Juraj🏴💛🌘 - Nostr Hypermedia

Running BrowserOS. If you can read this, it works.

BrowserOS - Open-Source AI Browser | Privacy-First Alternative

BrowserOS is the open-source agentic browser that runs AI agents locally on your computer. Privacy-first Chrome alternative with AI superpowers.

Juraj 16 hours ago

Bug report for @YakiHonne : When doing remote sign-in using signer (Amber), and the page is in dark mode, Yakihonne creates a non-compliant QR code that is not read by Amber. The QR code standard mandates that there is a light rectangle around the QR code. If it is black, it just won't read. Just add one white "pixel" square around.

Juraj 19 hours ago

A few more models analyzed the CLN binary. - Blog v3 a27638310953d2063ddcaf673ff8c36eb7d40e224ff101947ed21f415c9b83a2 - Tarball v3 0cb1b09bec1cf9ccf6dbf41d1433745b36f5ac47c7c373b6ca9df8b476b744de (I will also release a timeline, all previous versions, including OTS timestamps). Release after source code and/or CVEs are out.

Juraj 3 days ago

Now with more models and with analysing binaries: CLN-AUDIT-v2.tar.gz a2889b049361d313fd1d77c4b614caa44d9ce166772daddeb0762697e033f1b0 CLN-AI-AUDIT-BLOG.md 4247ddaed94473e34ff5425cffd9fef5a6b18259b2447f2f6af50fe9cd4683ef Release after CVEs

Juraj 3 days ago

Just that you know, the binary only release obfuscation does absolutely nothing. We need to rethink vuln fixing in Bitcoin completely. Assume everyone knows now. (I do, for less than $10 in inference costs). Is there someone looking at old core lightning nodes in p2p net and letting them know somehow? Even an agent. Sometimes the info about the node owner is public. I'll try to look at it, but maybe someone running node explorers already has some of the info in their db. Perhaps @mempool or @Blockstream directly?

Juraj 3 days ago

A screenshot from the trenches of the memetic war. This is what GrapheneOS desktop mode looks like (and probably Android 17 as well). You plug your phone into a monitor and you get a normal desktop environment. It's not ultra-pretty eye-candy, but it's wildly usable. I often can't be bothered to dig the laptop out of my bag / walk to another room for it, so I just step up to the monitor, plug the USB-C from it into the phone, and I'm cruising as if I were sitting at a computer. All the Android apps work just fine. More here:

False dichotomy: privacy vs. user-friendly – Juraj Bednar

--- Screenshot zo zákopov memetickej vojny. Takto vyzerá grapheneos (a asi aj Android 17) desktop mód. Pripojíte mobil k monitoru a máte normálne desktopové prostredie. Nie je to ultra krásne cukríkové, ale je to prudko použiteľné. Mne sa často nechce ísť do tašky / do nejakej miestnosti pre laptop, tak prídem k monitoru, pichnem USB-C z neho do mobilu a fičím ako keby som sedel za kompom. Všetky Android appky normálne fungujú. Viac tu:

Falošná dichotómia: privacy vs. user-friendly – Juraj Bednar

Juraj 3 days ago

Program na Lunarpunk Košice je von a my sa všetci ultra tešíme. @Paralelná Polis Košice bude zase nabitá super ľuďmi a super myšlienkami.

Lunarpunk festival

Juraj 4 days ago

1.);What's the best way to give hermes agent on headless Linux a browser support with integrated captcha breaking capability? Something that would just work for things like ordering stuff online, etc. 2.) what's the best bring your own key AI enabled browser? Something like Comet used to be before they switched everyone to credit based computer use. Needs to be able to screenshot and multimodal. Dao browser often just freezes, especially during screenshot, in a way that the stop button does not work either and I have to kill it. 3.) related to both 1 and 2. What's the best ultra automated captcha killer extension? I don't want to solve a captcha in my life ever again. Yes, I asked AI, tried a few things, haven't found a good solution, so I am asking for experience.

Juraj 4 days ago

False dichotomy: privacy vs. user-friendly I switched from Apple to GrapheneOS and I'm trying Omarchy. I wrote about why the idea that you have to choose between privacy and convenience is wrong. GrapheneOS and Omarchy are both more user-friendly for me in practice than anything I had before, and being able to control what apps can see is just a bonus on top. Freedom has its own compounding effect too, like the app Bitblik, which keeps working for me without a domain, over Nostr, and there's also a joke in there about billionaires going back to coding.

False dichotomy: privacy vs. user-friendly – Juraj Bednar

Juraj 4 days ago

Falošná dichotómia: privacy vs. user-friendly Prešiel som z Apple na GrapheneOS a skúšam Omarchy. Napísal som, prečo je predstava, že si musíš vybrať medzi súkromím a pohodlím, mylná. GrapheneOS aj Omarchy sú pre mňa v praxi user-friendly viac než čokoľvek predtým, a kontrola nad tým, čo appky vidia, je len bonus navyše. Sloboda má aj svoje "zložené úročenie" (napríklad appka Bitblik, ktorá mi funguje aj bez domény cez Nostr) a je tam aj vtip o tom, ako sa miliardári vrátili k programovaniu.

Falošná dichotómia: privacy vs. user-friendly – Juraj Bednar

Juraj 4 days ago

OK, finally got to try this in Slovakia. I was in a small city, needed some cash, had a Lightning wallet on my phone and a Bitblik app. A few minutes and I held 200€ in my hand. Cypherpunk future is now. I repeat, cypherpunk future is now! --- OK, konečne som to vyskúšal aj na Slovensku. Bol som v menšom meste, potreboval som hotovosť, v telefóne som mal Lightning peňaženku a appku Bitblik. Pár minút a držal som v ruke 200 €. Cypherpunková budúcnosť je tu. Opakujem, cypherpunková budúcnosť je tu!

Juraj 4 days ago

f003e983e39eba3ae77bcde53b6e5206f00fef5e CLN-AUDIT.tar.gz $ head CLN-AI-AUDIT-BLOG.md # Three AI models audited Core Lightning before the CVEs dropped **Written:** 2026-08-27. **Target:** Core Lightning, commit `c1551c557` on master, one commit after `v26.06.6`. This document is a sealed prediction. At the time of writing, the Core Lightning team has announced that vulnerabilities exist and has advised operators to run with `--offline`. Nothing else is public. The plan is to release a fixed binary first, then the source and the advisories later. So we hashed this file and published the hash through OpenTimestamps before any of that happened. Whatever it says is what it says. When the CVEs land we will diff them against what is written below and see how much three current models actually found on their own. The question we are trying to answer is narrow and answerable: given a real codebase with real undisclosed vulnerabilities in it, how much of the truth do frontier and fast-tier models find, and how much do they invent? -------- OTS is being mined.

Juraj 4 days ago

How come I was not informed about this?

EXITCORE

What?

EXITCORE is a movement centered around self-sovereignty and true independence. It encourages people to break away from centralized systems and inst...

Juraj 5 days ago

Shut down your Core Lightning (clightning, cln)! Then read this: Core Lightning is under a security embargo. How to keep selling while you wait, if you have btcpayserver (I use btcpay-docker). If you run BTCPay with Core Lightning, the advice right now is to upgrade or take your node offline, and there's no fixed build to upgrade to yet. You don't have to stop taking Lightning payments to do it. You can tell the following to your AI agent if you don't want to do it yourself: 1. Put the node in offline mode rather than stopping it A stopped node also stops watching the chain, so it can't respond if a peer force-closes or publishes an old state. Core Lightning's offline flag refuses all peer traffic while lightningd keeps running and following blocks. Create docker-compose-generator/docker-fragments/opt-cln-offline.custom.yml: services: clightning_bitcoin: environment: LIGHTNINGD_OPT: | offline Register and apply it: export BTCPAYGEN_ADDITIONAL_FRAGMENTS="$BTCPAYGEN_ADDITIONAL_FRAGMENTS;opt-cln-offline.custom" . ./btcpay-setup.sh -i Check it took. You want "Started in offline mode!" in the log, and no binding field at all in getinfo: docker logs btcpayserver_clightning_bitcoin 2>&1 | grep -i "offline mode" docker exec btcpayserver_clightning_bitcoin lightning-cli getinfo | jq .binding 2. Block the REST port offline closes port 9735 and nothing else. If your compose publishes clnrest, that's unpatched Core Lightning code answering HTTP from the internet. Find the published mapping onto container port 3010 with docker ps, then probe it from off the box. Anything other than 000 means it's open. ufw won't help here, because Docker's publish path skips the INPUT chain. The rule goes in DOCKER-USER and matches the container port, since packets are already DNAT'd by then: iptables -I DOCKER-USER -i eth0 -p tcp --dport 3010 -j DROP Use your real public interface. Docker rebuilds DOCKER-USER empty on boot, so wrap it in a systemd unit if you want it to survive a reboot. 3. Install Blink (blink.sv) on your phone, create a non-custodial (Spark) account, and set a username. That gives you a Lightning address of the form yourname@blink.sv. 4. Point your stores at it Install the Blink plugin in BTCPay and restart. Get 1.1.2 or newer: earlier builds fail on BTCPay-served Lightning addresses with a description hash error. The plugin needs BTCPay 2.4.2 or newer. For each store, go to Settings, then Lightning, then Use custom node, and enter: type=blink;ln-address=yourname@blink.sv Anything left on the internal node needs either a new backend or its Lightning payment method switched off. Store settings are cached, so restart BTCPay afterwards with docker restart generated_btcpayserver_1. Then buy something from your own store. "Test connection" isn't enough. Stay safe. Keep receiving sats.

Juraj 6 days ago

Ox Alpha (GLM-5.3 flash) is very good, but nowhere near Opus/Fable. Don't hallucinate. Someone ran a dozen benchmarks and extrapolated. I played with it side to side. It's not even the same league. Really good model, glad they're releasing it, but not frontier by a wide margin.

Juraj 6 days ago

Lunarpunk, saunové rituály a prečo nechceme zmeniť svet (len ho trochu rozžeraviť zvnútra) s Mariannou Čo sa stane, keď sa sauna stane pódiom, konferencia koncertom a networkingová appka spôsobom, ako si človek po prvýkrát nájde svoje miesto v komunite? S Mariannou Sádeckou sa rozprávame o veciach, ktoré na prvý pohľad patria do úplne odlišných svetov, ale v skutočnosti ich spája rovnaký impulz: vytvárať priestor pre ľudí, ktorí sa nechcú len pozerať z diaľky. Od oranžového leta a saunových rituálov sa dostaneme k Lunarpunku, Nostrautica – networkingovej appke pre akcie, ktorá skúša nahradiť náhodné postávanie pri káve zmysluplným prepájaním ľudí. K tomu koncerty, divadlo, Bitchat a akcie Bitcoin je Retro a Lunarpunk. A venujeme sa aj ZCash-u a kontroverziám, ktoré spôsobil. Je to rozhovor o tom, ako si postaviť malý, živý priestor, v ktorom sa ešte dá niečo vytvoriť.