Americans, now that lnurl is getting some adoption, if you host your own lnurl server make sure you're blocking Iranian, Cuban, North Korean, Russian, and Syrian IP addresses so that you don't wittingly accept a payment from users in those countries! Not worth jail time or fines.

Just got around to setting it up on mine, luckily nginx makes it easy.

Reply to this note

Please Login to reply.

Discussion

Maybe next time folks will use private protocols, but hey, I don’t get to decide what people use.

If only there existed a lightning native way to post a static, reusable address where the destination route can be blinded. 🤔

It's too bad such a thing doesn't exist for most LN users.

oh look, the privacy people are finally here to save us

Oh hell yeah boi!

🔥

Are blinded paths possible with BOLT11?

Could it be added as a stand-alone feature? Or would it depend on other things that only come with BOLT12?

Saw it mentioned in the LND repo, but as a sub-task of adding full BOLT12.

It could be added to BOLT11, yes, but BOLT11 describes single-use invoices, lnurl solves the multi-use problem (by breaking privacy). The only solution to that is BOLT12.

Why is there such a lack of support/push for BOLT12?

How far is BOLT12? Not done yet, right?

Shipping in CLN+eclair now, Phoenix soon, LDK Very Soon

It's been usable as a draft experiment with CLN for years. Soon interoperable implementations and the finalized standard happen. If you used the previous BOLT12 draft you'd only need to update your static address after the new standard. Hence bolt12.org warned don't get the QR tattoo.

TheBestMatt

America sucks.

Nah, non-private protocols suck.

👌

You should be able to transact with who you wish.

I just tried to zap you but can’t get it to work.

And who decided that those countries are evil? Is the Evilist of them all USA itself. what is this country God of the world does everything it wants and dictates what it wants. Are you all just going to bow down to a bully of the earth. There is no lightning without on chain tx so are you just going to say that for those tx also . Go suck your own schlung. We don’t live in a unipolar world anymore it’s over.

I would never block a country. Luckily I don't need to obey to US's rules.

What’s next, blocking these IP ranges from our nodes?

I don’t see why that would be mandated by sanctions law - you aren’t sending or receiving a transaction by it passing through your mempool, nor are you processing it in any material way towards the transaction’s completion.

To be on the safe side 👇 😂

You never know when another country disagrees with us and we declare them evil/dictator/terrorists.

To be on the safe side, use a private payment protocol so you don’t have this issue to begin with!

I see your point.

How about a name server on top of tor etc, mapping registered on blockchain? bad but better than storing ordinals.

Like user@domain.tor; when clients see .tor they will look up the tor address instead.

Nota para reflexionar

#[0]

🤔😐

The amazing thing about Bitcoin is that people from those countries don’t have to ask permission to join the network. This is true public infrastructure. By the people for the people.

But this is unfortunately true. I’m not Bitcoin and neither are you 🫤

#[0]

So if someone joins Nostr, they're in Iran, and I zap them a few sats, I'd go to jail? 🤔 Maybe if bitcoin were money, but it's not.

#[0]

If you know they’re Iranian, yep! That’s the law.

you can't be reasonably held accountable for knowing that based on an lnurl

Yes you can, that’s the law

its not, actually. the law is about knowingly doin businesses. read it. read the cases. this is a made up fear

Not all crimes require the gov’t to prove intent.

You mean those crimes where the government is the criminal and trying to lock you in for it?

It's not about intent, it's about knowledge

If I zap somebody 2 cents for a post, and there's no reasonable way for me to know where they are from, and no reasonable expectation that my 2 cents matters

I will happily break that law and happily win in court

In the case of companies that are doing large amounts of transactional business with repeat customers

and have access to their IP addresses and have reasonable knowledge of where they're from

those are the ones that get fined

In fact if you look at the web page around the sanctions you can see that that there's a lot of language around this

it has to be a significant amount of business and it has to be where you know who you're doing business with or your required to know who your business is with

not all transactions require full KYC

there are transactional limits

and obviously if you're shipping

https://home.treasury.gov/policy-issues/financial-sanctions/sanctions-programs-and-country-information/iran-sanctions

If you’re running an lnurl server you know the ip. Thus you at a minimum have to make a best effort here

oh I would agree for that

I just don't think random zaps on nostr matter

No, not everyone has to care about what US authorities say.

And aside from that, it has no moral or ethical authority. These sanctions are implemented only to mollify rich US Jewish groups (AIPAC), to punish political enemies, for economic hegemony (nordstream demolition), etc. ad nauseam.

It’s all 100% bullshit.

Bolt12 and blinded paths fixes this.

Waiting for Godot.

#[0]

To Iranians, Cuba's, north Koreans and Syrians: feel free to zap me as much as you want

#[0]

same. this is ridiculous. good luck finding out whether or not i sent someone in iran sats. i'll wait.

There's a lot of buzz around your post.

Added to the https://member.cash/hot feed

You can go to jail for accepting a Lightning payment because you know the sender's IP.

Can you go to jail for accepting BTC on chain from a sanctioned entity, if you don't know the sender and the sender's IP?

Nope! (Well, basically no, IANAL, though, talk to one)

🤡🤡🌈🦄🦄

Any Russians, Syrians, N. Koreans, Cubans etc currently in those countries following me? I'd like to do some illegal money transmissions.

#[0]

Ecash (Fedimint and Cashu) fixes this ...

#[0]

Lots of things fix this. In fact basically anything but lnurl fixes this.

Touche

Is your LNURL system blocking me in Israel?

Ahh no, simple CORS issues.

Access to fetch at 'https://bitcoin.ninja/.well-known/lnurlp/matt' from origin 'https://snort.social' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled.

Grrrr I thought I had added that, guess I forgot

Can see how lnurl might be an issue since you are contracted directly "out of band". What about bolt12? Your not accepting a payment from "Igor". You're accepting one from a few people in-between and probably never heard about said person.

You're^ *autocorrect is evil*

Or just being in certain Asian who’s neutral to a lot of politics.

And likely also have a North Korean or Russian embassy

Hmm 🤔

#[0]

Isn't that a mere alibi exercise if we assume those guys have heard of VPNs as well?

What exactly is the nginx config that fixes this?

if ($geoip_country_code = "CU") { return 451; }

if ($geoip_country_code = "IR") { return 451; }

if ($geoip_country_code = "KP") { return 451; }

if ($geoip_country_code = "RU") { return 451; }

if ($geoip_country_code = "SY") { return 451; }

Okay, I know, not perfect, but making a best effort goes a long way.

Sorry, you also need to have the geolitecountry.dat from maxmind (eg the geoip-database package in Debian) and set “geoip_country /path/to/file” in your config.

#[4]

Interesting topic...things develop fast. Adapt accordingly. #[1]

Everybody is afraid of "jail time" but nobody say a word about "who the fuck is this gov that is concerned about from where I received my money"?

I really don't give a shit if somebody from those countries pay me in BTC.

If any gov agency come to me asking why I received those sats I will reply with the question:

"who are you and from where is coming your authority over my own money. Show me the document where I signed and consent that you would have such authority over me, the living man". There's no such document and they do no dare to say anything about. If they would say something that will mean SLAVERY and they will have a bigger problem to recognize the slavery in public.

STOP living in fear.

FUCK THE GOVERNMENTS.

Nobody can rule if no ones obey.

💯

As Samson Mow observed: witch-hunts no longer works when everyone is called a witch.

Similarly, Ceaucescu no longer had support from 'his' army when the people turned on the totalitarian regime.

You missed the point

And here I was thinking that #Bitcoin is;

- global / borderless & permissionless [an open system of money, where anybody can participate],

- decentralized and censorship resistant [you cannot control where bitcoin money is transmitted & it is not attached to

identities or geography].

Personally I think the USA wants to have a planet of its own.

Bitcoin is, lnurl isn’t

Still can’t believe we’ve come to this

Hey #[0]​ let’s make sure that we as bitcoiners fight for freedom and then the focus on the Note should express that

Yes, I understand there is that risk and I understand you may be trying to help people not to go to jail for that but we can’t simply give up to such censorship

#[1]

I think you missed the point

He’s a blue-haired faggot. What do you expect?

This is part of the reason lightning is not as great as people think. This can’t happen on BTC, on Monero, or even on BCH. They’re uncensorable.

Didn’t want to be rude in that way. I respect #[2]​ but I don’t like the way he tried to make a point here

Not much point in trying to be civil when someone is supporting the exact antithesis of everything bitcoin was supposed to be for. It’s pathetic and it angers me. Normally I’d support being civil, but this stuff is truly wrong and harmful…

We’ve had finance dominated by TPTB for hundreds of years. We don’t want that anymore. Is that what lightning is going to be??

Just don’t use lnurl, bro.

I also don’t like the fact that LNURL/LNAddress tend to move people into custodial solutions .. I wish we don’t stop the fight for coming up with a standard that allows full self custody

There's nothing stopping somebody from accepting whoever they want on their lnurl server If they have no fear of the law. This is how to decentralization works. He can run his own server and decide not to censor anybody if he wants to, of course there may be reasons why he won't want to do that. Those reasons are the same If he decides to send monero to people in those regions.

The problem is that there’s nothing stopping somebody from blocking whoever they want from their lnurl server. But on bitcoin, no transaction can be blocked.

You're wrong you can create a protocol like this even for Monero and if you have to run a server for it you'd have to block countries that you don't want to serve for whatever reason. It is nothing to do with lightning in particular except that this is a service that you run on lightning instead of Monero or whatever.

no thanks. i'd rather just host my lnurl anon and make sure it cant be traced to me

I think you missed the point

The enemy is in its weakest position in 100 years. The time for open defiance is upon us.

That doesn't sound censorship résistant :(

LNURL isn’t!

If I put a pubkey@onion:9735 I would be able to zap an Iranian waifu