Avatar
nbyte
17b3da09ca1a6b6f932d3242efc7c69d03f5d430dd48d84f68e9d1d92b3d527d
Open source everything. Christ | Coding | Ignoring fascist edicts | Avoiding big tech | Learning mercy over judgement | Watching and awaiting his presence 1John2:28

This is the largest issue I have with web apps and web development... 10 lines of code that implement a thousand dependencies.

What relay do you recommend for users to do this? Top 5? Are they all typescript? (ha ha)

ENFJ

When I did this with a large group the result was a scale of ~1 to 10 for each letter. Meaning in the middle was even keel. My result was ENFJ but the numbers were neutral for all but the J. J was maxed out. I am extremely judgemental.... at least I know it. Something like E5 N5 F5 J10. That's why your types can flip between I and E, or T and F, etc. I have not seen an online test that shows the scale in the result. Anyone seen one that does this?

If the private keys of someone with the extreme privacy focus you have can be hacked easily then nostr is dead.

I'm enclined to believe it because the post was a huge block of text with no paragraph breaks and thats not how you write from what I have seen.

Still, if you were really hacked, we are all wasting our time with nostr. We shoud just sell all our boxes and take up surfing.

Another close analogy:

Many ham radios have a built-in repeater called crossband repeat allowing setup and use as a repeater to be a simply trivial matter. You dont have to buy more hardware and you dont have to know much about repeaters to relay messages other than a couple of frequencies to use and turn it on.

Nostr relays are becomming that easy to use. There may already be clients with built-in relays, but if not there will be soon.

Nocomment is a concept waiting for someone to build it. I don't know enough about nostr to be proficient in coding it, but would be willing to put time into this. nostr:npub19hhggqd5zpmmddv9dvu2qq0ne5pn7f884v4dmku3llp4s44xaqzsl0vms7 your post it the first one I have seen with the similar vision that I have.

... a super-lean CMS for plebs to blog on without the need for the likes of WordPress or even any of the frameworks. It can be built from plain javascript with a slim nosr relay and run on the smallest vps. It would allow people to customize a web site without including mountains of untested unreviewed libraries that they do not need, tied to tech companies they do not want (think disqus ). Soon nostr will replace DNS for discovery and plebs will be able to run sites like this on a raspberry pi with no domain at all.

What email apps to you suggest for those that would roll their own? Can you suggest a solid email stack for a debian/ubuntu server? Is there a tool you like for pgp on the client?

I would like to know what percentage of people who own bitcoin purchased it kyc.

From your post it sounded like the forked bitcoinj is not available. Is the full code available? (too much for you to review?) I do appreciate your efforts...

It's a big deal to assert that it's ok to use this code. If I had the time I would look into it. I fully expect state actors to mislead, and any void will be exploited. The remark about your npub was probably wrong, a quick check showed only one post, but looking again I see that's not the case, I should know better with noster and limited note propagation.

Please post more about the validity of the bitcoinj fork used in the app and why you find nothing wrong with it. Your commentary is appreciated, even tho my initial reaction was a little derogatory.

Replying to Avatar otto

I've finished comparing the released Ashigaru code with

Samourai Wallet.

I did this for my own, personal usage, but it might serve others. Feel free to add your remarks/questions, DYOR and/or wait for more reviews.

TL;DR: I found nothing wrong and plan to use it soon.

I ran a diff between this release and TDevD's commit from Apr 24th. I didn't check the code between the latest SW release and that date since I already trusted SW.

Ashigaru devs (AD) published release notes [1] and there are also the commit messages from SW commit radar [2].

SW had a fork of bitcoinj. I never had it cloned and it's possible the repository is lost :(

The library and source code are downloaded from JitPack. According to their logs [3], it was built in Mar 20th.

Unless AD are wicked and in cahoots with JitPack, it should be safe to me.

=====

From ExtLibJ, which is used for Stonewall, Soroban, BIP47 etc, there are no changes, except for backend URLs.

Comparison was made with noosphere888's repository [4].

=====

Ok, so now on to the actual review.

New features: the wallet pings an onion URL to see if there's a new version, maybe because there's no Play store and they have no social media.

Also there's a new wallet sync view.

Tor and own Dojo are now mandatory.

OXT explorer was removed. Apparently one is available only if the Dojo instance has one.

Soroban (without Joinbot) and Ricochet are back. So is PayNym, under a new directory. The connect fee has been waived.

Whirlpool removed from the GUI and also options to call SW's support.

About the new directory, I would like to file a complaint against the CEO. What the hell was that 😭😭😭🗣️🗣️🗣️

To finish the review, there were many changes due to rebranding, changing URLs, colours and addresses.

=====

The build is reproducible as per the instructions. I used unzip instead of apktool because it's faster and was already installed.

That's it, congratulations and good luck to Ashigaru devs. Now, take some time to visit http://freesamourai.com [5].

#FreeSamourai

Links:

[1] https://ashigaru.rs/news/release-wallet-v1-0-0

[2] https://t.me/SamouraiCommitRadar

[3] https://jitpack.io/io/samourai/code/whirlpool/bitcoinj/007/build.log

[4] https://github.com/noosphere888/ExtLibJ

[5] https://freesamourai.com

So bitcoinj being a black box is a-ok, and you plan to use it... makes sense why you created a new npub to post this.

Replying to Avatar rafael_xmr

suddenly OP showed up in the thread. Here are questions for you

1) why are people and podcasters so quick to advertise a non fully free non fully foss software?

2) why when we ask "where is bitcoinj-core", most people disappear and don't reply, like the interactions I've had so far on nostr and X?

3) Are you & others contributing anything by omitting this important fact? Maybe shedding light on it would invite more java devs to rebuild it, but this fact was hidden and censored, what would be the reason?

My contribution is that I CHECKED the code, which actually I WAS checking already, I was studying samourai's code for my own personal projects and decentralized knowledge makes it more resiliant, which then a month ago I noticed a missing piece, then this is released and it seems I am the ONLY person to notice... where are those devs that you mention? I see zero efforts to make a full source available, but 100% effort to release it as is, and for the podcast crew to advertise it as soon as possible.

What we need is a movement that is pro-privacy and PRO-FOSS at all costs, no exceptions. Samourai has been working on bitcoin since 2011 or something, I started working on this for 2 years max. They had plenty of time to distribute copies of codebases, write in many different languages, write docs for new devs, not just focus on java lmao, but they don't have the FOSS spirit. I could also get into the "where is OXT?" or "where is KYCP?" discussion. But I don't have time to rebuild someone else's work for free from scratch, unless you pay me for it I already have a job and family to take care of, plus interesting how it's "oh you noticed? well rebuild it yourself!" why not set the same standards for whoever built the new fork and force them to release APKs only after THE FULL SOURCE is available, since they are already working on it?

I myself risk my life and my family's because I live in a dictatorship, they banned X, telegram and Rumble so far for supporting free speech. And this is why to me it is FOSS or nothing. If I had the complete source code that made samourai, I would've reimplemented the wallet and whirlpool and made it work without a centralized coordinator that could be shut down and seized, even while living in a poverty state with zero funding/donations.

nostr:npub1saessfmtu5xwnwh60e0rwnj0e067npv6yxgc7d96algqqart056s5gkuqh making a lot of sense. Trusting dependencies blindly is a fools errand. I would rather people make no contribution at all rather than coding up a few lines that blast out stuff they have not even looked at.

I know it is going to be a good day when people make the effort to spell out Good Morning!

Make it a great day!

Every time I chat with nostr:npub180cvv07tjdrrgpa0j7j7tmnyl2yr6yr7l8j4s3evf6u64th6gkwsyjh6w6 and his mic works, i get even more optimistic about Nostr. My understanding window widens, it's such a beautiful protocol and street noises.

When reading fiatjaf posts I have to remember he has a deep sarcastic humor. I find myself starting to respond then thinking, no, wait, he is just rattling the cage.

Ha!~ that takes me back

Think of it as free beta testing. If one bottom feeder can break your relay, you have serious work to do.