dtonon
daniele

Working on https://nostr-proto.org (and related Squalk forum software), https://fevela.me, https://nstart.me, https://njump.me, https://oracolo.me and other inspiring nostr projects. I love to build helpful things that people are pleased to use, mixing tech, design, usability and accessibility.

Public Key

npub10000003zmk89narqpczy4ff6rnuht2wu05na7kpnh3mak7z2tqzsv8vwqk

NIP-05 Address

dtonon.com

Profile Code

nprofile1qqs8hhhhhc3dmrje73squpz255ape7t448w86f7ltqemca7m0p99spgpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsq83lkc

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub10000003zmk89narqpczy4ff6rnuht2wu05na7kpnh3mak7z2tqzsv8vwqk

Show more details

Last Notes

2026-09-30 09:29:53 GMT

- reply

> NEEDS a war
Probably true.
For decades the USA has taught that war is a powerful economic and political tool. Europe has evidently, and sadly, learned its lesson.

2026-09-30 07:39:47 GMT

- reply

Damn, why no one uses Chronicle? 😅

2026-09-29 10:41:26 GMT

- reply

Hahaha

2026-09-29 10:14:46 GMT

Small pro-tip for digital hygiene & minimalism: set a crontab that automatically delete downloaded files after X days. This make your PC lighter, and above all make you be more mindful of what you really want to keep, forcing you to move it to the proper location. Stop wasting hours decluttering that dumping ground.
https://chronicle.dtonon.com/c0f3b5869ceb799813180432a846558a17a20d739ee4fd8e09f8434b83d73da3.png

2026-09-25 23:55:06 GMT

- reply

Impressive. What integration/skill did you use?

2026-09-25 09:04:05 GMT

- reply

I don't see the bot's reply here.

2026-09-24 16:12:44 GMT

#Squalk v0.2.0 now has in-app notifications, don't miss a thing!
Try it at https://nostr-proto.org
https://chronicle.dtonon.com/a5a76ac04042f672758ac7067e677e05e5e101d681f0183b0196a97ee06d0d28.png
Source code: https://github.com/dtonon/squalk

2026-09-24 15:43:59 GMT

- reply

@npub1der…xzpc we have to start a "warp image" war.

2026-09-24 14:52:58 GMT

https://chronicle.dtonon.com/cb8c1577a9fee177a344838d8aeab871da78f326f0a24c003a438f406322038e.jpg
#nevent1q…tzcg

2026-09-24 14:13:09 GMT

- reply

Feel free to share your full experience on nostr-proto.org/room/relays

2026-09-23 09:20:39 GMT

Things take on the shape of our perspectives.
Use your judgment when thinking.
#nevent1q…477v

2026-09-23 09:18:50 GMT

- reply

Sharing a step by step tuorial on https://nostr-proto.org/room/relays would be great, thanks.

2026-09-23 09:17:52 GMT

- reply

Feel free to share your full experience posting on https://nostr-proto.org/room/relays, it can be valuable to other start9 users!

2026-09-22 15:21:02 GMT

Do you run a relay? Share your experience.
Running a relay is still a bit of a black art: choosing the software, sizing the box, handling spam, deciding on policies, keeping costs sane, and dealing with the surprises that only show up once real traffic hits.
I opened a room to collect this knowledge in one place, so that new relay runners don't have to rediscover everything on their own:
https://nostr-proto.org/room/relays
If you operate a relay, big or small, please drop in and tell us what worked, what didn't, and what you wish you had known at the start. Setup guides, war stories, tooling tips, cost breakdowns, anything is welcome.
Feel free to mention your preferred relay wizard to catch their attention.
/cc @npub1xts…kk5s @npub180c…h6w6 @npub1v0l…qj49 @npub1utx…50e8 @npub1226…grkj @npub137c…k37w @npub1q3s…d26p @npub10np…tl5h @npub1m4n…c2jl

2026-09-21 18:35:39 GMT

- reply

"the format was not nice" is a problem of specific clients. If you use an external link, in addition to break interoperability, you are not helping apps to improve their rendering skills :)

2026-09-21 13:54:51 GMT

- reply

Hahaha
I mean just the recap announcement ;)

2026-09-21 09:02:34 GMT

- reply

Great, thanks!
A suggestion: when you post nostr events, like these, you should avoid to use a link to a web client, and instead prefer a nostr:naddr1xxxx entity. It is the user's client that handles displaying the resource in the desired format; this way, users are not forced to use anything other than what they want.

2026-09-21 08:43:07 GMT

- reply

What about showcasing Goop on https://nostr-proto.org/room/apps ?

2026-09-21 08:05:02 GMT

- reply

Sad KYC madness.

2026-09-21 07:34:29 GMT

@npub1der…xzpc https://goop.dergigi.com website is absolutely cool!
Just a minor glitch in shortcuts: when I select a section by number, or arrows, I cannot scroll the right panel with the keyboard. Maybe you can implement left/right arrows to move between the panels, so up/down arrows are contextual.

2026-09-21 07:30:09 GMT

- reply

I think it would be great if you posted your recap on https://nostr-proto.org/room/agora

2026-09-20 09:10:48 GMT

- reply

I thought this option referred to Nostr tags, like the client one. It could be a nice privacy idea, don't you think?
For URLs I would call them "tracking params".

2026-09-19 16:19:44 GMT

- reply

I'm happy it works now!
Use it, we can bring them back to life! :)

2026-09-19 15:53:16 GMT

- reply

I found and fixed a bug related to dropped websocket connections and excessive timeouts. Now it should work fine, let me know.

2026-09-19 15:29:08 GMT

- reply

Points of view.

2026-09-19 15:11:35 GMT

https://chronicle.dtonon.com/f10502d5f2a0367b9a675c8f28a39a6efbe44dc4acec75f9db324333100f0bb7.jpg

2026-09-19 15:03:33 GMT

- reply

I was thinking how to manage different languages within a single project, but it is not easy at all.
I think the best approach is to create your own forum instance hosting it at https://forum.nostr.org.tr or https://nostr.org.tr/forum (you may need some redirect tricks).
If more local communities did this, I could feature them on nostr-proto.org to highlight these spaces for people who prefer to communicate in their native language.

2026-09-19 14:58:11 GMT

- reply

Oh yes, damn typo, sorry! :)

2026-09-18 16:36:33 GMT

- reply

Hahahaha

2026-09-18 16:19:08 GMT

"The problem was the gatekeeper"
"And technology can be a source of freedom if everyone is able to find their own keys to identity"
This video is wonderful, thank you @npub1yxd…3ylt
#nevent1q…sejn

2026-09-18 15:56:09 GMT

- reply

Good luck deleting a private key, John.
You'll never be able to part with it, it'll be your worst nightmare.

2026-09-18 15:48:51 GMT

- reply

Yes

2026-09-18 15:34:43 GMT

- reply

I mean invite-only communities, that I suppose are Concord's focus.

2026-09-18 15:32:18 GMT

- reply

Weird, I just logged in via Amber without any problem.
What version are you using?
Are you sure your bunker relays are up?

2026-09-18 15:23:03 GMT

- reply

Because Squalk's goal is to promote open forums, while Concord seems to focus on closed & encrypted communities.
I started to work on Squalk before Concord was a thing, I'm following its development and I'm evaluating if it makes sense to support it as well, but it's not a priority for now.

2026-09-18 14:50:55 GMT

- reply

The relay that hosts nostr-proto.org runs on https://gitea.coracle.social/coracle/zooid by @npub1cjw…j2rh (if you want to replicate the setup for now use the dev branch with the 'anonymous_read' flag).
Also thanks to @npub1cgc…2ndy that helped me to test it, and kicked things off by starting the first discussions!

2026-09-18 14:41:16 GMT

Launching nostr-proto.org, an old school forum for the Nostr community.
No infinite scroll, no algorithm, no rush. Unlike a chat, where good answers scroll away and every question gets asked again next week, a forum keeps conversations slow, asynchronous, and easy to find: threads stay readable, searchable, and worth returning to months later.
https://chronicle.dtonon.com/2ee71b6840dc6f17208445d7dbd24ef7f9ec71c0ea86d63302394d4650dd1833.jpg
It is organized in five rooms:
Agora, for open conversation, news, and opinions
Help, where no question about using Nostr is too basic
Protocol, for NIPs, specs, and proposals
Apps, for releases, showcases, and feedback
Relays, for the people who run them
Everything is built on NIP-29 groups hosted at wss://relay.nostr-proto.org, so you can take part from the website or from any NIP-29 client like Flotilla or Nostrord. Your key works everywhere, and your posts are not locked inside a site.
The forum runs on Squalk, an open source forum software built on Nostr: https://github.com/dtonon/squalk
Come say hi in the Agora: https://nostr-proto.org/room/agora

2026-09-12 12:24:23 GMT

- reply

I will do it!

2026-09-11 21:36:32 GMT

- reply

This misconception of yoga as "stay in the loto pose" is quite common and always surprises and amuses me :)
Yoga has different "styles" but they are all physical activities that require a quite hard training. Traditionally yoga is used to prepare the body to the (still) meditation phase.
Anyway, there are also yoga championships, and this year the world championship will be hosted in Italy (Salerno).

2026-09-09 18:59:01 GMT

- reply

I really like it! Actually I never visited the old one, in fact I didn't know about @nprofile…wzjf existence till few minutes ago! What a fantastic app, you should promote it more.

2026-09-08 14:31:17 GMT

- reply

#nevent1q…vegf

2026-09-06 08:17:04 GMT

- reply

Oh I will test it asap.
I know, iOS is a pain.

2026-09-06 06:41:58 GMT

- reply

They are not interested in social stuff.
They don't like a English-only environment.
Group chats have still poor ux.
Possible solutions:
- Language filtered relays, like the ones you did, to bootstrap local communities.
- A decent multiplatform DM/groups client.
It would also help have a suggested language tag on notes and a filler feature in clients; I really don't understand why this obvious and cheap solutions has been so oposed.

2026-09-02 12:16:11 GMT

- reply

This is a slippery slope.

2026-08-31 16:38:44 GMT

Listening to Kudsi Erguner.
Beautiful.

2026-08-31 13:25:14 GMT

https://chronicle.dtonon.com/32732d4338a676d1526a5a0d82535c29ad11ea927ac155d57979923f63848a1e.jpg

2026-08-25 12:30:57 GMT

Not bad:
#nevent1q…whrh

2026-08-22 09:23:35 GMT

- reply

I can relate, I feel extremely tired and fogged when I have to read long documents written by LLMs. I find myself jumping around the document searching for "anchors" from which I can build some sense.
I noticed that this behavior is stronger on my native language.

2026-08-22 08:32:38 GMT

- reply

Facebook already shipped its MCP time sgo.
I hope agents will definitely kill the ads model.

2026-08-22 08:26:09 GMT

- reply

Beautiful, and the small format is intriguing.

2026-08-20 09:17:44 GMT

- reply

I was expecting at least a gif

2026-08-19 17:46:14 GMT

GPG's UX is a total mess, unfortunately.
I'm not surprised that password protected zip files won.
(I know, unfair comparison)

2026-08-19 15:13:04 GMT

This is what blocks me from publishing #Manent for iOS to the App Store.
I hate these walled gardens that decide how users should "safely" use their devices.
#nevent1q…p95j

2026-08-18 13:13:14 GMT

- reply

I cancelled my subscription a couple of years ago, the apps have good features, but the whole ecosystem you are forced to install is basically a malware that phone home perpetually. And yes, Adobe is shit.
Now I use the Affinity suite, but now it also was bought by Canva, and I fear it will degrade faster.

2026-08-18 08:38:15 GMT

Ask HN: Alternatives to GitHub
https://news.ycombinator.com/item?id=49331033
@nprofile…psy5, always on the front lines, has already pointed out Nostr and gitworksop.dev

2026-08-17 15:31:24 GMT

https://declaude.org/watermarking/

2026-08-14 14:03:07 GMT

- reply

Maybe https://github.com/fiatjaf/nocomment by @npub180c…h6w6 is what you are asking for? Or https://github.com/carlitoplatanito/disgus
It could maybe be achieved with Squalk too, but you should open a discussion for every page you post on your website, it's not exactly the best user experience ever.
Let me know if you have any thought about that, I'm interested to expand Squalk.

2026-08-13 18:35:42 GMT

I just discovered that https://forum.basspistol.org by @nprofile…60sr uses #Squalk, love it

2026-08-13 18:20:54 GMT

- reply

It uses NIP-29, so it's a single relay based forum.

2026-08-13 18:07:17 GMT

#Squalk now supports NIP-50 search:
https://chronicle.dtonon.com/f5804695734e2689e4405f471edcf6cacaff7b8bf3394a97561dc9407bdf6cd3.jpg
Test it at https://squalk-test.dtonon.com
To grab the code and contribute: https://github.com/dtonon/squalk

2026-08-13 18:05:42 GMT

- reply

Yes, it's disturbing.

2026-08-13 07:47:39 GMT

- reply

N name space is narrowing quickly!
https://github.com/dtonon/npanel

2026-08-12 08:00:37 GMT

Mind the void.
https://chronicle.dtonon.com/81f9d398a6d8a33d2194d2d60e6789e449b3a6943be2a4a24ddd2ec771bd94e4.jpg

2026-08-10 15:05:42 GMT

- reply

In what unit of measurement? The time taken?
(just kidding)

2026-08-10 13:30:06 GMT

- reply

PS: Still unreleased, hopefully next days, after ironing some ugly code.

2026-08-10 13:03:31 GMT

- reply

Cryptography is interesting because it's often counterintuitive. I'll try to explore this further.
In the meantime, we've opened up a new rabbit hole: dice :)

2026-08-10 12:41:49 GMT

nostr-ruby meets #Manent
Manage your private notes programmatically.
Maybe a CLI? We'll see.
https://chronicle.dtonon.com/e05a5ece2256432760eb9e33adc2630110a3097f89a1003f970e77bcbcdbdbb5.jpg

2026-08-07 14:34:52 GMT

- reply

Fair, you gated "not extreme" and I argued against an extreme die anyway. I was going off a similar discussion I read a long time ago, which is where the extreme framing came from, not from what you actually wrote.
Still, I don't think "nobody knows the bias" is the part keeping you safe. "Not extreme" is. Obscurity buys less than it looks like, and the search isn't targeted at you personally, it runs against every funded address at once.
Which leaves only: how extreme is it? That's my actual objection to handmade dice. Not that they're definitely bad, but that you have no way to check before the key exists.
I don't want to state numbers I can't derive myself, so, AI says:
"Not knowing the bias isn't a barrier, it's a cost. An attacker searches over the space of plausible d6 distributions rather than guessing one, and the penalty for that is roughly (k-1)/2 * log2(n) bits, about 16 at 100 rolls, plus a handful for unknown roll count and mapping. Call it 30 bits of obscurity. Each candidate is one pubkey derivation checked against a filter of funded addresses, so no dictionary or dedicated tool is needed and the work amortizes across everyone who used the same method."

2026-08-07 13:06:26 GMT

- reply

The fact that nobody knows the bias doesn't help in any way.
Think about an extreme situation: a die that lands on the same side 80% of the time because that side has specific dimensions or weight. You're killing the entropy, of course, and the derived key is weak against bruteforcing.
The dice in the photo could easily have a similar important bias that impact the entropy, and that bias is certainly more compared to a casual, not intentionally altered, dice that you can bought around.

2026-08-07 06:35:09 GMT

- reply

It's really not a good idea! Probably they produce lower entropy than random toy dice.

2026-08-06 13:30:01 GMT

- reply

Ci mancherà un sacco, avrei voluto vederlo molte più volte live, mannaggia!

2026-08-06 12:59:22 GMT

RIP Immenso Guccini.
https://chronicle.dtonon.com/c57790330cce222b1004951ad1fe6fd4ce40a01fdad3fe8263b86ee6d0f6dc2e.jpg

2026-08-05 15:59:49 GMT

- reply

Cool.
If you will add a relay to the deploy, ping me.
I'm going to borrow the approach for Squalk.

2026-08-05 15:37:37 GMT

That's really cool!
Long live the small communities on Nostr.
#nevent1q…cjq6

2026-08-05 08:54:51 GMT

- reply

> The repo also lists NIP-33, so it might be compatible after all.
My fault, I reused the number of a discontinued NIP replaceable events:
https://github.com/nostr-protocol/nips/blob/master/33.md
I will eventually rename it.
Ask noornote's author what NIP is using, and propose to follow Manent's one ;)

2026-08-04 07:12:07 GMT

- reply

I don't see in NoorNote any private notes, can you elaborate?
Anyway, Manent uses this NIP: https://github.com/nostr-protocol/nips/pull/2271

2026-08-03 14:16:27 GMT

#Manent for Windows is out!
The notes stay private. Whatever Recall screenshotted while you typed them is between you and Redmond.
Grab it from https://github.com/dtonon/manent/releases/tag/v2.0.0
https://chronicle.dtonon.com/60d8c5d142eb5faea26274ebb6d543379c7b524af089e73ced3c6fa4292b6904.jpg
Building it was fine. Testing it on Windows is why I'm taking the rest of the week off.
#nevent1q…xyyy

2026-08-03 13:24:30 GMT

- reply

Any source?
SS takes 50 preview frames AND the final pic, it is a lot of entropy.
Also in "full" blackness the sensor registers very different levels, you cannot have two similar entropy patterns.

2026-08-03 10:33:01 GMT

- reply

Yes, encryption is often counterintuitive and is subject to various misconceptions.
Probably the first goal of a good onboarding should be to achieve absolute security, then instill good habits by providing a progressive learning path.

2026-08-03 10:21:11 GMT

- reply

Examples of "obvious and easy"?

2026-08-03 10:20:31 GMT

I've been thinking about reviewing the onboarding process of CC and similar devices, to see how seed generation is handled.
My suspicion is that developers, being hardcore tech people, take dice as the obvious solution, so 1) they don't guard the workflow enough, and 2) they pay little attention to the alternative paths (and their code) that use automatic generation. The whole thing may come down to a bias/UX issue.
Anyway: putting a few dice in the box, presenting a nice UI, telling a story about PoW, and asking users to take a real, physical action to secure their wallet doesn't seem too hard to pull off, and it could be quite effective. An advanced feature reframed as a cool setup ritual.
For hot wallets, a similar gamification could be achieved using the camera to generate entropy, @npub17ty…3mgl style.
#nevent1q…er59

2026-08-02 08:53:42 GMT

- reply

No, sensors always register differently even in blackness. And anyway SS entropy calculation also takes in consideration 50 live preview frames.

2026-08-02 07:53:29 GMT

I needed a moment of relief.
The fevela.me filter was helpful.
https://chronicle.dtonon.com/c3d3986c2ebea17eb9fdf480fc5533cbbe7ca1ae79995bcbf5c8369f6f142f96.png

2026-08-01 23:46:11 GMT

- reply

Why deprecated?

2026-08-01 23:42:49 GMT

- reply

No yet, I'm evaluating how to improve distribution.

2026-08-01 15:40:17 GMT

- reply

Great! :)

2026-08-01 13:43:33 GMT

- reply

I see you are on 1.5.0, probably it's the certificate issue. It's expected, from v1.6.0 I had to change the certificate, so you need to uninstall and reinstall.
Do a logout first, so you are sure everything is in sync (you would receive an alert otherwise).

2026-07-31 21:30:26 GMT

- reply

Found it. It's weird that they don't add the option on the main product page, above the buy button, like for the two previous models.

2026-07-31 21:20:10 GMT

- reply

Oh, thanks. Where this page is linked from?

2026-07-31 21:18:51 GMT

- reply

Sorry for your loss, Gigi.
Life is still largely a mystery, we need to learn to appreciate it more.

2026-07-31 21:15:03 GMT

- reply

I find it out: Safe 3 and Safe 5 have the Bitcoin only edition, Safe 7 don't. Not a wonderful news for their flagship product.
I'm not questioning their technical expertise, although I don't think it's directly related to the fact that they invented hardware wallets.

2026-07-31 15:33:03 GMT

- reply

> Get a Trezor Safe 7. It's a Bitcoin only version from the company that literally invented hardware wallets
I don't mean to complicate an already difficult situation by questioning your generally helpful advice, but a few hours ago I went to check out their website specifically to verify this.
On https://trezor.io/trezor-safe-7 "bitcoin" is mentioned only one time, near "Ethereum and Solana". "Crypto" instead is mentioned 18 times.
Maybe they also ship a Bitcoin version, like other hw brands, but we can safely says that Trezor is _not_ a "Bitcoin only" company, they happily take advantage of the crypto/shitcoin market. Aside from the ethical aspect, their technology stack is certainly more complex, with all the associated consequences in terms of attack surface.
Anyway, their devices are sexy af.

2026-07-31 12:34:52 GMT

- reply

When quoting a note on Nostr use nostr:nevent1xxxxx, please.
Links to specific clients should be discouraged.

2026-07-31 10:49:35 GMT

Just added linux appimage to the release:
https://github.com/dtonon/manent/releases/tag/v2.0.0
#nevent1q…xyyy

2026-07-30 18:52:58 GMT

- reply

Great.
Can you evaluate to add https://github.com/dtonon/chronicle ?

2026-07-30 18:51:02 GMT

Absolutely cool and needed:
#nevent1q…cxtc

2026-07-30 18:48:42 GMT

#Manent 2.0 is here!
After using Manent heavily for a few months and piling up a lot of notes, the next step made itself obvious: tag and search!
https://chronicle.dtonon.com/5aa37e4cc015a557c184314aa882608df35aabe876f970b1918bbe0e62b7141f.jpg
The search and tagging features gave me a bit of a hard time, it wasn't easy to find a good interface, tailored to both mobile and desktop, for exposing them while keeping the user experience simple and intuitive... I hope I pulled it off.
Have fun, feedback is appreciated!
Install Manent from @npub10r8…t2p8 or download it from https://github.com/dtonon/manent/releases/tag/v2.0.0

2026-07-29 17:07:19 GMT

Today I discovered that many public blossom servers filter uploads guessing the mine type from the magic bytes. So they're not very #Manent friendly, since it produces encrypted blobs with random headers.
One more reason to have a personal relay+blossom server.
Shameless suggestion, try:
https://github.com/dtonon/chronicle

2026-07-29 11:30:56 GMT

- reply

I bet it's impossible in iOS.

2026-07-28 17:14:31 GMT

Take note: guanciale, not ham or speck. And no cream, for heaven's sake!
#nevent1q…qah0