lontivero

Bitcoin privacy warrior.

Public Key

npub1nccwjspr3nv7h67xx2qhdh2dzzvpyy55gte2dsu8yl7xd7n74y9qydz7mj

NIP-05 Address

_@lontivero.github.io

NIP-57 Address

lontivero@stacker.news

Profile Code

nprofile1qqsfuv8fgq3cek0ta0rr9qtkm4x3pxqjz22y9u4xcwrj0lrxlfl2jzspz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsagm7rq

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1nccwjspr3nv7h67xx2qhdh2dzzvpyy55gte2dsu8yl7xd7n74y9qydz7mj

Show more details

Last Notes

2024-09-09 20:36:11

The leading #free #WasabiWallet coordinator is now facilitating larger CoinJoins than the now-defunct zkSNACKs coordinator. 🟢 Check out this massive transaction: https://mempool.space/tx/07f97698ac6b6aaac99b60b7ad49be3154e65d7031e071f20efda87cdd76c7d8
#Bitcoin #Privacy #CoinJoin

2024-09-07 22:19:57

#WasabiWallet backend no longer requires a fully-indexed Bitcoin node. Now, it can operate with a pruned node, lowering the costs for freedom fighters looking to host a Wasabi backend, Wasabi coordinator, or both.

2024-09-04 02:22:36

- reply

It is really user friendly, you shouldn't need a tutorial. Anyway, there is a telegram channel where the community can helps you with your questions: https://t.me/WasabiWallet

2024-08-31 23:21:27

I think Bitcoin adoption in Argentina might slow down under the Milei administration, as there will be less incentive to avoid the Argentinian IRS.
The level of financial sophistication that everyday people have had to master is so extreme that it's both mentally and emotionally draining. A more stable economy could make many of these practices unnecessary and Bitcoin is one component of all that.

2024-08-27 01:33:11

- reply

No. zkSNACKs, the company that developed Wasabi doesn't provide that service anymore.
CoinJoin coordination is now handled by independent community members who run their own coordinators.
Anyone can set up a coordinator to support their community, family, friends, etc.
This decentralization makes Wasabi stronger than before.

2024-08-27 01:07:28

- reply

Yes, Wasabi is doing a great progress.

2024-08-27 00:06:00

- reply

Wasabi is available and working as usual. Here is the latest coinjoin: https://mempool.space/tx/d36d515bb8953c470d6c960515bcb351c1cab06c45e06a0825800f2e1d0deefe
I am curios where do these rumors come from? Where did you read that wasabi is not available?

2024-08-14 14:59:09

- reply

BTCPayServer, Wasabi, NBitcoin, NBXplorer, Stratis, NTumbleBit (mithical), QBitNinja, NDLC and many many others which are not FOSS. There was a famous blockexplorer too that I don't remember the name as well as hundreads of smaller projects (my Berlino and Nostra, for example)

2024-08-14 14:43:11

🚀 Excited to announce that I've just released a C# library for SLIP-0039, SatoshiLabs' Shamir's Secret-Sharing for Mnemonic Codes! This powerful tool offers a secure, human-friendly way to back up secrets, now available for all .NET Bitcoin projects.
Check it out here: https://github.com/lontivero/Slip39 #Bitcoin #DotNet #Security

2024-07-14 22:07:13

- reply

We are trying to get the logs from github but it seems their system doesn't have a decent logging system. There is still no good answers.

2024-07-10 14:00:39

#WasabiWallet Security Incident https://github.com/WalletWasabi/WalletWasabi/discussions/13249

2024-07-10 02:01:09

URGENT: Stop mixing with wasabicoordinator.io immediatelly.

2024-07-10 00:41:44

Somehow 48 minutes ago our release for Windows was replaced. @github doesn't provide any audit log to understand what happened.
We have just removed the fake installer but clearly that's not enough. We will continue investigating the issue.
Have anyone suffered something similar?

2024-07-02 19:52:24

- reply

Congratulations again, @npub1yn8…xgfl! When we were close to releasing the first version of #WasabiWallet, we didn't know how often we could have a coinjoin, and the estimation/hope was to make one a week. You've already made three times more.

2024-06-28 23:07:06

- reply

Each coordinator row in that web page has a blue button titled "Connect" which when clicked opens a popup window with the step-by-step guide explaining how to configure Wasabi to use that coordinator.

2024-06-27 11:16:06

- reply

The linked web page already answer that question.

2024-06-26 17:09:24

Ok guys, who of you did this? https://wasabist.io/
#WasabiWallet community is awesome. Thanks annonymous builder!

2024-06-22 10:15:07

Nix builds are reproducible but its developers are not.

2024-06-21 13:25:53

- reply

Where can I watch the full thing?

2024-06-16 21:15:07

- reply

I will come with the answer once I can seat in front of my computer. I don't know exactly how that part works.

2024-06-14 14:16:07

#wasabiwallet coordinators battle!
This coinjoin replaced other coordinator's coinjoin transaction: https://mempool.space/tx/07ee241515c206b63ecb283174ab1816a59fcba8b64466ef488a40cebe575851
This means that a same wallet is coinjoining with more than one coordinator.

2024-06-08 10:04:26

#WasabiWallet release v2.0.8.1 Soteria is out https://github.com/WalletWasabi/WalletWasabi/releases/tag/v2.0.8.1
Highlights:
💸 Set maximum coinjoin mining fee rate
🔒 Set maximum coinjoin coordination service fee
👀 Verify coinjoin mining fee matches requested rate
With new independent Wasabi coordinators appearing every day, we are adding extra level of control to users.

2024-06-08 08:15:17

- reply

No. It doesn't know your inputs and outputs and there is nothing like user id to track anything, that's the whole point.

2024-06-06 14:54:41

- reply

2024-06-06 14:33:20

Working on #WasabiWallet v3.0

2024-06-06 07:56:41

- reply

Wasabi doesn't have "your data".

2024-06-05 01:17:41

- reply

Wasabi always allowed to use other coordinators in fact, BTCPay Server allowed you to run your own coordinator since 2023. The problem is that by default, if the user didn't change it, the url of the coordinator was the one hosted by zkSNACKs.
Now, it is really hard to answer you when you say "integrated surveillance feature". What the heck is that supposed to mean?. Wasabi coordinators know nothing. How can they surville users when they know nothing?
The problem is that you are not really asking, you are accusing Wasabi of doing something terrible but you do not specify what exactly.

2024-06-04 21:29:01

- reply

There was not built-in chainanalysis feature because given that the wasabi coordinator knows nothing about the participants' coins then it could analysis nothing. It is because it knew nothing that had to hire the service of a chainanalysis company to ask whether a registered coin was ok or not to enter in a round.
Anyway, I suspect that free coordinators makes no money and that means they cannot pay to a chainanalysis company.
In #WasabiWallet v3 we removed all what was used to query the chainanalysis api. Here is the PR: https://github.com/WalletWasabi/WalletWasabi/pull/12970
This doesn't mean that coordinators' operators cannot implement their own banning sustem, this only means that the Wasabi coordinator won't have that feature.

2024-06-04 21:12:47

- reply

My hosts file says that all porn sites will go there.

2024-06-04 16:38:03

- reply

v0.9 I think.

2024-06-04 15:01:26

- reply

Welcome Turbo.

2024-06-03 22:57:24

- reply

No. That's a fake one. The website is https://wasabiwallet.io

2024-06-03 10:05:01

- reply

Yes

2024-06-03 02:58:14

- reply

I see the list but nothing happens when I press Up or Down keys. Nothing happens if I press Enter or Esc either. https://image.nostr.build/40f691dabc27cb0a7e9b2c5e8dfd422740aefd43f900f3638125151fb5e09ede.jpg

2024-06-03 00:47:53

- reply

Yes, everybody should.

2024-06-01 23:19:56

It's done. I've just killed the zkSNACKs #WasabiWallet coordinator. Tomorrow the sun will rise again, brighter.

2024-06-01 19:04:08

- reply

Oh btw, those backends are not recommendations, they are run by people that I don't know, it is just that they announce themselves in #Nostr.

2024-06-01 19:00:54

The #WasabiWallet backend url is configurable. If one day the default backend is taken down don't worry, nothing happens, just switch to a different one. I have just tested my wallet agains @npub1pww…en60's backend and everything worked okay:
```bash
$ wassabee --MainNetBackendUri="https://btcpay.kruw.io/plugins/wabisabi-coordinator/"
```
* https://btcpay.kukks.org/plugins/wabisabi-coordinator/
* https://kravens.duckdns.org:23001/plugins/wabisabi-coordinator/
* https://mega.cash/plugins/wabisabi-coordinator/
* https://btcpay.kruw.io/plugins/wabisabi-coordinator/
* https://secure.yap.cx/plugins/wabisabi-coordinator/

2024-06-01 00:59:32

- reply

None of those. Coordinators launched with BtcPay server announce themselves on Nostr but other coordinators don't.

2024-05-31 19:30:25

Using PGP for verifying software doesn't work and it is often counterproductive. Users don't understand what they are doing. They don't use PGP and they don't have a WoT so, what's the point.
The worst part is that those same users would demand a step-by-step instructions about how to verify the software. What are the alternatives?

2024-05-31 15:14:16

There are currently **five** Wasabi coordinators:
```bash
echo '["REQ", "coordinators", {"kinds":[15750]} ]' \
| websocat -n wss://relay.primal.net \
| jq 'select(.[2].tags[] | .[0] == "network" and .[1] == "mainnet") | {content: .[2].content, endpoint: (.[2].tags[] | select(.[0] == "endpoint") | .[1])}'
```
https://image.nostr.build/365fdc5a7db36548c071ea100017a77661ab8d40c1ea4ec02b376bebf4d84653.jpg

2024-05-30 12:28:10

#WasabiWallet is going to remove its dependency on a central server. There will be two independent components:
* Wallet API, the one that provides compact filters for wallet synchronization, and
* WabiSabi API for coordinating coinjoins.
Privacy warriors can run one or both. On the client side, In the settings page, users will be able to select the Wallet service provider and the Coinjoin service provider. Other services such as transaction fee rate provider and exchange rate providers are configurable too.
https://image.nostr.build/11389e9f7678cd3be3e78d7f9576351f63f21803549b777244841f0d08c08d22.jpg

2024-05-30 01:30:27

I will make a few enemies with this but I really hate all the 'Pura Vida' thing. I imagine that non-native Spanish speakers could find it cool, but imagime you visit an English-speaking country and every time you say hello, the response is 'Pure Life'. You say goodbye and the response is 'Pure Life'. Thank you is also responded with 'Pure Life'... Welcome.. 'Pure life'... ummm, how are you? 'Pure life'.... It feels like entering in an alternative universe where people want to say normal things like 'I am tired of this hot weather' but the matrix replaces all negative thoughts with 'Pura Vida'.

2024-05-29 18:34:03

It would be great to have a filter to display only zapped notes/articles/whatever because zapped notes are generally speaking much higher quality than GMs notes. Does any #nostr client have something like that?

2024-05-29 14:02:04

#WalletWasabi is implemented on top of an #ecash system. The coordinator mints credentials (tokens), which are then redeemed in the form of Coinjoin transaction outputs. This means that the tokens have a very short lifespan; however nothing forces us to do that and they can be used for many many things if we create long-live ones.
Right now, I'm thinking we could use them to prevent DoS attacks against the coordinator by charging per request. That would be much better than the current mechanism, which bans coins depending on their size and how many times they were used to disrupt rounds, etc.

2024-05-28 15:52:39

To have a chance of surviving in an increasingly hostile environment, #WasabiWallet must evolve. And to do that, it must leave behind comfort and embrace stress and uncertainty. It must focus on the development of the wallet under conditions of resource scarcity, far from the warmth of a sponsoring company's arms.
The #WalletWasabi git repository has been transferred from the zkSNACKs organization to a new organization called WalletWasabi.
https://github.com/WalletWasabi/WalletWasabi

2024-05-27 13:47:02

- reply

Man, if you were paid for shilling cashu I would block you. It is hard to imaging a more enthusiatic marketing.

2024-05-24 10:37:13

Yep 👇 👇 👇
#nevent1q…y8gf

2024-05-13 03:19:31

- reply

Where can I find the source code for the filters builder?

2024-05-06 11:20:57

How we deploy the Wasabi coordinator:
nix build github:zksnacks/walletwasabi/

2024-05-05 20:06:05

- reply

The privacy-oriented wallets war is over from my side. DYOR

2024-05-05 16:37:28

- reply

Yes, ofc. I read as much code as I can.

2024-05-05 15:31:14

#nevent1q…vjyp I am old enough to remember the times when people had to be careful of what they said by phone. We have left those times behind us, forever.

2024-05-03 17:49:33

- reply

What about zapping?

2024-05-02 20:48:38

I'm going to continue developing #Wasabi. I'm not talking about maintainance only but actual development.
Of course that without coinjoins there won't be any significant income, if any, to pay my salary, or at least no in the middle/long term, however that sets a clear goal for the short term: downsize it all. It doesn't sound great, but it is.
Wasabi was born as a light bitcoin wallet but with the time it became bigger and bigger. But now, zkSNACKs won't run the coinjoin coordinator anymore, all what is corporate-ish, such as Terms and Conditions, Web site, chainanalysis integration, affiliation integration, etc, etc, can finally be removed. All what made the code complex and that was great for marketing like "plebs don't pay", "friends don't pay" can finally be removed.
Wasabi needs to be also downsized to be maintainable for a couple of guys and that means we can remove things that are still there for reasons that I don't agree with, like the "password finder" among many others. I started doing that a few years ago in what I called Wasabito (little Wasabi) but then I went back to contribute to Wasabi, anyway, here you can have a better idea of what I had, and still have, in mind: https://github.com/lontivero/Wasabito/commits/master/
-------------
These opinions are my own and I don't know whether zkSNACks decision making team agrees with me or not. Anyway, it is what I think should be done.

2024-05-02 20:15:54

Even without coinjoins, Wasabi is the best wallet for privacy. It's not just because of Tor or because it doesn't share your information (scripts, addresses) with random servers on internet. The way it handles choosing coins is better than any other method I've seen, infinitely better than manual coin selection. It lets you control who knows about your transactions without accidentally revealing more than what is strictly necessary. It won't let you make mistakes that harm your privacy. By the way, manual coins selection is supported but is is hidden because it opens the door to make terrible mistakes, but you can use it if you want.
The privacy alerts tell you how private your transaction will be and how to make it even better. It suggests ways to remove change when you can and does all sorts of amazing things. Payjoins are supported too even before bip78 were a proposal.
#wasabiwallet

2024-05-01 23:32:20

If after arresting a writer all his books are ordered to be removed from the shelves of bookstores, then he has not been arrested for something he has done but for what he has said.
Why are github repositories being removed?

2024-04-24 21:02:11

Sadly, now all those xpubs have leaked. #samouraiwallet https://image.nostr.build/37e42981ac1d68cb788e003e75e54c72166a53367325b1b7b97f276c44c76805.jpg

2024-02-15 19:33:10

What's wrong with replaceable NIPs?
#nevent1q…g79q

2024-02-08 22:38:07

- reply

Oh wait, I think deletion is a mistake. Are there many others too?

2024-02-05 18:04:34

- reply

That doesn't change the nature of the problem. Destroying information is always problematic.

2024-02-04 22:53:55

I'm sure that I am missing something here but IMO the concept of replaceable events in #nostr is at least unnecessary. The same applies for event deletion.
These are detrimental to the integrity of the web of references.

2024-02-04 21:26:16

https://github.com/lontivero/Nostra/tree/master/Nostra.Client is a #nostr cli tool written in #fsharp strongly inspired by nostr-commander-rs.
It is still WIP but available anyway.

2024-01-31 13:59:29

This is good 👍. It can simplify anonymous contributions.
#nevent1q…azrg

2024-01-31 01:51:33

- reply

There are 9 publicly known group elements (points in the secp256k1 curve) named Gw, Gw', Gx0, Gx1, GV, Ga, Gg, Gh and Gs.
The credential issuer creates a secret key (sk) that is a 5-tuple (w, w', x0, x1, ya), these are just 5 secp256k1 keys.
The credential issuer computes the public issuer parameters (Cw, I) where Cw = w * Gw + w' * Gw' and I = GV - (x0 * Gx0 + x1 * Gx1 + ya * Ga). The credential issuer publish it.
Now, you want to request a credential for a given amount 'a' but you don't want the issuer to know how much 'a' is. You "hide" the amount in a pedersen commitment `Ma` so, you get a random number 'r' and compute Ma as follow: `Ma = a*Gg + r*Gh`. That commitment is sent to the issuer with a range proof but we can forget about that by imaging everybody is honest.
The issuer receives the request (Ma) and computes a MAC, a 2-tuple (t, V) where `t` is justa random namber (scalar) and V = w*Gw + (x0 + x1*t)*U + ya*Ma. And where U is a group element generated from `t` (U = GroupElementFromHash(t))
For the sake of simplicity lets forget about the proofs the coordinator need to generate and lets assume the issuer is honest. In that scenario, the generated MAC is what we call a credential.
Once you have a credential you can present it to the issuer but obviously you want to "blind" it somehow, otherwise the issuer can recognize it. Remember that at this point you know the MAC (t, V) and Ma, you can compute U from t. So, you "randomize"/"bind" the credential (MAC) as follow:
* compute `z0 = -t * z` where `z` is a random scalar
* compute Z = z * I
* compute Ca = z * Ga + Ma
* compute Cx0 = z * Gx0 + U
* compute Cx1 = z * Gx1 + t * U
* compute CV = z * GV + V
and sends the 4-tuple (Ca, Cx0, Cx1, CV,) to the issuer, which cannot "see" the MAC because it is hidden behind the DLs. This is what we call the "randomized credential". Here, once more, the client must prove the randomized credential is valid but for simplicity lets assume it is not necessary (but it is very important in this case)
The issuer can verify that `Z = CV - (w*Gw + x0*Cx0 + x1*Cx1 + ya*Ca)`

2024-01-27 15:07:33

Cashabi - nostr-native eCash system based on WabiSabi Keyed-Verification Anonymous Credentials.
Repo:
https://github.com/lontivero/Cashabi
Why?:
https://lontivero.github.io/Wiki/html/cashabi.html

2023-12-24 21:33:10

Nip44 Encrypted Payloads are supported by Nostra https://github.com/lontivero/Nostra/pull/17

2023-12-23 23:46:21

- reply

I tried and failed so many times but at least I made some progress and now I use `bat` instead of `cat`

2023-12-22 02:18:45

- reply

No. He was invited to participate in a panel and he said the problem is that the education system does not produce what the market needs.

2023-08-07 21:47:24

#[0] https://photos.app.goo.gl/ojdmPV2zVvxyheAK6

2023-07-31 00:54:45

I have a new pet project: Berlino, a simple #bitcoin wallet in #fsharp. https://github.com/lontivero/Berlino

2023-05-27 18:27:27

My keyboard is so hard, flashy and noisy that I don't feel comfortable using it in a table full gays with Apple products. It is like eating pork in a vegans party.

2023-05-21 00:47:08

I've just finished the very first version of NostraRelay a simple nostr relay written in F#.
https://github.com/lontivero/Nostra/tree/master/Nostra.Relay
First instance running here: http://gkzvzh23a3iffm6jbihhcvktjlm2gppld2ww6qc54ixwsdfobwavpgyd.onion

2023-03-26 02:25:41

- reply

Fix reference to #[2]
npub1duedmhed2nevtejwz4c2hjuu0gz7spqm4s8wnaprta55ln9k3dwssvgpq4

2023-03-26 02:17:50

My article about
npub1duedmhed2nevtejwz4c2hjuu0gz7spqm4s8wnaprta55ln9k3dwssvgp4 and npub1h72rkut9ljnpdfyrcmw8q9jx52tgn2m8zyg0ehd6z236tz2vmg2sr5k5rt idea to improve the nostr encrypted direct messages' privacy:
https://lontivero.github.io/Wiki/html/nostr/index.html

2023-03-20 16:44:35

Your Extended Public Master Key is not supposed to be public, you should keep it secret. Don't let the word Public fools you.

2023-03-20 16:00:59

Here I am posting all the Wasabi Coinjoin transactions:
npub14zln9kg0yx7qdn2kx8p2z9zdrz3ujfhyx6adeepmjsl98gjlfj5sr6fcn4

2023-03-20 12:40:42

In the nostrphere many people believe that you should pay for the privilege of publishing. Wrong!
The one who consumes the work of others is the one that must pay. I can connect to a relay and say "give me it all" and consume lot of bandwidth for free.
Content creators should be rewarded, not punished, for publishing. Without good content Nostr will be a bubble for bitcoiners, anarchists, and some other tiny groups.

2023-03-20 12:26:55

Many Nostr relays, after deserializing an event, persist it in a database as its individual part (pubkey, kind, createdAt, tags, content, signature) and forget to persist the most important thing: THE EVENT
That means that those relays must rebuild the event and serialize it again and again, million times.
PSA: persist the event as you received it.

2023-03-20 12:18:33

Yesterday during the "Nostr for Plebs" talk the presenter said that many Nostr clients dont verify the signature of the events, what is absolutely true but the situation is even worse because i've never seen a single client that verifiy the events that receives from the relay match the criteria of the subscription.
Now, take into account that Nostr is an extremely promiscuous system where a client connects to tens, or it could be hundreds, of relays to fetch info that it doesn't verify.
We need a more solid ground to build thing.

2023-03-20 00:00:20

Rule #1. When attending to an event fuul of hackers, do connect to the wifi.
Rule #2. Don't take your hot bitcoin eallet with you.

2023-02-27 16:05:14

- reply

No way! Seems to be the most important announcement in bitcoin privacy up to now in 2023. The future is bright 😎

2023-02-27 01:02:45

- reply

It will take some time. Samourai is so invested their sock puppets army that rebuild that in nostr cannot happen in one day.