hzrd149

https://hzrd149.com

Front-end react developer building my own nostr client. https://nostrudel.ninja/

Public Key

npub1ye5ptcxfyyxl5vjvdjar2ua3f0hynkjzpx552mu5snj3qmx5pzjscpknpr

NIP-05 Address

_@hzrd149.com

NIP-57 Address

hzrd149@minibits.cash

Profile Code

nprofile1qqszv6q4uryjzr06xfxxew34wwc5hmjfmfpqn229d72gfegsdn2q3fgpzpmhxue69uhkummnw3ezuamfdejszrthwden5te0dehhxtnvdakqgfz72p

Publishing to

nostr.wine

nos.lol

relay.damus.io

Author Public Key

npub1ye5ptcxfyyxl5vjvdjar2ua3f0hynkjzpx552mu5snj3qmx5pzjscpknpr

Show more details

Last Notes

2024-09-16 15:27:08

- reply

agreed, but we have a long way till we get there

2024-09-13 11:38:34

- reply

You should look into the SQLite wasm that @npub1v0l…qj49 used in the short worker relay
Its surprisingly stable and its supported on a almost all browsers. Which I wasn't expecting

2024-09-11 16:25:05

- reply

docker image should be out. 👍
https://github.com/hzrd149/blossom-server/pkgs/container/blossom-server/271532761?tag=4.3.2

2024-09-11 16:22:53

🌸 + ⚡
https://github.com/hzrd149/blossom/pull/29

2024-09-10 04:47:35

- reply

do you have a link to the github? ill start by running it locally then see if i can automate it

2024-09-08 14:34:42

- reply

that is fine with me as long as my lightning node stays working

2024-09-08 14:30:39

- reply

Found the fixed the issue https://github.com/hzrd149/nostrudel/commit/1353ccdfd96508df3f95fee09225bedb129dd444
The fix will be released in next version V0.41.0

2024-09-08 14:26:00

#asknostr I have an older Umbrel node running v0.5.4 for all my lightning stuff. is there any issues I could run into by updating it to umbrel v1.0.0?
http://cdn.hzrd149.com/ec24dd66c59be2242e748cd3c40bd1e1d81c24b3a47748ae600f610db7dd9de8.png

2024-09-07 16:43:52

- reply

all the time, I'm addicted to the stuff

2024-09-06 13:45:20

- reply

A catch 22 is still better than using kind 1 for everything :)
If nothing else then I will try to break the catch 22 with noStrudel

2024-09-06 13:30:40

- reply

none yet. but I'm planning on adding support for it in noStrudel for replying to articles and wiki pages, so that will be at least one client

2024-09-06 13:19:25

- reply

I am trying to slowly move over to gitworkshop, since its going to be so much better than github mostly because users don't have to create an account to open or share an issue
however I wont respond to any of the issues there until it implements NIP-22. Its ideological but I don't like kind 1 being used as the reply kind :)

2024-09-06 12:29:23

- reply

Its been a while since anyone has used the map feature :)
I would love to make it more usable although I don't think ill have time to work on it for a while
If you don't mind though you can open an issue on github or gitworkshop (nostr) so that at least I won't forget about it
https://github.com/hzrd149/nostrudel/issues/new
https://gitworkshop.dev/r/naddr1qqykum6nw3e82er9dsq32amnwvaz7tmsw4e8qmr9wfjkccte9e3k7mgzyqnxs90qeyssm73jf3kt5dtnk997ujw6ggy6j3t0jjzw2yrv6sy22qcyqqq80xgxfmztl/issues/new

2024-09-04 13:58:46

- reply

do you have the code for these custom feeds broken out into package? id like to see if there is an easy way to convert tags[] -> filters[] so I could add it to noStrudel

2024-09-04 12:02:33

- reply

same here, it was awesome going for nostrasia

2024-09-03 01:13:29

- reply

if you want to side load it you can download the package from the release page https://github.com/hzrd149/nostrudel-startos/releases/tag/v0.40.0

2024-09-03 00:51:33

- reply

This is kind of a bug, although its not something I can easily fix
The notifications are designed to be almost full screen on mobile and because the view wide is limited the app thinks its on a mobile phone 😕

2024-09-03 00:03:51

- reply

Its just water, and occasionally coffee 😀

2024-09-02 17:57:10

- reply

How are you and your grill standing on water?...

2024-09-02 16:47:42

- reply

Momo by Michael Ende

2024-09-02 15:28:46

New version of #noStrudel
I fixed a few bugs and its probably got a few new ones, but most importantly its got a ton of new features
#naddr1qv…umes

2024-09-02 14:12:44

Changed by mind, NIP-89 client tags will be opt-in but with a prompt on the "New Note" modal to prompt the user to turn them on
http://cdn.hzrd149.com/c6959f16a1e87e36f7657df5ec8df7fda4b1d126d02107b15ba4cb64dbf57796.png
#nevent1q…qcu7

2024-09-02 13:55:04

@npub149p…722q finally finishing that launchpad design you made almost a year ago 😀
http://cdn.hzrd149.com/e6523497fc8c71aecd5af337831326e0d774c25ae6cf3ac3e9440ea4d4df0631.png

2024-09-02 13:39:00

Doing some work on noStrudel
#naddr1qq…9tgh

2024-08-31 22:17:50

- reply

No I used a library called 3d-force-graph https://github.com/vasturiano/3d-force-graph

2024-08-31 22:14:48

- reply

Although it could also be a "accept cookies" like thing. so when the user first loads the app it asks them if they want to tell other users they are using it... 🤔

2024-08-31 22:13:29

- reply

Adding the client tag does not really change the security or privacy too much. IMO
Almost all clients have a distinct way they construct events (order of tags, supporting hashtags, mention tagging, etc) so it wouldn't be to difficult to fingerprint events and guess what client constructed them.
We kind of already do this in the nostrability repo when trying to figure out what client created bad or incompatible events
I made it opt-out because it wouldn't be very effective if every user had to go digging in the settings to turn it on. and as I said above it does not change much for privacy

2024-08-31 22:03:17

- reply

I wish I could make it as fast as native but I'm stuck in the browser with javascript 😭

2024-08-31 21:58:10

Whats better?
http://cdn.hzrd149.com/40400c0ed075d1bdc2c088cad33838cef6b2d4e4204949d3210106e6b5d5ad02.png
http://cdn.hzrd149.com/ff3fc0cee44c643afbca933eb80496c308ca675d4c155a0cfb26fbc448d94afc.png
I added an option to the display settings in noStrudel to show the pubkey color as an underline instead of a border around the avatar

2024-08-31 21:55:50

- reply

Added an option in the display settings to select where the pubkey color shows

2024-08-31 21:34:32

- reply

I think its good for app discovery and I don't think there is much of a privacy trade off.
I thought about making it off by default but then that would make it useless for discovery

2024-08-31 15:40:56

- reply

also pressing the right arrow or "l" on desktop will open the latest unread event

2024-08-31 15:33:12

Okay... Sixth and final version of the notifications view in #noStrudel
This one *finally* tracks what events have been read and lets you navigate the view using VIM or arrow keys.
I never bothered to make the app track the read / unread status of notifications because I thought it was just a nice-to-have feature.
But after I realized that the notifications should be treated more like an email inbox and not a timeline the read / unread status became very important
Its out now on the next version https://next.nostrudel.ninja and as long as I don't find any more bugs it will be in the next release v0.40.0 ( which is at least 4 month overdue... )
https://cdn.hzrd149.com/3ad5a262869dc06bc1c6f538a7c7b4a43103f64b014bf92e0dbc92da42a7e686.png

2024-08-31 14:03:00

- reply

welcome, what client are you using?

2024-08-31 08:52:41

- reply

I used a lot of the reference designs to get ideas and learn how to think about what the user wants to see
A lot of the time we default to trying to show everything, but if you take a step back and think about it you can find a way to show only what the user is looking for :)

2024-08-30 18:46:42

- reply

i haven't made any modifications to the notifications view yes. Despite how much I dislike kind:1 being used as replies
I had a good chat with @npub1unm…d0j2 in Riga about the generic reply kind and I need to read over the current NIP again but if its in a good state I want to add a generic "replies" section to the notifications in nostrudel so other apps don't have to use kind:1

2024-08-30 15:50:25

- reply

It was never there. The profile editor view is pretty old and when I built it there wasn't a standard field for banners 😀

2024-08-30 15:45:54

Finally adding an account management view to #noStrudel so users can export their nsec 😀
I'm not going to add NIP-06 support because I don't see it being used much, but If you want it and know how to write react code, please open a PR
http://cdn.hzrd149.com/2d5808710748bc0a5b6a862086ed8154fb05df9b84f87855687be7ef86b1fc5d.png

2024-08-30 15:37:41

- reply

yes, although its really far behind the next.nostrudel.ninja version because I've been procrastinating on releasing v0.40.0

2024-08-30 14:28:00

- reply

I used it a bunch when building noStrudel, although I have not looked at it recently

2024-08-30 14:27:04

Just a heads up for those using the next version of #noStrudel. I added a new option to add NIP-89 "client" tags to events that are published from noStrudel
NOTE: This is going to be turned on by default because I think its great for discoverability. feel free to turn it off if you don't like it
http://cdn.hzrd149.com/b9b1bc9c2827c5a727970a1312e865345f817ba2912e8490d06860ff1c1cb575.png
If your self-hosting noStrudel this will be off by default https://github.com/hzrd149/nostrudel/blob/next/dockerfile#L16

2024-08-30 13:16:12

#asknostr are there any apps for managing NIP-51 relay sets?

2024-08-30 12:12:12

- reply

really rough draft of a cli tool for converting videos to HLS them uploading them to blossom servers https://github.com/hzrd149/blossom-hls-upload

2024-08-30 12:09:09

Testing something....
https://cdn.hzrd149.com/524fc34fd805bf4157cea4ad257c21e1ba43c35a58923c76e9fe038d849714d6.m3u8
play video using hls.js web app https://hlsjs.video-dev.org/demo/?src=https%3A%2F%2Fcdn.hzrd149.com%2F524fc34fd805bf4157cea4ad257c21e1ba43c35a58923c76e9fe038d849714d6.m3u8

2024-08-30 09:58:55

- reply

I got lazy when adding NIP-13 into the app. adding pow to the app was a fun project for me to understand how it works
IMO pow does not solve spam and so I didn't bother to implement it anywhere else besides when making a new post

2024-08-29 03:40:24

- reply

might be cool to show number of notes and last time they posted instead of followers

2024-08-28 13:42:33

- reply

He seems to be solely focused on CEO being arrested. It sounds like he is not considering that the CEO of telegram was arrested because he was a single point of failure. Not only because he didn't censor
"Nostr CEOs" could be arrested for not censoring, but IMO its a lot less likely since none of us are a single point of failure for nostr

2024-08-28 12:59:14

- reply

technically speaking nothing, although if you want to make a recommendation algorithm you need a lot of data. And you would have to scrape nostr

2024-08-28 12:56:05

- reply

nws is cool, but too inefficient for just hosting static files

2024-08-28 09:23:34

- reply

Always glad I never had a twitter account

2024-08-28 09:18:59

- reply

lol, these people are so desperate for attention

2024-08-28 07:50:27

- reply

i always wanted to test this myself

2024-08-27 16:58:09

- reply

start replying to people and browsing hashtags, you'll find a bunch of people to follow in no time

2024-08-27 13:28:12

- reply

This is also an issue in many web clients since most qr scanning libraries send the video directly to the zxing-js library without inverting it

2024-08-27 13:22:39

- reply

If your using the docker container you can use the tags like @0.39 to get a specific version or @next to pull the latest
There are a bunch of tags but github does not provide a good UI for browsing them https://github.com/hzrd149/nostrudel/pkgs/container/nostrudel

2024-08-27 11:30:23

- reply

Sorry my bad, typos.... I meant replay attacks
There is a security concern only if the intention is for the content (nostr event or blob) to stay on a single server. however if the intention is to publicly broadcast it then these replay attacks in nostr and by extension blossom are actually what you want
With regards to users getting charged twice for uploads. again its depends on how you look at it. however if your intention is to *only* upload to a single server and keep the file on that server then its an attack
If your intention is to broadcast that file then the second server is simply charging you for an extra backup and hosting of your public data

2024-08-27 11:13:57

Notifications are an inbox, not a feed... I don't know why it took me this long to realize this but I think I finally found a good solution for showing notifications in #noStrudel

2024-08-27 11:07:47

- reply

Yes it supports relay attacks. just like how when publishing events to nostr relays allow reply attacks (those relays to reboardcast to others).
blobs on blossom are intended to be public (due to lack on encryption) and similar to nostr events are intended to move and spread throughout the network.

2024-08-27 11:04:09

Browsing through some hashtag again and there are a lot more artists on nostr than I remember. A few good ones I found: @npub15ej…p58q @npub1jdy…vqya

2024-08-27 10:42:30

RFC on a PR for #blossom
https://github.com/hzrd149/blossom/pull/24
It clarifies the wording around the "x" in authorization events and allows authorization events to have multiple "x" tags
This would allow clients to ask the user to sign a single auth event and upload multiple blobs. this will come in handy if users want to upload HLS videos or lots of html,css,js files 😉

2024-08-27 08:29:23

- reply

There are some that require NIP-42 to load DMs but I don't know any block them

2024-08-27 08:17:13

@npub1de6…q0sd there is a new option in the next version of #noStrudel http://cdn.hzrd149.com/8d18c284c8aca8162bde5a6f148d393b5ea4ff23d3b493923110e65b282756a8.png

2024-08-27 08:10:44

- reply

Id love to, I just haven't had a chance to rebuild the emoji picker yet to show all possible emojis

2024-08-27 07:02:30

- reply

yeah, it confused me because I keep a list of people I bully and your not on it 😅

2024-08-27 06:53:51

- reply

I have never mentioned or replied to you, but I did like one of your posts in 2023
Receipt proving this https://next.nostrudel.ninja/#/tools/console?filter=%7B%0A++%22kinds%22%3A+%5B%0A++++1%2C7%0A++%5D%2C%0A++%22authors%22%3A+%5B%0A++++%22266815e0c9210dfa324c6cba3573b14bee49da4209a9456f9484e5106cd408a5%22%0A++%5D%2C%0A++%22%23p%22%3A+%5B%0A++++%228f44c56131b362668b0e01be8c71b24786598bb68fb909cfd78fabfb058dd0f0%22%0A++%5D%0A%7D&relay=wss%3A%2F%2Fnostr.wine 😀

2024-08-27 06:39:50

- reply

yeah i just noticed that, it looks like its failing to upload... 🥲
don't worry about it too much, at some point I want to stop using Cloudflare or AWS in favor of hosting the app on blossom servers

2024-08-27 06:05:19

- reply

It worked... I could have sworn I tried that before and it didn't work...
Either way thanks for the help 👍

2024-08-26 06:59:35

https://nips.nostr.com is very useful

2024-08-26 06:33:54

- reply

I've been using https://fleek.co/ to host next.nostrudel.ninja although it does not let me set custom HTTP headers so I cant fix an issue where its blocking connections to localhost
I haven't looked into Cloudflare pages, but I'm hesitant to put the site behind cloudflare since its just a bunch of html, css, and js files and its not like it needs DOS protection

2024-08-26 06:06:55

#asknostr can someone help me with noStrudel S3 deploy? I'm trying to switch the next version over to being hosted on AWS S3 but I cant get the github action to actually deploy
https://github.com/hzrd149/nostrudel/actions/runs/10554429276/workflow
I have all the secrets setup and the IAM permissions but the action keeps failing...
https://github.com/hzrd149/nostrudel/actions/runs/10554429276/job/29236257623

2024-08-26 05:57:49

- reply

yes, the dev version compiles every file individually. if you run "yarn build" then "npx serve dist" you will get the compiled production version
If you also have a web server you can copy the contents of the "dist" directory there to host nostrudel on the website

2024-08-26 05:42:46

- reply

Now that's strange, that view should only be showing lists created by you
Maybe there is a relay that is returning extra and the app isn't checking 🤔

2024-08-25 03:35:59

- reply

Welcome

2024-08-24 16:08:56

- reply

I've been using amber to login to almost all of the apps I use
https://github.com/greenart7c3/Amber/releases

2024-08-24 04:29:31

I couldn't agree more with this
#nevent1q…73vl

2024-08-23 17:45:13

- reply

Dude, how did we miss each other? I was sitting really close to there

2024-08-23 14:51:04

@npub180c…h6w6 GM

2024-08-22 04:57:50

- reply

Congratulations

2024-08-22 03:43:42

- reply

what changed? do you mind opening an issue here https://github.com/hzrd149/nostrudel/issues and ill try to get it prioritized

2024-08-21 13:25:10

Last flight before #Riga 😀
https://cdn.hzrd149.com/2615238e7198eb8408b9c7e07247c3c207444e1a606abe1f085f9c5eab898bfe.jpeg

2024-08-21 11:07:30

- reply

I fixed a few connection issues a while back but nothing to make it faster, it must be the signed apps getting faster

2024-08-21 00:44:24

Hanging out in Chicago waiting for the next flight
https://cdn.hzrd149.com/56b4f6f9f5a401b71ad0ea2be4eca6396108dba70bbb11e6338ad17b1269deb1.jpeg

2024-08-20 21:01:18

- reply

fixed in hyper-address@0.1.2 👍

2024-08-20 15:22:29

- reply

Its hosted on a small VM in the cloud, so not really behind a firewall. but I was still curious if everyone was able to access it

2024-08-19 17:03:26

Okay lets see if this works. I setup a server and made it available on hypercore using #holesail
Its connection string is 066ed92add0f1b000409816229bfcb6bcf9bdf3ec0d73ff010a61d688fe4e830
For anyone who has nodejs installed, There are two things I want you to test
First connecting to the node using holesail cli. You can do this by running the `npx holesail 066ed92add0f1b000409816229bfcb6bcf9bdf3ec0d73ff010a61d688fe4e830` command then opening http://127.0.0.1:8989/
If it worked you should see the nginx welcome page 🎉
Next I want to test using the SOCKS5 proxy I built
To start the proxy you can run `npx hyper-socks5-proxy start` then you will have to follow the instructions in this note to configure FireFox to use that proxy
#nevent1q…kk2f
Once you have firefox setup you should be able to go to this address http://hypr1qehdj2kapudsqpqfs93zn07td08ehhe7crtnluqs5cwk3rlyaqcqdhsfwd.hyper/ and see the nginx welcome page 🎉
Let me know if you were able to connect, and if not what error you got
@npub1h5t…45z5 @npub1h8n…rpev and anyone else who is interested

2024-08-19 16:53:05

- reply

Please feel free to add it to holesail or copy and take over the project. I'm not going to have time to add features or maintain it
My goal was to build a proof of concept that would allow any app to connect to hyper nodes without needing to be written in NodeJS or integrating hyperdht
Also there might be a way to roll this into a mobile app like Orbot. since I'm pretty sure Orbot is doing the same thing on mobile
@npub1h8n…rpev SOCKS5 is what every app (browser, bitcoin wallet, etc...) use to interface with Tor. they don't directly talk to the Tor network but instead talk through a proxy that in turn talks to Tor
This SOCKS5 proxy allows any app that supports routing traffic through proxies to connect to .hyper domains, which are just the pubkey key of any hyper node

2024-08-18 16:57:32

- reply

But stolen from who? Don't worry I wont tell them, I just want to steal it myself and use it :)

2024-08-18 14:44:58

- reply

Who made that nostr logo at the end? I love it

2024-08-18 04:01:16

- reply

Technically no, although there is no way to know if browsers or other apps have restrictions on domain length. could be even some libraries restrict it to 63 char
Even Tor .onion and I2P domains are encoded to be less than 63 char

2024-08-18 00:42:46

Has anyone used https://www.casaos.io/ before? looks a lot like UmbrelOS

2024-08-17 20:37:45

- reply

Would it be possible to implement nostrscript on top of any database architecture or does it require nostrdb?
I'm working on something that is going to gave a generic database of events, and if your writing algorithms using WASM it would be cool if I could reuse them

2024-08-17 18:48:27

- reply

where can I learn more about this nostrscript thing?

2024-08-17 18:45:42

- reply

In short, I don't know.
I only have a vague idea of how hypercore works. I've looked at some of code but I don't know enough about IP and networking to fully understand it
It does seem to use encryption when connecting to another hypercore node and it does seem to be able to make a direct P2P connection to another node ( at least a lot more than WebRTC can )
But I doubt this as private as Tor or I2P since they seem to be using NAT and holepunching to connect the machines. which probably exposes your IP address to other the peer
I simply built this on top of the `holesail` and `hyperdht` packages that seem to work really well from my testing 😀

2024-08-17 17:55:11

- reply

@npub1h5t…45z5 @npub1h8n…rpev you guys have used hyperdht the most. If you don't mind could you test this an tell me if it works on your computer. I don't want this to be a case of "well it works on my machine" 😀

2024-08-17 17:52:24

Well jokes on me because this code actually works, I just never finished it enough to fully test it
#nevent1q…7jdy
So without further ado I present to you Hyper SOCKS5 Proxy
This is a SOCKS v5 proxy server that can automatically connect to HyperDHT node and Holesail servers. This is cool because it lets any application that already supports SOCKS5 or HTTP proxies ( mainly web browsers ) to connect to hyper nodes
Let me show you can example
First we have to startup a http server and use holesail to make it available on hyper
http://cdn.hzrd149.com/6c9a90465b9ffa3c288418dfda70b61e2bc16e245f1de5be1ff5c2e207af7bf3.png
Next, on a different machine we can connect to it using hyper-socks5-proxy and configure FireFox to use the proxy
https://v.nostr.build/3bcbJMX7XbaWMdfA.mp4
NOTE: besides this example ( tested on my LAN ) I have not tested anything else. but in theory it should be possible to host relays over hyperdht
The reason I had to convert the hex connection string ( hyperdht pubkey ) into a bech32 address was because the maximum length for a domain name is 63 characters. and the connection string is 64...
But encoding it to bech32 with a 4 character prefix makes it only 58. Its identical to how nostr npubs are encoded
Anyways here are the links to the code if you want to play around with it
https://github.com/hzrd149/hyper-address ( https://hzrd149.github.io/hyper-address/ )
https://github.com/hzrd149/hyper-socks5-proxy
https://github.com/hzrd149/hyper-http-proxy
This is also available on my custom umbrel app store. If for some crazy reason you want to run my untested code on your lightning node ( please don't )
https://github.com/hzrd149/umbrel-community-app-store
#pear #hyperdht #holesail #proxy #socks5

2024-08-17 02:39:59

- reply

Interesting, although I don't think I like the taste of mocha as much as coffee :)

2024-08-16 23:55:10

Two cups of coffee this morning and I'm just now starting to come down from the high... That stuff is powerful, how you all drink it everyday?
On the bright side I wrote a ton of code :)

2024-08-16 21:01:10

- reply

wow, okay. hopefully the AI does not get too confused with all my spelling mistakes in the spec 😀

2024-08-16 20:36:41

- reply

What?... There is no server tag in the blossom authorization event....
Are you trying to make the AI summarize it?

2024-08-16 20:29:04

- reply

oh... I thought it was over