Nostr notes by Laan Tungir

Nostr event nevent1qqsqqqqqvt2a6rmzg6p2r456rtqtgq682qr75jgc9tk40y2eeltuerqzyq0vg4rnfh9ldlj5jqwwyhqv034u5hka39zrg9nkr7kuxgwn3hcnjqvwtka

2026-10-27T21:05:21Z

Nostr event nevent1qqsqqqqpqmlu560fas8pamfj2lg2v4z97hssj47eepynw3xtaw0fhwczyq0vg4rnfh9ldlj5jqwwyhqv034u5hka39zrg9nkr7kuxgwn3hcnj0lq8xc

2026-10-27T14:16:18Z

There were two kinds of teachers: 1. Blackboard 2. OHP

2026-10-27T13:27:36Z

In reply to nevent1q…ask9
_________________________

There were two kinds of teachers:
1. Blackboard
2. OHP

Rewriting in Rust. ...

2026-10-26T23:27:56Z

Rewriting in Rust.

Nostr event nevent1qqsqqqqqa20juzfuzawu8v36cmcedkgutm3g2t0ra6d0vmlq4pmavugzyq0vg4rnfh9ldlj5jqwwyhqv034u5hka39zrg9nkr7kuxgwn3hcnjy345c5

2026-10-26T14:51:19Z

Nostr event nevent1qqsqqqq0whymfu5exm0yrg63g7twrj9xln4aw6ff8xs8xgus08kr92gzyq0vg4rnfh9ldlj5jqwwyhqv034u5hka39zrg9nkr7kuxgwn3hcnjhujyvs

2026-10-26T13:54:50Z

Nostr event nevent1qqsqre3klleapclxuav3xkam2xmup5n5n9sf4q6tkd6dr2ttkdqq5tgzyq0vg4rnfh9ldlj5jqwwyhqv034u5hka39zrg9nkr7kuxgwn3hcnj530qd5

2026-10-22T11:44:27Z

Doomers believe that the rules of mathematics objectively exist, ...

2026-10-14T15:10:28Z

Doomers believe that the rules of mathematics objectively exist, so we don't need to "align" AI mathematics with our mathematics.

Implicitly doomers believe morality doesn't objectely exist.

If doomers admit there are truths about morality, then they must admit that not only is there no "alignment problem", but that AI will quickly become more moral than we are.

Nostr event nevent1qqszu280sjql82aj34d65zyhmlj363mh6vacxq4nkmvezf52n96vy0czyq0vg4rnfh9ldlj5jqwwyhqv034u5hka39zrg9nkr7kuxgwn3hcnjmrg6tz

2026-10-13T12:15:54Z

Use Codium.

2026-10-10T00:09:31Z

In reply to nevent1q…xmuu
_________________________

Use Codium.

Someone recreated the whole Adobe set of products. Downloaded the ...

2026-10-07T16:45:17Z

Someone recreated the whole Adobe set of products. Downloaded the Photoshop equivalent for free, and holy shit, it is fast. Starts instantly.

https://getartcraft.com/

Nostr event nevent1qqsy2zv8gcenspgr3fw5drmgntsragmyq8430rng7sj3209f0tez09szyq0vg4rnfh9ldlj5jqwwyhqv034u5hka39zrg9nkr7kuxgwn3hcnjh2fgzm

2026-10-06T11:35:53Z

Nostr event nevent1qqsfhkasvm5hqltrhwsfunmdd8gx6vsguphmhy0mgaej6frmcly4aagzyq0vg4rnfh9ldlj5jqwwyhqv034u5hka39zrg9nkr7kuxgwn3hcnj6kzz6z

2026-10-05T19:11:45Z

Nostr event nevent1qqsxenwcx9vf4h4el77pzm92y088guqct5qqrqn8gf0v90sgszuhs0qzyq0vg4rnfh9ldlj5jqwwyhqv034u5hka39zrg9nkr7kuxgwn3hcnjd2vfjc

2026-10-05T11:37:09Z

Nostr event nevent1qqsv3ryuv6s8nsf5hyt2j99cy82lkccha9uz30ulkzljhm4wxak4y3gzyq0vg4rnfh9ldlj5jqwwyhqv034u5hka39zrg9nkr7kuxgwn3hcnj3lclsu

2026-10-04T20:14:58Z

GM

2026-10-04T13:57:58Z

In reply to nevent1q…ch0q
_________________________

GM

Nostr event nevent1qqs0ja2zd82y3ksyhh3r4wkgmcdmt4mfkt6n79hznvrvdx6x74rmcxczyq0vg4rnfh9ldlj5jqwwyhqv034u5hka39zrg9nkr7kuxgwn3hcnj650zdk

2026-10-03T10:46:58Z

Nostr event nevent1qqswff0mnfzcrd8ywnpl3nu02e4ks9nwcufdrmcmxm7q89gwtqgavpgzyq0vg4rnfh9ldlj5jqwwyhqv034u5hka39zrg9nkr7kuxgwn3hcnj4jdw8r

2026-10-02T11:17:46Z

Nostr event nevent1qqsz9vg72fh9l9k43j5lat4lah9udf8cga64fuhwyjl2s44020mcxpczyq0vg4rnfh9ldlj5jqwwyhqv034u5hka39zrg9nkr7kuxgwn3hcnjraye5j

2026-09-26T16:57:52Z

Why choose violence?

2026-09-25T21:54:49Z

In reply to nevent1q…0ans
_________________________

Why choose violence?

GM. Live with some dub-techno. ...

2026-09-18T09:41:50Z

GM. Live with some dub-techno.

quoting
naddr1qv…hllk
Dub Techno 010

I was surprised that I could use Chinese models to help figure ...

2026-09-15T11:28:26Z

In reply to nevent1q…pvl8
_________________________

I was surprised that I could use Chinese models to help figure out how to get through the Great Firewall.

Nostr event nevent1qqsv2z9yue0ev6xg5uzng3fc7nen97yszce225ec4n8f6ss48d2hqpszyq0vg4rnfh9ldlj5jqwwyhqv034u5hka39zrg9nkr7kuxgwn3hcnjekgf47

2026-08-27T10:52:57Z

We are not on social media enough. Social Media is one of the ...

2026-08-20T10:58:56Z

We are not on social media enough.

Social Media is one of the greatest inventions of mankind. Ever. Full stop.

But it is constantly maligned.

Even on NOSTR social media is seen in a somewhat negative light. Moral virtue is expressed as "go out and touch grass".

A thought experiment - give 100 people this social media challenge:
"Every day for a year, post on social media about your problems, or your society's problems, along with what you believe are the solutions. Post on politics, science, religion, morality, whatever is important to you. Consider and respond to any serious replies. Be earnest."

Now at the end of the year, compare that group of 100 people, to a control group.

Almost certainly the 100 who posted on social media would have advanced their thinking far more from where it was. They would have had to make explicit in their mind their beliefs, and then put them up for critique. Their knowledge would have grown. They would look back at their early beliefs as relatively uninformed.

If I was asked to spend time with either group after the year, I would choose the 100 people who posted on social media.

Is social media perfect? No. That is why we #NOSTR.

Would the people posting have been happy the whole time doing it? Almost certainly not, but I'm not always happy at the gym either.

Karl Popper taught us how we create knowledge:
1. Start with a problem
2. Conjecture solutions.
3. Criticize those solutions.
4. Go with the best solution until we can conjecture a better one.

The social media challenge I proposed, is virtually this exact method.

I have been thinking that the traditional education system is doomed, but was not sure what would replace it. Now I am thinking that it is simply social media.

I love NOSTR.

# NOSTR over single packet UDP ## TLDR Send a Nostr event as ...

2026-08-13T09:45:28Z

# NOSTR over single packet UDP

## TLDR
Send a Nostr event as one-way UDP packet instead of using TCP. This one-way send is very censorship resistant compared to the alternatives. I currently have it implemented on my relay and you can test it now on the command line using nc and fiatjaf (npub180c…h6w6)'s nak.
'''
nak event -k 1 -c "I don't shake hands, because Ewwwwww!" | nc -u -w1 laantungir.net 443
'''

## The problem:

As far as I know, every circumvention tool [VPN, Tor, Shadowsocks, obfs4] has a handshake. You start off messaging the server, and the server replies before you can send your information. National firewalls detect those handshakes, fingerprint them, probe the handshake, then block the IP or take other action. The handshake is a vulnerability. Every tool plays cat-and-mouse obfuscating it.

For example Tor bridges are vulnerable to active probing. The adversary connects to a suspected bridge and sends data. If the server responds with a valid obfs4 handshake, the adversary knows it is a bridge. This is how many Tor bridges get blocked.

## The idea:

UDP Nostr eliminates the handshake entirely. The Nostr event is already signed before it touches the network. The signature replaces the handshake. There is no SYN, no TLS ClientHello, no SNI, no key exchange, no recognizable structure — just a blob of bytes in one UDP packet under 1472 bytes.

The adversary can send a probe, but the relay doesn't respond at all. No handshake to detect. No TCP RST to inject (UDP has no RST). No DNS to poison.

## Live example — full zero-config round-trip

My relay has fully implemented UDP Nostr.

**command line**

```bash
# Console 1 - Set up a live watch for the nak default events on the relay
nak req -a 79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798 --stream laantungir.net/relay

# Console 2 - Send via UDP (no --sec needed, nak uses the default key)
nak event -k 1 -c "Hello!" | nc -u -w1 laantungir.net 443

```

**Python:**
```python
import socket, sys
s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
s.sendto(sys.stdin.buffer.read(), (sys.argv[1], int(sys.argv[2])))
```
```bash
nak event -k 1 -c "Hello!" | python3 send.py laantungir.net 443
```

**JavaScript (Node.js):**
```javascript
const dgram = require("dgram"), s = dgram.createSocket("udp4");
process.stdin.on("data", b => s.send(b, +process.argv[3], process.argv[2]));
```
```bash
nak event -k 1 -c "Hello!" | node send.js laantungir.net 443
```

## An example of largest kind:1 that fits in one packet

With the default nak key, empty tags, and a 10-digit timestamp, the Nostr JSON overhead (structural syntax + hex-expanded id/pubkey/sig) is ~340 bytes, leaving **~1132 characters of content** in the 1472-byte UDP budget. Below is an illustrative event at full capacity — its single-line JSON form is exactly 1472 bytes on the wire, one Ethernet frame, unfragmented. (The `id` and `sig` shown are placeholders for readability; a real event carries a SHA-256 `id` and valid Schnorr `sig`.)

```json
{"id":"426462725f7061636b65745f626f756e646172795f746573745f303030303030",
"pubkey":"79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798",
"created_at":1772019044,
"kind":1,
"tags":[],
"content":"The cypherpunk problem: how do two computers communicate freely when the network between them is controlled by an adversary? The standard approaches are anonymity (hide which computer is talking) and decentralization (make copies everywhere so you can't stop them all). But there is a third approach that is less explored: protocol substrate hardening. Design the communication protocol so that interference requires violating physics or OS-level guarantees. The simplest example: fit your message in a single UDP datagram under 1472 bytes. At this size, your message is exactly one Ethernet frame. The adversary cannot block it without blocking all UDP traffic on that port. They cannot fragment it. They cannot reassemble it. They cannot probe for a handshake because there is no handshake. The Nostr event is self-validating: it carries its own signature. The signature replaces the handshake. This is the key insight. Every other protocol announces itself with a handshake. TCP has SYN. TLS has ClientHello. QUIC has its Initial packet. WireGuard has its handshake initiation. All of these create a pattern that can be fingerprinted and blocked. A Nostr event over UDP has no pattern. It is just bytes on the wire. The receiver validates the signature using only the pubkey in the event. No shared secrets. No session setup. No state. This is the no-handshake property. It is the fundamental advantage of Nostr over every other protocol for censorship resistance. Combine this with the MTU boundary and you have a protocol that cannot be blocked without blocking all UDP traffic. The adversary faces a dilemma: block UDP entirely and break the internet, or let your messages through. This is the asymmetry we exploit.",
"sig":"4b57c22b1797b109530ffe5d04cabac468b1a5942873a5141334ecbc77694fc968a1b941979ba13602fceb1dad8014ab6469c6ae9cef0b5668cc23ad1449e103"}
```

## Future work

I'm currently working on an encryption scheme specifically for this protocol.

https://15.235.3.231/git/laantungir/udp_nostr
https://laantungir.net/git/laantungir/udp_nostr
https://[2607:5300:203:bb5c:4a46:c3d3:1dc3:fbe8]/git/laantungir/udp_nostr
http://kn2jam4kyz6s5wacyozo3do3d2zsvh4to45uh7xliulwdust6zjuvnad.onion/git/laantungir/udp_nostr
http://npub1crpldvy49ef8z34wlacwujnfudy4nd7k96aqdx5wgn6ckztz7z8q9t59ud.fips/git/laantungir/udp_nostr

Really interesting. #nevent1q…2cd0

2026-08-08T00:37:20Z

Really interesting.

quoting
nevent1q…2cd0
luke childs came up with an interesting new self-custody solution called anzen

https://github.com/lukechilds/anzen

https://lu.ke/self-custody-trilemma

@npub1get…0nfm Hey guys, I think getalby.com is down.

2026-07-17T14:11:19Z

Alby (npub1get…0nfm) Hey guys, I think getalby.com is down.

Nostr event nevent1qqszpr0nu4jkcdnhxl9mntw4xxhyqk5lj8zx9v8h6sf7q8amdy206sszyq0vg4rnfh9ldlj5jqwwyhqv034u5hka39zrg9nkr7kuxgwn3hcnjq2kjps

2026-07-12T10:10:35Z

Nostr event nevent1qqsw40xu0u9u6k34lnlmeskcrrj9zaayq39zsf59sk8nkc0pnfzlqlqzyq0vg4rnfh9ldlj5jqwwyhqv034u5hka39zrg9nkr7kuxgwn3hcnjv46alt

2026-07-02T18:23:07Z

My vote is to always push the boundaries of what is possible with ...

2026-06-27T00:39:22Z

In reply to nevent1q…2lxw
_________________________

My vote is to always push the boundaries of what is possible with privacy and censorship resistance, and to stay inspirational in that regard.

That is our niche.

That is our thing.

Nobody else cares as much about censorship resistance as we do, but there are lots of people who care about making reasonable engineering trade-offs in software, to gain users.

I want to make the best tools. Not the tools for the masses.

FIPS + Qubes-OS GM. Yesterday I integrated FIPS into Qubes-OS. ...

2026-04-12T11:26:21Z

FIPS + Qubes-OS

GM.

Yesterday I integrated FIPS into Qubes-OS. Here is a short description of what each of them does, and the resulting setup.

FIPS - a permissionless internet.

To get a domain name, you need ask for permission.
To get https, you need to ask for permission.
To get an IP address, (the final boss) you need to ask for permission.

FIPS is a permissionless internet. You use a nostr address instead of an ip address, and through some cool engineering, you get a permissionless internet.

So for example:
http://npub1crpldvy49ef8z34wlacwujnfudy4nd7k96aqdx5wgn6ckztz7z8q9t59ud.fips/
gets you to my web page if you are running FIPS, and you don't need permission, and neither do I.

We just need nostr addresses.

QUBES-OS - the securest OS.

Running agents locally can be a real security issue which is originally why I switched to Qubes-OS. Qubes-OS lets you run several operating systems on one machine, and encloses them in what are called "qubes". You can run whatever OS you want in each qube, all on the same machine, all securely separated and isolated.

You can also route internet THROUGH a qube. So a nice example is setting up your vpn in a qube, and use it like the following:

It forces everything you run in Debian to pass through the vpn qube, else no internet.

You can send multiple OSs through the vpn.

Turns out you can also create a FIPS qube. That is what I did yesterday, and part of my setup now looks something like this:

You can check out FIPS here: https://github.com/jmcorgan/fips
Qubes OS here: https://www.qubes-os.org/
Follow FIPS here:
fips (npub1y0g…00ly)
Follow the FIPS creators here:
jcorgan (npub19wa…8p6k)
Arjen (npub1hw6…65gr)

If you are going to attempt to do this, point your agent to this repo and it should save you some tokens. There were some gotchas that it took a long time for Claude and Codex to figure out.
https://git.laantungir.net/laantungir/fips_setup

I fucking love nostr. The perfect land, to build my cyber_home. ...

2026-03-12T23:27:17Z

I fucking love nostr.

The perfect land,

to build my cyber_home.

Nostr event nevent1qqsqasdu9s5t8e2nkmrh2w70a3r4eqk5q8q5rnk7ke5v7fjwa6rjhhqzyq0vg4rnfh9ldlj5jqwwyhqv034u5hka39zrg9nkr7kuxgwn3hcnj2mw0za

2026-02-28T09:24:20Z

GM fellow nyms. ...

2025-10-28T11:02:18Z

GM fellow nyms.