Nostr notes by TheButterZone

Are you watching the series in reverse order? LOL

2026-05-31T05:06:40Z

In reply to nevent1q…4hxy
_________________________

Are you watching the series in reverse order? LOL

25 for me

2026-05-28T16:21:28Z

In reply to nevent1q…hd02
_________________________

25 for me

tl;dr L1 allows me to be effectively self-sovereign for free One ...

2026-05-26T02:48:45Z

In reply to nevent1q…u4xx
_________________________

tl;dr L1 allows me to be effectively self-sovereign for free

One of the biggest value propositions for me has always been that I can put 1 of my bitcoin addresses out in public & not need any technology or a third-party provider (nightmare nightmare nightmare!) for fund management between the time it's generated & the time it's spent from. So, I use L1 exclusively.

P.S. I feel like I'm probably doing more than my part for society already & any recyclables I cash in don't really even the karmic balance. In addition to my litter collection I described above, I'm also hunting/killing cockroaches in the street around midnight (first spotted this month), reporting vandalism, bulky illegal dumping, discharge of pollutants into storm water drains, stolen shopping carts, dead animals that may need testing for zoonoses, trespassers encamping on private property, moving reusable illegally-dumped items to better locations & putting them on Craigslist free... overwhelming trying to remember everything from on patrol.

My city has a public reports website where everyone can see things everyone else reported (except 911 calls & some other exceptions), and it's rare that I see anyone else had reported something in my immediate neighborhood. I also have email alerts set on Craigslist & I almost never see neighbors posting their stuff as curb alerts, they just curb it & skip the alert.

P.S. In case this was why you're asking them, this isn't ...

2026-05-24T08:42:44Z

In reply to nevent1q…tq44
_________________________

P.S. In case this was why you're asking them, this isn't intended to allay their privacy concerns whatsoever; as indicated in my opening para,
this is only about adding BTC QC theft prevention (with a good enough passphrase).

Took me too long to realize/properly interrogate Gemini that QC compromise of an nsec merely from the npub will also compromise even-y p2pkh & p2wpkh deterministic addresses from that npub & all coins sent to them.

I suppose if you wanted to (or even could) add a p2tr payment target that overrides your on-chain Zap address, code can also be written to salt your nsec & output that instead of p2pkh & p2wpkh addresses & WIF only. But someone not me, should try that.

Did you receive any payments (or could you have) while it was ...

2026-05-24T06:16:34Z

In reply to nevent1q…l3xg
_________________________

Did you receive any payments (or could you have) while it was unattended those two months?

Found in this bag next to the sidewalk 5-23-2016 ...

2026-05-23T20:04:23Z

In reply to nevent1q…zqmc
_________________________

Found in this bag next to the sidewalk 5-23-2016

The only real risk to everyone (who doesn't need 24/7 ...

2026-05-23T17:21:30Z

In reply to nevent1q…2krn
_________________________

The only real risk to everyone (who doesn't need 24/7 guardianship/caregivers & can easily keep on-chain zap coins from being spent with any others) is that it's not public key hashed addresses, it's Taproot:

https://primal.net/e/naddr1qvzqqqr4gupzqtshhpkkjtyhnw6m0skah8msuqh8dw7rtzh6jkkxsy6sg7a7zrszqqk8gctswfhk7arn943xjem8v4ez6ct5w3skx6edwejkxar0wgkhg6rpdckkvat5w4ex2tt3vvhqvqgk

Perhaps the first on-chain zap was discovered to have been ...

2026-05-23T17:03:35Z

In reply to nevent1q…l8tn
_________________________

Perhaps the first on-chain zap was discovered to have been received 3 years ago...

https://primal.net/e/nevent1qqspkeev0047sw9tc28lf4vrqr7feaxr0q6688ck3aa09lc6j3h7apgpve4eq

And then came this thread the next month in 2023... https://bitcointalk.org/index.php?topic=5473719.0

Can't put the genie back in the bottle, or undo the laws of cryptography; in Python, anyone can derive a bitcoin address from virtually any data.

The only way to "win", is to not play against all human/machine-kind - don't even generate a npub/use Nostr, in the first place.

Since I'll only use L1, gotta resist the urge to mentally ...

2026-05-23T16:52:42Z

In reply to nevent1q…q7s5
_________________________

Since I'll only use L1, gotta resist the urge to mentally check out whenever I see Lightning/L2/zaps/sats, but...

I thought of a similar program but inverted? People can get paid BTC in advance to drop their recycling in public & post a location photo, so whoever picks the recycling up can cash in at the minimum fixed per-pound rates set by the state. https://bitcointalk.org/index.php?topic=5582600.0

P.S. While I pick up neighborhood litter, on average every week it's not big bags' worth. I just separate the organics/recycling/textiles/trash & stuff that could be recycled but is excluded as such from municipal bin collection. I almost always fit the week's littered trash into my partly-filled kitchen trash bag & that's all the municipal collectors get in that bin (which has way too large a capacity for almost everyone, who got it by default/opt-out).

They say; not my website, and I don't really want to run ...

2026-05-21T10:03:18Z

In reply to nevent1q…e0fl
_________________________

They say; not my website, and I don't really want to run Sparrow because that would be a lot of time/money getting something compatible.

🖤 🤣 Hell yeah! ...

2026-05-21T04:34:24Z

In reply to nevent1q…4zv5
_________________________

🖤 🤣 Hell yeah! https://primal.net/e/nevent1qqs8cva22y2nnnuqahgyufx3xn4umgvu5ccrf9wtk6qnng4f9fqnfls4g8j6y

npub>P2TR (Taproot) https://nostrfinance.com/wallets/overview/

2026-05-20T16:35:52Z

In reply to nevent1q…ph2z
_________________________

npub>P2TR
(Taproot)

https://nostrfinance.com/wallets/overview/

Is NIP-26 a no from you?

2026-05-20T13:42:16Z

In reply to nevent1q…r6s2
_________________________

Is NIP-26 a no from you?

The open-sourcing of Google Authenticator might have been the ...

2026-05-20T04:45:02Z

In reply to nevent1q…dljq
_________________________

The open-sourcing of Google Authenticator might have been the only good security thing they provided to the public. Although the devs of RFC 6238 (TOTP) & RFC 4226 (HOTP) should deserve most of the credit.

Doesn't have to be, if the sender could just send from their ...

2026-05-20T04:31:47Z

In reply to nevent1q…8j2y
_________________________

Doesn't have to be, if the sender could just send from their non-Nostr-linked wallet to the receiver's Nostr-derived zap address.

Pretty sure it was one of them who posted "anyone want ...

2026-05-20T04:29:22Z

In reply to nevent1q…an2f
_________________________

Pretty sure it was one of them who posted "anyone want on-chain zaps?" or something to that effect, so at least everyone saying yes in the replies should have gotten them.

Me personally, as I was shocked to discover they made on-chain ...

2026-05-20T03:32:38Z

In reply to nevent1q…43l7
_________________________

Me personally, as I was shocked to discover they made on-chain Zaps go via p2tr instead of p2pkh or p2wpkh, I don't plan to spend/save them at all, they're burned.

Academically (for people who think Taproot is fine), I would say if people transfer Zap sats to cold storage, they should dedicate one cold storage address for receiving all their coins they ever received at a public address that was associated with their identity (whether actual or same-pseudonym). That means all the Zap sats go there, all the p2pkh & p2wpkh tipping/donation address coins also go there, and then that cold storage address either already was separate from every other address by keeping it as a paper wallet or 1-private-key-only wallet file or at a minimum, frozen & labeled as cold storage within their main wallet. Any of those would be simpler than coin controlling the cold storage UTXOs out of every TX.

Deleted/reposted to answer your second question in context with that last option, freezing it that way makes it that much easier to unfreeze & immediately add only the cold storage address to coin control if you ever want to spend the cold storage. Just make sure if you have a change output (I personally try to avoid spending a key until 100% of it goes to receiver with no change), it goes to a new change address that you label & then freeze (and burn/label as burned, the previous cold storage), because that's your new cold storage.

But it goes through somebody's services (have not been able ...

2026-05-19T16:38:40Z

In reply to nevent1q…ywp4
_________________________

But it goes through somebody's services (have not been able to get it to work with the mobile server app Mandacaru), left Google Play review:

Install on adopted SD (~19GB free) <-> internal storage
Set Electrum server to 127.0.0.1:50001 non-secure (Floresta/Mandacaru)
Flip the offline switch back & forth, server connects (no restart)
Scan a xpub & a zpub from Electrum desktop "Cannot read property 'length' of undefined" when I try to look at my transactions list...
Refreshing transactions of those imported watch wallets appears to host a game of "will it be no change, implausibly high balance, or lower balance vs what Electrum says?"

---
Mandacaru & Electrum Android work together ok, at least when Mandacaru finally finishes getting all the filter transactions via user rescanning over and over and over again. And its coin control is limited to freezing addresses & UTXOs vs picking them in the send transaction flow.

Everything may be "risk" but almost all risk assessments, ...

2026-05-19T15:51:47Z

In reply to nevent1q…x93m
_________________________

Everything may be "risk" but almost all risk assessments, are actually FUD.

Flipping through my memory of dozens-hundreds of notes I read ...

2026-05-19T15:47:18Z

In reply to nevent1q…qdkw
_________________________

Flipping through my memory of dozens-hundreds of notes I read about this, I think some of the devs' intent seemed to be around letting people break out of the circular zapping back & forth to infinity, but there was also amenability to adding some friction, eg. mixing out.

That's fine if it's an option, but there should also be a unilateral exit without friction or extra fees.

What does $10 even buy you these days?

Nostr event nevent1qqsz3fghehmppkldk9ut2vsaj5q66hyqwzatvc7v687vk0uqpn9jwgszyqhp0wrddykf0xa4klpdmw0hpcpww6auxk9049dvdqf4q3amuy8qy8ww68c

2026-05-19T15:36:58Z

In reply to nevent1q…6je4
_________________________

Which, if fully-honored, would mean every single one no longer ...

2026-05-19T12:04:50Z

In reply to nevent1q…8299
_________________________

Which, if fully-honored, would mean every single one no longer existing.

To whoever sent me that on-chain zap that I found with ...

2026-05-19T06:23:14Z

To whoever sent me that on-chain zap that I found with https://openetr.org/bitcoin/check-balance - consider it burned.

Please, nobody on-chain zap me; I won't do Taproot, so all you're doing is burning BTC.

Hey hey hey, no stolen valor! ...

2026-05-19T06:05:06Z

In reply to nevent1q…nuha
_________________________

Hey hey hey, no stolen valor!

https://en.wikipedia.org/wiki/Purple_Heart

Everything is always at everyone's own risk; no amount of ...

2026-05-19T06:02:52Z

In reply to nevent1q…ye7c
_________________________

Everything is always at everyone's own risk; no amount of warnings to this effect will ever be enough for paternalists, who act like it's possible for people who need 24/7 guardianship/caregivers to use bitcoin, let alone the internet, safely alone.

Maintaining proper public tip/donation address hygiene isn't ...

2026-05-19T05:52:22Z

In reply to nevent1q…6t46
_________________________

Maintaining proper public tip/donation address hygiene isn't difficult enough to, in good faith, consider receive-more-than-once reuse with burn/spend-all-to-0-only-once non-reuse, an antipattern.

How would having the p2pkh or p2wpkh address derived (without ...

2026-05-19T05:43:37Z

In reply to nevent1q…qv6e
_________________________

How would having the p2pkh or p2wpkh address derived (without vendor lock-in) from the nsec hurt peoples' privacy, if all they're doing is clicking a zap button with a bitcoin:[derived-address] hyperlink & no Nostr interaction is coupled with that?

That, at least, would be historically precedented, vs whatever Taproot/Craproot? stuff is cooking.

No way for me to opt out of people paying to a brainwallet ...

2026-05-19T05:34:39Z

In reply to nevent1q…r459
_________________________

No way for me to opt out of people paying to a brainwallet address derived from my handle, either. Cryptography doesn't give a F.

Say that in your bio?

2026-05-19T05:22:57Z

In reply to nevent1q…0nh0
_________________________

Say that in your bio?

Show me the message then, A-HOLE! ...

2026-05-19T05:01:47Z

Show me the message then, A-HOLE!

Nostr event nevent1qqsvsc8q9afujr6rum2ycd007evczz8wdaer95n3whl5wdxdqm0hqqczyqhp0wrddykf0xa4klpdmw0hpcpww6auxk9049dvdqf4q3amuy8qy7z85z2

2026-05-19T04:59:11Z

In reply to nevent1q…m48g
_________________________

https://primal.net/e/nevent1qqsyc4uwm37k6l85ljmf2g9rm28d79xn462n8kzkk8t4yggrag89hac50uxwy

Don't forget the sauce, boss! ...

2026-05-19T04:57:41Z

In reply to nevent1q…ku8v
_________________________

Don't forget the sauce, boss! https://openetr.org/bitcoin/check-balance

Have you come across NIP-26 root/child key delgation for posting ...

2026-05-19T04:50:51Z

In reply to nevent1q…8qj0
_________________________

Have you come across NIP-26 root/child key delgation for posting that keeps the root key safe for payments only? I think I just did yesterday after wondering why there were extra 2 pubkeys in https://iris.to/settings/devices (now deleted, may make some new ones safely).

Nah, forever undefeated will be people who publish their ...

2026-05-19T04:44:57Z

In reply to nevent1q…hws5
_________________________

Nah, forever undefeated will be people who publish their P2PKH/P2WPKH/P2SH tip/donation addresses from accounts required to be more tied to their actual identities than Nostr. Except we're not incompetent to the point of needing 24/7 guardianship/caregivers, we know how to coin control.

Too bad for totalitarians, that the fundamental rules of cryptography can't be broken to make it impossible for anyone to know how to pay anyone else.

Nostr event nevent1qqs8a8trhupvv60cth7l60z3vhg3gsw0kwsvy0ygak3eu06peu2j6tszyqhp0wrddykf0xa4klpdmw0hpcpww6auxk9049dvdqf4q3amuy8qy409k7h

2026-05-19T04:35:28Z

In reply to nevent1q…ye7w
_________________________

https://primal.net/e/nevent1qqsv2g6acwngx3hh2jyznnnthgkevvtvl9r3shvdqh4xpxrse5jqzrc5ng5qx

JFC, cringe! Stop using Kill Your Customer exchanges, EVERYONE!

2026-05-19T04:35:04Z

In reply to nevent1q…ld82
_________________________

JFC, cringe! Stop using Kill Your Customer exchanges, EVERYONE!

What's the issue on the sender side? Do you even ...

2026-05-19T04:33:00Z

In reply to nevent1q…8wem
_________________________

What's the issue on the sender side? Do you even ̶l̶i̶f̶t̶ coin control, bro?
"your entire onchain tx history"
You're not tipping people with transactions that spend every single UTXO from every single address in every single wallet you have, are you?

Resorting to accusation of mental illness & egotism isn't ...

2026-05-19T04:24:44Z

In reply to nevent1q…lfx8
_________________________

Resorting to accusation of mental illness & egotism isn't debating. Each individual has the right to decide qualitative tradeoffs.

No matter how "easy" it is, I don't want an integrated or standalone LN wallet & I see Nostr as pathologically bound to L2 with no truly meaningful way to receive frictionless L1 payments (putting tip/donation address in bio is barely meaningful).

bITcOiN Devs sTilL haven'T MaDe it ImPosSIBle tO derive FROm ...

2026-05-19T03:39:01Z

In reply to nevent1q…5fye
_________________________

bITcOiN Devs sTilL haven'T MaDe it ImPosSIBle tO derive FROm pRActICAlLY anytHING & SHAre ADDrESses pUBLicLy fOr Tips/DoNAtIoNs?

dO YOu Even KnOW how TO BREAK THE FuNDaMENtaL LAwS OF cryptOgraphy?

aRe YoU COMPletELy REtarDed?

https://www.freecycle.org/member/tbz1 #nevent1q…5nag

2026-05-19T02:26:30Z

https://www.freecycle.org/member/tbz1

quoting
nevent1q…5nag
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Donate to bc1qn5kua7a4r7xasgnd6mt4k5huv45gcm3rs545u2 & I'll offer equivalent value items to my Freecycle town (~11k members, limit 1 offer per member), until I run out of inventory.
https://bitcoin-otc.com/viewratingdetail.php?nick=TheButterZone&sign=ANY&type=RECV
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEwKYvetXBb7daFKINdQpmQMXklhsFAmoIbh0ACgkQdQpmQMXk
lhs4yg/+IjH9cC62sHYowcLkUzAsj4q7ZE1uLFZUAF1S7VXyAmVOJ6bl2I2WdOOK
g7PVDSbn990lnskH2p4stj1MGkA2W1Hlx0bruoMeKHW+Ndlby7ZxA4gHZkm+gNiW
vFh9gZdTyAroXpmHZSIeNv7dzJo6Ir1cOc+HVHBY+sD44vSJ9JKm6T1YW1v18tNJ
IrF0ZigcOTiHPNPSPcnMaXbp2viG6cn8sUu2uYxkkouZW4a+EcuQnw2WKmn8fcfb
TuE0vwweCOuis4VEMMErXlfabFSurIcJG1ZZOV3Adg+IigQ7VzlgdMBY1f92kBZ5
y1oW2ak/JO9Wfvd+XBe0u0+R8dBY7uxz40D4gG+6AeS7Th0PBn108I1EDPHYhOui
JFRZkuKgmMkyl24C0uJaDA03aXO/bYEJ+hMBhOcfsS5CbZvHLV4hbUlOi+WyYsYt
F0qiUrh/KDrPLU55MOUgAkfk8GEKJ3K5z7q44GD00BlQsnFRgwplzgmfPIB+royF
GRAvpmW3JRnd3ngd79DBw+XFAaN+9VnVjw1aInoQCFqp3tEbODSo2pR7IsR474Rw
sn2k/WUPBblQJffhE5p5CRXqM5tHmtcLQDmnYQ0ARjYnNP61NXE5LY3TdjuJvn+S
oP1WeByJu0pUONuoigSllERMMpOyNLohsKiIS8PxMK6TI4oKCcE=
=fKwe
-----END PGP SIGNATURE-----

1) AYFKM, moving the goalposts right now? You didn't have any ...

2026-05-19T02:16:59Z

In reply to nevent1q…e670
_________________________

1) AYFKM, moving the goalposts right now? You didn't have any qualifications with "Link me where that was said".
X, Twitter back then, is where I learned of Nostr for the first time because it was being censored by totalitarians.
2) Oh no, they didn't take into account every possible thing you could come up with in THEIR character-limited post! How dare they!

Goodbye.

If your thesis is that the masses aren't that careful, what ...

2026-05-19T00:43:15Z

In reply to nevent1q…ud8u
_________________________

If your thesis is that the masses aren't that careful, what you just described would not fit, because that's closer to "being careful" - sending or sweeping a bitcoin balance out of the Nostr combo client+wallet purpose-built to accept & manage on-chain zaps, or exporting/importing the private key from it as backup, into a separate btc wallet.

What does this btc wallet look like, anyway? Is it a crapware wallet that people installed despite negative reviews from Gigi & company, that it only has one receiving address & forces spending reuse?

HFSP

2026-05-18T18:31:40Z

In reply to nevent1q…fmzy
_________________________

HFSP

If "on chain zaps"=craproot instead of P2PKH or P2WPKH ...

2026-05-18T18:16:09Z

In reply to nevent1q…d22s
_________________________

If "on chain zaps"=craproot instead of P2PKH or P2WPKH derived from nsecs, then even 3 might be too many.

0.1 sat/byte, low time preference, frack fee estimation

2026-05-18T18:11:18Z

In reply to nevent1q…a2ju
_________________________

0.1 sat/byte, low time preference, frack fee estimation

ooga booga UTXO management problem permanent, coin control hard

2026-05-18T18:08:29Z

In reply to nevent1q…s3qd
_________________________

ooga booga UTXO management problem permanent, coin control hard

Indeed.

2026-05-18T18:05:58Z

In reply to nevent1q…a0xf
_________________________

Indeed.

Watch out for suuper professional K&R crews, they might think ...

2026-05-18T16:32:27Z

In reply to nevent1q…5ds9
_________________________

Watch out for suuper professional K&R crews, they might think the "131100" address balance means you just received $10,000,000,000 USD equivalent of BTC!

Might we see a payment target box on ...

2026-05-18T15:59:58Z

In reply to nevent1q…6kv6
_________________________

Might we see a payment target box on https://primal.net/settings/profile that allows P2PKH/P2WPKH/P2SH addresses & not just "Bitcoin Lightning Address"?

https://x.com/TaoistBitcoiner/status/1676276971821572109 "The ...

2026-05-18T15:48:29Z

In reply to nevent1q…ztg7
_________________________

https://x.com/TaoistBitcoiner/status/1676276971821572109

"The problem with using immutable identifiers based on our biometrics is that they can never be changed, so if/when leaked, the security breach of our ID is permanent.
Our #nostr identities have similar key management issues, but at least those are disposable & psuedo-anonymous."

https://x.com/mdhardcastle/status/1893736080437916065

"npubs (nsecs) are disposable, they are not an account or an identity.

This is not really understood by many people even on NOSTR"

No less FUD-ery with memes. ...

2026-05-18T14:25:20Z

In reply to nevent1q…xkja
_________________________

No less FUD-ery with memes.

https://primal.net/e/nevent1qqsfqppl9afhhj7kzl78gkyfr0m8xgwvj6d0p5xf8lx3jpazc8twl6qknvfmt

Kidnappers somehow simultaneously sophisticated enough to capture ...

2026-05-18T14:23:06Z

In reply to nevent1q…zxfj
_________________________

Kidnappers somehow simultaneously sophisticated enough to capture targets, but too unsophisticated to know that the "5000" balance on an on-chain zap address means all they get is the equivalent of $3.83 USD (as of Preev right now).

Those who are at that level of incompetence, in need of at least ...

2026-05-18T14:17:15Z

In reply to nevent1q…qcqv
_________________________

Those who are at that level of incompetence, in need of at least one person to act as their legal guardian & caregiver until death, don't need improvements, they need to be told, point blank: don't use bitcoin & it's not even safe for you to be alone using the internet, period.

I've never been a bitcoin evangelist & I don't believe anyone in this dev space can work the miracles needed.

AYFKM? They absolutely have, starting years ago; I've had ...

2026-05-18T14:04:39Z

In reply to nevent1q…dp4r
_________________________

AYFKM? They absolutely have, starting years ago; I've had multiple nsecs since then.

Meh, anyone who's put their P2PKH/P2WPKH/P2SH or whatever ...

2026-05-18T14:01:33Z

In reply to nevent1q…jhg8
_________________________

Meh, anyone who's put their P2PKH/P2WPKH/P2SH or whatever address on Nostr has already made the OPSEC tradeoff. The deterministic derivation just makes it a lot more dangerous for no-wrench funds loss (but only if anyone actually zaps more than 0 to it), since everyone's shuttling their private key around clipboards & possibly screens in the clear/no asterisks, for RATs to eat.

What's "retardarion"/retardaTion about pointing out ...

2026-05-18T13:52:03Z

In reply to nevent1q…azgx
_________________________

What's "retardarion"/retardaTion about pointing out that an npub & its associated on-chain zap address, both derived from the same nsec, can't be changed?

Why not just request "put in your own BTC address" fields that make each user's zap button turn into "bitcoin:useraddresshere"? I think everyone would prefer that at a minimum, with other options TBD added later.

A bunch of clients/interfaces I don't recognize (& ...

2026-05-18T13:41:48Z

In reply to nevent1q…gd8m
_________________________

A bunch of clients/interfaces I don't recognize (& don't particularly want to install now that I've seen Taproot enter the chat) have come across the feed, but if Nostr on-chain zaps were to get to the point where at least one client would just compute then let me copy my non-Taproot WIF under the nsec I logged in with (https://primal.net/settings/account is where it appears here), I would want to import that to my discrete Electrum wallet just to keep an eye out for any zaps. As it stands, the discrete wallet has the result of my own nsec-WIF computation, both the uncompressed & compressed ones. I wonder if either WIF private key would match or they'd do non-Taproot derivation differently than what I thought standard.

At a minimum, would like "put in your own BTC address" fields that enable my on-chain zap button turning into "bitcoin:myaddresshere" or whatever, sorta like X's app. Could have sworn I saw a note about that coming back to one Nostr client's UI that was broken & fixed, but I struggle to find that post again.

Do you have any links to instances of this actually happening? ...

2026-05-18T13:37:09Z

In reply to nevent1q…vj44
_________________________

Do you have any links to instances of this actually happening? Pretty sure everyone who was tipped more than 1 ₿ in what could be codenamed Operation Santaoshi back in 2012, have still not been targeted to this day & their meatspace addresses were definitely known to some.

Nobody with a brain who actually uses it properly will allow the ...

2026-05-18T12:53:03Z

In reply to nevent1q…8nh3
_________________________

Nobody with a brain who actually uses it properly will allow the on-chain zap address to touch their significant hodlings, whether by sending BTC they already had to the on-chain zap address, or spending from the on-chain zap address more than once (exposing the public key in spite of the normalized warnings about exposing public keys by spending from the same private key more than once), nor with other coins not frozen/controlled/fully-wallet-separated-away. Proper hygiene has been the norm for over a decade.

If you don't believe it or don't understand it, I don't have time to try to convince you, sorry.

Payjoin = #JustChangeOutputPrivatization? All I want to do is ...

2026-05-18T12:37:50Z

In reply to nevent1q…p3kw
_________________________

Payjoin = #JustChangeOutputPrivatization?

All I want to do is (when it's time to burn the nsec) consolidate all the on-chain zap UTXOs that were ever received into 1 output (where the hygiene starts anew)... no bloody change, ever!

https://en.bitcoin.it/wiki/Address_reuse Example 1: Not ...

2026-05-18T12:26:15Z

In reply to nevent1q…8t36
_________________________

https://en.bitcoin.it/wiki/Address_reuse

Example 1: Not applicable. Nobody is going to commit armed robbery to obtain anyone's minuscule on-chain zap amounts. And nobody with a brain who actually uses it properly will allow that address to touch their significant hodlings, whether by sending BTC they already had to the on-chain zap address, or spending from the on-chain zap address more than once (exposing the public key in spite of the normalized warnings about exposing public keys by spending from the same private key more than once), nor with other coins not frozen/controlled/fully-wallet-separated-away. Hygiene not difficult at all; the norm for over a decade.

Example 2: Exchange address is the one being spied on, N/A

Example 3: See #1

Example 4: So what if an exchange blocks transactions to your address? The exchange account-holder can ask you for a unique address.

Still not evident how Ditto "destroys privacy for the ENTIRE bitcoin network... fucking everyone, not just themselves". Do I need to look at Ditto's code myself & then learn to code after I realize I have no idea what I'm looking at? 🤣

I'd heard Taproot was bad, but does it show your on-chain ...

2026-05-18T11:51:52Z

In reply to nevent1q…0ded
_________________________

I'd heard Taproot was bad, but does it show your on-chain balance of every address in every wallet you have, or just of a single address derived from your nsec? 🤣

Clown World News at 11: person beaten with a wrench & robbed ...

2026-05-18T11:47:03Z

In reply to nevent1q…ufhv
_________________________

Clown World News at 11: person beaten with a wrench & robbed of the equivalent of $5 USD in bitcoin

Did the entire crypto industry normalise address reuse? When ...

2026-05-18T11:44:19Z

In reply to nevent1q…z0f0
_________________________

Did the entire crypto industry normalise address reuse? When industry wasn't around in the earliest days after Satoshi paid Hal P2PK for the first time, then P2PKH for public tipping/donation addresses became the first norm & warnings about exposing public keys by spending from the same private key more than once, were the norm everywhere I went for years, then a few P2SHs would pop up every so often?

Like OMG, I'm going to get wrench attacked because the only publicized address in my wallet with most minuscule amount of BTC of all, is associated with my identity! Satan forbid I use my brain & only spend out my public address's UTXOs in consolidation to a single fresh address, without linking any of the larger ones via coin control/freezing all other addresses/exporting the private key to a 1-key-only wallet!

If Nostr is hitching its wagon to Taproot for this instead of ...

2026-05-18T11:23:12Z

In reply to nevent1q…xz08
_________________________

If Nostr is hitching its wagon to Taproot for this instead of P2PKH or P2WPKH & no range of options that include pasting in my own of those P2s (whether they're derived from my nsec or just a typical seeded Electrum address), I'll try indicating as best as I can that anyone who zaps me is burning their BTC on the altar of Taproot.

Prequel reply?
https://primal.net/e/nevent1qqs8h9whjs7uqz4mtmm2l2zujva2uv4ys7c6ue40a77dgtmgj4j8mvc738ccl

Default or not (haven't seen any indication either way), it ...

2026-05-18T11:13:55Z

In reply to nevent1q…au7d
_________________________

Default or not (haven't seen any indication either way), it seems like "you can't stop the signal" because at this point, aren't what we're seeing is debate about whether there should be a GUI for seeing the signal that may have been possible for years? https://bitcointalk.org/index.php?topic=5473719.0

From what I gather, you can derive a P2PKH address from your nsec thusly:

In terminal: echo -n "nsec..." | shasum -a 256 (this gives you the 64-character bitcoin private key hex)

Then convert that to wallet import format, with BitAddress (offline) or...
Python
import hashlib
import base58

# 1. Your 64-character hex private key
hex_key = "YOUR_64_CHARACTER_HEX_KEY_HERE"

# 2. Add '80' for Mainnet (use 'ef' for Testnet) and append '01' (compressed)
# Note: Remove '01' if you want an uncompressed WIF
extended_key = "80" + hex_key + "01"

# 3. Double SHA-256 hash
first_hash = hashlib.sha256(bytes.fromhex(extended_key)).digest()
double_hash = hashlib.sha256(first_hash).digest()

# 4. Grab the first 4 bytes for the checksum
checksum = double_hash[:4]

# 5. Append checksum and encode to Base58
binary_data = bytes.fromhex(extended_key) + checksum
wif = base58.b58encode(binary_data).decode('utf-8')

print("WIF:", wif)

---
Then you import the WIF into your wallet, copypaste the corresponding address that appears to Nostr, and obviously freeze the public address in your wallet, or coin control the public away from the private transactions, or go nuclear & have a 1-private-key-only wallet for on-chain zaps.

Could a Nostr client not compute all that itself & along with the nsec, let you copy out the WIF for the derived bitcoin address?

Although... I saw mention of Taproot in a more recent noti (https://primal.net/e/nevent1qqs8tc9aspgcc72nj6u546a72kmj3vcxh8l2y9lx5rw0ap7unlnkd8s9rxz08) which would be a dealbreaker for me, if they're going that route instead of P2PKH/P2WPKH (more complicated) as on-chain zap addresses.

I said "as-is" & then you added nuance that was ...

2026-05-18T10:51:27Z

In reply to nevent1q…yx6j
_________________________

I said "as-is" & then you added nuance that was lacking but said I was wrong. Ok thanks bye.

🤣 It's been a long time since I've seen 100 BTC ...

2026-05-18T10:48:30Z

In reply to nevent1q…49rh
_________________________

🤣
It's been a long time since I've seen 100 BTC tips...

Nostr event nevent1qqsxedcnvs7se3vkhpmwrh3d7sqfa3qw7w4llu82tykx2cuczpk6dzszyqhp0wrddykf0xa4klpdmw0hpcpww6auxk9049dvdqf4q3amuy8qyn477aq

2026-05-18T10:46:25Z

In reply to nevent1q…weth
_________________________

https://primal.net/e/nevent1qqsfr4j9c3dxwxgd9tl7u6tt9lxa3wqlmnf70jgquvw5rw0y9rcc98cjd4huk

Simplest form of coin control without silent payments would just ...

2026-05-18T10:39:48Z

In reply to nevent1q…dp63
_________________________

Simplest form of coin control without silent payments would just be to have a one-private-key-only wallet for the on-chain zap address, and when you properly consolidate all its UTXOs into 1 output elsewhere (and burn the key/nsec), the hygiene starts anew for you (or the recipient, if it was an actual payment).

At least this ^. The only signal I need is L1 BTC directly to my ...

2026-05-18T10:27:43Z

In reply to nevent1q…vw23
_________________________

At least this ^. The only signal I need is L1 BTC directly to my address, with as little friction as possible (bitcoin:bc1/1... or an even better way). Whether others see this in a Zap GUI element, or on a blockchain explorer or watch-only wallet stalking my public tip/donation address... /shrug

Nostr event nevent1qqsq9s5ru2stl4h3u6nja9ze0cszgfu3dg8yhvfe03q9x00x0n4fh3gzyqhp0wrddykf0xa4klpdmw0hpcpww6auxk9049dvdqf4q3amuy8qyrqkyy8

2026-05-18T10:14:42Z

In reply to nevent1q…4f04
_________________________

Ah. https://primal.net/e/nevent1qqsppf085aw2849pc993fngkjeatjavh2rjetch0kcqtep64psgvjkgvasrj8

Linkable, but only actually linked if you either don't ...

2026-05-18T10:12:59Z

In reply to nevent1q…xmy0
_________________________

Linkable, but only actually linked if you either don't possess a fully functional brain or if you do, you don't use it properly. It isn't difficult at all.

Hyperbolic & profane, but would you like to explain how?

2026-05-18T10:09:29Z

In reply to nevent1q…nq8e
_________________________

Hyperbolic & profane, but would you like to explain how?

What is your actual objection (to what is bringing the option for ...

2026-05-18T10:08:06Z

In reply to nevent1q…gdw7
_________________________

What is your actual objection (to what is bringing the option for public tipping/donation addresses, longstanding all the way back to the first P2PKH & P2PK before that) other than profanity?

Nostr event nevent1qqs24lqf8dhh7w2zzwazdu6r4s80rcv0ju5hu0uj9j9ucsd4ecnydcczyqhp0wrddykf0xa4klpdmw0hpcpww6auxk9049dvdqf4q3amuy8qyzfedq4

2026-05-18T10:04:56Z

In reply to nevent1q…p2ej
_________________________

https://primal.net/e/nevent1qqsfxqpnjhhuk080emkvx4s7x9nmaz2yl8arkp32klk2tnc3lv3ppssjw6zjg

... as long as they trust Liquid whatever/whoever.

2026-05-18T09:58:52Z

In reply to nevent1q…7pp2
_________________________

... as long as they trust Liquid whatever/whoever.

Why so serious? The option to publish tipping/donation addresses ...

2026-05-18T09:54:19Z

In reply to nevent1q…mdyr
_________________________

Why so serious? The option to publish tipping/donation addresses has been around since P2PKH (and P2PK before that), and shouldn't be treated profanely as if a novel security vulnerability. It's just one address that's public. That you can easily keep separate from all your other addresses/UTXOs.

This concept around Nostr has been congealing since at least 2023: https://bitcointalk.org/index.php?topic=5473719.0

Why? It's just one address that's public. That you can ...

2026-05-18T09:46:15Z

In reply to nevent1q…pv6r
_________________________

Why? It's just one address that's public. That you can easily keep separate from all your other addresses/UTXOs. Tipping/donation addresses shouldn't be treated profanely as if a novel security vulnerability.

What people? One of the biggest value propositions for me has ...

2026-05-18T09:42:32Z

In reply to nevent1q…49gf
_________________________

What people? One of the biggest value propositions for me has always been that I can put 1 of my bitcoin addresses out in public & not need any technology or a third-party provider (nightmare nightmare nightmare!) for fund management between the time it's generated & the time it's spent from. So, I use L1 exclusively.

It's not at all difficult, let alone as Gemini just claimed to me, "almost impossible" to keep that one public address's UTXOs (which for most individuals will be minuscule, per-TX & total-per-address) separate from the rest.

Also, "address reuse" is stripped of nuance & really ...

2026-05-18T09:19:08Z

In reply to nevent1q…fzf0
_________________________

Also, "address reuse" is stripped of nuance & really needs to stop being shouted from the rooftops as-is. The only real harm is address spending-from reuse, not address receiving-to reuse.

Like OMG, I'm going to get wrench attacked because the only publicized address in my wallet with most minuscule amount of BTC of all, is associated with my identity! Satan forbid I use my brain & only spend out my public address's UTXOs in consolidation to a single fresh address, without linking any of the larger ones via coin control/freezing all other addresses/exporting the private key to a 1-key-only wallet!

Nor does posting on-chain tip/donation addresses, unless both ...

2026-05-18T08:32:42Z

In reply to nevent1q…y8ep
_________________________

Nor does posting on-chain tip/donation addresses, unless both sender & receiver are so incompetent they need at least one person to act as their legal guardian & caregiver until death.

More:
https://primal.net/e/nevent1qqsdgt7cuu024ymt7wwarj66suk00nfrrh5r5lj56lxp7d30yrcr77s4kjn8q

@nprofile…vzln I got my NIP-05 from Iris, or did I really?

2026-05-18T08:16:19Z

In reply to nevent1q…4e99
_________________________

LeoWandersleb (nprofile…vzln) I got my NIP-05 from Iris, or did I really?

I don't want L2 though, I want L1 BTC. Unironically, ...

2026-05-18T08:10:20Z

In reply to nevent1q…py77
_________________________

I don't want L2 though, I want L1 BTC. Unironically, anti-pathologically.

Good money (in my mind), will drive out bad (quality content)...

@nprofile…x58v Correct me if I'm wrong, but I believe ...

2026-05-18T07:57:20Z

In reply to nevent1q…qg9k
_________________________

VitorPamplona (nprofile…x58v) Correct me if I'm wrong, but I believe "attach child porn to your pub key on chain" is simply explained as, someone can OP_RETURN a CSAM image under100kb to your bitcoin address (or P2PK to its underlying public key before it's spent from, nightmare nightmare nightmare!) that you or someone else put out in public, and even if you derived it 100% offline airgapped forever, block explorers that display OP_RETURN will show it, at least.

But do you lose plausible deniability if you ever spend out that address, because there are ways to sign without ever seeing or having OP_RETURNS touch any of your devices?

I wonder about coming at it from the opposite direction, eg. user ...

2026-05-18T07:40:13Z

In reply to nevent1q…hk0m
_________________________

I wonder about coming at it from the opposite direction, eg. user installs/creates a new Electrum wallet (or opens their existing one by file or seed), labels 1 of the addresses as "on-chain Zaps", then exports its WIF private key for the Nostr app that will import & do all the derivation work, giving them an npub & p2pkh address that they cross-check against the one in the Electrum wallet.

No need for more recent versions of Electrum (that don't support older computers) if all Electrum is doing is acting as keystore & backup for spending/checking balances.

PGP revocation certs come to mind as well, like if your private key/nsec is compromised (most evident if the balance drops to 0), then you still have the ability to copypaste a bitcoin signed message from Electrum to Nostr first on the compromised account & then the new one you export-import a new private key for.

I find the wrench-attack risk on public tipping/donations ...

2026-05-18T06:58:33Z

In reply to nevent1q…nmjv
_________________________

I find the wrench-attack risk on public tipping/donations addresses highly overblown/FUD. Who's really going to commit armed robbery over total BTC equivalent to a minuscule amount of fiat (and don't add insult to injury by suggesting NgU is guaranteed when I'm not seeing a deflationary currency as advertised)? Anyone who would want to tip/donate a significant amount would likely ask for a unique address; at least I would.

All these other Nostr payment methods increase friction/fees for onboarding to them & offloading to L1 Bitcoin cold wallets. No thanks! If I ever get desperate to spend/consolidate the minuscule tips then it's probably time to burn that key anyway.

I guess not, the address in my bio wasn't derived from my ...

2026-05-18T06:18:17Z

In reply to nevent1q…rz9u
_________________________

I guess not, the address in my bio wasn't derived from my nsec.

https://primal.net/e/nevent1qqsfql97sgfc8jezllsylyx82s847ux9rray44nhe2puwxc6w8ckdccnupppg

Wait, how are they even possible? Not sure if I'm reading ...

2026-05-18T06:12:32Z

In reply to nevent1q…z9xu
_________________________

Wait, how are they even possible? Not sure if I'm reading this right: https://bitcointalk.org/index.php?topic=5473719.0

Let's say you are able to convert your nsec with
echo -n "your_text_here" | shasum -a 256
& then to WIF so you can import it to a Bitcoin client...

how does the person pay you if all they know is your npub? Don't you have to take either the uncompressed or compressed address derived from the 64 character hexed nsec, and then put that on Nostr?

Hmm, is this what I just posted about 4 days ago? Address in bio.

2026-05-17T12:03:29Z

In reply to nevent1q…ypf5
_________________________

Hmm, is this what I just posted about 4 days ago? Address in bio.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Donate to ...

2026-05-16T13:17:23Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Donate to bc1qn5kua7a4r7xasgnd6mt4k5huv45gcm3rs545u2 & I'll offer equivalent value items to my Freecycle town (~11k members, limit 1 offer per member), until I run out of inventory.
https://bitcoin-otc.com/viewratingdetail.php?nick=TheButterZone&sign=ANY&type=RECV
-----BEGIN PGP SIGNATURE-----
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=fKwe
-----END PGP SIGNATURE-----

Nostr event nevent1qqs8cuzymcyzdshlxf2lg6f9jckd5dskmlamzyulj6fda237sym9f3qzyqhp0wrddykf0xa4klpdmw0hpcpww6auxk9049dvdqf4q3amuy8qyxf0e6f

2026-05-16T03:20:03Z

In reply to nevent1q…08ks
_________________________

Neither government nor any FFL needs to know what genitalia we have; they aren't our sexual partner nor physician.

Remove Form 4473 question 14 or the "Sex" question, wherever else it may appear.

She's finally gotten through the checkout line as the last ...

2026-05-14T16:30:18Z

She's finally gotten through the checkout line as the last person. Have 25 customers form a new line as soon as she starts scanning.

That does seem to be an issue with Mandacaru... I had to rescan ...

2026-05-14T15:52:56Z

In reply to nevent1q…ksu6
_________________________

That does seem to be an issue with Mandacaru... I had to rescan over and over, despite entering my wallet descriptors as the IBD started.

https://github.com/jvsena42/mandacaru/issues/81

Nostr has porn in search results for simply "NSFW", ...

2026-05-14T06:36:30Z

In reply to nevent1q…klml
_________________________

Nostr has porn in search results for simply "NSFW", unfortunately there's CSAM & I'm figuring out how to report that to various providers.

https://x.com/oomahq/status/2054287495073051011

2026-05-13T11:40:15Z

In reply to nevent1q…2q4q
_________________________

https://x.com/oomahq/status/2054287495073051011

401 Unauthorized (to know everyone's genitalia, ...

2026-05-13T07:21:25Z

401 Unauthorized (to know everyone's genitalia, privacy-invading government!)
https://www.regulations.gov/document/ATF-2026-0010-0001

https://share.google/aimode/fO5n6HysuS6oIcNDs (valid for 7 days) ...

2026-05-13T03:58:30Z

https://share.google/aimode/fO5n6HysuS6oIcNDs (valid for 7 days)
"Has anyone in the bitcoin L1 or L2 dev space come up with a protocol where someone can put their donation address in public, many people can send donations to it, but instead of each donation being broadcast immediately & getting charged a full TX fee to the donation address, the donation TXs are joined in a batch & then broadcast at a certain threshold, so everyone pays less fee? Could this be accomplished with VTXOs but the receiver not need a VTXO capable wallet because all they're getting is the final on-chain payment from everyone at once?"

Why is Nostr pathologically obsessed with Lightning payments, ...

2026-05-13T03:16:48Z

Why is Nostr pathologically obsessed with Lightning payments, instead of allowing nostriches to optionally put their L1 BTC address on their profile, so the Zap button changes to a ₿ (BTC sign) & the URI becomes bitcoin:<address>?

Where's the receipt? I looked up all the prices (including ...

2026-05-12T23:37:37Z

In reply to nevent1q…4dxs
_________________________

Where's the receipt? I looked up all the prices (including the instant savings on https://app.warehouserunner.com/costco/50853-sunpix-hearts-of-palm-2-25-oz)