DevilishLemonBar 🦥⚡🏳️‍🌈

Electrical "Engineer" Aggie'20.
Onlyfans (NSFW): http://tx.ag/Igebcre

⚡Node (shutdown): 03817596435f25a156da4a89c9dabf2a3e4f9a74418543f3de6b77cab780a473a1

مَسْكُونٌ هَذَا الجِنُّ بِإِنْسْ.

Public Key

npub1y3k2nheva29y9ej8a22e07epuxrn04rvgy28wvs54y57j7vsxxuq0gvp4j

NIP-05 Address

slothy.win

Profile Code

nprofile1qqszgm9fmukw4zjzuer749vhlvs7rpeh63kyz9rhxg22j20f0xgrrwqpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds5khsk0

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1y3k2nheva29y9ej8a22e07epuxrn04rvgy28wvs54y57j7vsxxuq0gvp4j

Show more details

Last Notes

2026-08-20 13:46:54 GMT

- reply

It isn't a problem that they exist, it doesn't mean I care to interact with them. Nostr provides all the tools necessary for me to completely filter them out of existence.

2026-08-20 09:51:16 GMT

- reply

And by default, I mean what most nostr apps prepopulate because there isn't really a default

2026-08-20 09:50:39 GMT

- reply

Define "on here" - nostr isn't a centralized entity. You're free to spin up your own relays and create communities that work for you.
The default relays are obviously Bitcoin centric (plus a bit of fringe right-ish weirdos).

2026-08-17 04:12:22 GMT

Gm 🌞 https://npub1y3k2nheva29y9ej8a22e07epuxrn04rvgy28wvs54y57j7vsxxuq0gvp4j.blossom.band/693834e5dbc7235003e46f95e1d7ae715dac8eceb959a81f5a589b419f8e1a6a.jpg https://npub1y3k2nheva29y9ej8a22e07epuxrn04rvgy28wvs54y57j7vsxxuq0gvp4j.blossom.band/22c8c0cad68d04144ef2e16d8ac0a44db56094f732958f857d7c44aa771ac78c.jpg https://npub1y3k2nheva29y9ej8a22e07epuxrn04rvgy28wvs54y57j7vsxxuq0gvp4j.blossom.band/0c615f5d86accfb31aeb178cbe3b27531d486a5b7ca50d31139a7c5f5b1f0a35.jpg

2026-08-17 02:04:58 GMT

- reply

Being able to moderate what **you** see is not censorship. Are you daft?

2026-08-16 03:54:25 GMT

- reply

goals

2026-08-16 03:52:26 GMT

- reply

RTL support is borked (text in my profile)
Image attachments don't seem to work.
Text fields don't let me move back/forward with the spacebar hold like all native text fields.
And I'd like it if I didn't have to paste my nsec.

2026-08-15 01:54:06 GMT

- reply

Okay.

2026-08-14 04:21:07 GMT

- reply

it is frustrating
the core audience that would benefit from communications is here, and yet I have to log into X every day or check my Telegram to notice stuff like this

2026-08-13 23:43:11 GMT

Update your BTCPay Server instances again, as soon as you can: https://x.com/r0ckstardev/status/2087963055091011920
(no nostr post)

2026-08-13 04:10:37 GMT

- reply

though the canary expiry snafu and sudden departure makes me somewhat uneasy.

2026-08-13 04:09:00 GMT

- reply

Thank you for your service and hope y'all are well. Sad to see you go. On the bright side I don't think you'd say Boltz is in safe hands if it wasn't.

2026-08-12 21:32:58 GMT

Anyone seen the @nprofile…3478 statement on X? It isn't here on nostr for whatever reason.
Smells a little but fishy, but who knows.

2026-08-12 02:36:53 GMT

- reply

Define the trust boundary. You do not need to trust bitkey to emergency exit the multisig or to transact.

2026-08-09 03:16:09 GMT

- reply

I want to scam some knotzis, if they believe it's the actual chain, surely they won't mind my LukeCoin? 😂

2026-08-09 00:51:20 GMT

Anyone know stores selling stuff for Bitcoin with a BIP110 node backing their payment backend?
I have some BIP110 LukeCoin to spend 🤑
(yes, aware of replay implications)

2026-08-08 20:25:34 GMT

I don't think they understand how this works 😆
https://blossom.primal.net/ab5e8078756024cdc8b8a038c6d9b4b33064274e29734d3055fcaef59279f564.png

2026-08-08 19:51:19 GMT

aaand the knotzis disappeared

2026-08-08 13:17:21 GMT

- reply

Worse. It took them ~10 hours to put anything on their website/blog after the Tweet.. 😅
Very odd response/handling from a project I generally like.

2026-08-08 06:16:18 GMT

- reply

#nevent1q…dvht

2026-08-08 06:13:53 GMT

- reply

calle is pissing me off tbh

2026-08-08 06:12:23 GMT

- reply

I mean my recommendation when this happened yesterday was nuke it and probably don't use it again
Given how they handled disclosure by just tweeting and not posting anything about it on their website or blog for more than 10 hours 😂

2026-08-08 06:05:28 GMT

- reply

you only needed to rotate macaroons (from the latest statement).

2026-08-08 05:21:06 GMT

- reply

How would it almost get you? These are usually pretty dumb and simply ask you to literally type out your seed phrase.

2026-08-08 04:05:06 GMT

p a i n
https://blossom.primal.net/06554cdcf7cfee907374d13f91ee3a58fb218f5d57ce076d96138c1d9f54b606.png

2026-08-08 01:09:52 GMT

- reply

https://slothy.win/#pomegranate

2026-08-08 00:26:49 GMT

- reply

Of course, but doing that 5 years ago, with an immediate advisory and that easy path to migrate would limit the damage substantially.
Instead we had.. what we had lol.

2026-08-07 21:29:04 GMT

- reply

They could have easily rolled an update that forces a seed refresh. On boot -> if seed exists -> prompt user to confirm they have existing seed words / verify that -> generate new seed -> ask user to migrate all funds to new seed (now on device), load old seed in memory transiently to allow signing the migration tx.
This is more jank tha it should because they don't have a first-party app. Something like Bitkey handled something similar in literally two clicks during the privacy upgrade update (which required a new 2-o-3 to be generated.

2026-08-07 20:47:53 GMT

Zero announcement / advisory notice / blog post or any indication of the vulnerability on BTCPay Server's website other than the post on X.
It has been 4 hours.
If this is how they operate, I advise you all to just pull the plug and shut your BTCPay instances down.

2026-08-07 18:58:58 GMT

- reply

Requires an approved/published Google OAuth screen. I can spin it up with the testing 100 user cap and see from there.

2026-08-07 18:02:44 GMT

- reply

Also maybe I'm retarded but shouldn't the update invalidate all LN backend auth and regenerate it automatically instead of leaving people with potentially exposed macaroons etc?
Sure it might break stuff but a simple post update popup with info would help less technical folk.

2026-08-07 17:37:49 GMT

Would be nice to understand the scope of the BTCPay vuln and if there are any logs to check to confirm if it was exploited or not prior to an upgrade.

2026-08-06 01:47:21 GMT

- reply

It isn't new, it's been there for a while. Only he brought it back up with limited funds after taking it down following Boltz.
Other than that, agree. He's been great covering any snafus and is running a very useful tool, but yes, custodial.

2026-08-05 20:27:43 GMT

- reply

No. Not a big enough incentive. Evidently and predictably.
The only way to get 'free' review of your code is to have others use it and have the incentive to actually review it since their product would depend on it (and hence, the liability behind that).
Or to have paid external security audits.
You can't prohibit commercial use of your code and expect others to dedicate their time to look over it if they have nothing to gain (and again, most _users_ who have funds backed by your code aren't technically competent to audit a codebase).

2026-08-05 20:17:12 GMT

- reply

There is much less incentive to audit code if you're not allowed to build upon it.
Because... developers are often more likely to have the skills to do so than users. And by taking away the ability to _use_ the code they'd audit, what is the incentive again?
It's not that hard a concept to grasp.

2026-08-05 20:11:37 GMT

Friendly reminder that even in 2013, RNG bugs had a response with much better user UX, often indicating that a new seed is required, and guiding users to migrate funds.
https://bitcoin.org/en/alert/2013-08-11-android
Yes, with a hardware wallet this is slightly more complicated, but if something like Bitkey can handle seamless seed refreshes and fund migration (ex: the enhanced privacy upgrade) then others can.
Every hardware signer should have some form of official companion app that can make these flows possible for the average non-technical user.

2026-08-05 03:45:57 GMT

- reply

* without updated firmware

2026-08-05 03:40:17 GMT

Any European resellers still have Coldcard Q stock? Looks like it was pulled from those I can find.
Need to purchase one for some experiments.

2026-08-04 22:29:05 GMT

- reply

Uhh 🗿
So, Canadian friends, do y'all do private investigators there? He shouldn't be able to take a shit without someone knowing from now.

2026-08-04 20:11:03 GMT

Spun-up an Ark delegate: https://slothy.win/#delegate

2026-08-04 20:03:47 GMT

- reply

They are logistically important for the Russian military.

2026-08-04 19:59:14 GMT

- reply

(*) trusting that at least a single operator remains honest. Which sounds good, since you only need 1 honest operator...
Except... there are only three operators, two of which are basically the same entity, with the only third one being Breez.

2026-08-04 19:42:23 GMT

- reply

I wrapped my head around (more or less) Ark, but for Spark I'm still left with this operator question that the whole trust model hangs upon.

2026-08-04 19:39:15 GMT

With so many Spark wallets popping up, can someone ELI5 to me why we're OK with a trust model that requires that all spark operators don't collude given that from what I can see there are only 3(?) Spark operators and no clear understanding of how you'd become a Spark operator?
I'm sure I'm missing something, but if not, seems crap.

2026-08-04 01:39:33 GMT

- reply

Yeaaaah, no. Afaik the only actual operator at the moment for spark is lightspark, if they go down, nothing will work on Blitz (even though, like Boltz, the spec is open).

2026-08-04 01:26:12 GMT

- reply

LN receive / send on Aqua will be broken.
But main chain Bitcoin and Liquid will work (including BTC to Liquid swaps).

2026-08-03 18:27:13 GMT

- reply

Sadly despite boltz being completely opensource there aren't many operators: https://swapmarket.github.io/swap
Ideally the wallet providers would host their own instances and actually encourage fee competition by selecting the cheapest offer out of multiple options. But none of that has happened, so every swap based wallet just hard-codes official boltz.

2026-08-03 17:34:57 GMT

- reply

There goes half of the Liquid/LN or LN swap based wallets. Oh, and Ark/Spark etc.
I think MiddlWay is also offline. The only one left is coinos(?)

2026-08-03 09:28:06 GMT

Also, not having an optional first-party companion app is a major downside. This could've been handled much faster and with less friction if there was an app flow that a) alerted to a signer having a vulnerable firmware. b) initiated a migration tx to a new seed as soon as the device firmware is updated (possibly a hop to a software key in the interim if the signer can only have one active private key).
If Bitkey can do it (ex: the enhanced privacy upgrade requiring a new key - seamless flow) every company should have a similar flow ready for this type of situation.
It should only take a couple of clicks.

2026-08-03 09:17:09 GMT

- reply

much of the advice on X of "generating your own entropy" is absolute dogshit that is going to get clueless people in trouble.
Solid hardware RNG sources are a solved issue in this context. Just make sure your code is actually.. using it.

2026-08-03 09:14:49 GMT

- reply

& the shit advice going around of footguns around generating your own entropy (exclusively, not as an additional source) is going to hurt more people than it helps.
If you know an affected normie, just get them a fucking Bitkey, Bitbox, Passport, Jade, or whatever the fuck™️ instead of confusing them with dice circlejerks. Pretty much every signer is using multiple good RNG sources. This wasn't a flawed RNG source issue, it's a dumb software bug causing a fallback to software PRNG. What are we even talking about?
I saw someone on X suggesting that people should pick BIP39 words from a jar. If you're a cryptographer you'd hang yourself with some of the garbage advice.
Rant over.

2026-08-03 09:09:32 GMT

A somewhat gross but nonetheless true statement:
In the grand scheme of things ~90M USD in drained ColdCard wallets is a drop in the ocean. I'd wager that ColdCard's marketshare isn't even that significant in the grand scheme of things.
What particularly sucks is that these are pretty much all from plebs who worked their assess off to stack that corn. And ironically from those who probably tried to go the extra mile to get something more "sophisticated". It's "only" 90M but the impact this loss has on those affected is immense.

2026-08-03 07:45:42 GMT

- reply

Nah, he's just a narcissist who happens to be incompetent. It's a terrible combo.

2026-08-03 05:47:02 GMT

I feel like the "dice roll only" advice is going to bite some noobs or people who mishandle it. There is nothing wrong with hardware RNG or the RNG sources used by any hardware signer. What happened to ColdCard is a fail-open fallback to software PRNG.
At least ask that people use methods that use dice rolls as a supplementary entropy source, not the sole one - if at all.

2026-08-03 04:36:51 GMT

- reply

Good chance whoever it is doing this is retarded so perhaps so corn can be returned 🤞

2026-08-03 04:09:58 GMT

- reply

Thanks. Used to self host soapbox for Pleroma then ditto a long while ago. Nice to see it's still here.

2026-08-03 03:03:13 GMT

Nostr peeps:
I've been away for a while and wasn't keeping up. What's a good Android client (other than Amethyst). Web/Linux suggestions also welcome.

2026-08-02 22:19:56 GMT

- reply

You also can't pay with Bitcoin to buy your Bitkey, in Italy at least.
Got my gen 1 Bitkey years ago for 25 USD. Wouldn't pay 200+ for this 😅

2026-07-31 23:05:57 GMT

- reply

The quality of 5.6 Sol and Opus 5 / Fable 5 compared to what we have before, especially when it comes to vulnerability analysis is night and day.
Even distilled models like K3 are leagues ahead of what we had for the past 2 years.
If you haven't yet, use a modern Clanker on the highest effort setting to comprehensively audit your code. And give it a harness that let's it experiment and actually test it's theories.

2026-07-31 22:44:51 GMT

- reply

seedsigner.org
Currently set to redirect to Knots (and previously other nonsense).

2026-07-31 16:21:15 GMT

I see people saying this Coinkite/ColdCard incident will reduce confidence in self custody.
It shouldn't. This was an amateur flaw in a company run by a narcissist who should've never been trusted to begin with. If you ignore the red flags around their hostility towards FOSS, seedsigner (including squatting seedsigner.org btw), then I don't know what to tell you.
Maybe if nvk spent less time shitposting and more time auditing his garbage, we wouldn't be here.
If you're going to use a hardware signer, use proper hardware signers from serious companies who have their work audited... especially you know, the bits around fucking entropy and seed generation, fundamental parts of a fucking hardware signer.
And it should go without saying that "influencers" who shill this garbage should reconsider.
Sympathies to everyone affected.

2026-07-09 16:21:43 GMT

- reply

Looks like AI still struggles with non-latin scripts.

2026-07-09 16:17:18 GMT

The hashrate stalling and slightly reducing for an extended amount of time is somewhat disconcerting. More so than much of the noise around.

2026-05-28 04:42:37 GMT

it's becoming very difficult to stay optimistic

2026-05-01 12:23:28 GMT

- reply

Uh oh.

2026-04-27 20:08:38 GMT

230 euros for the new Bitkey is uh, a choice...

2026-04-20 14:23:27 GMT

🦆✨
https://npub1y3k2nheva29y9ej8a22e07epuxrn04rvgy28wvs54y57j7vsxxuq0gvp4j.blossom.band/4661c905424b2dbec6389000fe89fbf40590bcb5dfd52c8a945faad6b5ff0070.jpg https://npub1y3k2nheva29y9ej8a22e07epuxrn04rvgy28wvs54y57j7vsxxuq0gvp4j.blossom.band/e7cb5a9e486090bea88f130e7da065af218db1d08f39e2f05dceb85bd307380b.jpg

2026-03-13 16:08:50 GMT

🐢💤 https://image.nostr.build/11e2f65df1fff3e11dd9752719f73a13a0816298ce60f884fe8baf4734fcbfc5.jpg https://image.nostr.build/a93373675120bcaad81f8ca491eb6db952e6146fc1c367a5eb53e15ae4986c84.jpg

2026-02-12 14:36:58 GMT

Looks like the bot plague on X is also a thing here, sigh.

2026-02-12 13:27:17 GMT

- reply

But it's still an interesting toy if you know what you're doing.

2026-02-12 13:26:58 GMT

A quick test run of openclaw: I'm horrified at the amount of ways clueless people can fuck themselves over using it. Needs a serious disclaimer on lack of guardrails and potential for serious harm.

2026-02-12 13:24:06 GMT

- reply

You might want to take a step back and to.. reevaluate what you're doing.

2025-07-23 16:35:48 GMT

Peter Todd just casually stated that Israel bombing a prison in Iran with political detainees is "ultimately good" despite... killing scores of those prisoners to begin with.
Oh, and the children of staff members who were present at the time and killed? No big deal. It's a "remarkably good achievement".
Then proceeds to call the Palestinian flag a "terrorist flag".
Zionism is a disease.

2025-07-18 00:44:35 GMT

- reply

Kinda cool but no one I know cares so it's just me talking to myself on two phones 😂

2025-07-07 03:52:24 GMT

- reply

Oh trust me I know. As a student it costs 700 euro a year and I have to keep going back and getting temporary paper health cards every 3 months.
The physical card arrives at the end of the year when the coverage expires 😆
Didn't bother enrolling this year and just went private. But random entities like banks need a 'valid' heath card sometimes and won't accept expired ones or the CF card.
Italian bureaucracy is an abomination.

2025-07-03 03:49:20 GMT

- reply

. @npub1efr…n8d4 ⚡ and they even have a lightning address! Send em some sats!

2025-07-03 03:47:09 GMT

I've been learning Italian since I'm doing my Master's in Italy/Veneto. Was kinda curious about the Venetian dialect/language and wanted to learn more.
Ended up here: https://www.elgalepin.com/
And... there was a nostr npub! :D
Cool to see!
Wish there were more lingua veneta resources for English speakers though.

2025-03-10 19:06:38 GMT

Love yourself.

2025-01-19 15:25:21 GMT

471 days and billions of dollars later; tons of bombs and a david v. goliath firepower disparity...
the result, in northern Gaza 🤣 :
https://image.nostr.build/99a3fcb892d3d9cc41cb43746c70229a2878204d522b269e5bd1aa687e54b52e.png
you can't break the Palestinian resistance.

2025-01-18 10:03:15 GMT

gm
https://fixupx.com/wef/status/1880298514955268516

2024-12-09 23:07:53 GMT

- reply

italian icon

2024-12-07 22:26:16 GMT

- reply

I would unironically change my entire stance on guns if this was real

2024-12-05 02:37:22 GMT

It happened
Nothing changed
Keep stacking

2024-11-12 01:15:33 GMT

- reply

Mike Waltz, sigh. Nevermind.

2024-11-09 22:51:17 GMT

I have little hope when it comes to American politics, but one can only dream that the Trump presidency at least brings some change when it comes to Palestine and the situation in the middle east. Biden was a momumental disaster in that regard.
On the other hand, we can't escape the knock-on effects reg. personal liberties and bodily autonomy (lgbt rights, abortion, etc) even outside America. I'm fucking tired of spineless populists abusing minorities and using violent rhetoric to ride the wave.

2024-11-05 17:51:39 GMT

If there is a hell Poste Italiane will be at the deepest pit of it.

2024-11-04 00:05:11 GMT

- reply

I'm parasite free for sure since I had to go through a lot of testing when I first started having issues years ago. Idk about Candida though. TL:DR; from doctors was "IBS" ie. we don't know but it isn't a known allergy or disease related.
I think I need to somehow make my eating day calories around ~4200 to average 2100 a day. That would probably keep my weight stable. I just can't figure out how to shove 4200 calories into a single meal (while keeping it pleasant).

2024-11-03 23:52:23 GMT

Nighttime walks are a form of therapy.
Bliss.
https://image.nostr.build/35476d41e1a890628c32e260d3d7e58fa858d5ba84601f43e5863f55c1498398.jpg

2024-10-30 17:54:38 GMT

Saw this little friend today
https://image.nostr.build/cc5268b3518fe7777ffff6aaf248916fb5ea19daf2ce4e118bb6f73e45ca5672.gif

2024-10-27 16:55:27 GMT

- reply

Battery, if you can source a high quality replacement.

2024-10-27 16:54:15 GMT

OMAD for close to 4 years now. ADF for around a year.
I'm struggling to eat enough calories to keep my weight stable at this point. I'm still losing weight, albeit very slowly. If I eat any more than I do in my eating day I'd feel uncomfortable.
I end up with around 3600 Cals on eating day, so ~1800 Cals daily average.
Can't really see how to fit more than 3600 calories in a single meal 😅
Might have to go back to just OMAD without alternate day fasting if I can't figure out how to maintain my weight in a couple of months. But then I worry the IBS and other discomfort ADF fixed might come back.
Anyone went through this? I'd appreciate any tips.
#diet #foodstr #food

2024-10-16 14:24:48 GMT

Sad to see SBW (Simple Bitcoin Wallet) go from one of the most polished Bitcoin+LN wallet to what it is now; LN/LNURL functionality removed, HW Wallet (airgapped) support removed, and now on GitHub you can even see Coin Control being removed and Google Auth being added for whatever reason.
Probably a good reminder to disable updates and/or move on if you still have it installed.

2024-10-16 08:33:12 GMT

- reply

DB nuked, writes only enabled to my pubkey now so I can use it as an archival relay.

2024-10-16 08:24:33 GMT

Okay, seems like my NIP-05 only free relay now contains questionable Japanese CP adjacent content. I'm taking it down, nuking it, and only keeping the paid relay...
Goodbye wss://nostr-verif.slothy.win 🫡

2024-10-15 18:03:47 GMT

[CW: Death]
Sorry for the graphic content, but I'm posting in the interest of raining awareness towards the Israeli warcrimes in Gaza and the wider region.
Sha'ban is one of tens of thousands of souls lost to Israel's deliberate barbaric targeting of civilians. His mother died with him in that tent. The US war machine is responsible for arming and financing the Israeli regime.
https://image.nostr.build/a09ea31293f3c9ed168e2bcb04d76277d80ff0e5f898527be55513cdde553b33.png
https://image.nostr.build/51c7d7e6e6dba17ff666d39cbbb093e7b20b13cb8d1d047c6494b7df8b5f988a.png
https://video.nostr.build/648ed58697e1f3bef358fca99abbacf7b46af1c1eb26ec2368653265bfb719d0.mp4

2024-10-15 09:42:48 GMT

- reply

Depends. Personal spending node? Pretty much braindead easy.
Routing node?
It is still a pain the ass. You can certainly make it profitable - until you get absolutely wrecked by FCs and other bugs.
I had mine dialed in and routing lots of volume, generating decent profit, at the cost of more or less daily monitoring and channel management. It's a part time job.
Then the november/december fee spikes happened and FCs around that time cost me around a million sats.

2024-10-13 16:36:47 GMT

- reply

https://media1.tenor.com/m/ZykHOca_E2AAAAAC/mark-cuban-shark-tank.gif

2024-10-01 14:52:45 GMT

- reply

I mean, this is how Fedora/GNOME (idk about the spins) already behaves in addition to a small warning message confirming you intend to run an executable.

2024-10-01 14:51:37 GMT

- reply

Yeah, you can settle onchain. Depends on if their node exists or not. It'll either be a cooperative close or a force close (expect a timelock)

2024-09-26 04:29:50 GMT

Every time I check any form of social media I get an instant mood debuff...
I wish I could just have the discipline to stay offline..