OrangeSurf

grassroots leambitcoin
building & writing orange.surf
accelerating mempool

Public Key

npub18h0w55nsp839ezxnggf00jd2xc6yl0ht62mf5p8wwllu8s80wdcs83ws8m

NIP-05 Address

Profile Code

nprofile1qqsrmhh22fcqncju3rf5yyhhex4rvdz0hm4a9d56qnh80l7rcrhhxugpp4mhxue69uhkummn9ekx7mqpr9mhxue69uhkummnw3ezuun4vf3x2unydakxctnrvvvnf0hp

Publishing to

nos.lol

nostr.rubberdoll.cc

purplepag.es

Author Public Key

npub18h0w55nsp839ezxnggf00jd2xc6yl0ht62mf5p8wwllu8s80wdcs83ws8m

Show more details

Last Notes

2024-09-20 17:42:46

- reply

Any Q's hit me up

2024-09-19 10:21:43

Mempool Watch 👀
Check your mempool and the recent blocks... you will see hundreds of high fee transactions that are all the same... let's explore
https://m.primal.net/Kudt.png
The txs have a 0.05 BTC input and are being spent with a fixed 64,000 sat fee, overpaying by 42x!
In total, this entity just spent almost 0.4 BTC in fees!
And it wasn't a consolidation so they will spent the same in the future if they keep their hardcoded fee.
https://m.primal.net/Kudv.png
All of the transactions have a P2TR tapscript which implements a 1-of-1 AND 6-of-9 multisig
One master key has to sign and in addition any 6 of the remaining 9 must sign.
This complex setup secured the 30 BTC that just moved in 600 individual transactions!
And this entity isn't done! They have another 30 BTC held in unspent transaction outputs (UTXOs), all with with the same scriptPubKey.
From this address
https://mempool.space/address/bc1purqv24xky3l7yf2gf48lsd3et7yc2gw38fj3laflf4g0fdm8xelq4u95fh
To this address
https://mempool.space/address/bc1pl6jh44pccwlzypk200wanc8gf4nwu6y9p458t50tdge0xn408thqay2r23

2024-09-06 20:42:32

Have you ever used testnet?

2024-09-05 17:44:05

There’s a two tier block space market
You’d best hope your fee estimator is legit
https://m.primal.net/KfeR.png

2024-09-05 12:02:52

- reply

That's annoying, I have had other people successfully zapping. What app are you using?

2024-09-05 10:21:45

Concept: VIP MODE
Show one post from each person you follow first.
Why? Today, unless people post and interact regularly they just disappear from their followers feeds. IMO this results in larger amounts of lower quality content.
What do you think? Which nostr client do you think will be the first to add VIP MODE ?
https://m.primal.net/KfEo.mov

2024-09-05 10:04:20

- reply

Thanks, fixed

2024-09-05 10:04:09

- reply

Thanks, fixed

2024-09-05 10:03:41

- reply

Why would I want custodial?

2024-09-05 10:02:51

- reply

Thanks Matt, done

2024-09-05 01:11:20

Self sovereign zaps are back ⚡️
Thanks for the push!
https://m.primal.net/Kecb.jpg

2024-09-05 01:08:27

- reply

Done ⚡️ we

2024-09-05 01:07:59

- reply

I now have zaps set up non custodially

2024-09-04 18:12:47

- reply

The algorithm could just be
Show me the most liked / zapped post from each person I follow in the past 24h, then show me the rest sorted by most liked / zapped

2024-09-04 17:59:59

The void shouted back 🌍 ... here's what it said
⚡ I SHOULD ENABLE LIGHTNING
One overwhelming response was I need to enable lightning. I did have a self custodial LN setup with zaps once, but my channel partners closed on me and I haven't found new peers. I'm not using a custodial solution so my options are probably to find someone willing to peer and/or use an LSP.
👥 I AM THE ALGORITHM
Many people told me that I am the algorithm and that if I want to been seen I need to be very active interacting with people such that they interact back. My humble opinion is that this is not actually addressing the issue. Primal is great, and like most nostr clients I have used it has a few feed options ("algorithms").
- Latest
- Latest with replies
- Trending 24H
- Most Zapped
- Nostr Highlights
- Hashtags
This means that 5 of the 6 options are either content which already has lots of engagement or content which has just been posted.
I think what's missing is a more sophisticated algorithm which takes into account how many posts someone has made. If you follow bob and alice and bob makes 100 posts a day and alice makes 1, you probably don't want to use any of the existing algorithms, you probably want to see that 1 post by alice, even if it doesn't have any engagement yet, you follow her for a reason (presumably)
#note18z3…tryq

2024-09-04 13:40:25

- reply

While the website is awesome, it's a lot when someone comes in cold. It might be nice to have a minimalist landing page which shows all the key information and shows the recent content (pocs, writing, art) with latest first.
https://m.primal.net/KdmK.png

2024-09-04 12:55:36

- reply

Check out my profile, I have posted a bunch

2024-09-04 11:24:36

- reply

I had self custodial zaps set up, LN channels were closed on me and haven’t found a good peer to set up again with. Any suggestions?

2024-09-04 11:24:23

- reply

I had self custodial zaps set up, LN channels were closed on me and haven’t found a good peer to set up again with. Any suggestions?

2024-09-04 11:19:19

- reply

I had self custodial zaps set up, LN channels were closed on me and haven’t found a good peer to set up again with. Any suggestions?

2024-09-03 19:44:08

I want to use nostr more but it feels like I am shouting into the void, probably a skill issue

2024-08-27 22:22:06

- reply

Hell of an MVP

2024-08-27 22:17:56

- reply

How about an onboarding option to disable the wallet, which remains hidden unless reactivated in settings @miljan ?

2024-08-23 13:50:31

If you are a dev and want to learn more about mempool accelerator hit me up

2024-08-17 19:57:00

- reply

Channel peers closed on me, haven’t bothered to find new ones. Any suggestions?

2024-08-16 14:49:01

What is the nonce key exfiltration attack?
When signing a bitcoin transaction a number is used to generate the signature, this number is used once, and is therefore called the nonce.
This should be a cryptographically secure random number, which is never reused.
Suppose an attacker compromises your signing device, and can get it to use a particular nonce, rather than a random number.
If they use part of your private key as the nonce, they can leak part of your private key out of your signing device with each transaction you sign and broadcast.
If you make enough transactions, they can reconstruct your whole private key, and steal your bitcoin, just by watching the bitcoin transactions being made and decoding each part of the private key.
They don't need to compromise your computer, or physically access your device, and all the while your signing device appears to be working correctly, up until all your bitcoin is stolen.
There have recently been two new papers expanding on this attack.
- Dark Skippy by Lloyd Fournier, Nick Farrow of FrostsnapTech and Robin Linus of ZeroSync and BitVM.
- Engineering a backdoored bitcoin wallet by Adam Scott and Sean Andersen at block
I think it's great that these researchers have raised attention to this previously known attack vector.
Now, there are two types of reaction in my x feed on this issue, panic and ambivalence.
⚠️ Reaction 1 - Panicked
Nonce key exfil would enable theft at a distance, on all devices that update to malicious firmware & make 12 transactions. The attack doesn't require compromising the online device the signer talks to. The attack is not mitigated on most signing devices, and therefore large amounts of bitcoin are potentially vulnerable. The attack would be undetectable until the thieving begins
🤷‍♂️ Reaction 2 - Ambivalent
This attack requires getting malicious firmware onto a device. Competent signing device firmware devs secure firmware signing key(s) appropriately. Provided the firmware signing keys are not compromised this attack is mitigated because most signing devices check new firmware signatures before upgrading. Malicious firmware would enable many other attacks like generation of compromised wallets or exfiltration of keys in other ways (via screen, microSD or USB).
I think both Panic and Ambivalence are extreme.
❌ Panicked - Most hardware wallets verify firmware signatures so this attack requires either malicious firmware or a compromised firmware signing key / build pipeline and for many transactions to be signed with that firmware. Anti-klepto requires the online wallet to participate and adoption is limited. Creating panic leads uninformed users to rush to move their bitcoin to a new setup and this is when mistakes happen.
❌ Ambivalent - This attack is particularly nefarious because it can be done at a distance without needing to compromise any other user devices which makes it very scalable. If any firmware release is compromised all devices that run that version will be compromised. How secure is your signing key? How secure is your build pipeline? If anti-klepto was widely supported you would probably use it, so let's get it widely supported.
💡 Constructive - Focus effort into adding anti-klepto to a new version of PSBT instead of taking shots at each other or dismissing concerns.

2024-08-13 16:40:45

Using the public @npub18d4…6lt3 accelerator API you can now fetch a lightning invoice to boost any transaction.
Integrate into your app / service today.
https://m.primal.net/JyUE.mp4

2024-08-08 08:46:11

testnet4 now merged to Bitcoin core
building on bitcoin? Switch to testnet4 today!
https://testnet4.com

2024-08-03 17:43:20

- reply

Testnet4.com

2024-08-02 18:34:32

Bitcoin Core #30275 changed the default mode of the estimatesmartfee RPC command from conservative to economical.
https://github.com/bitcoin/bitcoin/pull/30275

2024-08-02 14:34:10

Bitcoin Core #30275 changed the default mode of the estimatesmartfee RPC command from conservative to economical.
https://github.com/bitcoin/bitcoin/pull/30275

2024-08-01 16:40:17

- reply

Yes many use cases, I listed some here. I’m glad we are building one which is transparent
https://mempool.space/accelerator#why-not-use-rbf-or-cpfp

2024-08-01 16:36:21

- reply

Nice work

2024-08-01 10:12:37

- reply

You should always use RBF or CPFP if you can, and if it makes sense for your use case.

2024-08-01 10:10:44

Replace By Fee (RBF)
The sender in an unconfirmed transaction creates a new, higher fee transaction spending some of the same inputs as the transaction being replaced. Often the new transaction will be confirmed instead of the original transaction.
Child Pays for Parent (CPFP)
 The recipient in an unconfirmed transaction spends their unconfirmed transaction output, increasing the effective fee of the original transaction. A miner can't confirm the new (child) transaction without also confirming the original (parent) transaction.

2024-07-31 23:30:49

Am I alone in preferring mobile wallets that do one thing well? I would happily have at least 7 wallets
- Managing Lightning Channels
- Making Lightning Payments
- Receiving Lightning Payments
- Making Onchain Payments
- Generating invoices to cold storage
- Generating invoices to a hot wallet
- Receiving Silent Payments

2024-07-31 22:28:34

Ideally you would run multiple bitcoin core nodes of differing versions and your wallet would connect to all and report discrepancies. Update to the latest release AND run tried and tested versions.
Who is building this?

2024-07-29 19:54:12

“the US Gov isn’t dumping, it’s just going to the strategic bitcoin reserve”
https://mempool.space/tx/876d9ef6bb2bcd8a1e8a176212ad58764454ebb3c6db77334f8a7ad69e954d86
https://m.primal.net/JiFz.jpg

2024-07-29 16:25:04

"no, wait, testnet4 branch isn't merged into core yet, you cant just start mining and integrating it into wallets and services"
cypherpunks write code
https://testnet4.com

2024-07-27 23:56:21

FYI you can start using testnet4 today!
Visit testnet4.com to find
- An explorer and faucet for free coins (@`mempool`)
- The first wallet to integrate (Sparrow Wallet)
- Github Issues tracking integration in bitcoin core, rustBitcoin, bdk and fulcrum
Bitcoin's testnet provides a risk-free environment for miners, developers, and users to experiment with Bitcoin software. Unlike the main Bitcoin network, where real value is at stake, the testnet has its own coins (tBTC) which hold no real-world value. This means anyone can test without the fear of financial loss.
To be useful for testing, users and developers need to be able to easily acquire testnet coins, this was no longer possible with the old testnet3 network. Coin issuance had almost completely dried up and the coins were starting to trade on secondary markets.
In response to these issues, a transition to a new testnet (testnet4) is underway. This new version promises a more stable and accessible environment for testing, with ample tBTC available via faucets.
https://testnet4.com

2024-07-27 23:20:23

So, a strategic bitcoin reserve?
https://strategicbitcoinreserve.com

2024-07-27 18:20:29

Why would you use Mempool Accelerator when you can use RBF or CPFP? Read here:
https://mempool.space/accelerator#why-not-use-rbf-or-cpfp

2024-07-26 16:41:25

- reply

Denominated in fiat, payment in bitcoin.

2024-07-26 14:36:00

A very limited batch of the display stand I designed for @npub1s0v…pq6j Passport is available for purchase at BTC2024 in Nashville for $20.
Pick one up at booth 211. If you are not at the event and want to get your hands on one register your interest at the link below or send me a message.
https://tips.orange.surf/apps/37e8jKpHw5g7fmS5csD5bBLeg53r/pos
https://m.primal.net/JfCr.png

2024-07-24 10:23:47

- reply

Sorry to hear that you are disillusioned.
IMO the current state of hardware wallets is actually great (if you can put the bickering aside).
There are many design directions being explored by teams with different priorities making products that target different users and use cases.

2024-07-24 09:19:29

The cryptographic integrity of messages posted on nostr is a huge step forwards compared to platforms like x.
What progress has been made regarding key rotation?

2024-07-24 09:12:12

Foundry announces Foundry Donate enabling their miners to automatically donate a proportion of their mining rewards to Brink or OpenSats.
https://www.prnewswire.com/news-releases/foundry-announces-foundry-donate-initiative-to-support-open-source-bitcoin-community-302203616.html

2024-07-24 09:05:38

Bitaxe solo mining tutorial.
Great video production quality, excited to see more from these guys.
https://www.youtube.com/watch?v=InfDHmFQcsE

2024-07-13 15:05:13

#note1llg…jfrt
https://m.primal.net/JPMT.jpg

2024-07-13 14:25:30

This transaction spent 2 months languishing in the mempool.
Just got confirmed 24 minutes after using @mempool accelerator
https://mempool.space/tx/cba384b5e5e948a7dc888a144739489f6c623ec7d37bb0fe69f650837b5ec82c
https://m.primal.net/JPKi.png

2024-07-13 14:08:27

Transaction confirmed just 33 seconds after using @npub18d4…6lt3 Accelerator!
If you have any questions reply 👇
https://m.primal.net/JPJy.png

2024-07-04 19:59:16

Why are empty blocks happening?
https://stephanlivera.com/episode/588/

2024-06-06 08:23:45

- reply

@npub1m7q…m4gz

2024-06-06 08:21:47

Follow mempool research on nostr!
npub1m7qjg4hsa2q32rtekewpdn54guh508tlh6ztml7ssluj6vgflensy6m4gz

2024-06-05 16:51:20

We just published the first mempool research report
📜 The Empty Block Report 📜
https://research.mempool.space/empty-block-report/

2024-05-11 21:04:39

- reply

Thank you!

2024-05-10 23:40:22

https://orange.surf/dude-wheres-my-block/

2024-05-10 18:24:58

Braiins just had a huge streak of bad luck with ZERO blocks found in 551 attempts! 🎲🚫 What are the odds?
https://orange.surf/dude-wheres-my-block/

2024-05-08 01:30:04

FPPS transfers profit volatility from hashers to the pool operator.
Building on the great work by BitMEXResearch I explore how pool size correlates to the reserve funds required to obtain a particular statistical chance of survival.
https://orange.surf/pool-reserves/

2024-04-23 22:05:26

Update to 840556 https://image.nostr.build/67650d487e620577cff5878490367dcd433268c446504d5ac4aa07915ac67454.jpg

2024-04-23 01:18:55

pick your opt-in numbering system hill to die on
https://m.primal.net/HynN.png

2024-04-21 12:52:33

Update to 840195
https://m.primal.net/HyLf.png

2024-04-20 22:49:41

the blockchain is healing
https://m.primal.net/Hxzm.png

2024-04-20 16:17:18

Updatehttps://m.primal.net/HxpX.png

2024-04-20 11:36:24

Update
https://m.primal.net/Hxll.png

2024-04-20 04:08:43

Welcome to the 5th Epoch https://image.nostr.build/2c8b0aa15a2df034a42b85923e0ffabbd71317cbbec17a57d49f92193e4a60eb.jpg

2024-04-16 20:59:14

At least 97.7 % of hashrate (monthly average) is now running FullRBF based on FullRBF'd transactions from within the past 24 hours.
https://gist.github.com/orangesurf/6483e26e78632ab60e588d56f79e0050

2024-04-10 10:33:12

@npub1qtv…7dze what's the difference between 'old hashrate' (light blue) and 'hashrate' (dark blue)
https://m.primal.net/HtIb.png

2024-04-09 13:19:46

This is what a freedom looks like. #note1jde…zryr

2024-04-08 22:39:40

- reply

Thank you very much for sharing this

2024-03-23 05:26:06

- reply

Use simplex instead

2024-03-18 15:08:06

- reply

easiest (but not easy) may be coercion of large mining pools.
You would hope that the unconstrained miners pointing hashrate at the coerced pools would pull their hash and direct it at other pools, quickly halting the 51% attack, though that requires monitoring to detect shenanigans
other contenders
- hardware backdoors to allow remote hash halting
- stuxnet style mining worm
https://m.primal.net/HmEE.jpg

2024-03-13 03:27:20

- reply

Full video https://www.youtube.com/watch?v=Zrv1EDIqHkY

2024-03-13 03:27:03

big prime energy
https://m.primal.net/HkLo.mp4

2024-03-11 19:06:34

I enjoyed this chat. It had something for everyone.
https://www.youtube.com/watch?v=Nzvh4AODtWc

2024-03-11 15:40:14

- reply

262,800 blocks

2024-03-11 07:59:53

- reply

check the "legit" list here
https://bitaxe.org/legit.html

2024-03-07 20:05:35

- reply

wow, anything special about your node which would cause such a high useage?

2024-03-07 10:41:35

- reply

So, wait...
Until you get a confirmation you haven't consolidated anything 😉

2024-03-07 09:43:49

Flat 13's.
What's your call, consolidation now or wait for lower (single digit) bid rates
https://m.primal.net/HiWd.png

2024-03-07 09:27:59

- reply

few
https://m.primal.net/HiWY.mp4

2024-03-07 09:25:59

- reply

Pear is licensed under Apache V2
https://github.com/holepunchto/pear?tab=Apache-2.0-1-ov-file#readme

2024-03-07 09:09:48

- reply

Things have changed so much since I first ran branle in Apr 2022. Glad to be back 🫡

2024-03-07 06:52:00

- reply

That's awesome. Love to hear it
Can you share a photo?

2024-03-06 23:10:06

3 days on nostr, finding lots of new people to follow. it's much busier than I realised, hope to keep discovering more interesting content.

2024-03-06 22:53:13

- reply

https://m.primal.net/HiQX.jpg

2024-03-06 15:40:32

- reply

Thank you, this is fantastic. I verify when I help friends install sparrow but they are normally afraid to update because they fear the command line.
Now they can update with confidence.
https://m.primal.net/HiKN.png

2024-03-06 08:03:03

- reply

Vasili Alexandrovich Arkhipov
In 1962 the USSR sent a nuclear armed submarine to the international waters off Cuba. The sub was located by the US Navy and depth charges were dropped to force the sub to surface.
At depth the crew had been out of communication with Moscow for days and feared that war had broken out.
The captain wanted to launch a nuclear torpedo.
Launch required a 3 of 3 signoff from the captain, the political officer and Arkhipov (the executive officer, who was chief of staff of the brigade).
Arkhipov refused to authorise the attack, and persuaded the captain to surface and await orders.
Had Arkhipov not refused, there is a high probability that the USSR would have made a nuclear strike against the US Navy, which could quickly have led to thermonuclear war which would have killed billions.

2024-03-05 21:34:23

- reply

Based

2024-03-05 21:08:28

- reply

Delete this

2024-03-05 20:36:42

research e-gold before running an ecash mint

2024-03-04 21:04:24

"I wanted something that expressed the fun I had using the internet, as well as hit on the skill, and yes, endurance necessary to use it well.
I also needed something that would evoke a sense of randomness, chaos, and even danger. I wanted something fishy, net-like, nautical."
- The women who coined the expression 'Surfing the Internet'
🤙
https://www.surfertoday.com/surfing/the-woman-who-coined-the-expression-surfing-the-internet
https://gutenberg.org/cache/epub/49/pg49-images.html

2024-03-04 19:17:34

Chart watching. Not that chart.
https://m.primal.net/Hhgx.png

2024-03-04 17:27:23

best of day 2 of nostr.
zapping the zap.stream dev while streaming a live zap.stream of him developing zap.stream

2024-03-04 10:39:15

- reply

how much for the ICO?

2024-03-04 10:01:43

- reply

👍 mempool based estimation is the way

2024-03-04 10:00:54

- reply