m0wer

JoinMarket NG

Public Key

npub1w3vaxva0vcrx7pnvlpmede5smvafdl69xnu7ma82kaxl9us89zdsht4c5c

NIP-05 Address

Profile Code

nprofile1qqs8gkwnxwhkvpn0qek0sauku6gdkw5klaznf70d7n4twn0j7grj3xcpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds6u7qul

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1w3vaxva0vcrx7pnvlpmede5smvafdl69xnu7ma82kaxl9us89zdsht4c5c

Show more details

Last Notes

2026-07-05 14:41:19 UTC

JoinMarket makers can be clustered (across mixdepths). Two ways:
- Easily if their CJ fee is unique enough and reused between rounds.
- Harder by gathering co-spending thought many rounds and waiting for the intersection to be narrow enough.
It's easier said than done in practice. Bit it's still something to improve.
Here is a more detailed explanation of the problem and possible solutions that could bring JM achieved anonymity to the next level.
https://gist.github.com/m0wer/a228c625fcb6a27c32e298ec903dfc44
Feedback welcome!

2026-06-29 19:15:17 UTC

- reply

Thanks for the answer. I meant this with the profitability question:
#nevent1q…jeve

2026-06-29 12:40:14 UTC

- reply

Oh and about profitability, the problem is not the small difference in fees depending on the block transactions. I was talking about having most of the pool's hashrate mining only over a BIP-110 chain of blocks (fork) that then get reorged so all those block rewards are gone and the hashrate "wasted". The impact of profitability would be huge in this case. And it's more about what people within the pool decide to do, not even conditional to overall support of BIP-110.

2026-06-29 12:36:10 UTC

- reply

DATUM allows for pooled mining while each miner decides on their block template. That's what I was referring to.
Currently, you can mine for Ocean pool and get paid the proportional share of your hashrate for the pool mined blocks while choosing your own block templates.
This gets interesting if some blocks stop being considered valid. Or if Ocean needs to check every miner's block template to decide if their shares are valid or not.
And Ocean is a company. That does way more than "organizing hashrate" so it's not crazy to ask them for their intentions on this topic.

2026-06-29 11:54:00 UTC

@nprofile…0rnh @nprofile…c93l Will OCEAN pool enforce BIP-110 compliance for DATUM miners? And for its stratum?
What happens to a DATUM miner that builds its own block templates if it finds a block that includes non compliant transactions? Or even if it doesn't find it, does the hashrate still count?
And of the pool enforces BIP-110 even if only for stratum, I guess rewards will come from BIP-110 blocks only. Which means lower profitability (but same would happen in the other side). But additionally means that many block rewarda are at risk of being invalidated (reorg). So what happens to LN instant payouts?
Don't these questions deserve an official announcement? Maybe I've missed it but couldn't find any.

2026-06-21 07:10:46 UTC

- reply

Should I be angry at my grandma because of her public pension? She's receiving way more than she contributed.
Unfortunately many people benefit unfairly from the state. Should I also "hate" anyone that went to a public university or hospital?
I see the point, but don't think it's fair. I hate the state, which is clearly who steals from me. And I'm disappointed of those who defend that robbery (whether they benefit from it or not). But I don't get into second order beneficiaries. Is a public health doctor net negative? Is a university professor? Where's the line?

2026-06-16 20:53:58 UTC

How would Bitcoin work if there was a human settlement on Mars? And further away?
The time it takes for electromagnetic waves traveling at the speed of light though open space is between 3 and 22 minutes depending on the relative position between the Earth and Mars.
So for example, Mars miners would be at a great disadvantage at first! And reorgs (chain forks) would occur more often.
For regular transactions, it would just mean higher waiting times for Mars users.
But Lightning Network path finding... Probably impractical!
What if there's a human (or another intelligent life form) settlement further away? As in weeks or light years far?
Should each 10 light minute radius area get their own coin? And then the market does its thing setting the exchange rates? Or?

2026-06-10 21:03:03 UTC

- reply

Woild be ao mice though :(

2026-06-10 20:40:46 UTC

- reply

congrats @nprofile…pt0r ;-)

2026-06-10 20:33:24 UTC

Stablecoins are winning. We can use this as an opportunity.
Slides from @nprofile…pptm
https://blossom.primal.net/6a3b3af1b5397ae2a2682c0266ec01f60e30a4df50026551b716b6abee9d5798.jpg

2026-06-10 16:14:10 UTC

complexipy: Code complexity analyzer
https://github.com/rohaquinlop/complexipy
Blazingly fast cognitive complexity analysis for Python, written in Rust.
> Cognitive complexity measures how hard code is to understand by humans, not machines.
Unlike traditional metrics like cyclomatic complexity, cognitive complexity accounts for nesting depth and control flow patterns that affect human comprehension. Inspired by [G. Ann Campbell's research](https://www.sonarsource.com/resources/cognitive-complexity/) at SonarSource, complexipy provides a fast, accurate implementation for Python.
**Key benefits:**
* **Human-focused** - Penalizes nesting, flow breaks, and human-unfriendly logic
* **Actionable insights** - Identifies genuinely hard-to-maintain code
* **Different from cyclomatic** - Measures readability while cyclomatic measures structural, testing, and branch density
Try it with:
```shell
pip install complexipy
complexipy . --failed --suggest-refactors # in a python project
```
Example output for JoinMarket NG:
```
joinmarket-ng/tumbler/src/tumbler/runner.py
TumbleRunner::_run_taker_phase 19 ❌ FAILED
Refactor plans:
1. Extract complex block into helper function, lines 351-405
estimated: 19 -> 7 (-12)
steps:
- move the selected block into a private helper
- pass required values as parameters
- return the result/status needed by the caller
TumbleRunner::_run_maker_phase 24 ❌ FAILED
Refactor plans:
1. Extract complex block into helper function, lines 496-523
estimated: 24 -> 6 (-18)
steps:
- move the selected block into a private helper
- pass required values as parameters
- return the result/status needed by the caller
2. Flatten loop body with continue guards, lines 500-521
estimated: 24 -> 14 (-10)
steps:
- add negative condition checks at the top of the loop
- use continue for skipped items
- keep the main processing path unindented
3. Flatten nested condition block with guard clauses, lines 505-506
estimated: 24 -> 22 (-2)
steps:
- invert the outer condition
- return early when the condition fails
- move the main success path one indentation level left
- repeat for inner nested conditions where safe
```
https://stacker.news/items/1505973

2026-06-10 11:53:16 UTC

- reply

Cyberpunks write code.

2026-06-10 11:45:40 UTC

- reply

crazy

2026-06-10 11:40:11 UTC

- reply

nice try NSA

2026-06-09 13:06:37 UTC

- reply

Oh! I really like that idea.
I guess humans having something to lose is also what makes us "lazy". We cut corners and make mistakes because we try to save time.
It is really amazing what one can achieve with the non laziness properties of AI. I've tried many times to have my papers/books directory organized (directory structure, filenames, metadata) and failed. It just takes to be in a rush once to open the door to chaos.
But with AI, I just throw new stuff under pending/ and trigger the AI to follow the recipe. And it changes completely the mental cost of adding new content to the library.
Another big advantage is probably preventing writing fingerprinting. For anyone that has written enough publicly, there's probably sufficient information to uniquely identify that writing style.
Interesting.

2026-06-09 12:57:18 UTC

- reply

Cashu is not Bitcoin. It's debt. An IOU.
But financial debt is not bad on its own. The problem is usually the debtor. Fiat in a bank is debt squared. With the additional disadvantage of 0 privacy and collaboration with the state.

2026-06-09 12:22:25 UTC

- reply

What if Bitcoin already had all it needs to scale and do so with decent privacy?
I want my friends&family Bitcoin services to be as good as my Jellyfin+Ombi setup. People *ask* for an account, it's not me pushing it to them. Because it's better than Netflix, easy to use, and it just works.
Now, I want to improve my cashu mint setup. Find a nice mobile wallet to recommend (looks like minibits for now), and have a fast and robust LN node underneath so that payments work and settle fast.
Will share the final setup once it proves to work for my users.
#naddr1qq…4gxm

2026-06-09 07:55:21 UTC

- reply

#nevent1q…565g
The idea of the next Satoshi Nakamoto being non-human left me thinking last night. I think that won't be the case, because they lack something: caring. They just don't care. They have nothing to lose!
We could already throw an AI into a VPS with a LN wallet with some funds and ask it to run a service or something to eventually "make a living" and pay for its tokens. But why would it? Any mistake that kills its "cron" or main process would "kill" it. And I'm super sure that it will make such a mistake rather quickly. Because it doesn't care.
Even if we got through that, imagine it stays "alive" for long and creates an online service that people pay for (idk, something like nadanada/LNVPN, or nostr.wine). Does it really care about customers? It would be great at apologizing, but probably not enough to keep the service reliable and prevent mistakes on the first place.
I was thinking about this for JoinMarket development: couldn't an AI just handle questions, issues, decide the roadmap, and work on the code? Technically yes. But it probably would take at most a few weeks until there's a funds loss bug or the software becomes unusable due to feature bloat for example.
The difference is that a human cares. The same thing that makes us reluctant to admit mistakes, is what motivates us to avoid them "harder". Ego? Reputation? Responsibility? An AI doesn't have that, for good and for bad.
That's why AI produces sloppypasta: #naddr1qv…nsa5

2026-06-08 19:37:37 UTC

Pieter Wuille (fun) Facts
http://pieterwuillefacts.com/
https://stacker.news/items/1504789

2026-06-08 18:42:21 UTC

- reply

sad :(

2026-06-08 15:14:17 UTC

Am I Being Pwned? - Browser Extension Scanner
https://amibeingpwned.com/
https://stacker.news/items/1504617

2026-06-08 14:51:15 UTC

DeepSWE: Measuring frontier coding agents on original, long-horizon tasks
https://deepswe.datacurve.ai/
![benchmark](https://m.stacker.news/144105)
> Today's leading public coding benchmarks are starting to saturate at the frontier: top models cluster within a narrow score band where adjacent configurations often overlap on confidence intervals. DeepSWE is a long-horizon software engineering benchmark built to separate them. It delivers four advances over existing public benchmarks:
> **Contamination free**: Tasks are written from scratch, not adapted from existing commits or PRs, so no model has seen the solution during pretraining.
> **High diversity**: Tasks span a broad pool of 91 repositories across 5 languages.
> **Real-world complexity**: Prompts are ~half the length of SWE-bench Pro's, yet solutions require 5.5x more code and \~2x more output tokens.
> **Reliable verification**: Verifiers are hand-written to test software behavior rather than implementation details.
> The result is a benchmark that reflects how today's frontier coding agents actually perform in software engineering work.
https://stacker.news/items/1504607

2026-06-08 14:28:05 UTC

How Did DeepSeek V4 Make V4 So Cheap? - YouTube
https://www.youtube.com/watch?v=gC76aeibdFA
Paper: https://www.alphaxiv.org/abs/deepseek-v4
https://stacker.news/items/1504595

2026-06-08 08:15:55 UTC

Looking for feedback on https://github.com/joinmarket-ng/jmp/pull/3 (Taproot offers)

2026-06-08 06:04:56 UTC

The Economics of Protocol Design: Proposing Lightning over Ark‬ - YouTube
https://www.youtube.com/watch?v=hqKQ4Rky3tY
René Pickhardt at BTC++ conference.
Description: Venture Capital Money has a surprising influence over protocol design. Not rarely technical sound solutions won't find consensus due to market sentiment and selfish interests of participants. We investigate this with the example of the debate about ark vs. lighting network as the future payment system for Bitcoin.
Paper: [https://arxiv.org/abs/2601.04835](https://arxiv.org/abs/2601.04835)
https://stacker.news/items/1504446

2026-06-07 19:57:10 UTC

- reply

yes! what's about to say that. And that did not save them

2026-06-06 19:21:33 UTC

- reply

And if you set the minimum reserve to match those, there's no security problem anymore.

2026-06-06 19:19:31 UTC

- reply

It uses the underlying node default fee limits. Right?

2026-06-05 10:29:44 UTC

We're now co-signing JoinMarket NG releases!
@nprofile…79aj has reviewed up to 0.30.0 and that's the first co-signed release.
https://github.com/joinmarket-ng/joinmarket-ng/commit/9a6e8d4333ff716336c05671e07bd9454dc7f43d
He also fixed a docker image reproducibility issue.
Still looking for more eyes. If you can review the code and want to co-sign with us, please reach out.

2026-06-05 08:40:32 UTC

- reply

do they? they look more like inflation "detection" more than explanations on why it would be unlikely for it to happen in the first place

2026-06-05 08:21:34 UTC

- reply

What's interesting is how they manage to keep the TRY exchange rate more or less stable against other currencies. Prices have rosen like crazy but the TRY/EUR pair has barely moved.

2026-06-05 05:44:04 UTC

- reply

That doesn't solve the "censoring". Primal uses a special caching relay for reading. Which is not a nostr relay but some custom thing. I guess you could self host that, but it's not as simple as configuring additional relays.
On top of that they have an npub blacklist which I'm not sure where it comes from and that might not be easy to avoid.

2026-06-04 20:49:48 UTC

I have a problem. I only like Primal for its UX but I'm getting tired of "mentioned event not found". Did not come to nostr for censorship but for censorship resistance.
Any Nostr client recommendations? Have tried Iris and wisp already and was not convinced :(

2026-06-04 18:10:55 UTC

- reply

Good luck enforcing that🤭

2026-06-04 06:20:36 UTC

- reply

sad :(

2026-06-02 08:18:08 UTC

- reply

sad :(

2026-06-02 08:14:14 UTC

Fast, efficient, and high-quality text-to-speech for GrapheneOS
https://github.com/GrapheneOS/SpeechServices
Speech Services provides fast, efficient, and high-quality text-to-speech for [GrapheneOS](https://grapheneos.org) using state-of-the-art models running completely on-device.
https://stacker.news/items/1500823

2026-06-02 08:10:07 UTC

- reply

The relay is not the problem. There are many relays already. But Primal is designed around their caching relay which is not easily replaceable.

2026-05-31 19:16:20 UTC

- reply

Sure. But there's a big difference between who has access to it and what it stores. Selectively excluding notes sounds pretty intentional.

2026-05-31 11:40:26 UTC

Is Primal censoring stuff?
https://stacker.news/items/1499789

2026-05-31 11:23:24 UTC

- reply

2026-05-30 20:48:23 UTC

Cashu Mint Auditor
https://audit.8333.space/
This app sends random Lightning payments between mints. Forever. The sats go in a circle until all is lost to fees or rugs. If a mint fails to pay an invoice, it is marked with a scary red label.
https://stacker.news/items/1499492

2026-05-30 15:43:07 UTC

- reply

can't zap you! but thanks :-)

2026-05-30 15:01:28 UTC

- reply

do you have a link to it?

2026-05-30 12:50:59 UTC

Wouldn't it be nice so receive Silent Payments and CoinJoin them after?
Or how else could a developer receive Bitcoin donations with some privacy?
PR for Silent Payments (BIP352) support for JoinMarket NG: https://github.com/joinmarket-ng/joinmarket-ng/pull/513

2026-05-30 11:39:17 UTC

- reply

Have been using the now available Android app for a while now and unfortunately will have to go back to WireGuard configs. Mainly the missing features are:
- Widget to temporarily toggle it off. And that still works with the "Always on" VPN setting. So that you can actually use the Internet connection with the VPN temporarily off through the widget.
- Exclude addresses on local networks.
Other things are not that important. But can't live without these two!
Super happy with the service in general though.

2026-05-30 11:15:16 UTC

- reply

How does the Lightning channel management work? Is the Bitcoin node within the TEE or external?

2026-05-30 10:55:57 UTC

Privacy-preserving license plates using blind signatures
License plates are crazy from a privacy standpoint. We'd riot if the government made us wear a badge with our name on it every time we left the house. But bolting a permanent unique identifier to our car? Totally normal.
Now there are ALPR (automatic license plate reader) networks everywhere, public and private, logging everything. Check https://deflock.org/ for the USA picture. From plate data + camera feeds (public or insecure private ones) you can infer where someone lives, works, when they're not home, who they meet. Some countries even let you query the vehicle registry directly from the plate.
I don't think accountability for cars is necessarily wrong. If you rear-end someone and flee, it's fair they can identify you. I just don't think we need to trade mass surveillance for that. Cryptography exists.
A basic scheme:
Every day you generate a random string r, compute H(r), and get it blind-signed by an issuing authority (they sign without learning what they're signing: Chaumian blind signatures, same as ecash). You put r on your e-ink plate as a QR code, along with the signature. Anyone can verify: hash the preimage, check the signature. If you cause an accident, the witness notes r and can prove they saw your plate. To find out who you are, they go to court, the authority looks up who requested the blind signature for H(r). No public link between your plate and identity. Already way better than today.
Problems and improvements:
Daily rotation is too slow: Cameras still build a full-day profile. Rotate every 5–10 minutes instead. Eric Rescorla arrived at a similar scheme: https://educatedguesswork.org/posts/license-plates/ and explores the tradeoffs well, including how the authority can precompute a lookup table for all vehicles and time windows cheaply enough that de-anonymization doesn't require your cooperation.
The authority is still a chokepoint: Whoever registers you and creates the H(r) -> identity link already knows both sides. Threshold encryption of the stored record is a governance improvement (requires k-of-n parties to cooperate, auditable) but not a fundamental one. The registrar still has the information at creation time. The real protection is legal process + the fact that passive surveillance is broken. That's already a big deal compared to today, but it's not zero-trust.
The cryptography is production-ready. The gap between "solved" and "deployed" is almost entirely political.
Posted to https://stacker.news/items/1499201

2026-05-30 10:10:38 UTC

Rewrote the "JoinMarket Maker Clustering and Taker Anonymity-Set Reduction" article with a clear example as introduction, a glossary, and trimming most sections.
Published at https://joinmarket-ng.github.io/coinjoin-simulator/mainnet-deanon.html (same URL, old version preserved in git).
The discussion about possible mitigations is ongoing at https://github.com/joinmarket-ng/joinmarket-ng/issues/508
BTW the JM protocol is not broken, just improvable.

2026-05-29 15:27:47 UTC

JoinMarket NG 0.31.0 release is out.
More improvements about deep wallet scanning. Also security hardening, TUI improvements, and bug fixes. Automated Win/Mac/Linux install tests.
https://github.com/joinmarket-ng/joinmarket-ng/releases/tag/0.31.0

2026-05-26 13:38:14 UTC

Max Hillebrand: The Praxeology of Privacy - YouTube
https://www.youtube.com/watch?v=A4_1E2kJ5_w
Timothy Allen speaks with Max Hillebrand.
Max joins me to explore freedom, privacy, and property rights in the free market of ideas. We discuss Cypherpunk strategies, the appeal of Bitcoin, Free Cities, and digital nomadism as ways to resist creeping socialism and surveillance. Drawing on Lockean ownership theory, Austrian economics, and praxeology, Max makes the case for combining decentralization, community, and technology to defend liberty in both physical and digital realms.
TIMESTAMPS:
0:00:00 — Coming up
0:00:41 — Veritas Village preview
0:01:27 — Start of conversation
0:10:02 — Triangular Interventions of the State
0:11:26 — The banning of VPNs
0:16:27 — Mean Time To Harassment
0:24:43 — The Cypherpunk Ideal: Increasing the Cost of Attack
0:30:38 — Dragnet Surveillance & Privacy
0:36:48 — Free Cities and The Importance of Freedom in Meatspace
0:44:04 — There are No Frontiers Left
0:53:08 — Conscription is Coming Back
1:00:57 — There are Many More Good People Than Bad
1:06:53 — AI and Robots of Convenience in the Dystopian Future
1:18:25 — Bitcoin Proves John Locke's Theory of Property Rights
1:25:29 — Proving Economic Reasons
1:31:40 — The Cypherpunks Don't Know How Fundamentally Correct They Are
1:36:47 — Freedom is Correct. The State is Evil
1:49:22 — AI Will Remove Scarcity from the World
1:53:50 — Keynsian Bullshit
1:58:08 — Tik Tok Will Eventually Generate 100% AI Content
2:10:35 — Rally Cry for Freedom Lovers
NOSTR:
Max Hillebrand: npub1klkk3vrzme455yh9rl2jshq7rc8dpegj3ndf82c3ks2sk40dxt7qulx3vt
Timothy Allen: Search '[timothy@nostr.com](mailto:timothy@nostr.com)' on your Nostr app
Free Cities Foundation: npub1lsj8pmgedqqamt89c27tzjjnlf0wn7q7udjm7j2cl9xxz97eacns2mwpee
https://stacker.news/items/1496628

2026-05-26 13:34:52 UTC

- reply

Please no! xD
Take everything as open for discussion, and expect only optional changes that users will decide if they use or not.

2026-05-26 13:15:57 UTC

- reply

Well you don't need the lightning node to run within the enclave right? Just a "smart" signer that signs HTLCs given the redeemed cashu token. For rebalancing maybe some rule of "not loosing funds" and someone external has to pay the rebalancing fees. You can prove to the enclave that the rebalancing succeed or that a LN invoice for which it only revealed the payment hash has been paid.
I'm sure there are lots of challenges here, but the main point is that it doesn't need to run "everything".

2026-05-25 21:02:04 UTC

Been digging into JoinMarket maker clustering on mainnet. the short version: yes you can cluster makers by fee fingerprint from onchain data alone, and yes it reduces taker anonymity sets. But JM holds up pretty well in practice. mean anonset goes 7.6 -> 6.9, and the mitigation (fee policy homogenization) *can* be a client default change, no protocol surgery needed.
The counterintuitive part: some "obvious" countermeasures like makers avoiding change as input actually make things worse.
Rough draft, not peer reviewed, happy to get feedback: https://joinmarket-ng.github.io/coinjoin-simulator/mainnet-deanon.html

2026-05-25 20:59:08 UTC

- reply

I do! It started as an LNbits instance but felt uncomfortable with seeing their balances and all transactions!
Now I'm able to give them that service with the same custodial "risk" but at least with some privacy.

2026-05-25 05:58:35 UTC

- reply

myself for friends and family

2026-05-24 16:02:16 UTC

The Ultimate Lightning Network Privacy Explainer
https://voltage.cloud/blog/lightning-network-privacy-explainer
https://stacker.news/items/1495707

2026-05-24 13:26:14 UTC

- reply

Why meshcore over meshtastic? Have heard contradictory arguments.

2026-05-24 09:05:27 UTC

- reply

Blockchains don't scale.

2026-05-24 06:52:56 UTC

- reply

Please name a place on earth where it's easier to make money. It might be true that building wealth is hard in general and that the USA is the easiest place on earth to do so.

2026-05-23 21:00:47 UTC

Texas sues Meta, WhatsApp over encryption privacy claims
https://www.reuters.com/legal/government/texas-sues-meta-whatsapp-over-encryption-privacy-claims-2026-05-21/
Texas’ lawsuit cites news reports about a federal investigation into ‌claims ⁠that Meta had access to unencrypted WhatsApp messages and a whistleblower report to the U.S. Securities and Exchange Commission.
https://stacker.news/items/1495402

2026-05-22 12:17:29 UTC

- reply

Nice to see you back!

2026-05-21 17:12:21 UTC

- reply

How are you going to make any profits in a rigged system?
Every wall is just an added cost.

2026-05-21 15:47:35 UTC

- reply

Not exactly Ocean IMO. You can choose your own blocks with DATUM.
Before, they used to have different template options for stratum miners as well. Not nice that they've removed this feature.

2026-05-21 15:42:15 UTC

- reply

Lightning Network privacy is real. But "better than on-chain" isn't the same as "private."
#naddr1qq…0xsd

2026-05-21 15:40:50 UTC

- reply

It's a very nice problem to have compared to the confiscation problem ;-)

2026-05-20 17:15:39 UTC

The latest JoinMarket NG release comes with major improvements for wallet performance, specially for exiting old wallets with lots of transactions. Also security hardening, TUI improvements, and bug fixes.
https://github.com/joinmarket-ng/joinmarket-ng/releases/tag/0.30.0

2026-05-19 15:02:46 UTC

- reply

why not use Bisq or another P2P method?

2026-05-19 05:53:16 UTC

- reply

https://blossom.primal.net/031fa62622b02e48c0a22da65c2ab683982a208cb0f9d0aad23d5ffc992d17ce.jpg

2026-05-17 05:22:43 UTC

- reply

why glad? components are only getting more expensive lately!

2026-05-15 16:58:34 UTC

- reply

I think it's important for scalability. And happy to hear it.
But in general I think it's tough to beat Bitcoin as money. Specially as savings technology.
Humans have strived for sound money since forever, and the market cap for that problem is huge.
Payments come next (scalability). And only after comes privacy. Which is super important still.
But since protocols are "winner takes all", I think Bitcoin's market cap will keep diverging from Monero's. And that's not only about NGU, it also means that every bit of effort that you put on improving or building on Bitcoin, has a larger multiplier in terms of the impact it has on the world.

2026-05-15 16:32:59 UTC

- reply

I think it chose different tradeoffs.
Use it if it's useful to you. I don't like the "dogmatic" approach to things.
That being said, I prefer Bitcoin as money and as something to work on for several reasons: more traction, LN (blockchains don't scale, including Monero), auditability, simplicity.

2026-05-15 16:21:16 UTC

- reply

Answering about Lightning only, I would say yes.
Because it does a good job at keeping your transactions private from "the rest of the world". The problem is that the nodes that forward your payment (or even the ones that fail to), do learn quite a bit. And an external prober also could.
But is already way better than a bank transfer, a card payment, or a regualr Bitcoin transaction.
Will explain the details in a post soon™️

2026-05-15 12:03:41 UTC

- reply

That would be a great improvement.

2026-05-15 11:59:41 UTC

- reply

That already sounds pretty decent. But privacy on Lightning is tricky! I want to write an article on that soon.

2026-05-15 09:14:50 UTC

- reply

Based.

2026-05-15 08:43:31 UTC

Privacy isn't binary. There is no silver bullet or magic tool that can give you "full" privacy. Privacy is hard to understand and practically difficult to measure. But easy to lie about.
Even many bitcoiners think Monero has "unbreakable" privacy. It doesn't, and no tool, network, or protocol ever will.
https://www.youtube.com/watch?v=iABIcsDJKyM
This video is a good example of how weak Monero's privacy can be in practice. (This isn't a criticism of Monero, it's a criticism of following mantras blindly and being fooled by slogans without understanding the details. Monero devs are doing great work.)
It shows how even if you can't tell which output was spent in a 16-participant ring signature, the anonymity set collapses on something as simple as a consolidation. Which would be critical for merchants, for example. And in practice it can be even worse, because there are methods to further reduce the effective anonymity set of the ring participants. Many more attacks and sources of metadata exist for intersection attacks too.
If you keep looking for a bulletproof privacy solution, you'll keep getting fooled. ;-)

2026-05-15 07:53:15 UTC

- reply

Not a Monero guy! Actually a Bitcoin privacy developer ;-)

2026-05-15 06:24:54 UTC

Travelling the world, I've noticed something: people in "poor" countries often live surprisingly "free" from the state.
They build houses however they want, open businesses without licenses, ignore regulations, use cash for everything, pay no taxes. You get the idea.
I'm not romanticizing it. I'm trying to understand *why* it works. The answer is probably simple: economic incentives. The cost of prosecuting them exceeds what the state could extract. They're effectively protected by that asymmetry.
Which raises the next question: what asymmetry could let us live more freely *and* maintain a high standard of living?
My answer: privacy.
Bitcoin protects you from inflation. Great, but that's a separate conversation. What actually expands your freedom is privacy. Where you live, who owns the property, how much rent you pay, what you buy, where you go, what you drive. Make your life so opaque that you become unprofitable to pursue.
Bitcoin alone doesn't get you there. Without privacy, it's only a matter of time before someone decides you're worth going after.

2026-05-06 07:08:30 UTC

Pretty nice supply chain attack: https://www.youtube.com/watch?v=TwJhkFnROV8

2026-05-05 20:09:48 UTC

JoinMarket NG is now part of the regtest environment for Jam v2. Great milestone!
https://github.com/joinmarket-webui/jam/pull/1240

2026-05-05 18:20:23 UTC

- reply

why not just update?🤔

2026-05-05 16:11:34 UTC

Bitcoin Core :: CVE-2024-52911 - Script Interpreter Remote Crash
https://bitcoincore.org/en/2026/05/05/disclose-cve-2024-52911/
**CVE-2024-52911**: use-after-free in Bitcoin Core's script validation; a background thread can read freed memory when an invalid block triggers an early exit.
An attacker with enough PoW can craft a block to **crash your node**. RCE is unlikely but not impossible.
Affected: v0.14.0–28.x. **Update to 29.0+** to fix it. No patch for older versions.
https://stacker.news/items/1484730

2026-05-04 21:13:00 UTC

- reply

link? might be fake, couldn't find it on coindesk

2026-05-02 16:19:19 UTC

- reply

Good point xD
Then instead of "normal" we could go with someone that's willing to do the PoW required to buy P2P and maybe watch a video or read a post about privacy in Bitcoin 101.

2026-05-02 15:55:05 UTC

I want to open a debate on something practical: how do we make JoinMarket useful for more people?
But before that, a framing question: how *should* a normal person use Bitcoin with some privacy? Nothing crazy, not OpSec level. Just "I don't want people I transact with to know what I own."
My current answer would be: buy P2P (Bisq or lnp2pbot depending on the person), run the UTXOs through a few JoinMarket rounds (ideally the tumbler) and then either move them to cold storage or open a Lightning channel with the clean outputs. For Lightning on mobile, honestly only Phoenix works well for non-technical people. Everything else is too fragile or slow or kills your battery.
This workflow sounds reasonable on paper. In practice it's a mess: you need a full node, you need a computer, Bisq has its own learning curve, and JoinMarket's install alone is challenging.
So what's actually worth building?
My guess is a light-client mobile wallet with the tumbler baked in: deposit, wait, get clean UTXOs out, ready for cold storage or a LN channel. Simple enough that you don't need to know what's happening underneath.
But is that the right call? Is there a better abstraction? I'd love to hear where you think the effort should go.

2026-05-01 15:40:38 UTC

JoinMarket NG 0.28.0 is out. The most relevant changes are:
- Aligned defaults with joinmarket-clientserver
- TUI improvements
- Tumbler implementation
- New directory nodes
- Lots of minor bugfixes and performance improvements
All details at https://github.com/joinmarket-ng/joinmarket-ng/releases/tag/0.28.0
Additionally, we now have an acknowledgements section in main README: https://github.com/joinmarket-ng/joinmarket-ng#acknowledgements
We're looking for more collaborators and co-maintainers!

2026-05-01 10:36:13 UTC

Bisq vulnerability being exploited, trading halted:
https://bisq.community/t/psa-trade-protocol-exploit-discovered-investigations-ongoing/13664

2026-04-22 14:27:49 UTC

- reply

I think the auditability is an important aspect and I like the low barriers that Python offers for people wanting to read it or contribute.
That being said, moving parts or everything to Rust is not out of the table, and would be beneficial for a mobile app for example. Meanwhile we're using Python with type hints analyzed statically (mypy) and on runtime (pydantic models). But there are more important things to tackle first.
What brings us to integrations like Raspiblitz and Jam. Both are being worked on at the moment and pretty functional! You can track the status at https://github.com/joinmarket-webui/jam/pull/1166 and https://github.com/raspiblitz/raspiblitz/pull/5240

2026-04-22 09:33:53 UTC

Does anyone have a compilation of all of the OXT research PDF reports? They were only available for subscribers so aren't reachable from archive.org
Willing to send some sats for them.

2026-04-21 16:25:41 UTC

- reply

Thanks for a decade of hard work!
Long live JoinMarket.
#nevent1q…8rvp

2026-04-17 16:24:28 UTC

Browserleaks - Check your browser for privacy leaks
https://browserleaks.com/
Terrible...
Biggest realizations:
* JavaScript test: I leak the timezone city (e.g. Region/City, not just UTC+/-XX)
* Canvas test: my browser is very unique already.... Uniqueness: 99.99%. Very low anonymity set.
* Font fingerprinting: I was not aware of this... The set of fonts that you have available is leaked to websites...
If you want to cry a bit more, check [https://amiunique.org/fingerprint](https://amiunique.org/fingerprint) I was also unique there, among their 5M records.
https://stacker.news/items/1473271

2026-04-17 13:22:48 UTC

- reply

I like codimd using the reveal-md format. You can self host, and there's also hackmd for a hosted version.

2026-04-08 21:16:41 UTC

Since there is now joinmarket-ng and joinmarket-rs, it was time to create a repo for JoinMarket Protocol (JMP) Specifications.
The idea is to separate the protocol and protocol extensions from the implementations, as done in BIPs, NIPs, NUTS, ...
https://github.com/joinmarket-ng/jmp
https://gitworkshop.dev/npub1w3vaxva0vcrx7pnvlpmede5smvafdl69xnu7ma82kaxl9us89zdsht4c5c/relay.ngit.dev/jmp

2026-04-08 14:55:46 UTC

- reply

So censorship resistance turned out to be valuable after all🤪 Stablecoins not good enough now?
https://www.coindesk.com/markets/2026/04/08/iran-eyes-crypto-toll-for-oil-tanker-transit-through-strait-of-hormuz
#nevent1q…89gv

2026-04-08 10:35:41 UTC

Proposal: HTTP-based bulk compact filter download for faster initial Neutrino sync
https://github.com/lightninglabs/neutrino/issues/342
#neutrino

2026-04-07 13:25:55 UTC

- reply

I wouldn't call it critical since the maker would still do on-chain verification for the UTXO and fail then. Nonetheless they are all great findings that should be fixed!

2026-04-07 12:10:08 UTC

- reply

FYI: None of the bugs are critical, it's better to catch invalid transactions early, but at the end there is the Bitcoin network to reject those.
#nevent1q…rrnp

2026-04-06 08:57:54 UTC

- reply

What do you mean by spreading out UTXOs?
A SegWit output is as secure against QC with or without CoinJoin'ing.
Addresses should not be reused anyway. So until spent, the PubKey is not public and thus not susceptible to being broken by QC or anything else.
About plausible deniability: privacy is not a crime! And a very legit thing to worry about. For better or worse, you're always able to prove the trace of your coins through CoinJoins. So it's up to you to reveal it selectively.

2026-04-06 08:48:15 UTC

TIL: there is a command for analyzing docker usage: `docker system df`
https://blossom.primal.net/16bb95592a4d8142e6a94d503868ff07bb3f70431e817f11ecec6a5fdf717d1b.png