05nelsonm
Matt Nelson

Finally got SHA3 + Derived Functions all implemented, as well as their Hmacs + KMAC.
https://github.com/KotlinCrypto/hash
https://github.com/KotlinCrypto/MACs

2023-03-30 04:25:23

- reply

Google Android AND iOS are both shitcoins. This is why we use CalyxOS, man.

2023-03-30 04:13:44

- reply

Sounds like these countries will be in need of some "freedom" in the next 6 to 12 months 👀

2023-03-27 22:23:31

- reply

osslsigncode*

2023-03-27 22:21:29

- reply

Yeah, Andrew Chow's signapple (macOS), and osslcodesign (windows).
Both programs have their own file format for the detached signatures, and require each to be installed by people applying the detached signatures. I went with a standardized way with a single file format for both.
I ended up using Rust's apple-codesign because there were some finicky things with signapple, no built in notarize capability, doesn't work with smart cards.
All in all, works out well. The diff-CLI tool is also just a wrapper around the core kotlin multiplatform library, so is usable in applications too!

2023-03-27 22:09:29

Made something for creating detached code signatures for macOS/Windows binaries.
1. Reproducibly build program
2. Copy it
3. Codesign (+ notarize for macOS) the copy
4. Take a 'diff' between the 2
The '.diff' is just the signatures, which can be applied to the unsigned binaries at a later date (so others can verify build reproducibility)
Think I'll publish it to Debian and Home Brew once I add a few things; check it out!
https://github.com/05nelsonm/kmp-tor-binary/blob/master/tools/diff-cli/README.md
Had a unique issue which #[0] found. Tor binaries for macOS weren't signed or notarized, so when he went to run `kmp-tor` on macOS aarch64 GateKeeper said "nope, not happening".

2023-03-17 15:36:42

- reply

Literally 200 cuck bucks per year for an Apple Developer account + Codesigning Certificate from a CA for Windows.
Not to mention all the ceremony needed to sign the binaries while trying to make them easily verifiable (build reproducibility) for consumers.
OK rant over.

2023-03-17 15:30:31

Codesigning programs for Apple and Windows is the most ridiculous/useless process.
I can understand wanting digital signatures for verifying you are installing what built, and then downloaded, but this is absurd and does nothing but tax developers. Smh.

2023-03-08 21:56:23

- reply

Implementing all the SHA2 hashing algorithms was fun, now on to SHA3 💪

2023-03-08 21:54:22

- reply

Implementing all SHA2 hash algorithms was fun. Now on to SHA3 💪

2023-03-07 20:02:25

- reply

Hey Matt, if I am a library author and one or more of those projects are currently using my library, would I be eligible?
Zap Android, Samourai Wallet, Sphinx Chat, Amethyst (soon hopefully), Sparrow (in the works) is are just some of the projects I'm supporting currently with my Tor libraries

2023-03-07 18:08:22

Any photoshop or Inkscape wizards want to contribute to an open source project?
I need a Kotlin-esque logo for https://github.com/KotlinCrypto

2023-03-07 13:36:37

New libraries just dropped 😎
Say hello to KotlinCrypto
https://github.com/KotlinCrypto

2023-03-07 13:29:30

GM ⚡
Yesterday I had a soda for the first time in I can't even remember.
I was up until 2am, and feel like I drank a 12 pack. How the shit do people drink this garbage on the regular?

2023-03-05 02:18:07

- reply

Yup, it's that simple. The OkHttp client will have to be moved to a provider so it can be lazily instantiated (and conversely, destroyed if they toggle Tor off).
The Kotlin Android sample is your best example for configuring things.

2023-03-03 00:28:06

- reply

Wyoming LLC's are great for this sort of crap.

2023-03-02 03:14:41

- reply

Yes, KiwiBrowser is behind on updates, but I only use it for Nostr and no other browsing.
I've reviewed the Amethyst codebase and am not comfortable with some of the tradeoffs and dependencies utilized. It's a definite no-go for me. Thanks though.

2023-03-02 00:14:33

- reply

cc: #[4]
Is there a way for users to manage their nip-05 id and add relay info for their given npub?
See thread.

2023-03-02 00:09:29

- reply

For sure for sure. Just noticed that the following URL request returns no info (indicating no relays set for your npub)
https://ln.tips/.well-known/nostr.json?relay=f8e6c64342f1e052480630e27e1016dce35fc3a614e60434fef4aa2503328ca9

2023-03-02 00:06:25

- reply

May also want to add to your nostr.json file the "relays" parameter, then login to new clients with your nip-05 id so that it can point them to relays with your info on it.
e.g. https://matthewnelson.io/.well-known/nostr.json

2023-03-01 22:22:12

Kotlin Multiplatform has 0 support for cryptographic functions, and you have to annoyingly drop into each platform specific sources just to do things like sha 256.
Had the same issue with obtaining cryptographically secure random bytes from the system, which prompted me to create a library for it.
Needless to say, I bought the domain kotlincrypto.org and will be working towards building that out. Hopefully will have some basic hashing functions available Friday.

2023-03-01 14:34:57

- reply

This would require clients cache user's nip-05 address though, and in the event his data is not available from the relays, to query it again for any updates so it can try to find him.

2023-03-01 14:26:57

- reply

Wouldn't it be upon Alex to update his nostr.json file's "relays" object to direct clients to new relays where he is posting to?
Outside of that, I do not see how one could overcome such collusion without manual intervention from each user

2023-02-28 20:42:01

- reply

Wish I could run it in a FreeBSD Jail 😢, otherwise I would totally host my own.

2023-02-28 20:01:22

- reply

In terms of protecting IP address of user downloading images. Can use COIL-compose and configure the ImageLoader to use a separate OkHttp client (which can be instantiated with Tor SOCKS5 proxy).
In terms of reducing mobile data, I think COIL resizes it on the fly based on the composable view size that it'll be loaded into. Still might be downloading the entire size though. IMO, imgproxy would be the best way to go.

2023-02-28 19:27:12

- reply

I tried it a couple of times for 21 sats. Bumping it to 1k worked. Is there a minimum you can set or something?

2023-02-28 19:21:38

- reply

Failed to load LNURL 😞
https://void.cat/d/FD61Mr8RuE4WkvnhNSc9Ch.webp

2023-02-28 17:53:46

- reply

Not necessarily!
I see a future in spec'ing out an "auto pay" library and format which wallet's can implement, and allow other apps to register with. Much like how app's register for push notification tokens.
Delegating that task to wallets already on a user's device is far more scalable, reduces technical complexity, and grows lightning/bitcoin adoption faster.

2023-02-28 17:19:02

- reply

Totally. Free relays will become a thing of the past, especially when BOLT 12 adoption pops off.

2023-02-28 17:00:42

My son (4) told me "manners make men" this morning because I forgot to say please.
Proud pappa.

2023-02-28 15:44:23

- reply

Nocoiners right now be like
https://void.cat/d/PXqQErFPA6xAH8xn1rCtQ7.webp

2023-02-28 14:00:03

- reply

Can you imagine a future in which all government spending can be publicly available and tracked?
Hyperbitcoinization is going to be awesome for transparency.

2023-02-28 13:56:40

GM ⚡

2023-02-28 12:33:21

Reworked my entire home network via OPNsense. Can highly recommend.

2023-02-28 12:08:21

- reply

+1 to this
I was a little confused at first

2023-02-25 13:01:12

- reply

Lmaaaao

2023-02-24 13:27:57

- reply

Did you set blaster as your write only relay? Because it has a que to "blast" events, so there is a delay

2023-02-24 13:18:32

GM 🌞 ⚡

2023-02-24 09:16:22

- reply

Yeah they have it behind a webserver which serves only the query params requested.
I was confused because I thought a parameterless request returned all names, but I guess not?

2023-02-24 01:13:35

- reply

Maybe a core lightning plugin???
Cc: #[1]

2023-02-24 01:11:49

Idea:
Nip-05 registry info delivery upon receiving payment is DM'd to npub registrant.
Cc:
#[0]
#[1]

2023-02-24 01:06:55

Idea:
A client you can run on your node that you can DM with a lightning invoice and it will pay it for you.
Will only accept DMs from a specified pubkey (yours)
Can "Uncle Jim" friends and family and set spending conditions for their Nostr pubkeys.

2023-02-24 00:44:31

- reply

Wait a second...
Wtf???
https://void.cat/d/Lao71ksmE46ECwaYoPTbQT.webp

2023-02-24 00:40:46

- reply

100%
Would love a setting client side that will require confirmation.
Cc: #[2]

2023-02-23 23:25:05

- reply

Example (Android using KiwiBrowser + #[3] extension + snort.social)
https://void.cat/d/5Zzu9TMbtL9qwHqUMpMLuk.webp

2023-02-23 23:23:02

- reply

Not having the same relays from client to client. New relay has no info, and so it updates other relays and wipes followers.
Blastr fixes this.
Set as your only write relay. All other relays set to read only.
https://github.com/MutinyWallet/blastr

2023-02-23 23:13:01

- reply

Since there is user interaction to zap (or boost), the requesting app has the foreground in Android. Sending an Intent to the user's preferred LN wallet means Android allows plenty of time to make the network request to pay the invoice, and I even bet you could spin up a Tor Daemon if user is self hosting.

2023-02-23 23:08:22

- reply

Implementing LN wallet features is a lot of overhead for a Nostr Client, and it may even harm the overall user experience.
If I can send a request to CashApp to automatically pay in the background, that is a huge burden lifted. Also opens up further use cases for things like podcasting 2.0, etc.

2023-02-23 22:54:54

- reply

What about a library for mobile Nostr apps to delegate automatic invoice payment to the user's preferred LN wallet?
- Nostr app registers with LN app (exchanges keys)
- Nostr app requests LN app to pay invoice.

2023-02-22 22:17:36

- reply

Are you my spirit animal or something?

2023-02-22 11:39:05

GM 🌞

2023-02-22 11:04:21

https://void.cat/d/7tyWuLDmK3qKCP8EwfPJir.webp

2023-02-21 17:53:55

- reply

Yup. Can use obfs4, too. Still a PT is needed in China.

2023-02-21 11:50:50

- reply

#[3] **
(wrong npub)

2023-02-21 11:49:13

- reply

#[2] and Larry had a great discussion on this. I am definitely FOR mempoolfullrbf and have it enabled
https://stephanlivera.com/episode/438/

2023-02-21 08:50:43

- reply

It's pretty awesome. Thanks for building it!

2023-02-20 23:49:49

Here goes my extensive dive into Kotlin Compose.
When learning something new like this, I always do a calculator or a note taking app (depending on what fits best for what I'm playing with).
Any suggestions Nostr fam?

2023-02-19 23:56:47

- reply

Gotta cut the cord sometime. They all know it is horrible, just waiting for someone close to them to say why, and that they're done. That someone could be you. It only takes 1 or 2 other people until the herd migrates.

2023-02-19 22:20:42

- reply

2023/24 is going to melt a lot of peoples' faces. Nobody is ready 😢

2023-02-19 16:17:16

Yo #[0] I setup my nip-05 id via https://matthewnelson.io/.well-known/nostr.json
And entered in settings [email protected]
But UI isn't showing verification. Any ideas?

2023-02-19 16:14:00

Twitter is ded to me...