2024-07-26T01:36:38Z https://nostr.now hugomofn https://nostr.now/npub1qp302p7ry80x8xpcafm4d4szpxvzy8r70lyveg39gk0xgycwu35s06yn58 https://pbs.twimg.com/profile_images/1470097926177247236/f_AbFQ95_400x400.jpg https://pbs.twimg.com/profile_images/1470097926177247236/f_AbFQ95_400x400.jpg https://nostr.now/nevent1qqsz3zyadrlhd9pwv93aswt2erryxzvx4dxn7xc07plher5cm6tl2cczyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxje5sk28 I get it that people are a little edgy after a series of Bitcoin security incidents. But that doesn’t mean you should throw critical thinking out the window.<br/><br/>Reproducible builds are a good goal to strive for in any OSS project. But for Bitcoin self-custody, it is NOT a panacea. You should always assume the wallet coordinator (Sparrow, Electrum, Liana or Nunchuk) runs in an unsafe environment, and set up your Bitcoin wallet with that in mind. To say otherwise is to fundamentally misunderstand the security model.<br/><br/>And to the folks who are recommending average Bitcoin users to use Core on a clean Linux install as their main Bitcoin wallet: you are delusional.<br/><br/>The IDEA of risk isolation (separating sensitive key material from other wallet functionalities) and attack-surface minimization (going from general-purpose hot devices to single-purpose cold devices) is the right one. Just because one implementation of the idea was flawed, doesn’t mean the security principles behind it are flawed.<br/><br/>Similarly, as a general rule of thumb, devices that support shitcoins DO have a larger codebase and attack surface than devices that are Bitcoin-only. It’s almost definitional. Just because one Bitcoin-only device was flawed doesn’t mean shitcoins are suddenly a good thing. It’s crazy that this has to be said out loud.<br/><br/>It’s 2026. The whole world has figured out that sensitive keys need to stay in dedicated devices like Yubikey, even for non-Bitcoin activity. And you have Bitcoiners recommending people to go backwards. It’s freaking insane. 2026-08-20T13:27:36Z https://nostr.now/nevent1qqspfmsnjgppdpm8ccn56yq6avf86ng740vs005kx28ysllccrjkcpszyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjm8qmhg I&#39;ve been heads-down working on shipping Miniscript in Nunchuk. I look up three months later, and people are STILL debating mempool filters. 😀<br/><br/>Since we have a moment before our next major release, I’ll jot down my thoughts on the matter.<br/><br/>Disclaimer: I have no horse in this race. I don&#39;t think keeping the current OP_RETURN limit or raising it will have a material impact. My only interest is the truth and what&#39;s best for Bitcoin. Interestingly, I disagree with both sides of the debate (the so-called &#34;spammers&#34; and the &#34;filterers&#34;) for reasons I&#39;ll explain below.<br/><br/>Let’s first establish some ground truths:<br/>1. Proof-of-Work is more special than you think.<br/><br/>History is filled with rulers who debased their currencies—the original &#34;Proof-of-Stake&#34; systems. Yet, historical PoW money (gold) always prevailed. People in ancient Rome and Confucian China alike knew gold was valuable. This is distilled wisdom, passed down through diverse cultures. Our ancestors have an intuitive understanding of PoW, despite not knowing PoW is (unforgeable costliness). It is the most objective truth we have, independent of language or belief system. Everything else is fake in comparison. The JPEG peddlers don&#39;t fully grasp PoW&#39;s economic implications, and the filterers gravely underestimate its power as the ultimate filter.<br/><br/>2. Monetary transactions have a higher economic density than data transactions.<br/><br/>A monetary transaction moves value (V) for a fee (F). A data transaction moves value (V) plus some perceived data premium (D1​) for a fee (F) plus an extra fee for the data payload (D2​).<br/><br/>Thus, the fee rate for a monetary transaction is F / V.<br/><br/>The fee rate for a data transaction is (F+D2​) / (V+D1​).<br/><br/>In the long run, the on-chain data premium (D1​) trends toward zero, except for a few special truly non-fungible, rare sats (not artificially rare). As this happens, monetary transactions become vastly more economically efficient and will inevitably outcompete data transactions for block space.<br/><br/>3. Relying on data alone to prove a positive is a logical fallacy.<br/><br/>Data can help formulate a hypothesis, but that hypothesis is fragile. It only takes one contradictory data point to destroy it. For instance, I&#39;ve seen the argument: &#34;Our OP_RETURN filter must be working, otherwise why would there be significantly more transactions with under 80 bytes of data than over 80 bytes?&#34;<br/><br/>This logic is trivially debunked. For 16 years, we rarely saw transactions paying less than 1 sat/vB, a long-standing mempool policy. One could have concluded the policy was an iron law. Yet, in just a few months, 0.1 sat/vB transactions have become common despite 99% of nodes still enforcing the old policies, proving the policy was a transient heuristic, not a fundamental truth. It works until it doesn&#39;t.<br/><br/>Here’s another analogy: A society that lives next to a volcano for a thousand years without an eruption might theorize that fire can never fall from the sky. That theory, based on a millennium of &#34;data,&#34; will one day get them killed. Data is insufficient without being coupled with first-principles analysis.<br/><br/>Now, for my opinions:<br/><br/>I strongly believe that any non-PoW-based method to filter spam, which must rely on subjectivity and &#34;rough social consensus,&#34; is doomed to fail. Worse, it has a centralizing effect, mirroring the dynamics of Proof-of-Stake. This &#34;social consensus&#34; filtering is just PoS by another name. We&#39;ve seen this cat-and-mouse movie too many times, especially during the internet&#39;s evolution (see: email, SMS, DNS, social media).<br/><br/>Email is the perfect case study. It demonstrates two things: (a) The cat-and-mouse game of subjective filtering inevitably leads to extreme centralization. (b) Bitcoin is luckier than email because it has a built-in spam-mitigation tool: transaction fees.<br/><br/>The cost-benefit analysis for email spam is that it&#39;s nearly costless to send, so a 0.001% success rate is a win. All costs are externalized to the network and its users. The cost-benefit for on-chain JPEGs is the opposite: one must pay a higher fee rate per unit of economic value transferred. This cost is internalized by the &#34;spammer&#34; (with some long-term storage costs borne by the network). Therefore, on-chain JPEG spam is inherently not sustainable. Email spam is.<br/><br/>Furthermore, concerns about short-term consequences or chain &#34;bloat&#34; are sufficiently mitigated by the existing blocksize limit. The worst-case scenario is a linear chain growth of 100-200 GB per year. In the grand scheme, this is perfectly acceptable, as the falling cost of storage continues to follow Moore&#39;s Law, making this a manageable and decreasing burden over time.<br/><br/>Ultimately, this all comes down to one thing: PoW is the only objective, incorruptible mechanism for separating signal from noise in the digital realm. Chasing a non-PoW filtering method is like chasing a perpetual motion machine, a utopia that defies physics. PoW is about understanding the world and its constraints through the lens of physics. It&#39;s the highest signal of truth because it&#39;s literally built on the undisputed currency of the universe: energy. Everything that isn&#39;t grounded in this way is a pale imitation. Bitcoin&#39;s PoW mechanism is a beautiful, profound emulation of the cosmic process that forges gold from energy (neutron star collision). It connects digital truth to physical reality. To truly appreciate Bitcoin is to appreciate this fundamental connection. It&#39;s a special, almost sacred, principle, and I believe it&#39;s the one that matters most.<br/><br/>What&#39;s ironic is that while we debate, the economic reality I described is already playing out. All past and current attempts at selling on-chain JPEGs have fizzled out or are in the process of doing so as people wise up to their true worth. At this rate, people will spend more time talking about filtering JPEGs than the JPEGs themselves will remain relevant.<br/><br/>Spending time debating JPEGs when the mempool is near empty, fee rates at historical low, and people flocking to paper Bitcoin is an inefficient allocation of time and resources.<br/><br/>Believe in PoW. Let&#39;s focus on the real fight: making self-custody safe and accessible for everyone. That means working on things like Miniscript, MuSig2, and FROST, more hardware signers and form factors/UX, and education. We must dispel the myth that self-custody is impossible for the average user. Turning as many people as possible into sovereign individuals. That is the real fight. 2025-09-10T14:55:12Z https://nostr.now/nevent1qqsr5kesrv0lay52dcgg7q3y0n4sspzzvyqc3jz9jyfm5ufww6lymdszyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjpsj2fr In reply to <a href='/nevent1qqsgl5l7ujyda3usz4n05d9xue40j6k3ykzajm33ekyydp2uau46ths4mp8cg'>nevent1q…p8cg</a><br/>_________________________<br/><br/>🫡 Hope all is well bro. 2025-07-12T05:47:38Z https://nostr.now/nevent1qqs9s6y3v3yt5ktlamqyvwpu8xp72dk7h0tqpf2a9zmdrkjsf5e7xzgzyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjevlqgw Bitcoin taught us that the only sustainable way to filter “spam” is Proof-of-Work. Look at all the communication protocols (SMS, email, etc.) being slowly destroyed without a PoW mechanism. Look at all the PoS “L1 blockchains” that sprang up and died, or are dying. Look at the reCAPTCHA mechanism, which works only because it’s a PoW variant—albeit an impure one; Bitcoin PoW is the purest since it’s backed by quantifiable energy expenditure.<br/><br/>I don’t think even Bitcoiners have internalized this lesson well enough.<br/><br/>Using SOFTWARE ALONE to fight “spam”, to separate signal from noise, is a losing proposition. That’s the biggest lesson of Nakamoto Consensus. Proof-of-Work is a true innovation that underpins the whole network.<br/><br/>JPEGs on the blockchain are not a long-term problem because they inherently lack PoW. Just because you call a JPEG-attached sat “rare” under arbitrary rules, doesn’t mean it’s actually rare. It’s fake scarcity. Fake scarcity is not PoW. One sat will always equal one sat for 99.99% of sats. You only waste transaction fees by playing pretend that 1 sat &gt; 1 sat. That’s not sustainable. The only reason inscriptions have any relevance is because of the market being temporarily irrational, and people chasing pumps and dumps for quick gains.<br/><br/>You can call out the hype, but Bitcoin has much bigger fish to fry. JPEGs are pure distractions. Don’t get lost in the distractions. 2025-06-09T06:16:26Z https://nostr.now/nevent1qqs0qm7dlxqvs28lk9x47xkjjtzz8yafmj7yemmaepjk3w3y3gl40hgzyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxj5p6nrq I don’t think people fully grok the risk of KYC in Bitcoin.<br/><br/>KYC honeypots &amp; data leaks are already dangerous in the analog world. But zoom out and fast-forward 20 years into a hyper-digitized, hyper-bitcoinized future, and that risk 10x’s.<br/><br/>In the analog, pre-hyperbitcoinized world, if someone gets your family’s name, SSN, and address, what’s the worst the can happen?<br/><br/>Maybe they impersonate you. Maybe they sell your data to ad companies.<br/><br/>It’s bad, but not end-of-the-world bad.<br/><br/>But with Bitcoin — a digital bearer asset — it’s different.<br/><br/>Once someone knows your family holds a large stack, you’re a forever target.<br/><br/>You don’t get spammed. You get hunted.<br/>By North Korean hacker teams and ransomware crews from every corner of the world. Forever.<br/><br/>You do not want a target on your family’s back for eternity.<br/><br/>Zoom out &amp; think long-term. KYC isn’t just a risk. It’s a ticking time bomb.<br/><br/>P.S. Some historical context: KYC was invented before the Internet.<br/><br/>Not only has it failed its objectives, its creators NEVER anticipated a world shaped by the Internet &amp; Bitcoin.<br/><br/>The ramifications of this outdated policy will be insane in the years to come. A lot of people will get hurt.<br/><blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1g2rhxjnygvtaa8g2j5acl85akuscyk9lc6gqcq7fwzv77rst5mjqs52y54" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1g2r…2y54</a></span> </div> KYC is a disaster waiting to happen.<br/><br/>If data leaks can happen to Coinbase, it can happen to anyone.<br/><br/>Related: never use a Bitcoin inheritance service that requires KYC.<br/><br/>You’re not just endangering yourself — you’re putting your family at risk too.<br/><br/>They’re even less equipped than you to defend against attackers.<br/><br/>Nunchuk’s inheritance protocol is non-KYC. That’s by design.<br/> <img src="https://blossom.primal.net/e2bc35a539c5232225f59eaeb1620ef770d6b2c4ecd577abdb388d7063c4c31e.jpg"> </blockquote> 2025-05-16T16:53:43Z https://nostr.now/nevent1qqs287aqhczep08frzqcaug75fvhd42wguww8xcwvuzxawdgvdtp48qzyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxj53nmf2 In reply to <a href='/nevent1qqsdk6xjkg66zmzupynl28g2r78nyhchzsx8zy9l8tfhagtft2l0hpgzwnkgz'>nevent1q…nkgz</a><br/>_________________________<br/><br/>Friends don’t let friends use browser-based wallets. 2025-02-27T06:41:25Z https://nostr.now/nevent1qqsxjla3pjdxgsqhwskjfadp5xqvdrahmd4dl6gut2gc5yaf7k8wzdszyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjl8vzac AI and Bitcoin are discoveries.<br/><br/>They reveal themselves once we’ve fully harnessed the power of moving atoms at the speed of light, fueled by an inordinate amount of energy. The entire century before this was just preparation. 2025-01-20T08:48:06Z https://nostr.now/nevent1qqs9wze5gsshpdfg35prysdje8qz02efru6htw6tudk0eglj9zay7lgzyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjuk8d9z In reply to <a href='/nevent1qqs9jh2jwvdyewjslyx82jf3rqz2a8qk2hkqrn4msmkuy7p7jfkulksa5hl3y'>nevent1q…hl3y</a><br/>_________________________<br/><br/>Agreed. 2025-01-20T08:39:09Z https://nostr.now/nevent1qqsrfe0axg6chmg3dkuxdw6m3gde25ktpk2we9da03zcxhzj8mgcfvqzyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxj86y729 The world is converging on two forces: AI and Bitcoin. It’s probably not a coincidence that both rely on power-hungry chips and vast amounts of energy—two sides of the same coin.<br/><br/>Prediction: an energy race is coming to see who dominates both fields. The next 10 years will be wild.<br/><br/>P.S. We thought the Internet was our final form. Turns out it was just a stepping stone to discovering AI and Bitcoin. 😀 2025-01-20T08:11:47Z https://nostr.now/nevent1qqstrtc9tkhvcpjesytyy9lzg4azq24jf3u9hf7sj6carg53gdrljcqzyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjzencq7 Part of the infatuation with Bitcoin vaults is believing that you can “have your cake and eat it too”: mixing spending with saving.<br/><br/>In reality, people don’t give a shit what they use for spending (e.g., they’ll move USDT on Tron if it’s convenient). They only care about security for generational wealth.<br/><br/>You can observe this behavior empirically: when people pick a payment solution, their #1 priority is convenience—“I just want to pay, and pay fast.” That’s why PayPal, custodial LN, and USDT dominate. But for savings, it’s all about preserving purchasing power and security.<br/><br/>So at its core, the “problem” vaults try to solve is mixing high-time preference usage with low-time preference usage.<br/><br/>And you end up with these Frankenstein setups that are suboptimal for both spending AND saving. 2025-01-12T09:53:27Z https://nostr.now/nevent1qqsfq4mjdu7fy6ylfcurjd7aj5pze56u6j2merdxv9ucgdhmpjqjdmszyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjaexq6q Nostr might be a great alternative to Medium or Substack for long-lived, long-form content.<br/><br/>I’d love to see a separate category for blogs and articles—it would help keep them organized and distinct from quick notes.<br/><br/>Off-the-cuff thoughts vs. deep dives. 2025-01-09T09:29:21Z https://nostr.now/nevent1qqs8yfqs6yr3trgf9nkufqecg0p999z4f0mems32mydy2szv2yvr0fszyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjtsh33w In reply to <a href='/nevent1qqsx4xasnnsjf5clf2erw8npy7lh5mvzu3fnqey74m5tjc0rjj8wyfqdu7whh'>nevent1q…7whh</a><br/>_________________________<br/><br/>Great question Big Dan Brown.<br/><br/>Let me rephrase your question: What happens to the inheritance service if Nunchuk ceases to exist?<br/><br/>The short answer is that just like other types of services, if the business goes away the services will no longer be available. What we recommend to our users to mitigate unexpected events (such as Nunchuk ceasing to exist) is to use a &#34;rolling short timelock&#34; approach: Set an Activation Date not too far in the future, such as one or two years from today. Then the owner can review the inheritance plan every year and push the date back if necessary.<br/><br/>To help remind users, we start sending email notifications as the timelock is about to expire, starting at the 6-month mark. This approach allows users to lengthen the time the inheritance can be claimed as needed, while guarding against long-term uncertainties. If something unfortunate happens to Nunchuk, the owner can use their own keys to move funds to a new wallet. If something unfortunate happens to the owner, their beneficiaries can claim the inheritance quickly without having to wait many years.<br/><br/>Since the odds that Nunchuk ceasing to exist and the owner passing away within 1-2 years is small, the approach above reduces risks significantly.<br/><br/>Hope that answers your question. 2025-01-02T03:15:38Z https://nostr.now/nevent1qqstgdc3t5kv77tsdvg7l4nl0zawxhqnqxny0zxgks3lxr5v5vuqreczyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjnt36zw In reply to <a href='/nevent1qqs83nrt3c06u3ctj800znfdvf9lckwhzsfahey53gthdfcpxqwzfyg6tn30s'>nevent1q…n30s</a><br/>_________________________<br/><br/>If I have to guess, it’s likely because it isn’t written natively. 2024-12-29T00:13:43Z https://nostr.now/nevent1qqsvn83l65cszlv2097n4er5nahjet7kevd58egyqylj0u42mhf5cvczyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxj7a3xg4 Self-custody is the cornerstone of Bitcoin. The day self-custody dies, Bitcoin dies with it.<br/><br/>Nunchuk is fully committed to improving free self-custody tools—it’s 1000x more important than our paid services.<br/><br/>Principle over money.<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1lw30vds9um9j3p6qp8fmds67ay9tmu2r0qkta3v3zfas5ljadgvswnm06e" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1lw3…m06e</a></span> </div> 🎁 Our Christmas gift to you: Taproot multisig wallets are now live on Nunchuk!<br/><br/>Enhanced privacy, lower fees, and full M-of-N support. Available now on App Store and Play Store.<br/><br/>Merry Christmas, Bitcoiners! 🎄<br/><br/>Read more: <a href="https://nunchuk.io/blog/taproot-multisig">https://nunchuk.io/blog/taproot-multisig</a> </blockquote> 2024-12-29T00:01:25Z https://nostr.now/nevent1qqszfrgny89774lhszwas5tstwl0e4eqx55x49lwu8sg0u7l54sx79qzyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjvy9j5h Whether you like Elon or not, you must give him credit for buying Twitter and possibly changing the trajectory of history by keeping free speech alive.<br/><br/>Some would look at it as a victory, but I’d rather look at it as a strong lesson/warning for Bitcoin, of what to AVOID.<br/><br/>We don’t want things to get so bad that the whole thing comes down to depending on the act of one single individual to survive.<br/><br/>The (naive) architecture of the Internet allowed information to be centralized and censored. It’s not a victory, it’s a walking disaster. Even if Elon can temporarily protect free speech, how long can it last?<br/><br/>All efforts must ensure Bitcoin remains as decentralized as possible.<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1lgjmmq58jh2p73nw35l80922xrsyke5d66d98ldwnaczt7ne0sdsqv7zq8" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1lgj…7zq8</a></span> </div> When the Internet was invented, everyone thought it would democratize knowledge. Fast forward 30 years, it got so incredibly centralized and censored that it took one man buying Twitter to (hopefully) save it from itself.<br/><br/>What’s the equivalent of that threat in Bitcoin? </blockquote> 2024-11-06T08:26:24Z https://nostr.now/nevent1qqszjnuknkc4tld8x0ee7ykjuqlt9hel2528zqw7vsk4fx5dtl5s0eqzyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjz27w9l In reply to <a href='/nevent1qqsxwkwug6laxscse7v0rljt4k74gwtvj7rl00s3hzhjzagnpnrm48gu8v4gl'>nevent1q…v4gl</a><br/>_________________________<br/><br/>I’m optimistic on that, given the fact that no one/country has a monopoly on cheap energy.<br/><br/>Bitcoin ETFs worry me more. 2024-11-06T08:00:59Z https://nostr.now/nevent1qqs05fdas2ret4qlgehg60nhj49rpcztv6xadxjnlkhf7up9lfuhcxczyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjcw62yn When the Internet was invented, everyone thought it would democratize knowledge. Fast forward 30 years, it got so incredibly centralized and censored that it took one man buying Twitter to (hopefully) save it from itself.<br/><br/>What’s the equivalent of that threat in Bitcoin? 2024-11-06T07:10:34Z https://nostr.now/nevent1qqsrma6lrnsc5w87z6qhvlzrue6ty67vha4h70z7k3xn9t33gt9e4vqzyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjxpyl63 IMO, one of the biggest threats to Bitcoin is the ratio of Bitcoin held by exchanges and ETFs compared to the total supply.<br/><br/>We sort of got lucky that Wall Street ignored Bitcoin for the first 15 years, resulting in an ownership distribution that currently favors individuals (&gt;50%).<br/><br/>2 problems:<br/>(a) it could be temporary<br/>(b) high coordination costs among individuals in the event of a fork<br/><br/>As Bitcoin goes mainstream, complacency and a loss of vigilance among ‘Bitcoiners’ is almost inevitable. The further we get from the last fork crisis, the more likely this becomes — if not with today’s Bitcoiners, then perhaps in 10-20 years.<br/><br/>And I want to emphasize that this is a UNIQUE problem to Bitcoin.<br/><br/>Gold doesn’t have this problem. You can perhaps find ways to inflate its supply, but you cannot fork gold. Or real estate.<br/><br/>It is a unique problem because Bitcoin relies on continual PoW/Nakamoto Consensus.<br/><br/>At the heart of Bitcoin is a system that sustains itself with ‘heartbeats’ roughly every ~10 mins. Each one secures the network, but also retroactively locks down the entire ledger, all the way back to the genesis block.<br/><br/>In other words, Bitcoin is a LIVING thing. Unlike gold which is an inanimate object.<br/><br/>And because Bitcoin is a live and living thing, it CAN be tampered with. Extremely difficult, but possible.<br/><br/>Bitcoin incentive scheme must hold and Bitcoiners must remain vigilant for the whole thing to work. Proper checks and balances.<br/><br/>This is why self-custody is so incredibly critical to Bitcoin’s success.<br/><br/>Without the economic majority holding Bitcoin in self-custody, the system can be co-opted, bringing us back to square one: the reunification of money and state.<br/><br/>This is also why I see most concerns about Bitcoin as secondary. Yes, Bitcoin can and will improve on privacy. Yes, it can be a decent, “good enough” MoE. But it doesn’t need to excel at these.<br/><br/>It must first lock down the self-custody and SoV use case — or the whole system will collapse like quicksand.<br/><br/>To reiterate: it must be INSANELY EASY to self-custody Bitcoin, or the rest of the stuff we build doesn’t matter. Not one bit.<br/><br/>P.S. About Saylor, I suppose his vision is a future where Bitcoin and the state co-exist peacefully. In other words, the state will gladly accept Bitcoin as a check on its once unchallenged power to print money.<br/><br/>But that’s just one possibility — and it doesn’t seem like the likely one.<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1ukh8tfgstj5ga6vfmd8tmvcfwkfvj2grn6xy46yfmh837xtladwqnvmy48" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1ukh…my48</a></span> </div> The problem that saylor & maddireidy missed here is not 6102, he is correct on that. The issue is large holder choosing which fork to follow. Say Coinbase held 25% of the supply & decided to follow 20Gb/block fork, that would pose a huge problem. Could make MSTR go to zero in a way the tradfi shorter or Gov capture never could. 😬<br/><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1qcgnv47he380ug4z79epnd3v7cnwaxteghkl6usthezk748afg8s4cgua7" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1qcg…gua7</a></span> </blockquote> 2024-10-21T04:39:53Z https://nostr.now/nevent1qqspkcgcu7qgtmp9ffx3kzw9d9q7hpwhuuxc5ceuafvlh9wpgfqns0szyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjgdxyxl We either continually set and pursue higher goals, or we regress and die mentally. That’s the essence of the saying ‘most people die at 25.’<br/><br/>What I’ve learned is that there’s no in-between. Retirement is a false dream. Stasis is death. 2024-10-19T02:33:41Z https://nostr.now/nevent1qqsgr36fx0wgqd3s8rzfk830nymwlt60z3crq3n3qylmzah40kyr9sgzyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjvz780f In reply to <a href='/nevent1qqsrfjvdvkxngac35xnqdgvsz6lzx2sm69c98ty54fyrd2p636pxp4ssgke6v'>nevent1q…ke6v</a><br/>_________________________<br/><br/>Agreed. And thank you for your work 🫡 2024-10-18T16:57:37Z https://nostr.now/nevent1qqsw8m67sen5hnnr0j0svta2w2k40wee4esgqugywcyds6kz0t74xtszyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjpffh0a Increased adoption of distributed multisig benefits all Bitcoin users, even singlesig users.<br/><br/>An attacker may assume they need to compromise multiple locations if they SUSPECT multisig is in use.<br/><br/>So even if you don’t use multisig, it’s in your interest to encourage its adoption.<br/><br/>#multisigftw 2024-10-12T21:39:33Z https://nostr.now/nevent1qqs8l0lqzudcxnufv2uv0tndzkhlwl3u0arz4792t2kl23ldgzdxzcszyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxj59xe3h 🚫 Do NOT use a hot wallet (mobile or desktop) for main Bitcoin savings<br/>✅ Do use a phone as a watch-only wallet coordinator for distributed multisig for Bitcoin savings — get a second, dedicated phone for this purpose.<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1p09trq9se6ucfyjy6j5ehzdftzppj7axhvaeku5026zlleln8hhqwaupal" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1p09…upal</a></span> </div> People who say “don’t use phones for your main Bitcoin savings” never make sense to me.<br/><br/>1/ Security matters: Phones have a much smaller attack surface and are designed with security in mind, unlike desktops burdened with legacy software and hardware. What's easier to crack—a Windows machine or an iPhone?<br/>2/ Dedicated devices: If you're concerned about your main phone being out and about too much, get a second, dedicated phone for your savings. You should also use a dedicated desktop if you're truly serious about security. Avoiding phones but using a non-dedicated desktop filled with software means you don’t care about security as much as you think you do.<br/>3/ Use multisig: If you set your wallet up properly, the phone should hold no private keys—only a watch-only interface. The wallet interface should be the *least* of your worries. Distributed multisig keys are your main defense. Focus your energy on securing the actual keys.<br/>4/ Use a decoy wallet: If you can’t get a second phone, use a decoy wallet. You can use a decoy wallet even if you have a dedicated phone.<br/><br/>So don’t take bad advice, even from Bitcoiners. Think from first principles.<br/><br/>Don’t be stuck in the 20th century. DO use phones for your main Bitcoin savings. </blockquote> 2024-10-12T01:19:10Z https://nostr.now/nevent1qqst4xf6pn3t7kc2gqq9syzn609fnmd7txaj69ndmrdhq9vum4kmu5gzyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjc6g3uu In reply to <a href='/nevent1qqsw20af2ezaw8x5h3cyudfsjgl2te83uzszalagp2pr78krrtlhl4g6n523f'>nevent1q…523f</a><br/>_________________________<br/><br/>I don’t. That’s probably why. 2024-10-09T12:52:56Z https://nostr.now/nevent1qqsydnyad62h5rvpuxamz7uuhlded72kstcangtf787termcw308ddczyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxj9gndea Why do some Nostr posts/comments show up on Primal but not Damus (and vice versa)? Relay issue? 🤔 2024-10-06T12:58:04Z https://nostr.now/nevent1qqsfgy9tdgzt5whnzj0d9rystxh78kr27x084pxgfzlxqq9jm386yfgzyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjh23yr0 In reply to <a href='/nevent1qqs2dgd3gmngr5ye3cfh3h6prqah6n7a77fwvl4cwcs4jvgh3hk78jqumhasm'>nevent1q…hasm</a><br/>_________________________<br/><br/>I’m more optimistic on decoy wallets. Of cos they don’t address all types of attacks (no security feature ever does), but one can easily imagine how they can be useful *at least* in the case of non-targeted attacks, which will probably become more common when Bitcoin goes mainstream. It will not be unusual for a random person on the street to own Bitcoin.<br/><br/>The anecdote you cited about one victim refusing to give up anything and telling the attackers to shoot her: she might very well got lucky - she could’ve ended up dead.<br/><br/>At the end of the day, stories/anecdotes are just that. They don’t have predictive power. We don’t have substantial data on how many users have used decoy wallets, and how many have used it successfully or unsuccessfully.<br/><br/>TL;DR: Decoy wallets are just one tool in a large toolset. Writing them off based on a few data points seems a bit premature IMO. 2024-10-06T12:26:50Z https://nostr.now/nevent1qqswqyyxkgezsjjadqmtzu4dfjvw0lhlsx8hwpu489pn5jm797elsqczyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxj84ld9k “The majority is not always right” is true for normies but also true for Bitcoiners.<br/><br/>Bitcoiners got many things right, but many things wrong as well. For examples:<br/>1/ Believe in S2F nonsense<br/>2/ Obsessed with scaling payments use case when the killer use case is SoV<br/>3/ Avoid phones for main savings<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1p09trq9se6ucfyjy6j5ehzdftzppj7axhvaeku5026zlleln8hhqwaupal" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1p09…upal</a></span> </div> People who say “don’t use phones for your main Bitcoin savings” never make sense to me.<br/><br/>1/ Security matters: Phones have a much smaller attack surface and are designed with security in mind, unlike desktops burdened with legacy software and hardware. What's easier to crack—a Windows machine or an iPhone?<br/>2/ Dedicated devices: If you're concerned about your main phone being out and about too much, get a second, dedicated phone for your savings. You should also use a dedicated desktop if you're truly serious about security. Avoiding phones but using a non-dedicated desktop filled with software means you don’t care about security as much as you think you do.<br/>3/ Use multisig: If you set your wallet up properly, the phone should hold no private keys—only a watch-only interface. The wallet interface should be the *least* of your worries. Distributed multisig keys are your main defense. Focus your energy on securing the actual keys.<br/>4/ Use a decoy wallet: If you can’t get a second phone, use a decoy wallet. You can use a decoy wallet even if you have a dedicated phone.<br/><br/>So don’t take bad advice, even from Bitcoiners. Think from first principles.<br/><br/>Don’t be stuck in the 20th century. DO use phones for your main Bitcoin savings. </blockquote> 2024-10-06T00:25:08Z https://nostr.now/nevent1qqs95d9ydpkynevcj0ytwr7gtduzn0p959kz8eddf6a36qgaffg3vyszyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjjw9z6v In reply to <a href='/nevent1qqsycn9s9g85fajg427ucevqfwxgxjv86lknn6rpdr2q3p8z6mgmses0ppagn'>nevent1q…pagn</a><br/>_________________________<br/><br/>That’s what I said. The phone (or desktop) should be a watch-only interface. 2024-10-05T11:53:46Z https://nostr.now/nevent1qqsr3hac7fp7spqvr9x403z48npecery2h8dyne7wggc32t6xe9ehdczyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjq0a3jl In reply to <a href='/nevent1qqsqhj43szcvawvyjfzdf2vm3x543qse0wntkwumw284dp0lulenmmseda3f3'>nevent1q…a3f3</a><br/>_________________________<br/><br/>P.S. Nunchuk ships both mobile and desktop apps, but IMO mobile is the future of Bitcoin self-custody. 2024-10-05T11:49:56Z https://nostr.now/nevent1qqsqhj43szcvawvyjfzdf2vm3x543qse0wntkwumw284dp0lulenmmszyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjvm97hd People who say “don’t use phones for your main Bitcoin savings” never make sense to me.<br/><br/>1/ Security matters: Phones have a much smaller attack surface and are designed with security in mind, unlike desktops burdened with legacy software and hardware. What&#39;s easier to crack—a Windows machine or an iPhone?<br/>2/ Dedicated devices: If you&#39;re concerned about your main phone being out and about too much, get a second, dedicated phone for your savings. You should also use a dedicated desktop if you&#39;re truly serious about security. Avoiding phones but using a non-dedicated desktop filled with software means you don’t care about security as much as you think you do.<br/>3/ Use multisig: If you set your wallet up properly, the phone should hold no private keys—only a watch-only interface. The wallet interface should be the *least* of your worries. Distributed multisig keys are your main defense. Focus your energy on securing the actual keys.<br/>4/ Use a decoy wallet: If you can’t get a second phone, use a decoy wallet. You can use a decoy wallet even if you have a dedicated phone.<br/><br/>So don’t take bad advice, even from Bitcoiners. Think from first principles.<br/><br/>Don’t be stuck in the 20th century. DO use phones for your main Bitcoin savings. 2024-10-05T11:49:01Z https://nostr.now/nevent1qqsxah5eeatuqm0t8p7rfvn656v8afrxqer3uec6necqk0vzl8nh8uczyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjdln4c7 Key quote regarding Yubikey vulnerability: &#34;We estimate that *the vulnerability exists for more than 14 years* in Infineon top secure chips.&#34;<br/><br/>32 million Yubikey units have been sold.<br/><br/>Multi-vendor multisig is the only rational setup for your BTC savings.<br/><br/><a href="https://arstechnica.com/security/2024/09/yubikeys-are-vulnerable-to-cloning-attacks-thanks-to-newly-discovered-side-channel/">https://arstechnica.com/security/2024/09/yubikeys-are-vulnerable-to-cloning-attacks-thanks-to-newly-discovered-side-channel/</a> 2024-09-05T07:49:56Z https://nostr.now/nevent1qqswdagznkqtln4g0uy7l20xd7kgj8quy7z3nn5vuq7gx00q6smqqcszyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjd6cw46 There’s something satisfying about Nostr feeds being deterministic: if you sign in on different Nostr clients or different devices, you most likely will get the same exact feed for a given moment of the day. It’s true even for different moments of the day: if you scroll long enough you will encounter the old set of posts, minus a few new ones for the last X hours.<br/><br/>It’s satisfying because you know the feed is not gamed. That this is the raw, unmanipulated experience. Unlike something like X which increasingly show you garbage that plays on our worst instincts.<br/><br/>On the other hand, once the amount of content on Nostr blows up, some filters will likely be needed. It’d be cool if you can craft your own feed algorithms based on a human-readable language, or a set of commonly-defined control knobs. Something like:<br/>1. Prioritizes posts from people I regularly interact with (with weights I can go in and adjust)<br/>2. Prioritizes posts that have some minimum number of likes/comments from the people I follow<br/>3. For freshness: Occasionally surface posts from accounts from my extended network (friends of friends), provided that they pass some level of quality control (e.g. account older than Y months, minimum likes, etc.).<br/><br/>And you can keep finetuning your algorithms as you go along. Have a few that you quickly switch between. Share your algorithms with others, etc. 2024-08-20T07:15:40Z https://nostr.now/nevent1qqsv65y7n5xfja6qepm72rlxskxllyjnhzqq3p4kknlq62d0fvfxqfgzyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjargsau In reply to <a href='/nevent1qqstrkkepxxunkcfd48nm464am23ndy6huqp4wel2tergclvhqhc6rgdxldtl'>nevent1q…ldtl</a><br/>_________________________<br/><br/>Anti-exfil techniques spill engineering challenges into the user space. They also add a new dependency on the wallet coordinator to perform security-sensitivity tasks.<br/><br/>Tasks which they are not well suited for.<br/><br/>How can you even verify that the coordinator will be able to provide good entropy? You can’t.<br/><br/>So there’s also this hidden danger of using anti-exfil with singlesig with a coordinator running in unsafe environments, and THINK you’re safe, but you’re not. Turtles all the way down.<br/><br/>Just use multisig and be happy. 2024-08-07T01:57:24Z https://nostr.now/nevent1qqstrkkepxxunkcfd48nm464am23ndy6huqp4wel2tergclvhqhc6rgzyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjh36pr9 In the world of Bitcoin wallets there is a plethora of security threats that you need to stackrank.<br/><br/>What anti-exfil would do is to break 90% of the current wallets’ UX to solve a fundamentally low-risk threat, relative to other threats. When better solutions exist.<br/><br/>A big no-no.<br/><br/>Introducing a new round trip / new interaction every single time a user signs a Bitcoin transaction is a terrible idea from both UX and engineering perspectives.<br/><br/>It violates Single Responsibility Principle. Coordinator should stay purely coordinating. No more, no less. 2024-08-07T01:00:36Z https://nostr.now/nevent1qqsgtwptp2y3wegp79rtaeuhz7ctzx27pkmv9deenq7tq8fkzu89e7gzyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxj0exgv2 In reply to <a href='/nevent1qqszvlrfftn470z3kna6s78572ncra8lkm8wfcm08qg70kfqa0fazgqwtxu33'>nevent1q…xu33</a><br/>_________________________<br/><br/>Great comment Rusty!<br/><br/>Just the basic idea of identifying that there are 3 groups of people (can afford; can sometimes afford; and cannot afford a UTXO whatsoever) is a huge upgrade over past conversations, which tend to jump straight into technical details and gloss over the actual user profiles and market demand.<br/><br/>Personally, I agree that more research is warranted. I’m not particularly optimistic on UTXO-sharing as a solution for people who can’t afford standalone UTXOs at all because of the group coordination cost, “Tragedy of the Commons”issue (LN counterparties are heavily incentivized to police their LN channel state, whereas in a Timeout Tree you can freeride others to do the policing for you, leading to no one doing it at all), “ghettorization” issue as you mentioned, and the inevitable complexity of any such solution. Secondly, did anyone bother to ask whether users like sharing at all? Why would they opt for a complex sharing solution when they can use something like gold for savings.<br/><br/>I’m slightly more bullish on locally-run ecash mints where people fall back to long-built relationships and hard-earned reputation to prevent cheating. Basically, use the social layer to address a technical limitation.<br/><br/>I like your quote here: “can’t engineer a solution if we can’t think about the problems.” That’s a great way to think about it. As someone else once said, the most common mistake engineers often make is to “optimize for something that shouldn’t really exist”. I’ve seen it happen way too many times, being an engineer myself. Just because UTXO-sharing with large N is possible, doesn’t mean it is ideal or will actually have a market.<br/><br/>In the spirit of thinking deeply about the problem (and not the solutions), it would be wise to also visit assumptions such as there will be 10 billion people who want sovereign UTXOs and the responsibilities that come with it. I think that assumption is highly unrealistic. IMO the actual demand will remain well below 500 million people, realistically more in the range of 100-200 million people. Being your own bank, as it turns out, is quite a heavy burden.<br/><br/>So if you believe in these numbers, Bitcoin does not have a scaling problem. At the very least, it’s not urgent at all. The math might work out by just making current things as efficient as possible. 2024-08-01T06:29:57Z https://nostr.now/nevent1qqs2g527gz3hydgkqhme7el8kvxk6n6pndph35rvp9h5pkm74ye9lxszyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjf2dpnd In reply to <a href='/nevent1qqsf42unalelynec0jqhzhhttk3pc97yn0da8gu3gdm2908qkws0jjqxw372j'>nevent1q…372j</a><br/>_________________________<br/><br/>💯 2024-07-28T03:07:42Z https://nostr.now/nevent1qqsxzjpshwhaua5e5vuzr9l3usg8r4d0zh0dkruth8zw5prwyqjvu3qzyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxjypx3r0 In reply to <a href='/nevent1qqsf80dxtl0phujt64x9sdsn75apzakacad7pu4efxdwsqwe93leg2gez3nq4'>nevent1q…3nq4</a><br/>_________________________<br/><br/>Agreed. Bitkey design clearly optimized for usability and I think they swung a bit too hard in that direction. Too many security concerns to be used for large savings. The mobile phone in particular is highly vulnerable. An attacker would know they can get to an owner’s bitcoins through the phone and the phone alone (just by waiting out the Delay and Notify protocol). If popularized, it will incentivize kidnappings.<br/><br/>I wrote a full review of Bitkey here: <a href="https://nunchuk.io/blog/bitkey">https://nunchuk.io/blog/bitkey</a> 2024-04-02T01:34:55Z https://nostr.now/nevent1qqs8u4h9q4mq50j5z7c4m256gd2ktzemqaklcz7ph5the7czpvwuemszyqqx9ag8cvsaucuc8r48w4kkqgyesgsu0elu3n9zy4zeueqnpmjxj0a20ez In reply to <a href='/nevent1qqsf7qpdmh83kgzhm366k663kmaky3j95stu23maul554sr9q26q62c5ecuxd'>nevent1q…cuxd</a><br/>_________________________<br/><br/>Two different devices, ideally always geographically distributed. 2024-03-27T23:54:39Z