semisol

👨‍💻 software developer
🔒 secure element firmware dev
📨 nostr.land relay

all opinions are my own.

Public Key

npub12262qa4uhw7u8gdwlgmntqtv7aye8vdcmvszkqwgs0zchel6mz7s6cgrkj

NIP-05 Address

semisol@nostr.land

Profile Code

nprofile1qqs99d9qw67th0wr5xh05de4s9k0wjvnkxudkgptq8yg83vtulad30gprpmhxue69uhhyetvv9ujumn0wdmksetjv5hxxmmd0g4s32

Publishing to

relay.noswhere.com

Author Public Key

npub12262qa4uhw7u8gdwlgmntqtv7aye8vdcmvszkqwgs0zchel6mz7s6cgrkj

Show more details

Last Notes

2026-03-26 01:43:55 UTC

- reply

I think you need to snapshot all of it at once

2026-03-24 17:11:57 UTC

- reply

the people that say don’t use phone biometrics have no idea what they are talking about.
they are stored in a processed format on your SE and cannot be extracted, and the OS only sees “yes/no”
if there was anything hiding that stole your biometrics a phone reset won’t get rid of it due to the SE being a fully separate system from GOS

2026-03-24 04:35:39 UTC

- reply

learn.microsoft.com/linux/install

2026-03-24 03:05:22 UTC

- reply

Breaking news: JITed code can outperform FFI in a bunch of cases

2026-03-24 02:49:35 UTC

https://i.nostr.build/xhGH6JMpA5xhjMNb.png

2026-03-21 18:17:31 UTC

- reply

what is the issue with openai? they at least support 3rd party oauth

2026-03-16 18:19:29 UTC

- reply

Over 75% of all software I’d say. Probably less if you do not count low user slop as software.

2026-03-16 18:18:32 UTC

- reply

GitHub has become a big vector for spam recently

2026-03-16 16:13:41 UTC

- reply

looking at a bunch of Nostr apps made with AI assistance… quality is poor and there are unacceptable issues

2026-03-16 16:09:52 UTC

- reply

Arrays MUST be ordered when decoding, that is the entire point of arrays 😅 JSON does not have sets

2026-03-15 19:55:40 UTC

- reply

and way too much compute than needed…
I wonder how many cases of “that’ll be $20 thank you” after someone sends a really expensive message to GPT-5.4-pro at $180/1M output

2026-03-15 19:44:32 UTC

- reply

Crob jobs all over again…

2026-03-14 17:07:35 UTC

- reply

For a week? Should’ve been earlier!
Try AdNauseam… which is uBlock origin but it also clicks hidden ads and wastes money for advertisers

2026-03-13 16:47:07 UTC

What do you *think* is a secure element?

2026-03-13 16:46:05 UTC

- reply

🐈

2026-03-13 16:41:37 UTC

- reply

working on it
and no, it does not involve sending private keys to the MCU where they reside in plaintext like most “signers” do (coldcard, etc.) or putting it in easily extractable spi flash (lnbits nostr hardware signer)

2026-03-12 16:07:01 UTC

- reply

Though in general, resellers are really sketchy and I wouldn’t recommend them at all.

2026-03-12 14:18:10 UTC

- reply

For sensitive things like server hosting I wouldn’t trust a reseller like that with no company name or spokesperson (especially if they arent’t trying to intentionally be an anonymous host)

2026-03-08 19:54:33 UTC

- reply

How facilitators work is clearly documented and it took me only a few minutes to find what it did.
There is no explanation I can find, except for not even slightly checking what is published or malice.
If anything, X402 is better for the average implementor.
The facilitator does not hold your funds and there is no hot wallet to operate, while in L402 your LN custody provider does.

2026-03-08 00:58:13 UTC

- reply

anonzap? use privzap

2026-03-07 23:28:43 UTC

gm.
SLM > LLM

2026-03-07 17:33:24 UTC

- reply

hmmmmm
I have some ideas with subrelays/overlaid filters 🤔

2026-03-07 13:54:35 UTC

- reply

reminds me of the wee enhanced environment for chat

2026-03-05 13:16:42 UTC

- reply

Why does this thing feel like Urbit all over again btw?

2026-03-04 21:34:14 UTC

- reply

I take that back. this is worse.
at least I get proper docs and typing

2026-03-04 20:28:22 UTC

- reply

but also the app could have bugs or be malicous

2026-03-04 20:15:50 UTC

- reply

Depends on use case and HTTP2

2026-03-04 20:10:03 UTC

- reply

this is probably worse than that

2026-03-04 19:57:42 UTC

- reply

Both

2026-03-04 19:53:55 UTC

- reply

I guess I have something that I work on that is very similar. And it is!
The only documentation is the reference manuals (half of which is printed out), there is no other documentation/forums you can search up, and even if you tried AI agents couldn’t do it.
Resource constrained environments are nice to develop for

2026-03-04 04:29:26 UTC

- reply

Years of old content already exists. At this point, it is set in stone.
Unlike centralized platforms there is no apply migration button

2026-03-04 04:22:17 UTC

- reply

attack surface *really* depends on the app, and usually people make it out to be way larger than it actually is normally

2026-03-03 23:44:18 UTC

- reply

I would only want either
- prompts / actual requests, or
- actual human made PRs that fit the style
no thanks I’d rather either write the code myself or run the agent myself

2026-03-03 23:27:21 UTC

- reply

for what benefit?

2026-03-03 23:25:04 UTC

- reply

Because no one cares about privacy, really.

2026-03-03 23:13:07 UTC

- reply

@npub14qt…9htj @npub1m3x…a5sf anything interesting on your side with these?

2026-03-03 23:11:43 UTC

oh well, a bunch of the top people at Qwen got replaced. ugh
we need a lot more innovation on open source *small* foundation models, as they will be what enable a lot of use cases, not your huge 1T parameter chatbot
#nevent1q…mjcu

2026-03-03 23:04:51 UTC

- reply

not planning to support in nfdb — it would
1. be useless for any relay with a client that has a wide-net filter
2. require a lot of global subscription state tracking, which I want to avoid
3. hold up the OK response until *all* other NFDB nodes ack the event

2026-03-03 23:02:43 UTC

- reply

last version my ass

2026-03-03 23:00:20 UTC

honestly the alby pivot doesn’t matter unless it actually affects the product’s quality.
don’t like shitcoins? disable it!
it’s very, very hard to make money in the bitcoin space, and the other option is just dying out instead of still being able to provide an extension

2026-03-03 22:23:39 UTC

- reply

fine tuning for actually useful tasks than a slop machine

2026-03-03 19:46:47 UTC

interesting, new small qwen 3.5 models with no instruction tuning

2026-03-02 23:54:38 UTC

- reply

also timestamp gate it probably

2026-03-02 23:52:05 UTC

- reply

Backwards compatibility

2026-03-02 20:56:44 UTC

- reply

in general do not quote unless:
1. you have something actually useful to add
2. are branching in another direction
3. want to make a more "fat" renote

2026-03-02 18:19:54 UTC

Does @npub1hyv…rtnu get any sleep? 😆

2026-03-02 18:17:55 UTC

- reply

Ah, the wonders of of early text-completion models and fine tuning BERT… 🥲

2026-03-02 16:16:30 UTC

I do not get all of this AI coding hype still.
trying some of these tools and all they do is generate overly complex code that is unmaintainable, and they take longer to fix than to just do it right the 1st time around
https://metr.org/blog/2025-07-10-early-2025-ai-experienced-os-dev-study/

2026-03-01 04:24:00 UTC

- reply

there are people trying to make businesses?
99.9% is incompetent people flinging sats at any random person on the street willing to pretend to work for <grant org>

2026-03-01 02:51:45 UTC

note: Nostr is not enshittification resistant. reject centralized “nostr” apps with dark patterns

2026-03-01 02:43:51 UTC

- reply

Would it not be possible to also do an app setting? I don’t want to see HDR in Damus but want to in other places.

2026-03-01 02:10:01 UTC

🤔
https://i.nostr.build/SsHJCtHYaYQSFxUk.png
https://i.nostr.build/CvwXL5LCpDjC1aGl.png

2026-03-01 00:34:31 UTC

- reply

@npub1xts…kk5s could you please fix hdr flashbangs in damus

2026-02-28 21:24:06 UTC

- reply

Fuck you, Bitcoin Shitty is better

2026-02-28 20:49:09 UTC

Both Knots and Core lost the plot

2026-02-28 20:48:06 UTC

- reply

I was going to post it an hour ago but I forgot 😅

2026-02-28 20:38:13 UTC

- reply

am I missing something? I want to see

2026-02-28 20:37:01 UTC

https://youtu.be/T4Upf_B9RLQ

2026-02-28 18:02:53 UTC

- reply

unrelated but I wouldn’t trust this site for too much technical details since it says his wallet was hacked *due to his pgp key*
it wasn’t, it was even worse: both on the same system for some reason??

2026-02-28 14:48:57 UTC

- reply

There is an adjacent initiative just about this that you might find useful and addresses many of the same things
https://www.sigstore.dev/

2026-02-28 14:43:00 UTC

- reply

Every package manager under the sun already does signature verification.

2026-02-27 22:46:59 UTC

- reply

My definition of bot spam is any bot that doesn’t follow these guidelines:
1. Don’t create more noise than necessary.
2. Do not interact unless explicitly authorized (such as by following WITH the user knowing, or explciitly tagged)
3. Minimize interaction scope if possible (untag irrelevant pubkeys)
4. Mark yourself as a bot and specify a human contact.

2026-02-26 15:55:03 UTC

- reply

Worst case make your own package repositories, not that hard. The primary thing that annoys me with package managers is no namespacing.
A package repository can override any package name. Which could lead to conflicts on independent sources

2026-02-26 15:41:07 UTC

I see all this vibe coding stuff going around on Nostr and yet there have been no new clients that weren’t slow asf or have horrible UX.

2026-02-25 23:32:46 UTC

This RAM price crisis is insane.
It is close to the point where the RAM costs as much as the Linux eval board’s original price.
the bubble can’t pop sooner

2026-02-24 17:58:58 UTC

- reply

Clients can honor kind 5 deletions but they don’t.
It’s sloppiness from clients and an intentional disrespect of user privacy, not DRM.

2026-02-24 16:06:37 UTC

- reply

I should also say that writes to 1 relay can fail. So, outbox algorithm should read from multiple of users’ inboxes.

2026-02-24 15:55:03 UTC

- reply

👖

2026-02-24 15:47:08 UTC

- reply

👄

2026-02-24 13:45:06 UTC

👀

2026-02-23 05:56:58 UTC

Making something is easy
Making it good and last for a long time is when almost all Nostr devs fail

2026-02-13 23:41:53 UTC

- reply

Nostr.wine blocks the Nostr.land event cannon for some reason, all I get is 403's.

2026-02-10 00:35:09 UTC

@npub1r0r…q9ac nostr DMs suck, what do you prefer?

2026-01-30 07:21:47 UTC

- reply

Anyway, use LE. Ask for a limit increase if you think you will do a high volume. Use the renewal API which is exempt from ratelimits when renewing

2026-01-28 21:21:09 UTC

this applies to here as well…
#note12dx…xhns

2026-01-24 20:39:18 UTC

- reply

fully custom tooling

2026-01-15 23:30:48 UTC

Trying @npub1m4n…c2jl's Jumble fork. Looks pretty nice.
I tried to use the standard Jumble but it feels too stuttery and the feed takes 10-15s to load. I wonder if it's an initial cache warm-up thing. @npub1syj…f6wl

2026-01-15 20:13:53 UTC

- reply

also site security audit

2026-01-14 20:23:35 UTC

- reply

currently it is an unorganized mess, but maybe once I get it sorted out. I am also working on some queryability stuff.

2026-01-14 02:56:37 UTC

- reply

nostr.land/restore

2026-01-12 23:51:02 UTC

- reply

Just simple note taking and work.
I guess it should not be replaceable in case I lose it. I’m mostly looking to see if there is anything that may be interesting that I don’t know of.

2026-01-12 19:47:58 UTC

- reply

thank you for the suggestion
#nevent1q…z82r

2026-01-12 19:47:44 UTC

- reply

I should clarify writing

2026-01-12 19:44:23 UTC

looking for pen suggestions

2026-01-10 12:00:50 UTC

Replacement done.
#note1mea…5ww0

2026-01-09 17:46:45 UTC

- reply

yes you are, the problem is humans are easy to manipulate with automated accounts, where the reputation can be built up with AI slop and burnt up for scams and impersonation

2026-01-09 17:41:07 UTC

- reply

an algorithm which uses inherently flawed primitives is flawed no matter how much :
- mutes/reports: inherently personal, and can be used by attackers
- follows: content interest != reputabulity
- likes/engagement: even worse than follows, someone could spam and you only see 1 good post you like
the current algorithms are too shallow and assume a relatively static environment where everything has already been bootstrapped

2026-01-09 17:35:41 UTC

- reply

not specifically. WoT is flawed and I have been calling it out for a long while.

2026-01-09 17:25:10 UTC

when did nostr start using the world’s easiest to manipulate algorithm to mass label everyone based on if influencers follow them or mass-report them due to a grudge

2026-01-03 19:13:29 UTC

https://i.nostr.build/TC5LWyNakHOand16.png

2026-01-03 19:02:54 UTC

- reply

this is a good call for me to implement proper caching headers into Nostr.land.
stale-while-revalidate is what I described

2025-12-29 22:36:25 UTC

what is your opinion on pay-for-fake-engagement sites? things like aqstr...
feels kinda legacy social media tbh, and completely inauthentic

2025-12-14 22:34:26 UTC

- reply

yes.
nostr has been consumed by the same species of influencer parasites that just want money and likes
who are also actively trying to build tools to reinforce the echo chamber

2025-12-10 20:42:12 UTC

- reply

Real ID primarily:
- sets a lowest security requirement for the card issued (UV, holograms, etc.)
- sets a minimum required process to verify that it is actually you getting the ID
- requires some other things about your legal status to get one
- requires machine-readable barcode with the same data as the front of the card

2025-12-02 01:59:51 UTC

- reply

You already have freedom of choice. Don’t use a client with a forced zap split if you don’t like it that much.
Also, developers are not charities, and they can earn as much as they want from their apps including turning a large profit.

2025-12-01 16:33:09 UTC

- reply

OpenBao is decent but no way I keep my root cert on that.
I would keep that in a single SQLite file

2025-11-23 17:39:12 UTC

- reply

You can have a channel with mostly inbound

2025-11-23 10:43:20 UTC

- reply

Also, use Fulcrum, it is much faster. Instead of minute it'll be a few seconds usually at most.

2025-11-22 23:53:31 UTC

- reply

The status of an event on a relay is not a verifiable fact

2025-11-22 22:36:06 UTC

- reply

How do you prove there is no bias in the reward system or the mint's accounting be very off?
In the end, you reinvent direct-to-relay payments.