Nostr notes by Enigmatik

Then an attacker would just have to pwn the secondary device and ...

2026-10-06T23:03:23Z

In reply to nevent1q…5lx2
_________________________

Then an attacker would just have to pwn the secondary device and not the Graphene phone in order to track you. You've just made it easier for them.

Not a dev but the app was probably just simping too hard

2026-10-06T22:57:19Z

In reply to nevent1q…lpgp
_________________________

Not a dev but the app was probably just simping too hard

Disgrace. Should be added to https://moneroshamelist.com/ Venice ...

2026-10-06T22:46:47Z

In reply to nevent1q…0u8k
_________________________

Disgrace. Should be added to https://moneroshamelist.com/

Venice just smells like a massive honey pot (I have no proof of this, but last time I checked they didn't even offer TEE models)

Best to send your KYC'd coins back to an exchange in order to ...

2026-10-06T22:43:29Z

In reply to nevent1q…mve9
_________________________

Best to send your KYC'd coins back to an exchange in order to avoid tying your identity (offchain) to whatever the person on the other end of the swap does with them later. Consider that for chain surveillance companies the last known owner of those coins is you. Unfortunately there is always a risk of being framed with KYC'd bitcoin. A solid strategy would be to sell them to Kraken, buy the same amount of XMR, immediately withdraw it and begin swaping the XMR for BTC in random times and amounts. With your own bitcoin node with Tor and all that ofc.

Should have used Monero™

2026-10-06T22:29:47Z

In reply to nevent1q…4034
_________________________

Should have used Monero™

What do you mean by "you need more trust on purchases because ...

2026-10-06T22:28:09Z

In reply to nevent1q…08fj
_________________________

What do you mean by "you need more trust on purchases because there is no traceable public record"?
As far as I know you don't need more trust for cash...

Yeah the VPN thing is tricky, this guide helped me a lot: ...

2026-10-06T21:59:11Z

In reply to nevent1q…vl84
_________________________

Yeah the VPN thing is tricky, this guide helped me a lot:
https://privsec.dev/posts/qubes/using-mullvad-vpn-on-qubes-os/

amen 🙏

2026-10-06T21:57:36Z

In reply to nevent1q…njtx
_________________________

amen 🙏

I think the War of Secession is a far better name for the ...

2026-10-06T21:54:58Z

In reply to nevent1q…tm07
_________________________

I think the War of Secession is a far better name for the conflict. I believe that's how we used to call it in Spanish but I could be wrong.

A civil war happens when two sides compe for central control of a nation, doesn't make much sense to call it that when one side didn't have any interest in doing so.

Also fun fact after the "Civil War" the United States ceased to be plural and became a singular noun (e.g. The united States are -> The United States is).

Glad you are back :) As for Silent Payments, I think ...

2026-10-06T21:45:06Z

In reply to nevent1q…a4y4
_________________________

Glad you are back :)

As for Silent Payments, I think weev (nprofile…c4a4) expressed their limitations better than I could have in his reply above:

quoting
nevent1q…u4js
Even Silent Payments (which are better to have than not) do not provide a single privacy guarantee on Bitcoin. They only defer the date by which your privacy will be busted. If I send money to a SP address, I cannot guarantee that my privacy will be maintained because the recipient can choose to violate it, because Bitcoin does not provide shielding to the sender (in contrast to Monero). If you are targeted by the government and raided, when your SP private key is seized they will have a perfect record of everyone’s transactions.

You can also accidentally invalidate privacy with SP for both sender and recipient by combining UTXOs. Silent Payments, to actually facilitate privacy, require you to never KYC at an exchange and *never* combine UTXOs. Normal people are not going to be using coin control on every transaction. Imagine telling a normal person “you’re using it wrong! You can’t combine UTXOs when you spend your money, and you can’t send multiple UTXOs to your exchange separately either! You’re piercing the privacy veil!” Any reasonable person would conclude that privacy on Bitcoin is a big fucking joke. It’s ridiculous.

Glad to see another XMR wallet, we definitely need more choices!

2026-10-05T21:18:51Z

In reply to nevent1q…lq0z
_________________________

Glad to see another XMR wallet, we definitely need more choices!

Bitcoin's Correlation with the NASDAQ: "Bitcoin's ...

2026-10-05T21:15:20Z

Bitcoin's Correlation with the NASDAQ:

"Bitcoin's 30-day correlation with the Nasdaq and S&P 500 has climbed to approximately 0.88 — meaning a portfolio holding both Nasdaq-heavy equities and Bitcoin is far less diversified than it appears on paper. "

5-year average oscilates around .54, maintaining a notable correlation strength between the two assets.

"If Bitcoin were truly behaving like "digital gold," it would track gold's price action, not the Nasdaq's. The data says otherwise: Bitcoin's correlation with gold has hovered close to zero through 2026, even as gold itself hit a record high near $5,600 in late January"

Source: https://www.onedayadvisor.com/2025/01/bitcoin-nasdaq-correlation-correlation.html?m=1

#Bitcoin #NASDAQ #BTC #Investing

antimoonboy.com

2026-09-30T09:31:47Z

In reply to nevent1q…v0ks
_________________________

antimoonboy.com

When you say stealth addresses you mean Silent Payments? Just ...

2026-09-30T08:09:02Z

In reply to nevent1q…lkhv
_________________________

When you say stealth addresses you mean Silent Payments? Just curious if there have been new developments I'm not aware of.

Also, don't you think that moving most transactions off chain will reduce miner rewards and negatively impact the security of the network?

As for LN, I'll concede that it provides a good level of privacy, but the vast majority of users use it custodially. Also an oligopoly of big node providers basically controls the network. Comparing it to XMR is a bit like an appples to oranges comparison though. You have perfect privacy in Chaumean ecash too, but that's not relevant when discussing decentralized, noncustodial money. LN depends on a L1 with an uncertain future in its fee market and worsens its prospects moving the majority of transactions off chain.

And the fact that you had to reinstall the OS for every major ...

2026-09-30T07:48:01Z

In reply to nevent1q…zdlr
_________________________

And the fact that you had to reinstall the OS for every major Android version via adb commands and all, such a pain. GrapheneOS web installer is a god send in this regard.

You are comparing oranges to apples. Lineage isn't on the ...

2026-09-28T08:58:18Z

In reply to nevent1q…x3mh
_________________________

You are comparing oranges to apples. Lineage isn't on the same league as Graphene. Lots of connections to Google by default and not even a fraction of the privacy and security features the GrapheneOS provides.

Why do you think that darknet markets operate primarily on XMR ...

2026-09-25T16:32:12Z

In reply to nevent1q…uzxf
_________________________

Why do you think that darknet markets operate primarily on XMR then? Are they missing something about mixers?

Pretty much everyone in Monero will tell you that financial ...

2026-09-25T16:27:51Z

In reply to nevent1q…cqjv
_________________________

Pretty much everyone in Monero will tell you that financial transparency, when voluntary, is a good thing. That's why you can have optional transparency with Monero view keys, if you so choose. You can also prove payments in XMR.

Now I don't see how you could ever audit the sate just by virtue of running the world on Bitcoin (even if you could ban every other privacy technology ever made). People cannot even audit Saylor's BTC reserves on chain ffs.

I meant they don't get any money from you. At least in some ...

2026-09-25T16:03:55Z

In reply to nevent1q…s5lr
_________________________

I meant they don't get any money from you. At least in some parts of Europe second hand items don't have VAT.

For large amounts (six figs+) I see offshore gold vaults as a ...

2026-09-24T21:04:02Z

In reply to nevent1q…8hnp
_________________________

For large amounts (six figs+) I see offshore gold vaults as a compelling option. You just wouldn't put that kind of money in your relatives' home or your back yard (unless you have many, many of them). Makes way more sense to leverage the division of labor and pay for secure storage at that point.

In most jurisdictions you don't have to report the physical gold you own outside of the country, plus (surprisingly) there isn't any CRS-like snitching system for gold. Couple that with 100% allocation, 100% segregation and 100% insurance and you have a pretty solid storage plan.

If you buy second-hand google and the tax man get no money ;)

2026-09-22T22:08:48Z

In reply to nevent1q…gzpe
_________________________

If you buy second-hand google and the tax man get no money ;)

Are there any plans to implement Unified Push for the Android ...

2026-09-22T21:26:20Z

In reply to nevent1q…pr0f
_________________________

Are there any plans to implement Unified Push for the Android app? Seems like it would help with battery, even as an optional toggle.

#GrapheneOS , even with Sandboxed Google Play, reduces the ...

2026-09-20T08:58:06Z

#GrapheneOS , even with Sandboxed Google Play, reduces the requests your phone makes to Google 29-fold compared with the stock pixel OS. From 348 per hour to just 12.

quoting
nevent1q…5u26
"2026 DeGoogle Mobile Telemetry Study: 72-Hour Packet Capture Dataset
How much data does a phone secretly send to Google when you are not using it? Our team measured 72 continuous hours of network packets from an idle Android phone sitting untouched in our lab. Here is our raw dataset, our test setup, and what it means for your privacy."

https://www.praveentechworld.com/research/degoogle-telemetry-2026

I wish @nprofile…kclk did the same tbh. Kinda annoying not to ...

2026-09-19T15:48:30Z

In reply to nevent1q…dqnu
_________________________

I wish primal (nprofile…kclk) did the same tbh. Kinda annoying not to have **markdown** in short posts.

Could you share any links referring to those ex-Whatsapp ...

2026-09-19T15:44:25Z

In reply to nevent1q…uxgp
_________________________

Could you share any links referring to those ex-Whatsapp employees showing that the company can read e2e encrypted messages? Discounting the "report message" function ofc, since in that case you are the one sharing a copy of your keys for the last batch of messages to WhatsApp. I believe there is an ongoing lawsuit against Meta that claims e2e encryption in WhatsApp can be bypassed by the company, but I'd be pleased to look at any evidence I may have missed.

Do you also avoid Android and every Android derivative because of ...

2026-09-19T15:36:35Z

In reply to nevent1q…u9l0
_________________________

Do you also avoid Android and every Android derivative because of SELinux?

Then look into NovaCustom, they accept XMR too.

2026-09-18T20:40:01Z

In reply to nevent1q…yuej
_________________________

Then look into NovaCustom, they accept XMR too.

You have to listen to Anti-Moonboy News by @nprofile…j670 Thank ...

2026-09-15T19:32:06Z

In reply to nevent1q…qy26
_________________________

You have to listen to Anti-Moonboy News by xenumonero (nprofile…j670)
Thank me later ;)

When was signal compromised?

2026-09-15T19:17:57Z

In reply to nevent1q…slwv
_________________________

When was signal compromised?

Mind changed 😳

2026-09-14T21:07:00Z

In reply to nevent1q…fsac
_________________________

Mind changed 😳

5 takeaways from the #Revolut breach: 1. Banks are not your ...

2026-09-14T18:58:23Z

5 takeaways from the #Revolut breach:

1. Banks are not your friend:

First things first: banks care only about making 💲. Because they operate through a legacy fiat structure (regulated, insured, state-approved) and depend on government permission to operate, they have to comply with every legal demand to continue making 💲. They won't risk their license on a simple data request. The state makes the rules of the banking game and following them is mandatory.

2. Banks will always share your data:

Revolut, like #Wise and other neo-banks, is very convenient but remains one of the largest honeypots 🍯 for private financial data out there: passport pictures, selfies, full transaction history (including #Bitcoin), account balances... all shared with threat actors masquerading as government agents. The point of this latest hack is not whether Revolut needs better internal protocols, more robust verification procedures or a better GDPR stance; the real issue is that banks **have to** share this data with the government (+ corporations) in order to operate—survive, even. In the legacy fiat system, your sensitive financial records are handed over by default. What you've seen is just a small error in the enormous information-exchange machine, which is composed of AML agencies, credit bureaus, tax collectors and other state-aligned entities.

3. Banks will always request more data:

As surveillance grows and regulations tighten, banks will request ever more invasive data points from you, their customer. No matter that you've already complied with every prior demand, one single instance of "suspicious" activity and you suddenly become guilty until proven innocent, which leads the bank to ask you for all your information, all over again (even if they already had most of it). You can never be completely "clean" in this Kafkian machine; whitelists require political connections or big money, and are only there because the government turns a (very selective) blind eye to its friends. The trend is clear as day and doesn't show any signs of changing: more requests, more scrutiny, more suspicion. For example, some banking apps are now requiring uninterrupted location access 📍 just to function, with the excuse of combating malicious login attempts.

4. Banks will always end up leaking your data:

Assume all of your banking data will be made public at some point in the future and modify your behavior accordingly. A good rule of thumb is this: would I be embarrassed if someone shouted this information in my town's main square? If not, proceed with the transfer. For sensitive purchases, use cash 💵 in physical stores and #Monero or Lightning ⚡ for online payments. The more you use private money, the less data there is for the machine to swallow. Minimize how much you feed it.

5. Banks will not erase your stolen data:

The consequences of a data breach 🪪 are long-standing. The sensitive records you willingly gave out cannot be deleted afterward—criminals don't honor the "right to be forgotten" and banks are obliged by the state to keep records for eternity at this point. Your legal name, address 🏠 and bank balance are hard to change. In isolation, they don't pose a threat to your safety. However, grouped together in the hands of an attacker, they suddenly become dangerous. Keep this fact in mind and plan around it.

I'd say it's just gay

2026-09-14T14:29:34Z

In reply to nevent1q…eqzc
_________________________

I'd say it's just gay

Ultimately depends on what you value. If security is important ...

2026-09-14T14:26:33Z

In reply to nevent1q…mqd8
_________________________

Ultimately depends on what you value. If security is important for you then stay far away from old thinkpads and look into devices with modern firmware security. At least HSI level 3, you can compare models on the LVFS website.

#Omarchy is vibe-coded 💩 slop. #ChangeMyMind

2026-09-14T14:14:24Z

#Omarchy is vibe-coded 💩 slop. #ChangeMyMind

Someone said some wise words to me at a conference: "Monero ...

2026-09-14T14:05:09Z

In reply to nevent1q…e7rh
_________________________

Someone said some wise words to me at a conference:
"Monero is long dystopia."

A worthwhile distinction to make when discussing this topic is ...

2026-09-14T14:02:26Z

In reply to nevent1q…2qu3
_________________________

A worthwhile distinction to make when discussing this topic is that of the classical definition of inflation (growth of the money supply) vs the modern definition of inflation (price surge). Monero, like gold, is inflationary in the sense of the first definition only, not the second.
Annual tail emission forever being less than 1% of the total supply and the equilibrium between lost coins and newly minted ones are the two phenomenons that prevent the latter—loss of purchasing power— from happening. I feel like many people talk past each other arguing about this because they simply hold different definitions of inflation.

Good post overall with solid advice. I disagree with the ...

2026-09-14T12:01:36Z

In reply to nevent1q…pv7d
_________________________

Good post overall with solid advice. I disagree with the following:
> If you're a Monero people, you probably shouldn't be using Nostr.
Plenty of Monero people are on X too so don't assume liking a privacy project means you have to be at Snowden level in terms of your threat model. Monero people tend to like Nostr for its censorship resistance and decentralization.

So the permissionless platform is destroyed by people joining the ...

2026-09-14T11:55:34Z

In reply to nevent1q…tcm8
_________________________

So the permissionless platform is destroyed by people joining the platform in a permissionless way? 🤔

You know, with Monero's never-ending inflation and your ...

2026-09-14T11:52:29Z

In reply to nevent1q…064q
_________________________

You know, with Monero's never-ending inflation and your proposal to burn coins, you are contributing to XMR reaching equilibrium. New supply gets compensated by lost coins, so if anything you are doing a great service to #Monero.

Most definitely, in the end chain surveillance is just a tool in ...

2026-09-14T11:36:32Z

In reply to nevent1q…m65v
_________________________

Most definitely, in the end chain surveillance is just a tool in the LE toolbox. Scanning the blockchain gives them relevant metadata that they use to aid investigations. A public blockchain by itself is not going to send you to prison. Associating yourself with your illicit public key in some way (OPSEC mistake) could.

The OPSEC Bible has some good articles about such mistakes you might find interesting:
http://opbible7nans45sg33cbyeiwqmlp5fu7lklu6jd6f3mivrjeqadco5yd.onion/opsec/opsec-mistakes/index.html

Primero, estudiar ortografía.

2026-09-13T22:25:44Z

In reply to nevent1q…q35m
_________________________

Primero, estudiar ortografía.

Above my third leg 😉

2026-09-13T22:18:45Z

In reply to nevent1q…8cmv
_________________________

Above my third leg 😉

I personally trust the people behind it. That being said, they ...

2026-09-13T22:16:06Z

In reply to nevent1q…6m5a
_________________________

I personally trust the people behind it. That being said, they are currently overhauling the app with a new residing and the source code for the new version is not yet public. Keep that in mind and see how it fits your trust model.

That's a really interesting legal case that I believe is ...

2026-09-13T22:08:08Z

In reply to nevent1q…kdjm
_________________________

That's a really interesting legal case that I believe is still ongoing. IIRC the evidence upon which he was convicted was that he sent BTC to an address associated with Bitcoin Fog or something ludicrous like that. No proof beyond reasonable doubt whatsoever.

The difference with XMR is that there is no effective chain ...

2026-09-13T22:03:05Z

In reply to nevent1q…tyke
_________________________

The difference with XMR is that there is no effective chain surveillance to follow the money. You can use KYC'd Monero to commit a crime or send stolen Monero to a centralized exchange and pretty much nothing will happen to you. There is no KYC/No-KYC distinction to do in Monero. No clean/dirty coins. That's why hackers prefer it. Fungible MoE.

Obviously OPSEC and other heuristics still matter, but Monero eliminates the trail that could directly lead to an off-chain identity.

Its a Linux variant designed to be ephimeral and anonymous. You ...

2026-09-13T20:55:10Z

In reply to nevent1q…ucyz
_________________________

Its a Linux variant designed to be ephimeral and anonymous. You can usually run it from a USB drive and connects to Tor by default.
https://tails.net/

Moneropastillado 😎 🍊💊

2026-09-12T11:59:51Z

In reply to nevent1q…neqn
_________________________

Moneropastillado 😎 🍊💊

Thanks, I wasn't aware of the capability for offline ...

2026-09-10T16:21:43Z

In reply to nevent1q…lml9
_________________________

Thanks, I wasn't aware of the capability for offline transactions. My second point was more about data collection and aggregation efficiency but yeah, they end up with the same information in both cases. We will have to see how the proposal is ultimately implemented and whether the implementation would allow for more dystopian features that they'd pinky-promise to never enable.

Love it! Why not update prices to the 67 day MA? 😜

2026-09-09T22:18:08Z

In reply to nevent1q…gs8g
_________________________

Love it! Why not update prices to the 67 day MA? 😜

Don't the other properties of CBDCs outweight the benefits ...

2026-09-09T22:15:31Z

In reply to nevent1q…n8ws
_________________________

Don't the other properties of CBDCs outweight the benefits when compared with banking? There is a qualitative jump between the two systems regarding programmability. Your bank cannot force you to spend your money inside of your neighborhood or next month, for example.
Regarding efficiency, reliance on compliance from many third parties is substantially worse than a centralized one party approach. The EU would have to spend a lot more resources aggregating all banking customer data (assuming, for argument's sake, that all commercial banks relay every piece of data, which is unlikely) than simply looking at the CBDC ledger.
Just curious to know whether you consider these two factors to be significant or not.

Trezor getting hacked left and right these days... IMO nothing ...

2026-09-09T21:53:18Z

In reply to nevent1q…zav6
_________________________

Trezor getting hacked left and right these days...
IMO nothing beats buying a hardware wallet directly from the manufacturer with cash at a crypto conference.

#GrapheneOS has "essentially zero meetings." No ...

2026-09-07T23:41:13Z

#GrapheneOS has "essentially zero meetings." No managerial MO, no meeting quotas, no corporate BS. Devs get paid on output. That's why I donate to them.

Thanks! 🤠🤝

2026-09-06T21:57:34Z

In reply to nevent1q…eahs
_________________________

Thanks! 🤠🤝

Learning more about #Nostr these days. Looks very promising...

2026-09-06T11:41:54Z

Learning more about #Nostr these days. Looks very promising...

Is Nostr the best way to listen to Anti Moonboy News? 😎 Has to ...

2026-09-02T23:01:11Z

In reply to nevent1q…0j27
_________________________

Is Nostr the best way to listen to Anti Moonboy News? 😎 Has to be second best™ to using AntennaPod and streaming direclty from RSS.

Another point worth considering is the atrocious cybersecurity ...

2026-08-25T16:00:12Z

In reply to nevent1q…sg8y
_________________________

Another point worth considering is the atrocious cybersecurity practices of the vast majority of offshore agents and jurisdictions. Liechtenstein's UBO database was hacked recently, and there is no hiding that information anymore once it’s public or for sale. It wouldn't surprise me if tax agencies were paying large sums for those infodumps in order to create parallel construction from them.

A funny anecdote that also illustrates this point: I was asking the owner of a pentesting company about their registered agent for the formation of a private LLC, and he quickly replied to me—'What privacy? I hacked my registered agent almost by chance! I tried fixing an email forwarding issue I had with them and ended up having access to all client mail. There is no privacy if they can be hacked so easily.'

I think the takeaway is that these systems still adhere to legacy institutions operating under centralized databases. You can have a reasonably private structure on paper, but wait until one bank, agent, or government database goes for sale, and see how quickly all that privacy evaporates.