rcarback
Richard Carback

https://carback.us/rick

Privacy Preserving Cryptography - Voting and Governance - Blockchain - Cyber Security

co-founder https://xx.network

Public Key

npub1cac5f9tvz8k8wvnyjpnfm46m022vr0tdu554de0zrfk35qunq72s5lmnv7

NIP-05 Address

[email protected]

NIP-57 Address

[email protected]

Profile Code

nprofile1qqsvwu2yj4kprmrhxfjfqe5a6adh49xph4k7222kuh3p5mg6qwfs09gprpmhxue69uhhyetvv9ujumn0wdmksetjv5hxxmmdqy2hwumn8ghj7un9d3shjtnyv9kh2uewd9hj7znk4en

Publishing to

relay.noswhere.com

relay.damus.io

Author Public Key

npub1cac5f9tvz8k8wvnyjpnfm46m022vr0tdu554de0zrfk35qunq72s5lmnv7

Show more details

Last Notes

2024-06-01 18:43:52

Thanks to all who came by and said hi to my team and I at #Consensus2024 this year. We had a blast and are stoked to haven taken home the win for the sui track!
https://github.com/Consensus-Hold-Em
https://youtu.be/x-OcnymwbOM?feature=shared

2024-05-09 19:53:59

- reply

I think 2 options, one is sharing that cred means they will lose access to it and maybe any funds or other access protected by it. The latter is to ban when you see access from the same pseudonym from different places at once.

2024-05-09 01:26:20

- reply

This is how public channels work in xx, and the main issue in your scenario is you need to trust your users not to share this key… instead you could blindly sign a cred that allows them in via a valid signature, but you could still track the now pseudonymous cred. That should fine as you have all the connection metadata which allows you to do that already.

2024-02-09 20:09:00

Small project announcement from me -- we're going to be working a project to improve #privacy in worldcoin:
https://twitter.com/xx_network/status/1755981614931472575
I'm looking for a #rust and/or #golang #internship for the summer to help with this and another project. It is #remote
https://image.nostr.build/6cbe9ef28d11efa2e0c5dd89f2087f85f668c16d0b67e1cb97ebcc84867caafd.jpg

2023-09-22 19:49:31

Had a great time at https://bostonblockchainweek.com/
Thanks to everyone who chatted me up and ba e a great weekend!
https://image.nostr.build/e204db59659269194cb2e51cf6e85fecedc3bdf12f50d68ad42853aec5544a56.jpg
https://image.nostr.build/b6ce9a1a69d5ab6e1c5fa26b9ef754d6b38fe977cd010f8f2434b6352c7bf609.jpg
https://image.nostr.build/b0ae3ce68bb73f003c38cc76ec481f3cb1b09c86eb479334b8ec10fad401ba03.jpg

2023-08-28 22:46:27

- reply

This sounds really cool, looking forward to checking it out!

2023-07-30 19:51:05

- reply

I think we more or less agree, but the properties here differ and there's room for more than one solution. For example - What you linked seems good but can't work for large groups at first glance (it also suffers from much more severe comms patterns analysis attacks).
Modifying the invite link to ping a coordinator for the final channel info (I.e. accept the invite) is easy to do and would eliminate the threat you outline. There might be other options like adding a password.
I don't object to the analysis so much as dismissing the entire approach as unsound. I'm advocating for constructive collaboration. (And I've got no dog in this fight, I'd love to work on this but I'm too busy with my other projects right now).

2023-07-30 18:31:26

- reply

There's no protocol that protects against a malicious participant that shares the keys, that's like trying to protect against someone who can video record the phone while its being used or something.
The link sharing can be improved but I think this part is making reasonable trade offs and could be modified to prevent mistakes users might make without much trouble.
I think its too easy to id what npubs are group chats, and subsequently who the participants are with taps on the relays.

2023-07-29 16:15:44

https://www.wired.com/story/nsa-ndaa-lobbying-privacy-loophole/
Why do it yourself when you can just buy the spying data directly from the ISP?

2023-07-28 16:00:10

Cory Doctorow has a 🔥 writeup on the newest musk scandal about the fraudulent mileage reporting:
https://pluralistic.net/2023/07/28/edison-not-tesla/#demon-haunted-world

2023-07-28 15:52:43

- reply

Fwiw I only see 971in my client. Follower count is somewhat difficult for the clients to calculate so I wouldn't read much into it.
I'm sorry the trolls are attacking you. 💔
https://cdn.nostr.build/i/e2db9e51889d9740f6878c41f0bf09600d71cacdd30d9fa7ef51473fabbf55f6.jpg

2023-07-28 02:27:15

https://www.techdirt.com/2023/07/27/journalist-tells-fbi-to-give-back-devices-seized-during-extremely-questionable-investigation-into-leaked-fox-news-footage/
The overreach here is absurd
I hope he succeeds 🔥

2023-07-28 01:58:45

#foodstr #tacos
https://cdn.nostr.build/i/0d2d827c87f8955569c277fc859ebb84a8117153d58f4182d108d717e7b08910.jpg
https://cdn.nostr.build/i/0ec84c803f13e756f2ef918dd086bb4810663f9821132d191ed5f81a4cdecb87.jpg
https://cdn.nostr.build/i/438d4f66918537694afd71050d1afff8997b8fd6bfde5cbb2fe34cab81f92a87.jpg

2023-07-28 01:56:10

- reply

They're spelling 'fraud' wrong

2023-07-28 00:52:22

https://youtube.com/watch?v=wa2jZtbKbRs
I am speaking tomorrow @ July 28 at 8:00 PM UTC
Does the USA Get Left Behind in Crypto Innovation?
Eleanor Terrett, Alex Chizhik & Richard Carback
Crypto regulations in the United States has been a quagmire. Eleanor Terrett has been following the daily updates in crypto regulation. Alex Chizhik is the COO of the Digital Chamber of Commerce and knows the industry well. Richard Carback is co-founder of xx network. Darren Moore is a content creator that researches crypto.

2023-07-27 14:46:12

- reply

TOR, nym, i2p, etc could help but the metadata behind the comms patterns can make the server identifiable.
They wouldn't help in this case as it was a seizure incidental to something else the admin was doing. I guess isolating to a data center with unique payment info?
The core issue is that the server knows the content.

2023-07-27 14:41:20

- reply

They could...it is not clear nostr fixes anything here except maybe the uptime on the service which is not the problem here 🤦
The only way to fix this is if the server operator is oblivious to what is happening, so seizing a server doesn't get you anything and seizures are forced to end point devices to be effective (and limited to only that user).
Xx network nodes have this property, as do some voting systems and other crypto proposals but I'm not aware of anything else at scale.

2023-07-27 01:50:50

- reply

Welcome to the free(er) internet

2023-07-25 21:23:41

- reply

If you're in boston, I highly recommend going to the DAO and Blockchain Nights events

2023-07-25 16:48:14

https://www.coindesk.com/consensus-magazine/2023/07/24/chainalysis-investigations-lead-is-unaware-of-scientific-evidence-the-surveillance-software-works/
Finally chainalysis is getting called out on their bullshit.
I do think they are more likely to misattribute. Their technique relies on users doing an obviously stupid thing, and smart users will deliberately subvert that by making their end balances match other (presumably innocent) users of the mix.

2023-07-25 02:27:14

"Renowned lawyer Tor Ekeland is poking holes in the U.S. government's case against alleged Bitcoin Fog creator Roman Sterlingov by poking holes in Chainalysis' forensics, privacy advocate L0la L33tz writes."
Https://www.coindesk.com/consensus-magazine/2023/07/24/chainalysis-investigations-lead-is-unaware-of-scientific-evidence-the-surveillance-software-works/

2023-07-25 02:17:11

Face the truth. Your #Privacy is in their Hands. Get it back!
The World of #Crypto is vulnerable, empower yourself to safeguard your personal data
Don't miss this eye-opening podcast with our Guest @rcarback, Co-founder of the @xx_network
🎧Spotify || ➡ bit.ly/3DmsvRJ
https://cdn.nostr.build/i/1b327bf3acbcebec637b3e4330397aecf22fdd891e158c2e8cfc5f43b1cd7e24.jpg

2023-07-23 21:01:31

Hey #american #usnostr folks, it is time to annoy your congress people and representatives to stop these bad internet bills.
https://www.eff.org/deeplinks/2023/07/you-can-help-stop-these-bad-internet-bills

2023-07-21 21:12:09

Some wildly unethical "economics" research:
https://www.karlstack.com/p/yale-university-vows-to-geolocate-aa2
I am in shock they got this through an IRB! They de-anonymized a decade of forum posts on a jobs&discussion site for economists... Some of these folks are in countries where they could be killed for what they posted.
#privacy #anonymity #ethics

2023-07-21 20:46:45

https://us-southeast-1.linodeobjects.com/dufflepud/uploads/0fe8d322-8976-4ab4-8306-dc9f144596ae.jpg

2023-07-13 14:32:49

Happening in 30 mins!
#nevent1q…m6qf

2023-07-11 20:27:29

I'll be doing an interview on Thursday: https://twitter.com/AdLunamInc/status/1678820046200614912

2023-07-09 18:03:46

https://www.theverge.com/2022/8/10/23299502/facebook-chat-messenger-history-nebraska-teen-abortion-case
It was only a matter of time until we saw private chats being used against folks in court. This case is more extreme than most, but cases with much more sympathetic facts are coming (I.e. unintentional miscarriage).
If you are using a major service, what you say, when you say it, and where can and will be used against you. Even the encrypted messengers only really protect against the first one. Use metadata protecting tech when you can.
#privacy

2023-07-09 07:02:10

- reply

The metadata protected E2E messaging in xx network takes a similar approach. It stores for a set period of time (21days) since it can't be known when the recipient receives the messages.
It's definitely the right design for private messaging applications.

2023-07-09 06:49:27

- reply

It makes it legal for them to buy and deploy spyware such as Pegasus and its ilk.
You'd think that would be reserved for spy shit, but it is actually just people the local gov or corpos don't like, like soda tax activists in mexico.

2023-07-07 03:03:19

https://inthesetimes.com/article/university-of-california-san-diego-chalk-markers-arrests
Love unions or hate them, but this is disgusting news out of the University of California union fight...What do you think the chances are these folks have had their private digital devices and email combed through?
Its almost a certainly. For what should be protected first amendment activity.
When we talk about a right to privacy and making tools to protect those rights. This is the abuse we are talking about.

2023-07-06 19:16:23

The french government is about to legalize police use of pegasus and other spyware to hack and turn on cameras and other tracking:
https://www.disclose.tv/id/hr3rek1ov2/
This is on the heels of the same government prosecuting folks using secure comms tools:
https://coracle.social/nevent1qqs2rk65q5sc8jdln7lnfq4gs8r6rve2tr83hlg8pyrdf5d6uukeadgpz3mhxue69uhhyetvv9ujuerpd46hxtnfdu5zww04
FWIW, Pegasus and it's ilk are largely used to suppress activists in other countries (i.e., Mexico), so it is safe to say that will largely be its purpose here.

2023-07-06 19:11:54

- reply

This is a great idea, and I have one additional detail that should be considered: Based on the source code leak twitter had a while back, it would be best to post a non-linked tweet then post the link with the preview as a reply.

2023-07-06 14:39:17

- reply

I wonder which side we are in. There is definitely overreach but also the dystopian levels of privacy violation and data abuses are attenuated there, so 🤷‍♂️
I certainly don't "speak freely" on these platforms, and am also careful about my usage and what I say there...

2023-07-06 03:32:18

Really looking forward to the Fairphone /e/OS launch in the US. A modern, repairable phone with a headphone jack is 🧑‍🍳💋!
https://techcrunch.com/2023/07/05/fairphones-repairable-smartphone-goes-on-sale-in-us-for-the-first-time-in-a-degoogled-murena-e-os-variant/

2023-06-11 21:53:05

- reply

Its worse than that: exchanges not only "invest" before listing but also want a much better price discount than you'd offer any other early stage supporter.
Projects that find this unethical pay a heavy price for not playing ball.

2023-06-11 02:53:53

Some folks in France have been imprisoned for using Signal, TOR, and other privacy and security tools:
https://www.laquadrature.net/2023/06/05/affaire-du-8-decembre-le-chiffrement-des-communications-assimile-a-un-comportement-terroriste/
The suspicion is terrorism, but evidence for that doesn't seem to exist outside travel history.

2023-06-09 21:30:35

Proxxy is now available for metamask users. You can get it here:
https://proxxy.xx.network
https://nostr.build/av/0f16d26ff6fdf4d7ff426ecde613be6d230d8b7f2806a6701c08d4e6f4fec5a7.mp4
It provides robust metadata protection that's superior to VPN/Relay/TOR from Infura and the rest of their ecosystem.
p.s. For my fellow Bitcoin friends, solutions for you are coming soon. Already having conversations with Wasabi and other wallets to integrate more directly. If you know the devs of a wallet project we should work with, please DM.

2023-06-01 04:44:51

The Blockchain Technology Symposium (BTS) 2023 which will happen tomorrow and Friday. It is virtual. It is free.
It has awesome talks like:
twitter.com/kostascrypto/s…
Please join in!
bts23.encs.concordia.ca/program.php

2023-05-31 17:07:30

Great news, the US CBP needs a warrant for your cell phone now (at least in the NY district)
https://www.eff.org/deeplinks/2023/05/federal-judge-makes-history-holding-bor

2023-04-24 17:06:32

https://media.nostrgram.co/i/1c/media_1ccd60a996446.jpg
This weekend was the #MITBitcoinExpo. Attendance was down from last year, but it was filled with interesting people and talks.
All the talks are available for free at:
https://www.mitbitcoinexpo.org/streaming
I wrote up my experience here: https://blog.carback.us/2023/04/mit-bitcoin-expo-2023/index.html
The two most notable talks I saw were ZeroSync's update on ZKP for bitcoin, and the lightning network limitations estimates by Rene Pickhardt. Details in my post!
https://media.nostrgram.co/i/5d/media_5d1f13aa96446.jpg
https://media.nostrgram.co/i/9e/media_9e81c1da96446.jpg
This was the 10th anniversary, and it is all done by the student run @MITBitcoinClub. Kudos to the volunteers who made this critical event possible!

2023-04-22 21:20:24

Strong update from zerosync. Performance needs work but they have assume valid working. Really nice progress for a project that came out leas than a year ago!
https://i.imgur.com/09791d2.jpg
https://i.imgur.com/slfCQs0.jpg
https://i.imgur.com/SqJZc7Q.jpg

2023-04-21 21:59:07

- reply

If you haven't see this yet, it got really spicy and is worth the watch.
#[0]

2023-04-21 17:58:37

I'll be presenting updates at the XX Network Public Council Meeting Livestream starting @ 1:30pm Eastern, join me here:
https://www.youtube.com/watch?v=qYFICWVF8ls
#xxnetwork #privacy #crypto

2023-04-21 17:01:15

https://media.nostrgram.co/i/92/media_92e85b15a2446.jpg
Anyone else going to the MIT bitcoin expo tomorrow? I'll be there around noon!

2023-04-18 21:49:57

https://media.nostrgram.co/v/7c/media_7c245b14fe346.mp4
Some of my thoughts on why it would be good to sunset some traditional banking technology in favor of crypto.

2023-04-18 19:15:18

https://media.nostrgram.co/i/ed/media_ed946200de346.jpg
Andrew and David disagree on a lot 😂, interview here:
https://www.youtube.com/watch?v=L2hgLCRLpBw

2023-04-17 22:55:40

Andrew Bustamante (CIA ops guy) and David Chaum (godfather of crypto) are streaming an interview at 1700 UTC tomorrow on youtube, it should be a good watch:
https://www.youtube.com/watch?v=L2hgLCRLpBw

2023-04-17 17:42:22

- reply

I'd encourage not dumping on other privacy projects even if they are competitors, but it's fair to say they started it this time 😅
I tend not to trust activity pages in general, but that pulse insight page is neat. It messes up a bit on our mirror (too many additions and missing authors) but still provides some useful insight on activity:
https://media.nostrgram.co/i/6c/media_6c10b8486d346.jpg
I wish it worked across all repos on an org.

2023-04-16 15:52:39

- reply

It is particularly bad seeing bitcoin folks dumping on wasabi while claiming to be privacy maxis...
I can't tell if its legitimate ignorance/misunderstanding the power and properties of the tech or its something else.

2023-04-10 15:39:07

- reply

Many of the variants existed before the vaccines, so NOPE! 🤣
Thats a fundamental misunderstanding of how the biology works. You could argue that vaccines helped put environmental pressures to help omicron, but first versions likely developed absent a vaccine prevalent in the local environment. Not enough people took the vaccine to make that case, imo...
That said, I'm not aware of anyone who has done that analysis but I would be interested in reading it. #[2]

2023-04-10 15:35:06

- reply

We were able to get these answers because of the unprecedented level of worldwide scientific collaboration aimed at capturing viral sequences from infected individuals to build a public-facing database. Unfortunately, our ability to measure and quantify the viral spread is evaporating due to decreased funding & ability to continuously sequence patient samples. Better records could also answer more questions.

2023-04-10 15:34:54

- reply

Even worse, Omicron reinfection occurs over an even shorter time frame. In some cases, only a few weeks!
https://media.nostrgram.co/i/45/media_451bd37014346.jpg

2023-04-10 15:34:27

- reply

You can ALSO catch omicron more than once. https://media.nostrgram.co/i/99/media_99b3f06014346.jpg

2023-04-10 15:34:03

- reply

Omicron, in particular, reinfects people who had non-omicron variants more often than other variants.https://media.nostrgram.co/i/06/media_06f7594014346.jpg

2023-04-10 15:33:22

Getting COVID doesn’t protect you from getting it again. While a lot of folks believe that catching it does protect you, there is a growing body of evidence that it does not. I recently helped write a peer reviewed analysis in Nature Communications Biology adding to that pile.
https://media.nostrgram.co/i/91/media_91686eff04346.jpg
You can download the full paper for free here: https://doi.org/10.1038/s42003-023-04687-4

2023-04-06 20:04:37

https://media.nostrgram.co/i/8d/media_8df3d8390f246.jpg
For xx network libxxdk .NET library users, we just merged some major changes. It now builds on all major architectures and we made some quality of life improvements.
Our plan is expose the rest of the modules and have a nuget package published sometime in May. Any feedback on improvements we can make are welcomed!
My hope is we will see a Wasabi Wallet build or another tool get posted that allows folks to use xx as an option over the summer.
Here is a link to the MR: https://git.xx.network/elixxir/libxxdk/-/merge_requests/1

2023-03-31 22:01:59

- reply

The bigger problem is that the RESTRICT act, which is supposedly banning tiktok, actually gives the president powers to ban any app (and protocol, like nostr..) they don't like. That's a huge problem. Contact your congresspeople folks!

2023-03-31 21:58:44

- reply

xx messenger only has small private groups. We built a separate tool for chat rooms called Speakeasy, which is currently in alpha. Here's a link to one of the main chat rooms there:
http://alpha.speakeasy.tech/join?0Name=xxGeneralChat&1Description=Talking+about+the+xx+network&2Level=Public&3Created=1674152234202224215&e=%2FqE8BEgQQkXC6n0yxeXGQjvyklaRH6Z%2BWu8qvbFxiuw%3D&k=RMfN%2B9pD%2FJCzPTIzPk%2Bpf0ThKPvI425hye4JqUxi3iA%3D&l=368&m=0&p=1&s=rb%2BrK0HsOYcPpTF6KkpuDWxh7scZbj74kVMHuwhgUR0%3D&v=1 #[2]

2023-03-31 21:56:10

Harvard Kennedy school posted this great explainer on the fundamental problem with banning tiktok.
https://media.nostrgram.co/v/b2/media_b240b56a37246.mp4

2023-03-18 23:42:34

- reply

More importantly its difficult to make a distinction between what happened in Ukraine from e.g., Iraq.
Obviously its the intentionality and awareness of it all, but its hard to define or set precedent with that because its literally not significantly different unless you've got a trailorf prosecuting and actually punishing offenders, and the US doesn't have that.
Related link: https://www.nytimes.com/2023/03/08/us/politics/pentagon-war-crimes-hague.html

2023-03-18 02:15:29

- reply

Its highly useful but I'd recommend most use f-droid. I think its a little safer and their process is a bit better with respect to avoiding broken builds and releases.

2023-03-18 00:19:25

The Journal Vaccines published a vaccine mouse study I helped with that targeted breast cancer:
https://doi.org/10.3390/vaccines11030644
It showed statistically significant slowed tumor growth compared to the control group. We believe this is due to a protective T-cell response.
This is all based on our current best understanding of how the disease interacts with the body. In future experiments, we would like to see a demonstration of the presence of tumor-infiltrating lymphocytes we think are responsible for the effects on tumor growth. We also would want to take advantage of next-generation sequencing, among other measurements.
#breastcancer #cancer #immunotherapy #vaccine

2023-03-17 03:47:56

For any of the parents out there, some guidance on controlling computer and phone use for your kids:
https://www.gse.harvard.edu/news/23/03/harvard-edcast-how-support-your-childs-digital-life

2023-03-16 20:08:37

- reply

Whoops, I meant Signature. The names are too similar!

2023-03-16 20:07:51

https://nymag.com/intelligencer/2023/03/barney-frank-says-more-shuttering-signature-bank.html
Apparently Silvergate was solvent when it was shut down. That raises some questions...
https://media.nostrgram.co/i/5a/media_5a73bcc863146.jpg

2023-03-16 18:16:41

- reply

Out of curiosity, are there any legal briefs or analyses from lawyers in this space about this? If he's right, then why isn't he doing his job and taking the high profile projects to court to set a precedent?
Putting up money to win a lottery seems to fail the efforts of others part, but IANAL 🤷. There's also no risk of fraud or of losing the investment, so I don't see the point from a policy perspective.
I don't even think such a rule breaks most PoS systems, but instead it would force them to use a rent and guarantee model to the nominators (i.e., significantly more stake from the validator and significantly less profit for the nominator, as now stake is collateral to pay them for renting the nomination). That keeps the protocol viable but makes it harder to participate as a little guy for no ones benefit or risk.

2023-03-16 17:48:21

Has anyone written a rebuttal to Nicholas Weaver's latest slanted opus? Link:
https://law.yale.edu/sites/default/files/area/center/isp/documents/weaver_death_of_cryptocurrency_final.pdf
It's started to gain traction with the policy wonks I know. He's obviously not entirely wrong about some things, but the ideological bent on this thing is anti-all things crypto, so it would be useful if anyone has done a more fair analysis.
Please reboost for visibility with your audiences.

2023-03-16 17:37:24

- reply

Great point, and I do think this is a reasonable change (and I gave you sats for it 😂). I was merely suggesting an alt path to consider.
The impl I was thinking of checks size and ignores w/ a warning, and that wouldn't actually "break" here, just drop it semi-silently. FWIW, Implementations doing more strict checking are likely to be more secure and avoiding issues like resource exhaustion but, in these early days, you are right that it doesn't matter right now. ✌️

2023-03-16 16:01:38

- reply

It wouldn't be hard to fix, but it would break some clients. Nothing stops the NOTICE message from following a standardized format which includes a subscription id, so it might make more sense to define that format in another NIP. The disadvantage is a second decode step, but you're already processing an error message, so that doesn't seem all that bad to me. #[2]

2023-03-14 16:05:16

Neat howto for speakeasy sent to me by a community member:
https://media.nostrgram.co/i/2c/media_2c5d0ddc80146.gif
FWIW, you don't need to use the speakeasy website to use speakeasy (most of our users don't, actually!), you can run the npm app locally:
https://git.xx.network/elixxir/speakeasy-web

2023-03-14 01:36:10

Really pleased to release v0.3.0 of speakeasy today, which has the following improvements:
💬 Dms are finally here. Click a username to try it out. You can disable them in your channel settings.
🔒 Control your DMs, what channels you can be DMed from and which Users can DM you
💪 Performance enhancements for large channels.
👀 A few UX tweaks, channel settings are now in the channel header and account settings are now in the top right corner.
You can check it out at https://alpha.speakeasy.tech and the main channel invite link is:
https://alpha.speakeasy.tech/join?0Name=xxGeneralChat&1Description=Talking+about+the+xx+network&2Level=Public&3Created=1674152234202224215&e=%2FqE8BEgQQkXC6n0yxeXGQjvyklaRH6Z%2BWu8qvbFxiuw%3D&k=RMfN%2B9pD%2FJCzPTIzPk%2Bpf0ThKPvI425hye4JqUxi3iA%3D&l=368&m=0&p=1&s=rb%2BrK0HsOYcPpTF6KkpuDWxh7scZbj74kVMHuwhgUR0%3D&v=1

2023-03-10 00:07:28

The xx team just released this tech preview for Proxxy, which adds some privacy when working over Metamask. 🦊
https://media.nostrgram.co/v/d8/media_d8a703866a046.mp4
I work on the backend of this with the mixnet. Happy to answer any questions.

2023-03-09 05:01:32

"Then, we show how this vulnerability can be used to construct second preimages and preimages for the implementation, and we provide a specially constructed file that, when hashed, allows the attacker to execute arbitrary code on the victim's device. " 💥🔥
https://eprint.iacr.org/2023/331

2023-03-02 20:24:56

- reply

This is certainly reality in a world lacking a functioning legal system like ours but, in practice, it's extremely rare that a violent criminal emerges without a history of criminal behavior. Society is both too lax and too strict in all the wrong ways. There's no emphasis on rehabilitation and monitoring earlier, when it counts. The punishments are also purely punitive and paint individuals with scarlet letters that make it difficult for them to ever be productive members of society again.
In other words, the current systems are largely designed to produce worse criminals (unintentionally, unless you're a prison corpo...). While a statement like this is true on it's face, it naturally leads to policy preferences that make the problems worse (i.e., less gun control for all including all the known and worst criminal elements out there). Responsible citizens and policies get sidelined.

2023-03-02 04:33:31

Today I had some fun getting my golang library running in C#, if any .NET aficionados are out there I'd appreciate feedback on how to make it better:
https://git.xx.network/carback1/libxxdk

2023-03-01 16:57:38

https://www.eff.org/files/banner_library/digital-books-og.png
The Electronic Frontier Foundation (EFF) is defending the Internet Archive against a lawsuit that threatens its Controlled Digital Lending (CDL) program: https://www.eff.org/cases/hachette-v-internet-archive
The CDL is a hugely useful resource and EFF is doin great work here. I hope they win and it will be a travesty if they dont!

2023-03-01 15:10:23

- reply

This was a really good and accessible discussion, and I will be bookmarking and recommending this audio to folks who ask me about this topic the next time it comes up.
Do you have any write-ups that summarize the main strategies and issues you discuss here?

2023-03-01 02:45:16

If you care about election security, Matt Bernhard from voting works is talking about it on a live stream right now: https://www.youtube.com/chihacknight/live
I'm not affiliated, but I can tell you these folks more than any others are focused on high impact practical improvements. Definitely worth a watch!

2023-02-28 15:25:38

- reply

💯 and I agree amount and time should be fair game, but I loathe the idea of this becoming another product offering for palantir or chainalysis..
Especially in this context its really disturbing. This isn't a dark web marketplace, its words. The targets here are activists and dissidents. The opinions might be disgusting but any crime is happening elsewhere.

2023-02-28 15:15:13

- reply

I'm also interested to know the details. Presumably it picks a random keypair then encrypts and puts your real info inside the encryption. This is kind of like sealed sender in Signal or DM in xx.
Not announcing on the network is a huge step, but its likely that other tech is needed for full protection. LN payments aren't that private even with private channels and the relays are in privileged positions to break privacy.

2023-02-28 05:22:03

- reply

There could be weaknesses introduced by the mining alg that make it predictable but, naively, it's the probability that the rest of the bits randomly selected are the same.
So, assuming your vanity is 6 bytes, thats 32-6 => 26 bytes or 208 bits of entropy if i'm remembering the pubkey size right, so chances are 1/2^208 => 2.4308653429×10⁻⁶³ to choose the same key that was mined, then doing that over and over until you find it. 208 bits is pretty safe. #[2]

2023-02-28 05:09:12

DIY surveillance camera countermeasure hoodie: https://media.nostrgram.co/v/28/media_2839a84e7df36.mp4

2023-02-28 05:05:50

DIY surveillance camera countermeasure hoodie: https://v16m-default.tiktokcdn-us.com/f585479ca422e42f5107c8878f554e43/63fdd1bd/video/tos/useast5/tos-useast5-ve-0068c002-tx/2da4bedc3a244b428a71df53ebae8b66/

2023-02-28 04:59:38

This video is a great primer on the myths and facts around quantum computing and how worried we should be: https://youtu.be/lAwcunm_LQY?t=1043

2023-02-27 06:07:27

- reply

R and Python are most common in my areas, usually with a notebook tool, but you should also consider Julia.

2023-02-27 02:49:35

Hello, nostr!

2023-02-27 02:41:39

#[0] Verifying My Public Key: "rcarback"