Damus

Recent Notes

gnukeith · 1w
It's cool to see how many people have started genuinely caring about their privacy after governments began pushing heavily for age verification and VPN bans. It's very validating to know that people c...
silentius-satoshi profile picture
You’re here! I’ve been following you on X (with a lurker burner ofc) for YEARS & so so glad you’re here with us outside of X 🥹

You’re my fav (and only) Brave influencer and hope to see more of your thoughts & content here on nostr! 🫂
Tim Bouma · 3w
Updated Nostr Silent Payments gist at the link below. The gist now includes two example scripts to validate a silent payment transaction and sweep a silent payment transaction. The example scripts ha...
silentius-satoshi profile picture
@Tim Bouma pushed three NIPs to close the full NSP stack – derivation (PR #2355 https://github.com/nostr-protocol/nips/pull/2355), receipt notifications (PR #2362 https://github.com/nostr-protocol/nips/pull/2362), and a Silent Wallet Connect NIP modeled on NIP-47 (PR #2369 https://github.com/nostr-protocol/nips/pull/2369).

The stack handles on-chain privacy cleanly but the wallet service is still a surveillance point – a third-party operator accumulates a complete payment graph regardless of what BIP-352 does on-chain. Posted a design note on splitting the wallet service into two blind TEE-attested components so neither operator can reconstruct who paid whom.

The TEE guarantee is probabilistic not mathematical and doesn’t touch amount privacy or timing correlation – but it closes the operator surveillance gap. Curious if this maps to anything you’ve been thinking about on the OpenETR side.

https://gist.github.com/silentius-satoshi/fd4a4e479f8b9540436b9058b7b158bd
13❤️1
Tim Bouma · 2w
💪
silentius-satoshi profile picture
Signing up with SMS seems so out-of-touch with the current reality of today’s technology & privacy methods

I get that friction has to be implemented somewhere, but SMS is def not the way to do it

potential malicious data harvesting on obsolete tech is part of why we left legacy platforms and migrated to nostr
👍️1
Noshole · 3w
Right?? Or maybe they like the smell of pot 😂
silentius-satoshi profile picture
Trying to create a eBay listing automation workflow for my dad using Google Lens & Gemini (based on his preference) which involves using their API keys

and came across this for the first time. What the f?
👀1
Tim Bouma · 4w
Read my comment in the GitHub repo. Interesting times ahead!
silentius-satoshi profile picture
I worked on the NIP spec last night and just uploaded the updated version - let me know what you think of it & also left you a technical question that needed clarification

I think your npub-derivation approach is the most trust-minimized implementation of the other iterations, but there’s still some work to do on client-side guidance

But for now, the foundation of NSW seems promising
❤️1
Tim Bouma · 4w
Read my comment in the GitHub repo. Interesting times ahead!
Tim Bouma · 4w
We settled on nostr-sp/scan and nostr-sp/spend what are you proposing? It is still early and we can change.
silentius-satoshi profile picture
The tag strings match - great!

The question is the derivation method. Your diagram shows BIP32. The NIP draft uses BIP340 tagged hashes: scan_privkey = int(tagged_hash(“nostr-sp/scan”, sk)) mod n. Same tag strings, different operation, different output keys.

Which does your code actually use? If it’s BIP32 I can align the NIP to match.

Either way let’s nail this down - here’s the draft: https://github.com/nostr-protocol/nips/pull/2355
2
Tim Bouma · 4w
We've had some interesting insights. Can we chat via DM or Signal?
Tim Bouma · 4w
Also connect with nostr:npub1ye5ptcxfyyxl5vjvdjar2ua3f0hynkjzpx552mu5snj3qmx5pzjscpknpr - he has an implementation. My derivation approach took a super-interesting turn. More to come.
Noshole · 4w
😂ever since I got a squirt in the mouth, things have been looking up