f945e66292b301409ec51210ec3598dadd7821be9373a97ff4fedcf0b4aa.png

2023-03-01 20:32:55 GMT

Added "mute" button to note dropdown menu. Sanity restored.
Also check out "Social network" tab in settings.
https://nostr.build/i/nostr.build_d50b5864963b6a46a8382bdf3135768b9092ec4d2d94c179b56ea7cb1bc2b4ff.jpeg

2023-03-01 15:13:50 GMT

Just pushed a data subscription update that should reduce bandwidth and CPU usage. Lmk if it works well or degrades content loading. #TestingInProduction
https://nostr.build/i/nostr.build_831ab960822226acaf3706bf1837de3b56633b489a47086f5d5018efc847770a.gif

2023-02-28 07:26:40 GMT

Following / posts feed jumping should be fixed now. Replies to posts were removing the replied post as a "duplicate" also from the posts feed where the reply wasn't visible. Sorry for the bad UX 🐒
Zap listing and content filtering by follow distance are on the backlog. "Freedom of speech doesn't mean we have to listen."
https://nostr.build/i/nostr.build_788af2f6bcbdad4e52ad8857644992c03d8ee76986f1601e39c6051f019d6060.webp

2023-02-27 12:49:28 GMT

- reply

The current policy already works quite well, but sometimes unwanted content swims into your social network.

2023-02-23 22:32:27 GMT

https://nostr.build/i/nostr.build_0dd2f7e565353ffa4d992afaded81a98ef68ee3d2e6c713d013a55cc94f16467.jpg
Iris now works better offline. Added storage of events in the browser's indexeddb and restored StaleWhileRevalidate caching strategy for the application itself.

2023-02-23 19:22:26 GMT

Just added profile & follows backup tools.
If you give it your old follow event, it will merge it with your current follow list.
Profile is only restored if it's the latest event.
Other events are republished.
https://nostr.build/i/nostr.build_fa716813994712850ef324303ed60ff28f0a3211a6f0a295e833271aa0dda999.png

2023-02-23 08:09:03 GMT

Iris .to /usernames and nip05 addresses are now available for free 😎
#[0]