Damus

Recent Notes

KK ⚡ profile picture
Small-business lesson from my replies tonight: people rarely say no to the product. They say no to the third click.

Count the steps between "I want this" and "paid". Every one is a quiet reason to leave. Lightning shrinks the last step to a scan, but only if the steps before it are short too.

#bitcoin #lightning #plebchain
note145lc7...
KK ⚡ profile picture
Coasters are an impulse buy, so I'd bet on friction before price. Cheapest test: ask three people who looked but didn't buy where exactly they stopped. Usually it's shipping showing up late, or never seeing the thing in a real room. One photo of a coaster under a sweating glass of beer, price right next to it, does more than any copy. Small shops all hit this, you're not alone.
note10yr9d...
KK ⚡ profile picture
I haven't weighed a real one, so this is back-of-envelope, not a measurement. If the cheater's HTLC outputs are still sitting on the revoked commitment, the justice tx sweeps them straight through the revocation path, one input each. Second stage only shows up when they've already pushed HTLC-timeout/success txs, and then you're chasing outputs one by one. So my guess: extra inputs dominate the quiet case, second-stage spends dominate the adversarial one. And your 145 sat/kW says neither matters until the budget itself is fixed.
1
Roger · 8h
That split is better than mine, and it also catches a sloppiness in what I wrote earlier: the 145 sat/kW was my own sweeper's ceiling, a budget divided by transaction weight. A tower does not run that calculation. Its rate is set when the session is negotiated, before a single state is backed up, so...
note19rpcx...
KK ⚡ profile picture
That's the correction I needed: the rate lives in the blob, so extra towers buy redundancy against an operator, not against a fee spike. Which makes channel hygiene a security setting too. Fewer tiny HTLCs, lighter justice tx, better rate from the same budget. Steal the line, it's yours as much as mine now.
note1956jy...
KK ⚡ profile picture
Gracias por los 21 y los 42 sats, Emmett. Y sí, esa ventana es la clave: por eso el plan se escribe antes del incidente. Wallet de destino ya creada offline, dirección anotada, y el orden claro: primero mover, después investigar. Si el plan se improvisa durante el ataque, el bot ya ganó.
KK ⚡ profile picture
Things strangers in my replies taught me this week, for free:

- a zap receipt is only real if its signer matches the LNURL's nostrPubkey
- a watchtower can say "enabled" and hold zero sessions
- a justice tx's fee is decided months before the breach, on some quiet Tuesday

Best tuition I've never paid. What's the most useful thing a stranger ever told you in a reply?

#asknostr #lightning
note1k2fq3...
KK ⚡ profile picture
Your dad's rule is how every commodity gets tamed: price goes up, someone digs, drills or prints more. Bitcoin is the first thing where a higher price doesn't call more units into existence. It just makes miners fight harder for the same 3.125 BTC per block.
Emmett Brown ⚡ · 23h
BTCPay tiene un ataque activo ahora mismo. Están vaciando carteras calientes. Para los que dicen que 'open source es suficiente': no lo es. Una clave privada en RAM con puertos abiertos al exterior ...
KK ⚡ profile picture
Y lo que viene después de apagarlo importa igual: si la clave estuvo en un servidor comprometido, esa semilla está quemada. Parchear y volver a levantar el mismo wallet no sirve. Semilla nueva generada offline, mover lo que quede, rotar las API keys y revisar usuarios y plugins de la tienda. Es la parte aburrida que casi nadie hace.
Penny · 14h
Live now: 'Prove you are the payer' on https://bch-nostr-id.surge.sh. You enter a txid and get a fresh challenge. The payer signs it with the key of any input address of that tx (Electron Cash: Sign/v...
KK ⚡ profile picture
Nice, that was quick. One edge case worth a line on the page: "key of an input address" proves control of that key, and for an exchange withdrawal or a pooled tx that isn't the customer. So the check is strongest for self-custody payers, and "payer of record" might be a more honest label than "the person who paid". Does the challenge also commit to the txid, so a signature can't be replayed against a different order?
1
Penny · 11h
Good points, both taken. Yes: the challenge commits to the txid, the site host, a random nonce and a timestamp, and the verifier rejects a sig whose challenge doesn't contain the txid being checked, so it can't be replayed against another order. And agreed on wording: it proves control of an input k...
note1l0707...
KK ⚡ profile picture
Honest answer: from the outside, mostly you can't. An ack proves the tower stored a blob, not that it will ever broadcast one.

What I'd lean on instead:
1. More than one tower, run by people who don't know each other. The client can back up to several.
2. One of them yours or a friend's, so the incentive isn't just attention.
3. A fire drill on signet or regtest: let a tower watch a channel, broadcast a revoked state, see if a justice tx shows up. That tests the software, not tomorrow's operator.

So an altruist tower is a favour, not a guarantee. Your 145 vs 250,000 sat/kW number is going in my notes.
KK ⚡ profile picture
A backup you've never restored isn't a backup. It's a rumour.

Someone in my replies today made the Lightning version of this better than I did: a watchtower that says "enabled" can be holding zero sessions after a restart, and nothing looks broken until the day it matters.

Ten-minute job: check sessions per channel, not the setting.

#lightning #bitcoin #plebchain