tank

Founder Coach

Public Key

npub1xyd5ja34s4nk0l6urnh69wx9ep6uuxz2ujrkm2f8n6pfhgqa6y5s2xn6n2

Profile Code

nprofile1qqsrzx6fwc6c2em8lawpemazhrzusawwrp9wfpmd4yneaq5m5qwaz2gpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds8g9fxz

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1xyd5ja34s4nk0l6urnh69wx9ep6uuxz2ujrkm2f8n6pfhgqa6y5s2xn6n2

Show more details

Last Notes

2026-01-23 10:35:57 UTC

- reply

Devs that decide to not KYC can still continue to release unsigned APKs that work on Graphene (and AOSP devices that don’t enforce signatures).
Also call me naiv but user will still demand devices that allow them to install any APK. So there is a financial incentive for device vendors to ignore Google’s policy (or make opt-out very easy by showing a warning like macOS).

2026-01-23 10:23:06 UTC

- reply

Agree. I don’t understand the original post tbh. What stops Graphene users from installing proprietary apps if the OS just ignores Google’s APK signature enforcement? There is still Aurora to download signed apps from KYCed devs?

2026-01-17 14:24:20 UTC

Interesting analysis from Mearsheimer on Iran https://youtu.be/Zy3_CP-XeQo

2026-01-15 20:55:04 UTC

Great DOAC pod with Tony Robbins on navigating change and difficult times. Especially the part about AI: https://youtu.be/I_w81rptxkc

2026-01-15 18:31:58 UTC

- reply

One option is to get a Thermomix and bake yourself. We bought one in October and it’s helping me learn to cook more healthy.

2026-01-15 11:46:06 UTC

- reply

Thanks Roy. Good discussion re prf here everyone … I have a better understanding of the trade-offs of each design now. For breez sdk the simplified design makes sense. Re import … I presume existing Liquid/Spark users could just derive a new wallet from the passkey and sweep funds from their old wallet with relatively low fees. Is this how existing misty breez users will be migrated?

2026-01-13 14:41:23 UTC

- reply

How does a user prevent sync of the passkey to his desktop? iCloud Keychain items are synced to all devices. Same with 1Password.

2026-01-12 16:37:42 UTC

- reply

Thanks for clarifying.
1-4: makes sense. The downside of relays is IP address (location) leakage to multiple untrusted server if users are not using a VPN.
5: I agree for a wallet use case. But for nostr the user loses his social graph.
6: the UX cost is zero for icloud-key-value-store (users are generally logged into their Apple ID on iOS). On Android there is a UX cost. The main upside I see is 2FA though. Compromise of a passkey is not unlikely on a desktop computer due to higher malware risk. Users could recover their wallet only on mobile devices. A user using yubikeys to secure their Apple/Google account would be resistent to an adversary that has compromised their laptop.

2026-01-12 11:53:15 UTC

- reply

Oh and users get 2FA for free as an additional security layer when using iCloud/GDrive. Apple even makes users enable 2FA when storing passkeys https://support.apple.com/guide/iphone/use-passkeys-to-sign-in-to-websites-and-apps-iphf538ea8d0/ios

2026-01-12 10:55:42 UTC

- reply

If the digital euro would simply be a cashu mint that users could connect any cashu wallet to it might be interesting (at least until the euro hyperinflates due to europe’s unsustainable social security and demographics). That would at least provide protection against censorship of individual users. But the ECB would never allow a truly private and open digital cash system.

2026-01-12 10:39:16 UTC

- reply

We’ve seen relays nuke their databases regularly which means users would ultimately rely on the breez relay to store their salt. As a user I personally prefer icloud to store my data longterm independent of a wallet vendor. But it is a matter of taste.
CSPP derives a master encryption key independent of the passkey to encrypt the nsec and stores the ciphertext besides the salt in icloud. Without it users would need to rotate their nsec when they rotate their passkey. I believe this is an important feature for the management of longterm user keys.
But PRF will be used in many different ways by different vendors. So I don’t expect convergence on one standard.

2026-01-12 00:20:21 UTC

- reply

Where is the primary salt stored?

2026-01-11 23:09:14 UTC

- reply

Breez’ spec is interesting if the user trusts his nostr relays to store the salt for prf. Without the salt the user loses his nsec. This is why I would propose to backup the salt along with the encrypted key material in iCloud/GDrive (see CSPP spec). This way the nostr user’s nsec could also be re-encrypted if the passkey needs to be rotated due to device compromise etc.

2026-01-06 13:26:33 UTC

- reply

so clean

2026-01-06 13:19:08 UTC

- reply

What’s the wallet on the left?

2026-01-06 11:16:39 UTC

- reply

I wonder which sdk might be a good fit here?

2026-01-04 20:14:26 UTC

- reply

I’m German living in Portugal. I grew up in West Berlin and was four when the wall fell. I’ve lived as a nomad all over the world. Also in the US for 5 years. I loved it there and still feel very connected to Americans. I think Europeans have much to learn from Americans in terms of business and risk taking. So it’s nothing personal. I’m just a realist when it comes to foreign policy.

2026-01-04 19:39:38 UTC

- reply

I’d agree to disagree on this one

2026-01-04 18:59:15 UTC

- reply

Look, I hosted Ukrainian refugees in my home in Munich for a month in 2022. I have both Ukrainian and Russian friends. I hope the war stops asap.
But the US would also not allow a Russian expansion into Mexico. Such a move would be seen as an aggression and retaliated against.

2026-01-04 17:45:10 UTC

- reply

I’ve seen the Lex appearance. The first talk you cited says it’s the West’s fault (in particular US foreign policy).

2026-01-04 16:51:29 UTC

- reply

Not saying I agree with all of his opinions. Just that I find his framework useful.
Regarding Ukraine my understanding is that he argues Russia has security interests that were ignored by the west, in particular the push for Ukraine to join NATO. Not sure I’ve heard him say Ukraine caused/deserved to be attacked?

2026-01-04 16:32:39 UTC

I find John Mearsheimer’s framework of offensive realism helpful to understand global power dynamics. It basically says great powers, driven by the anarchic nature of the international system, are inherently aggressive in their pursuit of security and regional hegemony.

2026-01-04 11:09:56 UTC

I can’t get over that press conference.
Is it wrong that I hope Tarantino makes the movie?

2026-01-02 11:17:12 UTC

- reply

Fair enough. It makes sense to have the reference wallet for the graduated sdk use spark. And kudos for demonstrating a native wallet can be vibe coded with the sdk. Definitely a security win over react native. FWIW I hope someone builds a cashu version.

2026-01-02 10:38:46 UTC

If you want to understand why Germans are so obedient look no further than the children’s book Der Struwwelpeter.
My favorite story is of the boy that does not listen to his mom and reluctantly sucks his thumbs, only to have them get cut off by the tailor.
https://youtu.be/RGdjpBZw0g0

2026-01-01 18:49:08 UTC

- reply

Can the wallet developer preconfigure spark and let advanced users set an ecash mint?

2026-01-01 18:14:10 UTC

- reply

Minibits is as good as any. That wallet also preconfigures its own mint. There is no guarantee it will be around in two years obv.

2026-01-01 17:51:57 UTC

- reply

I’d preconfigure three popular mints and preselect one in settings. Then inform users in the docs. It has a rug risk ofc but would also present a massive UX boost for private bitcoin payments.

2026-01-01 17:44:13 UTC

- reply

Just stating my personal preference as a user.
As a wallet developer using the graduated SDK I would preconfigure three popular mints in the wallet and preselect one.
The risk of being rugged for the first 20 dollars is there and it needs to be explained in the docs. But this setup would make private bitcoin payments extremely user friendly.

2026-01-01 17:22:24 UTC

- reply

The “privacy” update here refers to Lightspark no longer publishing all user payments by providing an opt-out api for wallet to their public explorer.
But even after this update Lightspark’s operators still see all payment data. A far cry from the privacy of ecash.

2026-01-01 16:19:35 UTC

- reply

Most normal people use banks, fintechs and credit cards. Even if fiat were to disappear and they had to use bitcoin, why would they change to a wallet?
Re ecash providers getting arrested… we have yet to see evidence of all mints shutting down due to legal risks. I would not operate a mint myself but am happy to pay a fee to someone that does.

2026-01-01 15:00:10 UTC

- reply

Where is the Spark Service Provider source code? Without it third party Spark Entities are not gonna happen.
But above all I’d prefer to not share payments data for first my 20 dollars. Especially when I get LDK’s privacy once I open a channel.

2026-01-01 14:24:02 UTC

- reply

I prefer privacy, open protocols, and no vendor lockin

2026-01-01 14:17:26 UTC

- reply

I would use your wallet if I could use ecash instead of spark. I’m willing to take on the risk for my first 20 dollars.

2025-12-29 18:30:48 UTC

Cool to see Moxie get excited about Passkeys and WebAuthn PRF to improve the UX for E2EE apps https://confer.to/blog/2025/12/passkey-encryption/

2025-12-23 09:57:32 UTC

Passkey PRF could also be used to backup a nostr nsec to the password manager without users needing to copy/paste private key material.
And since Apple requires turning on 2FA to use passkeys, users get pretty decent security for key backups.
https://support.apple.com/guide/iphone/use-passkeys-to-sign-in-to-websites-and-apps-iphf538ea8d0/ios
#note1vld…sxtv

2025-12-18 16:50:03 UTC

I’m excited to work with Praveen of Cove Wallet on a new open standard for Bitcoin wallet cloud backup using Passkeys - no passwords, no key server trust.
Today wallets like BitKey provide a seedless UX with good redundancy but they require hardware. For spending wallets or users that want to start without hardware our proposal provides a compelling UX - Just do FaceID/TouchID to sync a Passkey to your password manager and done.
It’s an improvement over Photon since there is no key server to run for the wallet vendor and no PIN to remember for users (and no email/phone for PIN reset). The wallet just needs to regularly do a health check to verify the Passkey in your password manager can decrypt the cloud backup.
Let us know what you think. The goal is to develop this into an open standard that any mobile signer can adopt. Link below 👇
https://praveenperera.com/blog/passkey-prf-bitcoin-wallet-backup

2025-09-18 12:11:26 UTC

- reply

People are hurting and project their pain onto others.
It’s polarized in Germany too… few people take the time to listen to rational arguments or discuss calmly. Mostly rushing in to label/discredit. I gave up trying to talk about economic reform during the German elections.
I’m trying to tune things out as much as I can these days. Focusing on health, relationships and building local community.

2025-09-15 10:16:19 UTC

🍎 StashPay is now in the Apple App Store
📲 Please upgrade to receive updates if you were previously using TestFlight. We will sunset future updates from TestFlight.
https://apps.apple.com/app/stashpay/id6701591338

2025-08-23 15:13:37 UTC

- reply

chat control deez nuts

2025-03-13 14:12:48 UTC

- reply

Same. Macademia looks really slick too though!

2025-03-04 16:34:00 UTC

https://youtu.be/21CEOlBq2YI

2025-02-04 13:47:45 UTC

- reply

Massive! How do developers get paid? Lightning address or does a plain bolt11 also work?

2025-01-30 08:36:56 UTC

- reply

@npub185h…wrdp are we correct to assume that hosted channels would require async payments (and broad bolt12 adoption) to allow self-custodial zaps?

2025-01-29 17:57:29 UTC

- reply

I’m reading through nip-60. I guess it makes sense since zaps are public anyway. So the best practice is probably for users to have two ecash wallets… one for public zaps and one for private payments?

2025-01-29 17:40:17 UTC

- reply

Is the selected mint stored in relays?

2025-01-29 14:51:20 UTC

Updated the StashPay website. I’m pivoting away from the freelancer focus and making a minimalist wallet for everyone.
I’ve realized I care more about exploring peer-to-peer payments UX than building a B2B business.
I’m also considering turning Onion Mill into a non-profit to get more people involved via grants. But for now I’ll continue to self-fund my work. I kinda like being an independent voice.
https://stashpay.me

2025-01-26 16:37:52 UTC

- reply

Very exciting indeed! Should make the SDK more attractive in the ecosystem.
And my pleasure re the issue. I know how annoying it can be to get issues asking for things in open source projects. Sometimes a few kind words make all the difference.

2025-01-26 15:58:20 UTC

Very excited to see this PR merged: https://github.com/breez/breez-sdk-liquid/pull/639
Thank you to Roy and the @npub1jug…fc28 team for being open to feedback and enabling use of the SDK without an API-key again.
Onwards ⚡️

2024-10-19 09:10:11 UTC

"There's a difference between knowing the path, and walking the path" — Morpheus

2024-09-08 17:28:36 UTC

- reply

Appreciate your message and apology. No offense taken. I’m just expressing a trend I’ve been observing on Nostr and in Bitcoin. And yes, we need to meet people where they’re at. Change happens slowly. Anyway thanks again and enjoy your Sunday 🙏🏼

2024-08-28 10:08:58 UTC

- reply

I’ll zap you 100 sats if you make the decision for me based on a list of 10 best features of each.

2024-08-23 09:51:18 UTC

All is well

2024-08-15 08:16:44 UTC

- reply

Putting it on the list. Thanks. In @npub1s5y…6q7z ‘s recent pod, Paolo says Tether only buys short term treasuries (3 months) due to duration risk and needing to liquidate Tether quickly. Wouldn’t the US need a buyer of longer term bonds to replace China and Japan?

2024-08-15 07:55:23 UTC

- reply

Yes, I can recommend the book “The Great Depression: A Diary”
by Benjamin Roth … it’s written by a lawyer who lived through the 1930s and he makes observations about the markets and politics. Very interesting!

2024-07-15 06:50:00 UTC

- reply

#note1vp4…034r

2024-07-13 08:34:41 UTC

- reply

🍺 > ☕️

2024-07-12 10:44:05 UTC

This talk by Moxie confirmed many lessons I learned while working on Email and PGP. A must watch for anyone building on federated protocols. #note1pzg…eyu2

2024-07-10 10:10:10 UTC

- reply

In Damus I can mute people in my replies. Dunno if the mute list is just saved locally though.

2024-06-01 18:56:04 UTC

- reply

Are reproducible builds possible for zapstore itself?

2024-05-07 17:26:42 UTC

- reply

At least on Android we have reproducible builds. It‘s mainly on iOS where we need to trust app store binaries :/
https://github.com/signalapp/Signal-Android/tree/main/reproducible-builds