zach
Zach

https://www.zach.my/

typescript maximalist and FROST enjoyer ❄️

your nsec should stay on steel && rotate your keys monthly 🗝️

Public Key

npub1zach44xjpc4yyhx6pgse2cj2pf98838kja03dv2e8ly8lfr094vqvm5dy5

NIP-05 Address

Profile Code

nprofile1qqspwut66nfqu2jztndq5gv4vf9q5jnncnmfwhckk9vnljrl53hj6kqpp4mhxue69uhkummn9ekx7mqpp4mhxue69uhkummn9emkjmspz3mhxue69uhhyetvv9ujuerpd46hxtnfduq3gamnwvaz7tmnwa5hxuewdehhxarj9ekxxqfrwaehxw309aex2mrp0yh8xmmkv4ex26t8dejkuemfdejk2unfdenju6t07g7pld

Publishing to

relay.sovereignengineering.io

Author Public Key

npub1zach44xjpc4yyhx6pgse2cj2pf98838kja03dv2e8ly8lfr094vqvm5dy5

Show more details

Last Notes

2026-01-21 19:14:02 UTC

And there goes Farcaster 🗑️
https://blossom.primal.net/c0f3aa7addfb1fee2ffc45d14557eba11f71787178bedfba016e42990b933172.png

2025-05-17 14:00:51 UTC

- reply

Yeah, but I guess there would be some degree of descresion right? The1 Bitcoin bonus may be enough for some, but could be others who are greedy for more, right?

2025-05-17 13:34:09 UTC

- reply

What makes them immune?

2025-05-17 12:13:15 UTC

As someone who's been away from nostr for about a year now. It's striking how well suited Nostr's identity layer is for the Agent<>MCP communication layer. Are there any cool projects exploring this that I should check out?

2025-05-14 11:41:51 UTC

- reply

Purity Testiooors when you use Bitcoin the wrong way…

2025-05-08 18:05:22 UTC

- reply

Hmm, what do you mean by that? Take the bottom safe area inset for iphones, wouldn't not having it make development of things like bottom tabs vs infinite scroll ui alot more difficult? (given that on newer phones the bottom most of the screen is used for guestures while on older models it is not)

2025-05-08 16:08:35 UTC

- reply

Why? I find it super useful when using ReactNative on IOS

2025-05-06 17:17:33 UTC

Interesting release here https://www.x402.org/
It appears like it is none chain specific, so a Cashu version seems possible.
cc @nprofile…h36r

2025-05-01 19:35:33 UTC

- reply

Be careful trying to ascribe logic where none exists...

2025-04-29 13:41:13 UTC

- reply

Truly astonishing that anyone thinks that this is a good way to align incentives

2025-04-29 13:34:37 UTC

Retarded things happening on the blue app
https://m.primal.net/QhQI.jpg

2025-04-08 22:34:32 UTC

Welp…
https://m.primal.net/QIxg.png

2025-03-27 02:23:56 UTC

Throwback to meeting Mr. Saylor at BTC Prague
https://m.primal.net/Pucs.png

2025-01-29 18:35:10 UTC

- reply

Right now Flare.pub isn't a priority for me. I'd be happy to merge PRs if others are looking to contribute though!

2025-01-29 15:30:26 UTC

- reply

Right now I'm just adding it to a monorepo I'm working on. Would be cool to have a full library though. I seem to remember @nprofile…478g talking about adding something like this to NDK

2025-01-29 15:14:19 UTC

zod is pretty awesome https://m.primal.net/OGIU.png

2025-01-13 20:05:28 UTC

https://www.youtube.com/watch?v=xwU5xkXj7Kw

2024-12-21 14:19:24 UTC

The vast majority of printed reading material (Newspapers, Books, etc) are in a serif typeface. Yet, virtually all of digital reading material (Blogs, social networks, chat bots) are in a sans-serif typeface. What is the reason for this? I had always been told that serif is easier to read

2024-12-19 17:01:02 UTC

Hello World

2024-11-26 20:02:39 UTC

Nostr mentioned on Joe Rogan episode with Mark Andreessen
https://www.youtube.com/clip/Ugkxa4Wb1S_HkWZ4nOJIdJmdTvXW5u8RogN1

2024-08-10 17:39:38 UTC

GM
(taken this morning @ haleakalā maui)
https://m.primal.net/JvBM.jpg

2024-08-10 00:14:14 UTC

- reply

Perhaps this could be done with FROST Dkg. The DVM would just need an arbitrary pubkey to use as the other share and then generate a bunch of “disposable” secondary shares until the resulting aggregated Pubkey has sufficient PoW. Then the DVM just returns the second shares sk and the user is the only one able to determine the root sk

2024-08-06 19:49:10 UTC

- reply

Yeah, right now there is a very slight shadow change on those social buttons, but I should definitely amp that up.
And agree work needs to be done on the desktop view. Lots of empty space to work with.

2024-08-06 19:40:04 UTC

New personal site ✨
(I still have to build out the Nostr integration so my latest notes are being surfaced) But I'd love feedback on the general design.
https://www.zach.my/

2024-08-05 08:45:43 UTC

- reply

The beauty of Nostr is that we’re always at all time highs 😅

2024-08-02 16:28:48 UTC

- reply

This is sick! I’ll check it out

2024-08-02 16:23:25 UTC

I’ve started using Obsidian for note taking recently and have been really enjoying it. Everything is stored as vanilla Markdown under the hood without any proprietary sugar on top.
Plus, the way notes can be linked to other notes is very Nostr-like. Would be cool if someone made a client for this to store notes on a personal Nostr relay.

2024-07-31 01:30:20 UTC

- reply

It was great seeing you Alex! Always nice to chat in person after endless time on spaces and in comment threads 😅

2024-07-30 13:08:08 UTC

- reply

The handshake between them is a bit different because nonce commitments and partial signatures need to be communicated

2024-07-30 11:54:47 UTC

- reply

It doesn't have to be, but would be good. to establish some consensus across clients

2024-07-29 18:05:45 UTC

Here is a VERY rough draft for a FROST signing NIP.
I'd love to hear feedback and potential security concerns from anyone knowledgeable on the subject.
https://github.com/nostr-protocol/nips/pull/1400

2024-07-29 16:54:16 UTC

- reply

WIP rn

2024-07-29 15:41:11 UTC

- reply

Instead of rotating your root nsec, you'd be rotating the FROST shares. You can rotate these shares as many times as you want without revealing the underlying secret key

2024-07-29 15:40:08 UTC

- reply

Not anymore my friend 🤗
#note1p70…3ggn

2024-07-29 15:34:02 UTC

PSA:
Your Nsec should stay on steel and you should rotate your keys monthly
❄️🔜🦤

2024-07-28 17:17:58 UTC

Could we use Bloom filters on Nostr to increase privacy when requesting events from relays?

2024-07-26 22:45:38 UTC

- reply

What do you think about bringing FROST to Nostr?
#note1r3y…3xkt

2024-07-26 16:24:16 UTC

Lots of cool nostr stuff happening in Nashville

2024-07-25 15:12:49 UTC

- reply

This is probably just an issue with follow-lists. We need atomic follows. (And FROST 😉)

2024-07-24 13:45:40 UTC

“That expensive wine, it’s grape juice”
- Marcus Aurelius

2024-07-24 02:56:23 UTC

- reply

Thanks!

2024-07-24 02:02:27 UTC

- reply

@npub1tr7…nc05 🙏

2024-07-24 01:54:57 UTC

I think I just figured out how to encrypt/decrypt DMs from a FROST signature scheme. Does anyone know a Giga-brain cryptographer that could check my work to make sure I'm not doing anything retarded?

2024-07-23 16:44:20 UTC

- reply

Probably via a DVM of some sort to handle this

2024-07-23 13:21:57 UTC

- reply

https://github.com/zmeyer44/frost-ts

2024-07-23 13:17:10 UTC

- reply

https://github.com/zmeyer44/frost-ts

2024-07-23 10:41:00 UTC

I'm super excited to announce that I just released my first NPM Package! 📦🎉
Frost-ts is a TypeScript implementation of Flexible Round Optimized Schnorr Threshold (FROST) signatures. This is BIP-340 compatible and what I've been using to build some of the demos I've shown recently.
This is just the 0.0.1 release so please open issues and send DMs about what other features you'd want to see. Some on the top of my list are signing Nostr notes, creating npub, and rotating key shares.
https://www.npmjs.com/package/frost-ts
This work is made possible by @nprofile…yjkk so huge shoutout to them!
Now go ahead and start experimenting with FROST today!

2024-07-22 21:41:27 UTC

- reply

Yeah, growing pains until we get better adoption

2024-07-22 21:39:32 UTC

- reply

I think it's going to have to been handled with proxy keys that the client has full access to as I don't think that message decryption will work with frost. This may be better in the long run though as it should help prevent against metadata being linked to your main npub

2024-07-22 21:10:31 UTC

- reply

The main difference between Nip-46 and the Frostr method is that Nip-46 requires you to trust a bunker with you nsec or run your own while with frostr you can only provide the bunker with a single share of t-of-n FROST signature scheme. This way if the bunker was ever comprimised, you would not get rugged.

2024-07-22 19:23:41 UTC

- reply

The nice thing about the frostr approach is that you can have virtually infinite customization in terms of your preferred authentication methods. But the downside is that it’s going to be awhile until we can get a quorum of clients to start adopting it

2024-07-22 19:20:25 UTC

- reply

Hypothetically, which would be a better experience for you:
A) You enter you Nostr address into a client, a sign in with Google-like pop up window comes up, you enter a password/face id/fingerprint (using web authn), and done.
B) you enter your Nostr address, the app prompts you for a OTP from an Authenticator app, and done

2024-07-22 18:32:04 UTC

When’s the next Nostr Dev call @npub1jlr…ynqn ? Maybe we run one live from Nashville 🤔…

2024-07-22 15:23:30 UTC

- reply

Yeah, I'm still working things out for how that would work. I may put together a demo onboarding client to handle this and get the user up with a FROST bunker.
The tricky part is that virtually no client support the Frost bunker <> client communication yet (which is fair enough, I don't even have my final idea for the standard communication ready yet 😅)

2024-07-22 13:16:06 UTC

- reply

Happily!

2024-07-22 13:15:10 UTC

- reply

And there's no way to recover a NOSTR account if you leak your nsec.
Pretty big bug, Devs should fix it...
#note1r3y…3xkt

2024-07-22 12:49:29 UTC

- reply

#note1p70…3ggn

2024-07-22 12:38:29 UTC

- reply

I've rebuilt Flockstr into a cleaner, better preforming version. It's live right here, https://troop.is

2024-07-22 12:33:18 UTC

- reply

Check out https://troop.is instead

2024-07-22 12:32:52 UTC

- reply

You wouldn't need to rotate into a new wallet, just generate Frost shares for your existing npub

2024-07-21 22:47:06 UTC

- reply

Stacking sats and stacking bunkers 😤

2024-07-21 22:46:21 UTC

- reply

🫡

2024-07-21 22:44:49 UTC

- reply

Lol, you were supposed to respond to the main account 😅
(the other one is just a proxy to post w/o giving up my nsec)
#nevent1q…vaqh

2024-07-21 22:28:04 UTC

- reply

In a similar vein, the idea that people are pasting nsec’s, unfettered access to their digital identity, into multiple clients is going to look archaic.
If it’s not-your-keys not-your-coins, the same holds true for your identity. Everyone needs FROSTR

2024-07-20 22:43:31 UTC

- reply

Lol, I was sweating 😅.
100% agree with that long-term vision. Never trust your root nsec with anyone 😤 note1r3y62h8ddfu8z6ncht4wh39p3sw0cm8pay73ccne4983k0408lrssy3xkt

2024-07-20 22:06:27 UTC

- reply

🧡

2024-07-20 21:48:36 UTC

- reply

#note1p70…3ggn

2024-07-20 21:47:47 UTC

More FROST x NOSTR Magic 🪄
Here I'm able to use virtually any client trustlessly without giving them my Nsec or waiting for them to implement a Frost Bunker.
Allow me to introduce you to my friend, Mr. Broker 🗝️🕵🏻‍♂️
https://m.primal.net/JYFy.mp4

2024-07-20 21:41:15 UTC

- reply

Lmao, wait until you see why... 🤓

2024-07-20 21:35:02 UTC

This note is special 🤩

2024-07-20 20:59:02 UTC

- reply

I'm actually working on something for this right now. Should have a demo ready in a few days.

2024-07-20 12:25:00 UTC

Is the Damus relay down for anyone else?

2024-07-20 10:15:12 UTC

- reply

Yes, that's exactly the vision. Adding key rotation to nostr so newbies can improve their soverienty without needing to restart from scratch

2024-07-19 18:28:56 UTC

- reply

In this case I'm not using DKG because I'm trusting myself with my root key anyway so it isn't necessary to go through those extra steps when generating the keys

2024-07-19 12:27:21 UTC

- reply

I haven't worked through how that would work yet. I'm by no means an expert on this stuff so I'm not sure if its possible. Hoping to chat with some ppl about this in Nashville next week!

2024-07-19 12:25:39 UTC

- reply

#nevent1q…c22w

2024-07-19 12:24:08 UTC

- reply

Here is a flow diagram
https://i.nostr.build/rP1jX1pMgrVmETDi.png

2024-07-19 11:50:49 UTC

- reply

Anyone who wants to run a bunker. I would imagine this will be a premium service that can be provided virtually for free. It is very light on the server.

2024-07-19 11:49:04 UTC

- reply

You totally could replicate the nsecbunker "google-like" auth flow on the clients where rather than whitelisting a delegate key, this additional bunker just sends over the encrypted client secret. The important thing is that you aren't trusting a single entity with >= the threshold shares necessary to craft a valid signature. As long as that remains true, you can still safety rotate keys and know that any single malicious entity could not rug you.

2024-07-19 11:45:34 UTC

- reply

Great questions,
1. FROST allows for the signature aggregation step to occur without a trusted 3rd party. With something like vanilla shamir secret sharing, you'd need a trusted aggregator to bring together the partial key shares to re-create the root key and sign the message. Here, all share holders can operate independently and never expose their share to anyone else. This also allows us to rotate key shares should some n<T number of share holders become dishonest.
2. Absolutely, I was thinking something like a 3-of-4 set up could be quite cool where you have 1 client key and 3 bunker keys. Whenever you need an event signed, the client creates it and requests signatures from the bunkers, and once at least 2 of them respond, the client can add the client key signature and publish the event. You can keep chaining bunkers indefinitely and continue to improve the trust assumptions, as well as the complexity of the signing coordination.
3. I'm not sure if you can seed this with and existing pubkey and then generate the shares from there. I reckon it should be possible, but going to need to look into that.
4. There are not too many great technical explanations on FROST yet, unfortunately. I would recommend listening to:
- https://www.youtube.com/watch?v=8nuFt-1SWRI
- https://www.youtube.com/watch?v=ReN0kMzDFro
and check out the read me of https://github.com/jesseposner/FROST-BIP340

2024-07-19 06:46:26 UTC

- reply

Sure, extensions are great, but there are a lot of users that aren't going to go through the steps to install a browser extension to use a website. Also, an extension is good for my laptop but it doesn't help me out much on mobile.
With this setup, you are able to have the convenience of a custodial solution, but, you aren't able to get rugged if they act dishonestly. Now you can effectively rotate your keys without comprimising your npub

2024-07-19 06:31:32 UTC

- reply

The vision for this is that you have a dedicated "Client Key" that you can paste into whichever clients you enjoy using. You also have 1 or many "Bunker Keys" that are stored on servers listening for events from your client key. Only when both the client and bunker keys contribute their signatures will the signature for the event be valid, and a valid signature will be indistinguishable from one produced by your root key in cold storage somewhere.
What this allows for is even if a client or bunker attempts to rug you, you can just rotate to new key shares and "kick out" the dishonest party. And the best part is that you still have the same npub! Rotating keys doesn't mean you lose your identity.
This is somewhat flexible as well, in the demo I show a 2-of-2 setup. But you can easily increase the participants and threshold needed to produce a valid signature, thus further decreasing the trust assumptions. I could imagine having multiple bunkers with distinct key shares so you'd need all of them to conspire against you in order to get rugged.

2024-07-19 06:23:30 UTC

TRUST MINIMIZED NSECBUNKER w/ FROST 🔐🥶
Here's a demo of my new Nsecbunker implementation with FROST signatures! This works by creating a 2-of-2 frost signature scheme, which means that unless both a malicious client and bunker conspire to rug you at the same time, you are safe. 🧵
https://v.nostr.build/eK0wNZ9PkKaqLx5z.mp4

2024-07-17 00:24:48 UTC

Anyone know of a Frost implementation that I can run in the browser? (in JS preferably)

2024-07-16 18:39:48 UTC

- reply

Yeah, they were discussing it on Bitcoin.review

2024-07-16 17:07:59 UTC

- reply

This is so fucking cool 🥶
#note19cu…p970

2024-07-16 12:19:24 UTC

- reply

Also, being abot to send an event to a relay via a POST req seems like a no-brainer.

2024-07-16 12:18:42 UTC

- reply

Yeah, it would definetly be hard to get mainstream adoption. But I think it's worth a try

2024-07-16 12:13:34 UTC

- reply

I don't think it isn't "nostr only" to have relays operate via http as well. Something like GET `https://relay.damus.com/?kinds=0&author=<pubkey>` should work the same way as if the request was made from a ws

2024-07-16 11:50:22 UTC

- reply

I'm all for having relays operate via http as well. Curious about the decentralized identity peice. Does solid use eliptic curve key pairs for identities? Do they have a spec for key rotation?

2024-07-16 11:31:26 UTC

- reply

Wow, very cool. What do you see as the best parts of Solid that we should bring over to Nostr? Also, what does Tim Berners-Lee think of Nostr?

2024-07-16 01:26:41 UTC

- reply

It's shockingly similar. This video is a good explainer https://www.youtube.com/watch?v=qWVTjMsv7AE
I can't believe this is the first I'm hearing about it

2024-07-16 01:17:21 UTC

Is anyone familiar with Solid from Tim Berners-Lee?
Seems adjacent to Nostr
https://solidproject.org/

2024-07-16 00:57:30 UTC

Nostr is Linked Data
https://www.youtube.com/watch?v=OM6XIICm_qo

2024-07-15 18:50:38 UTC

This is actually pretty cool. Someone should make a version on Nostr
https://x.com/balajis/status/1812905854661763580

2024-07-15 11:21:39 UTC

- reply

We need more of this here. Nostr can quickly turn into a Bitcoin maxi circle-jerk. It's nice to see some other perspectives come along. Great to have you and @npub1xee…z3mx start to post more content here 😄

2024-07-14 22:21:24 UTC

- reply

Are you a fan of Ecash?

2024-07-14 17:39:52 UTC

- reply

Yep, that was fun. Would love to see it come to life.
An Espresso machine attached to a POS that accepts Ecash and prints out some notes the customer may find interesting on the receipt as the coffee is being made. What a world that would be ☕️

2024-07-12 00:04:03 UTC

I think I may have to vote for Biden. Four more years of this is going to be hilarious 🤣

2024-07-03 10:57:18 UTC

- reply

I'm currently in NYC and it's amazing how things are hanging on by a thread