JeffG
JeffG

Secure messaging on Nostr. Creator of Marmot protocol, MDK, and White Noise. Other stuff connoisseur. Also built Listr, Ostrich.work, Ontolo, Nostr.how.

Public Key

npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc

NIP-05 Address

jeffg.fyi

Profile Code

nprofile1qqspwwwexlwgcrrnwz4zwkze8rq3ncjug8mvgsd96dxx6wzs8ccndmcpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dstrmk2l

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc

Show more details

Last Notes

2026-04-16 08:59:19 UTC

Just use OTR...
Just use Signal protocol...
Just use a server...
The problem of unstoppable, private group messaging is SO much bigger and SO much harder than anyone gives it credit for (including me).
There are many shortcuts. There are many half-baked solutions that might get short-term adoption.
Building the thing right has pushed me to the limit many times over the last few years. And yet, I'm still here. Still learning, still building. I'm not going to give up, and I'm not going to cut corners.

2026-04-16 07:57:09 UTC

GM 🌞
Who is looking at post-quantum strategies for nostr? I want to talk.

2026-04-15 15:55:57 UTC

Exactly! So let us raise them and stop interfering! 🤬
https://blossom.primal.net/4f077eb5a75dbb233c9889df5cc9e00744119b8271ad690872b6590d7cae0f79.png

2026-04-14 04:50:30 UTC

- reply

Does it support Marmot yet?

2026-04-06 18:49:39 UTC

- reply

I’m glad someone got the reference. 😂

2026-04-03 22:27:51 UTC

Double aurora. Wow.
https://blossom.primal.net/4a835ed819ef5386945d2a8d6c8708a64c36d9c2d891eaf09f35518d74f633d6.jpg

2026-04-03 09:15:57 UTC

GM 🌞 The funding will continue until the freedom improves!
https://hrf.org/latest/hrfs-bitcoin-development-fund-announces-support-for-26-projects-worldwide/

2026-04-01 05:23:06 UTC

- reply

https://blossom.primal.net/ed2c43f26268de804b7b7e9daa7b4e5603143cbeb13bce3dcfe34815644039ca.gif

2026-03-31 17:02:13 UTC

- reply

We’re not currently planning on making a web client but I know a few others are using our marmot-ts library to that end. Still early on the web side.
In the meantime, we are working on the multi-device spec now. This is a precursor to making a desktop client. I’m also [impatiently] waiting for it!

2026-03-31 08:32:04 UTC

GM 🌞
Feels heavy out there today fam.

2026-03-30 10:45:32 UTC

- reply

Yea @nprofile…sp3z , @nprofile…gxdt , Pika, and more coming every week.

2026-03-29 14:05:30 UTC

- reply

This is the way.
#nevent1q…th76

2026-03-29 14:03:39 UTC

- reply

Many.

2026-03-27 12:56:31 UTC

- reply

The goal is to make it easy enough to use Marmot for even use-cases like that. Multi-device (which is the same as multi-client really) + encrypted sync should make it super smooth.

2026-03-27 12:51:35 UTC

- reply

Yup - this is true. I've seen a few people come up with complicated state-chain style "solutions" for MLS but imo none of these works in the real world.
Fundamentally, if you're an admin in a group and you are malicious, the group is screwed. I'm not sure how this is really different from signal–if you're a malicious admin on signal you can still delete the group or remove everyone but yourself. The existence of a server doesn't solve this.

2026-03-27 12:46:27 UTC

- reply

Yeah - device specific (feature, not a bug, for PCS and forward secrecy). After multi-device we'll also be working on encrypted sync between your devices.

2026-03-27 07:58:00 UTC

- reply

This is hilarious 😂
A reminder to everyone - NIP-04 DMs are completely insecure and don't hide any metadata.
Thankfully, Marmot fixes this.
#nevent1q…7wg9

2026-03-27 07:00:54 UTC

- reply

Sorry for the fire alarm - it's not! All the work is happening on the `next/major` branch where it looks like they're getting closer to the 0.4.0 release. 🎉
#nevent1q…7fe3

2026-03-27 06:51:48 UTC

Hey @nprofile…fu08 - Is StartOS a dead product? https://github.com/Start9Labs/start-os
11 months since the last commit...

2026-03-27 06:51:40 UTC

GM 🌞
So pumped. There are so many amazing things coming up in the next few months...

2026-03-26 17:51:10 UTC

- reply

Talked to them about it yesterday, in fact. 😉

2026-03-26 08:09:19 UTC

- reply

We're programmed to be pendulums, aren't we? 😂
We can only find valuable solutions by going too far in both directions.

2026-03-26 05:51:37 UTC

- reply

I didn’t have much time to look into it but it seems generally pointed in a good direction. I’m just not clear (lack of context) how this would be used to solve a real need or gap in how teams or collectives use nostr now.

2026-03-26 05:46:40 UTC

- reply

In what way? We support amber and other Nip-55 signers already.

2026-03-26 05:36:49 UTC

GM 🌞
A beautifully written counterpoint to the current fever dream we’re all living…
https://mariozechner.at/posts/2026-03-25-thoughts-on-slowing-the-fuck-down/

2026-03-25 11:19:54 UTC

- reply

We focused nearly entirely on stability and fixing bugs for the latest release. If you're still having trouble please look in settings and report issues (ideally with the actual error logs that you find in the Developer Settings screen).
#nevent1q…clt0

2026-03-19 18:46:39 UTC

Tré Cool is one of the most underrated rock drummers ever.

2026-03-19 07:55:47 UTC

GM 🌞
Build something new today.

2026-03-18 19:57:29 UTC

- reply

@nprofile…9qus this could be a good add

2026-03-17 12:33:26 UTC

It really pisses me off that agents ruined en/em dashes. I used them all the time before LLMs came along and now, I'm having to train myself to stop so that people who don't know grammar won't think I'm AI slop.

2026-03-17 12:29:03 UTC

- reply

I'm currently leaning towards self-hosted Umami (very similar to Plausible) for website analytics and self-hosted Sentry or GlitchTip for tracking crashes and errors. But still doing some research.
And yes, I agree. A docs page which details exactly what is being collected and how would be required as well.

2026-03-17 06:01:59 UTC

- reply

Yes, and… what people say and what people do differ significantly on products.
Revealed preferences tell you a lot about what your product is solving for people, often stuff they’re not even sure how to articulate themselves.

2026-03-17 05:58:23 UTC

GM af 🌞
https://blossom.primal.net/2a36a02a6a064495f67a21e237b2392c0b0d044de5feff2afcb4928ae98d8188.jpg

2026-03-16 11:01:22 UTC

Genuinely curious what everyone's thoughts are on product analytics in the apps you use. I think most teams building in the nostr/bitcoin/freedom-tech space are a hard-no without thinking about how you could do them well (i.e. privacy-first, opt-in only, etc).
A lot of people complain about the quality of Nostr apps but, the truth is, it's nearly impossible to build a high-quality product that delivers real value without having at least some idea of how folks are using a thing.
Trolls, gtfo. I'm only interested in thoughtful or thought-provoking responses.

2026-03-16 09:44:36 UTC

https://blossom.primal.net/38a973eda97ffcbc71c8d13d3d71283a7bf82df9613ecd97c2163f08a4fc577c.png
* From Matthew Green's recent post on WhatsApp: https://blog.cryptographyengineering.com/2026/02/02/whatsapp-encryption-a-lawsuit-and-a-lot-of-noise/
** Oh, and Instagram just announced they are removing the option of E2EE

2026-03-16 07:58:12 UTC

GM 🌞
An amazing use for LLMs is to give them github URLs for open source projects you're unsure about the quality on (or whether they might be unsafe) and ask them to do a full review. GPT 5.4 on extra high is a phenomenal reviewer.

2026-03-15 21:08:37 UTC

- reply

They come from a massive data indexer I built. They’re real numbers, with caveats. There’s more info on that in the site.

2026-03-15 21:06:56 UTC

- reply

Interesting. I like that we have several different indexer projects in the ecosystem now.

2026-03-15 19:15:43 UTC

- reply

Amazing. Can’t wait. I noticed a PR a few days ago to add auth support - is that going to make it in too?

2026-03-15 17:59:50 UTC

- reply

I think @nprofile…a43x is adding blossom stuff now.

2026-03-15 17:16:37 UTC

- reply

😂😂

2026-03-15 07:16:44 UTC

- reply

Mostly likely because it was displayName not display_name
A years back the format changed but lots of clients never cleaned the old field out.

2026-03-14 22:57:03 UTC

- reply

What relays?

2026-03-14 21:30:52 UTC

- reply

Exactly. The test should be the test. 😉

2026-03-14 21:29:27 UTC

- reply

MacOS.
Sadly, MacOS doesn't have cowsay....

2026-03-14 21:28:23 UTC

- reply

🙌

2026-03-14 18:01:34 UTC

- reply

What's nostr.land running on? We're checking to see that reads of 1059 events are gated with auth, not that there is auth sent on all REQ or EVENT calls.

2026-03-14 17:58:14 UTC

Open your terminal and type "banner hello".
My son just showed this to me. 😂
Still finding terminal easter eggs after all these years.

2026-03-14 17:35:49 UTC

- reply

I want a feed of just the feet up coffee in hand shots. 😂

2026-03-14 17:34:39 UTC

- reply

good point 😂
I'll work on adding that next.
ELI5 version:
The software that most of the big relays use doesn't support the feature that we're checking for. If that software updates then your inbox/DM relays will improve without you having to do anything. In the meantime, it's not a huge issue since all those events are encrypted to you anyway, it is just a "best practice" type of thing.

2026-03-14 16:49:05 UTC

- reply

Yeah - working on that actually. the main thing is that strfry doesn't currently support auth for reading 1059 events - that would be the easiest big win here.

2026-03-14 15:32:43 UTC

Quietly released Nostr Doctor yesterday evening. The hope is that this simple tool will help everyone to do the basic housekeeping on their accounts and data to make sure they continue to have great experiences using nostr as the protocol and clients change over time.
Would love to hear your feedback if you think there are other tools we should add to it.
Huge thanks to @nprofile…l3nw for doing all the heavy lifting!
https://nostr.doctor

2026-03-14 15:23:30 UTC

- reply

😂
tell me your vegan without telling me your vegan.

2026-03-14 10:51:42 UTC

- reply

👀
#nevent1q…y82x

2026-03-14 10:51:18 UTC

- reply

Follower counts have never mattered.
There is no spoon.

2026-03-14 08:47:02 UTC

- reply

I actually added hex simd in the PR I opened months ago. But this started tweaking it.
TBH, I didn’t look at what this did much as I got pulled into other stuff for the rest of the day. I’m going to tweak the test so it’s running in release mode instead of debug to make it more realistic and see if this stuff holds.
PR for ref.
https://github.com/jb55/notepack/pull/1

2026-03-14 08:44:06 UTC

- reply

Would be good to compare notes. I feel like the pensive crawler is pretty naive as well. But it is ingesting about 1M events a day, so that’s something.

2026-03-13 15:57:03 UTC

- reply

https://github.com/andotherstuff/pensieve

2026-03-13 15:42:31 UTC

- reply

Nice! Where is the data coming from? I've got the nostr stats site so it would be very interesting to compare figures and methodologies.
https://stats.andotherstuff.org/

2026-03-13 10:08:59 UTC

GM 🌞 I've been dying to play with Karpathy's autoresearch tooling so this morning I installed Pi and the autoresearch plugin and put it to work on optimizing roundtrip encoding time on my already tweaked fork of @nprofile…jhk8 's notepack binary note encoding...
It found a ~28% improvement in ~1 hour of experimenting. 🤯
https://blossom.primal.net/fb8645987e16c6060687c699afaff262f8352a57d46eafd101d0d212d94ea676.png

2026-03-12 20:11:34 UTC

- reply

Just sent your npub a message. Let me know if you get it. Your key package at least seems good.

2026-03-12 20:09:33 UTC

- reply

Can you give me both npubs. I’ll check into it tomorrow morning first thing.

2026-03-12 18:12:32 UTC

- reply

Super cool looking. Can't wait to play with it
#naddr1qv…r2fm

2026-03-12 12:58:55 UTC

- reply

The most likely case is that you have a large follow list and we were still trying to load in all your user's metadata.
On the new chat screen we show you your follows first, if you search, we filter that list but also start a more global (web of trust based) global search to find people that match your search concentrically outwards from your own follows.
The two top ones on that list are fake accounts, the 3rd and 5th are old highlighter test account - I should nuke them somehow.
It's odd that my real account isn't showing though.

2026-03-12 09:08:12 UTC

- reply

You need to have TestFlight installed on your phone and then hit that website link from your phone. It should open TestFlight directly and ask you if you want to join the beta.
Point your openclaw at the whitenoise API (which is part of the whitenoise-rs repo) - it's really early still for my to give you any sort of guarantee it'll work but we've been playing with it some and it's been working well.

2026-03-12 09:06:15 UTC

- reply

Really? Searching? Or am I not showing up in your follow list?
We have a bunch of improvements coming in the next build that will probably completely fix this but I'm curious to know more so I can be sure.

2026-03-12 07:40:01 UTC

- reply

🙏 Thank you!

2026-03-12 07:37:58 UTC

- reply

Incoming.

2026-03-12 07:37:19 UTC

- reply

If you have the app you got it. You just have to get the link from the website in order to add yourself to the public TestFlight beta. If you have the app, you're in already - just start using it.

2026-03-12 07:11:18 UTC

GM🌞
Apple has finally approved the latest version of @nprofile…9puf for TestFlight. If you have the app already, it should auto-update. If not, just head to https://whitenoise.chat and you'll find the TestFlight invite link.

2026-03-11 11:48:41 UTC

- reply

😭 when the gatekeepers say so.

2026-03-11 11:47:46 UTC

- reply

Build in public.

2026-03-11 11:47:23 UTC

- reply

And don’t make mistakes. 😂

2026-03-11 11:44:38 UTC

- reply

When people ask me what’s so hard about building on nostr… 😅😭
#nevent1q…p3q0

2026-03-10 21:34:28 UTC

- reply

Sweet!! Glad to hear it. The next version is a HUGE improvement.
Videos and audio are soon.

2026-03-10 21:33:04 UTC

- reply

Bitchat adjacent. Cool!

2026-03-10 21:31:57 UTC

- reply

Yup. Sounds like a plan

2026-03-10 21:31:25 UTC

- reply

Whoa. This looks intense. 🔥

2026-03-10 21:00:33 UTC

- reply

🫂 appreciate the feedback and that you keep giving it a shot.
I’d love to do a call or something so we can live debug and see what’s up.

2026-03-10 20:59:10 UTC

Building high quality software on decentralized protocols is the hardest of hard modes.
If you’re out there building on hard mode I want to follow you.
Tell me about your project. 👇

2026-03-09 21:34:42 UTC

- reply

An undisclosed location 😉

2026-03-05 20:46:36 UTC

Insane progress this week on @nprofile…9puf! Way more stable, more real-time, better crypto.
I know I've been working on this for nearly 2 years, but I still have trouble believing that we've managed to build a fully E2EE messenger with forward secrecy, post-compromise security, and FULL interoperability between completely different apps and clients. 🤯
So much more in the works too. 🔥
Download the app on @nprofile…uvay now and TestFlight very soon.

2026-03-05 20:42:34 UTC

- reply

🚢
#nevent1q…hlf5

2026-03-05 15:53:09 UTC

- reply

The best way to talk to your agents.
Cypherpunk af TUI ui also available (but early, expect improvements).
https://github.com/marmot-protocol/wn-tui
#nevent1q…mg86

2026-03-05 14:25:08 UTC

- reply

The decision was mostly driven by the fact that NIP-44 does specifically state the input has to be a UTF-8 string. The rust-nostr libraries allowed us to encrypt raw bytes but that was technically off-spec and the TypeScript nostr libraries don't allow that.
So instead of making the TypeScript libraries break the spec, we decided to simplify.

2026-03-05 14:21:42 UTC

- reply

Yup - HKDF. The move to drop NIP-44 was mostly driven by the fact that the official NIP-44 spec says that the input has to be a UTF-8 string. The rust-nostr library allowed us to encrypt raw bytes but that was technically off-spec and the TypeScript libraries don't allow it.
So instead of hacking NIP-44 we decided to simplify.

2026-03-05 14:17:52 UTC

- reply

Yeah - 100%. Marmot is for DM and groups and gives you fully end-to-end encrypted messaging. Basically, it's signal over nostr.

2026-03-04 20:34:20 UTC

🚢 MDK 0.7.0 creates released! 🚢
This includes a breaking change to move away from NIP-44 encryption on kind:445 events and use ChaCha20-Poly1305 directly.
Nothing stops this Marmot 🦫
https://crates.io/users/erskingardner

2026-03-04 18:30:13 UTC

- reply

🫂

2026-03-04 18:29:55 UTC

- reply

Great. We’ll get tha ironed out soon.

2026-03-03 18:33:44 UTC

- reply

There is a key package bug we're working on. Usually if you try a second time with the same person it shows up. It's a caching thing we think. Should be fixed soon.

2026-03-03 18:32:05 UTC

- reply

We're matching more the design of messenger like Signal instead of doing deeply nested threads. Nothing about Marmot would stop you from doing that if you wanted though.

2026-03-03 18:10:01 UTC

I am so bullish after the Marmot community 🦫
- 35 people joined
- we learned about 3 new marmot based projects that we hadn't known about
- we learned that someone has written a C# implementation
- we demoed interoperability between three different MDK based clients (whitenoise, whitenoise-cli, Pika), and marmot-ts based web chat
- we're releasing another White Noise version & another MDK version tomorrow
- we'll release the whitenoise-cli + a super cool TUI later this week. this will be the best way to talk to your agents, bar none. e2ee, no phone number verification, and the best money on the planet, built right in.
- we're starting on push notifications and multi-device support next week.

2026-03-03 15:20:07 UTC

- reply

40 minutes until the monthly community call!
#nevent1q…yhl2

2026-03-01 19:31:54 UTC

- reply

Try now. Should be fixed.

2026-03-01 19:31:37 UTC

- reply

Should be fixed now.

2026-03-01 19:31:25 UTC

- reply

Try now. Should be fixed.