bigmarh

Love.Freedom.Humor.Motivation. There is no fear in love; but perfect love casteth out fear - 1 John 4:18a

Public Key

npub1k7cnst4fh4ajgg8w6ndcmqen4fnyc7ahhm3zpp255vdxqarrtekq5rrg96

NIP-05 Address

Profile Code

nprofile1qqst0vfc965m67eyyrhdfkudsve65ejv0wmmac3qs422xxnqw334umqpp4mhxue69uhkummn9ekx7mqpzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhgqgkwaehxw309aex2mrp0yhxummnw3ezucnpdejqz9rhwden5te0wfjkccte9ejxzmt4wvhxjmcpr9mhxue69uhhy6tzduh82uewdehhxarjd9sjuctswqq32amnwvaz7tmjv4kxz7fwdehhxarj9ehx2aq62qm0x

Publishing to

Author Public Key

npub1k7cnst4fh4ajgg8w6ndcmqen4fnyc7ahhm3zpp255vdxqarrtekq5rrg96

Show more details

Last Notes

2026-01-12 19:09:13 UTC

💜

2026-01-10 05:22:54 UTC

- reply

Queen G5 to F6

2026-01-09 19:49:20 UTC

❤️

2026-01-09 19:39:58 UTC

🔥 Absolutely fire

2026-01-09 19:04:44 UTC

✨ This is amazing!

2026-01-09 08:56:59 UTC

🔥

2026-01-09 08:56:07 UTC

💜

2025-12-22 18:50:45 UTC

- reply

It looks like it finally updated!! I appreciate you pointing it out

2025-12-22 10:27:36 UTC

- reply

It looks like we have the wrong address.
https://github.com/bigmarh/nostrpass

2025-12-19 20:15:31 UTC

- reply

I like the Idea of OPFS for sure, context is what matters.

2025-12-19 20:14:43 UTC

- reply

The key detail you might be missing is that NostrPass executes in a Worker, not in the main page context. So in NOstrpass it goes client -> vault -> worker. The worker has it's own context and isn't callable from the extension.

2025-12-18 05:33:21 UTC

- reply

The origin binding you're describing is real, but there's a gap in the threat model around DOM injection.
When an extension has host permissions for your site, it can run content scripts. You're right that content scripts run in an "isolated world" and can't directly access the page's JavaScript context or OPFS.
But content scripts can manipulate the DOM. And that's the problem.
That injected <script> tag doesn't run in the extension's context. It runs in your page's context. The browser executes it as if NostrVault.tld served it. There's no origin check that fails because from the browser's perspective, it is code running on NostrVault.tld.
The origin boundary isn't being crossed—it's being entered.
Your encryption approach with the NFC card is the right mitigation for this. If the OPFS contents are encrypted and the key never touches JavaScript (stays on the card), then the injected script gets ciphertext it can't use. Just be careful about the window when decrypted data exists in memory—that's still accessible to injected code.

2025-12-17 19:39:35 UTC

- reply

What stops a rogue extension from accessing the OPFS using navigator.storage.getDirectory() by injecting a <script>? Wouldn't any ext have access in that manor?

2025-12-10 20:42:59 UTC

- reply

Yep if they implemented it as one of the ways to login . It can work with allo kinds of apps

2025-12-08 04:07:50 UTC

https://Nostrpass.com is ready. Check it out. Let me know what you think. Finally shipped.
@nprofile…8m4j @nprofile…ksue @nprofile…f5tq @nprofile…nxal @nprofile…zj6n

2025-09-18 20:55:39 UTC

- reply

Let me know when they are again... Plus good hearing from you man

2025-09-18 18:11:18 UTC

- reply

...

2025-09-18 18:08:10 UTC

Man some folks want division so bad... Freedom is the ability to live and think like you want. Why can't we all just Bitcoin and chill?
Why do you care what someone else does with their gun, their body, their property, their mouth as long as it ain't harming somebody else?
Get you some ceviche, a cold bev and chill...

2025-07-21 17:30:24 UTC

- reply

Bruh you wrote this, like you just got out of the doghouse.... Naw just playing man. This is a beautiful way to honor your wife, if a man doesn't speak like this about their wife, they definitely got the wrong one.
,

2025-07-02 10:44:14 UTC

People often fail to understand the impact of "paper bitcoin" on the actual price of Bitcoin. Folks are excited for corporate treasuries, but many of these treasuries are buying derivatives of Bitcoin.
They are getting fleeced with baking soda Bitcoin.
#bitcoinandchill #rawBTC #buyrawuncutbitcoin

2025-07-01 22:57:11 UTC

Dropping Soon...
Nostrpass - Authentication for the modern decentralized web.
The Future is decentralized.
https://nostrpass.com/

2025-06-25 10:18:30 UTC

- reply

That doesn't matter. If someone two folks took the same token off line, there is a race to swap with the mint. So the person online first actually gets the value. Imagine selling something of value for a token you can't the value from. Isn't that a possiblity?

2025-06-02 18:50:13 UTC

- reply

I am saying if they made two with the initial token as the input, they'd still run into issues, correct?

2025-05-30 23:45:03 UTC

- reply

And he's pretty fast!

2025-05-30 23:35:47 UTC

- reply

What if they build two coin simultaneously with locks to each? Both offline. Wouldn't that still be an issue?

2025-05-30 23:00:09 UTC

- reply

Is the transaction complete even if we don't get the mint to give us a new one? Couldn't someone pay several entities with the same token offline. The first to redeem would get the new valid token from the mint, correct?

2025-05-14 01:26:01 UTC

- reply

To highlight cruelty and injustice, isn't being a victim especially when you've proven to progress in spite of it. What it is, is a reminder that some systems need to be demolished all together.
Bitcoin has always been the potential system smasher, yet most people are unaware that the system of ridiculous money printing oppresses all. Fiat currencies steal value from the masses... All over the globe.

2025-05-13 14:42:42 UTC

- reply

Huh? bad take...
Oppression: prolonged cruel or unjust treatment or control.
That's like saying assault just happens in your mind.
Let some stupid boy smack one of your baby girls around, I bet you won't tell your girls, to chill it's in your mind.

2025-05-13 03:06:33 UTC

- reply

Tiddy!! My guy!

2025-05-13 03:05:58 UTC

I shake my head at all the infighting... When I came in the game it was understood that you ran the Bitcoin you wanted.
We used to put stuff in the op_return back in the day.
ie. https://lovewhale.com
Then we realized just because something could be done, didn't mean it should. But it never made me want to tell folks what they shouldn't do.
there is no need to Should on anyone.
Freedom is freedom. Do what you like, run Bitcoin the way you'd like and keep it moving.
There have been hard forks, before... Just do it again and let the hash fall were it may...
You know what, let me just shut up and #bitcoinandchill

2025-04-26 18:35:02 UTC

- reply

... It's very easy to explain ;)

2024-08-28 01:24:06 UTC

Pura Vida 🤙🏾

2024-06-27 03:44:42 UTC

- reply

Man, Mcshane y'all really don't want felons to come...LOL. Every corner of the globe except West Philly... 😄

2024-04-16 08:52:18 UTC

- reply

I have found that "Most People", don't even know who you are...

2024-03-10 13:41:11 UTC

The easiest way to send money to Nigeria. And it uses lightning! Please share this with people that say Bitcoin isn't being used!
https://www.youtube.com/live/Vaex9oOnbl0?si=ZqdU7WntZsL0cG9w

2024-03-01 16:01:27 UTC

That makes me think #Cashapp could do this easy... They could easily extend that app to be more social and it would be crazy. It would immediately add tons of newbies to Nostr.
npub18yr27qkhaz05785zkjsxlnyu3lg0p22tjsje7ep229qyftc4e86qk88czq#note170v…3w2c

2024-02-26 18:00:13 UTC

Question: Have challenges with the Lightning Network made everyone more accepting of layered custody?
If so, why not liquid?
Also are we going to see a world where we are just trading one type bank for another just backed with Bitcoin?

2024-02-15 22:41:02 UTC

People have such a low time preference bias, that they have a hard time with technology that takes a while to find product market fit.
If you aren't building, chill..
Let folks work things out. LOL

2024-02-15 09:29:16 UTC

https://m.primal.net/HcxD.png Family > Everything

2024-01-13 04:46:10 UTC

- reply

Think about it like this. The Powers that be want ESG Bitcoin. Someone creates a POS fork and market it as a "cleaner bitcoin".
It begins trading and they dump all of the POW Bitcoins they hold as they don't believe it's real Bitcoin anymore.
We take a price hit, and the uninformed public thinks the ETF coins are the real ones, because their broker, JPM, Blackrock, & the Gov't say so.
Real Bitcoin plummets, and the ETF's proceed to purchase new forked Bitcoin from their Partner coinbase.
The question is, are new buyers going to be buying BTC or the BTC etf( which in turn Buys BTC ESG)?
The lowest barrier to entry is the ETF, so where do you think new buyers are more likely to buy?
The solution is to get folks to #justbuybitcoin.

2024-01-13 04:21:14 UTC

If you'd like to buy Bitcoin, #justbuybitcoin.

2024-01-13 04:20:54 UTC

- reply

Again, but to the ETFr's they won't know or care. And Price dictates narrative for many of the NGU types. So a huge dump would effect price.
So I'd say if you'd like to buy Bitcoin, #justbuybitcoin.

2024-01-13 04:15:45 UTC

- reply

I'm sure they won't care who runs it, like Roger didn't care. But they could dump it all and effectively disconnect their ETFs from Bitcoin itself...
Wall Street will definitely play games.

2024-01-13 03:59:38 UTC

What happens in the future if Blackrock becomes a bigger Roger Ver? Imagine a well-funded ESG fork of Bitcoin sponsored by Gov't adjacent ETFs... That dump POW Bitcoin in the name of the environment.
Bitcoin Cash didn't go away...
NGU is an Attack on Bitcoin
#bitcoinandchill

2024-01-12 02:17:49 UTC

Is getalby.com down for everyone?

2024-01-10 23:36:09 UTC

We shall see if the NGU crowd sticks around when their expectations don't align with reality...
#bitcoinandchill

2023-12-30 00:11:51 UTC

- reply

Yeah your comment, is definitely something I'd see on twitter.

2023-12-30 00:11:09 UTC

- reply

Skin color isn't going anywhere. So it's far better to respect everyone, regardless of appearance. Saying we are all the same is a cop out. Because the truth is we aren't , culturally.
Respecting and seeking to understand is better than just saying we are the same.
Same doesn't encourage discovery or growth. Love requires understanding, empathy, patience, kindness and long-suffering.
Saying everyone is like saying all siblings in a family are the same. Half the people that say there is no color, just humans. Can't even have a meaningful conversation with their own family.

2023-12-30 00:01:49 UTC

All the "Bitcoiners" heavily hoping for ETFs are just showing everyone how bad they want to sell...
They swear they aren't fiat lovers but can't wait to sell for fiat.
But hey...
#bitcoinandchill

2023-12-29 01:48:00 UTC

- reply

You missed it...

2023-12-28 19:00:02 UTC

"All power to all people. White power to white people, Brown Power to brown people, Yellow power to yellow people, Black power to black people, X power to those we left out..."
- Fred Hampton
empowerment is the revolution.
#bitcoinandchill