EQ > IQ View quoted note →

I have been retired for over a year now and am now looking for ways to volunteer my time. I love bitcoin's ability to help humanity in ways that traditional financial services have failed. I have a 20+ year career in IT/InfoSec (almost entirely in TradFi ironically), but am more looking for ways where simply having an extra set of hands will help people live better lives with the bitcoin/nostr. If anyone needs an extra volunteer, feel free to reach out. Doesn't need to be all the time, but if anyone hears a need for some extra hands anywhere, let me know. ✌ @Geyser @Team Soapbox @My First Bitcoin

Security by obscurity gets a bad rap in InfoSec, but that's if you ONLY are performing obscurity for your security strategy. Security is defense in depth and that depth includes obscurity. Obscurity in reality, is often your first line of defense. Change your defaults when running any publicly exposed service. That includes headers, responses, error codes, banners, and yes...even favicons too. View quoted note →

I know their were some anecdotal reports of users losing their ColdCard funds years ago before all of this came to light. It makes you wonder, with such a low search space with ColdCard's seed generation, those people that lost funds very likely weren't as a result of an attacker stealing their funds, but very well could've just as easily been a result of a casual end user creating a brand new wallet for themselves with a ColdCard only to find themselves with a new fortune sitting in front of them rather than a new empty wallet. 🤦‍♂️

When some tells me the chances of mining a solo block with my single Bitaxe... View quoted note →

It is long passed due that users need to ditch Chrome enmass as well as any Chromium-based browser. They control far too much of the browser market. View quoted note →

GN Nostr

I was just thinking about how NIP-05 is largely useless for most people, but then was thinking about how that is largely because people don't do anything with it other than stick it in the KIND-0 profile. In the event of an nsec compromise, it would be useful *prior* to that happening to sign a KIND-1 note stating what your NIP-05 identifier/domain is. That way if/when your nsec is compromised, you can successfully migrate to a new nsec/npub and refer to that note stating what your true NIP-05 identifier is that can't be forged because if was signed with your old nsec. If your nsec is compromised, the attacker can overwrite what your NIP-05 is in your profile, since relays generally only keep the latest KIND-0 event. But you'll still always be able to refer to that note you signed prior to your nsec compromised since it can't be forged. So yes, NIP-05 can be very valuable in this instance. I urge you all to pre-emptively publish a note stating what your NIP-05 indentifier is so that you can refer to its immutability should you ever need to in the future. View quoted note →

My NIP-05 identifier is tylerburnsveg@anonymousgreen.com — In the event of my untimely nsec compromise, look to this domain for my true Nostr profile.