Jameson Lopp

https://lopp.net

Insights on security, privacy, technology, & money · Casa Co-founder & Chief Security Officer · https://bitcoin.page

Public Key

npub17u5dneh8qjp43ecfxr6u5e9sjamsmxyuekrg2nlxrrk6nj9rsyrqywt4tp

NIP-05 Address

lopp@lopp.net

NIP-57 Address

lopp@btcpay.lopp.net

Profile Code

nprofile1qqs0w2xeumnsfq6cuuynpaw2vjcfwacdnzwvmp59flnp3mdfez3czpspz3mhxue69uhhyetvv9ujuerpd46hxtnfduq3samnwvaz7tmjv4kxz7fwdehhxamgv4ex2tnrdakssa92hn

Publishing to

relay.damus.io

relay.noswhere.com

relay.nostr.bg

Author Public Key

npub17u5dneh8qjp43ecfxr6u5e9sjamsmxyuekrg2nlxrrk6nj9rsyrqywt4tp

Show more details

Last Notes

2024-09-15 13:43:29

https://image.nostr.build/f00303fe3c3523378d38648d3c1b88f37744d63e6d5169ab7725b5f48bd4b96b.jpg

2024-09-14 18:42:47

One of my favorite mind-blowing theories is the idea that perhaps consciousness leads to reality rather than the other way around.

2024-09-11 14:20:02

I had a cousin commit suicide this week.
Please remember that suicide is a permanent solution to a temporary problem.

2024-09-10 15:27:08

My favorite part about operating a responsible disclosure program is all the drive-by Indian "security researchers" who copy paste OWASP best practices and then go silent when you ask them to provide a practical demonstration that their reported vulnerability is actually exploitable against our infrastructure. 🙄

2024-09-08 23:05:48

You know you're deep down the Bitcoin rabbit hole on a side quest when you find yourself reading Bitcoin Core source code for answers.

2024-09-08 19:31:22

https://image.nostr.build/e9f413983acdd41469544d9a042ba4c967588e75312bb452c281a8875af71dce.jpg

2024-09-08 13:03:41

https://image.nostr.build/68cdffb72dacd69bc86f037264b7375530778d183c88b07c0f5bc7664eb6095e.jpg

2024-09-07 21:34:57

I love how X will often simply refuse to send DMs that include a link, even if it's in a long-running conversation.
And the error will innocuously say "message failed to send" but of course when I remove the link it delivers just fine.

2024-09-06 20:19:48

https://image.nostr.build/c830e1dada497cead30d5176259c1d41742b9014b1fb649503fb4f457cdc0f79.jpg

2024-09-06 19:33:00

- reply

Your mileage may vary from system to system.

2024-09-06 19:30:01

- reply

Conspiracy theory: it's soft KYC to require you to use a phone number with a major carrier that can be subpoenaed.

2024-09-06 14:17:01

- reply

OP_CAT has been live on Bitcoin Cash (and Liquid IIRC) for years.
Please demonstrate how dangerous it is by exploiting the weakness you claim those networks have adopted.

2024-09-06 12:42:10

gmeow
https://opcat.wtf

2024-09-05 23:54:07

What if we made it so that you could require replies to include a trivial zap?
Fuck you, ReplyGuy bot 😘

2024-09-05 11:49:34

I'm starting to suspect that one reason some Bitcoiners are bearish on nostr is because they are stuck in the mindset that distributed networks have to guarantee message delivery, message permanence, and thus form consensus around that.
They don't understand that nostr network fragmentation is actually flexibility.

2024-09-05 00:49:25

- reply

ROFL does he not understand that keys are portable between every client?

2024-09-04 22:08:34

It should be illegal to have your Halloween decorations up already.

2024-09-04 16:29:52

Every man should have enough land that he can sun his balls in solitude.

2024-09-04 14:06:15

One of the more common questions I receive is about the feasibility of using duress wallets to mitigate physical attacks.
Today I'm presenting my thoughts on the matter.
https://blog.casa.io/can-duress-wallets-stop-bitcoin-attacks/

2024-09-04 13:28:10

- reply

Counting is hard.
Depending upon the time of day, Amethyst says I have either 500 or 10,000 followers 🙃

2024-09-04 12:54:36

- reply

Yeah but I'm trying to avoid selling bitcoin by taking out a 0% APR fiat loan! 😬

2024-09-03 19:40:50

- reply

Mastodon is all about giving instance admins god mode over their fiefdom.

2024-09-03 15:23:27

- reply

Same deal with mastodon DMs.

2024-09-03 11:28:35

Nice 😏
https://image.nostr.build/aeca8757464bd0df62ed772394fca874f392684aacd7c9d1c33368d57c2fa779.jpg

2024-09-02 23:51:49

Tried wakeboarding for the first time. It's quite challenging - took me 7 tries to get up!
Also got some mild rope burn on my hands 😬
Will try again, preferably with gloves!

2024-09-02 18:45:27

https://image.nostr.build/3f5f18e69aa914c4d424bfec3a8c273a039e87a09abadf640108bb8ff7a9ec07.jpg

2024-08-31 17:28:48

Are you currently running Ubuntu 22.04 LTS?
Good news! Today is the first day when you can finally upgrade to 24.04 LTS.
sudo do-release-upgrade

2024-08-30 17:35:02

https://image.nostr.build/4a48c1341d5ba5a45df8deb3e2a962d786dc03b615df79e721f5cce2c0317995.jpg

2024-08-30 17:22:44

https://image.nostr.build/12e39533ae59b2fdf7aea5af20886a82a6a8bb18fd38cb50c3ea2c2ab5062c05.jpg

2024-08-29 23:11:34

The OP_CAT Research Fund, sponsored by StarkWare, is a $1 million fund aimed at advancing research regarding the pros and cons of activating OP_CAT on Bitcoin.
The OP_CAT Research Fund committee is seeking to fund proposals that present novel research projects regarding OP_CAT activation on Bitcoin. Topics of interest include but are not limited to: the security implications of OP_CAT activation on Bitcoin, OP_CAT-based computing and locking script logic on Bitcoin, applications and protocols utilizing OP_CAT on Bitcoin, and general research related to OP_CAT and its impact.
https://starkware.co/submission-proposals/

2024-08-29 21:55:33

I just hope Trump's high yield DeFi thing doesn't become the Terra Luna of 2025.
For the Trump team's sake, they'd better win the election or they're likely to have the SEC all over them.

2024-08-28 21:51:53

The bad news is governments are retarded.
The good news is governments are predictable.

2024-08-28 21:18:58

- reply

I couldn't tell if it was that or if they just ramped up the VPN blocking again.

2024-08-28 21:18:12

- reply

One of my favs of all time.

2024-08-28 18:36:32

Tough times in the military industrial complex.
https://image.nostr.build/8919c64780713246f2e85b8ea2dfd25b2e29bc3de2f429a8f1979b6b9a138b27.jpg

2024-08-28 18:27:32

Things move along so rapidly nowadays that people saying "it can’t be done" are always being interrupted by somebody doing it.
- Puck Magazine, December 1902

2024-08-28 17:26:18

- reply

These are similar questions as lightning centralization issues due to how liquidity works.
It's a trade-off between how many relays to which a client should reasonably connect vs what level of relay distribution is sufficient for censorship resistance.

2024-08-28 16:52:15

"Should every nostrich run a relay?" is a very different question from "should every Bitcoiner run a Bitcoin/lightning node?" due to the differences in guarantees.
I think every nostrich should run a relay IF THEY REQUIRE PERMANENCE for their historical notes. What do I mean by this?
Relays should be considered ephemeral. They are under no obligation to store your data indefinitely unless you enter into an agreement for that (paid relays.) Relays can go offline at any time and take your notes with them. This is why clients connect to many relays by default, for redundancy.
I run a relay for myself that only accepts notes from my pubkey. If my third party relays change, I'll just push my old notes from my personal relay to new relays for them to be indexed.
Nostr can't scale from the perspective of expecting every nostr client to connect to thousands or millions of personal relays simultaneously.

2024-08-28 14:14:33

- reply

We should also expect nostr to "fail to scale" (referencing the Andreas Antonopolous talk) as it experiences growing pains. There are surely multiple paths forward for scalability.

2024-08-28 13:57:40

"Nostr will fail unless everyone runs their own relay."
Nostr isn't designed to scale in that manner because it doesn't have routing like lightning.
This claim is similar to saying Bitcoin fails if everyone isn't running a node. While it's preferable, it's by no means necessary.
It need not be perfectly decentralized, just sufficiently decentralized.
Whether that means dozens / hundreds / thousands of relays is up for debate.

2024-08-28 13:39:48

I've heard some folks with large X followings claim nostr isn't worth their time because adoption is low and not growing fast enough for their liking.
Seems shortsighted to me. I consider investing in social media to be similar to financial investing - it's about time in the market rather than timing the market. Much like how most of Bitcoin's annual gains occur during 10 days of the year, I experienced a similar phenomenon on Twitter.
Choose to be a laggard nostrich to your own detriment.

2024-08-28 13:20:18

- reply

Yeah but when I refer to maximalist culture I mean stereotypical asshattery 😬

2024-08-28 13:17:48

We need to make more base layer Bitcoin protocol improvements so that the @nprofile…5shh industrial complex has fresh topics to discuss.

2024-08-28 13:05:39

- reply

Yes, you describe part of the history I covered at length here https://blog.lopp.net/history-of-bitcoin-maximalism/
The very label of maximalist has been muddled beyond usefulness at this point because Bitcoiners and their beliefs are quite diverse.
I've only had to mute a handful of toxic accounts on nostr, which is why I said the vibes are optimistic.

2024-08-28 12:59:10

- reply

I'm on them all 🙃

2024-08-28 12:55:14

- reply

I've thought about and written about the culture at length.
From what I've seen, actual builders rarely play the toxic maximalist role. And to date, nostr vibes have been overwhelmingly optimistic with fairly low adoption by toxic folks.

2024-08-28 12:51:41

- reply

Of course, but claiming nostr is doomed due to X is shortsighted. It's thinking adversarially without thinking optimistically.
Buttcoiner thinking is pointing at a problem and immediately claiming it's unsolvable.

2024-08-28 12:48:41

- reply

You're free to say whatever you want and I'm free to ignore you ☺️

2024-08-28 12:26:34

It amuses me to no end to see Bitcoiners acting like Buttcoiners with regard to nostr.
I do wonder how much of this can be attributed to maximalist culture making people more close minded and pessimistic.
I'm not interested in all the ways nostr can fail.
I'm interested in all the ways it can succeed.

2024-08-27 19:53:15

Reddit and Twitter were both better when they allowed competing third party clients.
Nostr will always be better because there is no first party client.

2024-08-27 15:58:49

Good morning fellow psychopaths 😏
https://image.nostr.build/13a80827bce900097c64de6480829f6bba786e1bf2bfa1d353760e89b0b297a5.jpg

2024-08-26 15:58:37

https://image.nostr.build/422bfcf471f42709b3f65fb5e1452cf60fdc4ef51ff7065acc6857657a262da3.jpg

2024-08-26 15:35:27

In recent weeks I've started getting a ton of messages from "crypto marketing agencies" offering to get me social media coverage, AMAs, podcasts, etc.
Not sure if this means the market is heating up or if it means the market is dead and these folks are getting desperate.

2024-08-26 13:34:06

Political correctness is art (comedy.)
https://image.nostr.build/8403e79bda44dbde2f50e4fcc08a2d0a918ff90216c7c19cb9b1a608dc7a42ee.jpg

2024-08-26 13:14:13

Anybody else rawdog your weight lifting?
No music.
No podcasts.
No audiobooks.
Just counting of repetitions fueled by your hated of The Man?

2024-08-25 20:14:09

I tried to use Reddit 3 times today and got censored every. single. time.
1. Submitted my buttcoin.me site to /r/Bitcoin and it told me my submission was removed by moderators with no specific reason given.
2. Tried to comment on the /r/buttcoin thread about my project but I was banned there a decade ago. Created a new account and commented but it got shadowbanned.
3. Tried to converse with an /r/buttcoin moderator who was posting typical buttcoiner trash on /r/ethereum only to find out entire thread got removed.
Reddit is such a waste of time.

2024-08-25 12:20:18

My inner troll is excited to release my latest project for your viewing pleasure. 😏
Introducing https://buttcoin.me/

2024-08-24 21:59:19

Fuck fearmongers!

2024-08-23 14:15:29

Today I'm raising some concerns based upon observations of a withdrawal I recently made from Coinbase. I suspect the issues I'm pointing out apply to many exchanges and custodians across the ecosystem.
https://blog.lopp.net/problems-with-coinbase-withdrawal-fees/

2024-08-23 11:41:51

https://image.nostr.build/d5b32eeabdd5151bb5a6be3437b868912ca015493a16c980cff3c58bac12e8c5.jpg

2024-08-22 15:15:29

In my mind, the folks who constantly talk about how the Bitcoin exchange rate is going to moon any day now must also be the type who enjoy blue balls.

2024-08-22 15:14:17

- reply

GOTTA STAY MICROPLASTICIZED

2024-08-22 11:14:29

Microsoft managed to break Linux 😬
https://arstechnica.com/security/2024/08/a-patch-microsoft-spent-2-years-preparing-is-making-a-mess-for-some-linux-users/

2024-08-21 15:45:50

Make Bitcoin Script Great Again

2024-08-21 13:08:05

https://image.nostr.build/130d746ee561c5a5f293bfffc4229102a46c8a398e6e9c0c7a8dbc8d74f1d5bd.jpg

2024-08-21 00:36:33

Jesse Kipf used stolen login credentials belonging to a physician to access the Hawaii Death Registry System, where he submitted and certified his own death — thereby avoiding paying more than $116,000 in owed child support. 😂
https://therecord.media/man-who-hacked-state-registry-to-forge-death-certificate-sentenced

2024-08-20 20:00:35

Gonna watch some of the DNC to see how their flavor of cringe compares to RNC cringe.

2024-08-20 16:25:09

- reply

Camera, radio, etc.

2024-08-20 16:07:06

I haven't bought a new laptop or desktop in 6 years and don't feel the need. Seems that since 98% of computing happens in a web browser now, local computational power is less important.
On the flip side, upgrading phones every couple years is still important because the hardware and sensors keep improving substantially.

2024-08-19 16:18:57

https://image.nostr.build/248f53c6ae2d53613f601ac61e57a04aba158ec6f2c16896399c97d1e88f7cd5.jpg

2024-08-18 11:57:32

- reply

The solution is to not waste your time worrying about the election.

2024-08-18 11:15:29

American presidential terms are 4 years and now we're spending 2 of those years worrying about the next election.
During those 2 years we spend $17 billion and drive half the country into frothing madness, but thanks to the electoral college it always comes down to the same 50,000 voters in the same three states.

2024-08-18 00:18:48

I've been doing weighted calf extension exercises 3 days a week for a year now.
What I'd like to know is if the time will ever come when I can walk normally the day after.

2024-08-16 18:53:18

When was the last time you saw a politician take credit for something that would have happened regardless of their existence?
When was the last time you saw a politician accept blame for something that their meddling screwed up?

2024-08-16 14:27:51

https://image.nostr.build/811dbe3ee5b22ade09c55ce4cd29c613f8582349cb65dc635428ab7717108f52.jpg

2024-08-15 12:55:05

A fun little test of AI services.
"Generate an image of Kamala Harris in a bikini sitting on a couch with 5 Donald Trumps standing behind her"
Midjourney:
https://image.nostr.build/e41d6584a9089fbdcd65adb37391f16cb5cb47e919355b79cf16df578c0a5c55.jpg
Venice AI:
https://image.nostr.build/a7e76aa20b0bf2c71daa0bcd2ea46f1ab7a47aee36ba287d76cd6f365d30e1cf.jpg
Grok:
https://image.nostr.build/22af9927a1a2f7ae4f24da94f4f2be40b94f49bf524cdb051d600b6c5b4f0b46.jpg

2024-08-14 15:03:42

- reply

When I can. My perception is that it's good to do first thing in the morning, and probably not great to do close to a strength training session. Sauna seems a better idea for that.

2024-08-14 13:53:40

- reply

What Bitcoin Did is winding down and Peter is starting a different podcast that's wider ranging.

2024-08-14 13:29:52

- reply

Yeah I have several articles about it on my blog, including the multi-year story of my hunt for the attacker.
https://blog.lopp.net/to-swat-a-swatter/

2024-08-14 13:27:25

My final appearance on What Bitcoin Did is now available!
https://youtube.com/watch?v=yCWJY8olZHU

2024-08-13 22:15:49

The joys of maintaining sovereignty in cyberspace.
Realize my self hosted ghost software is over a year old and not generating embedded tweet previews for the new X domain.
SSH to the box, do a backup off-site, and run the ghost update command.
Get told I need to update nodejs.
Realize my OS is over 2 years out of date.
Attempt an update to latest LTS release.
Get told there isn't one available despite it being released 4 months ago. The hosting provider's apt repositories must be stale.
Screw that, manually update nodejs by pointing to a third party repository.
Run the ghost update command. Get told I updated too far, even though the new ghost version supports node20 my current version needs node18 to execute the update.
Downgrade to node18.
Run the ghost update command. Upgrade fails with a database migration error.
Read documentation about resolving the error. Run troubleshooting commands to no avail.
File a bug report with ghost and walk away.

2024-08-12 16:01:46

Got recognized in meatspace for only the second time outside of a conference.
This fellow was a Wall Street trader who learned about Bitcoin in 2016 from his colleagues and managed to accumulate a good stash.
He decided to quit Wall Street and is now living his best life working as an adventure guide.
He's not on social media. He doesn't talk about Bitcoin to anyone outside his family. He's one of our many sleeper agents scattered across the world.

2024-08-11 14:55:39

Try not to think about it. 🙃
https://image.nostr.build/214568450eaad39afad8171d9966a80adeadec5585ea3baa13938b79b6b163f6.jpg

2024-08-10 14:45:39

- reply

Anything that can be owned can be stolen. Bitcoin is only safe from wrench attacks if you distribute your keys appropriately.

2024-08-10 14:22:19

Extradite deez nuts, redcoats!
https://image.nostr.build/1379836172332013552d30a5905994cf6ec010e5eb58d18d815120495abd3ab7.jpg

2024-08-09 18:36:03

- reply

You should try getting granny to set up Casa with a yubikey and see if it's less grueling.

2024-08-09 18:12:39

11 Israelis visiting Costa Rica were attacked by 8 men who overpowered their security guard and robbed them of $700,000 worth of bitcoin. Analysis of surveillance footage leads investigators to suspect the robbers are current or former police.
If true, this wouldn't be the first time corrupt cops have wrench attacked Bitcoiners. 2 Vietnamese cops and 5 accomplices were charged for a wrench attack in 2021.
https://www.teletica.com/sucesos/asaltantes-de-turistas-israelies-sustrajeron-unos-700-mil-en-bitcoin_364777

2024-08-09 12:26:52

- reply

It offers a stronger security model because the custody isn't in a single point of failure.

2024-08-09 12:04:47

ETFs and third party custodians are Bitcoin scaling solutions in the same way that a bullet to your head is a solution to all your problems.

2024-08-08 19:46:15

- reply

What many maximalists miss is that even the sleaziest of shitcoiners tend to appreciate Bitcoin.

2024-08-08 19:41:26

- reply

"X will allow more shitcoining" is an emotional kneejerk reaction, not a logical argument against X.

2024-08-08 00:32:46

- reply

Oh yeah I got you, bro. You want to talk to @nprofile…5shh

2024-08-07 20:30:12

- reply

Garage doors are crazy.
Like, you can kill yourself trying to perform maintenance on the primary roller spring if you don't know what you're doing.
They're also crazy delicate and become completely useless if anything gets slightly out of alignment.

2024-08-07 20:25:07

- reply

Have you tried lifting heavy things?

2024-08-07 20:23:56

Managed to fuck up both my car and garage door because the garage door only went up 75% of the way before getting stuck, just enough to be out of my rearview mirror's coverage when I was backing out. 😡

2024-08-07 14:44:01

Ask not what your country can do for you.
Ask what you can do to fuck The Man.

2024-08-06 22:44:59

"90% of all tweets are made by 10% of the people. And those people are 100% retarded."
- Joe Rogan

2024-08-06 14:42:20

I'm fairly confident that X has changed / is lying about their engagement metrics.
My dashboard claims I'm gaining 5,000+ followers per month, but my follower count has been flat all year.
A charitable explanation is they used to report net follower count changes and now they're counting every spambot that follows you and then has their account deleted shortly thereafter.

2024-08-05 17:16:58

- reply

Indeed, all investment returns require risk. Folks just seem to have an imaginary line on the risk curve at which they consider the risk to be too high, and they call that "speculation."

2024-08-05 13:06:42

Looking forward to the day when I can order a mosquito drone swarm on Amazon and instruct them to patrol my property as hunter-killers for a variety of pests.