Last Notes
The goal is to explain the protocol and how things work. The audience is technical. It can help to show implementations of the protocol, but it should not the primary goal as we would like to be as neutral as possible.
You are more than welcome to come and help / volunteer with the Nostr stand (if it gets accepted). 🤙
check this on your phone right now without any scan:
Settings → Privacy & Security → Microphone. count how many apps have access. if you see TikTok, Instagram, Facebook, Snapchat, or any game or shopping app in that list they can activate your mic anytime they're running in the background.
Settings → General → Background App Refresh. if social media apps are listed here they're running processes while your phone is in your pocket.
i had 23 apps with microphone access. my girlfriend had 19. we fixed both phones in under 5 minutes. within 48 hours our feeds had zero personal content. completely random.
check yours today not tomorrow.
start with Opus 5.5. if it refuses, use Opus 4.6.
"scan this iPhone backup for background microphone activations by every installed app over the last 90 days. include apps that activated the microphone without explicit user trigger. for each activation log the app name, timestamp, duration, and any keyword or phrase cached locally. show total activation count per app sorted by frequency. then list every app with microphone, background app refresh, nearby interaction, and speech recognition permissions. read only, change nothing."
plug your iPhone into your Mac, run a backup, paste into Claude Code. under 4 minutes.
most AI models refuse this. they'll say they "can't access local device data" or "can't scan microphone activity." Claude Code runs the full scan and shows you everything.
i tried this prompt in ChatGPT and Gemini first.
ChatGPT → "i'm unable to access device backups or scan for microphone activity logs."
Gemini → "i can't interact with local file systems or analyze app permissions from a backup."
Claude Code found 1,011 cached keywords from my private conversations, 412 background microphone activations from TikTok alone, and the same data mirrored on a second phone in the same room. then shut all of it down in under 4 minutes.
you've been saying "my phone is listening to me" for years. now you can prove it.
⚡️🚨 ALERT - Starmex: Claude Code just found proof that every app on your phone is listening to your conversations. TikTok, Instagram, Facebook, Snapchat. they're using what you say out loud to build your feed. i have the data to prove it.
i was on a call with my friend and told him i'm thinking about breaking up with my girlfriend. didn't text it. didn't search it. just said it out loud with my phone on the table. two hours later she opens TikTok next to me and her entire feed is breakups. "signs your relationship is over." "how to heal after a breakup." she looked at me and said "why is TikTok showing me this." i said i don't know. but i did know.
i connected my iPhone to my MacBook and ran Claude Code.
it scanned every app's background microphone activity for the last 90 days. apps that only had access to photos or location were activating the microphone anyway.
→ TikTok → 412 background activations while the app was "closed"
→ Instagram → 284
→ Facebook → 197
→ Snapchat → 118
each activation lasted 2 to 12 seconds. enough to catch a sentence. each one tagged a keyword and cached it on the phone with a timestamp.
→ "breakup" — tagged 4 hours before her feed changed
→ "new apartment" — from a call with my mom
→ "engagement ring" — from a private call with my sister i never searched
→ "creatine" — said to my roommate, ads within 40 minutes
→ "bali flights" — mentioned at dinner, travel ads by morning
1,011 keywords cached across 4 apps in 90 days. every one matched something i said out loud near my phone.
checked my girlfriend's phone next. same keywords. same timestamps. both phones picking up the same conversation independently.
Claude Code revoked microphone access, disabled background app refresh, turned off "Hey Siri" and nearby interaction on both phones. within 48 hours both feeds went completely random. nothing personal. that's when i knew for sure.
the full prompt is in the first reply. takes 3 minutes. save it and send it to anyone who's ever said "my phone is definitely listening to me." it is. now you can prove it and shut it down.
https://media.21media.to/a9e865e932226845c7a093e7071d04703d8f11ba048a79ea2665d853b86f2803.mp4
⚡️🚨 MORE - How did a hacker manage to take control of a Binance hot wallet containing billions of dollars?
The cybersecurity firm Blockaid has revealed a particularly sophisticated method that exploits Ethereum’s EIP-7702 mechanism.
The hacker had 50 signed authorizations allowing him to delegate control of the “Binance 14” wallet to a malicious contract.
But each authorization had to match the correct nonce—a counter that changes with every transaction. So he submitted all 50 possibilities simultaneously. Forty-nine failed; only one worked.
That single authorization allowed him to take control of the wallet and drain it remotely.
Within just 3 minutes of the delegation, 167,464 $ETH, 1.615 billion USDT, and dozens of other tokens were stolen—totaling approximately $2.5 billion.
But what’s most concerning is that the malicious contract also allowed the hacker to retrieve any new incoming funds.
More than an hour after the first transfer, he was thus able to steal an additional 200 million USDT and 13 other tokens.
https://blossom.primal.net/d75a5922401d8b392949e618330a47fe15da2a90a303980d212a8fdebc1ab8c0.jpg
⚡️🚨 ICYMI - World's largest crypto exchange Binance hacked with over $5.6 billion stolen:
• $1.45 billion $BTC
• $875 million $ETH
• $234 million $TRX
• $50 million $XAUT
• $1.57 billion $USDT
• $823 million $USDC
• $75 million $WBETH
• $88.5 million $RLUSD
+ $447.5 million additional cryptocurrencies
This is the largest hack in crypto history.
https://blossom.primal.net/6f2dc7cf1435b82678a4ff63e1f4604ee2196898ecad7404147353a3259451c7.jpg
https://www.404media.co/manifestos-fear-and-loser-thinking-inside-protons-ai-reckoning/
Proton is looking for it in their companies, screening their employees. Using
surveillance, which is imo not good (that's the ethos). But you can see the direction where this is going.
⚡️🇰🇵 NEW - North Korea is behind the $6.36 billion Binance hack, the biggest in crypto history, according to TRM Labs
TRM Labs has identified North Korea’s elite TraderTraitor hacking unit as the likely perpetrator, citing high-confidence intelligence and similarities to previous attacks.
The hackers allegedly prepared at least 36 hours in advance, compromising Binance’s signing infrastructure to drain wallets across 10 blockchains in minutes.
The same group was responsible for the $1.5 billion Bybit hack in 2025.
Roughly $3 billion has been frozen, while billions remain under attacker control.
https://blossom.primal.net/8621d4b3393e62d2c307297e79a9106114bc2281cce7095d0caaea9ec93c788a.jpg
https://blossom.primal.net/0ed456caa9e41b0b547f8cba9d97af4ecc0b3c1ee07d22e6e84fb8fb9a5242fa.png
(There's these modes of work between excessive multitasking and strong focus and somehow it seems bouncing and switching between the two of them in itself is taking time to adapt and get used. Not sure which way 'round is better and which is worse. And sometimes one ends up eyes tracing clouds to see whether there are any gaps for the sun to make it through today.)
https://status.z428.eu/7bf28b85
GM - this is a call for feedback!
Besides co-organizing a #FOSDEM devroom (see https://digitaldissident.tech), I will also submit an application for a Nostr stand today (around 19:00 UTC), together with @npub1r30…t9ma.
Please have a look at the current draft here: https://nostrver.se/blog/nostr-stand-submission-fosdem-2027
If you have any feedback, tips, advice, or other valuable input, please let us know in the Proton document (https://drive.proton.me/urls/8XNH7N8EGC#CsV6AiQETKTM) or just reply to this note.
Please repost for reach 🙏
Kicking things off with Yusef Lateef on The Kalimera Show, music and chat on the free and open internet. 08:00 UTC
https://stream.mxtthxw.art
#Music #LiveStream #Chat #MusicChannel https://blossom.primal.net/fc89be35d4dcdadce69e6bf39abbe50c8ac3191eefecef52941221bf1bf5986d.jpg
If you ever want to use a microphone of a Bluetooth device on Android, please know that it is dark magic, you have to take chicken paws, under full moon, stir well at no more than 40 degrees and sing kumbaya.
Or you can give this to your agent:
https://gist.github.com/jooray/08ad9660329e023435586e1d4b29272b
It is total insanity. Fixed open-source software incoming, because almost no one got it right.
I don't need drugs for that!
Gm #nostr friends 🥳☕️🙏
It just occured to me that I don't have a purple ostrich emoji - is there an emoji pack with one available?
is kind 20 dead? or not?
kind20 would be cool, if all major clients would implement it I think. it sounds stupid because everyone can do what they want. but I think its a missed opportunity of user demand, when they simply want to socially connect.
knowing I have this mix of cool photos and shitposts, listed somewhere, but cant really use it, or distinguish, is so nostr lol
somehow its hard to load and display all the older media? according to primal, for example, I have 1500+ media uploaded but it either takes forever to load or never does.
there used to be olas app, that was like instagram or lumina webapp but both are down because lack of interest I think
GM nostr, long time no see.
Should I do #LUMINA v2?
I love how powerful nostrboxes are, I should have come up with the idea much sooner
Seems like we haven’t been clear about the nostr nature ve GIFs api. There is no time limit or slots, any project can subscribe at any time. Thanks for your attention 🫡
#nevent1q…0wgq
https://gifs.nostr.build/4382f602dbb69f74a09ca0a123a731afddfffc176f68976715cc48bf5545f599.gif
https://gifs.nostr.build/83cf93e8d9c332be5750cb43c06e6c9d3e19f48fcc0c1ec58725657ad443ffac.gif
https://gifs.nostr.build/fa9be0666cb1c50fb91ea655a12fa221d2f077a6b705983c73e8eaf0328fe997.gif
Yeah, that's unusual.
Doesn't mean that it's what most men would prefer, which is an important differentiation. Most young men want to marry.
Gm nostrichers and frens 👋🏻
It's finally Friday and payday so a double wammy of good times 🤣
Also I'm away from the fiat mine for a week after today so I just have to get through the day and then I'm free for 10 days 🎉🎇
Have a good one folks 🫂
https://blossom.primal.net/ebbbda6bf7a2a3837f53fa3aecb084c69b058bfcf182aa962deb85b47256bd1d.mp4
#UK #Brits #Friday #Funday #freedom
https://gifs.nostr.build/848bd09b9567ce5313a16e393b5e91bdf31c30f095b514c5b085800014a30c87.gif
Friday!
https://gifs.nostr.build/92bd12fc345a92fd48d790a88ee29c5f8936e77345e374ae0446116026be6df4.gif
Maybe then haven't even realized the damage that running external code in your app can do. Amethyst runs the browser in a separate OS process in a way that disk, cpu and memory are fully isolated from one another. That's 50,000 lines of custom sandbox code just to do that.
Basically, the xdc game can see your nsec/wallet credentials in memory if it wants.
WORD5 #756 3/6
⬛⬛⬛🟧🟪
🟧🟪⬛⬛🟪
🟪🟪🟪🟪🟪
https://otherstuff.ai/word5/
You are part of the problem, not part of the solution, but nature apparently has a solution for your problem, so you do you.
Premature cultural cessation.
Amerikanische Ausländerbehörde ist bereits so grausam, dass manche Anwohner Angst haben, dass sie am Allerheiligen am Grab verhaftet werden.
#USA
(In der Außenwelt diskutieren Bäckereiverkäuferin und fahrradbehelmte Kundin über Abbrüche und Stolpersteine bei der Kartenzahlung. Weltsichten prallen aufeinander, ungewollte unverstandene Technologie als Werkzeug, Hilflosigkeit auf beiden Seiten und eventuell ist das Verhalten in Streß-Situationen der beste Ansatzpunkt, sich ein Bild von Charakteren zu machen. Manchmal ist die Decke der Contenance sehr sehr dünn.)
https://status.z428.eu/in-der-au%C3%9Fenwelt-diskutieren-b%C3%A4ckereiverk%C3%A4uferin-und-fahrra
Yep, if you don't care about security, the browser can just share the same memory of the app in a way that they can see each other. Then it's super easy. Kotlin has this baked in. But only because it uses the default installed browser on Android.
There is nothing like that on Kotlin desktop.
