gm and hello, nostr.
this is my first real post, and i come bearing my proof of work.
it's called verify:
tinfoil hash / verify
verify the integrity of a file with the largest decentralized web of trust
the problem is verifying files is not a step most of us take, even though we all agree on its importance. downloading a file, its manifest, the signatures — let alone understanding pgp and importing / trusting keys — it's easy to brush off when we're just trying to get to running software.
but this extends beyond software. what about that image or video, audio recording, or pdf? there's a standard trying to address these called c2pa. it's over-engineered (just read the 286 page spec), centralized (certificate authorities and trust lists), and steered by big tech and legacy media. they want to keep the power and control.
nostr and its native web of trust makes it possible to solve this in a simple and open way. what i've built is just a start, but i think it shows what's possible. for example, take a look at some files i've verified:
— the bitcoin whitepaper:
https://verify.tinfoilhash.com/b1674191a88ec5cdd733e4240a81803105dc412d6c6708d53ab94fc248f4f553
— sparrow v2.3.1 for mac:
https://verify.tinfoilhash.com/f9d410d1e6cbe64ed08e05d2a26ec404325ce14469d2eadaee9732f21b3aa2c4
— coldcard mk4 v5.4.5:
https://verify.tinfoilhash.com/7076ae29c509d3120db0fae434c132e6abd3fb79c1a2a2f1383ab3b2acaba27c
— bitcoin core v30.2 for mac:
https://verify.tinfoilhash.com/4b8dbdb054f11a30bebbe796dd8f0bda4be2fd5b33b5d2d217c50577208b6a8a
i'm obviously not the original publisher of any of these. the dream is that they would be the first verifying these files when they're released. but i have verified them through pgp and other means, so if you were to trust me, you could trust my verification of these files. the more people in your web of trust who verify a file, the more confidence you should have. i think there's something to more than just the original publisher verifying a file.
a little about myself to make this a proper introduction. i've worked in vc-funded tech for much of my software engineering career. after enough time, it really does start to crush your soul. being in bitcoin for the last 12 years — and other freedom tech like nostr along the way — has been a... conflicting experience. it's hope, yes, but also a constant reminder of how broken things are like our money, our communities, and our companies.
i have made a lot of excuses for not lending my skills to the exodus. yes, the golden handcuffs of vc-funded tech are strong. yes, growing my family and community are important. but i can't even find a few hours a week to contribute where i can? looking back on my life, that won't be a regret?
it was a conversation between
@ODELL and
@calle that finally pushed me to committing. to building. to jumping in. to helping where i can with the time i have.
i may not make as big of an impact as others, but i won't look back and regret not even trying.