boilerhodl

I'm not sure either. Since essentially no one is talking about the article or even aware of it around here, we're just letting it disappear quietly. No need to bring any attention to it.
If it gains any sort of traction, we'll certainly respond then.

2023-11-30 15:59:04 UTC

- reply

Thanks for posting, JD! I've passed the link around to local people.
I was wondering if AboutBit would ever catch any FUD. Lots of false information in that article. I'm digging through the sources now to understand the reasoning behind some of their false claims.
I guess Indiana mining is starting to get noticed. 🤷

2023-10-31 02:53:49 UTC

I wrote a guest blog post for @npub1wu4…3vw0
demonstrating Megawatt's use of TAPSIGNER for 2-Factor Authentication. Check it out! 👇
https://blog.coinkite.com/tapsigner-for-2fa/

2023-10-26 12:15:25 UTC

- reply

Bad link in previous post LOL :-) -> use megawatthq.com

2023-10-26 12:12:50 UTC

- reply

Check out megawatthq.com 👀 for all of your miner hosting needs! The company was founded at the Indy Bitcoin meetup, so get out there and support your local #Bitcoin groups. You never know who you'll meet.

2023-10-26 12:12:02 UTC

- reply

Will we implement this in production? We'll see, but it's been a fun project and the TAPSIGNER is a great product!

2023-10-26 12:11:46 UTC

- reply

One alternative is we could only use the TAPSIGNER for authentication. Just scan it, type in your PIN, & you're authenticated, no username/password needed. If you lost your Tapsigner, an attacker would still need to know your PIN to authenticate, which is now not on our server.

2023-10-26 12:11:26 UTC

- reply

If an attacker had your TAPSIGNER, they'd still need your username/password to authenticate and vice versa. We don't secure funds with these Tapsigners. They are only for 2-factor authentication, so the Best Practice violation seems like a reasonable trade-off for this use case.

2023-10-26 12:11:08 UTC

- reply

What is the Best Practice violation? Never store a PIN code! We're storing it on our server to provide a better user experience (UX) when scanning the TAPSIGNER. After entering a username & password, you wouldn't want to then have to enter the PIN on your phone.

2023-10-26 12:10:52 UTC

- reply

Our server uses a secp256k1 implementation to verify the ECDSA signature against the digest and the master xpub (public key) of the TAPSIGNER. If that signature is valid, the user is authenticated.

2023-10-26 12:10:35 UTC

- reply

The app then prompts for your TAPSIGNER to be scanned. After a certificate check to verify the authenticity of the card, the Tapsigner signs the digest and the signature is returned to our server.

2023-10-26 12:10:18 UTC

- reply

After our server authenticates your traditional username and the hash of your password, it returns a digest/nonce (a number that should only be used once) and the TAPSIGNER CVC/PIN code to the mobile app.

2023-10-26 12:10:01 UTC

We've added TAPSIGNERs as our 2-factor authentication method for the megawatt.com app! 🧵👇 with a more technical explanation. In this demo, we're violating one of the Best Practices recommended by @npub1wu4…3vw0. Can you spot it? @npub1az9…m8y8 @npub1a7a…t00e @npub1guh…6hjy @npub1a2c…w83a
https://v.nostr.build/nM6o.mp4

2023-10-26 11:47:06 UTC

- reply

You can also use TAPSIGNERs as 2-factor authentication for any app. They're really useful signing devices. Twitter thread with a demo video:
https://twitter.com/boilerhodl/status/1708981755280007631?s=19

2023-10-08 22:57:35 UTC

- reply

Yes, it does.
https://image.nostr.build/9fee4bbf3383979b1c538d1baceeaab18b1b75dfbf962be6097583644487a226.jpg

2023-10-07 02:05:04 UTC

- reply

You make a hell of a caucasian, Jackie.

2023-10-06 03:24:35 UTC

- reply

Songs from the Big Chair is a great album. Saw them tour last year with Garbage. Here they are now:
https://image.nostr.build/2a5538ee1e3cc34222350f9a56f411f322e28453024e7467e80e7f860faec66d.jpg

2023-09-12 04:15:57 UTC

- reply

Same. We've hiked in the San Juans a few times, but nothing that serious or more than a day. Definitely want to level up and try something like that, though.

2023-09-11 21:04:11 UTC

- reply

My wife and I love the San Juans. Are you hiking from Ouray to Telluride?

2023-08-24 12:41:35 UTC

- reply

Excited to read it!

2023-08-18 18:34:31 UTC

- reply

#nevent1q…2xs4

2023-08-13 12:57:09 UTC

- reply

Do you speak German, Lyn?
My wife and I were in the Black Forest visiting some family friends a few months ago. Loved that area of Germany along with Bavaria. The kids liked feeding the eichhörnchen.
https://cdn.nostr.build/i/5c6165b90960f838e16add09b19fa01cf91297fb73c7ee30b13e17de96d04ef4.jpg

2023-08-13 03:29:29 UTC

- reply

I feel so lucky to be born in the 80s and to grow up in the 90s.
Will Smith Summer blockbusters were awesome. Just carefree fun movies.
My little brother watched the Pokemon cartoon in the late 90s. Kids today still LOVE Pokemon. What's the reason for its longevity? All my friends kids (aged 5-8) carry cards with them and I chat with them about it.

2023-07-29 12:54:32 UTC

- reply

Meteora is great. My pick is any Deftones album. Honorable mention to any Rage Against the Machine album.
https://cdn.nostr.build/i/f24c26d11c796a2aec57d93721f94151dc57d62c41d928f0f5f8162a191c0490.jpg

2023-07-25 12:34:32 UTC

- reply

Lyn, a question I always try to answer about scarcity in Star Trek. The Federation is a post-scarcity, no money society, so let's imagine this:
Let's say the most desirable place to live in all of the Federation is in the top floor unit of a high rise building overlooking Starfleet Academy in San Francisco. The view, location, etc. are unparalleled and cannot be matched by any other living space. Everyone agrees this is the most desirable location and there is, of course, only one of these units.
How does the post-scarcity, no money Federation society decide who gets the unit?

2023-07-15 18:59:59 UTC

- reply

This is true

2023-07-14 13:32:11 UTC

- reply

#[2] #[3] #[4] #[5] #[6] #[7] #[8] #[9] #[10] #[11] #[12] #[13] #[14] #[15] #[16] #[17] #[18] #[19] #[20] #[21] #[22] #[23] #[24] #[25] #[26] #[27] #[28] #[29] #[30] #[31] #[32] #[33]

2023-07-14 13:18:42 UTC

- reply

#nevent1q…kwqq

2023-03-16 17:56:17 UTC

- reply

Was the website responsive? That would be impressive.

2023-03-01 20:21:04 UTC

- reply

For sure. We're still here racking.

2023-03-01 19:30:15 UTC

New container racking day. That sweet smell of brand new ASICs.
https://i.imgur.com/FD4Ane6.jpg

2023-02-20 14:26:28 UTC

- reply

What are your recommended paid relays?

2023-02-19 23:51:27 UTC

- reply

Yep, great guy!

2023-02-19 23:50:10 UTC

- reply

Good luck @ Launchcode. We used to hire from there @ WWT.

2023-02-19 23:29:49 UTC

- reply

Yep, grew up there and lived there until about a year and a half ago.

2023-02-13 18:23:11 UTC

#[0] Who is your favorite guitarist of all time? Mine: Tom Morello.
Also, do you play?

2023-02-13 18:20:39 UTC

- reply

I’m jumping back and forth between Amethyst and Iris now. They are both great options.

2023-02-11 15:45:04 UTC

- reply

Works fine for what I need, which is mainly lurking, but I haven't tried the other Android apps yet. I need to do that to compare. I used Damus on my MacBook during the testflight, but needed to get a phone app to actually use Nostr regularly, so pretty much dropped that. These apps are updating quickly, so the features are always changing and I'll be jumping back and forth a bit until I find what I like.

2023-01-26 18:06:44 UTC

First post from the Nostros app on Android.