Secure messaging on Nostr. Creator of Marmot protocol, MDK, and White Noise. Other stuff connoisseur. Also built Listr, Ostrich.work, Ontolo, Nostr.how.
Public Key
npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc Profile Code
nprofile1qqspwwwexlwgcrrnwz4zwkze8rq3ncjug8mvgsd96dxx6wzs8ccndmcpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dstrmk2l
Show more details
Published at
2025-10-02T13:06:18Z Event JSON
{
"id": "0b9bfacb775e9d95bc862056097396e92f608c5a2a664601528019a57e647d56" ,
"pubkey": "1739d937dc8c0c7370aa27585938c119e25c41f6c441a5d34c6d38503e3136ef" ,
"created_at": 1759410378 ,
"kind": 0 ,
"tags": [],
"content": "{\"lud06\":\"\",\"nip05\":\"[email protected] \",\"picture\":\"https:\\/\\/m.primal.net\\/HIVN.jpg\",\"banner\":\"https:\\/\\/m.primal.net\\/KELp.webp\",\"lud16\":\"[email protected] \",\"website\":\"https:\\/\\/jeffg.fyi\",\"display_name\":\"JeffG \",\"name\":\"JeffG\",\"about\":\"Secure messaging on Nostr. Creator of Marmot protocol, MDK, and White Noise. Other stuff connoisseur. Also built Listr, Ostrich.work, Ontolo, Nostr.how.\"}" ,
"sig": "4e7c42b98b42873447b73c401942af1612f38f99800f47086fa31e7c287dcfc14a9eb61b836fe4652989350481e8726dcbd495c8ba6b2406b6999e057f7f23eb"
}
Last Notes npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG There’s something in the air that is making me feel like we could teleport way higher any minute… npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG What do you get when you cross Messaging Layer Security with Nostr's decentralized network? A Marmot. 🦫 Introducing Marmot: Marmot is an evolution of NIP-EE into a full protocol with modular specs for optional features. Built for the future of secure messaging! We're also excited to announce MDK (Marmot Development Kit) - a standalone Rust library following the BDK/LDK model. Check out the blog post for more details! ⚡ 📄 Protocol: github.com/parres-hq/marmot 🦀 MDK: github.com/parres-hq/mdk #naddr1qv…cvnl npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Anyone know of a NIP (or proposal) for pinning content in communities or chats? #askNostr npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG @nprofile…f5tq why is njump so slow. I thought it was static pages and should be super fast? npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM 🌞 Bring back this version of the web. http://www.catb.org/~esr/ npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG I'm so glad I'm too busy writing software to have any time to participate in the shit show that is Luke and Knots. And, notwithstanding all the FUD and panic, my transactions are still being confirmed without anyone's permission at the sweet sweet rate of 1 sat/vbyte. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Rights are exercised, not granted. What a clown show 🤡 npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Fuck paper bitcoin summer, this is supply chain attack summer. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Yes... the Italian Ministry of the Interior's website has operating hours. 🙄 https://blossom.primal.net/8473cba4959b5cfe377a2c6243dd1c1aec61a49f979e79bf7c36e3d3f0a1a836.png npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Put on headphones, close your eyes, and zone out for the next 20 minutes listening to this absolute masterpiece. https://open.spotify.com/track/7c5jtxhYT13kUepkDL9nTv?si=7d975b364a6a4040 npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG 😂 why so salty? npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM 🌞 Keep building. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Strange - looks like the app tried to rotate my key package at some point today and succeeded in deleting the current one but not publishing the replacement 😂 I just published another manually. Give it a shot. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG @nprofile…9puf v 0.1.4 is out on iOS and Android. This was a big one, with a huge backend refactor all a lot of core components of the app. The result? Way more reliable group creation and messaging. As always, thanks to everyone who's using it and sending us feedback. 🙏 Get it now on @nprofile…uvay, on Github, and on iOS TestFlight. #nevent1q…0spp npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG If this is you, you haven’t understood bitcoin well enough. #nevent1q…szze npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG The thing about trespassing in the south… npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG BCN has the best street art. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG If you can keep your head when all about you Are losing theirs and blaming it on you, If you can trust yourself when all men doubt you, But make allowance for their doubting too; If you can wait and not be tired by waiting, Or being lied about, don’t deal in lies, Or being hated, don’t give way to hating, And yet don’t look too good, nor talk too wise: If you can dream—and not make dreams your master; If you can think—and not make thoughts your aim; If you can meet with Triumph and Disaster And treat those two impostors just the same; If you can bear to hear the truth you’ve spoken Twisted by knaves to make a trap for fools, Or watch the things you gave your life to, broken, And stoop and build ’em up with worn-out tools: If you can make one heap of all your winnings And risk it on one turn of pitch-and-toss, And lose, and start again at your beginnings And never breathe a word about your loss; If you can force your heart and nerve and sinew To serve your turn long after they are gone, And so hold on when there is nothing in you Except the Will which says to them: ‘Hold on!’ If you can talk with crowds and keep your virtue, Or walk with Kings—nor lose the common touch, If neither foes nor loving friends can hurt you, If all men count with you, but none too much; If you can fill the unforgiving minute With sixty seconds’ worth of distance run, Yours is the Earth and everything that’s in it, And—which is more—you’ll be a Man, my son! If —Rudyard Kipling npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Honestly? This sounds pretty amazing. https://blossom.primal.net/469930c760ae0c189269bfc07ad89825fee67d6c4b414404e128fdefa28b8028.jpg npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG “The harder the government squeezes on the internet, the faster and more effectively people will get around it.” – @nprofile…6ssr Life finds a way. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Good art makes you uncomfortable. Massive Attack are legends. https://www.gadgetreview.com/massive-attack-turns-concert-into-facial-recognition-surveillance-experiment npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Just replace any mention of “digital assets” or “cryptocurrencies” in this article with “curtains” and “whispers” and you will get a sense of the level of control they want and the absurd lengths they’ll go to ensure that you are not free. https://www.therage.co/us-government-to-bring-patriot-act-to-digital-assets/ npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Podcasting. It’s about podcasting. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM 🌞 I had a great (and wide-ranging) chat with @nprofile…7985 on the Free Cities Podcast recently. Check it out! #nevent1q…py2a npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG You need to have MLS storage involved somehow. It's a requirement of the OpenMLS implementation of the MLS protocol. So instead of having many different storage implementations out there that do things differently, I went the direction of putting more into the nostr-mls library and being more opinionated about how it should be done. The reason for this is that if any NIP-EE implementation gets any part of the spec wrong, it can ruin the security guarantees of the groups the person participates in. It also means that we can standardize things like E2EE media storage and other features that all messengers are going to need to do. Two options I can see. 1. We can create a separate crate that is an extremely limited and lightweight implementation of NIP-EE (plus other things) that uses OpenMLS (so uses their storage adapters) but doesn't try and have an opinion about how your app should store data and would probably be lower level about how it processes commits, messages, etc. 2. We might be able to use features in the current nostr-mls crates so that devs could turn on or off functionality based on what they want. This would make the crates A LOT more complicated but might be worth it long-term. I'd love to hear your thoughts on those (and if you can think of other options, happy to hear those too). It would be great to make sure that we end up with lots of interoperable clients. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG @nprofile…w70s Just had a look at the new XChat app. Looks cool, but it sucks that it's running your own fork of the nostr-mls crate and you've made a bunch of changes that break interoperability between different MLS clients. I would have loved to have you contributing and working more closely with us on changes so our apps would have remained interoperable. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Turtles, all the way down. https://blossom.primal.net/34c11561bf5b62ab3eadbc02e88463f1a9bdbc6d0136d2f96fd6b9db430a649d.jpg npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Erosion. That’s how they win. Don’t give them an inch. Stack bitcoin by offering goods and services. Spend bitcoin on things you need. Their points of control can be meaningless. It’s your choice. #nevent1q…9f3r npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM #spxm 🌞 https://blossom.primal.net/523c1bac0e5cf92a041245a4b2361518433fd70886ac347b5a5f1e7dcb2f7073.jpg npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Websocket request limit in node defaults to 1GB, but most server implementations limit to something like 1-16MB. All of which would still work for very large filters. I'm just wondering if anyone has direct experiences with relays blocking for a REQ that was too large. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG @nprofile…8d3u @nprofile…6jvy @nprofile…x4fv Do you guys know of any upward limit on the size of filters? E.g. how many pub keys can I reference in one filter? I’ve never hit any limits before just curious if you all have see anything. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM 🌞 Touch sand. https://blossom.primal.net/cbd809d4245ab395234435a09e192ba1b8333135a79d8c121b4518dd2c03a7e2.jpg npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG I find it tremendously ironic that the invention of the welfare state, ostensibly to help those in need, has effectively destroyed our sense of community duty and care for our neighbors. It’s allowed us to convince ourselves that it’s “not our job” to look after each other like we used to. People love to argue that without the state those in need would be left behind. I staunchly believe this to be untrue and downright patronizing. Most people, most of the time, are fundamentally good and generous. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG For what? Context? npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG @nprofile…8gtd I'm interested in getting a rug. What's the process? npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG The trains even have hot desks now too. https://blossom.primal.net/9be15a9ad55695abab72f82b2d44386e6a660c2563820a3a5959cd10322af2f9.jpg #nevent1q…wl83 npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG If you haven’t read @nprofile…n3f8 ‘s book Building Nostr yet, you should. It’s very well written and does a great job of giving new builders (of all types, not just devs) the base they need to “build it right”. https://building-nostr.coracle.social/ npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG “Building software is hard”. It’s doubly hard when you’re building in a decentralized context and inventing new protocols at the same time. I feel so much gratitude and respect for all our early users (that’s you all!) and all the feedback and understanding they’ve given us. As they say; if you aren’t embarrassed, you launched too late. Well, we didn’t launch too late. 😅 I’m looking forward to the next release. It’s going to be lit. 🔥 #nevent1q…jq3g npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM 🌞 Train travel is exceptionally underrated. Air travel, by comparison, is barbaric. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG I am Jack’s distinct lack of surprise. #nevent1q…tz47 npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG NIP-EE is official. 🤝 #nevent1q…l5wd npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Guys... I just got starlink and holy shit, my internet feels so fast. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM 🌞 I’m paying tribute to the gods of bureaucracy this morning by giving them too much of my time for something exceptionally unnecessary. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG 😂 wat? npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG telegram 😭 but ok. I will. right now tho. sleep. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Your internet will be permissioned. Unless you fight back... #nevent1q…j8gq npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG @nprofile…ehpa do you do tarot readings remotely? Or only in person? npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG The best moment to pause... https://blossom.primal.net/3a67b2061684e2bb05d8572471b32f2c424fd58475280e556f52825ad2d96c2b.png #nevent1q…r77j npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG The story of my life... #nevent1q…fpr9 npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Actively deciding what NOT to pay attention to is a superpower. Even more so when many of those things are actually things you're genuinely interested in and have the ability to materially help. I give myself a B-, at best. Who do you know who is phenomenal at this? npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM 🌞 https://blossom.primal.net/abb7fbec7d83605a8e4f6231e1e5c59c6946ca99558b7a1efb777f5a18a68087.jpg npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG My account on white noise is completely destroyed at the moment from all my testing. I’ll clean that up soon. In the meantime dm me here and we’ll connect via signal. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM 🌞 #nevent1q…l9gf npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG They're coming for your information anon. They're coming for your privacy anon. https://www.piratewires.com/p/wikipedia-loses-major-eu-speech-battle npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG 😘 npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Ooh, I just had a call about something super fun with two giga brains that has the potential to make Nostr overall so much more private... https://blossom.primal.net/4528f92737520473d1cf6d60756a2e04a05b87083b19b3014d486bb64752b98d.gif npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG 😳 Big boy npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM psychopaths 🌞 npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG That’s the story here too. Cuts in the services every single year. But somehow higher costs. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Yup. For someone to take home €36k in Italy, the employer has to lay out €88k. I wonder why small businesses here are dying? 🤔 https://blossom.primal.net/2557dfb8a6a8a19fa8e2e3473abf02141b227b87dcd6d3dbe3aae4f62c26e8b2.jpg npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Yes. in the end, my issue was solved by good old fashioned manual debugging. 🤷♂️ npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG hahaha npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG No one likes a smart ass @nprofile…h36r npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG https://blossom.primal.net/bf31eb6ab1920ed5c3dfb8e08e3abd00550cfb54de8910aaa0cb324eebd5dda7.png npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Yup. That's spot on. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Every time I touch JS (and especially bundlers) I'm reminded of what an incredible pain in the ass the entire ecosystem is. I'm never going to use a JS framework for a new project again. And while I'm at it, fuck it maybe I'll never use Typescript again either. Either use an actually typed language (Rust), use something enjoyable (Ruby), or at a push, write some plain vanilla JS. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM 🌞 Most people don't think that very large services can just disappear overnight... I am obsessed with this idea though. Just think about what it would mean to wake up and hear that the US govt. has raided and shutdown Signal and arrested their CEO, Meredith, for aiding terrorists. It's an idea that's getting less and less far-fetched. https://www.theguardian.com/world/2025/aug/13/russia-clamps-down-on-whatsapp-and-telegram-over-data-sharing npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Oh, so that’s how those work? 😂 npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG The slides for a recent Black Hat talk on vulnerability in many nostr clients is up. https://i.blackhat.com/BH-USA-25/Presentations/USA-25-Kimura-Not-Sealed-Practical-Attacks-on-Nostr.pdf I haven't had a chance to read through it completely yet but seems like most, if not all, of what they lay out are known issues and things we've all been working to fix for a while now. 🤷♂️ npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM 🌞 My talk from @nprofile…5flv Privacy Edition in Riga is up. In addition to the shameless self-promotion, I'll say that the BTC++ events are the best events in Bitcoin right now if you're a dev. Highly technical, very chill, extremely well run, and just plain fun. If you've never been, now is the time. @nprofile…cn9n is doing events everywhere this year. There is bound to be one close to you. https://www.youtube.com/live/mvuWLob3CFU?si=nTkFixmGTTPyzUYt&t=4306 npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG One can try npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM 🌞 remember to touch grass. https://blossom.primal.net/9fcff60608c582c8c68a784845ac9c4dee5443a49587a0f5f45e3624fc34438b.jpg npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG administrative oversight 😂 npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG The lawyers are getting quicker and quicker at shutting down legit projects based on rumors, news, and yet to be established case law. The state doesn’t even need to regulate when they have the monopolies on board. 😞 https://www.therage.co/google-play-store-ban-wallets/ npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM to a beautiful dawn 🌅 It’s been real Riga, but I’m very excited to be heading home today. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG We were actually talking about this yesterday in the team. Short answer; maybe? But we're not going to look at it right now. Make the thing work, then make it work better. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Can you explain that last point a bit more? I'm not sure what you're saying there. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Thanks. Yeah - I saw (and appreciated) the footnote. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG trust me bro. jk. It means that MLS over nostr is better than any centralized MLS implementation can be. and that we already know about the other issues that he surfaced and have a plan on how to mitigate them. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Very pretty. Bet it sounds even better. Would love to see it with knurled aluminium or brass knobs. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG No, it's definitely not. We cover this pretty well already actually and it's easy to improve on it in the future. #nevent1q…unky npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Nope, the entire nostr network is our authentication service. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG For those wondering about my thoughts on @nprofile…6fpr 's latest article about MLS. tl;dr - I think it's pretty balanced and describes something that we (and the MLS folks) have known from the start. If you have a centralized identity/authentication service telling you who is who, you are trusting them with a pretty important part of the system. As he points out, NIP-EE (the spec about how to use MLS on Nostr) and, by extension, White Noise doesn't have the authentication service problem because Nostr is our AS. We use pubkeys for identity in groups and you're trusting the key package events signed by those keys when you're adding someone to a group. ✅ In general, this is an issue for other MLS implementations though. The authentication service is a "trusted" third party, with all the trappings. AFAICT, the "participation privacy" question is about relays being able to see what groups you're in via the group ID values you're requesting events for. There are two points to make here. First, relays can see what group IDs a given IP address is requesting events for. I believe that we have mitigated this pretty well since we're using random (and rotating) identifier(s) for each group (yes, by design, a single group have more than one visible ID value at a time). Obviously, this is also mitigated by using a VPN or Tor to make requests to relays. We don't yet but White Noise will eventually break up these requests into lots of different reqs/subscriptions (probably done over Tor or something similar) to help here. One thing that he didn't mention but is worth talking about; relays see events with a given "h" tag (the group ID I talked about above). Practically, this means that watching a given group ID value gives relays some idea of the relative amount of activity for a given group. Critically though, they can't see the number or identities of it's members, since all those messages are published via ephemeral keys. It's just a relative amount of activity (at least until the group rotates it's group ID). Happy to answer more questions from folks on the article or on MLS. #nevent1q…dzp2 npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG So - we don't have the AS issue because Nostr is our AS. We use pubkeys verify authenticity and you're trusting the key package events signed by those keys when you're adding someone to a group. AFAICT, the participation privacy question is about relays being able to see what groups you're in by seeing what group IDs you're requesting. I believe that we've mitigated this pretty well since we're using random (and rotating) identifier(s) for each group (yes, it can be more than one). We also want to eventually break up the requests into lots of different reqs/subscriptions (probably done over Tor or something similar) to further obfuscate this info. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG We don't have an "Authentication service" that issues and verifies a user's identity. We use nostr pubkeys for identity. I also think that we avoid the "participation privacy" issue that he mentions in the article but want to clarify what he means with him before claiming anything. 😉 npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM GM 🌞 Heading to record a podcast now. What should I focus on? npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG TIL the UN convention on Cybercrime was proposed by Russia and, surprise surprise, is full of vague definitions and extreme overreach. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Oh yeah? I hadn’t seen that until this morning when I tried to turn off this shit for a family group. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM 🌞 Notice how WhatsApp bundles the AI spyware with the completely reasonable “save media” features in a group. Way lower chance of people turning it off. Product design used against you. https://blossom.primal.net/d21c340dcecff939cd45190bc7f06dbd8f6e6660b185f73dffde218b142bfa86.png npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Working closely with other devs on meaningful projects is peak experience. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG I love when a plan comes together. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Definitely! npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG They’ve been doing that for years. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Title is now different. 😂 npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG 🫂🫠 npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG GM Riga and GM @npub1dwa…7c52 privacy edition! 🏴☠️ npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG You know you're about to read a good book when page 1 looks like this! https://blossom.primal.net/4be64a5c486ae50a6a43ac71427d5c4de1fc40d66ee183a9af42e9687948e1f1.png npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG @npub1wht…r3ec release coming very soon. npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Nostr onboarding is doing us no favors though. 🫤 npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc JeffG Italian book printers still undefeated since the renaissance. https://blossom.primal.net/5af45bae970afe2617b8aed42b09cf6363a1c88367d5ce1d41fe122516c9503d.jpg