Martti Malmi

#nevent1q…gxy9
I was thinking of doing this in Finland, but then you'd be a money transmitter and probably have to do KYC, which trashes the UX and defeats the purpose.
Setting up BTCPay Server or https://opennode.com for my favorite online stores might be a better way to make them accept bitcoin. Help them with bitcoin storage, exchange and accounting. The EU kindly doesn't yet require KYC from them.
What would be even more rad? Crawl online stores onto Shopstr, let users send orders that are paid in Cashu. Notify merchant of pending orders and let them redeem the nuts. User can reclaim the payment if merchant did not respond.

2025-03-30 11:08:14 GMT

- reply

When ordering online, you’re doxxing your mailing address anyway. Convenience of paying with bitcoin is the point here. Also lightning is pretty good privacy wise.

2025-03-30 10:06:28 GMT

Is anyone working on AI agents that can order stuff from any online store that takes credit cards, and you would pay the agent in Bitcoin? I think there was some company in Poland that does this manually.

2025-03-29 19:46:33 GMT

Briar: "Censorship-resistant peer-to-peer messaging that bypasses centralized servers. Connect via Bluetooth, Wi-Fi or Tor, with privacy built-in." https://briarproject.org/
Would be cool to have bluetooth & wifi sync on native Nostr apps. Would be useful in offline situations and countries where the internet is censored.

2025-03-15 08:59:43 GMT

Eivør & Heilung in Helsinki last week https://video.nostr.build/3f7743986a99bbd7becf1830ef82bca9b3e61458217fcb6d404021a91975967d.mp4 https://video.nostr.build/77a1e2e6a19b7373bc3e4827dff55de2f834e1e7cd20ac04a169fd874e7ddc12.mp4 https://video.nostr.build/3073b53c630a66d84071f2d7a09aeef6db245c65f2d8c5244da8d1d60c747387.mp4 https://image.nostr.build/4f2c15c6c370c93700589c8b49cc9900caed14b1ead6ced6c8cd9d36986010ce.jpg https://video.nostr.build/53a40ae19ab1259ab2b58aafdbf7301b8feab97213df03bf4cee98020cffcac1.mp4 https://video.nostr.build/d7e79b02c3a76c6a32d12cac9042e099937f8c32e227dd58aff78a0e6878bd4d.mp4

2025-03-12 08:50:18 GMT

@npub12rv…85vg thinking about how to best do Cashu zapping in iris.to. Maybe keep Cashu open in the bg in iframe, nostr wallet connect to it, but send events over postMessage channel (in addition to relays?)

2025-03-01 13:07:53 GMT

https://image.nostr.build/d8042bbd2caf45678003214f9c68a572b9e02333ba54d166741cabc75be58103.png
Double ratchet tests passing in my Damus fork. Yet to properly hook it into Damus UI and event system. https://github.com/mmalmi/damus/tree/doubleratchet/damus/Models/DoubleRatchet

2025-02-28 12:00:28 GMT

If I wanted to add Double Ratchet to Damus, should I add it to a C library like https://github.com/VnUgE/noscrypt or Rust https://github.com/paulmillr/nip44 ? Basically it just needs nip44 functions and hkdf. @npub1xts…kk5s @npub1yau…vjmf

2025-02-27 18:54:31 GMT

Double ratchet NIP — Signal style DM encryption on Nostr. Deployed on https://iris.to
#naddr1qv…hejc
Double ratchet invites:
#naddr1qv…daur
Github PR https://github.com/nostr-protocol/nips/pull/1813

2025-02-26 14:26:12 GMT

- reply

True. Iris alleviates it by showing a checkmark based on social graph distance and hiding users that are not in your social graph at all.
However, that doesn't prevent someone in your social graph from changing their name and avatar to impersonate someone else.
Nip05 doesn't prevent that either, unless you notice the discrepancy between their nip05 and other details.
One solution would be that users publicly record the name and other details of other users at the time of follow. The details recorded by yourself and people you trust would be shown, even if the user changed it to something else.

2025-02-26 09:03:39 GMT

- reply

MLS also rotates keys after every message?

2025-02-26 07:02:07 GMT

- reply

Iris shows a purple checkmark for users you follow, orange for users followed by at least 10 users you follow, and gray checkmark for 1-9 followers you follow. Peter's nip05 doesn't work in browsers because CORS is not configured.

2025-02-24 12:47:13 GMT

- reply

Double ratchet rotates message keys after each message, so previous consecutive messages from the same author become undecryptable, when the previous message key is discarded after decryption. It's a small difference, but it's good for disappearing messages.

2025-02-24 09:27:50 GMT

Double ratchet messaging is deployed on iris.to. Try sending me a message at https://iris.to/sirius ! Thanks to Human Rights Foundation for supporting the project!
https://image.nostr.build/916a9511040129752750c3e33a334aa1a773a6985dc5c4d0890ff1779ade2a1a.png
https://image.nostr.build/2f7304813b3b002dd9d04e04db4b70969854192515d649399dae53bfe6bc768c.png
https://image.nostr.build/de549a76939bb38ffd06f6a4d788e54bd573d7804d181c018d0182e0adac6077.png
"Add to home screen" on iOS to enable push notifications.
The point of double ratchet is 1) hiding message metadata (who you're messaging and when) and 2) keeping your past and future message history safe in case your main Nostr key is revealed.
I'll write a nip for it. Basically it's Signal's "double ratchet with header encryption", but using Nostr keys instead of symmetric header key rotation. The algorithm is not too complicated. https://signal.org/docs/specifications/doubleratchet/
Typescript library, only uses cryptography from nostr-tools. https://github.com/mmalmi/nostr-double-ratchet
"Public invite" on your "new chat" page is published on Nostr. It's used when you first send message at someone's iris.to profile. Initial message to public invite is from anonymous sender, but publicly visible. From thereon, keys are rotated and stay hidden. "Private invite" is not published, so it's more private when shared over QR code or other channel.
Sometimes the chat sessions stop working at iris.to, probably it's incorrectly saving an old version of the ratchet session state. Working on it.

2025-02-24 06:59:19 GMT

- reply

App specific keys and some way to link and unlink them with each other.

2025-02-24 06:39:55 GMT

- reply

Surprisingly, I don't recall a single instance where anyone's Nostr account was hacked. Entering your private key into an insecure app would be the most obvious way how that could happen.
Compromise of a popular app would be bad. Maybe we'll need app and device specific keys signed by other keys of yours at some point.
However, Nostr doesn't have the traditional attack vectors associated with passwords, email, SMS and third party account recovery, which is already very good.
#nevent1q…yjt3

2025-02-18 15:30:54 GMT

- reply

It seems fast and does a good job preserving feed scroll positions. 3-column layout has its advantages on a large screen. However, I suggest other devs join Iris instead of developing their own client 😄

2025-02-14 08:36:33 GMT

- reply

Nice! What kind of paint did you use for exterior walls?

2025-02-11 11:47:30 GMT

Nostr-double-ratchet tests finally passing. Both ratchets should be working now, but don't take my word for it 😄
Signal-style 1-on-1 chat encryption in ~200 lines of typescript. Now just need to make it work again on iris.to and then other clients. https://github.com/mmalmi/nostr-double-ratchet

2025-02-01 10:45:20 GMT

Sauna, swimming and hacking near Helsinki. Maybe we should do a Nostr retreat here after BTC HEL in August? https://image.nostr.build/baef27da5ff9fded8a3becdd0da0e0c0cef0aa00a79212583142829954c22144.jpg

2025-01-24 11:31:19 GMT

- reply

Iris only shows content from users who are in your social graph (web of follows) and also shares mute lists automatically. There's also checkmarks based on social graph distance and follower count.

2025-01-22 07:59:16 GMT

https://image.nostr.build/c2e3c6b2a23b476d01a5725c9ade8f0d0a033a089a82581d91f83c51f713ea4b.jpg

2025-01-03 14:02:11 GMT

- reply

This would be useful at conferences where the internet can't handle 200 simultaneous GM posts to Fiatjaf.

2024-12-31 21:03:32 GMT

- reply

You can always use a desktop or mobile client if browser clients don't work for you.

2024-11-19 09:01:01 GMT

- reply

Unfortunately browsers won't let you connect to insecure ws / http from a secure https origin. We could do a Tauri desktop version of Iris to bypass that restriction.

2024-11-19 06:54:04 GMT

- reply

Yes, nearly every house and many large apartments have a sauna. Then there's hundreds of thousands of summer cottages.

2024-11-18 07:33:04 GMT

Always wanted to visit Finland, the land of 5 million people and 3 million saunas? Now’s the perfect chance.
BTC HEL, the largest Bitcoin conference in the Nordics, will take place in Helsinki for the first time on August 15–16, 2025.
Join us in orange-pilling Finland before the anti-crypto narrative has a chance to catch on, like it has in other Nordic countries.
We have a positive and true story to tell: Bitcoin can make even renewables more profitable and balance the power grid. In the North we can use up all the excess heat. All the while, sound money fixes short-sighted fiat culture.
Please DM @npub1w2e…pmgp or email [email protected] if you’re interested in speaking! Flights and hotel are covered for speakers.
Tag the people you’d like to see there!
Sign up for the mailing list to know when the ticket sales begin: https://btchel.com
https://image.nostr.build/fd016e6c41a5010cdeeae1eeee5066a35d38db7b240ba04c946a9d5520df8bba.jpg
https://image.nostr.build/1192f7cc27b490ede3286160769996f12d1dd8687830a461cf9eea01f52a7dd4.jpg

2024-10-30 06:43:15 GMT

Sorry, I had introduced a bug to tags, should be fixed now.

2024-10-28 20:05:41 GMT

- reply

https://youtu.be/KgkBWZXVLyk

2024-10-28 11:49:56 GMT

- reply

Toxicity 🔥
https://video.nostr.build/1d605c049c58762159fe48e99b96d75fc67ea4cf11c6128067d37c6db763592c.mp4

2024-10-28 09:09:59 GMT

Lugano was so much more crazy and fun than I expected 😄
I played my first gig since high school. Can't wait for the next Rockamoto!
@npub1jt9…la9y @npub1fk8…cwld @npub1exc…n72a @npub1lr2…dl6a @npub1au2…t53j @npub1ydx…rlcw @npub1z77…09sr
https://video.nostr.build/bfcda3d2f4c4d0e6cea5cf2f998307d7ada0bc42858b48864c4a9bd28359c1b7.mp4
https://video.nostr.build/ef74d46ad5dbed1eba0530b070b8175ecd2e44d00e0bb6ab1bdbe27997c89342.mp4
https://image.nostr.build/1ca9cd775380252595caa7f789f098cc309cb541a5102d60927567ee6867d432.jpg

2024-10-14 08:00:01 GMT

- reply

We should have had @npub1l2v…ajft on stage to boost our energy 😄

2024-10-14 07:53:57 GMT

- reply

Yeah, we are often our own worst critics when others don't care so much. It's healthy to learn from mistakes, but also to get over them. I've had difficulty with the latter and found that talking about things helps in the process, even if it can be uncomfortable.

2024-10-14 07:42:44 GMT

- reply

I mentioned it later on the panel: building applications that move money and taking a cut of them, even if it's a voluntary donation that's enabled by default.

2024-10-13 19:46:05 GMT

- reply

For those who don't do push notifications, it could send email, sms or fax

2024-10-13 19:21:23 GMT

Random dev thoughts: Would it be a good idea to do an open source web push notification server for Nostr?
It could have fine-grained options for what notifications you want, from whom and how often.
It could be used automatically in the background by a client, or through its own web UI. Clicking the notifications would redirect you to the client of your choice.
It would be a lot like a relay in that it needs to match incoming events to a potentially large amount of subscriptions. Subscriptions would be persisted in a database and maybe managed over a REST API.
In addition to the stuff typically sent over Nostr, you need to send the subscription object and other things like notification frequency, maximum social graph distance or score, minimum zap amount to notify etc.
It would connect to other relays and maybe also have a websocket endpoint for receiving events over Nostr protocol.
Extending strfry into this direction crossed my mind, but maybe something like Django (or whatever web framework you're familiar with) would be better, as we need to persist the subscriptions.

2024-10-12 07:24:39 GMT

- reply

It's a step in the right direction, but it still reveals the recipient and doesn't do key rotation, so all your message history and future messages are revealed if your main Nostr key is ever compromised. It's a tradeoff between security and availability. I'd personally choose Signal-style key rotation.

2024-10-11 16:09:48 GMT

- reply

What would this attack look like in practice, against Signal for example?

2024-10-11 08:10:54 GMT

- reply

No, we use temporary keys that are rotated and only live on device. Main key is only used for authentication on the first key exchange.

2024-10-11 03:37:48 GMT

- reply

We can use temporary npubs that are not linked to long-term identities and rotate them all the time. Iris.to messages already do that. The code is here: https://github.com/mmalmi/nostr-double-ratchet

2024-10-11 03:25:39 GMT

- reply

That's easy to do on Nostr with secure messaging protocols like double ratchet and probably MLS. Just add "create anonymous chat" in the UI.
It's just that relays can probably figure out who you are if you also make other Nostr requests. Maybe need a different client and relays if you want to avoid that.

2024-10-11 03:18:20 GMT

Secure DMs and groups might be how Nostr wins. Like Signal, but better: no phone number or centralized service provider needed. Actually there are no publicly visible user IDs involved, so in that regard it's similar to simplex.chat.
Unlike public messaging, DMs do not depend on the network effect. Great for onboarding people and keeping them returning with push notifications. They get a bitcoin wallet, zaps and all the other Nostr greatness on the side.
Many people don't want to let go of their existing follower base on X, but "Nostr DMs only" is easier to do. I could imagine that becoming a thing in the Bitcoin scene at first.

2024-10-10 12:09:05 GMT

- reply

Can MLS be done using only nostr-tools primitives like DH and hkdf?

2024-10-10 11:59:12 GMT

- reply

I’ll definitely look into MLS

2024-10-10 11:58:11 GMT

- reply

I’m very uncomfortable using DMs that don’t have forward secrecy. That builds up a growing trove of private message history that will all be revealed if your key is ever compromised, increasing the potential harm with every message.

2024-10-10 10:14:07 GMT

- reply

This is right next to the conference venue, which is a beautiful old brick building

2024-10-10 10:12:29 GMT

Got a bit awestruck again by the combination of natural beauty and a city built for humans by all the generations before us. We need a renaissance of beautifully built environments.
https://video.nostr.build/c83e3e13ed65932f234e1107e305724d1309ca15bc20087135bdbee1ffdae5de.mp4

2024-10-09 15:54:11 GMT

- reply

Double ratchet is simple to implement and works well for 1-on-1 chats. MLS is better for groups. In case the MLS is also good for 1-on-1, happy to change.

2024-10-09 15:41:34 GMT

I'm at Bitcoin Amsterdam, but spent half the day finishing some Signal-style double ratchet messaging.
Deployed an experimental version on https://iris.to. You can create chat invite links and give them to friends via QR or other messaging. The UI is still lacking and glitchy, but just had to demo at the conference.
The chats cannot be publicly linked to either participant, and even if your main Nostr key is revealed, the content and existence of past messages stays hidden.
https://image.nostr.build/b4533acd973793f7114fd5c272ccd5b5045ea0bd127c214e8314fc4c8282a354.png
https://image.nostr.build/ded8c0437548cb1359d34b43b966b64f798cd2f98ae5f859771f47cc551cd5bd.png
https://image.nostr.build/4458f2de8f4d424aff137d2d7ed283dd27501e1abc0a43234405008614a5cb70.png
Also published npm package nostr-double-ratchet 0.0.1: https://www.npmjs.com/package/nostr-double-ratchet
It's not actually double ratchet yet, but the single ratchet already achieves forward and backward secrecy.
The second ratchet would help secure the latest consecutive messages by same author, in case a message key for the most recent of their messages is compromised. That makes disappearing messages or manually deleted messages more secure. I guess we'll have to do it so we can say "Signal-level security".
This is obviously not tested or audited yet, but probably it's not worse than normal Nostr DMs 😅
You can take a look at the source code, but I'll write a better technical description later. It's using existing Nostr cryptography + some key derivation stuff. Chat invites use gift wrap -like arrangement addressed to the inviter's temporary session key. https://github.com/mmalmi/nostr-double-ratchet

2024-10-07 05:06:51 GMT

- reply

Seems there's no whitespace before the url, so other clients interpret the leading part as part of the url.
Maybe Iris shouldn't highlight urls that don't have leading whitespace or linebreak, so users notice in the editor that something's wrong. (I actually used to have that check in my regex, but that broke other things in the library I used.)

2024-10-06 18:49:54 GMT

- reply

I believe we'll always have JSON for simplicity and backward compatibility. Simplicity is indeed important, it's why Nostr attracted developers. I don't think opt-in binary format supported by some clients and relays can break that. We already have many nips not supported by everyone.

2024-10-05 19:18:25 GMT

- reply

Fields like event id, sig, pubkey, p & e tags would be 50% smaller in binary vs utf-8 hex. Follow lists are currently quite large and their size would be basically cut in half.
But if we implemented NIP-114, we could save even 90% or more in bandwidth and some processing as well, depending on how many relays you connect to. Hoping to find some time for it again. https://github.com/nostr-protocol/nips/pull/1027

2024-10-03 09:33:51 GMT

- reply

Unfortunately, yes. The wallet is hosted on the same domain (iris.to), but it's a separate application running in an iframe. I haven't integrated it on the actual Iris side yet.

2024-10-02 07:47:16 GMT

@npub1h0u…rwx8 do you have a spec for the double ratchet protocol you're building?

2024-10-02 04:58:15 GMT

- reply

#nevent1q…kema

2024-10-02 04:57:19 GMT

Fixed it for you
https://image.nostr.build/17202defe2d4295a3fd83b7bb4bbc3b982a724e14f940d35e05c8174e1c9ec33.png
Upload is fast, but nostr.build takes some time to check the image and return the url
https://image.nostr.build/1cc298a7cce6d0519962f410fc1be085d1c9e3d24a743009e920865c1edbd82f.png
#nevent1q…6wzz

2024-09-30 17:50:05 GMT

- reply

They're separate codebases again. Iris uses NDK and Snort uses the Snort system (also available as a library).

2024-09-30 16:31:55 GMT

Added to https://iris.to and https://graph.iris.to the option to download a large pre-crawled social graph with 161K users and 5.25M follow relationships.
https://image.nostr.build/c937f408d0543e06c86ae4df700d3ead8e61122c53fe7d1c54e3bb7382c487a4.png

2024-09-28 09:09:13 GMT

- reply

There's nothing preventing users from moving to another DM client. You can always go back to the old client or export or copy paste message histories if you need them.
It's not comparable to Twitter or Facebook, because you own your identity key and can always change the client or relays.
There's always a tradeoff between availability and security of messages, and maybe there are different use cases for both kinds of messaging. On Nostr, we are free to choose.

2024-09-28 06:59:05 GMT

- reply

Deriving a single-use public key for signing each Nostr event would have the advantage of messages not being linked to any other message or user, though.

2024-09-28 06:56:12 GMT

- reply

What attack does the symmetric ratchet protect from? If your device is compromised, your message history will be revealed anyway.
Maybe it would help in the case when you locally delete earlier messages in a chain ("disappearing messages" or otherwise) but they're still on relays.
Maybe I answered my own question, but is there something else besides this?
Why not more difficult? Implementing DH + symmetric ratchet is more complexity than just DH.

2024-09-28 03:33:32 GMT

- reply

Social graph is not just the people you follow (1st degree), but also people they follow (2nd degree) and so on.
Currently Iris loads up to 2nd degree by default. There's also a tool for crawling up to 3rd degree, but it consumes a lot of bandwidth and cpu. 2nd degree was 20K users and 3rd degree 160K users in my graph, so there's plenty of diverse voices.
Optionally we could show posts from unknown users who have a nip05 (e.g. [email protected]) from a bot-resistant provider. In a permissionless system like Nostr, we will always need to limit write access somehow or it will be filled with spam.
https://image.nostr.build/1407ad9d130088eceff4a8f1d73dc4f546237b47db170c8f48313d38839695eb.png

2024-09-27 13:35:24 GMT

Added a tool for crawling the follow lists of your friends-of-friends. My graph of 160K users and 5M follow relationships is 36 MB on disk.
https://image.nostr.build/1407ad9d130088eceff4a8f1d73dc4f546237b47db170c8f48313d38839695eb.png

2024-09-27 09:28:15 GMT

- reply

I made the borders rgba(255,255,255,0.2) in Iris theme

2024-09-27 07:49:24 GMT

Rolled out new https://iris.to version:
* Zero-configuration zaps for new users: comes with a [npub]@npub.cash lightning address and an integrated Cashu wallet (cashu.me)
* ReplyGuy-free experience: automatically hides content by users not in your social graph
* "Unseen" feed. Click "home" or switch tabs to refresh.
* "Adventure" feed. Shows content from everyone in your social graph.
* Social graph based fast user search
* Better scroll position retention on back navigation
"Add to home screen" for better mobile use experience & push notifications.
This new version is based on NDK. I think it's a good idea for web devs to work together on shared core libraries.
Not perfect, but I'll keep working on it! If you preferred the previous Iris version, you should use https://snort.social which is basically it.
https://image.nostr.build/2f997643856deed77cbb27eb68549fe5def27b3464f1d88d716c80badac0d354.png

2024-09-27 07:46:43 GMT

- reply

Apparently cashu.me is not nip-60 yet — is there some other wallet I should use on iris.to instead?
Is nip-60 on public relays a privacy tradeoff? I imagine it reveals when there's been activity in your wallet.

2024-09-26 07:50:03 GMT

- reply

On the relay side, maybe allow nip-42 authenticated users to push gift wraps (where event.pubkey is not the authenticated user).
On the client side you need to process all incoming gift wraps and only check WoT after unwrapping. That adds some spam processing overhead unless you only connect to WoT relays.

2024-09-26 07:39:47 GMT

- reply

How do you make gift wraps work with WoT?

2024-09-24 04:31:14 GMT

- reply

I was thinking about bitcoin mining style PoW which some have suggested, but actually I'm concerned it might hinder normal users more than spammers. There was a PoW-based anonymous reddit once, but it was filled with spam. https://github.com/notabugio/notabug

2024-09-23 17:46:25 GMT

- reply

It's best if they can be introduced by someone, or get noticed by zapping.
Secondarily, messages from users who have a nip05 from a bot-resistant provider like iris.to, or provided a sufficient proof-of-work, could be scored higher, at least within the "messages from unknown users" pool.

2024-09-23 15:39:08 GMT

- reply

It only shows content from authors who are in your social network. Nostr-social-graph library https://github.com/mmalmi/nostr-social-graph

2024-09-21 02:46:12 GMT

- reply

Test

2024-09-18 14:04:36 GMT

Should I use nuts.cash @npub1wun…qhq8 instead of cashu.me as the integrated wallet in beta.iris.to?

2024-09-18 13:33:39 GMT

- reply

Just made it fetch missing follow lists from your follows when you change current user

2024-09-18 13:16:23 GMT

- reply

for clarity 🐒
purple: you and your follows
orange: followed by at least 10 users you follow
gray: followed by at least 1 user you follow

2024-09-16 08:32:57 GMT

- reply

Yes 👍

2024-09-14 15:26:25 GMT

Added cashu.me wallet to https://beta.iris.to . When you sign in as a new user, you're all set to send and receive zaps without configuring anything. It sets [npub]@npub.cash as your lightning address.
Haven't implemented zap button send via cashu yet, but you can copy the zap invoice and pay it in the wallet.
https://image.nostr.build/46587e9d2fc0725ca2e1c00f2850fc8b3f2c248de797e3115a9be2803183f664.jpg

2024-09-14 07:34:02 GMT

https://image.nostr.build/e3fafe2a671f40cfe39fb316ba0363fc0241d42f1bed99ec5df3bca7eadf93d3.png
Nostr.band API down @npub1xdt…ntxy
When API is down and user not logged in, maybe I should show "Follows" or "Adventure" feed curated by my own social graph or something as a placeholder.
Best would be NDK SQLite adapter which could calculate the trending stuff locally.

2024-09-13 14:20:25 GMT

Is there some way to receive normal zaps to a cashu wallet?

2024-09-10 13:59:37 GMT

When ZapGuy fake zap spam? I don't think many clients filter zappers.

2024-09-10 07:56:31 GMT

Check out https://new.iris.to for a ReplyGuy-free Nostr experience. When logged in, it hides replies from people who are not in your social graph. You can display the hidden messages by clicking on the button underneath.
https://image.nostr.build/62e5c3558a5e73ccf98611f16cc3b726b9d431e213f33d3cc32e81e066bbd524.png https://image.nostr.build/20e354fe8bdf1a17d3b157d9e8267b8d4888e2af511fb5b93ee0e9e127748b5d.png
https://image.nostr.build/49f1ee71224925bc0804ff525271e94b21e657c21f1cb7635bc18153447c50c3.png
There's also "Adventure" feed for showing all notes from your social graph:
https://image.nostr.build/0d754b8223e03ab64dde6e9368b69bc51e6d18835dc31d94f8f4d1cd19eda17a.png
I have worked on it together with the Nestr "decentralized GitHub" team. Nestr frontend and Iris are built from the same codebase using build configuration options for different branding and features. You can easily extend the configuration to make your own branded version. Source code to be released soon™.
The client is based on NDK. Full SocialGraph up to 2nd degree is downloaded on first login, and thereon only missing follow lists are queried. I'll be experimenting with options to go beyond 2nd degree.
The graph is serialized and saved locally in a compressed format, which is much faster to load than it is to reconstruct the graph from Nostr events. My graph consisting of 260 follow lists and 23000 users is 3 MB on disk.
It's still very much work-in-progress and mostly tested on desktop Brave, but it's already my favorite way to browse Nostr.

2024-09-06 16:43:37 GMT

- reply

We discussed this today:
#note1cw6…9w85
tl;dr: I would use zaps or invite codes to onboard unconnected newbies. Storage and bandwidth are limited, so it is not possible to allow unlimited write access to everyone. As Nostr becomes more popular, any spam opportunities will be exploited. Regexes, IP rate limits, PoW are just band-aids that can be circumvented.

2024-09-06 07:37:30 GMT

- reply

Push towards inevitable spam-prevention such as web-of-trust score

2024-08-03 07:43:59 GMT

I wrote this in junior high school. The teacher didn't appreciate it, and I had to write a new one. https://image.nostr.build/d1afb3b760a8c8ef417c2b506f42e8fd6cbc998c30bda6fe7cf775a27e5c1eab.jpg

2024-06-19 11:57:34 GMT

- reply

I am your burger man
https://www.youtube.com/watch?v=XJP8wVoTufg

2024-06-11 11:30:28 GMT

- reply

Iris / Snort show a purple checkmark badge for users you follow, orange for users who are followed by at least 10 users you follow, and gray for users followed by at least 1 user you follow. One more improvement would be saving the followed user's name at the time of follow, and showing it (with an asterisk like Discord petnames) even if the user changes their name. That would further help prevent impersonation.

2024-06-06 20:07:07 GMT

Follow distance indicator (checkmark) helps, but maybe we should save the followed user's name at the time of follow into our own follow list.
https://image.nostr.build/209d251817ddd1f63b971ed550f2822b5f9f0f06266e227bcd3efb0a0818fa7b.png

2024-05-22 11:01:19 GMT

Celebrated Bitcoin Pizza Day at the cryptoanarchist haven Paralelní Polis, Prague. Privacy and scaling were the hot topics of discussion. Prague, a former capital of the Holy Roman Empire, is the most beautiful city I have seen. Vast areas of centuries-old architecture just go on and on. ‘Awesome’ is the proper term here. It makes you feel connected to the generations before us and part of something bigger than yourself, something that is worth preserving. I will be back soon for BTC Prague. https://image.nostr.build/15914b35d0812d1f7ea4d0484772354e448b87e2220361e45f754c3c7f61c8ba.jpg https://image.nostr.build/73ebf3f0288d5cd56eb4bb6deca6e43b92f86a48cce375862e41e306ab44176c.jpg https://image.nostr.build/04b143e3a624a5f51f473172e5d178235efa1f36ee994b62b85a4fb07e025f4b.jpg https://image.nostr.build/9a2edf2c0df736126712f157bef85f99ca1b2c64087ada56cd4bed40393dd150.jpg https://image.nostr.build/96892f6d0ee57ea34f765cdbe551cc9ec50e4de05b1e99b547eaae183271ac35.jpg

2024-05-10 20:33:31 GMT

- reply

#note18hz…ttfc

2024-05-10 20:29:23 GMT

IrisDB uses tag-replaceable events of kind 30078.
"d" tag is the "file path", for example "groups/follows/somePublicKey" or "user/profile/name". You can update the content of the "file" with a new event that has the same tag.
"f" tag is the "directory path". "groups/follows" in this case. You can list all the "files" in the directory by querying relays with the "#f" tag filter. Strfry doesn't index this field, but some relays do.
Content field is the file content, can be any JSON serialized data.
If we did profile fields and follow lists this way, there would be no overwrite problem when you sign in to a new device that doesn't have your previous profile or follow list. If we did likes that way, unliking would be trivial.
When we create new Nostr apps or features, we don't need to come up with new obscure event kinds. D tag "apps/events/some-event-name/participants/some-public-key" is more descriptive than some random number that might still conflict with someone else's application.
I wanted to name it "treelike" instead of IrisDB in order to not sound overly complicated, but the npm package name was already taken.
https://github.com/irislib/irisdb
https://github.com/irislib/iris-docs - react app starter template: npm create iris@latest

2024-04-24 07:45:05 GMT

We have new stuff. Not much tested yet, so feedback is welcome:
1) Iris Docs — https://docs.iris.to
Proof-of-concept collaborative text editor and simple canvas on Nostr. Recently also added a chat, so might rename to Iris Apps?
https://void.cat/d/Po8kXtpo116x3enNczizPP.webp
2) IrisDB — https://github.com/irislib/irisdb
Extensively used by Iris Docs. Tree-like data structure on Nostr.
Build wikis, marketplace apps, games and other decentralized applications where users can choose whose edits they want to see (e.g. followed users, extended social network or specific group).
Enables science fiction stuff like deleting & unliking posts, or editing a user profile or list of users without risking overwriting the whole thing with an out-of-sync version.
Use a filesystem-like interface to create all kinds of applications on Nostr without having to define obscure event kinds for each purpose.
Has simple & powerful useLocalState and usePublicState hooks for React applications.
3) npm create iris@latest — https://github.com/irislib/iris-docs
A template that quickly gets you started with Nostr & IrisDB web application development. with dev tools and basic components like login, settings or avatar. Built on Iris Docs — remove the parts you don't need. Decentralize everything!
https://void.cat/d/DeLzMtoFj2TgHXQVvvGsPV.webp

2024-03-26 07:45:58 GMT

- reply

👀

2024-02-26 18:35:43 GMT

Do you have experience quitting caffeine? How long did it take to get back to baseline?
I've been without caffeine for 2 weeks. Mood and motivation are not back yet.
Wanted to sleep better and have a regular heartbeat. Feeling more calm now, but I'm not sure if this is worth it 😄 I've developed a deep association between coffee and coding over the years.
https://void.cat/d/TDumpmUZzbnkA257FHi165.webp

2024-02-23 04:40:31 GMT

My email correspondence with Satoshi in 2009-2011: https://mmalmi.github.io/satoshi/

2024-01-15 21:04:20 GMT

- reply

Actually simpler and more efficient than the "not" filter could be if relays just advertised event ids that match the subscription and only sent the full event on demand.

2024-01-15 20:50:23 GMT

- reply

Iris / Snort is actually using the outbox model (by @npub1v0l…qj49 ) so yes, incoming duplicates in queries by author would probably not see a 90% reduction, but maybe some other queries like reactions and replies would.
However, the bigger savings arise from having a local db and not having to download events you already have. Efficient sync protocols like negentropy let your local relay sync with as many relays or peers as you want at a low cost, which is good for decentralization.
While the outbox model helps break out of centralized relays, it's even better if the content can be found and synced from many places, including our pockets. If Alex Jones had public write relays, they'd be targets for DDoS and harassment.

2023-12-26 11:50:18 GMT

https://void.cat/d/KAoVvyKnrJzbDRPAS3Ygzw.webp

2023-12-23 20:14:19 GMT

Anyone had issues with NDKCacheAdapterDexie? Tried using it for loading of profiles in Iris but cpu and memory usage went through the roof. NDK worked fine without it. @npub1l2v…ajft https://git.v0l.io/mmalmi/snort/src/branch/ndk

2023-12-15 08:45:21 GMT

When Nostr gets reasonable DM privacy and groups, even normies can use it as one of their many messaging apps, no problem. Push notifications keep them returning. Great way to onboard people onto Nostr and Bitcoin.