cmd

I build cool stuff on bitcoin and nostr.

Public Key

npub1gg5uy8cpqx4u8wj9yvlpwm5ht757vudmrzn8y27lwunt5f2ytlusklulq3

NIP-05 Address

Profile Code

nprofile1qqsyy2wzruqsr27rhfzjx0shd6t4l20xwxa33fnj900hwf46y4z9l7gpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds6rglsm

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1gg5uy8cpqx4u8wj9yvlpwm5ht757vudmrzn8y27lwunt5f2ytlusklulq3

Show more details

Last Notes

2025-03-11 01:06:52 GMT

Just upgraded bifrost to perform single-round batch signing of messages, similar to how bitescrow worked with building covenants.
Batching signatures allows for very fast and robust signing of PSBTs and multi-transaction packages, which will hopefully unlock many kinds of bitcoin protocols over frost and nostr.
The frost2x wallet is almost complete:
```
window.bitcoin = {
getAccount() // done,
getBalance() // done,
getUtxos(amount) // done,
signPsbt(psbt, manifest) // in progress
}
```
Very exciting times ahead!
https://m.primal.net/PbXX.png

2025-03-09 20:07:33 GMT

- reply

this looks clean
I'm building a very different wallet though

2025-03-09 15:20:54 GMT

gm nostr
today is a great day to build a wallet

2025-03-07 23:00:01 GMT

- reply

- Do I need to pick a coordinator among the 3 signers?
No, the node requesting the signature is the coordinator.
- What do I need to transfer from the offline nsec holder application to each of the app?
there are two encoded strings that you copy/paste: the group string and the share string. You do not need to transfer the nsec.
You can run igloo offline and air-gapped as a key manager, and another copy of igloo as a desktop signing node.
We have plans for a mobile app that will run as a remote signer using NIP-46. TBD.

2025-03-07 15:56:33 GMT

- reply

yes, that is possible. you could create multiple sets of shares for your nsec, and run them concurrently. generating a new set doesn't invalidate the old set (you have to dispose of shares properly).
the bifrost node will only cooperate with peers who have a pubkey in the same group as them
in the future, igloo will be able to run multiple shares/nodes, which means you can participate in multiple signing groups, even for the same nsec
I don't have a clear use-case for doing this, other than more graceful rotation between sets (phase out the old set after the new set is in place).

2025-03-06 18:27:09 GMT

- reply

to be clear, there is no protocol interaction between the nodes to rotate keys or update the polynomial. you simply use your nsec to generate a new set of shares, then swap out the shares manually
this keeps share rotation simple, and reduces the attack surface available to a compromised share
I do have an example of performing an interactive rotation in the main frost library, that is designed for a group of adversaries:
https://github.com/cmdruid/frost/blob/master/test/example/refresh.ts

2025-03-06 17:40:15 GMT

- reply

also, the full polynomial only exists in memory for the short time you are creating the shares. it is up to you to save those shares elsewhere, either encrypted to disk, or copy/paste.

2025-03-06 17:35:46 GMT

- reply

Yes, you can run igloo offline and just use it as an airgapped key manager

2025-03-04 00:51:42 GMT

- reply

that is a job for @nprofile…dqfs
I'm just here to contribute my share of broken and unreadable code

2025-03-03 20:33:51 GMT

- reply

it's okay, they will learn how to win. we will teach them!

2025-03-03 02:43:10 GMT

- reply

look, we are just splitting your nsec into a set of shares. you can delete them and re-roll a new set as many times as you like
if you want to add revocation and key servers, and DIDs and whatnot on top of that, be my guest. but it's not necessary. delete and re-roll is enough for 95% of users.

2025-03-02 23:59:14 GMT

- reply

You don't want to send requests to off-line or intermittent peers, so the "send" list let's you to select which peers you expect to handle your requests.
The "receive" list is less important to manage, but you may want to be restrict your node's participation with high-risk nodes, in case they get compromised.

2025-03-02 23:41:21 GMT

- reply

yes you can have a keyshare held by a custodian, and have that custodian participate in signing
it's the same model as 2/3 with bitkey, casa or unchained, or any other multi-sig-as-a-service solution
we are developing a server-less API gateway that people can run themselves, or a professional custodian can run on behalf of their customers
that being said, you are better off running your own server, and handing out revocable tokens. remember that 2/3 with custodians is a compromise to help on-board normies away from single-sig setups, and should not be a desirable long-term solution
nostr literally fixes the need for inviting custodians into your quorum. just run a gateway node on a laptop under the bed, don't give up *any* of your keys to a custodian. this goes for all multi-sig setups period.
I'm running permafrost + frost2x, and soon(tm) heimdall for permissioned API access to my key

2025-03-02 23:17:21 GMT

- reply

frostr works at a lower level than revocation. whatever revocation scheme you come up with will work on-top of frostr, they do not compete.

2025-02-26 20:37:54 GMT

- reply

https://m.primal.net/PMYx.gif

2025-02-26 18:09:32 GMT

It is pretty disgusting how much I violate bitcoin core on a daily basis using this. Complete and total disrespect. Just ramming through all sorts of dog-food transactions.
https://github.com/cmdruid/core-cmd

2025-02-26 17:56:46 GMT

- reply

way ahead of you buddy
frostr.org

2025-02-26 17:56:06 GMT

- reply

Yep, every device has it's own key share. And they are intrinsically linked through the FROST cryptography in a provable way.
Your nsec can stay offline forever, used only to create a new set of shares.

2025-02-25 06:04:40 GMT

- reply

frost2x works in chrome environments, still need to make a firefox/gecko compatible version, but the code should be 95% the same.

2025-02-25 06:03:16 GMT

- reply

we have clients planned for desktop, browser, mobile, server and server-less environments
all signing nodes communicate over nostr so they can live on any device with an internet connection

2025-02-25 05:59:23 GMT

- reply

your nsec can be retired to cold storage and only used offline to rotate your signing shares

2025-02-23 23:44:19 GMT

- reply

how intertwined is the script interpreter with everything else?
is it possible to build a new one seperate from the old? And segregate them (huehue) by witness version?

2025-02-23 22:21:04 GMT

- reply

I have noticed that the more healthy and in shape that I am, the more sick that I feel after a night of drinking.
Alcohol really isn't worth it, especially when you get older. Maybe like a glass of wine with a steak for flavor, or a new year's toast of champagne.

2025-02-23 21:24:12 GMT

- reply

we have a web extension and desktop app, with plans for a mobile app and self-hosted server apps as well

2025-02-23 21:22:22 GMT

- reply

https://m.primal.net/PIhG.gif

2025-02-23 21:18:07 GMT

- reply

the frost2x extension repo (forked from nos2x) includes everything you need to setup a demo and dev environment
it includes the extension, a second test node, and an ephemeral test relay as well
just updated the README to be actually useful for setting up a demo, let me know what you think:
https://github.com/FROSTR-ORG/frost2x

2025-02-23 21:15:48 GMT

- reply

check out the readme here, just updated:
https://github.com/FROSTR-ORG/frost2x

2025-02-23 21:15:33 GMT

- reply

check out the readme here, just updated:
https://github.com/FROSTR-ORG/frost2x

2025-02-23 21:14:46 GMT

- reply

on it, a more official demo vid and launch is coming soon

2025-02-23 14:27:32 GMT

- reply

already running a multi-sig for my nsec
https://www.frostr.org
beta testers wanted

2025-02-23 00:32:24 GMT

Big juicy update to Bifrost. More config options, more events to subscribe, and more features. Check out the README.
Also including middleware, which should let you hook into the signing process and add your own validation layer.
This will become more powerful once the signing session interface is upgraded to include other types of payloads, such as PSBTs. 😎
https://github.com/FROSTR-ORG/bifrost

2025-02-21 19:13:03 GMT

- reply

btw, is there a nitter kind of service for youtube links? to rip the music link out of the google panopticon

2025-02-21 19:12:05 GMT

this song is such a total vibe
https://music.youtube.com/watch?v=RQz3hTUWl6E

2025-02-21 18:02:02 GMT

gm nostr
TIL about ironic distance
https://astralflight.substack.com/p/digital-identity

2025-02-20 21:36:11 GMT

testing with frost2x and igloo

2025-02-20 18:36:03 GMT

gm from frostr

2025-02-17 16:55:43 GMT

- reply

frostr pretty much works this way by default, since the group key is the "user key", and all device keys have proofs that they are members of the group

2025-02-16 02:54:06 GMT

posting this using frost2x, please ignore

2025-02-15 04:01:13 GMT

In the spirit of valentines, here is my recent love letter to the community.
FROSTR is a key management and signing protocol that marries the powers of FROST threshold signatures, with nostr relay networking, in order to create a fully decentralized and personal key management system.
The FROSTR ecosystem is now in alpha mode, with a reference implementation of the protocol fully working and ready to go.
This thing had to be built in stages, but the building blocks are open source and complete with documentation, release packages and testing:
# frost
A typescript library for performing FROST and other threshold protocols. Supports ECDH and signing via BIP340. Also supports share rotation and recovery of lost shares.
https://github.com/cmdruid/frost
# nostr-p2p
A basic peer-to-peer node software development kit for the nostr network. Supports event-driven e2e encrypted messaging, broadcasting, multi-casting, request / response, and more.
https://github.com/cmdruid/nostr-p2p
# bifrost
A peer-to-peer node for collaborative FROST signing, meant to run in the browser and node environments. Runs the FROSTR protocol.
https://github.com/frostr-org/bifrost
# frost2x
A fork of nos2x extension. Supports all NIP-07 methods, but using the powers of FROSTR. Includes an integrated Bifrost node. Also includes a test relay and node for development.
https://github.com/frostr-org/frost2x
# glacier
Coming soon. Desktop implementation of Bifrost, plus GUI for generating and managing key shares.
https://github.com/frostr-org/glacier
Core protocol and frost2x extension works. Existing nsecs can be imported and split into key shares. Will follow up with tutorials and videos soon.
Soon you will never need to store your nsec in a single location ever again. Break it to pieces and scatter into the winds. Recover and replace lost or compromised shares as needed.
Also, it would be nice to have a co-signing service for hosting an API for your key, like Bitkey but for making programmed posts (like cross-posting).
Testers and contributors wanted.

2025-02-07 17:19:23 GMT

Cursor is just unbelievable for refactoring code. Literally 10x speed increase.
It learns your refactoring changes in real-time and auto-completes like a beast.
I will be pressing tab all the way to Valhalla.
https://m.primal.net/OUyO.gif

2025-02-07 16:58:44 GMT

That feeling when you write elegant, beautiful, maintainable code.
https://image.nostr.build/feaddfcca01075fda43c8117442d408694c00124149e4d33f73182ace2d1b91d.gif

2025-02-01 18:21:36 GMT

Ready to ship!
The test suite is particularly great, it can run a simulation of nodes and a realy for end-to-end testing.
Build your own fancy protocol today.
https://github.com/cmdruid/nostr-p2p
p.s @npub1sg6…f63m is this worthy of a grant

2025-01-28 05:27:20 GMT

Using cursor to bang out shell scripts for sysadmin stuff on my machine. What a wild experience. We are so close.
https://m.primal.net/ODtN.gif .

2025-01-27 17:20:31 GMT

gm nostr
What are the top priorities for improving Bitcoin today?
My naive list is:
* Increased adoption of lightning (more wallets).
* More compelling lightning-enabled services.
* More nodes, lottery miners, and heater miners in homes.
* Migration of important financial products onto bitcoin as a standard, for greater bitcoin adoption and increased transaction fee revenue.
* Better developer education, on-boarding and tooling (to build more interesting startups).
What am I missing?

2025-01-27 04:07:54 GMT

- reply

Fantastic post. I think in the medium-term, more "compliance" pools will pop up, and in the long-term, mining will get completely atomized by lottery miners and heating devices.

2025-01-25 19:17:32 GMT

- reply

Okay but for this to be practical, I also have to store a backup of their wallet. So the user will still have an account that I have to manage, just in a roundabout way where it's obfuscated and encrypted. Am I wrong on that?

2025-01-24 22:33:16 GMT

- reply

bitcoin and lightning both support tor
I'm not trying to make this about ecash versus lightning. I'm trying to figure out if its worth running ecash on top of a custodial lightning service.

2025-01-24 20:38:28 GMT

- reply

this doesn't really answer anything. where is the state stored? a single server managing all exchanges can't correlate payments? what if most users only send/receive sats from outside the mint?
yes I know how blind signatures work. I don't like sidestepping the traffic correlation issue. even harbor wallet recognizes this.
is it just the privacy and accounting? are there other reasons to use ecash? how seamless is the lightning-ecash convert? or swapping ecash between mints?

2025-01-24 20:25:59 GMT

- reply

> It is not far from anonymous. It is actually almost perfect privacy TM
so is tor, if we agree to ignore network traffic analysis

2025-01-24 19:32:22 GMT

Can someone sell me on why running an ecash mint is better than a vanilla custodial lightning service?
- Each ecash transaction must go through the mint to change hands, so the server can see everything and strongly correlate your payments anyway.
- You have to backup and store your coins or they are forever lost. The mint can backup your state, but that further strengthens the above.
- You have to use an ecash wallet instead of just a vanilla lightning wallet. A custodial wallet can have zero state, while an ecash wallet has to manage a lot of state. An ecash mint also has to bridge lightning payments if other users want to pay in lightning.
The plus side I guess is that the mint doesn't have to worry about strict accounting, while a custodial lightning server does. And there is some privacy benefits, but it's a complex subject and far from anonymous.
Please help me understand the use-case for ecash. I don't care about politics or the regulatory bogeyman, I just want to throw up a custodial wallet service that does its job with minimal friction. I want to have great user experience and ease of deployment (for others to fork my service).

2025-01-24 01:55:51 GMT

- reply

https://m.primal.net/NxLT.gif

2025-01-22 00:43:14 GMT

The nostr note is a great message format. You can create any kind of protocol that you want with it.

2025-01-21 23:56:11 GMT

Trump admin plans to build their version of skynet within the lone-star state 👀
https://www.forbes.com/sites/dereksaul/2025/01/21/oracle-stock-surges-ahead-of-500-billion-stargate-openai-trump-deal

2025-01-21 03:17:02 GMT

- reply

https://m.primal.net/NsFk.gif

2025-01-20 18:40:46 GMT

Fuggg this nostr social media thing is popping off.
I need to finish frostr so folks don't get one-shotted by a compromised npub.
Had a bunch of personal stuff come up, plus my day job takes precedence, so work on open source projects has been slow.
And y'all haven't even begun talking about quantum-resistant npubs and npub hashing.
Fugggg we are not ready to take on the world's social media refugees.
Posting to hold myself accountable. Have to get back to work on this stuff ASAP.
https://m.primal.net/NrNc.gif

2025-01-19 19:21:24 GMT

Austin is so beautiful.
https://m.primal.net/NoNH.jpg

2025-01-15 14:57:43 GMT

gm nostr
A friend talked me into re-installing Instagram.
Everything about it sucked. The app is a dumpster fire.
I'd rather just post stuff here anonymously.
Days go by, passion project nostr apps are getting better, their fiat counterpart get worse and worse.
Future is bright!

2025-01-12 23:39:12 GMT

- reply

fellow mild interest maximalist tuning in

2025-01-12 17:07:54 GMT

- reply

blaming this on big government or central planning is a cop out
this is demonic elites that no longer care about slow-walking their evil
the truth is that evil beings have decided it's time the gloves come off, their conquer of the west coast is complete, and now they can burn down entire cities of generational wealth in order to build new apartments for their imported third world slaves

2025-01-12 16:55:22 GMT

gm nostr
created a new digital being today
coffee shop -> lightning wallet -> thebitcoincompany visa -> tello sim card -> gmail account
become ungovernable

2025-01-12 04:55:46 GMT

- reply

i'll throw in some new stuff:
Mob Psycho 100
Cyberpunk Edgerunners
Odd Taxi

2025-01-02 06:10:17 GMT

- reply

bitcoin-cli sendtoaddress

2024-12-25 15:45:59 GMT

gm and Merry Christmas ya filty nostriches
https://m.primal.net/NGNb.gif

2024-12-24 07:42:42 GMT

- reply

I don't think the SBR maxi crowd realises that they are summoning the government-cthulu to devour them
NGU is a helluva drug

2024-12-06 14:51:32 GMT

- reply

but seriously, I should be able to zap likes from others
it is good for business 👔

2024-12-06 14:49:00 GMT

it takes a special kind of retard to zap your own posts
please, allow me to introduce myself

2024-12-06 14:22:16 GMT

gm, last bagel for the trip
https://m.primal.net/MozU.jpg

2024-12-03 13:50:28 GMT

gm,, eat a bagel
https://m.primal.net/Mmqt.jpg

2024-11-30 17:57:45 GMT

gm from Guadalajara
https://m.primal.net/Mkvy.jpg

2024-11-28 11:55:34 GMT

This is my npub. There are many like it, but this one is mine. My npub is my best friend. It is my life. I must master it, as I must master my life. Without me my npub owns nothing. Without my npub, I own nothing. I must zap with my npub's stack. I must zap faster than the nostrich who is trying to zap me. I must zap him before he zaps me. I will. Before Casarin I swear this creed. My npub and myself are the defenders of my digital sovereignty. We are the masters of our stacked sats. We are the saviors of the global feed. So be it... until there are no un-zapped npubs left but bots. Amen.
https://m.primal.net/MjKw.jpg

2024-11-27 19:50:02 GMT

- reply

sounds like fun, do you have more info?

2024-11-27 17:02:35 GMT

- reply

Whenever calculating tx fees, I find it important to keep all nessecary fee logic contained within a single file, then pour a ring of salt around the file. This prevents the fee demons from escaping your calculation and crossing into the mortal realm.

2024-11-26 19:50:18 GMT

I want to believe
#note10hg…nxe0

2024-11-26 01:31:26 GMT

- reply

I see that my reputation for being terrible at marketing precedes me 😂

2024-11-25 20:26:42 GMT

- reply

already working on this
frostr.org
it would be good to collaborate, instead of having separate projects

2024-11-15 20:56:39 GMT

- reply

I lost a good friend to suicide, and it was out of the blue. He had a fiancee, loving family, and good career ahead of him. There is no understanding it, the mind indeed can be a terrible master. I am truly sorry for your loss. May your father rest in peace and your family find healing.

2024-11-13 05:48:30 GMT

Bucket is amazing, nostr is amazing.
Had to steal it and make my own version.
https://gist.github.com/cmdruid/43159fd102849147132875fee15db7ec

2024-11-12 03:10:32 GMT

- reply

this is pretty great

2024-11-12 03:03:43 GMT

Demo video of bifrost coordinating an ECDH operation (between frost shares) over nostr.
This is required for Frostr to support nip04 encryption and other ECDH related protocols.
All the nodes are coordinating through encrypted channels via nostr-p2p library.
Next step, signing messages!
https://m.primal.net/MAZb.webm

2024-11-07 01:34:08 GMT

Had to finish a side-quest along the road to completing Frostr.
https://github.com/cmdruid/nostr-p2p
This will be used to link the signing devices together, and have them coordinate via p2p.
Next step: Finish bifrost.
Roadmap: Re-launch Igloo and frost2x apps with updated bifrost library.

2024-11-06 06:26:57 GMT

tfw you are taking a break after defeating the globalists
https://m.primal.net/LuJg.gif

2024-11-05 15:48:36 GMT

gm nostr
go out and vote
https://m.primal.net/Ltbj.png

2024-11-05 02:53:20 GMT

tonight is a perfect night to code jam
any recommendations on music?
https://m.primal.net/Lsyw.gif

2024-11-03 16:51:42 GMT

gm nostr
We are cookin' with gas today!
* Threshold Signatures.
* Threshold ECDH.
* Recover lost shares.
* Rotate existing shares.
* Plenty of tools for DKG.
All the primitives we need to make custody of your npub great again.
https://github.com/cmdruid/frost
Moving on to the next phase!

2024-11-03 16:06:16 GMT

Frostr will fix this! 1.0 release coming soon!
#note1r7k…gun3

2024-10-31 01:36:04 GMT

- reply

https://m.primal.net/Lnfh.gif

2024-10-30 00:19:43 GMT

step 1: build a multiplatform FROST library for the web:
https://github.com/cmdruid/frost
step 2: hack together a remote signer and nos2x fork as proof of concept (and win a hackathon):
https://x.com/PlebLab/status/1850318480576250297
step 3: create a stupid simple multi-device signing protocol with key rotation that supports existing npubs (WIP):
https://github.com/FROSTR-ORG/docs
step 4: make self-custody of your identity great again

2024-10-26 19:50:52 GMT

Frostr will soon fix this!
#note1x95…0saj

2024-10-26 19:48:28 GMT

- reply

thank you for the responsible disclosure and transparency. shit happens, glad you found it and fixed it.

2024-10-23 12:19:24 GMT

gm nostr, see y'all in ATL
https://m.primal.net/LfaI.jpg

2024-09-28 01:19:36 GMT

I feel like DMs to yourself should be treated as "notes to self", similar to signal.

2024-09-07 22:18:01 GMT

Forgive me father satoshi, for I have sinned.
I have been secretly making a software library for using the blockchain as a relational database.
It can create, read, and update. It can also overwrite, but true deletion is impossible.
It uses and abuses ordinals and inscriptions to the maximum degree. Even using "postage" to establish a data type system.
I may have to co-opt the ord project in order to extend its server API, and deepen my descent into this well of madness.
If Cthulu is awakened,

2024-08-05 02:59:41 GMT

Added DLC support for Musig2 on development branch.
Now you can tweak the group nonce with an adapter key, then later tweak the group signature with the secret.
https://github.com/cmdruid/musig2
This DLC scheme should also work with FROST.

2024-07-29 15:35:06 GMT

Had the pleasure of being a "whale" this year at BTC24.
The wine and dine experience was nice, and there was a bunch of celebrities plus high net worth folks walking around.
We had a live feed of the main stage, so you could watch speakers from the comfort of the deep.
The room was packed when RFK was speaking on the main stage, with clapping and cheering at certain points in his speech.
When RFK made the point that Bitcoin is about more than just "number go up", the room was dead silent.
Just thought that was interesting.

2024-07-16 02:45:44 GMT

Is there a tool or extension to cross-post from twitter/x to nostr?

2024-07-16 02:43:11 GMT

the chans saved us from a dark timeline
https://m.primal.net/JSQH.jpg

2024-07-12 19:36:34 GMT

- reply

looks about right
https://m.primal.net/JOTU.jpg

2024-07-12 19:34:29 GMT

- reply

weeeeeeeeeeeeeb

2024-07-05 05:46:13 GMT

- reply

cops couldn't and wouldn't do a thing about it 😂 illegal fireworks capital of the world

2024-07-03 04:18:22 GMT

Do you think nostr will survive the coming AI apocalypse?
https://youtu.be/UShsgCOzER4