zk

"You'd have to be braindead to believe WhatsApp is secure in 2026. When we analyzed how WhatsApp implemented its "encryption," we found multiple attack vectors"
-- Pavel Durov, co-founder of the Telegram messenger.
#WhatsApp

2026-01-21 15:45:18 UTC

- reply

Btcmap.org I believe is your best bet to find some.
As of places to check out, that country is filled with them, in the South Seville is something incredible, Marbella is a location to check out, La Alhambra in Granada is just incredible. More to the center Madrid alone will take you a couple of days just for landmarks like the Museo Del Prado, Plaza España, Puerto del Sol, Plaza Mayor (a must), Mercado de San Miguel, Parque El Retiro, Plaza Cibeles, Gran Via... The list goes on... And surrounding Madrid, I would recommend Segovia, Avila, Cuenca and Toledo. More to the North, beside the obvious Barcelona, you have many options, from wine tasting in La Rioja to the magical Asturias or the iconic San Sebastian... Enjoy!

2025-12-03 11:39:39 UTC

ℹ️ For those that reside outside of USA and think thausing Amazon, Google and Microsoft cloud services or any USA cloud service is secure and private for them:
. The US CLOUD Act from 2018, allows the US Government (and therefore their partners) data access regardless of storage location.
. Be smart, self host your data, and if you insist in doing it wrong, encrypt your data before you upload anywhere.
https://www.justice.gov/criminal/cloud-act-resources?ref=itsfoss.com

2025-12-02 10:51:39 UTC

- reply

True and wise

2025-12-01 08:42:08 UTC

- reply

You nailed the 85K

2025-12-01 07:26:21 UTC

Season Messenger is listening to its users, read on, PFS will be back and quantum resistent cryptography is being implemented among other features.
https://getsession.org/blog/session-protocol-v2
#session
#privacy
#messenger

2025-11-25 06:39:02 UTC

- reply

Good question, the USA administration for once, but the previous one probably was more pro war. But your question is good, what else changed, curious what people will come up with if any...

2025-11-23 21:57:54 UTC

- reply

Mint will work fine

2025-11-20 06:34:44 UTC

- reply

I am assuming already most hacks are AI assisted and they will get way more sophisticated

2025-11-19 20:33:18 UTC

True story, but soon, that won't be an issue, LLMs are going to replace most of us in many areas and FOSS developers will probably be in the early list. I'll give it 5 years tops.
https://itsfoss.com/news/open-source-developers-are-exhausted/

2025-11-04 09:53:31 UTC

LOL!
You can't make this shit up
#nevent1q…49cd

2025-10-31 16:18:10 UTC

- reply

npub.cash does the job quite well, additionally, you may want to test as well the @nprofile…lgp7 wallet, which is integrated with npub.cash addresses

2025-10-30 02:53:05 UTC

- reply

lawyers will be lawyers ...

2025-10-30 02:51:29 UTC

- reply

A piece of paper. HW are overrated, convenient, but all have their flaws and pros and cons...

2025-10-29 03:21:05 UTC

A small number of samples can poison LLMs of any size
https://www.anthropic.com/research/small-samples-poison

2025-10-21 01:37:36 UTC

- reply

Signal Messenger is Open Source as SimpleX, more over, both have upgraded their encryption to level of quantum resistant...
This matters, most believe that if you are using a service that is e2ee you are good, but you are not.
Why?
Cyber Criminals and I will assume most three letter agencies are collecting all raw data they can from centralized services/servers and storing them for future decryption, clearly, if your cloud service is not upgraded or your messenger service is not resistant, all the data will be open for cyber criminals and agencies to look at...
I keep advising family, friends and clients, stay away from centralized services if possible and if not, verify they are upgraded if they use encryption

2025-10-16 00:44:12 UTC

Nice move, hopefully Elon Musk will be next to let the public know the names of the politicians pushing to remove our free speech.
And the cherry of the pie, the rules do not apply to politicians... The irony, their affairs should be public, yet they do want privacy to cover their corruption.
https://image.nostr.build/d21c9e1e8073f04f723f61803dc4106e2db03822c103a7be66dc5f05e0d893bc.jpg

2025-10-07 12:11:36 UTC

🚨 Harden your Windows systems using free, trusted open-source tools that cover audit, configuration, and monitoring. You don't need enterprise tools to raise your defense baseline — just a few solid steps.
Quick Actions (Under 30 Minutes):
• Run Hardentools — disable unsafe defaults instantly.
• Use CIS-CAT Lite — identify missing patches, open RDP, or weak policies.
• Check Local Admins — remove unused accounts, deploy LAPS for password rotation.
• Turn On Logging — enable PowerShell, Windows Defender, and Audit Policy logs.
• Run WinAudit — export a report and compare it weekly for unauthorized changes.
• Scan with Wazuh or OpenVAS — look for outdated software or exposed services.
Key Risks to Watch:
🔑 Reused or shared admin passwords
🌐 Open RDP/SMB without firewall or NLA
⚙️ Old PowerShell versions without logging
🧩 Users running with local admin rights
🪟 Missing Defender Attack Surface Reduction (ASR) rules
📦 Unpatched or unsigned software from third-party repos

2025-10-07 11:05:57 UTC

🚨 Mobile Apps Leak Data — New findings from Zimperium have revealed that one in three Android apps and more than half of iOS apps leak sensitive data. Nearly half of mobile apps contain hard-coded secrets such as API keys
Keep your mobile clean, remove all apps not really needed and be mindful of the ones you install and keep.

2025-10-02 06:55:54 UTC

🚨 A group of academics from KU Leuven and the University of Birmingham has demonstrated a new vulnerability called Battering RAM to bypass the latest defenses on Intel and AMD cloud processors. "We built a simple, $50 interposer that sits quietly in the memory path, behaving transparently during startup and passing all trust checks," researchers Jesse De Meulemeester, David Oswald, Ingrid
And just like that billions invested in HW security gone, back to the drawing table for Intel and AMD, and those researchers... making this public before a solution is deployed, not cool.

2025-10-02 06:52:19 UTC

🚨 Cybersecurity researchers have flagged a previously undocumented Android banking trojan called Datzbro that can conduct device takeover (DTO) attacks and perform fraudulent transactions by preying on the elderly.
Take time and educate your elders.

2025-09-26 10:58:42 UTC

- reply

LOL!
Being there myself so many times, it is sad but true...
I am forecasting a change soon thanks to LLMs, tech savvy markets like China, India and Russia are loaded with excellent engineers and enthusiasts that will for sure leverage LLMs power and come with alternatives, perhaps optimizing current kernels, perhaps making one from scratch more intelligent and compatible.
But the problem your friend has is the same one as usual, running a laptop with proprietary close source HW always will be an issue with Linux or any other new OS...
Solution:
Sucks but for laptops:
Get a USB Bluetooth 5.0 dongle
Get a cheap 2K BT web cam or USB (I prefer BT)
A USB hub with two slots (small not to bother)
All will work, but is not pretty nor ideal. This solution overcomes the propiertary HW issue most people have with their PC, specially those with the POS "Intel", avoid buying that garbage anytime you can, AMD is a better solution, for now...

2025-09-24 09:30:00 UTC

- reply

cool one! :)

2025-09-18 07:59:03 UTC

🚨 Google on Wednesday released security updates for the Chrome web browser to address four vulnerabilities, including one that it said has been exploited in the wild.
The zero-day vulnerability in question is CVE-2025-10585, which has been described as a type confusion issue in the V8 JavaScript and WebAssembly engine.
#vulnerability

2025-09-13 19:01:51 UTC

- reply

Fun!

2025-09-13 18:43:19 UTC

🚨 Chinese censorship sprang a major leak on September 11, when researchers confirmed that more than 500GB of internal documents, source code, work logs, and internal communications from the so called Great Firewall were dumped online, including packaging repos and operational runbooks used to build and maintain China’s national traffic filtering system.
This is hailed as a "game changer" for circumvention tools (e.g., VPNs) and research into GFW vulnerabilities.
VPN providers will learn from these documents probably a lot about DPI and how to circumvent it.

2025-09-12 14:47:20 UTC

- reply

you will receive zaps in the LN address you set in your profile.
https://image.nostr.build/8073533efcd0216717ed6994247f051ef743f9dd03104830ed72fcea5514523d.jpg
to access you sats use npub.cash wallet or 0xchat wallet, you can withdraw to Minibits or any other wallet that supports cashu and LN.

2025-09-12 07:45:00 UTC

🚨 A security weakness has been disclosed in the artificial intelligence (AI)-powered code editor Cursor that could trigger code execution when a maliciously crafted repository is opened using the program.

2025-09-08 18:57:48 UTC

- reply

not easy but good OpSec

2025-09-08 18:57:08 UTC

- reply

love it

2025-09-08 18:56:46 UTC

- reply

no, at least not yet, just learn

2025-09-08 18:51:44 UTC

- reply

ha! good catch, and an important one!

2025-09-08 16:41:06 UTC

Today, after a long discussion about best OpSec practices I thought it will be nice to share with the Nostr community, and read what others have to say about it,
There are many here in #Nostr that are #privacy advocates and believe they know enough, they use what they believe is a secure OpSec:
1. No corporate social networks, that includes LinkedIn or not sufficient decentralized ones (whatever that means for them).
2. No Messenger Chat app that requires a mobile phone number.
3. Linux of course; so they say; although the majority keep using iOS or Microsoft as their default OS... (I am guessing of course, but I am quite positive it is a good guess ... ).
4. A Pixel 7 or higher rooted with the right OS.
5. A VPN, one of the few that do not log (so they say) and you can pay cash or LN BTC or XMR. Most do this wrong BTW...
6. The right Private DNS, never a corporate one...
7. A private email address, so most will use Proton or Tuta... Odd how there are only few options with no KYC, if it is a niche, the fact that there are no more options is suspect, two companies only... they become a honeypot.
8. They use FOSS as much as possible for all their work and location apps.
9. GPS OFF as a norm. OpSec matters here, most people do this wrong.
10. A nonKYC eSIM with only data, few providers, silentlink being one of the favorites.
11. A powerful router with firewall and Pihole or adguard, plus built in support for VPN (most do this wrong)
12. Self hosted cloud, no commercial cloud never (most don't do this, they rely on the usual privacy oriented, the ones very well known, there are about 3...) Are you paying attention?
13. Their own BTC Node
14. A privacy oriented browser, there are not that many, Mullvad Browser, hardened with extension Firefox (requires work), hardened with extensions Brave. Most use the same extensions, for they are the recommend ones, Have you wondered why they are not built in already in the browsers?
14 Tor Browser for research, specially those that are devs or white hats... (no black or grey hats here, right...)
16. Keeping all your software and OS for all devices up to date, which is recurrent workload, failing to do that could lead to exploits and exposure to cybercrime.
And more, but this is a simple summary.
Now the best part:
All of the above, makes you, in a way, a target, for your digital footprint is of a minority, easy to identify, you are decently informed and therefore you follow the same rules and use the same tools as the rest of a small tribe, a very distinct one, not that hard to identify with the right tools that constantly analyze metadata.
Is there a better way?
In my opinion, yes.
1. If you keep your current OpSec, study and do it right, most do it wrong and generally due to lack of discipline and endurance of the annoyance of cyber security, which is very inconvenient, end up being not only known targets but vulnerable high end targets.
2. To be part of the large noise made by the clueless normies is the optimal play but that is an OpSec very few will have the discipline, time and knowledge to do correctly. Won't discuss the know how here. Hire a #cybersecurity expert if you want this and don't know how is done.
What are your thoughts?
#asknostr

2025-09-06 20:42:56 UTC

- reply

Have to agree, in fact there are already clear signs this is building up, open source is fundamental for this to happen

2025-09-02 09:26:12 UTC

🚨 Cybersecurity researchers have discovered a malicious npm package that comes with stealthy features to inject malicious code into desktop apps for cryptocurrency wallets like Atomic and Exodus on Windows systems.

2025-08-30 08:29:32 UTC

🚨🚨🚨 Must read
https://bobdahacker.com/blog/hacked-biggest-chinese-robot-company

2025-08-30 07:12:55 UTC

- reply

Thanks!
When the Android apk repository in Github?

2025-08-29 22:16:17 UTC

- reply

In theory... I will wait until it is seen in Github, currently no Github link to be found, hopefully one will show up soon...

2025-08-29 11:14:40 UTC

- reply

it makes sense

2025-08-29 08:16:09 UTC

This will be interesting...
#nevent1q…p0h9

2025-08-29 08:11:29 UTC

🚨 Overnight on Aug. 26 in just over four hours, unidentified attackers compromised more than 1,000 Javascript developers, stealing their GitHub tokens, npm tokens, SSH keys, application secrets, and cryptocurrency wallet files.
They pulled that off by infecting a widely popular build system called "Nx" and by infusing their supply chain malware with artificial intelligence (AI)-powered intel-gathering capabilities.
https://www.darkreading.com/cyberattacks-data-breaches/1000-devs-lose-secrets-ai-powered-stealer

2025-08-27 08:22:14 UTC

So from 2027, many programmers will move from Google store to Huawei store, not complicated and bigger market
https://news.itsfoss.com/new-android-sideloading-rules/

2025-08-23 20:23:20 UTC

- reply

Pretty much same results, waiting for new versions to test again. The current version, IMO shouldn't be in production.
BTW, 0xChat already supports NIP-EE, only advantage I see is for groups, current implemented EE2E messages in Nostr is good enough.

2025-08-22 20:29:49 UTC

- reply

It is wise to wait for reviews ... It will save you few heartburns for sure...

2025-08-22 20:27:04 UTC

Lumia's Yoav Magid Discusses Siri & Apple AI Privacy Risks
https://www.blackhat.com/us-25/briefings/schedule/index.html?_ga=2.185942305.92694596.1752608221-151668467.1748531774&_gac=1.11871104.1752608221.EAIaIQobChMIpfDOsc6_jgMVljcIBR0KWAL-EAAYASAAEgLMgvD_BwE#applestorm---unmasking-the-privacy-risks-of-apple-intelligence-44712

2025-08-21 06:11:10 UTC

If you are using FreeVPN Google chrome extension, unistall it, it is spyware, "Chrome verified"...
Here the findings:
https://www.koi.security/blog/spyvpn-the-vpn-that-secretly-captures-your-screen

2025-08-18 07:18:06 UTC

- reply

you are welcome!

2025-08-18 07:13:29 UTC

- reply

Okay, that is quite specific and a valid point, ironically, very easy to protect against it, it is just, a bit inconvenient.
Solution:
Get yourself a non smartphone for phone calls and SMS. The battery last like a week and you will need it mostly for insecure 2FA from decadent banks and services and not much more, unless you still use a mobile live to communicate with loved ones, strange nowadays but happens.
For data on your mobile use a mobile hostpost.
This opsec protects you from the SMS treat and from clicking on your mobile a link written in a SMS to a malicious site, some of this low end mobile have data and may have hotspost capability reducing opesec cost

2025-08-18 06:55:32 UTC

- reply

Good question,
Simple answer:
If you stick to Play Store and your mobile number is not listed in the dark web, I wouldn't bother.
Users are the weak link always:
- Clicking on a link we should not.
- Downloading a file we should not.
- Installing an app we should not.
Now, if you are a targeted individual, then you need to hire a cyber sec expert to build you a tailored opsec. It will be worth it and is most of the time more affordable than expected

2025-08-15 09:24:44 UTC

- reply

1. seedsigner (https://seedsigner.com/)
2. foundation (https://foundation.xyz/)
3. keystone (https://keyst.one/btc-only)
4. Coldcard (https://coldcard.com)
@nprofile…jwdq wrote a decent guide on choosing the right seed signer (aka Hardware Wallet)
https://rod.npub.pro/post/226453/

2025-08-12 05:04:57 UTC

### Korea wins world’s top hacking contest for 4th consecutive year
https://www.koreatimes.co.kr/business/tech-science/20250811/korea-wins-worlds-top-hacking-contest-for-4th-consecutive-year

2025-08-10 07:11:29 UTC

https://tuta.com/blog/ai-email-writers-review

2025-08-10 05:06:35 UTC

- reply

use hashtags to search your favorite topics and build your tribe, those "packs" are an echo chamber of nostr influencers taking to each other and adding little value to your knowledge and interest base.
you can search in the Global Instance any keyword without the hashtags too, find your tribe or create one. You can join groups/communities as well.
good luck

2025-08-10 05:01:36 UTC

- reply

There is not a perfect answer and unfortunately, the better the browser for privacy the less convenient:
#### For Desktop:
- Most secure ones (some sites won't work):
1. TOR Browser
2. Mullvad Browser
- Less Secure but way more convenient, you need to add extensions to upgrade your security and tweak your settings to remove browser garbage and improve privacy. They both support IPFS.
1. Brave Browser (you can sync across devices without an email account, quite convenient), profiles are quite convenient as well. VPN built in is paid only.
2. Opera Browser (you need an email address to sync devices, use a burner), the VPN built in is decent and with a free tear from the box.
#### For Mobile
- Most secure:
1. TOR Browser
- A bit less secure, but all sites work, requires tuning settings and adding extensions to improve security, as TOR, the Browser is FOSS.
1. Fennec
- Less secure and no extensions possible, needs privacy tunning in the settings, quite convenient and fast browsers for mobile, they both support IPFS.
1. Brave Browser
2. Opera Browser

2025-08-09 16:55:52 UTC

https://thehackernews.com/2025/08/researchers-uncover-gpt-5-jailbreak-and.html

2025-08-08 06:38:57 UTC

- reply

tried that too and worked for me as well, I assume their first release had the bug and they rolled a new version the same or next day

2025-08-05 05:46:18 UTC

https://visit.gitex.com/web/registration-portal/event-detail?eventId=252175&utm_source=tech-target-holdings&utm_medium=mediapartner&utm_campaign=20250723-gitexglobal25-visitors-partner
https://media.tenor.com/ZHKtctPnsxIAAAAC/excited-hockey.gif

2025-07-31 19:20:46 UTC

- reply

Some cybersec experts argue that having a password and 2FA app together in one app reduces your OpSec, I agree.
Having all your eggs in one basket is not ideal, best to keep it harder for the criminals.
Having in your Desktop Keepass for your passwords and not adding the 2FA to it (although is very convenient) is a better practice, now having Proton Authenticator for Desktop (Linux and Windows) is a good OpSec.
I agree the network connection is not ideal, but it is not needed, only if you wish to synch, just avoid it. In the Desktop firewall the app for no internet access. For the mobile, Aegis + Keepass ia a winning formula

2025-07-31 07:13:48 UTC

- reply

I suggest:
Librespeed app in your mobile
speedof.me in your desktop browser

2025-07-31 07:07:44 UTC

Russia has blocked access to Speedtest, a popular internet speed testing tool developed by U.S. company Ookla, claiming the service poses a national security threat and could aid cyberattacks.
https://therecord.media/russia-bans-speedtest-ookla

2025-07-26 07:43:47 UTC

- reply

oh, it gets better,
If you use the Proton VPN, the app won't open, launching this app without verifying this tells a picture that is not ideal:
The testing crew on Android does not uses Proton VPN... Now that is ironic.

2025-07-22 16:39:21 UTC

- reply

Get a used mobile that supports eSIM in Craig list, pay with cash,
Buy an eSIM with LN BTC or XMR online. There are fee private friendly providers

2025-07-21 10:42:32 UTC

- reply

This is awesome, was using Notally, this is a fork of it, quite superior, love it!
Thanks for sharing Rod, as usual, sharing quality info.

2025-07-19 03:42:29 UTC

- reply

But.. Aegis has a lot more room for entries than Yubico...
KeepPassXC is another good solution if used with Yubico, most people don't know that KeePassXC supports second factor authentication as Aegis does.
Some cyber sec experts are uncomfortable with that, they state that having passwords and the 2FA codes in the same app reduces your OpSec, which IMO, is a valid point if you are a target or a honey pot of some sort.
For most people is an excellent OpSec

2025-07-19 03:33:52 UTC

- reply

Yes, very inconvenient but good OpSec.
Same on Desktop combined with a security key.
The need from a HW key to be able to open the app is an excellent OpSec however the risk of losing the HW key is there, therefore, it is advised to have a backup of the Yubico in a safe place.

2025-07-18 19:30:49 UTC

https://thehackernews.com/2025/07/chinas-massistant-tool-secretly.html

2025-07-13 06:15:21 UTC

- reply

Grok kick ass, DeepSeek does too and it is open source, easy choice

2025-07-12 22:18:19 UTC

- reply

I am so fired up by this path 0xchat is taking, this will be awesome!

2025-07-11 20:40:05 UTC

https://news.itsfoss.com/europe-open-source-alternative-confluence/

2025-07-11 12:56:58 UTC

#askNostr
Wondering if anyone here acquired and tested the newest and greatest RaspberryPi 5...
I finish testing with start9' startOS, which already works perfectly with the 4, now moving to CasaOS for some more serious fun.
This toy is, thanks to the economics mechanics, becoming a decent device. I prefer miniPCs but this
is getting already close in performance...
Specs:
- features a 64-bit quad-core Arm Cortex
-A76 processor running at 2.4 GHz.
- It includes an 800 MHz VideoCore VII GPU, supporting OpenGL ES 3.1 and Vulkan 1.2, and offers dual 4Kp60 HDMI display output with HDR support.
- 16 GB of LPDDR4X-4267 SDRAM, depending on the high end model.
- 2 x USB 3.0 ports (supporting simultaneous 5 Gbps operation),
- 2 x USB 2.0 ports, Gigabit Ethernet with PoE+ support, and a 5V/5A DC power input via USB-C.
- 40-pin GPIO header,
- a Real-Time Clock (RTC) powered by an external battery, and an on-board power button. (Finally...)
- supports PCIe 2.0 x1 interface for fast peripherals
- 2 x 4-lane MIPI camera/display transceivers.
- measures 85 x 56 mm

2025-07-11 11:17:05 UTC

- reply

Some headlines ...
#nevent1q…2f7m

2025-07-09 21:54:47 UTC

- reply

lol, just noticed, created a new pair of accounts for testing.
multiple DMs and messages are not going through. No deletion for conversations (hiding thm)
looks promising, for sure will improve... currently needs work, wonder why to launch such a raw product.
the lack of current support for Amber is a show stopper as well for many.

2025-07-09 20:01:10 UTC

- reply

Looking promising!
Currently no Amber support, I will suggest you create a burner nsec to test it and wait for Amber support to add your nsec...
#nevent1q…hsh9

2025-07-07 03:11:43 UTC

- reply

Altered Carbon, while reading it, couldn't stop the feeling that it was more a documentary than a SciFi book.
Now reading Broken Angels, from the series of Richard Morgan, quite entertaining.
https://image.nostr.build/0611cf7a5ce410a156a89d49bcaf42b251f4f2844c0ec9ea51486e3cd31e4f90.jpg

2025-07-05 07:03:19 UTC

- reply

From July 7th,*** Gemini can access Messages, Phone, WhatsApp and Utilities on Android *** – no matter if you had previously turned activity tracking on or off. And no, there was no informed consent from you, the user. Instead, Google is making the choice for you, a similar tactic Google used when allowing Gemini into your Gmail.
#nevent1q…ef5g

2025-07-04 15:14:22 UTC

The LLMs we are widely
using now are being called AI for marketing purposes, but we do not have true AI at all, unknown how and when if ever will happen.
How we will know when?
In theory we could use the Turing Test, proposed by Alan Turing in 1950, evaluates a machine's ability to exhibit intelligent behavior indistinguishable from that of a human. While some AI systems have demonstrated impressive conversational abilities and can sometimes fool judges in limited contexts, these instances do not equate to genuine understanding or consciousness.
The key aspect of the Turing Test is that the questions should be open-ended enough to allow for a range of responses, enabling the evaluator to assess the conversational abilities of both the machine and the human. The goal is to determine whether the evaluator can reliably distinguish between the two based on their responses.
#AI
#LLM

2025-07-01 06:08:58 UTC

- reply

Worth looking into, let's review and boost if we like it!
#nevent1q…emge

2025-06-28 08:49:37 UTC

https://news.itsfoss.com/claudia/
Testing this now,
Anyone that tested this?
Thoughts?
#askNostr
#AI
#LLM

2025-06-27 04:18:57 UTC

https://thehackernews.com/2025/06/new-us-visa-rule-requires-applicants-to.html?m=1
1984 vibes
#cybersec
#privacy

2025-06-27 03:30:20 UTC

https://thehackernews.com/2025/06/hackers-target-65-microsoft-exchange.html?m=1
#cybersec

2025-06-27 02:39:53 UTC

- reply

FOSS:
1. PeerTube
Not FOSS but decent alternatives:
1. Odysee
2. Rumble
3. Bitchute

2025-06-24 08:58:02 UTC

🚨 WhatsApp is not a messenger, it is a full surveillance tool at the service of three letter agencies and therefore of organize crime as well
Don't be naive, of your still use it because your family or close friends do, inform them, offer them alternatives, educate them.
Same goes for all other messengers but; until undeniable evidence is found; Signal, Session or SimpleX
https://image.nostr.build/8396c5107145f90c16248f6b352de527cacefc10e052393e8912682096ba4ab3.jpg

2025-06-22 15:38:09 UTC

- reply

she tried to raise awareness, but... it seems common sense has left the room

2025-06-20 15:05:30 UTC

### MongoDB Launches an Open Source Real-Time Secret Scanner
![Kingfisher](https://news.itsfoss.com/content/images/size/w1000/format/webp/2025/06/kingfisher-mongo-db.png)
"Accidentally exposing secrets like API keys, tokens, or credentials in your code opens the door for threat actors to exploit your systems. Such attackers don't stop at one breach; they automate their attacks, move fast, and can potentially compromise entire infrastructure within minutes.
To tackle such scenarios, MongoDB has come up with an open source solution called "Kingfisher"."
https://news.itsfoss.com/mongodb-launches-kingfisher/

2025-06-20 07:37:56 UTC

Act now, if your are using any of these services, change passwords and enable 2FA
https://www.europesays.com/2178080/

2025-06-16 19:00:38 UTC

- reply

I see it as the logical setup, TOR does already the job, no need for an overkill, same with Amber

2025-06-16 13:22:35 UTC

- reply

yes it is, and Sanourai centralized? I think you are confusing the old whirlpool mixing service that Sanourai was working hard to decentralize further but didn't get to it and now Ashigaru did it fully.
I personally trust it, so it does the hard core privacy community, it is as well open source, go check the githun repo and above all, do you own research
best wishes

2025-06-16 12:45:47 UTC

- reply

Easiest... you wrote Bitcoin, not LN Bitcoin...
I will assume you are not very tech savvy but an enthusiasts,
Base on that, here the suggestion:
1. Get yourself a Pure Server from Star9.com
2. Install Bitcoin Core from the market place
3. Install Dojo from the Users Market Place. (community registry).
https://marketplace.start9.com/dojo
4. Install in your mobile Ashigaru (fork of Samurai Wallet, the legend lives)
https://ashigaru.rs/
5. When selecting to pay use ricochet and peer to peer coinjoins...
That will be, IMO, the easiest to transact with decent privacy...
Option B:
Use Bitcoin L2 LN self custodial, meaning, run your own Node, create your own channels and maintain them, cumbersome, unreliable and a pain, but second best most private.
Option C:
Check Cake Wallet, at least has Silent Payments and PayJoin with Windows, Linux, Android and iOS option. The bad: it has go be a small wallet only to transact, no decent seed signer (hardware wallet) avaiable, they are working on it, but for now only Ledger, which is a no-no as a seed signer (worst possible reputation among hard core Bitcoiners)

2025-06-16 09:34:06 UTC

- reply

I suggest not to complicate it,
use this free server, which is currently one is the most popular and backbone of Nostr:
wss://relay.nostr.band/
and ignore the rest for now, there is a lot of pushing and noise from Nostr developers and Nostr pseudo influencers to move to paid relays, which is normal, money talks, their grants will not last for ever and they need to monetize, most of them have invested in paid relays, which ironically are all centralized censorship machines LOL! you can't make this up, but hey! you won't get gay porn bots or other nasty content which apparently is viral in Nostr now... just mute them and block them, easy, no need to get into a gestapo relay and pay for it.
Once Nostr goes all tyrant (there will be signs... errr already there) most of us will go back to Mastodon or an alternative libertarian truly decentralized option,and for the daily non decentralized, X, currently is not an easy answer, but projects like Session Messenger could be the answer, monetization matters to maintain the network, so does privacy.

2025-06-13 16:37:43 UTC

- reply

You can't over complicate it at that age. The idea is that you set it up and they don't have to deal with balancing channels, which is complex for most adults already
Here few suggestions:
"Self custody" (no node control):
1. Pure Bitcoin
Phoenix or Misty Beez
2. Hybrid with USDT
Aqua Wallet
3. Minibits (ecash) you will save tons in fees and they get as well their personal address for a cheap price if you want to make your life easier.
Non Custodial (considering the use, is not a bad choice for now):
1. Wallet of Satoshi

2025-06-11 08:16:03 UTC

🚨 U.S. National Intelligence Director Tulsi Gabbard issued a warning: the world is closer than ever to nuclear annihilation — and elites are to blame.
https://video.nostr.build/75ca1bbcf42378fe434d8f1992205252ba76466319f9d8bfa651819285e4b09d.mp4

2025-06-10 16:17:32 UTC

- reply

both have similar features, ecash and LN support
with Minibits you have an Android app which is maintained and often updated. Additionally the recovery in case of issues is more advanced. You have additionally affordable tailored LN address.
I like them both but Minibits is ahead by a mile

2025-06-09 14:36:50 UTC

- reply

you are done, don't complicate it. Verify that the notification permission is granted, that is all

2025-06-07 21:22:46 UTC

- reply

use a serious recognized dealer, one that have been around for a while and that buys back from you if needed with a tracking portfolio of your buys and sales online.
apmex is a decent choice, not the only one but it is well recommended

2025-06-04 11:17:48 UTC

- reply

lots of info out there, hard to know what works and what doesn't, I like many others keep an eye on developments
Natural remedies people say helps, testimonies, little scientific support:
1. liposomal curcumin
Non natural with many testimonies:
1. Ivermectin (search for protocols)
2. MMS (search for protocols)
High tech, gen therapy:
1. Russian scientist developed what they are calling a vaccine, it is actually a gene therapy with mRNA custom made per patient. Currently is final testing with over 95% cure rate.
Free for Russian citizens once deployed in the health public system. $2000 per dosage for foreigners once commercial. It is expected to be commercial by September this year... the russophobia and geopolitics psychological operations have this huge news buried and triggered brain washed calling it BS. Do your own research, I follow closely, have lost too many people to this awful illness and this gen therapy looks like the ultimate cure...
could interest you:
https://video.nostr.build/c1130eecb3875ad856c8ec47ec4930e0483ea834d413e65c438561687cc332b6.mp4 :

2025-06-04 10:56:46 UTC

- reply

non technical:
proton . me (proton drive)
technical
Nextcloud