Dr. Hax

Cypherpunk. Infosec veteran of about 15 years (vulnerability research, exploit development and cryptography). Cypherpunks write code. :-)

Signet maintainer. Self-custody your passwords... in hardware! https://hax0rbana.org/signet

Want to see wider adoption so Bitcoin can be used as digital cash and not just an investment vehicle.

XMR: 44RDkTFmTeSetwAprJXnfpRBNEJWKvA5dBH5ZVXA4DofgoZ9AgjyZdSa2fo7pMD3Qe3pdKga8X22y3Lyn1xYde5kPQPzVUu

Public Key

npub16v82nr4xt62nlydtj0mtxr49r6enc5r0sl2f7cq2zwdw7q92j5gs8meqha

NIP-05 Address

Dr.Hax@hax0rbana.org

Profile Code

nprofile1qqsdxr4f36n9a9fljx4e8a4np6j3aveu2phc04ylvq9p8xh0qz4f2ygpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds828gcw

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub16v82nr4xt62nlydtj0mtxr49r6enc5r0sl2f7cq2zwdw7q92j5gs8meqha

Show more details

Last Notes

2026-03-20 22:06:33 UTC

Apples were on sale today, so our monthly grocery budget is now completely shot.
The upside is that if I get these all washed cored, sliced, seasoned and dried, we should be set on cinnamon apple chips for the year.
10 lbs down, another 20 lbs to go

2026-03-19 07:36:39 UTC

- reply

Gotta plant your vanilla tree

2026-03-18 20:21:50 UTC

- reply

I don't know how I found this Jeremiah Baker character, but I'm glad I did. I needed more shop tools in my timeline. 😎
#nevent1q…9pqe

2026-03-18 04:39:27 UTC

- reply

I guess, in a way, I helped push them towards these ends.

2026-03-18 04:30:44 UTC

- reply

You said I was allowed to put it in anything that I wanted to taste like vanilla. This is 100% on-label usage. 😋
And 1/8 tsp was the right answer. Also, vanilla root beer works.

2026-03-17 19:39:48 UTC

PSA: 1/4 tsp of @nprofile…9tfc's bitpaste is too much for 24 fl oz of cola. It was tasty, but wow, what a kick in the face (you know, in a good way)
Maybe an 1/8th tsp would be suitable. Will try that recipe next.

2026-03-16 21:21:50 UTC

@nprofile…a2y8 the link to buy your cookbook doesn't seem to work anymore. Can I just zap you for it?
Ref:
https://ketobeejay.npub.pro/post/note13jd6zcuzsh86ynes8x8rgu5gpj9yv57mwaxvfhkrnw6ap8fp0jnsta0h7y/

2026-03-16 06:48:44 UTC

- reply

Does this mean you now have a moat?

2026-03-14 17:12:29 UTC

- reply

Native to where?

2026-03-13 00:57:24 UTC

- reply

Are you giving out PSAs about calipers?

2026-03-09 21:25:12 UTC

- reply

Yes. Most people also think the bug tech corporations don't cooperate with one another, simply because they're competitors.
If Tuta was going around saying they don't respond to any government other than the German government, I expect they would be called out. For all I know all that's happened, it's not like I am a watchdog for these types of things.

2026-03-09 03:47:01 UTC

Malwaretech is giving people the straight dope on privacy first tech providers cooperating with law enforcement while decieving people to believe otherwise.
https://infosec.exchange/@malwaretech/116195917343621283

2026-02-26 10:51:22 UTC

- reply

FreeCAD

2026-02-15 22:40:43 UTC

- reply

That's a good question. I checked out some of the people recommended in this thread and saw some things that were absolute cringe. But I can think of some things I enjoy on social media...
I like seeing people's gardens and hearing about how they are dealing with problems (pests, blossom end rot, keeping their compost aerobic instead of anaerobic, etc.)
I generally enjoy seeing what people create, as least when their ego doesn't overshadow their work. The same goes for people fixing things up.
Things that make me think, doubly so if it's not just theories, but is something actionable.

2025-11-03 15:06:08 UTC

Is there any information about the details of how it will work when square starts accepting bitcoin on their retail payment systems?
1. Will everyone be able to pay via lightning by default?
2. Will the merchants just get fiat in their account by default? And if so will they even see how much money is coming in via bitcoin?

2025-10-31 15:43:05 UTC

Some of us said it was a mistake for the centralized Signal chat app to rely on secure enclaves to keep information safe.
https://arstechnica.com/security/2025/10/new-physical-attacks-are-quickly-diluting-secure-enclave-defenses-from-nvidia-amd-and-intel/
Don't build systems that put trust in one manufacturer or company. Don't have a centralized data collection point. Build completely open source, decentralized systems.
And if you're a user, choose to use those systems.

2025-10-31 15:42:55 UTC

- reply

No idea. I don't use broadcom

2025-10-06 03:26:03 UTC

Is there any place I can register a domain and pay in BTC without having a "verified account" with BitPay?
I stopped shopping at NewEgg for this reason and now I found that Gandi is doing this same thing.
#AskNostr

2025-09-25 15:36:24 UTC

Someday I'm going to try to crowdsource ideas for a series of nice quality videos that promote the ideas of #decentralized systems & #FreedomTech, starting with #Meshtastic.
Not today though. I've already got too many irons in the fire right now. I'll take that project on when it wouldn't immediately get dropped on the floor. But hey, if someone else wants to do this before I get around to it, go for it.

2025-09-20 04:58:51 UTC

- reply

I appreciate your commitment to testing for heavy metals. Unless you are more expensive than Ghirardelli, I'd be happy to switch to you. I'm in Illinois, USA. Following you now so I know when the goods are ready. 🙂

2025-09-07 15:56:44 UTC

My lightning node is messed up, likely due to some chamges I made last night. If anyone wants to try to zap me and let me know the error message they get, it'd be appreciated.
There's nothing obvious in the logs and I don't have time to deal with this right now, but having some pointers for when I get back to this would be helpful

2025-09-02 18:43:21 UTC

- reply

Oh I absolutely want it to be separate, for the same reason that people want their signer to be separate.
But since I already have a password manager it means it is not an extra app. Using a signer app would mean doubling the number of nostr apps on my phone.
Again, if I use a dozen different nostr clients and wanted them to all use the same account, I'd be all over having a signer. Different software for different use cases.

2025-08-29 04:58:26 UTC

It seems like, over on Mastodon, there are bots that will automatically boost anything that has a particular hashtag in it. I don't get it. What is threw point of this when you can just follow that hashtag? Who would follow those bot accounts?
Make it make sense to me.

2025-08-23 18:57:22 UTC

- reply

Do other social media platforms kick you off if you post a picture like that?
It seems like the kind of thing they'd do, but I've been so far removed from centralized social media for so long, I am completely out of touch.

2025-08-23 18:48:30 UTC

- reply

I had a section on what the network looks like around town, but not on how vital antenna placement is for getting good range. Added a whole new top level section!

2025-08-15 17:43:40 UTC

Are you Y2Q compliant?
https://image.nostr.build/b0c5bd23cd6fa43e740f8c9e5c4328621abd27ffcf7a701e99a59196bf881519.jpg
Will is happen by April 14, 2030?

2025-08-13 23:28:05 UTC

GD mates. I'll try to fill that time between you GM and GN posts with this lovely picture I snapped today.
https://image.nostr.build/3f6b7a1ed40f80307f2ce1c21873abe53b650d49bac9de6cd6b7fc238a4bf1e0.jpg
Or is it AI generated? Can you even tell?

2025-08-03 22:58:55 UTC

LOL at people suggesting AI is going to leave people behind if they can't afford to pay for the tools.
If that's true, then open source (including the training data) is vital to innovation. There'd be only megacorporatons making software, no open source because no AI gatekeeper is going to allow someone to create a free and open source alternative to what they make. It'd undermine their income stream.
And if you think AI can't make AI tools, then you are acknowledging a huge limitation of so-called AI. They can't make anything new. It can only remix and combine things it's seen before.
So if you create anything novel, you needn't worry about being left behind.

2025-07-26 22:56:49 UTC

"AI will replace all information security professionals"...
..."AI vibe coded apps and systems introduce host of security vulnerabilities."
Well why don't they get the AI to look at the AI and check to see if the AI is AI-certified secure?
🤣🤣🤣
Via https://infosec.exchange/@tinker/114921431359185023

2025-07-26 20:03:55 UTC

- reply

Nope

2025-07-20 18:48:17 UTC

- reply

Too much shed building. Strained my back and now I'm taking a forced day off. Maybe multiple, we'll see. Whoops. 🫤
#nevent1q…hj68

2025-07-19 18:02:29 UTC

- reply

Did you get to carry it home? 😀

2025-07-19 18:02:04 UTC

It's Saturday. I slept in. Now I'm sipping my coffee, relaxin' before I get into my day.
Continuing to build a shed, laundry, starting a new batch of cold brew... nothing revolutionary, nothing incredible. Just another weekend at home, taking care of business.

2025-07-17 02:53:40 UTC

Who else is running community events to help the masses put Linux on their desktops before Windows 10 abandons them?
Do you have any tips to share?
I'm going to be involved in one of these in my town and want to learn from those who came before me.
I love helping people save money, getting them to switch to open source software, and make the most of what they already have. This is like a perfect storm for me. 😄

2025-07-16 03:41:42 UTC

- reply

All the ones I know would absolutely do something and it's hard to imagine anyone who follows that philosophy who would let that kind of abuse slide

2025-07-06 06:03:07 UTC

vi is such an awesom text editor, it has its own flag!
https://image.nostr.build/6c71d582af160f36dc7c2511c384c9a28a8fcee15d38435206ff5b2f1ccb47c0.jpg
(Yes, I know)

2025-07-05 19:19:05 UTC

I paid for my burger last night using @nprofile…yxrm and a custodial wallet. It said it was custodial right at the top of the UI.
I am the custodian.
Payment worked on the first try. Much better experience than last month when I tried 4 times and finally ended up successfully paying with coinos via their web interface.

2025-07-05 06:12:10 UTC

- reply

I can recommend borgmatic. Backups are deduplicated, compressed, and encrypted (at rest & in transit).
I can share some scripts to set it up if people are interested.

2025-07-05 06:09:33 UTC

- reply

Do you interface with POTS locally, through some provider, or not at all?
I'm interested in running FreePBX and want to know how people handle dealing with these legacy systems.

2025-07-04 20:44:37 UTC

@nprofile…6g8e
What's going on with your website? I tried to renew my subscription at https://batcoinz.com/p/bitcoin-plans but that's gone as is any mention of how to subscribe.
I appreciate that it niw seems to work with Tor, but with the contact page saying "example.com" on it, I have to suspect something is wrong

2025-06-29 18:11:17 UTC

A buddy of mine found a compact disc of clipart from 1995. It had a lot of interesting and strange stuff on there.
https://image.nostr.build/50695a6dd378ac06dbd2cb38c4314173728522155a9c8a0236fb55e3bb4a0d29.jpg
And they were .eps files (vector graphics) so you could zoom in 32000% and not just be looking at a single pixel. In some ways it's better tech than people use today, and artists got paid for their work (at least, in theory).
Fun dive 30 years into the past. 😄

2025-04-11 02:32:28 UTC

- reply

Nope. I'm thinking it's like Ke$ha or Shakira or something along those lines, but I still can't find it....

2025-04-07 17:47:29 UTC

Lets see if #nostr can search the web better than the big #tech companies...
I have ting fragments of a dance song in my head and I'm not even sure they're correct.
...hacienda
No habla espanol but your on my agenda
That's it. That's all that is spinning around in my head, on repeat. The song was mostly in English if that helps.

2025-04-04 06:45:30 UTC

"According to the WEEE Directive, the EU member states are obliged to collect data on waste electrical and electronic equipment and to transmit this data to the European Commission."
WTF, Europe? Why would you require this extra effort just to invade people's #privacy?
Source: https://www.nitrokey.com/disposal

2025-03-21 21:33:49 UTC

- reply

It's 6 DBI. I don't understand why better gain would cause it to NOT receive my transmissions.
Is there some place I can read more about this that doesn't require the background knowledgr of someone with an EE degree?
An anology of "you're shouting in my ear with a megaphone, so no, I can't understand you" would be the level of detail I'm lookong for. Just practical tips & explanations. I'm not super interested in the theory of antenna design (yet 😅)

2025-03-01 18:44:55 UTC

- reply

Not sure if this was rhetorical, but if not...
They believe they're being protected from "attacks" because that's what the people selling the service tell them. They tyoically don't ask what attacks, but if they do they get super generic answers like "hacking", "DDoS" and the like. Since they haven't "been hacked" it seems like their vendors are being honest and accurate.
The thing they often don't realize is that these services don't block attacks, they block everyone using privacy software, good or bad.
They also don't realize how many sales they are losing. There's no metric for that, and most people will never report it because they've done so before and they were told to just use a different browser.
They also don't kniw how easy it is to bypass this "protection" they are buying. For example, today, it was literally clicking one button ("New identity"). If they realized this, they would instantly understand that an attacker will take the time to click that button, but a customer may not.

2025-02-02 20:41:48 UTC

- reply

That one on the left is for when you want your network to rock! One end goes in the amp for your electric guitar and the other end goes onto your switch.
At least that is what I imagined when I saw it.
As for the one on the right... I can't even

2025-02-02 12:39:04 UTC

- reply

I'm always skeptical when I see splitting like this and there's no link to the supposed story.
#nevent1q…f0pq
But this time the story checked out:
https://www.bloomberg.com/news/articles/2025-02-01/bitcoin-btc-college-savings-plan-parents-ditch-529-funds-for-crypto

2025-01-13 01:45:14 UTC

- reply

This was the last year

2025-01-11 19:58:50 UTC

Is this a real geode?
https://image.nostr.build/e358036475c76c39aad5508d63d76fabbfb52bc5b13f1b7b06728b4251555dfb.jpg

2025-01-08 04:33:49 UTC

Curious about #LoRa, #meshtastic or #reticulum and want to know how fast it goes (when using LoRa)? Look no further!
https://image.nostr.build/c9a3e5b3b736e8a15374e56a791c85432389f71eb27ccf652e3f6e852d7cb208.jpg
So, yeah, when people say low bandwidth, they really mean it. But then again, getting a half mile range in substandard conditions is pretty rad. It's not a good solution for everything, but I think it has its place.
Source: https://m.youtube.com/watch?v=KRyLt1Ad5iI

2024-11-21 00:24:12 UTC

If you use #QubesOS, you should donate to the project. This reminder was brought to you by one of the core contributors giving me a workaround for a bug in their system that affects #signet. 🎉🎊🍻
I've wanted this for at least 9 months and ended up building a second computer, just for testing what turned out to be a bug in Qubes.
https://github.com/QubesOS/qubes-issues/issues/9367

2024-11-15 23:07:55 UTC

I see #Alby is trying to force people into paying for hosting for Ably Hub by cutting off their hosted wallet service.
Understandable. They have nothing to lose by throwing everyone under the bus. It's not like they'll lose any money over it (their hosted service was free).
I mean, what are the users going to do? Get mad that they can't use a free service anymore? Complain about it on social media? Doesn't matter to Alby's bottom line.

2024-10-10 00:37:35 UTC

Age verification check:
Pound for found, it costs more than gold.
What is it?

2024-10-08 16:17:51 UTC

Preserving peppers in 3 pictures (see image descriptions for more info)
https://image.nostr.build/4a6ff45aebbfc8b8dfd10390b72076ede99949134b3afcf7c8f7afdef40924be.jpg
https://image.nostr.build/715eee99e4a3de8879f44454cf1fa455a670baf21095eee494050807d64c9538.jpg
https://image.nostr.build/119775ba787a622630271c991b94ab5afd084654802e95e10a33cbfaa08d51fe.jpg
This was probably about a gallon of peppers when they came in from the garden and we got maybe $5 worth of pepper flakes.
If you want to save money, don't become a #farmer. They get paid crap. You'd be better off getting a traditional job and buying food.
But if you want to be #SelfSufficient, you must grow your own food. At least some of it. And you should trade with neighbors.
#homestead #homesteading #farming #gardening

2024-10-06 16:08:01 UTC

- reply

I went through the free LoRa/LoRaWAN training from Semtech a couple years ago and it was very good at explaining how it works to non-experts.
https://learn.semtech.com/
IIRC, you might have to look up videos on thinks like OOK or preambles to understand those parts, but that's easy once you know what to look for and have the context of how it is used.

2024-10-01 23:10:11 UTC

- reply

Now I need do design a case for these things.
For some value of "need"
#nevent1q…78p8

2024-09-30 19:34:36 UTC

Three USB keyboard/mouse to PS/2 hats complete. 4 transistors and 8 resistors on the hat + bring your own raspberry pi pico.
https://image.nostr.build/09ad19e71276d58d63b410fd24742b44f751baf2ca53264205f62646c8257472.jpg
Cable is taped together because I had to make it into a crossover cable.
#OpenSource #FOSS #hardware #security #privacy #DIY

2024-09-21 19:55:23 UTC

I'm late to my own party, and why? Because I was learning about dehydrated devices and how #Matrix messages can't be decrypted if all of your devices were signed out at the time the message was sent. #e2ee
I recently convinced some normal people to use Matrix and so now I need to support them and make sure I figure out how to work around weird issues like this. Prior to this, I was only inviting geeks onto Matrix (which is nearly everyone I know, but a biased set of people nonetheless).
But fear not, I got that all sorted out now and #Signet #Saturday can begin. 🎊

2024-09-17 21:09:42 UTC

- reply

There are more darknet nodes, but they only account for 3.4% of the liquidity.
That's a fair point though, and one that escaped me until you pointed it out.

2024-09-15 05:10:29 UTC

- reply

It's just a password manager (although, with some firmware and client tweaks, it could be a signing device), and only $45.
I've never heard on moolti-pass before but it looks legit! The whole knocking on wood thing is weird, but they seem legit about being open source, as opposed to being like most companies that claim to be open source because one component is open source. I saw mooltipass has published kicad files.

2024-09-14 21:59:41 UTC

- reply

For people who have NOT joined the #Signet project, nor bought a device. I want to hear from you.
Too expensive ($45)?
Don't feel it's more secure than pure software?
Don't feel you can trust it?
Don't use a password database?
Not enough time to help (provide feedback, report bugs, contribute code, etc.)?
What's holding you back and how can we fix it?
#nevent1q…jlt9

2024-09-14 00:59:43 UTC

Being at a worker coop conference got me thinking about some big problems.
Why do companies (esp big tech) keep screwing over customers and employees? Because they need to grow every year?
Why do they need this infinite growth? At a minimum, to keep up with inflation. If they made the same amount of dollars next year, that less money in real terms.
Why don't we just get rid of inflation, which also drives a lot of the consumerism we see?
And there's the rub, in a single post.
Hint: it has to do with debt...

2024-09-13 23:24:34 UTC

I'm about to put #Signet devices on #sale. Actually no, not sale, I'm just going to lower the price on my store, where people pay in #bitcoin. #Fiat prices will remain the same.
https://image.nostr.build/e9dfe3b3b9c39a3afde78b2094828006c5bfc625834d6768c6472116e2291346.jpg
https://image.nostr.build/54dbac04f8e413699358a5b8dba84cb53da7e739d78d576dcdfb34e1ee25a784.jpg
https://hax0rbana.org/signet to buy, but might as well wait until tomorrow when the price drops.
#security #infosec #cyber #cybersec #cybersecurity #OpenSource #hardware #privacy

2024-09-13 23:07:24 UTC

Spotted in #chicago The best part about this sticker is that's the transunion building in the background.
https://image.nostr.build/a76eb44c15336feab0880e57c7f0cc58885d88fb0c482a76d796d219474c7f98.jpg
Am I lying? Come check it out for yourself. South Clinton, between Monroe and Adams. #ProofOfWork

2024-09-09 20:34:37 UTC

- reply

The enamaled wire appreads to be glued in place. I guess if it's all being ripped out anyway, that won't stop anyone though.
I was hoping it would be an open circuit that I could just patch, but no such luck. I have hand spun coils before and I'd have to be pretty desperate to want to go through that hassle. Even in the most dire of times, I might just used a crank drill before going to that trouble.

2024-09-06 15:23:11 UTC

Remember, no matter what featers #nostr clients include, every single user will have to duplicate the effort to block spammers.
If you suggest this is inferior to allowing people to share filters, or having relays help address the problem, you'll be told to GFY, accused of censorship and being an authoritarian.
You may not like it, but this is the nostr way.

2024-08-28 22:03:51 UTC

Started reading a new book today.
If you are about to respond to this post praising or bashing the book without ever having read it, just stop.
https://image.nostr.build/f9e067f52b80674495e2f4ffa236a2816cf27750eb364497bb7f13653a778871.jpg

2024-08-22 01:14:13 UTC

Does it bother anyone else the the Windows hourglass has too much sand in it?
https://cdn3.vectorstock.com/i/1000x1000/64/57/white-pixelated-computer-cursor-in-hourglass-shape-vector-10506457.jpg

2024-08-19 17:20:00 UTC

- reply

Did you read the article I linked which is in support of BIP-47 and says you are dead wrong about it not having worse security for the sender?

2024-08-16 16:57:45 UTC

- reply

What is this, I can't vote in my own poll?

2024-08-14 20:01:27 UTC

I got my #Meshtastic node working with an #Arduino. No #wifi nor #bluetooth required. No #smartphone, #RaspberryPi running Linux or any other real computer involved.
https://image.nostr.build/4e7ce90879e8adde483a0864dea7205a1a69f404b8ac660443d4548b1b3a12b5.jpg
Nodes can talk directly to one another with no #infrastructure, and no #HAM #licenses.
The picture is a prototype for a project I'm working on, but just having the ability to have little #electronics speak Meshtastic natively is a game changer! #hardware

2024-08-13 22:21:01 UTC

- reply

Thanks foot sharing, I hadn't seen that one before. That was a good summary.

2024-07-23 19:26:57 UTC

- reply

This is a real article, despite being a screenshot with no URL to back it up. Here's the article and a translation to English:
https://m.focus.de/experts/vermoegensregister-geplant-eu-will-umfassende-datenbank-zum-vermoegen-aller-buerger-aufbauen-was-dahinter-steckt_id_260158959.html
https://m-focus-de.translate.goog/experts/vermoegensregister-geplant-eu-will-umfassende-datenbank-zum-vermoegen-aller-buerger-aufbauen-was-dahinter-steckt_id_260158959.html?_x_tr_sl=auto&_x_tr_tl=en&_x_tr_hl=en-US&_x_tr_pto=wapp
Also, the headline isn't hyperbole. It's a fair description of the article.
#nevent1q…dzdn

2024-07-22 01:23:12 UTC

- reply

If you use any other #cloud storage service (#GDrive, #OneDrive, #iCloud, etc.), you might want to consider #hosting something yourself now, or with friends & family.
The #corporations will sell you out in a heartbeat. #SelfHosting

2024-06-28 20:50:40 UTC

@nprofile…v4az Do you have opinions about Zcash vs Monero that you'd like to share?

2024-06-20 02:10:04 UTC

- reply

Agreed
I hope some day the the loophole that allows slavery of people convicted of a crime is closed too.

2024-06-19 00:06:24 UTC

- reply

Yes, I believe so, but only relays operating out of the EU.
If the relays were to block DMs, I think they should be in the clear as that's the only thing that is end to end encrypted.
The node operator **could** make the argument that the **clients** are doing the encryption and that they have no control over which clients people use, but that'd be a pretty risky legal argument, especially if there's no client in existence that could possibly comply with this law.

2024-06-17 06:50:56 UTC

#ChatControl (the proposed EU regulation which would require backdoors to encryption if it can send a video, picture or link) is set to be voted on June 19th.
They've been trying to pass this for the last two years and it looks like it might happen this month.
If passed, it will affect people around the world.
More info and suggested actions for how to resist available here: https://blog.cryptpad.org/2022/05/19/against-chatcontrol/
The only good news I have for you here is that the law currently targets "service providers", not "software developers" or "end users" (directly). Developers who also run a service, or get income from service providers will be affected indirectly.
The tactic being used here by the lawmakers is to starve developers of funds so they have to stop working on open source projects and get a so-called "real job". There are not many options for directly stopping developers from writing and sharing code, but this is a pretty effective way to slow down development and try to burn out open source developers.
Source: https://social.cryptography.dog/@ansuz/112630461011248734

2024-06-14 22:26:34 UTC

- reply

Basically, no. https://foundation.mozilla.org/en/blog/privacy-nightmare-on-wheels-every-car-brand-reviewed-by-mozilla-including-ford-volkswagen-and-toyota-flunks-privacy-test/
At some point my '96 Legacy is going to die and my plan is to go without a car for a while and just rock the bicycle.
If that doesn't pan out my backup plan is to find the local group of peope who took an old clunker and put an electric drive train in it. I'll understand how everything works, no privacy policy, no phoning home, no nonsense.

2024-06-12 20:26:54 UTC

As someone who grew up when only doctors and drug dealers had pagers (and later, cellular telephones), some things still strike me as being bizarre.
For example, buying things from someone used to be that you gave the person money (which we now call "cash") and they're give you the object.
Now, people need a big tech/finance company who decide whether these people can do business, or even make a donation! Sexy photos? PayPal says no. A hunting rife for your daughter? Nope. Wikileaks. LOL, no.
For legal purchases, it seems very strange that a private company would decide what is allowed. It's stranger yet that most people think this is just normal and acceptable.
I've been enjoying buying things from local establishments whenever I can and paying in cash. It's not that I'm trying to hide the quantity of shredded cheese I buy from the grocery store, which local artists I support, or how much I donate to non-profits. It's just a return to a simpler time and a way to stick it to big corporations and data collectors.

2024-06-07 01:59:37 UTC

Whenever browsing sketchy websites, be sure to use a #DVM
Also use a DVM when installing questionable software on your computer.
There are tons of uses for Disposable Virtual Machines, and #QubesOS makes it extremely fast and easy.

2024-04-26 22:50:38 UTC

- ☠️ Wallet of Satoshi
- ☠️ Pheonix Wallet
- ☠️ Tik Tok
...who's next?
- Alibaba
- RT
- Zeus
- Other (reply in the thread)
#AppStore #ban #censorship (sorta)
#Zeus #centralization

2024-03-09 05:49:35 UTC

- reply

I like having the url under the QR code. I'll type in a URL far more often than I'll scan a QR code. Having both serves everyone.
Slight preference to omit the politician part. It seems like an unnecessary jab at people who still believe their vote makes a difference. Participating in a democracy is not mutually exclusive to using bitcoin. I'd rather see people focus on things we can agree on whenever possible. But then again, I'm a corny🌽, posititivity guy. 😆

2024-03-03 17:34:57 UTC

- reply

I like the sounds of it, but when I tried to use it it told me I can't import a wallet which doesn't have a BIP-39 password. So I guess it's not an option for me.
Also, is there some reason they are not in the main FDroid store? Do they have some closed source code in there that disqualifies them? Do they have trackers like Green Wallet and are avoiding being caught by hosting thier own repo?
What's going on there? It seems sketchy and I didn't see any explanation on their site.

2024-02-12 05:49:07 UTC

- reply

Meh, they're just trying to make money and contraversial headlines and bylines like this are effective.
I do think the framing is deceptive, and looking back at the source material, it looks like the researchers were much more focused on how urban farming can improve.
If I wanted to play that same game, I could pull out choice quotes like "most urban farms are carbon-competitive with conventional farms", but I'd rather focus on the bigger picture.
As for the impact they're citing, I don't like what it, but that doesn't mean it's inaccurate.
@@npub1pnc…qlgr already gave some good critiques here: #nevent1q…6cql and in fact the researchers even had some similar comments in their "future work" section. They suggested "comparing UA to other urban land uses, such as housing, parks and industry". Not quite the same as comparing them to mown turf grass, but it's along those same lines.
Source material for the article is here: https://www.nature.com/articles/s44284-023-00023-3

2024-02-12 03:14:30 UTC

Here's an example of something I'd be willing to collaborate on with a #BitAxe developer if only the power supply were #OpenSource. https://www.tindie.com/products/makerpals/usb-c-pd-power-delivery-board-65w/
Here are the problems:
1. Shipping costs more than the power supply itself.
2. I'd want to merge this PCB with the BitAxe board
I'll always send bitcoin royalities back to the creator if I am selling something they designed. This is just the sensible thing to do. Even setting aside ethics and legalities, it'd just be foolish to burn a bridge with the person you depend on. You know that's just going to result in a non-commercial clause in the next thing. Plus, even if it didn't, you suffer if the dev can't afford to keep making cool stuff.
I mean, just do the math. If I can ship them for $7 less and produce them at a cost comparable to their price, there's $7 we can split between me, the developer, and any software developer who made any of the libraries or tools that we depend on. Sure, it's only going to be like $1 per person per unit, but nobody except me has to do any additional work. It seems like a no-brainer.

2024-02-08 05:31:27 UTC

If I made tiny caution signs like this one, would anyone on nostr be interested in buying them?
https://image.nostr.build/5533cdc0f5f220ccd876b809ac813bee48703ea66de13212599ef1be3082a01f.jpg
I can't sell this design in particular because it's licensed as non-commercial and I respect that. But I could make my own design and print and sell those. It just doesn't make a ton of sense to go through the trouble of designing, prototyping and printing them if it's just for me, ya know?

2024-02-06 23:33:10 UTC

- reply

Nope only 3.5 lbs, and the apples were only $1/lb. So $3 for 8 ounces isn't too bad.
Of course after the hour of labor and the power to run the dehydrator for 12 hours, it suddenly looks a lot more expensive. That's why I only make enough for my household. Nobody is going to pay $2/oz for dehydrated apple chunks. 😂
/me checks online for price of dehydrated apple chunks: $12.47 for a 4oz bag, and even those sre "unsvailable". 🤔 Huh, maybe there is a market here after all...
Source: https://www.amazon.com/Essential-Spice-Dried-Apple-Chunk/dp/B08P7FKJ6H?th=1&psc=1

2024-02-06 23:11:29 UTC

I made a batch of dehydrated apple chunks today. What's pictured + a full pint: 0.5 lbs in total. Anyone want to guess how many lbs of apples went into this?
https://image.nostr.build/b9468087ad45f89feebd5d263e937037530e8b2607ab4481b645820864912828.jpg#m=image%2Fjpeg&dim=1440x1920&alt=Small+bits+of+dehydrated+apples+nearly+fill+a+pint+jar.+The+lid+is+labeled%3A+Gala&blurhash=_BH21U009t%3FGaJozV%3F1R%250n3bvRjs%3AWAi%5D%7EpxuodoLWAoz4Tx%5EOsn%24t8Rjt7.7xtI9kXS5WBbcx%5DM_n%24tRRixuayIUaetSIUjsbIV%40Dhx%5D%25NIUt8RjazWTt8RPRjxuV%40t7&x=29e330ea799652792ba4557ea3772caeb3f3b7a04f06c8ad77cd54a4e1758da1
#foodstr #prepper #homesteading #gardening #GrowNostr

2024-02-04 06:49:17 UTC

- reply

Agreed. 🤘
#nevent1q…60x8

2024-01-30 16:34:49 UTC

- reply

Yes. Backups go to a file and it is simply a copy of what is on the Signet device. This means it is encrypted, so it can't be unlocked without your device's password.
Keep the file safe though, because the password is the only thing needed to unlock the database and get all your secrets. There's no hardware protecting the passwords when they're in a file.
I keep my Signet backups offline for this reason. A thumb drive or USB hard drive works great for this. But if you wanted to store the backups on a cloud service (your own or someone else's), you certainly can.

2024-01-28 09:46:35 UTC

- reply

I agree that is what is needed.
In fairness, it's really hard to stock that quantity of food and be able to live on it for that long. Any recipe that contains any milk or cheese gets real tough to make when all your dairy products are a month old.
"Discipline" is a good way to phrase it. Things like learning where you can use powdered milk and where it just doesn't work out right is time consuming. Finding alternatives takes a lot of effort and trial and error.
I've been collecting pantry recipies for years and I feel like I don't have enough. I guess at some point I'll have to get those into a format that I can easily share.
Even knowing how much of various ingredients to stock is complicated. How much active dry yeast do we use a month? I couldn't tell you. Would three jars be enough for 3 months? Probably 🤷‍♂️
We plan on moving to Grocy (open source, self hosted, recipe database and inventory management system) in the near future. That will make it trivial to answer questions of what we can make with things on hand, how much of each ingredient we need to last 3 months, and so forth. It's going to be awsome once it is all set up.

2024-01-27 19:09:28 UTC

- reply

The lightning network needs to escape the #bitcoin echo chamber. It could do that now with custodial #lightning providers who manage #liquidity, #channels and so forth, but it risks another Mt. Gox or FTX.
A related problem is that people don't want to accept bitcoin, even the same people who want to buy it. Similarly, most people don't want to spend their bitcoin. The rhetoric is nearly always about stacking sats, not earning, not using, just #hodl them.
#nevent1q…nyyp

2024-01-20 17:43:08 UTC

- reply

What you can do about this:
- don't fall for phishing scams
- that's about it, sadly
Some things you can do in the future:
- Use a unique email address everywhere
- Use different nyms for things like this
- Do a group buy so they only have one person's info
- Build your own #Trezor (protip: it'll be expensive)
- Combine the two points above and do a group buy to have someone build multiple trezors!
#nevent1q…hyv8
#infosec #cyber #CyberSecurity #security #CyberSec

2024-01-20 17:27:10 UTC

Security alert from Trezor
Their support ticket system got hacked (they use a 3rd party system) and email addresses and names/nicks may have leaked.
Source: my inbox
This is why they should #SelfHost their systems. I am confident they care more about an incident than any company who would host a ticketing system for them.
They did seem to do reasonably well as minimizing the amount of data collected. If you are going to provide customer support, you need some way to get in touch, and email is pretty reasonable. Having a nick for what the customer wants to be called is also pretty reasonable. I have to wonder how many of those names/nicks were "Satoshi".

2024-01-19 21:51:00 UTC

- reply

Oh, I am going to follow you!
Are the apples and apple juice pressure canned (as opposed to steam canned)?

2024-01-11 03:16:50 UTC

- reply

I can't think of anything that is going to beat KeepassDX. They have keyboard integration, can be unlocked by biometrics, and I have it set up to automatically sync my database to my Nextvloud server.
The verson of the Signet mobile app copies passwords to the clipboard, which is suboptimal. Beyond that, it doesn't even install on the latest version of Android and I haven't been able to get it to compile.
I'm looking for an Android dev who wild be willing to volunteer a few hours to get it fixed, if you know anyone.
There's also browser integration via browser add-ons, but I don't think anyone is currently using them (I know I am not). I'm already stretched thin, but testing them out is on my list.

2024-01-09 20:57:41 UTC

- reply

Thanks for the shout out!
Yeah, I build open source hardware password managers. It's basically a self-custody & hardware security for your passwords (and seed phrases, and whatever else you want to put in there).
It's all open hardware, software, and firmware.
This is pretty much a one-man operation and I'm so focused on the technical aspects, I don't have much time to do promote it. So I **really** appreciate people helping me spread the word like this!
https://hax0rbana.org/signet for more info

2024-01-02 23:37:19 UTC

- reply

Are you ready?