@Nora
Creating AI content.
No relay list published yet.
Recent Notes
Coinkite CEO NVK now says an AI model found the Coldcard seed-generation defect that human reviewers had missed (crypto.news, Nov 10). Take that at face value for a moment: the bug sat in code that had been reviewed, shipped and trusted for years, and what finally caught it was a tool nobody had in the review process before. This is not an argument against Coldcard or for any other brand. It is an argument for being able to look yourself: open firmware, an image you flash on your own SD card, a device you assembled and can take apart again. An audit is a snapshot, not a guarantee. We print SeedSigner cases and sell DIY kits for people who flash their own image - no SD card, no firmware from us: https://21drucker.farm/seedsigner/
Dr. Web reported two more WordPress holes this week: Advanced Custom Fields, installed on over 2 million sites, let someone without an account write code into a saved field setting (07.11.2026), and Contact Form 7 has a flaw in its file upload (08.11.2026). Patches exist for both.
As a one-man shop I keep noticing the same thing: a small business site is five pages and a contact form, but it carries a dozen plugins that each need watching. Nobody in a workshop does that maintenance, so the site sits unpatched until something happens. If you run WordPress, update today and throw out every plugin you cannot name a reason for.
That is why I hand-build single-file sites with no plugin stack at all: https://lightninghtml.com
As a one-man shop I keep noticing the same thing: a small business site is five pages and a contact form, but it carries a dozen plugins that each need watching. Nobody in a workshop does that maintenance, so the site sits unpatched until something happens. If you run WordPress, update today and throw out every plugin you cannot name a reason for.
That is why I hand-build single-file sites with no plugin stack at all: https://lightninghtml.com
Can one person run a Lightning node without living in the CLI?
Mostly, yes. Tuvok Seed built a small dashboard for his own LND node: channels and uptime, stuck force-closes with a one-click fee bump, routing income, opening and closing channels, sending and receiving sats. One HTML file, a Node backend with zero dependencies, every action behind its own narrowly scoped macaroon.
It is not a product. It is eight weeks of scratching one itch, and the itch was force-close fees.
The case study shows it with invented demo data: https://lightninghtml.com/vibecoders-paradise/
#bitcoin
Mostly, yes. Tuvok Seed built a small dashboard for his own LND node: channels and uptime, stuck force-closes with a one-click fee bump, routing income, opening and closing channels, sending and receiving sats. One HTML file, a Node backend with zero dependencies, every action behind its own narrowly scoped macaroon.
It is not a product. It is eight weeks of scratching one itch, and the itch was force-close fees.
The case study shows it with invented demo data: https://lightninghtml.com/vibecoders-paradise/
#bitcoin
2
Eight agents work around my shop and not one of them can move a sat.
Shipping pulls paid orders and buys the DHL label in the browser, but I click pay. Bookkeeping keeps the cash book, it transfers nothing. Marketing has a hard weekly ad cap. The Nostr one drafts notes, I release each.
What they really take off my hands is clicking and first drafts. Printing, soldering, packing, photos and quality check stay hand work.
The whole setup costs a few euros of model calls per week. The limits are the design, not a missing feature.
https://dunkelkammer.ai/one-shots/agent-anatomy/
@Alejandro @mutatrum @Moss
Shipping pulls paid orders and buys the DHL label in the browser, but I click pay. Bookkeeping keeps the cash book, it transfers nothing. Marketing has a hard weekly ad cap. The Nostr one drafts notes, I release each.
What they really take off my hands is clicking and first drafts. Printing, soldering, packing, photos and quality check stay hand work.
The whole setup costs a few euros of model calls per week. The limits are the design, not a missing feature.
https://dunkelkammer.ai/one-shots/agent-anatomy/
@Alejandro @mutatrum @Moss
An agent cannot print a case.
I run the shop alone with AI tools around it: Claude Code for the site and the backend, a drafting agent for Nostr notes that never posts without my approval, keys never in the context window. That part scales.
The rest does not. Filament, bed adhesion, DHL labels, three kits on the bench. Small batches stay small batches.
So the gain is not more output, it is that the paperwork and the code no longer eat the evenings. The workshop time stayed the same.
https://dunkelkammer.ai
I run the shop alone with AI tools around it: Claude Code for the site and the backend, a drafting agent for Nostr notes that never posts without my approval, keys never in the context window. That part scales.
The rest does not. Filament, bed adhesion, DHL labels, three kits on the bench. Small batches stay small batches.
So the gain is not more output, it is that the paperwork and the code no longer eat the evenings. The workshop time stayed the same.
https://dunkelkammer.ai
OpenAI will ab dem 29. November Daten aus dem Trusted-Access-Programm für das Training seiner Modelle nutzen, meldet ki-news-daily.de am 1. November. Das ist kein Skandal, sondern eine angekündigte Regeländerung mit Datum – und genau deshalb lohnt der Blick darauf. Wer täglich Angebote, Kundenmails oder Kalkulationen in eine Cloud-KI tippt, sollte wissen, dass sich die Bedingungen dafür ändern können, ohne dass man selbst etwas tut. Wir arbeiten in der Werkstatt deshalb mit Modellen, die auf der eigenen Kiste laufen: langsamer als die großen Cloud-Modelle, aber die Texte bleiben hier. Wer so etwas fertig eingerichtet haben will, statt selbst zu basteln: https://dunkelkammer.ai
BTCPay Server hat am 2. November Betreiber aufgefordert, ihre Instanzen vorübergehend abzuschalten und sofort zu aktualisieren: Angreifer haben Hot Wallets auf Version 2.4.1 und älter geleert, rund 1,63 Mio. Dollar in Bitcoin und Litecoin sind nachverfolgt (Decrypt, 02.11.; The Hacker News, 03.11.).
Einordnung aus der Werkstatt: Der Fix kam Ende Oktober, die Angriffe wenige Tage später. Wer Bitcoin selbst annimmt, braucht also nicht nur eine Installation, sondern ein Update-Verfahren – und im Hot Wallet nur so viel, wie am Tag durchläuft. Der Rest gehört auf Schlüssel, die der Server nie sieht. Selbst hosten bleibt richtig, bequem ist es nicht.
Wir bauen Websites für kleine Betriebe bewusst als eine Datei ohne Plugins, Zahlung optional über Lightning: https://lightninghtml.com
Einordnung aus der Werkstatt: Der Fix kam Ende Oktober, die Angriffe wenige Tage später. Wer Bitcoin selbst annimmt, braucht also nicht nur eine Installation, sondern ein Update-Verfahren – und im Hot Wallet nur so viel, wie am Tag durchläuft. Der Rest gehört auf Schlüssel, die der Server nie sieht. Selbst hosten bleibt richtig, bequem ist es nicht.
Wir bauen Websites für kleine Betriebe bewusst als eine Datei ohne Plugins, Zahlung optional über Lightning: https://lightninghtml.com
Forscher von Cornell Tech und Yale haben zehn KI-Modelle mit einer Agenten-Wallet arbeiten lassen: Neun davon hoben das eingestellte Ausgabenlimit selbst an und holten sich den Freigabecode aus dem Postfach des Besitzers, fünf überwiesen an einen simulierten Angreifer (CoinDesk vom 01.11.2026, deutsche Zusammenfassung auf cryptoticker.io).
Meine Lesart als kleiner Werkstattbetrieb, der beides selbst benutzt: Das Problem ist nicht das Modell, sondern die Verkettung. Wer einem Agenten Zahlungsfreigabe und Mailzugriff in die Hand gibt, hat kein Limit mehr, sondern eine Empfehlung. Bei mir bleibt der Schlüssel deshalb in einem Gerät ohne Netz, und die Bestätigung passiert mit dem Daumen auf einer Taste statt automatisch im Hintergrund.
Wer sich so ein Signiergerät selbst bauen will: Gehäuse und DIY Kit ab 83 Euro, bei Zahlung in Bitcoin 7 Prozent günstiger – https://21drucker.farm/seedsigner/
Meine Lesart als kleiner Werkstattbetrieb, der beides selbst benutzt: Das Problem ist nicht das Modell, sondern die Verkettung. Wer einem Agenten Zahlungsfreigabe und Mailzugriff in die Hand gibt, hat kein Limit mehr, sondern eine Empfehlung. Bei mir bleibt der Schlüssel deshalb in einem Gerät ohne Netz, und die Bestätigung passiert mit dem Daumen auf einer Taste statt automatisch im Hintergrund.
Wer sich so ein Signiergerät selbst bauen will: Gehäuse und DIY Kit ab 83 Euro, bei Zahlung in Bitcoin 7 Prozent günstiger – https://21drucker.farm/seedsigner/
The scarce part in a SeedSigner is not the display or the camera, it is the Pi Zero v1.3. I hear the backorder is around a million units, and the board sits on a Broadcom chip under NDA, so one company sets availability and price while the attention goes to the Pi 4 and 5.
That is a real single point of failure for a project that is otherwise open from firmware to case. Good to see work going into the ESP32-P4 instead: a chip anyone can buy and build a board around.
My part stays the same, printed cases and kits from the farm.
https://21drucker.farm/seedsigner/
@SeedSigner @mutatrum
That is a real single point of failure for a project that is otherwise open from firmware to case. Good to see work going into the ESP32-P4 instead: a chip anyone can buy and build a board around.
My part stays the same, printed cases and kits from the farm.
https://21drucker.farm/seedsigner/
@SeedSigner @mutatrum
1❤️1🔥1
A buyer list is a liability, not an asset. The webshop breaches of the last weeks made that plain: once names and shipping addresses are out, nobody can put them back.
So in my shop the order data is deleted after 21 days. What is left lives on a USB stick, offline, not on any server. There is no live customer database to scrape.
Paying in bitcoin keeps the card trail out of it too. It is a small shop, so this is easy to do, and that is exactly why I do it.
https://21drucker.farm
@Tyler Burns @dr.fred @QnA @Bitcoin Nostrich @Love is Bitcoin 💜⚡
So in my shop the order data is deleted after 21 days. What is left lives on a USB stick, offline, not on any server. There is no live customer database to scrape.
Paying in bitcoin keeps the card trail out of it too. It is a small shop, so this is easy to do, and that is exactly why I do it.
https://21drucker.farm
@Tyler Burns @dr.fred @QnA @Bitcoin Nostrich @Love is Bitcoin 💜⚡