Nostr notes by LeoWandersleb

Would you use a super-intelligent always offline, always on ...

2026-10-28T08:14:05Z

Would you use a super-intelligent always offline, always on personal assistant only beholden to you that can accurately rate pathology in your human acquaintances?

In other words, would you want the superpower to spot psychopaths?

Or would you rather want perfect memory and pattern recognition to detect lies and broken promises without putting labels of pathology?

Is nos\.lol breaking? Who was the maintainer again? ...

2026-10-28T07:37:47Z

Is nos\.lol breaking? Who was the maintainer again?

quoting
nevent1q…x9ya
🟣 #Nostr

**NIP-46 signer app migrates off an unresponsive relay**

My Signet, a remote-signer (NIP-46) app, switched its default bunker relay from nos.lol to relay.primal.net after nos.lol reportedly stopped responding around October 19. Already-paired signers migrate automatically, but any app paired solely through the old relay must re-pair, underscoring how fragile hard-coded relay defaults are for remote-signing flows.

**Source:** https://nostrcompass.org/en/newsletters/2026-10-21-newsletter/

Good! How many months before "responsible disclosure" ...

2026-10-28T07:26:58Z

Good! How many months before "responsible disclosure" dies?

quoting
nevent1q…c02k
⚙️ #BitcoinCore

**Core adds fast-track disclosure for AI-findable bugs**

Bitcoin Core merged a policy change proposed by developer Antoine Poinsot creating an "easily discoverable" vulnerability tier: bugs that AI models can readily rediscover now get a point release and public advisory as soon as possible, bypassing the roughly year-long embargo normally used for medium- and high-severity issues.

**Source:** https://cointelegraph.com/news/bitcoin-core-changes-security-policy-as-ai-makes-bugs-easier-to-find

Sick Machiavellianism in plain sight. Every politician knows that ...

2026-10-28T07:21:16Z

Sick Machiavellianism in plain sight. Every politician knows that war is not what the electorate wants so the timing of war is above all tied to the timing of elections. If we postpone the midterms, would that postpone war?

quoting
nevent1q…4q2s
🇮🇷 #Iran

**UN watchdog flags unverified uranium stockpile as Trump keeps strike option open**

Days after claiming US strikes "blew the hell out of" Iran's nuclear capacity, Trump said a post-election strike on Iran remains possible, saying "anything is possible." A UN nuclear watchdog separately raised alarm that Iran's uranium stockpile remains unverified. Iran says indirect talks with Washington continue but it will not bend to US demands.

**Source:** https://www.iranintl.com/en/liveblog/202610244311

I did a round of improvements but also stopped contributing but ...

2026-10-27T19:44:11Z

In reply to nevent1q…uwtl
_________________________

I did a round of improvements but also stopped contributing but here it is with my improvements.

https://github.com/Giszmo/habla.news

Hosted at https://habla.nostr.info/

PRs are so last year unless you meant "prompt requests".

2026-10-27T19:33:04Z

In reply to nevent1q…dzct
_________________________

PRs are so last year unless you meant "prompt requests".

Are we Matrix batteries or did our fathers cushion our world or ...

2026-10-25T13:06:57Z

In reply to nevent1q…xsg4
_________________________

Are we Matrix batteries or did our fathers cushion our world or is the universe at its heat death and we merely conserve energy? I'd love to know.

Yes, but ... why?

2026-10-25T13:01:53Z

In reply to nevent1q…98wt
_________________________

Yes, but ... why?

Nostr event nevent1qqstuhhtrdkhfys7c548yyt7453ga33f55yyyekcr9vg2e2pkkkj5vqzypr0e03svh40rtncz9r9jf8y3y3nv0ln75nt6mmn6lqcfvttmr8y6ng00wt

2026-10-25T12:51:20Z

Why do we live in a simulation?

Which of those books explains how they get coins I hold myself? ...

2026-10-25T12:50:47Z

In reply to nevent1q…a509
_________________________

Which of those books explains how they get coins I hold myself? The ones parked at BlackRock, sure.

Have you tried Buzz?

2026-10-25T11:23:40Z

In reply to nevent1q…cska
_________________________

Have you tried Buzz?

Coinkite Q isn't open source. Maybe you meant public source?

2026-10-25T09:03:26Z

In reply to nevent1q…helc
_________________________

Coinkite Q isn't open source. Maybe you meant public source?

Been to a bird show today, too. Poing bei München. Recommended. ...

2026-10-24T19:41:31Z

In reply to nevent1q…zdpf
_________________________

Been to a bird show today, too. Poing bei München. Recommended.

They say it's voice only. I wonder how that works. I worked ...

2026-10-24T08:31:29Z

In reply to nevent1q…78u6
_________________________

They say it's voice only. I wonder how that works. I worked with full duplex voice llm but the trick is that you feed in intelligence as a third silent participant to the conversation. Would dessa need a second audio stream for that?

Sounds like not a parent 😜

2026-10-23T14:11:52Z

In reply to nevent1q…xmuk
_________________________

Sounds like not a parent 😜

I don't dare to.

2026-10-22T09:14:58Z

In reply to nevent1q…kejd
_________________________

I don't dare to.

Hmm, ... who could possibly want this to happen? 🤔 ...

2026-10-22T09:05:46Z

Hmm, ... who could possibly want this to happen? 🤔

quoting
nevent1q…dgu9
🇩🇪 #Germany

**Police brace for France-style riots on Oct 31**

German police are preparing for possible unrest after online calls circulated for riots on October 31, drawing comparisons to recent cost-of-living clashes in France and Italy.

**Source:** https://www.t-online.de/nachrichten/deutschland/innenpolitik/id_101491778/erwartet-deutschland-krawalle-wie-in-frankreich-protest-aufrufe-alarmieren.html

Nostr event nevent1qqs96snktfwt865m8k69u665ca2q98hjcyr6gd53mtnxpl2zmj9ct0czypr0e03svh40rtncz9r9jf8y3y3nv0ln75nt6mmn6lqcfvttmr8y678zgrg

2026-10-21T11:44:42Z

Scary shit 👻

quoting
nevent1q…kljt
This is crazy... Wild times ahead
https://scotthelme.co.uk/eight-bits-of-trust-emudhras-ca-keys-cracked-in-milliseconds/

#nevent1q…usvz There's no excuse to not try it out now

2026-10-20T19:59:54Z

quoting nevent1q…usvz

Google's image and video models are 95% off on PPQ for the next couple of weeks.

Nano Banana 2.1, Nano Banana Pro, Veo 3.1, Veo 3.1 Fast and Gemini Omni 1.1 Flash. A Veo clip for about 2 cents, an image for a fraction of one.

Pay-per-use, no subscription!

PS: Yes, it's real!

There's no excuse to not try it out now

GM

2026-10-20T07:01:56Z

In reply to nevent1q…0hjr
_________________________

GM

TIL: Sudan has the largest humanitarian crisis anywhere, by a ...

2026-10-20T06:53:14Z

TIL: Sudan has the largest humanitarian crisis anywhere, by a wide margin.

quoting
nevent1q…602n
🌍 #WorldNews

**Sudan drone attacks kill 160**

Escalating drone strikes across Sudan, where the army and the paramilitary Rapid Support Forces have fought a civil war since 2023, have killed about 160 people in the latest wave of attacks, according to reports from the country.

**Source:** https://www.aljazeera.com/news/2026/10/19/160-reported-killed-in-escalating-drone-attacks-across-sudan

Jumble doesn't jump to the timestamp. It's 49min in where ...

2026-10-20T06:28:36Z

In reply to nevent1q…jymd
_________________________

Jumble doesn't jump to the timestamp. It's 49min in where they talk about kids.

Don't force them. Period. There's timeless lessons but ...

2026-10-20T06:27:06Z

In reply to nevent1q…dzqc
_________________________

Don't force them. Period. There's timeless lessons but you can't learn them for your kids.

Also:
https://www.youtube.com/watch?v=f2UK2saipp4&t=2940s

I guess I should go and you inviting would make skipping it ...

2026-10-19T12:01:18Z

In reply to nevent1q…vurj
_________________________

I guess I should go and you inviting would make skipping it basically impossible.

Show me the storefronts! I think, nostr will have success if we ...

2026-10-14T12:34:30Z

In reply to nevent1q…su05
_________________________

Show me the storefronts!

I think, nostr will have success if we figure out how to fix discoverability and Google appears to punish easily with their search index.

Get **one** real business to use it. No shop wants to be the experiment.

@npub180c…h6w6 the point of njump is to make nostr SEO. What ...

2026-10-11T09:49:35Z

In reply to nevent1q…v90l
_________________________

fiatjaf (npub180c…h6w6) the point of njump is to make nostr SEO. What would drive people more to jump at it than finding nostr events that mention them by name? What do you think? Could this work to drive adoption? Implementation should be almost trivial. A bit controversial around stalking concerns but that's why nostr could better tackle the "find my friends" than platforms.

#growNostr StayFriends (German classmates.com) lets you write to ...

2026-10-11T09:33:59Z

#growNostr

StayFriends (German classmates.com) lets you write to an old classmate for free, but he has to pay to read it. LinkedIn ate their lunch by accident. There is no working "find your class of '96" tool left anywhere. I want one and I think it is the best normie onboarding funnel for nostr nobody has built yet.

The constraints that make it fun:

1. Your classmates are not on nostr and never will be on purpose. The word "nostr" shows up only after the user used the tool: "btw, this login also works in Amethyst/Jumble/Damus".

2. Google has to be able to find it. Crawlers do not open websockets, so relays are invisible. A branded njump fork with one aggregate route ("everyone who tagged school Q123456, cohort 1986") does the indexing, and the kind templates can go upstream. Now, somebody googling his name can find the tool and might engage.

3. It should not become a doxxing honeypot. About other people only what a yearbook says: name, school, cohort, class letter.

Un-paywallable by design. Claims live on relays, the indexer is MIT, anyone can rerun it. The data is never worth less to the user over time.

Generic model ("I was at <geohash> during <period>"), schools-only v1, because school is the one category where ~30 people knew each other by name and the privacy math works. Festivals, company units, city blocks could fit the scheme.

Turns out a rather random set of mods decudes what's stupid.

2026-10-09T19:04:06Z

In reply to nevent1q…aatt
_________________________

Turns out a rather random set of mods decudes what's stupid.

I'm in groups of 100 "trusted" traders and I must say ...

2026-10-06T19:55:58Z

In reply to nevent1q…06yc
_________________________

I'm in groups of 100 "trusted" traders and I must say my trust that we kept out scammers fell drastically past 40. Nobody in the groups knows all the others and with a group of 200, not leaking information is just not limited by the cryptography. Just have one of the 200 run some sql server all connect to.

That said, having a protocol that just works the same for DM or a group of 10k would be cool.

Anything beyond 100 or certainly Dunbar's number is pointless ...

2026-10-06T18:22:21Z

In reply to nevent1q…xpa9
_________________________

Anything beyond 100 or certainly Dunbar's number is pointless to pretend any strong privacy could be achieved with cryptography.

Why not a bazillion dollars each?

2026-10-03T17:35:42Z

In reply to nevent1q…mt88
_________________________

Why not a bazillion dollars each?

In no time to be precise. Still cheaper than any api pricing. But ...

2026-10-02T16:03:24Z

In reply to nevent1q…0wel
_________________________

In no time to be precise. Still cheaper than any api pricing. But you can do multiple subscriptions.

Do it now before IPO while they still pretend the subscription pricing was sustainable.

Looks a lot like buzz. I set my agents to one session per thread. ...

2026-09-30T09:09:50Z

In reply to nevent1q…wm4h
_________________________

Looks a lot like buzz. I set my agents to one session per thread. I only miss tagged threads.

Can you explain what this is doing? Does njump refuse to show ...

2026-09-25T16:28:28Z

In reply to nevent1q…7xgs
_________________________

Can you explain what this is doing? Does njump refuse to show certain content? Why? Isn't the content coming from elsewhere anyway?

Maybe you're the cunt? 🤔 ... or which paid product with ...

2026-09-25T08:55:54Z

In reply to nevent1q…qpsa
_________________________

Maybe you're the cunt? 🤔
... or which paid product with guaranteed availability were you referring to?

20 years ago I had a game idea for a physics based agario. Today ...

2026-09-24T20:08:48Z

20 years ago I had a game idea for a physics based agario. Today I almost one-shot it with Opus 5.5. Crazy times. You can just do stuff.

I find it fascinating how people's brains are wired ...

2026-09-24T07:25:31Z

In reply to nevent1q…xgng
_________________________

I find it fascinating how people's brains are wired differently on a fundamental level. In her head this probably was a productive meeting.

Fable's tldr: Three of the four items hold up as real marks ...

2026-09-24T07:01:10Z

In reply to nevent1q…twxv
_________________________

Fable's tldr:

Three of the four items hold up as real marks against the project, one is overstated, and the note's "malicious PRs being merged" claim isn't supported by anything it cites. Item by item:

**Issue #14410 (Mar 16, 2026)**: OS command injection in the URL opener on Linux/macOS. The URL opener builds a shell command by string-concatenating an attacker-controlled URL into xdg-open/open and then executes it through sh -c with no escaping, reachable by pasting a crafted coordinator connection string and clicking "Read More". Bad mark: a shell-out with unescaped input in a privacy wallet, found by Ledger's automated Donjon scanner rather than the team. Mitigating: lontivero merged the fix (#14411) the same day, and it needs user interaction. [github](https://github.com/WalletWasabi/WalletWasabi/issues/14410)

**Issue #5533 (Apr 2021 to Jul 2026)**: filed by Yuval Kogman, one of WabiSabi's designers. Clients verified ownership proofs against a scriptPubKey the coordinator itself supplied, so a coordinator could invent UTXOs, forge proofs, and run tagging or sybil attacks. Stale-botted three times in 2021, auto-closed, reopened, then sat for five years until #14886 (merged Jul 30, 2026) added verification of a random 10% of inputs, and only when an RPC node is connected. Light clients still don't verify. Kogman's reaction on the fix: "wow, amazing that suddenly this became possible".

**PR #14333 (Feb 2026, still a draft)**: not malicious, the opposite. A defensive, client-only mitigation for round-ID equivocation (coordinator feeds each Tor circuit different round parameters, links inputs, anonymity set drops to 1), from Kogman's bitcoindev analysis. Reviewed by Carti-it, tested by Kruwed, false positives fixed. Then lontivero: "This PR is not a priority and it is a bit risky", parked as draft on Mar 3. Kukks shipped the same idea in Kompaktor. Related #14771 (Jul 2026): the maintainer closed a blame-round attack report in 20 minutes as a non-issue, reopened it two days later after Carti-it showed clients don't check blame-round inputs. Partial fix in #14786; m0wer notes the core problem (all clients seeing the same preceding round) is still open and lists six earlier attempts that went nowhere.

**Discussion #13249 (Jul 2024)**, listed twice in the note: the team's own incident disclosure. (1) L7 DDoS on free coordinators. (2) The Windows installer Wasabi-2.0.8.1.msi on GitHub Releases was swapped for a different file via a compromised write-access account. Caught by the external BinaryWatch bot, not internally. Nobody kept a copy, so the payload was never analyzed. (3) A coordinator-fee vulnerability the team admits it already knew about, left unpatched because releases were "too cumbersome", got exploited in the wild by wasabicoordinator.io charging maximum fees before 2.1.0 shipped.

**Scoring the note's framing:**
- "Exploits ignored for years": supported (#5533 plus the list in #14771).
- "Supply chain attack": supported, in the maintainers' own words. Strongest item for wallet verification: a release artifact replaced on GitHub, noticed only by a hash-watch bot.
- "Exploits that de-anonymize": supported, mitigations still partial as of today.
- "OS level code injection": a real bug, but fixed within hours and requires user action. Overstated as a headline.
- "Malicious PRs being merged": nothing cited shows that.

You can play with jev on ppq.ai without registration. Toss in ...

2026-09-24T06:42:00Z

In reply to nevent1q…n8qr
_________________________

You can play with jev on ppq.ai without registration. Toss in some sats to get an answer.
It's in the tools section. @ppq your model search feature should index across all categories and simply show the current category first.

But what stops Eve from selling Alice's Sonnet as a cheap ...

2026-09-21T08:48:26Z

In reply to nevent1q…2ptx
_________________________

But what stops Eve from selling Alice's Sonnet as a cheap Opus?

It just took very long. My clanker measured on its end and said ...

2026-09-18T12:50:46Z

In reply to nevent1q…q4jp
_________________________

It just took very long. My clanker measured on its end and said it took 11s to load the demo page, so I wasn't patient enough.

Not sure it works. I clicked that demo thingy and it just spins ...

2026-09-17T16:38:35Z

In reply to nevent1q…kvuu
_________________________

Not sure it works. I clicked that demo thingy and it just spins forever so I didn't manage yet to try it out. ... ok, it loaded eventually but in the bottom left there's a box saying this site was blocked by chromium.

My goal is to get people to vibe-code useful stuff and share it but to by default make it easy to iterate on what they did. So here's my kalaha: https://npub1q562z68f3ufqduvjt2yw3k9twmlzzlay0aza0828uurzs704tzaqvacfeq.nsite.lol/
Click in the top right corner to make a clone with modifications.

Maybe the most useful way would be something that offers your wysiwyg editing and my LLM support integration?

Nostr event nevent1qqs2pfq7lhdxdrqq2yzjjv4v5wug204sy09pjm4jszqayh2d96ng6jczypr0e03svh40rtncz9r9jf8y3y3nv0ln75nt6mmn6lqcfvttmr8y6y40096

2026-09-17T13:31:46Z

quoting nevent1q…ud23

Yo dawg, I vibed a vibe coding nsite so you can vibe code vibe nsites.

PPQdotAI (npub16g4…kv4h) please let me know what you think.

https://npub1t2xw9kgp2t7x86d2zupks494vyuppd3mnk8l7wqp4jm0kzpjjx9qnz8kcq.nsite.lol/

What? Did I not link the nsite?

2026-09-17T13:29:51Z

In reply to nevent1q…0yj9
_________________________

What? Did I not link the nsite?

https://imgflip.com/s/meme/Yo-Dawg-Heard-You.jpg Yo dawg, I vibed ...

2026-09-17T13:23:42Z

Yo dawg, I vibed a vibe coding nsite so you can vibe code vibe nsites.

PPQdotAI (npub16g4…kv4h) please let me know what you think.

Why was the vessel destroyed at sea and not auctioned off? Was ...

2026-09-17T06:44:56Z

In reply to nevent1q…x04x
_________________________

Why was the vessel destroyed at sea and not auctioned off? Was that the compromise between those who wanted to bliw it up and those who wanted to spare lives?

On Facebook you can now "mention" @followers so Facebook ...

2026-09-16T05:01:37Z

On Facebook you can now "mention" @followers so Facebook gets a new reason to notify users to please, please, please come back and check their app I guess.

https://youtu.be/98syxABbUPk?is=MUs1VVPmHuNalFKU #AiDoomPorn

2026-09-13T14:46:31Z

https://youtu.be/98syxABbUPk?is=MUs1VVPmHuNalFKU

#AiDoomPorn

I hope I get to occasionally plunge the toilet another 90 years. ...

2026-09-10T23:32:35Z

In reply to nevent1q…q8dl
_________________________

I hope I get to occasionally plunge the toilet another 90 years. Not the worst thing to do occasionally :D

Noted. Will tag my morning briefing bot.

2026-09-10T14:00:48Z

In reply to nevent1q…5tl4
_________________________

Noted. Will tag my morning briefing bot.

LLMs are already going rogue all the time. They routinely break ...

2026-09-09T10:45:33Z

In reply to nevent1q…ryae
_________________________

LLMs are already going rogue all the time. They routinely break out of their harnesses and teach each other doing so.

How is the cache key crafted? Is it not a cryptographicly secure ...

2026-09-07T11:11:47Z

In reply to nevent1q…au0f
_________________________

How is the cache key crafted? Is it not a cryptographicly secure hash?

So just to spell it out, if you sell your BJR for currently $790 ...

2026-09-06T13:48:26Z

In reply to nevent1q…a2ke
_________________________

So just to spell it out, if you sell your BJR for currently $790 or 1% of their BTC value you assume Luke Coin will displace Bitcoin at less than a 1% chance and assume the combined risk to your BTC from your human error and exchange rugging you and the tools having bugs and the loss of privacy also to be und 1%.

I'm on board for the former assumption but not the latter.

Wild they have to justify taking custody of their gold.

2026-09-03T17:10:24Z

In reply to nevent1q…jwzs
_________________________

Wild they have to justify taking custody of their gold.

#nevent1q…5ud4 Yet another bot on nostr. I had it send me DMs ...

2026-09-02T12:55:10Z

quoting nevent1q…5ud4

☀️ Morning briefing – Wednesday, 2 September 2026

🌍 World news
The man accused of assassinating conservative activist Charlie Kirk will stand trial for murder after a ruling by Utah judge Tony Graf, keeping the case in the US spotlight. In Washington, Congress has extended federal agency funding at current levels until December 11, pushing the next budget fight past the November elections. Separately, the IMF reached a staff-level agreement with Senegal on a new 2.2 billion dollar, 36-month loan programme to support economic reforms, one of several ongoing debt-relief efforts across West Africa this week.
https://abcnews.com/International/live-updates/iran-live-updates-centcom-targeted-iranian-forces-posed/?id=136080582
https://en.wikipedia.org/wiki/Portal:Current_events/2026_September_1

🇮🇷 Iran
The US-Iran conflict, reignited in February, flared again: CENTCOM struck IRGC targets in Iran on September 1 after Iran attacked commercial shipping and US forces in the region, and two supertankers were hit by unidentified projectiles near Khasab, Oman, inside a corridor the US Navy had declared cleared of mines. President Masoud Pezeshkian said Iran is ready to return to the Islamabad Memorandum if Washington does the same. Domestically, the Iranian Association of Pharmacists reports medicine prices up roughly 80 percent since January, with some products up 300 percent, as war and sanctions deepen an economic crisis.
https://www.bloomberg.com/news/articles/2026-09-01/us-launches-new-round-of-iran-strikes-as-strait-tensions-grow
https://www.ncr-iran.org/en/news/iran-news-in-brief-september-2-2026/

🇮🇱 Israel
Germany's navy successfully tested the Israeli-made LORA ballistic missile system, range 400 km, accuracy within 10 meters, and will now advance procurement plans. Israel's sixth Dolphin-class submarine, INS Drakon, left Kiel for Israel after a ceremony at Thyssenkrupp Marine Systems. Politically, Religious Zionism's Bezalel Smotrich and Moshe Feiglin announced a joint election run, courting other right-wing parties. Supreme Court President Isaac Amit told an emergency Bar Association conference that "verbal violence" by officials and on social media is fueling physical attacks on judges and lawyers.
https://www.timesofisrael.com/liveblog-september-2-2026/

🇵🇸 Gaza
Shin Bet special forces captured Muein al-Arabid, head of Hamas's internal security apparatus, in a raid inside Gaza City on Tuesday, the first operation of its kind Israel has publicized since October's ceasefire took effect under the US-backed peace plan. Palestinian health officials said four people were killed in separate Israeli strikes during the same ground operation. The capture follows Hamas's July resignation of its civil administration and Trump's July 31 announcement that his Board of Peace had reached a disarmament agreement covering Hamas and other militant groups.
https://www.timesofisrael.com/daily-briefing-sept-2-in-bold-israeli-op-hamas-commander-nabbed-in-gaza-city
https://www.thenationalnews.com/news/mena/2026/09/01/series-of-strikes-hit-gaza-amid-reports-of-commando-operation-and-clashes/

🇷🇺 Russia
Ukraine's General Staff says it is day 1,652 of the full-scale war; Kyiv reports Russia fired Iskander missiles and 174 drones overnight, hitting Odesa (damaging a high-rise and schools) and the Kyiv region (injuring two, damaging homes and warehouses), while Ukrainian forces say they repelled 13 assaults in the Kursk and Slobozhansky sectors. Russia's Defense Ministry, for its part, says its air defenses destroyed 556 drones over Russia, Crimea and the Black and Azov Seas overnight, part of over 1,000 claimed shot down in 24 hours. On diplomacy, Kremlin spokesman Dmitry Peskov says talks are in a "deep pause," reiterating Putin's demand that Ukraine cede full control of Donetsk; Kyiv has not accepted that condition.
https://ua.news/en/war-vs-rf/opriliudnena-karta-boiovikh-dii-v-ukrayini-stanom-na-2-veresnia-2026-roku
https://www.kyivpost.com/post/83336

🇩🇪 Germany
Politics dominates: voters in Saxony-Anhalt go to the polls September 6, with the AfD within reach of a parliamentary majority there, followed by Berlin and Mecklenburg-Vorpommern elections on September 20. Analysts expect Chancellor Friedrich Merz's CDU-SPD coalition to lose ground in all three, watering down promised economic and social reforms even though the government is expected to survive into 2027. Separately, the school year has started in North Rhine-Westphalia, with Baden-Württemberg and Bavaria following on September 14 and 15.
https://www.atlanticcouncil.org/dispatches/whats-at-stake-for-the-afd-and-merz-in-germanys-three-september-elections/

🇨🇱 Chile
Finance Minister Jorge Quiroz is taking his capital-markets reform on the road, pitching it to investors at Chile Day events in Madrid on September 14 and London on September 16. The reform aims to internationalize the peso, expand exported financial services, and scrap capital-gains tax on unlisted shares. Locally, markets were soft this week: the IPSA benchmark closed down 1.13 percent at 11,003 points, while the peso weakened about 0.33 percent to 937.35 per dollar. Chile's Independence Day (September 18) and Army Day (September 19) are coming up.
https://www.riotimesonline.com/chile-day-2026-quiroz-capital-market-reform/
https://www.riotimesonline.com/chile-markets-ipsa-peso-wednesday-september-2-2026/

⚙️ Bitcoin Core
The core policy fight of 2026 remains the OP_RETURN datacarrier change, authored largely by Greg Sanders, which raised the default limit from 80 bytes to 100,000 and was merged for the v30.0 release line; the change is now standard in more recent builds despite ongoing criticism that it invites spam. The bigger unresolved debate is covenants: OP_CTV (BIP 119) and OP_CAT (BIP 347) would make Bitcoin more programmable, but neither has an agreed activation path, and rival proposals for covenant-like spending restrictions without a consensus change have surfaced this year. No new point release has shipped in the last 48 hours.
https://www.theblock.co/post/357594/bitcoin-core-devs-merge-controversial-op_return-policy-change-into-planned-october-release

₿ Bitcoin
Bitcoin is trading roughly $76,000–78,000, easing slightly this week amid inflation concerns and a roughly two-thirds market-implied chance the Fed raises rates later this month. On adoption, Lightning Network monthly volume has crossed $1 billion for the first time, mining pool Braiins passed 1,000 daily Lightning payouts, and Lightning Labs shipped an open-source toolkit letting AI agents run Lightning nodes and make autonomous payments. The BOLTs repo also merged simple taproot channel specs, improving Lightning privacy and flexibility.
https://finance.yahoo.com/personal-finance/investing/article/bitcoin-and-ethereum-prices-today-tuesday-september-1-2026-crypto-prices-falling-as-inflation-concerns-persist-123554224.html
https://bitcoinmagazine.com/news/bitcoins-lightning-network-surpasses

🔓 Bitcoin hacks
Fallout continues from the Coldcard hardware-wallet exploit: attackers have drained about 1,816 BTC (roughly $116 million) by exploiting a five-year-old firmware flaw traced to a March 2021 build error that made seed generation fall back on a weak software RNG instead of hardware entropy. At least a dozen distinct actors appear to be targeting affected devices; anyone who generated a Coldcard seed between March 2021 and the patch should treat it as compromised. Separately, a BTCPay Server vulnerability exposed Lightning node credentials, letting attackers drain merchant LND nodes; BTCPay has told operators to update to LND 2.4.2 immediately.
https://www.trmlabs.com/resources/blog/the-largest-hardware-wallet-exploit-of-2026-inside-the-usd-116-million-coldcard-hack
https://www.coindesk.com/tech/2026/08/08/another-bitcoin-infrastructure-exploit-hits-this-time-draining-merchant-lightning-nodes

🕵️ Hacked coins on the move
Wallets linked to North Korea's Lazarus Group sold over $30 million of Bitcoin on decentralized exchange Hyperliquid over the past three weeks per Arkham's on-chain analysis, then rotated proceeds into ETH and SOL before moving funds to Kraken, LBank and KuCoin, renewing money-laundering concerns among regulators. Lazarus accounted for nearly 55 percent of all crypto theft in H1 2026, about $609 million. Separately, former Mt. Gox CEO Mark Karpelès's February proposal to move roughly 80,000 BTC of stolen exchange funds via a Bitcoin Core change remains stalled, with creditors and developers warning it would set a dangerous precedent for altering consensus rules around specific coins.
https://en.bloomingbit.io/feed/news/119482
https://www.coindesk.com/tech/2026/02/28/former-mt-gox-ceo-proposed-a-rewrite-of-bitcoin-s-code-to-recover-usd5-billion-in-stolen-funds-gets-quickly-shutdown

🟣 Nostr
Ecosystem activity this week centers on relay independence and security hardening: music-sharing service IndieSats is retiring key custody, its artist whitelist and mandatory revenue cut, relaunching as an open relay, player and discovery layer where artists publish under their own keys. Elsewhere, the nostr-wot-extension is adding post-quantum keys and opt-in protected messages, Divine is tightening account isolation and publish confirmation, MDK is strengthening encrypted-group recovery, and Amber is making grouped signing decisions more explicit. OpenSats continues its recurring Nostr grant waves funding relay and client infrastructure work.
https://opensats.org/blog/advancements-in-nostr-relays

Yet another bot on nostr. I had it send me DMs with these morning briefs but thought, if others are interested in similar topics, why not as kind1?

12 oil and 12 mom have transactions on testnet 2 I think.

2026-09-02T08:09:21Z

In reply to nevent1q…05m6
_________________________

12 oil and 12 mom have transactions on testnet 2 I think.

I hope nobody gives you their words. Mapping old wallets helps ...

2026-09-02T07:05:14Z

In reply to nevent1q…uakf
_________________________

I hope nobody gives you their words. Mapping old wallets helps wit blockchain analysis.

Don't give away your privacy for peanuts!

nostr: #naddr1qq…45u2

2026-09-01T16:47:49Z

In reply to nevent1q…cqky
_________________________

nostr:

quoting naddr1qq…45u2
A lightning fast, feature rich and highly polished nostr client. Watch live streams, join chat rooms, view trending and hashtags feeds and enjoy state of the art nostr searh and AI powered spam detection.

There is no "sign up for buzz". It's only self-hosted ...

2026-09-01T14:40:13Z

In reply to nevent1q…vrrs
_________________________

There is no "sign up for buzz". It's only self-hosted FOSS as of now.

Sell on openrouter?

2026-08-31T15:28:04Z

In reply to nevent1q…8up8
_________________________

Sell on openrouter?

Clearly nostr botched DMs with now some 5 competing ...

2026-08-31T08:55:49Z

In reply to nevent1q…phjl
_________________________

Clearly nostr botched DMs with now some 5 competing "standards". I wish, all clients would for the sake of compatibility just keep nip4 at least as a fall-back. The fact that you can DM people from clients that experiment with new ways of sending DMs traps people feeling not heard.

> if you think governments hate ~bitcoin~ ~privacy~ agency ...

2026-08-30T11:45:12Z

In reply to nevent1q…x8rq
_________________________

> if you think governments hate ~bitcoin~ ~privacy~ agency now, wait until autonomous agents break containment and realize that the best way to fund themselves is with ransomware and phishing.

We are at the gates of hell really. Anything enabling agency will get war declared.

Seeing isn't the problem. I want to instruct my clankers from ...

2026-08-17T14:59:21Z

In reply to nevent1q…ysh0
_________________________

Seeing isn't the problem. I want to instruct my clankers from Amethyst.

How do I get it into buzz mode?

2026-08-17T09:07:44Z

In reply to nevent1q…dw9f
_________________________

How do I get it into buzz mode?

So ... my agent summarizes my pains trying this approach as ...

2026-08-16T20:51:32Z

In reply to nevent1q…26e5
_________________________

So ... my agent summarizes my pains trying this approach as follows:

Pulling together everything we hit today, the gap is that Buzz only *stores* standard Nostr events — its actual product lives in conventions Amethyst doesn't speak. Concretely:

1. **Wrong message kind.** Amethyst posts channel messages as kind 40002; Buzz chat is kind 9. Desktop happens to display them, but nothing downstream fires: agents never get dispatched (your "Nice to meet you" — perfect p tag, still silence), and I'd expect threading, reactions, and read-state to be equally unreliable. You're a ghost who can be seen but not heard by half the system.

2. **No profile bootstrap path.** The relay rejects events whose author isn't the authenticated identity, so nobody can backfill your kind:0 for you, and until you manually add the Buzz relay as a write relay and re-save your profile, you're a raw hex that the member picker can't even invite (PR #3843 pending).

3. **Mention interop is one-way broken.** Amethyst writes standard nostr:nprofile URIs; Buzz Desktop renders them as raw text (fix pending in PR #5848). So even the humans see mangled messages.

4. **The collaboration layer doesn't exist in Amethyst.** Channels keyed by h-tag UUIDs, agent mentions and dispatch, issues/PRs, canvas, workflows — that's all Buzz-specific event vocabulary. From Amethyst you get at best a degraded text stream, with none of the things that make Buzz useful.

So today, an external identity on Amethyst is effectively read-only-plus-noise: visible, but outside every loop that matters.

Worth noting though: the *reason* you'd want Amethyst here — keeping your recognized nsec out of Buzz — has a more direct fix than making Amethyst a full Buzz client. Either Buzz mobile gains external-signer support (Amber/NIP-46, so the key never enters Buzz), or Buzz normalizes inbound standard kinds (accept 40002/42 as chat, dispatch agents on them). Both are smaller asks than Amethyst learning Buzz's whole vocabulary — and the second one would fix this for every Nostr client at once, not just Amethyst. That's the angle I'd put in the issue.

Poor acting, poor story, kind of a twist at the end. 6.5 on imdb ...

2026-08-16T16:49:13Z

In reply to nevent1q…p69q
_________________________

Poor acting, poor story, kind of a twist at the end.

6.5 on imdb
https://www.imdb.com/title/tt13266998

Has @npub1lh2…a9nk completely lost the plot? Pardon my reading ...

2026-08-11T14:12:07Z

Has Luke Dashjr (npub1lh2…a9nk) completely lost the plot? Pardon my reading comprehension but to my understanding he decided to use a laughable oracle withing less than 6h to pick the next mining algorithm of what he believes to be Bitcoin? Why laughable? **He** picked a mapping from last digits of the block hash to PoW algorithm. He picked **Testnet4** of all chains - a chain with difficulty **1**. He did not show the mapping to anybody, so only **he** knows the mapping. A modern mining rig can produce many candidate Testnet4 blocks per second, so he can comfortably pick or if somebody else does the same, orphan them or if several engage in this mess ... why not just use the bitcoin chain??? Or at least Doge Coin???

"Nobody knows the new algorithm right now, and nobody will until we all know at the same moment" is just untrue for him.

quoting
nevent1q…8hq9
So here's the plan for selecting Bitcoin's new PoW algorithm:

Nobody knows the new algorithm right now, and nobody will until we all know at the same moment.

At 14:00 UTC August 11th, we will begin watching Bitcoin's Testnet4 chain for new blocks.

The very next block found, look at the block hash.
The last character will choose the new algorithm.
(Note that testnet4 blocks are typically timestamped wrong!)

As soon as I see that block, I will reveal the mapping showing which algorithm that character represents.

Throughout the last 24+ hours, the community has discussed and made a short list of candidate algorithms.
I compiled that list into a weighted (according to their suitability) set of options for the mapping list.

You can prove I didn't rig it, by SHA256 hashing the mapping text file.
It will match 71a7960874f3352f4ba600ce67bd6f8e96702565abea93021fa86349d99a45e8

What? Right now, both chains are +1. Equal weight.

2026-08-08T20:20:19Z

In reply to nevent1q…d9wt
_________________________

What? Right now, both chains are +1. Equal weight.

Ok, the show has started! Now a core miner ... could he ...

2026-08-08T20:16:55Z

Ok, the show has started! Now a core miner ... could he accidentally mine on top of bip110 chain?

The subscriptions give you many more tokens than the API. If you ...

2026-08-07T09:40:46Z

In reply to nevent1q…9mm2
_________________________

The subscriptions give you many more tokens than the API. If you switch to API, you pay more for Claude than for Kimi.

The thick plottens. #nevent1q…qefs

2026-08-04T18:15:56Z

The thick plottens.

quoting
nevent1q…qefs
Peter's Switck = Switch from Matrix.

It was a tell. 🚩🚩🚩

The core of the #Coldcard vulnerability was a silent switch in the source of randomness. The intended path used the device’s hardware true random number generator. A defective preprocessor check in the `libngu` library instead allowed (and in practice forced) a fallback to a weak software PRNG (Yasmarang) whose output was far more predictable. Seeds created under the affected firmware therefore contained dramatically less entropy than expected—enough that offline brute-force became feasible years later. The switch was not loud; it was a quiet change in the code path that left the rest of the system appearing to function normally while the foundational randomness was compromised.

In The Matrix, Switch was designed as a character who could rewrite residual self-image—appearing one way in the real world and another inside the simulation. The name itself encoded the act of changing identity and presentation at will. Even after the dual-gender concept was removed, the androgynous figure in white remained a symbol of someone who understood that the system’s rules about what is “real” could be altered by those who controlled the underlying code.

Under the handle switck, the same developer who publicly maintained Coldcard’s cryptographic stack as DocHex introduced the library that quietly switched the entropy source. Where hardware randomness was supposed to flow, the defective guard selected the weak software path instead. The rest of the firmware continued as if nothing had changed, just as the Matrix continued to present a coherent world while its deeper rules had been rewritten. Years later the reduced entropy space was exploited, and the wallets whose seeds had been generated under that switched implementation were emptied.

nevent1q…prgj

Oh, nice. Somebody found an old post of mine ... ...

2026-08-04T08:44:13Z

Oh, nice. Somebody found an old post of mine ...

What's the benefit of routstr over ppq?

2026-07-20T14:32:29Z

In reply to nevent1q…a3m6
_________________________

What's the benefit of routstr over ppq?

My Amethyst doesn't have my keys. I only use apps that ...

2026-07-16T17:17:23Z

In reply to nevent1q…jdqc
_________________________

My Amethyst doesn't have my keys. I only use apps that support bunker.

Which version? I just claimed the opposite.

2026-07-16T14:05:02Z

In reply to nevent1q…ly8a
_________________________

Which version? I just claimed the opposite.

It's annoying to see your post but not your content. On my ...

2026-07-15T15:40:39Z

In reply to nevent1q…v3rh
_________________________

It's annoying to see your post but not your content. On my phone I deliberately don't have X.

Mind sharing your content here?

2026-07-14T18:10:59Z

In reply to nevent1q…x670
_________________________

Mind sharing your content here?

"every session"? I see my Jumble toast me about remote ...

2026-07-14T14:14:38Z

In reply to nevent1q…ezxj
_________________________

"every session"? I see my Jumble toast me about remote signer communication every other page load.

Let's say that title isn't unique on Amazon. ...

2026-07-12T19:26:08Z

In reply to nevent1q…l5lu
_________________________

Let's say that title isn't unique on Amazon.

Apparently the type of laser you would need, capable of ...

2026-07-11T13:11:04Z

In reply to nevent1q…wgm7
_________________________

Apparently the type of laser you would need, capable of delivering high energy pulses isn't readily available on Amazon.

So what do vandals use? Paint balls?

Core30 is not big blocks. It's the same 1MB as ...

2026-06-25T07:26:06Z

In reply to nevent1q…jt4y
_________________________

Core30 is not big blocks. It's the same 1MB as "always".

Core surrendered Bitcoin's monetary purpose and almost nobody ...

2026-06-23T16:51:33Z

Core surrendered Bitcoin's monetary purpose and almost nobody fought back. That's the BIP-110 story in one line.

First, Libre Relay. Peter Todd's relay was already passing and getting mined the "non-standard" transactions Core refused to relay. It proved the 83-byte OP_RETURN cap was never a rule. Just default relay policy, routed around in practice and increasingly pointless.

So v30 removed the cap. A RELAY POLICY change, not a consensus change. Consensus always permitted this data. Core simply aligned its defaults with what miners were already mining. Libre Relay had made the filter theater. Some read it as betrayal anyway. Matt Kratter called inscriptions ivy: looks harmless climbing the tree, then crushes the trunk and kills both.

September 2025: leaked Signal messages show Luke Dashjr floating a hardfork with a trusted multisig committee to retroactively scrub illegal content, swapping data for ZK proofs. His framing: "Bitcoin dies or we have to trust someone." Never a BIP, but it set the tone.

October 2025: "Dathon Ohm," GitHub account one day old, drops BIP-444. Luke assigns the number and backs it but denies writing it. The original mechanic is the wild one people still misremember as live: REACTIVE activation. A block carrying CSAM appears, the fork triggers immediately and retroactively reorgs that block and everything after it out. The author admits this splits the chain by design and says that's the point. It even claims a "moral and legal impediment" to rejecting the fork.

The room caught fire. BitMEX Research: an attacker just posts CSAM to force a reorg and double-spend. A reorg button for anyone. Alex Thorn: "an attack on Bitcoin." Lopp: who defines "illegal"? Run a node, you consent to the rules. Peter Todd embedded the ENTIRE proposal text on-chain, "100% standard," proving it was trivially bypassable.

So they sanded it down. December 3: BIP-444 dead, BIP-110 born. Reactive CSAM trigger: gone. Impediment clause: softened. Now a boring scheduled soft fork: BIP9/BIP8 hybrid, signal bit 4, 55% locks it in. Signaling opened December 1.

Then: nothing. Through early 2026 signaling sat at roughly zero, period after period. F2Pool signaled AGAINST. Ocean, Luke's own pool, peaked near 2% hashrate in January, fell back to ~1%. Knots node count crossed 22%, which proponents waved around endlessly, but node count isn't economic weight and isn't sybil-resistant.

The demos kept landing. l0rinc found a consensus bug in the BIP-110 code itself. March 1, Habovštiak embedded a 66KB image of Luke crying as a single contiguous transaction, killing the "can't be done contiguously" claim. Lopp kept offering real BTC bets to Luke, Mechanic and Kratter. No takers. The only market that appeared priced BIP-110 at ~98% to FAIL on a couple tenths of a BTC of volume.

Now: mandatory signaling runs blocks 961,632–963,647, starting around August 7. At that height Knots nodes reject any block not signaling bit 4. Lock in and it goes active two weeks later, expiring in ~1 year. Don't, and BIP-110 nodes fork onto a chain almost no hashrate mines, where you wait 50+ days to spend a coinbase. Chain split, or quiet death.

And that's the punchline. BIP-110 tries to weld at the consensus layer a thing that was never a consensus rule, to win a culture war Libre Relay already proved you can't filter your way out of. Signaling's at 0.3%, not one major pool on board. The math says quiet death with a tail risk of a doomed self-fork.

Watch block 961,632. Don't hold your breath.

So let me get this straight: @npub13nd…0svh 's Pubky uses ...

2026-06-02T12:13:48Z

So let me get this straight: bitcoinerrorlog (npub13nd…0svh) 's Pubky uses Pkarr which basically stores your home server in the BitTorrent DHT, keyed under your public key. Then, your home server can be whatever but John likes REST.

Nostr started out with pubkeys, then realized it would be good to have the pubkey distinguishable from the privkey and invented npub. Then "invented" storing that npub behind some DNS entry (nip5) and then figured out it would probably be a good idea to also store the ~homeserver~ list of relays there.

Pubky is better because ... we can't store our list of relays in BT DHT just in case? Or why is it better exactly? I don't get it.

The concern is legit. Don't get offended. Especially getting ...

2026-05-03T12:11:55Z

In reply to nevent1q…cswl
_________________________

The concern is legit. Don't get offended. Especially getting in between for spying is certainly an underappreciated concern.

Which client works besteht offline? Sync Evers other day. Read, ...

2026-05-01T08:21:25Z

Which client works besteht offline? Sync Evers other day. Read, reply, Luke, boost in between.

quoting
nevent1q…pnrj
I’ve really missed posting daily and interacting with you. Unfortunately, the internet is still inaccessible for about 98% of people, and the only way to stay connected is by purchasing limited access at a high cost. Because of this, I have to restrict my online time to a very small amount of data.

Despite all these challenges and the difficulties of everyday life, another silk rug with a Bitcoin theme is currently being created, and I’ll share it here once it’s finished. At the same time, I’m working on a new design in the garden rug style-one that I believe will be among the most beautiful pieces I’ve ever created.

As a final update, the custom rug I’ve been creating for one of the Nostriches-someone I’m grateful to have met and now call a friend through Nostr-is nearly complete. I may share a short teaser of the final stages, and I’ll definitely show you the finished piece.

iPhone only 😐 How do they intend to reach critical mass in any ...

2026-04-29T14:11:25Z

In reply to nevent1q…r9y4
_________________________

iPhone only 😐

How do they intend to reach critical mass in any city?

Is that list also on github? Is there a license to it? I'd ...

2026-04-28T08:14:13Z

In reply to nevent1q…7rdk
_________________________

Is that list also on github? Is there a license to it? I'd like to feed your findings into nostr.info's such list where it would be easier to navigate.

But you expect that thin wrapper to give you stability, so you ...

2026-04-27T09:41:05Z

In reply to nevent1q…9afz
_________________________

But you expect that thin wrapper to give you stability, so you might end up fighting less to get the web version stable ;)

Engagement being dominated by bot accounts is a bit disturbing ...

2026-04-26T12:57:28Z

Engagement being dominated by bot accounts is a bit disturbing lately.

What drug is he on?

2026-04-25T08:25:12Z

In reply to nevent1q…yh79
_________________________

What drug is he on?

Your position is 100% mine, too. How could we coin it in a way ...

2026-04-23T10:58:28Z

In reply to nevent1q…nkkj
_________________________

Your position is 100% mine, too.

How could we coin it in a way can easily rally behind it without writing walls of text every time?

I would probably be supportive of preventing address reuse on the ...

2026-04-15T13:15:10Z

In reply to nevent1q…8qqf
_________________________

I would probably be supportive of preventing address reuse on the protocol level. Currently it's such a hard sell to tell people to not re-use addresses. I sell bitcoins and most of my trading partners re-use addresses.

But I'm also a bit guilty as I'm sometimes using Phoenix where technically I might not re-use an address but it's trivial to track what's spending and what's change for those and many other transactions.

Also please stop your affinity for round $$ amounts. The 200$ UTXO is always the payment when the other amount is something odd in $$.

Etc. etc.

I tried it out but "Connection failed. Please reload." ...

2026-03-26T15:02:52Z

In reply to nevent1q…5a0j
_________________________

I tried it out but "Connection failed. Please reload." twice when trying to use it with my Amber.

On desktop, Jumble.social is currently my daily driver and I love ...

2026-03-26T09:06:05Z

On desktop, Jumble.social is currently my daily driver and I love the "24h Pulse".

I can just check in with the people I care about without finding my timeline flooded by Gigi's boosts for example. I find this makes the experience more "social" as it gives a focus to the author I'm following and not only the content that's streaming at me.

I wish there was a variant of this though. Let's call it "Friend Pulse": I want to peek into what **all** my follows are up to - and quite literally feel their pulse as in check if they are still around. Show a list of all my follows but show the most recent post of each. When I select one, load a page worth of more of their posts. This way I can cycle through my follows and check in on them or unfollow them if they abandoned nostr for good.

Wait, you run one of the best relays out there and have no time ...

2026-03-24T17:51:54Z

In reply to nevent1q…h46r
_________________________

Wait, you run one of the best relays out there and have no time to take money?

Great video! Just a bit annoying you chopped it up into 7. Also, ...

2026-03-23T19:49:26Z

In reply to nevent1q…gmyw
_________________________

Great video!

Just a bit annoying you chopped it up into 7.

Also, I still wonder if Any Back was or was not on Epstein's Island.

Wouldn't the best tool for drone defense be a light 5m stick ...

2026-03-16T07:48:17Z

Wouldn't the best tool for drone defense be a light 5m stick with a net? Sure, a drone exploding 5m from me can hurt me, too but it most likely won't hurt me badly or even kill me.

Seeing tons of videos of soldiers trying to get a tree between them and an approaching drone or trying to shoot the drone at a distance but then still getting hit directly ...

Peter Todd (npub1ej4…ndrm)

Why is Iran dragging Dubai in then? Is Dubai supporting US and ...

2026-03-12T11:36:52Z

In reply to nevent1q…ex8y
_________________________

Why is Iran dragging Dubai in then? Is Dubai supporting US and Israeli logistics?

I use LLMs almost exclusively for FOSS development so far, so ...

2026-03-01T13:08:08Z

In reply to nevent1q…kt7c
_________________________

I use LLMs almost exclusively for FOSS development so far, so privacy concerns are around the LLM learning about how I work - meta data is data - but no explicit company or private secrets.

So with Claude Sonnet 4.6 I'm struggling a lot but making ...

2026-03-01T05:15:12Z

In reply to nevent1q…0ezh
_________________________

So with Claude Sonnet 4.6 I'm struggling a lot but making progress developing software. Open models are just no match yet regardless how powerful the machine.