Armada is now available on Tor 🧅 http://armadahvhvaj57ojv7mavkqaecdajzejansfiksp5mdscczyh5g7stid.onion/

Looks like Bluesky finally invented NIP-29

AT Protocol

The Atproto Spaces Alpha is Live - AT Protocol

Atproto Spaces, formerly known as “the permissioned data protocol,” is a new extension to atproto that enables non-public data. The alpha is no...

:POLICE: A critical security vuln was fixed in Ditto Android that would allow an attacker to steal your nsec by getting you to tap an evil URL. :wisp_sad: A new version has been released onto Zapstore and Google Play. UPDATE DITTO ANDROID IMMEDIATELY. :POLICE: :POLICE: :POLICE: Ditto on web and iOS are unaffected. The issue only affects Android because it was a problem in the Android link handler. People using Amber are unaffected by nsec theft but should upgrade anyway because the attack is still arbitrary code injection via evil URL. What does an evil URL look like? It contains JavaScript code inside of the URL. The path was not being escaped properly, so it could break out and run any script. The fixed version completely changes the way native code triggers UI navigation (event-driven) so we never inject JS code into the UI at all anymore. Huge shout out and thank you to @calle for connecting me to the team behind

V12

The security engine tuned for your codebase

Tune V12 to your codebase. Investigate security findings with the source, a reproducible proof, and a concrete fix.

who discovered this vuln, and huge shout and and thank you to them for responsibly disclosing it to us. 🙏 They also discovered some other issues we patched in this release, but the evil URL is by far the worst.

People are playing with webxdc in Armada 👀

I'm feeling bullish on encryption and not because of privacy.

Spam testing Armada with @chad

Alex Gleason walks into a room. A power level is changed from Default to Moderator.

You know what's not offline right now? Nostr. View quoted note →

I'm feeling vindicated in my decision to build a silent payment wallet over running a server.

What if your community had a fund that anybody could pay into. Any member could submit expenses, and any staff member could pay them out. A small Bitcoin OpenCollective right inside of your community.

It's no surprise Lightning software is full of vulnerabilities and getting taken offline. This is exactly the type of fragile, complex infrastructure we've been fighting against building Nostr. View quoted note →

So there's no easy way to convert between Lightning and real Bitcoin now? View quoted note →

The language of Undertale is like a decade early blueprint for OpenClaw

The Undertale Wiki

Determination

Determination is a power that allows SOULs to persist after death. The most determined being in the underground is able to SAVE.

TIL hardware RNG works by edging the circuit millions of times per second and then checking whether or not it goons.

Don't bite the hand that eats you.

The best way to generate a Bitcoin seed is to shuffle a stack of 24 Magic the Gathering cards and rubber-band them.

MTG-Bip39 | Magic Cards for Bitcoin Seed Phrases

Convert Bitcoin BIP39 seed phrases to Magic: The Gathering cards and back. A secure and creative way to store your seed phrase.

Selling all my Bitcoin to buy Pokemon cards. It's an investment.