anton

security engineer - working on privacy, security and freedom: https://caution.co, https://distrust.co, http://stagex.tools, http://git.distrust.co/public

Public Key

npub1h72rkut9ljnpdfyrcmw8q9jx52tgn2m8zyg0ehd6z236tz2vmg2sr5k5rt

Profile Code

nprofile1qqstl9pmw9jlefsk5jpudhrszer2995f4dn3zy8umkap9ga939xd59gpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dspccyt3

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1h72rkut9ljnpdfyrcmw8q9jx52tgn2m8zyg0ehd6z236tz2vmg2sr5k5rt

Show more details

Last Notes

2026-07-27 16:32:02 GMT

- reply

would love to hear more of your thoughts around why / which part

2026-07-27 14:39:26 GMT

- reply

tee.fail is a great resource, but people often misinterpret it. most of the attacks are side channels or implementation bugs, not “tees don’t work.” compared to a regular server, a tee is still a massive security improvement

2026-07-26 20:42:42 GMT

who here knows about TEEs. trying to see something

2026-07-24 23:01:38 GMT

- reply

you might find stagex useful on the supply chain security side: https://stagex.tools. happy to answer any questions (i’m a core maintainer)

2026-07-24 20:54:04 GMT

what’s new on nostr? heard some buzz about a nice new piece of software 🐝

2026-03-17 18:01:10 GMT

Hiatus, shmiatus, back attitus.

2026-03-17 17:58:33 GMT

It’s highly likely this has already happened and is being suppressed, but deepfakes will be used to circumvent account recovery mechanisms. Companies need to act now to implement stronger protection measures.

2025-11-14 16:35:03 GMT

Aloha nostr, hope everyone is doing well.

2025-04-02 00:37:47 GMT

- reply

That’s for sure! 🤙

2025-03-14 14:34:16 GMT

gm nostr crew

2025-03-11 13:26:53 GMT

Give AI agents access to everything. What could *possibly* go wrong?

2024-12-22 12:08:18 GMT

- reply

Do you know if GrapheneOS is deterministic atm? If not attestation is nice but there are a lot of holes that could be plugged.

2024-12-21 12:35:29 GMT

I recently did a supply chain talk in Montreal at the InCyber conference and covered topics regarding bootstrapping compilers, deterministic builds, and stagex, a linux distribution which addresses a number of security risks current linux distributions do not.
Hmu if you are interested in any of these topics! Always looking for feedback, new collaborators and use-cases.
https://antonlivaja.com/incyber-stagex-talk/

2024-12-21 12:13:02 GMT

- reply

Dobro jutro!

2024-12-21 12:12:15 GMT

- reply

I didn’t check… I’ll find out and report back soon.

2024-12-21 11:47:44 GMT

- reply

Le hardware firewall too? Netgate with opensense perhaps 🤓

2024-12-21 11:42:37 GMT

- reply

Šibnuo sam ti dm

2024-12-21 11:31:16 GMT

Spotted an exchange that offers bitcoin at the airport in Zagreb, Croatia 🤩 lfg https://image.nostr.build/f6980f6530818809ec8e81127ae146f0b404e5763e405bf5788b804f78114384.jpg

2024-12-09 14:49:38 GMT

- reply

lfg! 🙌

2024-12-09 14:49:15 GMT

The Dasharo developer pub is hosting a talk about our linux distribution which focuses on compiler safety, determinism and minimalism. (https://codeberg.org/stagex/stagex):
🔧 Simplify reproducible builds with Lance R. Vick from Distrust at Dasharo Developers vPub.
Discover [Stageˣ], a minimal Linux distro for zero-trust software supply chains:
- Provable reproduction for all artifacts
- Replace containerized pipelines
- Consistent builds across hardware
- Trust no one internally
🗓️ Date: Dec 12
🕙 Time: 22:00–22:10 (UTC)
🎟️ Register for free: https://buff.ly/3D9k8fe
Learn more: 👉 https://stagex.tools
Come hang out!

2024-12-03 12:48:34 GMT

- reply

What is the current consensus on building/focusing more on bridges to other systems like bluesky and mastodon?

2024-12-03 12:46:34 GMT

- reply

Hvala brate! 🫂

2024-12-03 12:28:20 GMT

Dobro jutro

2024-08-19 00:47:17 GMT

- reply

You can also just go do FNM if you’re into that sort of thing!

2024-08-19 00:46:05 GMT

- reply

Legacy is a bit expensive to get into but it’s my favorite format and there isn’t that much card rotation.

2024-08-18 15:28:57 GMT

- reply

I see. It still reduces the key security overall but I understand what you’re going for.

2024-08-18 15:11:29 GMT

- reply

A more clumsy but functional option is to list child keys signed by the master key

2024-08-18 15:10:06 GMT

- reply

I was thinking in the context of nips 41 and 109, and around how to improve key safety. Imo master key should never touch a mobile device - if you don’t let the master key touch a mobile device or other low trust environment, but you do let a child key, then if you expose your xpub, it undermines the whole security model of having a well protected master key.

2024-08-18 14:55:05 GMT

- reply

The issue with exposing your xpub is that xpub + any child priv = xpriv

2024-08-18 03:13:25 GMT

- reply

Hey been some time 🫂

2024-08-18 03:12:58 GMT

- reply

You should check out our somewhat unusual distro https://codeberg.org/stagex/stagex

2024-08-18 01:16:41 GMT

- reply

Come join #! https://matrix.to/#/%23!%3Amatrix.org

2024-08-18 00:28:20 GMT

What’s the status of subkeys / revocations on nostr? Was the idea killed? Doesn’t feel right to not have a way to revoke a compromised key or the ability to use subkeys signed by a master key. I imagine the conversation happened somewhere, just not sure where… anyone have a link?

2024-08-17 15:31:53 GMT

- reply

iOS

2024-08-17 15:27:24 GMT

I was just doing some testing on mobile nostr clients and it seems some don’t delete the npriv when the app is deleted. Please fix this if your client has this issue. @npub12vk…pugg is one example.

2024-08-14 23:42:12 GMT

- reply

Not that I’ve seen. I remember that there was a bounty at some point.

2024-08-14 23:30:00 GMT

Seems like a good moment to share this since GitHub is down. There are open source alternatives to GitHub like Codeberg and self hosted options like Forgejo and Gitea. In the spirit of decentralization and OSS let’s try to ditch M$ products.

2024-08-14 22:55:07 GMT

- reply

I mean.. who knows, but it certainly makes it easier. Good to understand that you aren’t interested in growing nostr though.

2024-08-14 22:37:20 GMT

Is anyone in Canada looking to grab Ergodox blank key caps? I bought them by accident instead of the ones for a Moonlander. Can sell them for CAD $80 + shipping.

2024-08-14 21:35:57 GMT

What are the best relays rn?

2024-08-14 21:26:00 GMT

- reply

I was looking at it but @openvibe seems like the thing I want

2024-08-14 21:24:51 GMT

- reply

Congratulations! Looking forward to seeing more from your team 🫂

2024-08-14 21:09:20 GMT

- reply

Sick deal. Thank you 🤙

2024-08-14 21:08:52 GMT

- reply

https://infosec.exchange/explore

2024-08-14 20:45:07 GMT

- reply

Nice, I’m setting a node up soon. Decentralize all the things!

2024-08-14 20:43:17 GMT

- reply

Basically the entire infosec community moved from twitter to mastodon, so I’m not sure where you were looking.
But anyways, you don’t think making it easier for users from another platform to come here by making integrations across them is a good idea?
Btw I’m not trying to have a discussion with you about which protocol/platform is superior, we agree on that.

2024-08-14 20:30:32 GMT

- reply

Definitely! One thing that’s been bugging me is the tribalism I sometimes see on nostr. We need a welcoming environment, not a condescending one. Let’s get more peeps in here 🫂

2024-08-14 03:13:30 GMT

- reply

MOAR

2024-08-14 00:15:26 GMT

- reply

It’s a good idea. AI will keep getting better. It will become very difficult to distinguish reality from AI generated soon and in some cases it’s already tricky to tell them apart.

2024-08-13 20:30:26 GMT

If you want to help build an off-grid and decentralized mesh network, check out https://meshtastic.org/
For $30-$100 you can get a node that has excellent range (sometimes up to 100km), and it doesn’t require a HAM license.
We have done a great job decentralizing quite a few things, and this is a great way to do the same for our infra.
Check out nodes globally using this map: https://meshmap.net/
I recommend this hardware: https://shop.uniteng.com/product/meshtastic-mesh-device-station-edition/

2024-08-13 20:12:25 GMT

- reply

GitHub sucks. https://sfconservancy.org/GiveUpGitHub/

2024-08-13 14:00:09 GMT

- reply

There are a lot of ideologically aligned people on Mastodon that left Twitter for a good reason. Showing them a better alternative would be great. I want people to have choice. If a subset of those users want to create their own relays and socialist them up - let them.
Outside of that, most of the infosec community moved there and I like to have access to that info as it’s relevant to my work so that’s a very practical issue for me. I’d rather have the problem of having to curate than not having the data available where I want it.

2024-08-13 03:11:53 GMT

- reply

Like this: https://codeberg.org/stagex/stagex

2024-08-12 19:36:31 GMT

- reply

Maybe but at least it’s federated, and we can annex users from there. They are a perfect target for upgrading to nostr, and atm they have a stronger/larger community so finding a way to bridge them over is a win.

2024-08-12 17:27:13 GMT

I officially kicked Twitter today in the interest of supporting OSS and decentralization. I unfollowed everyone on there and pointed to Nostr and Mastodon.
Has anyone had success bridging Mastodon and Nostr? I came across Mostr but so far it isn’t working well. Seems like it would be a big win if we can integrate these networks more.

2024-08-09 14:13:41 GMT

- reply

Bitcorn is forever 🌽

2024-08-09 13:44:05 GMT

Ohayo gozaimasu. 🌞

2024-08-08 14:19:38 GMT

- reply

Welcome! 🫂

2024-08-06 01:06:37 GMT

- reply

Check out airgapos. It’s made for this sort of thing: https://git.distrust.co/public/airgap

2024-08-02 04:23:27 GMT

Just cut a new release of StageX. It’s a fully bootstrapped build toolchain focused on determinism/reproducibility.
https://codeberg.org/stagex/stagex
Best use cases are high risk environments where you want all of the software used multi reproduced with minimal deps, but you can use it anywhere you like, for example as a drop in replacement for alpine rust - which there is a nice example for in the readme.

2024-08-01 14:01:59 GMT

- reply

Leuk! Ik kan spreek een beetje omdat ik heb in Amsterdam gewooned

2024-08-01 12:40:12 GMT

- reply

Alles is goed. Werken aan een disaster recovery systeem! Jij bent nederlands?

2024-08-01 12:22:45 GMT

Goedemorgen. Hoe gaat het allemaal?

2024-07-31 01:51:30 GMT

- reply

Thank you for the hookup! You da real mvp

2024-07-31 01:27:17 GMT

- reply

No sweat, appreciate you 🫂

2024-07-31 01:01:07 GMT

Does anyone have an invite code for getalby?

2024-07-31 00:34:37 GMT

Why do so many companies feel it’s okay to leak their user emails through the signup flow? AWS Cognito actually has this issue baked into their product.
https://m.primal.net/Jjil.jpg

2024-07-31 00:32:44 GMT

Whew, thought I lost my key but past Anton did a nice backup 🤙

2024-05-24 10:09:29 GMT

- reply

He just missed out on drawing so many “obvious” conclusions

2024-05-24 10:08:08 GMT

- reply

Totally. I really enjoyed both Sapiens and Homo Deus.

2024-05-23 21:15:46 GMT

The Sovereign Individual by Davidson and Rees-Mogg feels like something Yuvel Harari would have written if he was smarter.

2024-05-22 01:18:42 GMT

- reply

We started at 6am. You basically gotta walk all day. I bailed around 4pm, and my buddy finished around 11pm.

2024-05-20 20:17:39 GMT

- reply

Heyo, thanks for the nice welcome! Unfortunately I only made it to 60k steps because my right foot got injured last week and that flamed up again but I’ll try again in a few months!

2024-05-20 08:56:51 GMT

GM! Going for a 100k step today for the first time. Hoping my legs don’t give up, because I won’t.

2024-05-19 14:26:08 GMT

Stories like this are such a cool part of history and a look into the mindset that’s needed to bootstrap a new technology
#note16zs…e2aa

2024-05-19 14:22:25 GMT

When you realize what it means to be a sovereign individual: https://open.spotify.com/track/5EWPGh7jbTNO2wakv8LjUI?si=QV9YsDHYRGqzW9IfJ7cqUQ&context=spotify%3Asearch%3Afreebird

2024-05-19 14:06:31 GMT

- reply

Dubrovnik ya?

2024-05-19 14:03:59 GMT

Trying out primal. V-nice so far 🙌

2024-04-19 12:33:56 GMT

3.125

2024-02-20 02:52:14 GMT

We just released StageX, a containerized software build root, 100% auditable and deterministic, bootstrapped from 256-bytes of assembly. Every package is built, attested, and signed by multiple independent builders, and of course everything is open source.
https://codeberg.org/stagex/stagex

2023-06-03 14:18:10 GMT

- reply

100% hmu any time!

2023-05-19 18:56:32 GMT

- reply

Doing good brother! Just been hella busy with some life events :)

2023-05-12 12:56:53 GMT

- reply

https://nostr.build/i/d9f5c56c333fddcd24a1f84d97daf8e723d93b8e09c467e61e8252e37debbcd6.jpg

2023-05-12 12:55:32 GMT

Buenos dias mis amigos! 🫂

2023-04-25 19:18:07 GMT

- reply

Pricing seems accurate based on inflation

2023-04-20 15:43:21 GMT

- reply

Learning rust 🤓

2023-04-19 01:45:05 GMT

- reply

🫡 hueuhuehue kekeke br?

2023-04-16 14:54:52 GMT

To be listened on a bass heavy system: https://tidal.com/track/207229971

2023-04-15 04:42:32 GMT

- reply

I’m not sure using subdomains is a good way to organize topics on a relay. You could definitely do something like that, but why not use hashtags, or rely on “lists” to curate people who talk about and engage on certain topics?

2023-04-12 16:31:49 GMT

- reply

Yes sir! We are actively working on private chat, and will be devising a group chat version as well, but as of right now this is the active NIP we are implementing POCs for that should be out soon: https://github.com/nostr-protocol/nips/pull/410
As for paid relays, as maintainers of Nostream we’ve done a lot of work to help people host their own relays and that’s something we are working on as well. We have something we’ll be releasing for this in the near future that we’re very excited about 🤩

2023-04-12 11:43:00 GMT

- reply

Awesome! I need to watch this as well 🤙

2023-04-09 18:13:47 GMT

We just launched a little website for NostrLand! Check it out: https://nostr.land

2023-04-06 18:04:30 GMT

- reply

I’m on a water fast and this picture killed me. I’m ded now

2023-04-06 13:11:15 GMT

- reply

Thank you for all the transparency and working through this. It’s a tricky situation and I think you handled it very well so kudos to you and the team 🤙🫡

2023-04-06 11:23:45 GMT

- reply

Cheers! Congratulations to you as well 🤙

2023-04-06 01:20:51 GMT

- reply

🤣

2023-04-05 23:56:33 GMT

- reply

Thanks brother! We’re super stoked and kept working on it this whole time regardless!

2023-04-05 23:55:12 GMT

- reply

We won the community vote for the #nostropical hackathon which happened after #nostrica. Thanks for the support everyone!
#[2]
Our work on incognito (private) DMs continues!

2023-04-05 23:53:39 GMT

- reply

Thanks so much! This is amazing. We’ve kept going with the project and are actively working on a NIP as well as a library for making it easy to add incognito messages to clients.
Separately we’re building a demo client for people to test out incognito messages!
Here’s a link to our NIP-31: https://github.com/nostr-protocol/nips/pull/410

2023-04-05 22:39:18 GMT

- reply

Unreal 🦾