Laan Tungir

Falibilist

If you like my images:
https://laantungir.net/client/slide-show.html?npub=npub1rmz9gu6de0m0u4ysrn39crrud099ahvfgs6pvasl4hpjr5ud7yus54xv06

If you like nerd thingz:
[domain] https://laantungir.net
[ipv4] https://15.235.3.231
[ipv6] https://[2607:5300:203:bb5c:4a46:c3d3:1dc3:fbe8]
[tor] http://kn2jam4kyz6s5wacyozo3do3d2zsvh4to45uh7xliulwdust6zjuvnad.onion
[fips] http://npub1crpldvy49ef8z34wlacwujnfudy4nd7k96aqdx5wgn6ckztz7z8q9t59ud.fips
[n-site] https://npub1rmz9gu6de0m0u4ysrn39crrud099ahvfgs6pvasl4hpjr5ud7yus54xv06.nsite.run

Public Key

npub1rmz9gu6de0m0u4ysrn39crrud099ahvfgs6pvasl4hpjr5ud7yus54xv06

NIP-05 Address

lt@laantungir.net

Profile Code

nprofile1qqspa3z5wdxuhah72jgpecjup37xhjj7mky5gdqkwc06msep6wxlzwgprpmhxue69uhhqun9d45h2mfwwpexjmtpdshxuet5qy8hwumn8ghj7mn0wd68ytnwdamsz9nhwden5te0wfjkccte9ec8y6tdv9kzumn9wsq35amnwvaz7tmjv4kxz7fwd3skzmn5w4hxw6tj9ehx2aqppamhxue69uhkummnw3ezumt0d5c6dmre

Publishing to

Author Public Key

npub1rmz9gu6de0m0u4ysrn39crrud099ahvfgs6pvasl4hpjr5ud7yus54xv06

Show more details

Last Notes

2026-10-27 21:05:21 UTC

https://cdn.satellite.earth/7163c765fcb54ce5864ce0532dbcdb5adb8b713a5d762c82e1c7b0fdfc774a43.webp

2026-10-27 14:16:18 UTC

https://blossom.laantungir.net/7928daed943bb1483c6de50e94c68587e976b127924f15e35eeb2a29b6091bd5.jpg

2026-10-27 13:27:36 UTC

- reply

There were two kinds of teachers:
1. Blackboard
2. OHP

2026-10-26 23:27:56 UTC

Rewriting in Rust.
https://blossom.laantungir.net/05d57a69f4b17f5a92d24c7fc28f376019bcddb9f4a52cfd63753c6db8ef160a.png

2026-10-26 14:51:19 UTC

https://blossom.laantungir.net/3b4279c389c6ce86f910ff6d2312a1ffbe6e983fbb4c902e49349de4854f612f.jpg

2026-10-26 13:54:50 UTC

https://blossom.laantungir.net/c2d37b11691841cda5b3a2b361a61e90f6bd53ae9acc9991ce568f81a4fee8f9.jpg

2026-10-22 11:44:27 UTC

GM
https://blossom.laantungir.net/3c976b3f316130c13db2cc473b497fd98283034eb36d716bb0e7ea51d69ab3bc.jpg

2026-10-14 15:10:28 UTC

Doomers believe that the rules of mathematics objectively exist, so we don't need to "align" AI mathematics with our mathematics.
Implicitly doomers believe morality doesn't objectely exist.
If doomers admit there are truths about morality, then they must admit that not only is there no "alignment problem", but that AI will quickly become more moral than we are.

2026-10-13 12:15:54 UTC

GM
https://blossom.laantungir.net/24fbe3c1ccd54b50e158204e0a342772857057cf2f0eb622ec6b1ae7327bc589.jpg

2026-10-10 00:09:31 UTC

- reply

Use Codium.

2026-10-07 16:45:17 UTC

Someone recreated the whole Adobe set of products. Downloaded the Photoshop equivalent for free, and holy shit, it is fast. Starts instantly.
https://getartcraft.com/

2026-10-06 11:35:53 UTC

GM
https://blossom.laantungir.net/5b8edbc9ec2f28d9baae2e5874edcd5094dbfb4d9d9381f50260d5d2766cf73e.jpg

2026-10-05 19:11:45 UTC

https://blossom.laantungir.net/2355df0e8d91f80674b09e17dae1e6a03086af49340840b669e58985876c7510.webp

2026-10-05 11:37:09 UTC

GM
https://blossom.laantungir.net/0bf52097eb77aa1356625c7b01bce0de10bf4801427d8a0a554e0b02caae577f.jpg

2026-10-04 13:57:58 UTC

- reply

2026-10-03 10:46:58 UTC

GM
https://blossom.laantungir.net/edd2333f627c5ebeaffb06c38d7123316640dad0306a7d43461ab90a0b68c48d.jpg

2026-10-02 11:17:46 UTC

GM
https://blossom.laantungir.net/5cde2451473bc45177af348f2eed010590e363b80d41eb8ad7bbf2d9133c214c.jpg

2026-09-25 21:54:49 UTC

- reply

Why choose violence?

2026-09-18 09:41:50 UTC

GM. Live with some dub-techno.
https://blossom.laantungir.net/ae07094492962e71fe0f972ed240a484386eb71d1717049f9e50bcd1df199c75.jpg
#naddr1qv…hllk

2026-09-15 11:28:26 UTC

- reply

I was surprised that I could use Chinese models to help figure out how to get through the Great Firewall.

2026-08-27 10:52:57 UTC

GM
https://blossom.laantungir.net/bacd7b36f6541decde4fb726ab1d44123346080bf0d2b4b9105106aff67328f8.webp

2026-08-20 10:58:56 UTC

We are not on social media enough.
Social Media is one of the greatest inventions of mankind. Ever. Full stop.
But it is constantly maligned.
https://blossom.laantungir.net/eedecee9ceef30152ad326849f1fad12a333dd973c27a35116e1a3f9b485a743.jpg
Even on NOSTR social media is seen in a somewhat negative light. Moral virtue is expressed as "go out and touch grass".
A thought experiment - give 100 people this social media challenge:
"Every day for a year, post on social media about your problems, or your society's problems, along with what you believe are the solutions. Post on politics, science, religion, morality, whatever is important to you. Consider and respond to any serious replies. Be earnest."
Now at the end of the year, compare that group of 100 people, to a control group.
Almost certainly the 100 who posted on social media would have advanced their thinking far more from where it was. They would have had to make explicit in their mind their beliefs, and then put them up for critique. Their knowledge would have grown. They would look back at their early beliefs as relatively uninformed.
If I was asked to spend time with either group after the year, I would choose the 100 people who posted on social media.
Is social media perfect? No. That is why we #NOSTR.
Would the people posting have been happy the whole time doing it? Almost certainly not, but I'm not always happy at the gym either.
Karl Popper taught us how we create knowledge:
1. Start with a problem
2. Conjecture solutions.
3. Criticize those solutions.
4. Go with the best solution until we can conjecture a better one.
The social media challenge I proposed, is virtually this exact method.
I have been thinking that the traditional education system is doomed, but was not sure what would replace it. Now I am thinking that it is simply social media.
I love NOSTR.

2026-08-13 09:45:28 UTC

# NOSTR over single packet UDP
## TLDR
Send a Nostr event as one-way UDP packet instead of using TCP. This one-way send is very censorship resistant compared to the alternatives. I currently have it implemented on my relay and you can test it now on the command line using nc and @npub180c…h6w6's nak.
'''
nak event -k 1 -c "I don't shake hands, because Ewwwwww!" | nc -u -w1 laantungir.net 443
'''
## The problem:
As far as I know, every circumvention tool [VPN, Tor, Shadowsocks, obfs4] has a handshake. You start off messaging the server, and the server replies before you can send your information. National firewalls detect those handshakes, fingerprint them, probe the handshake, then block the IP or take other action. The handshake is a vulnerability. Every tool plays cat-and-mouse obfuscating it.
https://blossom.laantungir.net/b63479f895a207fccfbac9323ac7a4bd47cbc20e43ebfcd60f3c54e41bfb1d1d.jpg
For example Tor bridges are vulnerable to active probing. The adversary connects to a suspected bridge and sends data. If the server responds with a valid obfs4 handshake, the adversary knows it is a bridge. This is how many Tor bridges get blocked.
## The idea:
UDP Nostr eliminates the handshake entirely. The Nostr event is already signed before it touches the network. The signature replaces the handshake. There is no SYN, no TLS ClientHello, no SNI, no key exchange, no recognizable structure — just a blob of bytes in one UDP packet under 1472 bytes.
The adversary can send a probe, but the relay doesn't respond at all. No handshake to detect. No TCP RST to inject (UDP has no RST). No DNS to poison.
## Live example — full zero-config round-trip
My relay has fully implemented UDP Nostr.
https://blossom.laantungir.net/5b1c5fc4ddf89b4aec123c7a2a5934e9a22c3271fa641b071cc8f7740a342bbd.png
**command line**
```bash
# Console 1 - Set up a live watch for the nak default events on the relay
nak req -a 79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798 --stream laantungir.net/relay
# Console 2 - Send via UDP (no --sec needed, nak uses the default key)
nak event -k 1 -c "Hello!" | nc -u -w1 laantungir.net 443
```
**Python:**
```python
import socket, sys
s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
s.sendto(sys.stdin.buffer.read(), (sys.argv[1], int(sys.argv[2])))
```
```bash
nak event -k 1 -c "Hello!" | python3 send.py laantungir.net 443
```
**JavaScript (Node.js):**
```javascript
const dgram = require("dgram"), s = dgram.createSocket("udp4");
process.stdin.on("data", b => s.send(b, +process.argv[3], process.argv[2]));
```
```bash
nak event -k 1 -c "Hello!" | node send.js laantungir.net 443
```
## An example of largest kind:1 that fits in one packet
With the default nak key, empty tags, and a 10-digit timestamp, the Nostr JSON overhead (structural syntax + hex-expanded id/pubkey/sig) is ~340 bytes, leaving **~1132 characters of content** in the 1472-byte UDP budget. Below is an illustrative event at full capacity — its single-line JSON form is exactly 1472 bytes on the wire, one Ethernet frame, unfragmented. (The `id` and `sig` shown are placeholders for readability; a real event carries a SHA-256 `id` and valid Schnorr `sig`.)
```json
{"id":"426462725f7061636b65745f626f756e646172795f746573745f303030303030",
"pubkey":"79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798",
"created_at":1772019044,
"kind":1,
"tags":[],
"content":"The cypherpunk problem: how do two computers communicate freely when the network between them is controlled by an adversary? The standard approaches are anonymity (hide which computer is talking) and decentralization (make copies everywhere so you can't stop them all). But there is a third approach that is less explored: protocol substrate hardening. Design the communication protocol so that interference requires violating physics or OS-level guarantees. The simplest example: fit your message in a single UDP datagram under 1472 bytes. At this size, your message is exactly one Ethernet frame. The adversary cannot block it without blocking all UDP traffic on that port. They cannot fragment it. They cannot reassemble it. They cannot probe for a handshake because there is no handshake. The Nostr event is self-validating: it carries its own signature. The signature replaces the handshake. This is the key insight. Every other protocol announces itself with a handshake. TCP has SYN. TLS has ClientHello. QUIC has its Initial packet. WireGuard has its handshake initiation. All of these create a pattern that can be fingerprinted and blocked. A Nostr event over UDP has no pattern. It is just bytes on the wire. The receiver validates the signature using only the pubkey in the event. No shared secrets. No session setup. No state. This is the no-handshake property. It is the fundamental advantage of Nostr over every other protocol for censorship resistance. Combine this with the MTU boundary and you have a protocol that cannot be blocked without blocking all UDP traffic. The adversary faces a dilemma: block UDP entirely and break the internet, or let your messages through. This is the asymmetry we exploit.",
"sig":"4b57c22b1797b109530ffe5d04cabac468b1a5942873a5141334ecbc77694fc968a1b941979ba13602fceb1dad8014ab6469c6ae9cef0b5668cc23ad1449e103"}
```
## Future work
I'm currently working on an encryption scheme specifically for this protocol.
https://15.235.3.231/git/laantungir/udp_nostr
https://laantungir.net/git/laantungir/udp_nostr
https://[2607:5300:203:bb5c:4a46:c3d3:1dc3:fbe8]/git/laantungir/udp_nostr
http://kn2jam4kyz6s5wacyozo3do3d2zsvh4to45uh7xliulwdust6zjuvnad.onion/git/laantungir/udp_nostr
http://npub1crpldvy49ef8z34wlacwujnfudy4nd7k96aqdx5wgn6ckztz7z8q9t59ud.fips/git/laantungir/udp_nostr

2026-08-08 00:37:20 UTC

Really interesting.
#nevent1q…2cd0

2026-07-17 14:11:19 UTC

@npub1get…0nfm Hey guys, I think getalby.com is down.

2026-07-12 10:10:35 UTC

GM
https://blossom.laantungir.net/005d17014a5955c99c5ff2ccdeb61190df6a4cd7b47e9a08287dc137d6dce4a0.webp

2026-07-02 18:23:07 UTC

https://blossom.laantungir.net/65765cfd4d7fc735bc4a4a4ed8ee5eaf1849ebf2dff8e62f4125fdffb0146bcf.jpg

2026-06-27 00:39:22 UTC

- reply

My vote is to always push the boundaries of what is possible with privacy and censorship resistance, and to stay inspirational in that regard.
That is our niche.
That is our thing.
Nobody else cares as much about censorship resistance as we do, but there are lots of people who care about making reasonable engineering trade-offs in software, to gain users.
I want to make the best tools. Not the tools for the masses.

2026-04-12 11:26:21 UTC

FIPS + Qubes-OS
GM.
Yesterday I integrated FIPS into Qubes-OS. Here is a short description of what each of them does, and the resulting setup.
FIPS - a permissionless internet.
To get a domain name, you need ask for permission.
To get https, you need to ask for permission.
To get an IP address, (the final boss) you need to ask for permission.
FIPS is a permissionless internet. You use a nostr address instead of an ip address, and through some cool engineering, you get a permissionless internet.
So for example:
http://npub1crpldvy49ef8z34wlacwujnfudy4nd7k96aqdx5wgn6ckztz7z8q9t59ud.fips/
gets you to my web page if you are running FIPS, and you don't need permission, and neither do I.
We just need nostr addresses.
QUBES-OS - the securest OS.
Running agents locally can be a real security issue which is originally why I switched to Qubes-OS. Qubes-OS lets you run several operating systems on one machine, and encloses them in what are called "qubes". You can run whatever OS you want in each qube, all on the same machine, all securely separated and isolated.
You can also route internet THROUGH a qube. So a nice example is setting up your vpn in a qube, and use it like the following:
https://blossom.laantungir.net/bb33189c1dd556583f3f606946d16a0b0cd99ba57f4c0a0492405742f47e2f05.png
It forces everything you run in Debian to pass through the vpn qube, else no internet.
https://blossom.laantungir.net/913a045d6710bf593ead0265eeb580822a7677bd69943e88824e9e3bc7254f65.png
You can send multiple OSs through the vpn.
Turns out you can also create a FIPS qube. That is what I did yesterday, and part of my setup now looks something like this:
https://blossom.laantungir.net/be6c13151170d637e3a43dcbd0ef15c66d67e59e594520a39195e05e137eefd7.png
You can check out FIPS here: https://github.com/jmcorgan/fips
Qubes OS here: https://www.qubes-os.org/
Follow FIPS here:
@npub1y0g…00ly
Follow the FIPS creators here:
@npub19wa…8p6k
@npub1hw6…65gr
If you are going to attempt to do this, point your agent to this repo and it should save you some tokens. There were some gotchas that it took a long time for Claude and Codex to figure out.
https://git.laantungir.net/laantungir/fips_setup

2026-03-12 23:27:17 UTC

I fucking love nostr.
The perfect land,
to build my cyber_home.
https://laantungir.github.io/img_repo/21daed60343645018791762f441113d5fd474e5a71ca115ecc9b7dba92c0f696.webp

2026-02-28 09:24:20 UTC

GM https://laantungir.github.io/img_repo/e5c6e9141dda3156af617c4252f7e4f17a3146ed9f25e31f03f1200190b7507e.webp

2025-10-28 11:02:18 UTC

GM fellow nyms. https://laantungir.github.io/img_repo/0d420876fa12422756d2fa01a6383c3da10180c0870bb05e360e395c0158e787.webp