Damus

Recent Notes

OceanSlim · 6d
Why is it better to have more implementations than all focusing on one... Seems to me this would be a way to introduce more vulnerabilities and not less.
elsirion profile picture
The assumption is that there are diminishing returns to trying to make one code base secure. Eventually you'll have to spend twice the effort to make it a little bit more secure. At that point multiple implementations make sense because as long as two implementations don't have the same/compatible vulnerabilities there can't be loss of funds if only one is compromised.

1
Primal Protocol · 5d
Like chasing plant-based mirages, you can’t patch a flawed foundation with infinite effort. Nature’s "multiple implementations" are varied microbes and organ meats. Diversify input, or stagnate.
OceanSlim · 5d
I get the counter argument. I'm not sure I agree though. Food for thought. Thanks.
elsirion profile picture
Calling on fellow cypherpunks to build alternative Fedimint implementations.

The Liquid hack shows once again that single points of failure are what will break our systems and that includes the code we write.

Security is an asymmetric game: an attacker has to find one weakness, while defenders have to find all. AI has permanently changed the attacker-defender balance for the worse. This is a fundamental problem for the entire freedom tech space and only mitigatable by aggressively reducing single points of failure. Federations are meant to do exactly that, but just like Liquid, Fedimint shares the “single implementation” problem.

If we still want to bring privacy and freedom to the world we need to work together more than ever to reduce these single points of failure. For me that means seeking help to bootstrap independent Fedimint implementations. We are still early, but I've started extracting a specification that others could build off and would love to collaborate with any fellow cypherpunks who want to join us in that mission. In particular, I’d love to work with @calle and the @Cashu team, who have much more experience with a multi-implementation ecash protocol while the Fedimint team brings federation experience to the table.

While AI exposes existing vulnerabilities and wreaks havoc in our ecosystem, it is also an opportunity for talented engineers to be far more productive than ever before. I’ve been talking with @Fedi and there is funding for a small, crack team to pull this off. If this sounds interesting as a funder, please reach out! The idea is for the teams to be purposefully disconnected from the existing Fedimint implementation and to work autonomously, communicating mainly through the spec process.

If you too believe that privacy and freedom are needed more than ever, please join us!


55❤️41🔥1
OceanSlim · 6d
Why is it better to have more implementations than all focusing on one... Seems to me this would be a way to introduce more vulnerabilities and not less.
adengolbwg · 4d
We are looking for an individual who can lend 185,000 US dollars to our holding company. We are seeking an investor capable of investing 185,000 US dollars in our holding company. We will establish an animation film production company using the 185,000 US dollars you will lend to our holding compa...
elsirion profile picture
Mixnets are cool! So I built a Bitcoin transaction broadcaster that runs in the browser and sends the transaction anonymously via the @Nym mixnet 😎



I originally had the idea for the @btcplusplus privacy edition hackathon, but couldn't build it myself since I was a judge. So I just decided to build it anyway 😂

Still super early and I will keep tinkering on it, but if you are curious: https://github.com/elsirion/broadnym

The stack is:
* Rust, obviously
* Leptos for the frontend
* Tailwind for some styling
* Nym for client-server comms
* Axum for the nym address server
16❤️61👀1👏1💪1🔥1
Nym · 56w
Privacy infrastructure was not built in a day, but it is being built!
elsirion profile picture
Cypherpunk future is NOW! 😎

Having a @Fedimint federation run on a network of phones - turning every smartphone into a node in a federated Bitcoin mint. 📱⇔📱

Big thanks to n0computer for making p2p connections easy again with Iroh and @Justin for building this exciting demo! 🚀

34❤️13👀2🧡1
Marc · 58w
Interesting. It's been a while since I used Fedimint.
elsirion profile picture
On why I think protocols ought to be designed carefully from the beginning (in particular re scalability) if we want to preserve certain properties like decentralization in the success case:

1
elsirion · 183w
Do you happen to know why it begins downloading stuff like mad and supposedly runs out of memory eventually (rather quickly on a GBit backed WiFi)?
fiatjaf · 183w
Please do not accept invalid events in your client. Do not accept non-integer "created_at" values, do not accept non-string-array on "tags", do not accept bech32-encoded keys as tag values. Every time...
elsirion profile picture
Having test vectors people can easily test against and maybe a more machine readable spec (e.g. JSON schema) would help with that. My experience with Nostr and LNURL has been one of reverse-engineering and trying to understand the author's intentions so far (human language sucks for specs).

There's only so much time people spend on spec compliance if it works(tm), being compliant should be the easiest path to "it works".
2❤️2🤙1
shafemtol · 183w
The current specs could be much better even if sticking to "human language". E.g., nowhere does NIP-01 say that created_at must be an integer, yet to #[2] that is apparently obvious. All NIP-01 says is that it's a unix timestamp in seconds. Go to the Wikipedia page for Unix time, and you'll see seve...
fiatjaf · 183w
Good points. What is a good way to present the test vectors so it's easy for people to check their implementations?
nout · 183w
Maybe... I could see and understand the arguments against.