zach
Zach

https://www.zach.my/

typescript maximalist and FROST enjoyer ❄️

your nsec should stay on steel && rotate your keys monthly 🗝️

Public Key

npub1zach44xjpc4yyhx6pgse2cj2pf98838kja03dv2e8ly8lfr094vqvm5dy5

NIP-05 Address

zach@troop.is

NIP-57 Address

polishedsun243004@getalby.com

Profile Code

nprofile1qqspwut66nfqu2jztndq5gv4vf9q5jnncnmfwhckk9vnljrl53hj6kqpp4mhxue69uhkummn9ekx7mqpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhsvj6zn3

Publishing to

nos.lol

relay.damus.io

Author Public Key

npub1zach44xjpc4yyhx6pgse2cj2pf98838kja03dv2e8ly8lfr094vqvm5dy5

Show more details

Last Notes

2024-08-10 17:39:38

GM
(taken this morning @ haleakalā maui)
https://m.primal.net/JvBM.jpg

2024-08-10 00:14:14

- reply

Perhaps this could be done with FROST Dkg. The DVM would just need an arbitrary pubkey to use as the other share and then generate a bunch of “disposable” secondary shares until the resulting aggregated Pubkey has sufficient PoW. Then the DVM just returns the second shares sk and the user is the only one able to determine the root sk

2024-08-06 19:49:10

- reply

Yeah, right now there is a very slight shadow change on those social buttons, but I should definitely amp that up.
And agree work needs to be done on the desktop view. Lots of empty space to work with.

2024-08-06 19:40:04

New personal site ✨
(I still have to build out the Nostr integration so my latest notes are being surfaced) But I'd love feedback on the general design.
https://www.zach.my/

2024-08-05 08:45:43

- reply

The beauty of Nostr is that we’re always at all time highs 😅

2024-08-02 16:28:48

- reply

This is sick! I’ll check it out

2024-08-02 16:23:25

I’ve started using Obsidian for note taking recently and have been really enjoying it. Everything is stored as vanilla Markdown under the hood without any proprietary sugar on top.
Plus, the way notes can be linked to other notes is very Nostr-like. Would be cool if someone made a client for this to store notes on a personal Nostr relay.

2024-07-31 01:30:20

- reply

It was great seeing you Alex! Always nice to chat in person after endless time on spaces and in comment threads 😅

2024-07-30 13:08:08

- reply

The handshake between them is a bit different because nonce commitments and partial signatures need to be communicated

2024-07-30 11:54:47

- reply

It doesn't have to be, but would be good. to establish some consensus across clients

2024-07-29 18:05:45

Here is a VERY rough draft for a FROST signing NIP.
I'd love to hear feedback and potential security concerns from anyone knowledgeable on the subject.
https://github.com/nostr-protocol/nips/pull/1400

2024-07-29 16:54:16

- reply

WIP rn

2024-07-29 15:41:11

- reply

Instead of rotating your root nsec, you'd be rotating the FROST shares. You can rotate these shares as many times as you want without revealing the underlying secret key

2024-07-29 15:40:08

- reply

Not anymore my friend 🤗
#note1p70…3ggn

2024-07-29 15:34:02

PSA:
Your Nsec should stay on steel and you should rotate your keys monthly
❄️🔜🦤

2024-07-28 17:17:58

Could we use Bloom filters on Nostr to increase privacy when requesting events from relays?

2024-07-26 22:45:38

- reply

What do you think about bringing FROST to Nostr?
#note1r3y…3xkt

2024-07-26 16:24:16

Lots of cool nostr stuff happening in Nashville

2024-07-25 15:12:49

- reply

This is probably just an issue with follow-lists. We need atomic follows. (And FROST 😉)

2024-07-24 13:45:40

“That expensive wine, it’s grape juice”
- Marcus Aurelius

2024-07-24 02:56:23

- reply

Thanks!

2024-07-24 02:02:27

- reply

@npub1tr7…nc05 🙏

2024-07-24 01:54:57

I think I just figured out how to encrypt/decrypt DMs from a FROST signature scheme. Does anyone know a Giga-brain cryptographer that could check my work to make sure I'm not doing anything retarded?

2024-07-23 16:44:20

- reply

Probably via a DVM of some sort to handle this

2024-07-23 13:21:57

- reply

https://github.com/zmeyer44/frost-ts

2024-07-23 13:17:10

- reply

https://github.com/zmeyer44/frost-ts

2024-07-23 10:41:00

I'm super excited to announce that I just released my first NPM Package! 📦🎉
Frost-ts is a TypeScript implementation of Flexible Round Optimized Schnorr Threshold (FROST) signatures. This is BIP-340 compatible and what I've been using to build some of the demos I've shown recently.
This is just the 0.0.1 release so please open issues and send DMs about what other features you'd want to see. Some on the top of my list are signing Nostr notes, creating npub, and rotating key shares.
https://www.npmjs.com/package/frost-ts
This work is made possible by @nprofile…yjkk so huge shoutout to them!
Now go ahead and start experimenting with FROST today!

2024-07-22 21:41:27

- reply

Yeah, growing pains until we get better adoption

2024-07-22 21:39:32

- reply

I think it's going to have to been handled with proxy keys that the client has full access to as I don't think that message decryption will work with frost. This may be better in the long run though as it should help prevent against metadata being linked to your main npub

2024-07-22 21:10:31

- reply

The main difference between Nip-46 and the Frostr method is that Nip-46 requires you to trust a bunker with you nsec or run your own while with frostr you can only provide the bunker with a single share of t-of-n FROST signature scheme. This way if the bunker was ever comprimised, you would not get rugged.

2024-07-22 19:23:41

- reply

The nice thing about the frostr approach is that you can have virtually infinite customization in terms of your preferred authentication methods. But the downside is that it’s going to be awhile until we can get a quorum of clients to start adopting it

2024-07-22 19:20:25

- reply

Hypothetically, which would be a better experience for you:
A) You enter you Nostr address into a client, a sign in with Google-like pop up window comes up, you enter a password/face id/fingerprint (using web authn), and done.
B) you enter your Nostr address, the app prompts you for a OTP from an Authenticator app, and done

2024-07-22 18:32:04

When’s the next Nostr Dev call @npub1jlr…ynqn ? Maybe we run one live from Nashville 🤔…

2024-07-22 15:23:30

- reply

Yeah, I'm still working things out for how that would work. I may put together a demo onboarding client to handle this and get the user up with a FROST bunker.
The tricky part is that virtually no client support the Frost bunker <> client communication yet (which is fair enough, I don't even have my final idea for the standard communication ready yet 😅)

2024-07-22 13:16:06

- reply

Happily!

2024-07-22 13:15:10

- reply

And there's no way to recover a NOSTR account if you leak your nsec.
Pretty big bug, Devs should fix it...
#note1r3y…3xkt

2024-07-22 12:49:29

- reply

#note1p70…3ggn

2024-07-22 12:38:29

- reply

I've rebuilt Flockstr into a cleaner, better preforming version. It's live right here, https://troop.is

2024-07-22 12:33:18

- reply

Check out https://troop.is instead

2024-07-22 12:32:52

- reply

You wouldn't need to rotate into a new wallet, just generate Frost shares for your existing npub

2024-07-21 22:47:06

- reply

Stacking sats and stacking bunkers 😤

2024-07-21 22:46:21

- reply

🫡

2024-07-21 22:44:49

- reply

Lol, you were supposed to respond to the main account 😅
(the other one is just a proxy to post w/o giving up my nsec)
#nevent1q…vaqh

2024-07-21 22:28:04

- reply

In a similar vein, the idea that people are pasting nsec’s, unfettered access to their digital identity, into multiple clients is going to look archaic.
If it’s not-your-keys not-your-coins, the same holds true for your identity. Everyone needs FROSTR

2024-07-20 22:43:31

- reply

Lol, I was sweating 😅.
100% agree with that long-term vision. Never trust your root nsec with anyone 😤 note1r3y62h8ddfu8z6ncht4wh39p3sw0cm8pay73ccne4983k0408lrssy3xkt

2024-07-20 22:06:27

- reply

🧡

2024-07-20 21:48:36

- reply

#note1p70…3ggn

2024-07-20 21:47:47

More FROST x NOSTR Magic 🪄
Here I'm able to use virtually any client trustlessly without giving them my Nsec or waiting for them to implement a Frost Bunker.
Allow me to introduce you to my friend, Mr. Broker 🗝️🕵🏻‍♂️
https://m.primal.net/JYFy.mp4

2024-07-20 21:41:15

- reply

Lmao, wait until you see why... 🤓

2024-07-20 21:35:02

This note is special 🤩

2024-07-20 20:59:02

- reply

I'm actually working on something for this right now. Should have a demo ready in a few days.

2024-07-20 12:25:00

Is the Damus relay down for anyone else?

2024-07-20 10:15:12

- reply

Yes, that's exactly the vision. Adding key rotation to nostr so newbies can improve their soverienty without needing to restart from scratch

2024-07-19 18:28:56

- reply

In this case I'm not using DKG because I'm trusting myself with my root key anyway so it isn't necessary to go through those extra steps when generating the keys

2024-07-19 12:27:21

- reply

I haven't worked through how that would work yet. I'm by no means an expert on this stuff so I'm not sure if its possible. Hoping to chat with some ppl about this in Nashville next week!

2024-07-19 12:25:39

- reply

#nevent1q…c22w

2024-07-19 12:24:08

- reply

Here is a flow diagram
https://i.nostr.build/rP1jX1pMgrVmETDi.png

2024-07-19 11:50:49

- reply

Anyone who wants to run a bunker. I would imagine this will be a premium service that can be provided virtually for free. It is very light on the server.

2024-07-19 11:49:04

- reply

You totally could replicate the nsecbunker "google-like" auth flow on the clients where rather than whitelisting a delegate key, this additional bunker just sends over the encrypted client secret. The important thing is that you aren't trusting a single entity with >= the threshold shares necessary to craft a valid signature. As long as that remains true, you can still safety rotate keys and know that any single malicious entity could not rug you.

2024-07-19 11:45:34

- reply

Great questions,
1. FROST allows for the signature aggregation step to occur without a trusted 3rd party. With something like vanilla shamir secret sharing, you'd need a trusted aggregator to bring together the partial key shares to re-create the root key and sign the message. Here, all share holders can operate independently and never expose their share to anyone else. This also allows us to rotate key shares should some n<T number of share holders become dishonest.
2. Absolutely, I was thinking something like a 3-of-4 set up could be quite cool where you have 1 client key and 3 bunker keys. Whenever you need an event signed, the client creates it and requests signatures from the bunkers, and once at least 2 of them respond, the client can add the client key signature and publish the event. You can keep chaining bunkers indefinitely and continue to improve the trust assumptions, as well as the complexity of the signing coordination.
3. I'm not sure if you can seed this with and existing pubkey and then generate the shares from there. I reckon it should be possible, but going to need to look into that.
4. There are not too many great technical explanations on FROST yet, unfortunately. I would recommend listening to:
- https://www.youtube.com/watch?v=8nuFt-1SWRI
- https://www.youtube.com/watch?v=ReN0kMzDFro
and check out the read me of https://github.com/jesseposner/FROST-BIP340

2024-07-19 06:46:26

- reply

Sure, extensions are great, but there are a lot of users that aren't going to go through the steps to install a browser extension to use a website. Also, an extension is good for my laptop but it doesn't help me out much on mobile.
With this setup, you are able to have the convenience of a custodial solution, but, you aren't able to get rugged if they act dishonestly. Now you can effectively rotate your keys without comprimising your npub

2024-07-19 06:31:32

- reply

The vision for this is that you have a dedicated "Client Key" that you can paste into whichever clients you enjoy using. You also have 1 or many "Bunker Keys" that are stored on servers listening for events from your client key. Only when both the client and bunker keys contribute their signatures will the signature for the event be valid, and a valid signature will be indistinguishable from one produced by your root key in cold storage somewhere.
What this allows for is even if a client or bunker attempts to rug you, you can just rotate to new key shares and "kick out" the dishonest party. And the best part is that you still have the same npub! Rotating keys doesn't mean you lose your identity.
This is somewhat flexible as well, in the demo I show a 2-of-2 setup. But you can easily increase the participants and threshold needed to produce a valid signature, thus further decreasing the trust assumptions. I could imagine having multiple bunkers with distinct key shares so you'd need all of them to conspire against you in order to get rugged.

2024-07-19 06:23:30

TRUST MINIMIZED NSECBUNKER w/ FROST 🔐🥶
Here's a demo of my new Nsecbunker implementation with FROST signatures! This works by creating a 2-of-2 frost signature scheme, which means that unless both a malicious client and bunker conspire to rug you at the same time, you are safe. 🧵
https://v.nostr.build/eK0wNZ9PkKaqLx5z.mp4

2024-07-17 00:24:48

Anyone know of a Frost implementation that I can run in the browser? (in JS preferably)

2024-07-16 18:39:48

- reply

Yeah, they were discussing it on Bitcoin.review

2024-07-16 17:07:59

This is so fucking cool 🥶
#note19cu…p970

2024-07-16 12:19:24

- reply

Also, being abot to send an event to a relay via a POST req seems like a no-brainer.

2024-07-16 12:18:42

- reply

Yeah, it would definetly be hard to get mainstream adoption. But I think it's worth a try

2024-07-16 12:13:34

- reply

I don't think it isn't "nostr only" to have relays operate via http as well. Something like GET `https://relay.damus.com/?kinds=0&author=<pubkey>` should work the same way as if the request was made from a ws

2024-07-16 11:50:22

- reply

I'm all for having relays operate via http as well. Curious about the decentralized identity peice. Does solid use eliptic curve key pairs for identities? Do they have a spec for key rotation?

2024-07-16 11:31:26

- reply

Wow, very cool. What do you see as the best parts of Solid that we should bring over to Nostr? Also, what does Tim Berners-Lee think of Nostr?

2024-07-16 01:26:41

- reply

It's shockingly similar. This video is a good explainer https://www.youtube.com/watch?v=qWVTjMsv7AE
I can't believe this is the first I'm hearing about it

2024-07-16 01:17:21

Is anyone familiar with Solid from Tim Berners-Lee?
Seems adjacent to Nostr
https://solidproject.org/

2024-07-16 00:57:30

Nostr is Linked Data
https://www.youtube.com/watch?v=OM6XIICm_qo

2024-07-15 18:50:38

This is actually pretty cool. Someone should make a version on Nostr
https://x.com/balajis/status/1812905854661763580

2024-07-15 11:21:39

- reply

We need more of this here. Nostr can quickly turn into a Bitcoin maxi circle-jerk. It's nice to see some other perspectives come along. Great to have you and @npub1xee…z3mx start to post more content here 😄

2024-07-14 22:21:24

- reply

Are you a fan of Ecash?

2024-07-14 17:39:52

- reply

Yep, that was fun. Would love to see it come to life.
An Espresso machine attached to a POS that accepts Ecash and prints out some notes the customer may find interesting on the receipt as the coffee is being made. What a world that would be ☕️

2024-07-12 00:04:03

I think I may have to vote for Biden. Four more years of this is going to be hilarious 🤣

2024-07-03 10:57:18

- reply

I'm currently in NYC and it's amazing how things are hanging on by a thread

2024-07-02 01:40:41

- reply

I appreciate your response. While I may not agree with your views, it's nice to hear where you're coming from.
Team gray tribe for me though 😅, i think that technology is the best way of solving many of the issues facing society today, and it's easy to get dissalusioned by the failure of liberal city governments' attempts to solve these problems.

2024-07-01 22:09:57

- reply

He's already a fan. Just doesn't have the time to post on Nostr. We need someone to show him the light... @nprofile…e8kp

2024-07-01 22:05:57

- reply

Do you believe in private property/country borders?

2024-07-01 18:57:48

- reply

Freedom to associate with whatever group you please sounds alot like freedom to me 🤷‍♂️
Plus I think that was more of a metaphor

2024-07-01 17:03:17

Things are happening 👀
https://m.primal.net/JEjc.png
https://x.com/balajis/status/1807808812231143434

2024-07-01 14:19:11

LET'S GET PORTNOY OVER TO NOSTR!
https://v.nostr.build/BRWZA.mp4

2024-07-01 13:57:08

Decafe Americano, please 😅

2024-06-30 19:09:35

I know there are some mixed feelings about Ben and Mark, but this podcast was awesome to listen to. As someone who grew up in the 2000s I never saw this history of the internet before. Lots of parallels to be drawn https://www.youtube.com/watch?v=8aTjA_bGZO4

2024-06-29 12:00:12

Farcaster founder is now going after @nprofile…a98v and Nostr. Take it as a complement. He's scared 💀.
https://x.com/dwr/status/1806947725851640175

2024-06-26 18:02:30

- reply

But then you're still typing in a very long string even if the first few chars are readable

2024-06-26 14:43:50

- reply

Any thoughts on adding some sort of easily readable/memorable unique names?

2024-06-26 14:20:26

- reply

Ok, so it turns out you need a browser extension to view the nice UI instead of just a link. https://x.com/solana/status/1805942449187250596

2024-06-26 12:13:00

- reply

Would you expect anything else 😅

2024-06-26 12:12:41

- reply

Yeah, the promo video is very odd. It clearly looks like twitter, but if you look closely, the url is sola.na/actions which points to a totally different page. Also there is no way in hell Elon will allow them to have iframes like that.

2024-06-25 17:24:57

- reply

Link to the tweet https://x.com/solana/status/1805587979723063440

2024-06-25 17:24:00

Solana is trying to build its own Nostr 👇
https://m.primal.net/IxiV.mp4

2024-06-25 14:56:41

- reply

So am I

2024-06-25 13:01:40

More mainstream mentions of Nostr. I hope @npub1xee…z3mx comes back to posting here more https://m.primal.net/IxWo.png

2024-06-23 14:19:01

- reply

Here's a kindof half-baked Cashu wallet implementation I worked on while in Madeira with cashu-ts https://github.com/zmeyer44/flare/tree/main/app/wallet

2024-06-23 13:49:07

- reply

Yes, to receive.