Nostr notes by Braydon Fuller

The Buckmaster Interview (Navier-Stokes) - Numberphile: ...

2026-09-30T04:14:33Z

The Buckmaster Interview (Navier-Stokes) - Numberphile:

https://www.youtube.com/watch?v=Mzbtj5nkMXI

New image formats to land in the next version of Firefox! ...

2026-08-28T07:04:48Z

New image formats to land in the next version of Firefox!

https://hacks.mozilla.org/2026/08/intent-to-ship-jpeg-xl/

Nostr event nevent1qqsqqqqqsz5ahyjykq9jewr73tv9cp2tqpcdsd4udx0csta4u2eq0kgzyqdlnu3emjskxc2fhshnlse5qaawjk02jcru4nu5tmu03wez0hz7zqznjn5

2026-08-25T13:56:43Z

https://www.sifive.com/development-platforms/sifive-bigsky-sf-2u870-datacenter

Sure, in some cases! Though, the notorious flakey internet ...

2026-08-21T18:57:42Z

In reply to nevent1q…qew6
_________________________

Sure, in some cases! Though, the notorious flakey internet connection of phones adds complexity and difficulty. Local messaging use cases could also benefit from wireless connections (e.g., LoRa/Bluetooth/Wi-Fi). In other cases, relays with low latency and high availability would be useful to bolster reliability. For example, with redundant-powered SBC or VPS relay servers with multiple internet connections/transports.

A structured network strategy to sync Nostr relays I think can ...

2026-08-19T19:34:00Z

In reply to nevent1q…ane7
_________________________

A structured network strategy to sync Nostr relays I think can greatly help the persistance and reliability of messages. Negentropy is a huge help. For example, if all admins independently run relays and have write policies exclusive to members/admins, the relays can sync and secure only those messages between each other. Strfry has some support here with a router. However, last I remember, the features were new and could be optimized. I would need to look again.

The reliability of message delivery of commit messages is the ...

2026-08-18T20:09:30Z

In reply to nevent1q…mk8m
_________________________

The reliability of message delivery of commit messages is the main difficulty, even in the case of a single admin?

For example, if Alice creates a group, she can act as the admin ...

2026-08-18T15:41:32Z

In reply to nevent1q…0n4j
_________________________

For example, if Alice creates a group, she can act as the admin without a need for consensus; coordinating messages can be distributed across several relays. No?

Has a single coordinating key been implemented already in Marmot? ...

2026-08-13T03:16:57Z

In reply to nevent1q…sraa
_________________________

Has a single coordinating key been implemented already in Marmot? I'd imagine that this is desired in some use cases and serves as a good starting point.

It's astonishing that the Moon and Sun are nearly equal in ...

2026-08-12T19:19:17Z

In reply to nevent1q…w9wt
_________________________

It's astonishing that the Moon and Sun are nearly equal in relative size from the perspective on Earth.

Another interesting video in the PDP-10 and ITS reconstruction ...

2026-08-03T18:58:14Z

Another interesting video in the PDP-10 and ITS reconstruction series:

https://www.youtube.com/watch?v=cDKPbMaLTA4

An interesting bit of computing history featured in recent ...

2026-07-31T08:40:37Z

An interesting bit of computing history featured in recent Computerphile videos:

https://github.com/PDP-10/its

There are PDP-10 replicas running emulators on Pis.: ...

2026-07-30T05:15:08Z

There are PDP-10 replicas running emulators on Pis.:

https://www.youtube.com/watch?v=hISbyatih44

Calibre does not yet compile on RISC-V systems, specifically an ...

2026-07-29T01:42:50Z

Calibre does not yet compile on RISC-V systems, specifically an issue compiling the `libqt6webenginecore6` dependency.

This presentation "Porting SIMD to RISC-V Vectors" could ...

2026-07-29T01:32:10Z

This presentation "Porting SIMD to RISC-V Vectors" could be relevant to optimizations for ereaders and web browsers. If I remember correctly, libraries such as libjpeg-turbo, are used in KOReader and others:

https://www.youtube.com/watch?v=mxMEUIFL4xg

Apparently this is related to the controversy and protests ...

2026-07-24T18:29:14Z

In reply to nevent1q…863d
_________________________

Apparently this is related to the controversy and protests concerning an exam from June:

https://www.youtube.com/watch?v=RWiKLBkCJQk

A review of the recently available RISC-V development board, ...

2026-07-23T23:02:55Z

A review of the recently available RISC-V development board, Jupiter 2, distributed by Milk V:

https://milkv.io/jupiter2

Milk-V Jupiter 2 is one of the first to ship with the new Spacemit K3 RVA23 processors. The performance of SpacemiT K3 is pretty good and a great development board that is almost ready for daily use. It's a decent option for early adopters.

A few useful notes for new users:

1. Install Ubuntu 26.04 instead of the default OS. It shipped with Bianbu, a distro based on Ubuntu. The default desktop was LXQt instead of Gnome, which complicated keyboard configuration and lacked several features. Switching to Gnome solved those issues. Images for Ubuntu are available from: https://github.com/spacemit-com/K3-Ubuntu-Images

2. It didn't ship with documentation; however, the documentation for Spacemit Pico-ITX K3 is sufficient as it is the same board: https://www.spacemit.com/community/document/info?lang=en&nodepath=hardware/eco/k3_pico/pico_user_guide.md

3. You will likely need a powered USB dock to connect to a display (capable of 65W). The ports for USB-C power and display are combined; it requires the use of a powered USB dock, or similar, to attach to a display. Otherwise, SSH is enabled by default for remote access. Displayport 4K@60hz worked via a USB hub.

4. You will need a 65W power USB-C power supply, one is not included. It can be difficult to determine if the device is on; the product lacks a clear power button or power state indicator. The power LED is only viewable at an angle from within the enclosure. A standard phone USB-C charger will likely not provide enough to keep it running consistantly and may unexpectedly power off.

The new Obtanium user interface is better, updating multiple apps ...

2026-07-23T05:56:58Z

The new Obtanium user interface is better, updating multiple apps is much smoother now.

@nprofile…ydtj with Joel Salatin of Polyface Farm: ...

2026-07-15T03:36:03Z

KenDBerryMD (nprofile…ydtj) with Joel Salatin of Polyface Farm:

https://www.youtube.com/watch?v=_WWNyC-R90Y

Subtly humorous, "A delightful proof that 2+2=4": ...

2026-07-15T01:05:53Z

Subtly humorous, "A delightful proof that 2+2=4":

https://www.youtube.com/watch?v=0-pL2J0ZB8g

For the browsers themselves, the performance on Chromium is ...

2026-07-10T05:17:06Z

In reply to nevent1q…265h
_________________________

For the browsers themselves, the performance on Chromium is better than Firefox. That is usually the case. It is a bit more noticable on this hardware, especially with the startup times.

With Ubuntu 26.04, compiling Firefox on Spacemit K3 was pretty ...

2026-07-10T05:07:30Z

With Ubuntu 26.04, compiling Firefox on Spacemit K3 was pretty simple and performant. It was only necessary to manually install a riscv build for wasi-sdk. Compiling Chromium on the other hand, has not been as clear. Ubuntu packages chromium, so it isn't necessary; however, it is unclear how it was built. The build process and tools for Chromium seem tethered to x86_64, most builds for riscv may be cross compiled.

Ubuntu images are at: ...

2026-07-08T03:19:09Z

In reply to nevent1q…8z7l
_________________________

Ubuntu images are at:

https://github.com/spacemit-com/K3-Ubuntu-Images

Found some documentation for the board: ...

2026-07-08T02:45:17Z

In reply to nevent1q…8z7l
_________________________

Found some documentation for the board:

https://www.spacemit.com/community/document/info?lang=en&nodepath=hardware/eco/k3_pico/pico_user_guide.md

It's not exact to Milk-V Titan 2. The board is the same though.

Also, a power supply is not included in the shipment. It requires ...

2026-07-07T21:51:47Z

In reply to nevent1q…8z7l
_________________________

Also, a power supply is not included in the shipment. It requires greater than 65W of power. A standard phone USB-C charger will likely not provide enough to keep it running consistantly and may unexpectedly power off.

Milk-V Jupiter 2 is one of the first to ship with the new RVA23 ...

2026-07-07T19:14:04Z

In reply to nevent1q…x5zf
_________________________

Milk-V Jupiter 2 is one of the first to ship with the new RVA23 chip. The product design is slightly cumbersome, and it took a bit of time to setup as it lacked documentation. It lacks a clear power button or power state indicator, the power LED is only viewable at an angle from within the enclosure. The ports for USB-C power and display are combined; it requires the use of a powered USB dock, or similar, to attach to a display. SSH was enabled by default for remote access. Also it ships with Bianbu, a distro based on Ubuntu. The default desktop was LXQt instead of Gnome, which complicated keyboard configuration and lacked several features. Switching to Gnome solved those issues. As of about a week ago, there is now an image available to install Ubuntu 26.04 directly, which could be a great option. Performance is pretty good and near ready for daily desktop use. Looking forward!

https://www.youtube.com/watch?v=J4O_EiJYPdM

2026-07-07T17:53:52Z

https://www.youtube.com/watch?v=J4O_EiJYPdM

The performance of SpacemiT K3 is pretty good, a huge leap ...

2026-07-07T16:47:03Z

The performance of SpacemiT K3 is pretty good, a huge leap forward from the SiFive U74 cores in the StarFive JH7110.

https://www.youtube.com/watch?v=eye6J2-H17g

2026-06-30T15:45:47Z

https://www.youtube.com/watch?v=eye6J2-H17g

Joel Salatin is producing videos: ...

2026-06-30T15:44:46Z

Joel Salatin is producing videos:

https://www.youtube.com/channel/UCc_ZxWQCwj2aK6BTavK4hSQ

0.7 nm chips ...

2026-06-27T16:33:41Z

0.7 nm chips

https://newsroom.ibm.com/2026-06-25-ibm-debuts-worlds-first-sub-1-nanometer-chip-technology

I wonder if this could be considered cubist...

2026-06-27T04:23:51Z

In reply to nevent1q…ed6l
_________________________

I wonder if this could be considered cubist...

Gitea has been a decent option as well.

2026-06-24T21:48:23Z

In reply to nevent1q…kla3
_________________________

Gitea has been a decent option as well.

https://www.crowdsupply.com/modos-tech/modos-flow

2026-06-19T00:48:37Z

In reply to nevent1q…rqqn
_________________________

https://www.crowdsupply.com/modos-tech/modos-flow

https://www.youtube.com/watch?v=nHbA2-_qzH4

2026-06-19T00:46:41Z

https://www.youtube.com/watch?v=nHbA2-_qzH4

Nostr event nevent1qqszq0zznxt3v7lgr7whjduged8zvssqdgs7e2zmjgh0ffk5a3k4q2qzyqdlnu3emjskxc2fhshnlse5qaawjk02jcru4nu5tmu03wez0hz7z3z8xga

2026-06-04T02:46:44Z

https://canonical.com/blog/risc-v-profiles-why-is-rva23-significant

RISC-V Mainboard III for Framework 13 laptops launched! ...

2026-05-12T03:08:37Z

RISC-V Mainboard III for Framework 13 laptops launched!

https://deepcomputing.io/deepcomputing-launches-dc-roma-risc-v-mainboard-iii-advancing-open-risc-v-laptop-computing-on-framework-laptop-13/

Awesome!

2026-05-04T17:02:38Z

In reply to nevent1q…fk7s
_________________________

Awesome!

2.4GHz LoRa!? https://partyon.xyz/@nullagent/116499715071759135

2026-05-04T04:16:19Z

2.4GHz LoRa!?

https://partyon.xyz/@nullagent/116499715071759135

Do you remember of it someone with an early dev kit or one of the ...

2026-05-04T03:46:10Z

In reply to nevent1q…md6t
_________________________

Do you remember of it someone with an early dev kit or one of the founders?

Hmmm.. interesting, haven't heard of Modos. Looks like they ...

2026-05-03T20:28:16Z

In reply to nevent1q…3zcs
_________________________

Hmmm.. interesting, haven't heard of Modos. Looks like they are launching soon.

Any software updates in this regard? Also, have you all ...

2026-05-01T20:30:40Z

In reply to nevent1q…enyw
_________________________

Any software updates in this regard?

Also, have you all considered producing monitors (e.g. Dasung Paperlike or BOOX Mira) or collaborating with companies like Framework to work with a broader category of available software?

Any update on full Linux distro support? Or an ability to use ...

2026-05-01T20:21:26Z

In reply to nevent1q…qhuu
_________________________

Any update on full Linux distro support?

Or an ability to use optionally just as an external display?

This upgrade looks great. The modularity of this laptop really ...

2026-04-30T14:54:26Z

In reply to nevent1q…whkp
_________________________

This upgrade looks great. The modularity of this laptop really shines with options for RISC-V mainboards. Looking forward to the next one this summer!

Who knows, perhaps daylightco (nprofile…9ykf) is also partnering with Framework for alternative screen options!?

Cool, what tools?

2026-04-17T23:21:34Z

In reply to nevent1q…qkf2
_________________________

Cool, what tools?

What was the hardware necessary and process to create such a ...

2026-04-17T23:20:14Z

In reply to nevent1q…q347
_________________________

What was the hardware necessary and process to create such a model?

👀 RISC-V Mainboard III? https://frame.work/nextgen

2026-04-10T04:06:14Z

👀 RISC-V Mainboard III?

https://frame.work/nextgen

Probably different lists.

2026-03-24T03:00:16Z

In reply to nevent1q…hkrq
_________________________

Probably different lists.

Can you host APKs from many different servers?

2026-03-23T17:24:47Z

In reply to nevent1q…8kjd
_________________________

Can you host APKs from many different servers?

Interesting techniques for declarative web pages without ...

2026-03-18T21:56:40Z

Interesting techniques for declarative web pages without imperative scripting:

https://developer.mozilla.org/en-US/docs/Web/API/View_Transition_API

https://developer.mozilla.org/en-US/docs/Web/API/Speculation_Rules_API

https://www.jonoalderson.com/conjecture/its-time-for-modern-css-to-kill-the-spa/

Daniela Brozoni gave a presentation last year at BTC Prague on ...

2026-03-16T22:38:56Z

In reply to nevent1q…9ymd
_________________________

Daniela Brozoni gave a presentation last year at BTC Prague on this topic:

https://www.youtube.com/watch?v=KQu8MLG2zl0

Nostr event nevent1qqsdvm7pnghadlm8hkcfk4pma9lcyr7tuy4avxk7espawfp393lzwgczyqdlnu3emjskxc2fhshnlse5qaawjk02jcru4nu5tmu03wez0hz7zc7ndte

2026-03-16T20:51:01Z

Running RISC-V! 🖖

Congrats to all!

2026-03-11T00:57:38Z

In reply to nevent1q…clpt
_________________________

Congrats to all!

Awesome!

2026-03-11T00:55:37Z

In reply to nevent1q…u5ag
_________________________

Awesome!

The Cosmic Desktop Environment sounds pretty interesting: ...

2026-03-06T18:08:22Z

The Cosmic Desktop Environment sounds pretty interesting: Modular. Customizable. Responsive. Tileable. Wayland. Rust.

https://www.youtube.com/watch?v=fBcfjlFX-xM

New book announced by The Property and Freedom Society: Rothbard ...

2026-03-04T00:40:23Z

New book announced by The Property and Freedom Society: Rothbard at 100

https://propertyandfreedom.org/books/rothbard-100/

Great news!

2026-03-02T05:55:14Z

In reply to nevent1q…l3mq
_________________________

Great news!

Interesting.

2026-02-24T19:18:48Z

In reply to nevent1q…74gy
_________________________

Interesting.

Pretty good interview with Lina Seiche (with Little Hodler): ...

2026-02-13T21:05:19Z

Pretty good interview with Lina Seiche (with Little Hodler):

https://www.youtube.com/watch?v=U-vKgmdYqXg

Will sometimes have this problem, usually on desktop, rotating ...

2026-02-10T15:16:13Z

In reply to nevent1q…gcm7
_________________________

Will sometimes have this problem, usually on desktop, rotating VPN usually works.

Tip: It's possible to configure NewPipe to open YouTube links ...

2026-02-10T02:22:15Z

Tip: It's possible to configure NewPipe to open YouTube links via “App Info (long press app icon) -> Open by default -> Add link”.

50 Years of Computer Architecture (2018) w/ David Patterson at ...

2026-02-09T23:20:42Z

50 Years of Computer Architecture (2018) w/ David Patterson at ISSCC:

https://www.youtube.com/watch?v=NZS2TtWcutc

Portraits of Krste Asanović, Yunsup Lee and Andrew Waterman, and ...

2026-02-09T23:11:21Z

Portraits of Krste Asanović, Yunsup Lee and Andrew Waterman, and origin of RISC-V at CHM:

https://www.youtube.com/watch?v=lbMIuX28d18

Portrait of David A. Patterson (2017) at HLF: ...

2026-02-09T23:07:26Z

Portrait of David A. Patterson (2017) at HLF:

https://www.youtube.com/watch?v=VI9FZNuMC7E

Instruction Sets Should Be Free: The Case for RISC-V (2014) w/ ...

2026-02-08T03:47:49Z

Instruction Sets Should Be Free: The Case for RISC-V (2014) w/ Krste Asanović

https://www.youtube.com/watch?v=vB0FC1DZqUM

Ubuntu 26.04 will support RISC-V (RVA23) and the upcoming ...

2026-02-07T01:05:47Z

Ubuntu 26.04 will support RISC-V (RVA23) and the upcoming SpacemiT K3 processor.

https://canonical.com/blog/spacemit-announces-availability-of-ubuntu-on-k3-k1-series

There is a pretty good interview with David Patterson on ...

2026-02-06T04:05:18Z

There is a pretty good interview with David Patterson on Fridman's podcast. He worked on early versions of RISC and lead Par Lab at Berkeley where RISC-V was initially developed.

“It's more difficult—surprisingly—to come up with a simple and elegant solution.”

https://www.youtube.com/watch?v=naed4C4hfAg

This one: https://github.com/spacecowboy/Feeder

2026-02-05T01:55:13Z

In reply to nevent1q…2vvz
_________________________

This one:

https://github.com/spacecowboy/Feeder

One thing that the Feeder mobile app has done well is to have ...

2026-02-05T01:47:29Z

One thing that the Feeder mobile app has done well is to have compatibility with various formats from RSS feeds to Mastodon. It's a decent means to create follow lists for information still yet beyond Nostr.

For one, the latest announcement at FOSDEM from DeepComputing for ...

2026-02-04T04:41:29Z

In reply to nevent1q…4plg
_________________________

For one, the latest announcement at FOSDEM from DeepComputing for their next release of a mainboard for the Framework 13, looks pretty great.

https://deepcomputing.io/dc-roma-risc-v-mainboard-iii-unveiled-at-fosdem-powered-by-spacemit-k3-for-framework-laptop-13/

Sounds like they're going to be able to move quickly and have a new release every six months with better hardware.

Development has been growing steady with several different development boards (from SiFive and others) and the ratification of the RVA23 profile for general purpose use should be important for software development and support.

Nostr event nevent1qqs89tlqmf3sgsv7k4uz7t8xzg8hnrrnnkn07zs70kz82q6v66r5h8gzyqdlnu3emjskxc2fhshnlse5qaawjk02jcru4nu5tmu03wez0hz7za5zkgf

2026-02-04T01:35:15Z

Recent developments with RISC-V are getting pretty exciting.

Photogrammetry (1997) -> NeRFs -> Gaussian Splats (2023) ...

2026-01-21T16:41:40Z

Photogrammetry (1997) -> NeRFs -> Gaussian Splats (2023)

https://youtube.com/watch?v=T_kXY43VZnk

https://hackaday.com/2023/09/02/high-quality-3d-scene-generation-from-2d-source-in-realtime/

Nostr event nevent1qqsy83ed7mus2lq6sjspqwc848q0hfepyhydck7fcw5wejfh0cwsysgzyqdlnu3emjskxc2fhshnlse5qaawjk02jcru4nu5tmu03wez0hz7zskuack

2026-01-19T02:20:13Z

https://hrf.org/latest/hrfs-bitcoin-development-fund-announces-support-for-22-projects-worldwide/

Reminds me of: https://m.youtube.com/watch?v=5URefVYaJrA

2026-01-19T02:02:57Z

In reply to nevent1q…mcju
_________________________

Reminds me of:

https://m.youtube.com/watch?v=5URefVYaJrA

https://www.youtube.com/watch?v=g1-46Nu3HxQ

2026-01-19T01:46:24Z

In reply to nevent1q…mcju
_________________________

https://www.youtube.com/watch?v=g1-46Nu3HxQ

"You have free rein to explore, reposition cameras after the ...

2026-01-19T01:45:42Z

"You have free rein to explore, reposition cameras after the fact, break spatial continuity, and recombine performances in ways that 2D simply can’t."

https://radiancefields.com/a-ap-rocky-releases-helicopter-music-video-featuring-gaussian-splatting

“The computer can be used as a tool to liberate and protect ...

2026-01-10T16:08:43Z

“The computer can be used as a tool to liberate and protect people, rather than to control them.”

—Hal Finney

https://cypherpunks.venona.com/date/1992/11/msg00108.html

https://youtube.com/watch?v=EiW4lKrMXQ4

2026-01-10T15:56:08Z

https://youtube.com/watch?v=EiW4lKrMXQ4

Great video of a tour of a nuclear power plant: ...

2026-01-01T01:22:21Z

Great video of a tour of a nuclear power plant:

https://youtube.com/watch?v=v0afQ6w3Bjw

Great video on progress on processor manufacturing by ASML: ...

2026-01-01T01:19:48Z

Great video on progress on processor manufacturing by ASML:

https://youtube.com/watch?v=MiUHjLxm3V0

Related geogebra file: https://www.geogebra.org/m/YThycjQK

2025-12-18T05:08:57Z

In reply to nevent1q…ws96
_________________________

Related geogebra file:

https://www.geogebra.org/m/YThycjQK

Great video on Phi https://www.youtube.com/watch?v=sj8Sg8qnjOg

2025-12-18T04:56:28Z

Great video on Phi

https://www.youtube.com/watch?v=sj8Sg8qnjOg

Congrats!

2025-12-14T06:14:05Z

In reply to nevent1q…6dm3
_________________________

Congrats!

Not a problem 🤘

2025-12-09T16:51:52Z

In reply to nevent1q…s8md
_________________________

Not a problem 🤘

Sounds good to me.

2025-12-09T16:43:51Z

In reply to nevent1q…pqhe
_________________________

Sounds good to me.

Good to see this topic getting more attention: #naddr1qq…s0dt ...

2025-12-09T16:40:07Z

Good to see this topic getting more attention:

quoting
naddr1qq…s0dt

In Nostr, you are your key. Your identity belongs to you alone: any device holding your private key grants full access, and any relay holding your events stores your permanent record. The radical ownership comes with radical responsibility: lose your private key and you lose everything; get it compromised and an attacker becomes you.

The protocol needs key rotation, but previous proposals have struggled with complexity. They require pre-generated key chains, cryptographic commitments, or trusted hardware that most users postpone configuring until disaster strikes.

The social layer offers a more tractable solution than the cryptographic one.

The problem space

There are two distinct scenarios we need to handle:

Key Compromise with Access: You discover your key is compromised, but you still have it

Lost Keys: Your key is gone - device destroyed, forgotten, or otherwise inaccessible

Traditional cryptographic solutions fail the second case entirely. With no pre-committed recovery key, access is gone. But Nostr already has a powerful social graph. What if we used it?

Solution 1: the compromise declaration

When you discover your key is compromised but still have access, you can publish a special "compromise declaration" event. This is a loud, permanent, irreversible signal that your key should no longer be trusted.

The brilliance is in what happens next: you update your profile name to [COMPROMISED] YourName. If an attacker tries to remove it, you add it back. This creates a spam war that works in the victim's favor: the chaos of competing updates signals to everyone that something is wrong with this account.

Even if the attacker "wins" and controls the account, they're controlling an account that's been permanently marked as compromised. They've vandalized their own prize.

Solution 2: social key rotation

The second solution is more radical: anyone can propose that a key should rotate to a new key, and the community decides if it's legitimate through attestations.

Here's how it works:

Proposal: Anyone (including you with a different key) publishes a rotation proposal

Attestation: Your friends verify out-of-band (Signal, in-person, video call) and publish attestations

Confidence: Clients calculate confidence based on who's attesting and how many

Manual Action: Users see the attestations and manually decide whether to follow the new key

The key insight: if both the old AND new keys sign the proposal, that's strong evidence. But even without the old key (lost scenario), sufficient attestations from your social graph can establish legitimacy.

Why this works

These solutions embrace what Nostr does well: social signaling and community verification, applied as security primitives. They're:

Simple: No pre-planning or complex setup required

Social: Leverages existing trust relationships

Permanent: Creates undeletable audit trails

Backward Compatible: The profile name trick works on every client today

Antifragile: Attacks make the compromise more visible, not less

The non-deletable event range

These proposals introduce events in kinds 65533-65535, which we're proposing as permanently non-deletable. Once you declare a key compromised or propose a rotation, that record stays forever. This prevents attackers from hiding their tracks and gives the community a permanent audit trail.

Moving forward

Perfect security is unattainable, and pursuing it often crowds out good-enough solutions. These proposals are practical and implementable, designed to work with human behavior as it exists. They turn Nostr's social layer into a security feature.

Key rotation doesn't need to be complex. Sometimes the best solution is to admit that humans are social creatures and build systems that embrace that reality.

NIP-101: Key compromise declaration

draft optional

This NIP defines a method for users to permanently declare that their private key has been compromised.

Abstract

When a Nostr user's private key (nsec) is compromised but they still have access to it, they can publish a special event to warn others that the key should no longer be trusted.

Specification

Compromise declaration event

A compromise declaration uses event kind 65535:
{
  "id": "<32-bytes lowercase hex of the id>",
  "pubkey": "<32-bytes lowercase hex of the compromised public key>",
  "created_at": <unix timestamp>,
  "kind": 65535,
  "tags": [
    ["nonce", "<unique random value>"]
  ],
  "content": "KEY COMPROMISED - DO NOT TRUST SIGNATURES AFTER THIS TIMESTAMP",
  "sig": "<64-bytes lowercase hex of the signature>"
}
Users MAY include a Bitcoin block reference for proof-of-absence:
["block", "<bitcoin block hash>", "<block height>"]
Requirements

Non-replaceable: Kind 65535 is a regular event (not replaceable)

Non-deletable: Relays SHOULD ignore kind 5 deletion requests for kind 65535 events

Unique nonce: Prevents replay attacks

OpenTimestamps Attestation

Users MAY publish a NIP-03 OpenTimestamps attestation (kind 1040) referencing the compromise declaration for cryptographic time proof.

Profile update convention

After publishing a compromise declaration, users SHOULD update their kind 0 metadata event to prepend [COMPROMISED] to their display name:
{
  "id": "<32-bytes lowercase hex of the id>",
  "pubkey": "<32-bytes lowercase hex of the public key>",
  "created_at": <unix timestamp>,
  "kind": 0,
  "tags": [],
  "content": "{\"name\":\"[COMPROMISED] Alice\",\"about\":\"Key compromised at block 850000\",\"picture\":\" https://example.com/pic.jpg\"}",
  "sig": "<64-bytes lowercase hex of the signature>"
}
This creates a visible warning even on clients that don't support this NIP.

Client Implementation

Clients supporting this NIP: - MUST check for kind 65535 events when displaying any user profile or content - MUST show a prominent warning if a compromise declaration exists - SHOULD display the compromise timestamp - SHOULD NOT automatically unfollow compromised keys

Security Considerations

Attackers self-sabotage by publishing compromise declarations

The spam war over kind 0 updates alerts all users

Services may run bots to maintain [COMPROMISED] profile names

NIP-102: Social key rotation

draft optional

This NIP defines a method for rotating Nostr keys through social attestation, enabling recovery from both compromised and lost keys.

Abstract

Users can rotate from an old key to a new key through community verification. Anyone can propose a rotation, and the community provides attestations to validate it. This works even when the original private key is lost.

Specification

Event Kinds

65534: Key rotation proposal (non-deletable)

65533: Key rotation attestation (non-deletable)

Rotation proposal event

Anyone can publish a rotation proposal:
{
  "id": "<32-bytes lowercase hex of the id>",
  "pubkey": "<32-bytes lowercase hex of the proposer>",
  "created_at": <unix timestamp>,
  "kind": 65534,
  "tags": [
    ["p", "<old pubkey>"],
    ["p", "<new pubkey>"],
    ["old", "<old pubkey>"],
    ["new", "<new pubkey>"]
  ],
  "content": "Proposing key rotation for [reason]",
  "sig": "<64-bytes lowercase hex of the signature>"
}
The proposer can be the old key, new key, or any third party.

Attestation Event

Community members publish attestations:
{
  "id": "<32-bytes lowercase hex of the id>",
  "pubkey": "<32-bytes lowercase hex of the attester>",
  "created_at": <unix timestamp>,
  "kind": 65533,
  "tags": [
    ["e", "<rotation proposal event id>"],
    ["attestation", "confirm"]  // or "reject"
  ],
  "content": "Verified via [details]",
  "sig": "<64-bytes lowercase hex of the signature>"
}
MAY include: ["method", "in-person|video-call|signal|telegram|other"]

The old and new keys can also publish attestations to strengthen the signal.

Client Implementation

Clients query for kind 65534 events and fetch associated kind 65533 attestations. Calculate weight based on: - Both old+new keys attesting = highest confidence
- Attestations from follows > follows-of-follows > unknown - More attestations = higher confidence

Never auto-follow rotated keys. Require explicit user confirmation.

Example Flow

Lost Key: Alice loses her key → creates proposal with any key → shares event ID via Signal → friends attest → others manually update follows

Compromised Key: Alice publishes proposal from old key → signs from new key → dual signature creates high confidence

Security Considerations

No automatic actions prevent false rotations

Social verification leverages existing trust

Sybil resistance through web-of-trust weighting

Non-deletable events create permanent audit trail

Relays SHOULD store kinds 65533-65535 permanently and ignore deletion requests.

quoting
naddr1qp…s3p9

I'm going to take a stab at one of the most difficult and important problems in freedom technology: key rotation. Can web of trust help? If so, how?

The canonical use case will be that of a compromised nostr nsec. Suppose Alice wakes up one morning to discover that her nsec has been compromised by a scammer who is sending DMs to all of her contacts asking for sats. She needs the community to know that this nsec is compromised, she needs to spin up a new nsec, she needs the community to know that this is her new replacement nsec, and she needs to do all of this ASAP. How does she proceed?

My guiding principle is something that deserves a name, but doesn't to my knowledge have one, so I'll just call it Occam's Design Principle:

“A product should be made as simple as possible, but not simpler.”

Our solution requires Alice to communicate this catastrophe to people who know her in the real world so that they can relay it to the community. So for starters, she will tell her friends Bob, Charlie, Dave, etc that her old nsec is compromised. Optionally, she will also provide them with a replacement pubkey corresponding to a new nsec, presuming she has created a new one and wishes the community to know it.

Obviously this is an imperfect solution, but there is no perfect solution, and we desire to keep things simple. Improvements will come later.

The Proposed Solution

We require no new event kinds or new NIPs, other than the Decentralized Lists Custom NIP.

Declaration of the Key Rotation Attestation List

Step 1 is to declare a new type of attestation that Bob, Charlie, Dave, etc. can use to effect the attestation described above. This only needs to be done once.

Following the Decentralized Lists NIP, this is achieved via a kind 9998 list declaration event, also called a list header:
{
  "kind": 9998,
  "tags": [
    ["names", "key rotation attestation", "key rotation attestations"],
    ["description", "This is an attestation whereby Bob, who knows Alice in the real world, can alert the community that her nsec has been compromised. There is only one required piece of data, which is the pubkey corresponding to her compromised nsec. For this, he uses the p tag. Optionally, he can also communicate a replacement pubkey, using the optional pubkey_replacement tag, presuming Alice has supplied him with one."],
    ["required", "p"],
    ["optional", "pubkey_replacement"]
  ],
  "id": "<id_key_rotation_attestation_header>"
}
Issue Key Rotation Attestations

Step 2 is for Bob to issue the attestation that Alice's old nsec has been compromised, and optionally to communicate the pubkey that she intends to replace the old one. This is accomplished via a kind 9999 event. It uses the z tag to point to the parent list header (above), the p tag to indicate the compromised account, and (optionally) the pubkey_replacement tag to indicate the new pubkey:
{
  "kind": 9999,
  "tags": [
    ["z", "<id_key_rotation_attestation_header>"],
    ["p", "<alice_pubkey_compromised>"],
    ["pubkey_replacement", "<alice_pubkey_replacement>"]
  ],
  "id": "<id_key_rotation_attestation_item>"
}
Attestation Support

Step 3 is for Charlie, Dave, etc to voice support (or rejection, as the case may be) for Bob's key rotation attestation using any one of several methods, with kind 7 reactions being the recommended method as described in the Decentralized Lists NIP:
{
  "kind": 7,
  "content": "+", // or "-" to downvote
  "tags": [
    ["e", "<id_key_rotation_attestation_item>"]
  ]
}
Alternatively, Charlie, Dave, etc could simply publish duplicate attestations using their own kind 9999 events, identical to Bob's.

Consumption

How are these attestations processed? If the end user wants to check whether alice_pubkey is valid (to the best of the community's knowledge), use this filter:
{
  "kinds": [9999],
  "#z": ["<id_key_rotation_attestation_header>"],
  "#p": ["alice_pubkey"]
}
Reactions to events returned by this filter would also be obtained with the appropriate kind 7 filter and gathered together. All of these results (kind 9999 and kind 7 events) would then be filtered or weighted based upon the end user's personalized trust metric of the event author. For starters, standard personalized PageRank or personalized GrapeRank metrics would do, easily obtained via Trusted Assertions. More sophisticated metrics might use a proximity score between Alice and the event author; authors whom Alice (previously) followed, for example, could be given the highest weighting. Perhaps Alice could even designate, ahead of time, a NIP-51 list of pubkeys that she would trust to make these attestations. But that would be work for the future; no need to support it in the initial rollout.

Future Expansions of the Protocol

Decentralized Lists provides multiple methods for future expansion of the basic Key Rotation protocol as described above. One might, for example, propose adding one or more tags alongside the p and pubkey_replacement tags. Perhaps a tag that indicates the reason for the rotation: lost, compromised, routine rotation, etc. Perhaps a tag to communicate the timestamp that the rotation is intended to take effect. The list of tags is just that: a list, that can be curated by your web of trust! In the event that multiple incompatible expansions are proposed, the community would hopefully (and probably) settle upon one or the other.

Conclusion

A client that implements the above protocol would be providing a great service to the nostr community and would lay a foundation upon which more complex protocols could evolve. In the event that a friend tells you that her account is compromised, this is the client where you would run so you could shout her predicament from the mountaintops. Such a client would therefore need a well designed interface to issue the relevant attestations and reactions. Any WoT Service Providers worth their salt would, in turn, want to listen to the output of this client and work them into their trust metrics. Therefore, such a client would want to use one or more standard methods to communicate the status of any given pubkey: Trusted Assertions, API, and/or some other method.

This would be a great contribution to the upcoming web of trust hackathon. It could be vibe coded, but ideally a team would form around an idea such as this and ensure excellent execution. And of course, I welcome ideas on how to improve this proposal. LFG!

nevent1q…7e7w

quoting
nevent1q…pzay

I'm honestly curious how many people I am going to piss off with this piece

https://untraceabledigitaldissident.com/pgp-nostr-digital-ownership-identity/

ellama works with ollama and emacs

2025-12-09T16:32:25Z

In reply to nevent1q…ydw9
_________________________

ellama works with ollama and emacs

Cool

2025-12-09T04:53:06Z

In reply to nevent1q…ez9x
_________________________

Cool

They also establishment the first compulsory public schools in ...

2025-12-09T04:50:14Z

In reply to nevent1q…wg06
_________________________

They also establishment the first compulsory public schools in America...

Most of what is called "news" is propaganda and does not ...

2025-12-03T18:09:14Z

Most of what is called "news" is propaganda and does not give enough attention to economic changes and human action. It is very boring. Nostr has been refreshing as a news source, very greatful.

This same pattern I think has been known long before social media ...

2025-11-30T20:21:07Z

In reply to nevent1q…8qgs
_________________________

This same pattern I think has been known long before social media feeds or computers, and is the basis for most all propaganda. It's just now become automated.

How many NPM packages have been compromised now in the last 10 ...

2025-11-24T23:46:46Z

How many NPM packages have been compromised now in the last 10 years? Has to be a pretty high number at this point.

https://helixguard.ai/blog/malicious-sha1hulud-2025-11-24

Where is the Beef? Regulatory Barrier to Entry and Competition in ...

2025-10-23T22:33:00Z

Where is the Beef? Regulatory Barrier to Entry and Competition in Meat Processing

"In short, regulatory extortion tyranny. Inspection regulations are size prejudicial. I know one facility that was ordered closed because it wasn’t processing fast enough. The Food Safety Inspection Service measures its efficiency by pounds inspected per personnel-hour, creating an adversarial discriminatory attitude toward small plants.

In 1906 when Upton Sinclair wrote The Jungle 7 large companies controlled half the nation’s meat processing capacity. After a century of government intervention, 4 now control 85 percent. When licenses and compliance make entering and maintaining an abattoir more burdensome to small facilities than large, concentration and centralization is not an anti-trust issue; it’s a discriminatory regulatory issue."

—Joel Salatin

Video:
https://youtube.com/watch?v=5yStXjQSOR4

Full testimony:
https://judiciary.house.gov/sites/evo-subsites/republicans-judiciary.house.gov/files/evo-media-document/salatin-testimony.pdf

A camera in a garage that can record light moving at 2 billion ...

2025-10-21T22:23:57Z

A camera in a garage that can record light moving at 2 billion fps:

https://youtube.com/watch?v=o4TdHrMi6do

The interesting part from the Trezor news: ...

2025-10-21T18:46:13Z

The interesting part from the Trezor news:

TROPIC01 secure chip now in Trezor! ...

2025-10-21T16:07:49Z

TROPIC01 secure chip now in Trezor!

https://youtube.com/watch?v=EWxAc8wzfFM&t=928s

IMO, web-of-trust key signing attestations and revocation as ...

2025-10-07T22:21:03Z

In reply to nevent1q…6t3d
_________________________

IMO, web-of-trust key signing attestations and revocation as similar to PGP.

Funny, the service here can be better than many "fancy" ...

2025-10-03T21:07:05Z

In reply to nevent1q…cpxl
_________________________

Funny, the service here can be better than many "fancy" restaurants that seem dumbfounded by orders for just hamburger patties.

https://www.youtube.com/watch?v=CYlon2tvywA

2025-10-03T00:27:59Z

https://www.youtube.com/watch?v=CYlon2tvywA

What stand is that?

2025-10-01T21:09:14Z

In reply to nevent1q…r022
_________________________

What stand is that?

Seems necessary for MLS and etc. Also, if it's locked to a ...

2025-10-01T18:29:00Z

In reply to nevent1q…lws0
_________________________

Seems necessary for MLS and etc. Also, if it's locked to a relay, the relay can also redeem later to avoid timing analysis issues with a mint.