ChipTuner

https://www.vaughnnugent.com/

Building software they don't like. Free, as in freedom.
Low-level and server engineer: libnoscrypt, NVault, vnlib.

Staff @GitCitadel
https://geyser.fund/project/gitcitadel

DM's don't work. Just tag me.

Public Key

npub1qdjn8j4gwgmkj3k5un775nq6q3q7mguv5tvajstmkdsqdja2havq03fqm7

NIP-05 Address

ChipTuner@gitcitadel.com

Profile Code

nprofile1qqsqxefne258ydmfgm2wfl02fsdqgs0d5wx29kweg9amxcqxew4t7kqpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dscjnpcr

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1qdjn8j4gwgmkj3k5un775nq6q3q7mguv5tvajstmkdsqdja2havq03fqm7

Show more details

Last Notes

2026-03-26 18:23:30 UTC

- reply

You've been on boat this whole time? Woah.

2026-03-26 17:59:17 UTC

- reply

Yeah I've not found that to be good enough. Still somewhere in time some chainstate db file gets corrupted and needs to reindex. I can't really know when it got corrupted to know when to roll back so i just have to leave it for a few hours/days to recover.
It would be nice to have some redundancy outside of having multiple independent copies of 800gb of data.

2026-03-26 15:57:16 UTC

Is anyone running Core or derivative nodes redundantly without duplicate blocks storage?
#nevent1q…2lcf

2026-03-26 03:24:11 UTC

- reply

Well block files aren't written very often right? I don't much else about them. But the chainstate ldb files are open and should be separate. I also think they attempt to lock the block files. But id think if one node had rw and the other was R/O or overlayfs then it _might_ work. at least long enough you could always have failover HA.

2026-03-25 19:40:07 UTC

Buffers save drives!

2026-03-25 16:33:04 UTC

- reply

I think i've seen you share this before :)

2026-03-25 16:32:41 UTC

And y'all thought VPNs were going to disappear because of governments. Instead it's because an increasing majority of websites and services are better detecting, scoring, and blocking them.
Instead of saying "Try turning off your VPN", consider the roughly equivalent statement: "Try showing them your ID"
We just need to partner with the Smart-TV folks and leech of their network like AI companies did.

2026-03-25 16:27:38 UTC

- reply

That's what my research has let me to. Better detection and scoring on IP addresses.

2026-03-25 16:18:26 UTC

- reply

My problem is my collection. After the law passed a few years ago that gave feds the power to kick doors in over media, I personally, decided that wasn't the hill I wanted to die on. XD So CDs, vinyl and some tapes it is :)
My 20+ year old Sony Diskman still works XD

2026-03-25 16:15:35 UTC

- reply

It appears to be YT blocking me more thoroughly. I'm getting captia errors now which are new. I exhausted all my VPNs and I added 2 more servers last weekend. I'm fighting lightning routes with mullvad otherwise id have a few more.

2026-03-25 16:10:14 UTC

And it looks like today's the day newpipe stopped working for me. Oh well. I wish FM radio didn't suck so bad though. Around here, about 30% of stations are Spanish speaking, and all but two remaining stations are owned by IHeart media, so they sound the same and have ads after every 3 tracks, all at the same time so you can't change the station to skip them.
My own CD collection consists of basically only classic rock, alt, and whatever free/cheap pop stuff i've picked up over the years.

2026-03-24 19:13:22 UTC

- reply

And I'm still forced to stand in my underwear at the checkpoint...

2026-03-24 16:45:42 UTC

- reply

To be even more clear. There are totally valid arguments for outbox for decentralization. And that's great, but there is often no granularity or user choice. Most of the outbox relays are only read, and limit information leaked, but it's very easily correlated. My counter-argument: chances are if you are connected to, well-federated or community relays, that's enough decentralization for you and if conversation happens outside of that, it's likely irrelevant to you.

2026-03-24 15:57:46 UTC

- reply

You know that's valuable, and it appears you also understand the social impact that "platforms" have on their users. I think legacy users do believe a world outside what they've known exists. It was that way for me.
For example, in your post "check our primal, im over there". In my experience, they pick up primal (and you recommend it because it's pretty good looking and familiar) but once they use it theyre turned off, it's either too close to what they already know, and with way less users and too much AI and bitcoin, or it's way too foreign and they have no friends here.
I think it might be important to get those people engaged, they need help, they're asking for help, they need something familiar, they need to quickly find their community, even if they aren't welcomed.
For now, I don't think purple-pilling is a one and done thing. I think it takes community, it takes regular interaction. If you want to see it, you gotta build it.

2026-03-24 15:48:51 UTC

- reply

Client devs can be radically opinionated and there is little users can do about controversial changes without editing the source code themselves and figuring out how to re-deploy and load a custom image of an app. You just hope that the dev has some respect and gives you a switch to optionally do something.
With web clients, the code is sent in plaintext* (javascript) to your browser and we have the power and tools to augment the sandbox it's running in, or even the code itself using the debugger or in my case, either writing our own extensions, using existing extensions (ublock), or injecting our own code to override the source code of the app in your browser.
So if a client dev adds a new feature you don't like, you can say
https://media1.tenor.com/m/SpogFV5GRg4AAAAd/no-i-don%27t-think-i-will.gif

2026-03-24 15:41:17 UTC

- reply

This is why I only use web clients so I can control them using, either my own custom extensions (nvault) or uBlock origin for example. I even use a javascript injector extension to fix my own issues dynamically on web clients.
At a minimum for new nostr clients, typically I blacklist all 3rd party connections and websockets - except for the popular CDNs and my trusted relays. That's it. Everyone else can GFY.

2026-03-24 15:16:37 UTC

- reply

You tell me. What get you to stay?

2026-03-24 15:10:42 UTC

It's gonna be really sick selling commercial services built on nostr to L2s.

2026-03-24 04:45:06 UTC

- reply

They also keep transitioning out the network appliance. It use to be a java app, now it requires an Ubuntu box with community written, and arguably partial instructions. Now that's being phased out for their new network server. I swear you get maybe 2 years out of a stable build of their network appliance before they make you wipe it an reinstall it. When getting called back for customer jobs, that was the easiest way to handle it. I never really liked their cloud appliances, especially since all of them were running additional server(s).

2026-03-24 04:41:31 UTC

- reply

That's pretty up to date. I've done an and install recently and have phased them out of my network (more than 10 devices) because they stopped patching them. It does seem like most of their business class devices from the past 5-6 years are hanging in there, but they've already phased out some of their 24 and 48 port models. Their smaller/home stuff has barely made it 5 years before they're out. Small switches like their smaller switches made it like 2-3 years before they changed it.

2026-03-24 04:22:08 UTC

- reply

Unifi also deprecates their hardware relatively quickly, and does not offer many replacement parts or repairs, and does not support firmware or security fixes for out of support hardware. They're a fast moving company and their software changes frequently.
SMB networking gear can run nearly identically on hardware from 2010 (assuming it still gets patches) as with modern gear (not including wifi).
While they support self hosted controllers, they're trying to push people to their managed cloud.

2026-03-18 19:29:27 UTC

All I read was wss://theforest.nostr1.com is the cool kids relay
#nevent1q…6qsn

2026-03-17 16:06:00 UTC

- reply

For some reason this made me think of the Rick and Morty night people episode. Id just want my night person to work out a lot more and prepare meals XD

2026-03-17 15:52:56 UTC

- reply

Correct yeah.

2026-03-13 16:37:39 UTC

- reply

Another point is, you're wading deep into uknown uknowns. Unless you're even somewhat familliar with LLMs, you won't be ready for it to go
"Hmm weird, I can't access this file, let me just wipe the entire filesystem and start over"
tool call: rm -rf / <Approve> <Deny>
XD

2026-03-13 16:36:04 UTC

- reply

I chose the words in that metaphor very carefully XD

2026-03-13 16:33:25 UTC

- reply

If you have nothing to take, then you're fine. Getting into the weeds on what you _should_ do is not really a topic for a nostr thread. I just think you can get miles ahead if you apply my silly metaphor habitually.
But don't assume it's safe to put on your network, if you have other things on your network. Remember everything you're doing is being leaked in plain english to your inference provider as well. It's still far safer if you just tell me exactly what files you have on your computer, what devices you have on your network, and which one of these people in this photo is you, and which is your mother?

2026-03-13 14:34:10 UTC

- reply

Yup. Some let you sign in just to block you (spotify) others do it at layer 3.
So many things are on GitHub now, binaries and source, both being blocked or heavily restricted. On good days I have to sign in to GitHub to see anything. (I pay them for a pro account or whatever it's called btw)
I'm pricing out inference alternatives anthropic and openai apis are also super flakey either they're down or they're blocking me half the time.

2026-03-13 01:46:17 UTC

How many more VPNs am I gonna have to pay for to access shit I paid money for an sign in with credentials? I'm so fucking sick of accessing big tech. Id also like a lot more money to purchase more hardware so I don't need em.

2026-03-12 21:01:14 UTC

- reply

To express my dedication to tarballs
#nevent1q…cr2d

2026-03-12 20:48:43 UTC

Got an alpha build of my dependency installer feature in vnbuild up if anyone is interested in playing with it.
https://www.vaughnnugent.com/resources/software/modules/vnbuild?v=5c45b67b82172479f5e57ab79b59553042f50e92&tab=downloads
Docs:
https://www.vaughnnugent.com/resources/software/articles/860e02bc1122d50c9cd6d93511307cbea0c821dd

2026-03-12 17:48:48 UTC

- reply

To your point https://git.vaughnnugent.com/cgit/vnuge/plugins-essentials.git/tree/lib/vnlib.browser/src/default/session/index.ts#n289
Usually I would gate this functionality behind a branch to avoid reassigning a variable. It's very rare for me to use a mutable variable except in a very controlled scope. In some parts of this library I've wrapped with getters and setters.

2026-03-12 17:41:07 UTC

- reply

True, but it allows for an immutable pattern in an designed mutable language (which is an argument against const existing at all). const does prevent assignment, just not mutation of the object. Same could be said for C (also my favorite language). Const just changes the compiler enforced memory location protection.
I'm trying to make sense of this argument though. I suppose, coming from strongly typed/functional languages into JS, I developed my own idiomatic patterns to sidestep the designed mutability of the language.
I would also agree in theory that const as a concept in JS shouldn't exist if it was true to the way it's taught.

2026-03-12 17:23:33 UTC

- reply

Yeah const everything. mutable is a smell for me. If I have to use a mutable variable I'm probably doing something hacky.

2026-03-12 16:09:16 UTC

- reply

I think that's changed a lot. I had an ubuntu 14 (iirc) That had over 1000 days of uptime at one point. That wasn't smart, it was because I was lazy and it was a backup machine sitting in a remote location. High uptime is now pretty correlated with low security. I think security-first has shifted heavily since RedHat started to run with it. That means rapid kernel patches, which means package rebuilds and rapid merging. I think leading to this more 3-6 month window like @npub1l6s…j5rc suggested as well of stability. You just have to keep jumping if you want to stay on top of it imo.
Consumer cares more about stability, commercial cares more about 99% forever. If 99.9999 is a goal, but one bug in a package takes you down, it wasn't worth it.

2026-03-12 15:42:12 UTC

- reply

Immutables are cool to futz with, but you need system software sometimes, especially if your running bare metal. You'll need driver packages or other system packages and that's a pita to configure. Apparently rpm-ostree has had some major upgrades recently in 43, but i've yet to try.
Personally there are very few bare-metal machines ive been able to use any desktop linux distro reliably on. I have one system that crashes 1/3 of the time, and can only run fedora. So I ended up holding packages just to keep it stable for now. It's all desktop issues. I've been running server distros for well over a decade, but desktops just can't handle the neutron style in the hardware variety I own.

2026-03-12 15:35:09 UTC

- reply

Funny enough I usually hear the complete opposite. I'm personally a recent hater of Debian in comparison to RH and rh-adjacent products.
I've tried to get people on fedora desktop and they keep going back to ubuntu desktops. In my experience ubuntu works best out of the box on hardware for desktop use. Debian its is just too freaking old. It lacks a ton of hardware support, packages are years outdated and lack features, especially security upgrades. Desktops environments and graphics move really fast and even ubuntu can be so behind it doesn't support modern software, you need to build a new kernel yourself. Arguably Canonical does a better job at hardware support and getting more modern features into Ubuntu that aren't available in Debian base.

2026-03-12 15:28:20 UTC

- reply

Sorry to hear that. DNF 4+ is fantastic. I've been onboard since ~34 I think. I've also been running alma on things I don't want to mess with. Alma-lite might become my new container base image XD

2026-03-11 17:44:23 UTC

- reply

Yeah, imo always has been. Starting your own ytdl server is the only real option for privacy and actually opting out of the youtube algo.

2026-03-11 17:42:42 UTC

- reply

Outbox has been my soapbox on privacy tangential to this. If I have to auth to 100s of relays is even worse than just telling 2-3 providers who likely already know me based on my activity.

2026-03-11 17:30:01 UTC

- reply

Damn good point, not the best currency I suppose.

2026-03-11 17:27:25 UTC

- reply

Oh and call it some sort of store of value, they basically inflation resistant in my experience XD

2026-03-11 17:23:45 UTC

- reply

Found some cheap Craigslist and marketplace deals over the years to accumulate my equipment. Id still like a lot more, but its nice being able to do what I want when I want. Every general/cheap gym i've been to have like 2-3 power racks and their is always a pile up. Which I get because I would stand at a rack for 2-3 hours. That and I hate sitting in traffic. Thankfully i've stuck to it pretty well over the past 5 or so years.
I just stuck to: it's really hard to go wrong with bars and plates.

2026-03-11 17:08:07 UTC

- reply

Oh, I saw your reply out of context lol. Monkey brain saw plates. Just strength training, otherwise this conversation is greek to me XD.
Just getting back into ~10 hr/week finally after about 7 months of injury and sickness XD
But if it helps. I used to work construction. Equipment, light masonry, pouring, auto repair, dump driver, and general laborer. I was throwing 100lb cement bags on each shoulder back when I was 19-20. Then I got into automotive through and after college. Only recently a full time computer nerd from grease monkey.

2026-03-10 20:44:56 UTC

- reply

I think it's also important to recognize that the FCC and other alphabet agencies created massive amounts of regulation around application security. The government essentially made it Google's responsibility to police applications in such a way it "protects" users. They needed a way to offer that to appease regulators, without losing their asshole financially, as a company not known for prioritizing profits, at least until relatively recently. Id be fairly confident that's what happened.
I think it's worth remembering who _else_ to point the finger at as well _for what we have now_. It's a chicken-egg problem too though. Google made apps easy to obtain, unregulated. Users got ripped off because they're relatively retarded. Google wanted to spread android. Govt said, in order to do that, comply. So who's at fault?

2026-03-09 14:43:41 UTC

- reply

GM.

2026-03-09 14:42:20 UTC

- reply

Try adding some real delay in your response times, capitalize your sentences, and avoid those dumb validation phrases, no one really speaks like that.

2026-03-09 14:37:01 UTC

- reply

Only if you mean scaring people in perpetuity actually conditions them to ignore obvious psyops... Oh wait. Shit.

2026-03-09 14:34:07 UTC

- reply

VC and grant funding.

2026-03-09 14:25:59 UTC

- reply

I'm not sure they're operating in the black yet.

2026-03-09 13:54:29 UTC

- reply

For sure yeah!

2026-03-09 13:54:04 UTC

- reply

Also, this is something a fed would say.

2026-03-09 13:52:47 UTC

- reply

No problem! Yeah It should already be split across cpu/gpu as it's a 24gb model. That is unless there is some feature you're using Im unaware of. So increasing that any more will consume more system memory and more likely for an ollama timeout, loops, or hallucinations in my experience. Unless I suppose you have a very modern epyc or threadripper processor XD

2026-03-09 02:35:23 UTC

- reply

It's always a psyop.

2026-03-08 16:22:33 UTC

It's also one of the few obvious tells we have left.
#nevent1q…wky3

2026-03-08 16:19:44 UTC

- reply

Arguably not, I wouldn't suggest my normie friends do it. It's really quick way to get your ISP to drop you, if torrent traffic isn't already banned or restricted by your ISP. People can do nasty things when you leak your home IP address too. Setting up a cloud routing system or VPN network to route incoming traffic would eliminate torrent seeing as a normie friendly option. I suppose you could pay for a hosted seedbox, but where's the decentralization part? Do you still want your name and credit card attached?

2026-03-08 16:04:03 UTC

- reply

Yeah that's a 35b model, 24gb in model size.

2026-03-08 15:19:48 UTC

- reply

ollama only shows a 35b option on their site for the a3b variant, which needs 24gb of vram + context. So that would put you in the middle of the 100+gb range for 256k window size

2026-03-08 15:14:24 UTC

- reply

What size paramter model? I think context window scales as a function of the parameter size. So if you're using like the 2b model maybe?

2026-03-08 15:12:47 UTC

- reply

So ollama defaults to a 4k window size under 24gb of memory. ollama ps shows the loaded model, context size and precentage loaded into gpu and system memory if it overflows into system mem.

2026-03-08 14:57:15 UTC

- reply

That math doesn't math what engine are you using? A 256k context window needs like 100gb or more of working memory (vram or shared) + the model

2026-03-08 05:44:30 UTC

- reply

Yeah I mean when you got a shop running 24/7 there is always something available. Night shift would run 3-4 doughs, then freeze. By the evening the day shift would pull the racks out to thaw for finishing and packing. Day shift would run doughs for the next morning. Night shift pulled the racks out to thaw before day shift arrived, same thing, finish and pack.
It was actually a whole lot easier finishing them slightly frozen (i preferred it), they're much easier to handle, then they have the entire night to thaw completely in transportation

2026-03-08 05:35:59 UTC

- reply

It does, the ambient temp of the shop is rarely below 80*f, in the summer it's usually well over 100*.
If you're in a hurry we take a few pans out and give them a rotation in the oven, but that usually caused them to shrivel. The outsides get very soft and deteriorate when you handle them during finishing and packing. It's best to let them warm slowly, near the outside if you can.

2026-03-08 05:33:27 UTC

- reply

Cake donuts (old fashioned) are even more awesome, batter straight to fryer.

2026-03-08 05:21:48 UTC

- reply

With the donut dough we made, retarding would sort of ruin the quality, my dad never liked it when he had to. Sometimes they would, or freeze the slabs overnight to save on time, but he usually preferred to run them and then freeze the fried donuts. when they thaw they're so soft and moist, we eventually started overnight freezing most donuts if we had enough space in the freezer.
I've never tried making donuts outside of the bakery as and adult XD Not sure if chilling makes things easier or not, but whenever I work with some dough I prefer it room temp mixed with tap cold water. Hot dough is so much easier to work with.

2026-03-07 19:02:22 UTC

- reply

We'd get walk in the door after 4 am, and donuts were in the display cases by 7:15 every day.

2026-03-07 19:00:32 UTC

- reply

If it helps I grew up in a bakery. It's a lot of waiting, but no chilling (retarding) for donuts. Rise in the bowl, cut into sheets, lets sheets rise, roll out, cut, proof (humidity/heat controlled proofing), fry, cool, ice, eat. Usually it takes about 3-4 hours from mixing to cooling.

2026-03-07 17:34:35 UTC

- reply

The one you control and/or as many as you can afford, and splitting traffic. None can really be trusted wholly.
Depends on your use case.
Self managed cloud vps:
- vps-based vpn ties your identity legally (or not with some providers),
- basically just moves your location and hides from your ISP
- You control it, and only your VPS host can spy on it.
- you control your wireguard key gen
Paid provider
- also uses someone's cloud datacenter to host your vpn
- provides some noise as many others use the vpn service
- usually very obvious your connection is using a vpn as most vpn IPs are well known or tracked heavily
- can be spied on by the vpn provider and the cloud provider
In both cases expect to be blocked heavily as most traffic originating from cloud datacenters to consumer front ends is bad traffic and blocked as a blanket.
So I suggest a combination of both and swapping regularly or using a smart gateway to route different types of traffic via different VPNs.
Id also suggest a recursive dns resolver on your local network at a minimum, avoiding your vpn or vps from supplying your dns, also able to monitor/spy on you.

2026-03-07 16:43:57 UTC

- reply

Blows a lot yeah.

2026-03-07 16:42:38 UTC

- reply

May I suggest not using Chrome, or downstream browsers? With good old fashioned manifest v2 support.

2026-03-07 16:41:24 UTC

- reply

With only 16gb of memory? What size context window do you have? (for the record I spend most of my time with offline models aside from code).

2026-03-07 15:51:11 UTC

- reply

How are you getting it to do agentic work? I can't get anything to work well even at 32k context size. Opencode, codex etc, recommend a minimum of 64k. Which is about 16-24gb of additional vram on top of the model. Id be looking at at least 48gb of vram to get the most basic work done on a a 30b model. I've been calculating at least 96gb for a 100b+ model to do comparable work.

2026-03-06 18:09:37 UTC

I keep hearing that gptoss-120 is actually usable for agentic work. True? It may cause me to break the sat's piggy bank for some more vram this year.
If you have experience, what context window size has been working well for you? 128k would be nice, but not sure i can afford that XD

2026-03-06 18:07:36 UTC

- reply

I have absolutely no idea, I just know it's got more traffic XD. Could be bots, I have no way of verifying.

2026-03-06 17:20:37 UTC

- reply

Yeah man people are fucking gross on a plane. I remember hearing people talking about hiding covid by cooling their heads, or drugs or cough medicine or whatever they could do to get on the plane man. Regardless of what virus you got tho, when were touching each other in the flying tuna can, you're an asshole lol.

2026-03-06 16:51:28 UTC

- reply

Just in time to spare those on the plane with you XD

2026-03-06 16:47:55 UTC

Still holds true
#nevent1q…s7yh

2026-03-06 03:49:18 UTC

- reply

#nevent1q…yj0q
My singer is on hiatus, but the crypto library that runs is maintained here
https://www.vaughnnugent.com/resources/software/modules/noscrypt

2026-03-06 03:43:38 UTC

- reply

You're app has to scale horizontally out of the box just to handle box traffic XD

2026-03-06 03:42:59 UTC

I need to stop looking at my dashboard, but it's wild how this bot crawling is 1:1 request/ip address. They're choosing to spare me. I feel like control over 20,000 unique IP addresses could do a lot of damage. This is new btw. Completely generic agents, completely "random" paths, a new IP address per request.
I'm seeing 2-3k unique IP addresses per hour, over 10k unique IP's in the past 12 hours.

2026-03-05 19:08:17 UTC

People ask me why it takes me so long to get anywhere, or why I don't get on the freeway. MF it's because I'm driving the back-roads without Flock government surveillance cameras.
https://deflock.org/map

2026-03-05 19:03:55 UTC

- reply

VPNs are mostly hosted on data centers now, and Google (and many others) use IP credit scores and expect them to rate residential because they block large subnets owned by abusers. So if your VPN's IP is in the same postal code as the abuser, the whole postal code gets blocked (for example).
I've tried many VPNs, it happens to all of them at some point. You can keep swapping, but you'll eventually get tired of it.

2026-03-05 19:01:39 UTC

- reply

Yeah... Sorry to hear that, and welcome to the club :)

2026-03-05 15:37:01 UTC

You look away from your logs for 25 seconds and your mail server gets blasted.

2026-03-05 15:13:22 UTC

- reply

Yeah...

2026-03-05 04:44:13 UTC

- reply

Whack-a-mole. I mean you need to sleep sometimes.

2026-03-05 04:31:09 UTC

Oh, they just turned most popular smart TVs into a massive AI botnet... That's cool. I wonder if that has anything to do with the 2500 unique IP addresses I see per day.
https://www.techspot.com/news/111492-smart-tv-apps-quietly-scraping-web-data-ai.html
https://www.theverge.com/column/885244/smart-tv-web-crawler-ai
https://abit.ee/en/cybersecurity/smart-tv-bright-data-proxy-data-harvesting-ai-tizen-webos-privacy-en

2026-03-05 04:19:14 UTC

- reply

Well I always hear a lot of talk, but Im not sure anyone's really making any progress. I don't think we need it baked into relays, arguably not as DNS is the discovery layer. We'd be hard-coding relay IPs instead. I think that would be tremendous load on relays as well.
I think dns servers could fetch pointers or at least attest domain owners, but then this becomes an authority and trust issue which is another problem we still can't really solve on nostr.

2026-03-05 04:08:13 UTC

- reply

I'm sure! Hopefully you gain some more clarity, I can't imaging you can keep this up forever XD

2026-03-05 04:02:48 UTC

- reply

I think I have more questions than answer's with open-nic

2026-03-05 04:00:49 UTC

- reply

But how will clients use it? Users can only set one, sometimes two servers, that only act in failover.

2026-03-05 03:02:35 UTC

- reply

My network is optimized for HTTP so i'd only be wanting to provide DoH. But I think blocky can serve a zone file and disable resolution otherwise.
Now my concern has been with offering like a whole ass DNS service, not just a single zone. I can see like 50 req/s just on my own network when loading up a single nostr client, nostr users would pummel our servers. Im not sure I want to be responsible for resolution of the entire world, and forwarding that traffic to free providers probably is a quick way to get blocked, so probably need a paid upstream or something.
Anyway, if we could contribute with a single zone for clients id have it up yesterday. Most things only accept a single DoH endpoint, not even secondary, and most primary/secondary handoffs are just complete failover so... idk how to solve that problem

2026-03-05 00:12:39 UTC

- reply

DNS-ish services are fairly high up on the list of services to eventually provide for nostriches.

2026-03-04 22:29:24 UTC

I wonder if I will break 3000 commits across my oss projects before the summer :/

2026-03-04 22:22:00 UTC

- reply

Yeah there was a blog I read recently basically on all non-standard TLDs like .dev and what not are automatically flagged as low reputation. I think it was on HN. Google ranks domains, then publishes an API corps can apparently use, if they want to, to rank them. Weird TLDs have lower ranks and more likely to get flagged.
I think they mentioned that registrars use lists like Google's to drop customers domains.
Anyway, funny whatever secret method they use to rate domains and IPs that ends up fucking us lol

2026-03-04 22:03:05 UTC

- reply

Someone shared the site on nostr suggesting that many protected networks like corporate or public wifi use this service in their network stack to block outgoing requests to low reputation sites. Im sure it's fairly equivalent on the server side these days.
I mean even crowdsec is pretty "advanced" if you let it.

2026-03-04 22:00:52 UTC

- reply

https://i.imgflip.com/7w6xit.png

2026-03-04 21:50:52 UTC

- reply

Doing my part to lower the average XD

2026-03-04 21:50:22 UTC

- reply

So life is just the bell curve meme?

2026-03-04 21:48:23 UTC

- reply

It's already here XD I lost the commercial service website that provides that IP "credit score" reputation service. It's super detailed and applies a risk score out of 1000 iirc lol. They let you put IPs in and get a score via an API. I tested all of mine and they know if it's residential or not, among all the other usual stuff. Paypal told me they needed to see a residential address to unlock my bitcoin funds. I told them I don't have a secured network at home and they said, that's a bummer, we have to see you're somewhere we can verify.