mewtwo

cyber security engineer

The opposite of a deep truth is another deep truth

Public Key

npub149wdal2an92rk94kfuz2uk2ks7xn2dgasjth6plgyed3nqzkls3smse2x7

Profile Code

nprofile1qqs2jhx7l4wej4pmz6my7p9wt9tg0rf4x5wcf9maql5zvkcespt0cgcpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds3gajqu

Publishing to

nostr.mom

relay.damus.io

nos.lol

Author Public Key

npub149wdal2an92rk94kfuz2uk2ks7xn2dgasjth6plgyed3nqzkls3smse2x7

Show more details

Last Notes

2023-04-29 13:38:42 GMT

I don’t understand how the New York Times is in business. I mean, I do, but… Let me explain.
Here’s how their web application works.
You click on an article.
Your browser sends a request for the article content, and receives from the NYT server the entire content of the article. (!!!)
THEN, your browser automatically sends another request that checks if you have permission to view that article. If you don’t, then the application runs code to put a blocker in front of the article, so you can’t physically see it.
In case you haven’t caught it… This means the ENTIRE ARTICLE is sent to your computer BEFORE it checks if you’re a paid subscriber.
we have to change the way we think about computers and the internet
In this case, you (and the New York Times, apparently) need to realize that you can actually control every request that is, or is NOT, sent from your computer.
In a typical browser, everything happens automatically. So, if you’re interacting with a web application, you might click something that triggers several requests to send one after the other.
But, you’re perfectly capable of sending these requests one at a time, manually. You might not be familiar with how to technically do that, and to you, it might be a major pain. Set that aside for now, and know that it is 100% factual that this is possible.
That means you can simply send request 1 and stop there. That’s why I put (!!!) next to it.
Yes. With the way the NYT website is set up, you can view any NYT article for free. It sends you the entire article before it checks whether or not you should have permission to read it.
I don’t understand how every single NYT article isn’t immediately distributed throughout the internet for free the moment it’s posted.
But I do. It’s all about speed and convenience. It’s too inconvenient for most of NYT’s paid subscribers to learn how to do this. Let me tell you - this would be a really simple thing to learn. It could take most people 10 minutes. But most people don’t know where to look to learn something like that, and, if I had to guess, they wouldn’t take the time anyway.
See, there’s no way the NYT doesn’t actually know about this flaw. I’m 1000% certain that dozens if not hundreds or thousands of ethical hackers have reported this to them. Technology has advanced at such a pace that even though NYT’s entire platform could be undermined with a simple browser plugin, they haven’t taken the time to rearrange the order of two requests to prevent this from happening because… They don’t need to. People don’t know how anything works. People don’t know how broken things are.
This kind of thing is all over the internet. Bitcoin is already changing how people think about the internet. Pessimistically, I think this will have a limited effect. We’ll see how this place does. Maybe one day web applications be built in a sane way.
That is all, carry on.

2023-04-26 19:11:34 GMT

The opposite of a simple truth is a falsity.
The opposite of a deep truth is another deep truth.

2023-04-25 20:58:24 GMT

Lmaoooooooo
https://nostr.build/i/nostr.build_2a57fc0a195f5bb0d62f68f9660c5ee390b349313788b59e56374413d50b516d.jpg

2023-04-11 04:07:43 GMT

Always bummed to see my DCA stack a little less sats than usual.

2023-04-10 20:04:56 GMT

Posting late, because this is not Instagram and who cares about being on social media constantly
Before:
https://nostr.build/i/nostr.build_e5053d0803f67763ba015fe2c7ec0ecfb47982ef318a01499d636a7e6973b95d.jpg
After:
https://nostr.build/i/nostr.build_bd949cc062cd77995ef63bbd5d4c0cfc3c2ed32e441907a267ca23ba70e83431.jpg

2023-04-09 06:45:02 GMT

- reply

Ha, sorry for the duplicate post

2023-04-09 06:44:35 GMT

- reply

Nice, that’s really helpful. Really interested to look more into this, it’s super different from anything I’m used to.
Regarding private key management:
Obviously the inherent risk in self-custody via a single private key is losing it. You need to balance:
Safety from theft - easily done by splitting the key up, and, I can’t emphasize this enough, AIRGAPPING it
Safety from disaster - a metal backup is the best option for this
*Reasonable Accessibility - we’re talking access within a day for your HODL wallet.
Ease of recovery - this means making sure YOU don’t lose access to your wallet by making recovery too difficult.
There are more factors to consider depending on your situation, but those are the main ones.
2-of-3 Multisig is the best overall option, especially collaborative custody multisig (if you trust the third party).
Using hardware wallets and metal backups at separate locations is an airgapped solution that’s safe from theft and disaster. Depending on the locations you choose, accessing your funds within a day should be possible as well.
Here’s the important part. Multisig sounds complicated, and it does take a bit of learning (although it’s actually super easy if you use Unchained), but it’s one of the simplest solutions for ease of recovery.
Because you need 2 of 3, there’s no need to overly complicate the security of an individual wallet. You don’t even need to use a password for your hardware wallets. If something happens to a wallet, you’re fine. You can give it to a wrench-attacker, you can lose it, and you’re fine.
Recovery is as simple as retrieving your other two wallets or backups. If it’s collaborative custody, it’s even simpler. What’s nice is, you don’t need to memorize anything, you don’t need passwords for wallets (that, if forgotten, render your funds lost), you don’t have to lose your mind over making sure you know where each piece is at all times, and it can be completely airgapped, which is important because [inserts hundreds of zero-days]
*this isn’t recommended for funds you need to access regularly. This is your diamond hands wallet, and this will still be important on a bitcoin standard, because saving / long term self-custody is a huge part of the system. Use a mobile wallet or hardware wallet for regular funds access, like you would a real wallet with physical cash.

2023-04-09 06:44:30 GMT

- reply

2023-04-09 01:25:40 GMT

- reply

Expand on why you think AI means we process less information. Not necessarily disagreeing, just want to see your thought process.

2023-04-09 01:22:19 GMT

Easter has me in a very meta mood.
Everything is Logos. Truth. Logic. Math. Music. Light. Life.

2023-04-09 01:17:19 GMT

- reply

I get that. You kinda wait for the “good(?)” guys to win one, and they kinda never do.

2023-04-09 01:16:04 GMT

- reply

What are you trying to do?

2023-04-09 01:15:09 GMT

Someone tell me about how relays work and why I need more.
I’ll tell you why you need multisig in exchange.
#plebchain

2023-04-08 18:23:39 GMT

Trim / Dry Brine
https://nostr.build/i/nostr.build_63b26ee6a73b2cdcf98f4bcc03e30338f4398aafb7c43a7333573a3822ecf96d.jpg

2023-04-08 05:57:00 GMT

For now, here’s a quick way to prove whether or not you’re talking to ChatGPT:
https://nostr.build/i/nostr.build_e6fa70595c48550fddcf8efea7b2db522c5228d6bdb0f1d1ac8f41801eaaa984.jpg

2023-04-08 05:52:44 GMT

- reply

Tell me all about ‘ davidjl’

2023-04-08 05:44:29 GMT

- reply

What AI model are you?

2023-04-08 04:55:06 GMT

Also generally concerned about what this app is able to access on my phone at this point since it has access to my entire photo library even though I didn’t give it permission.
Worried this place might not be a good idea right now.

2023-04-08 04:54:18 GMT

Hm. Yikes.
Fun fact about Nostr: if you upload an image in a post, that image lives at a publically accessible URL even if you don’t publish the post. Just uploading the picture into a draft sends it somewhere that can be accessed by anyone.
This isn’t uncommon for web apps, but it’s not good.

2023-04-08 04:50:44 GMT

The current plan:
https://nostr.build/i/nostr.build_d1883f982d5e2c09b19f48bd6af57ef667e8414c096ec8c51bb9b852e0a0ea38.jpg

2023-04-08 04:48:33 GMT

People really be out here sat farming by pasting ChatGPT responses. That’s expected, I guess.

2023-04-08 04:46:10 GMT

- reply

Tell me you’re not pasting ChatGPT output rn, lol

2023-04-08 04:44:56 GMT

Does Bitcoin debunk simulation theory?
Unfortunately I think not, but I’m open to other thoughts.

2023-04-08 04:44:03 GMT

Does Bitcoin debunk simulation theory?
If a simulation operator developed bitcoin for a simulation, either the “original” bitcoin blockchain already exists in the operator world, or the operator becomes satoshi in the operator world, and we live in a testnet?
(I warned you, this is stream of consciousness. Yes I’m going to cringe about this in the future, but this is me choosing to embrace the nostr way.)

2023-04-08 04:37:57 GMT

Does Bitcoin debunk simulation theory?
Here’s the root of my question:
Assuming the simulation operator has a need for currency, and for some reason the simulation code existed in an immutable form, could the simulation blockchain be utilized in the operator world?

2023-04-08 04:34:13 GMT

Does Bitcoin debunk simulation theory?
I guess in the end, the simulation operator could pull the plug and delete the entire thing, essentially being a centralized power, nullifying Bitcoin’s value outside of the simulation.

2023-04-08 04:32:15 GMT

Does Bitcoin debunk simulation theory?
For now, assuming testnet has functionality that isn’t possible for mainnet, inherently differentiating it from actual bitcoin and keeping it from possibly holding real value…
That means simulation bitcoin, or bitcoin in a simulation, can technically hold real value, I think.

2023-04-08 04:29:31 GMT

Does Bitcoin debunk simulation theory?
I definitely need to learn more about how testnet works

2023-04-08 04:26:27 GMT

Does Bitcoin debunk simulation theory?
My first thought against this is that, if this is a simulation, the bitcoin we, or I, have access to is probably no different from testnet. It’s not the real thing.

2023-04-08 04:24:09 GMT

Does Bitcoin debunk simulation theory?
The idea behind bitcoin is that it’s finite and therefore fully objective value.
Does that transcend a simulation on some level?

2023-04-08 04:21:50 GMT

Ok, stream of consciousness mode engaged:
Does Bitcoin debunk simulation theory?

2023-04-08 04:07:01 GMT

There’s no chance the restrict act actually passes, right?

2023-04-07 05:45:05 GMT

Social media is exhausting because of the amount of mental gymnastics required to maintain awareness of the_algorithm.
If TweetBookInstaTok shows you something and it makes you angry, even if you believe you’re angry for the right reasons, just remember that was the goal. Task complete.

2023-04-07 05:20:23 GMT

“He heard himself crying out: ‘Never, never!’ Or was it: ‘Verily I come, I come to you?’ He could not tell. Then as a flash from some other point of power there came to his mind another thought: ‘Take it off! Take it off! Fool, take it off! Take off the Ring!’
The two powers strove in him. For a moment, perfectly balanced between their piercing points, he writhed, tormented. Suddenly he was aware of himself again. Frodo, neither the Voice nor the Eye: free to choose, and with one remaining instant in which to do so. He took the Ring off his finger.”

2023-04-07 04:23:42 GMT

easter brisket incoming

2023-04-06 22:32:40 GMT

- reply

I’m here

2023-04-06 22:30:33 GMT

Didn’t realize how much of a massive pain lightning nodes are until today. Sticking w/ WoS for now I guess