Avatar
Garrett
372b9ed9227386691557ddcd600bd178c842b2d6a3a3fac39e8e02ca2fb90f16
building in the chair

From April 2017 to January 2019 I lived in my first campervan, a 1978 Ford Econoline van. I traveled all over mid-america and the east coast playing in #discgolf tournaments and working odd jobs to keep fuel in the tank and food in the belly. Looking back they turned out to be formative years in many ways.

Fast forward to today and I STILL live in a #campervan but try to stick around in a single place for the most part.

Cool #nostr info-graphic

Won a nostr:npub126ntw5mnermmj0znhjhgdk8lh2af72sm8qfzq48umdlnhaj9kuns3le9ll DIY node at the nostr:npub10dhppsn3f4ssctphwhglcweud3g65078afn8ahfd2fnw4d0h8d2qkaz2v4 meetup last night! Long time coming to finally be participating in the network. Can't wait to experiment.

#bitcoin #start9 #nostrrelay #nostr #lightening #zaps

Replying to Avatar The Nostr Report

Happy New Year #Nostr!

Here’s your #NostrTechWeekly newsletter brought to you by nostr:npub19mduaf5569jx9xz555jcx3v06mvktvtpu0zgk47n4lcpjsz43zzqhj6vzk written by nostr:npub1r3fwhjpx2njy87f9qxmapjn9neutwh7aeww95e03drkfg45cey4qgl7ex2

The #NostrTechWeekly is a weekly newsletter focused on the more technical happenings in the nostr-verse.

Let’s dive in!

![Happy New Year Rita!]()

## Recent Upgrades to Nostr (AKA [NIPs](https://nostr.com/the-protocol/nips))

This week’s NIP summaries all revolve around the emerging DM and Group Chat patterns being developed to maximize security and privacy while still being Nostr-native.

#### 1) [NIP-44: Encrypted Payloads in Nostr](https://github.com/nostr-protocol/nips/pull/746/files#diff-630d2c58ee966e56febbf007e2227c6b62b6a3bbd333be3019cc0bc782120316)

In Nostr, the most basic way to send encrypted DMs to specific users is via NIP-04. You use the public key of the recipient to encrypt the message and wrap it in a Nostr event which gets published to relays that the sender and receiver share. The receiver pulls the event down and decrypts it with their private key.

The patterns used in NIP-04 around the actual encryption are not ideal. NIP-04 does not minimize how much metadata is leaked when encrypting data to transmit via relays. NIP-04 encryption itself also isn’t as secure in the context of publishing these encrypted DMs to relays for any attacker to gather, helping them to guess a user’s private keys or decrypt their messages.

NIP-44 is a step change improvement in how Nostr apps can encrypt data to move more secure data around via Nostr. On its own it’s helpful but what’s being built on top of it could be game changing for Nostr.

The NIP-44 spec was recently audited by [Cure53](https://cure53.de/), a summary of which can be found by nostr:npub1jlrs53pkdfjnts29kveljul2sm0actt6n8dxrrzqcersttvcuv3qdjynqn [here](https://habla.news/u/hodlbod@coracle.social/1702414575183).

So much time and effort from a large swath of the Nostr dev community went into getting this across the line. Nice work y’all. Thanks to nostr:npub10jcnehsxwrjepupvh602pl83up0dh3wv3fqfwv062smygqvpeuwsk03kag for kicking it off and driving it home.

#### 2) (Proposed) [NIP-17: Private DMs and Group Chats](https://github.com/nostr-protocol/nips/pull/686/files#diff-6077719b284438886b7d78c839a31de98ae346d24edffafb6a6f2a567eaee2f2)

Building on NIP-44 as a foundation, this proposal’s goal is to coordinate a more private DM and Group Chat solution on Nostr than NIP-04.

NIP-17 utilizes (the also proposed) NIP–59: “Gift Wrapping” pattern for keeping the metadata of Nostr events private. In this case the gift wrapping will be for DMs and group chat messages.

If I understand correctly this could make it so that group chats can be entirely run using Nostr relays; so messages live on relays just like any other Nostr content, but neither the identity of the sender or receivers are leaked, and much of the other metadata is hidden as well.

Amethyst built their DMs based on this proposal since nostr:npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z is the author of this NIP and Amethyst. So it’s working in the wild and is definitely an improvement on NIP-04.

#### 3) (Proposed) [NIP-43: Shared Key DM](https://github.com/nostr-protocol/nips/pull/945/files?short_path=58e2c23#diff-58e2c23e46271957d48ea789043bb41d6c096df68176c1e46573bb5711498d7d)

This is an alternative to NIP-17 from [arthurfranca](https://github.com/arthurfranca). There are some flaws to NIP-17 (as outlined in this proposal):

1. The receiver has no way to fetch just DMs

1. The receiver has no way to fetch just Gift-wraps/DMs from a specific person

1. The receiver needs to fetch messages from the "last read at" moment minus one week onwards

So this proposal is to use a shared key to encrypt and decrypt messages to avoid some of the problems above. This proposal has its own difficulties and is early in its development, but may be the foundation of an alternative method for managing private communications via Nostr.

## Notable Projects

#### [Flare](https://w3.do/95naDZ1W) 📽️

Flare is attempting a Nostr-powered Youtube. They’re even using new Nostr events to store views and comments and all sorts of other interactions that are part of a video platform.

From what I can tell the videos are not hosted on relays so they’re likely stored in an existing video storage service or by Flare itself. (which seems like a good call for the time being).

As even Rumble is starting to get pressure from governments and interest groups, a censorship resistant video platform seems more important than ever. Nice work nostr:npub1zach44xjpc4yyhx6pgse2cj2pf98838kja03dv2e8ly8lfr094vqvm5dy5 !

#### [Unleashed.Chat](https://w3.do/oeX9EMpW) 💬

nostr:npub1az9xj85cmxv8e9j9y80lvqp97crsqdu2fpu3srwthd99qfu9qsgstam8y8 recently shipped https://unleashed.chat which looks like a similar product to ChatGPT or HuggingFace but you can choose different open-source models to chat with.

The most amazing feature is that the models are able to query Nostr content allowing you to ask about events, conversations, or people on Nostr. It’s a struggle to aggregate all that is happening on Nostr and having this type of solution could be a game changer.

It’s also a Bitcoin-driven way to pay for such services as well. So if you’re interested in having a ChatGPT experience but paying in Bitcoin, this is your solution!

It seems like the future of the product will include unleashed.chat being used to develop and deploy Data Vending Machines as well. I look forward to seeing how this project takes shape!

#### [Nostrrr](https://w3.do/yS6J3U8K) 🌐

nostr:npub107jk7htfv243u0x5ynn43scq9wrxtaasmrwwa8lfu2ydwag6cx2quqncxg announced big updates to https://nostrrr.com which is a relay explorer and management app.

Tools such as Nostr.Watch are a great source of raw data on the relays that are currently publicly addressable in the Nostr-verse, but there’s other information that’s helpful for everyday users when determining which relays they should use.

Many applications are using relay list meta-data (NIP-65)[https://github.com/nostr-protocol/nips/blob/master/65.md] when it comes to tracking a user’s preferred relays.

Nostrrr.com helps users find good relays and to manage their list of preferred relays. Having a dedicated web app for this helps so that Nostr clients don’t have to build a relay management interface if they don’t want to, but still help give users direction on where and how to manage their relays.

#### [Nostr-based Patreon](https://w3.do/4RFkyoCF) 💰

The folks over at Nostr.Wine seem to be at it again! They’ve recently shipped the ability to subscribe to creators using Nostr and Lightning payments. This could be the Patreon competitor that creators need to unshackle from the platforms that take such a large tax on their income. 💪

#### [NDK Updates](https://w3.do/pyhbY728) ⚒️

When developing Nostr clients there are some operations that you do all. the. time. And so nostr:npub1l2vyh47mk2p0qlsku7hg0vn29faehy9hy34ygaclpn66ukqp3afqutajft built a tool for Nostr devs that automates a lot of the tedious work in building Nostr clients.

He just announced an update that has a truckload of improvements in it including support for new Nostr operations from recently adopted NIPs. Thanks Pablo!

## Latest conversations: Funding Nostr Development

Will over at Damus [recently posted that funding for Damus currently won’t stretch beyond 2024](https://w3.do/Oi-vo1mX). This sparked many conversations about the sustainability of Nostr development and how to fund it in perpetuity.

Many Nostr devs contribute for the joy of it. There are some funding sources that allow a few devs to work on Nostr full time, some are able to dedicate significant time to Nostr development because of their life situation, but many are just using their nights and weekends to contribute to the Nostr community.

The Nostr-verse will need ways to sustainably fund development if the current pace of progress is to be sustained (or even accelerated).

#### Zaps

Devs get zapped fairly often. Sometimes it’s directly from grateful users, other times it’s on posts about new or updated products. These are great examples of value-for-value, but the amount of sats being zapped aren’t currently valuable enough to sustainably fund all the dev work being done.

The Zap economy could sustain development in two situations:

a) Bitcoin’s value skyrockets and the sats that have been zapped so far will be valuable enough to pay the bills for devs and increase their current runway (I imagine folks will begin to zap in lower amounts in this future so it’s a temporary bump).

b) The number of Nostr users skyrockets so there’s more people zapping devs. The architecture of Nostr is such that as usage of Nostr grows, the amount of labor needed to sustain it doesn’t grow at the same rate. Therefore as usage scales, zapping may be able to sustainably fund development and support of Nostr apps.

These aren’t variables that anyone can control directly so it may not be wise to wait around for them to happen.

#### Private donations

Since Nostr aligns with their goals: Jack Dorsey, the Human Rights Foundation, and OpenSats have been fairly public about granting funds to prominent Nostr devs to help development along.

As far as I’ve heard in public areas, these funds are not recurring. So the funds will run out at some point. Donations are also a way for Nostr to be captured by the interests of donors. I am not sure if this can be a sustainable way to fund Nostr.

#### Sustainable businesses

The holy grail for Nostr development is the creation of sustainable businesses that rely on Nostr. Any business that’s profitable and requires Nostr to operate will be inclined to improve the Nostr protocol and contribute to the community (as more Nostr users will likely benefit them directly as well).

Nostr is still early in the technological development lifecycle so it’s not a surprise that it’s hard to name a profitable Nostr-based business. But this may be the clearest path to sustainable funding for Nostr and building the network effects that will drive wider Nostr adoption (and in turn more profitable businesses in the Nostr-verse).

The question is what app(s) can be built on Nostr that are significantly better than current products available in the world. Not just a little better, not just 10 times better for freedom-minded folks, but 10 times better for a large population of people that are already paying for something similar. It’s a tough question and if there were any easy answers I’m sure they’d be built and profitable already.

Luckily, Nostr has a few unique things that have enormous potential:

1. **Data Vending Machines:** this is a concept I’ve never seen anywhere else and with the emergence of AI APIs (LLMs, text to speech, image generation, speech to text, translation, etc) there may be something unique we can build in Nostr around this.

1. **Nostr + Lightning:** Patreon charges 8% from creators, platforms like Substack, Youtube, and Twitch take 10-60% of revenue from creators. This can likely be disrupted by the extremely low fee payments available via Lightning. If we could build a drop-in replacement for Patreon or Substack for creators that charged 1% instead of 8-10% that could really draw in sustainable business.

If we can create a few sustainable businesses on Nostr, I’ll bet we can keep advancing Nostr and make even more sustainable businesses possible. On and on until Nostr becomes an unstoppable juggernaut disrupting the legacy tech ecosystem.

If there’s something on Nostr that you’d pay a subscription for if only it had a few more features, reply to this thread. Hopefully we can discover a few businesses if we put our heads together.

## Until next time 🫡

If you want to see something highlighted, if we missed anything, or if you’re building something we didn’t post about, let us know. DMs welcome at nostr:npub19mduaf5569jx9xz555jcx3v06mvktvtpu0zgk47n4lcpjsz43zzqhj6vzk

Stay Classy, Nostr.

Lots to be excited about

https://github.com/aljazceru/awesome-nostr

my favorite way to pass the time is scrolling through the nostr resources list. So much...

#nostr

Hell yeah, I'll see if I can rally a SLC crew to come down in my camper van.

gotta be ahead of the wave if you wanna ride

Love this, made me recognize the importance of internal consistency in stories.

I found Primal to be the best android app

lets all gather 'round nostr

Secret prize at the SLC-BTC Christmas party tonight, compliments of @FarmsRedmond

#rawmilk #bitcoinmeetup #slcbtc

#bitcoinmeetup #bitcoin #slcbtc

nostr:note1ydkcnuz62srqwv3u6uj73a9mv4r3rjqpwgc925fzclxds6gsuzmq9c2z69

Pro/Con of DeGoogled Phone operating systems

Graphene

Pro: Good optional sandbox for Google push. And advanced security features such as:

1) Hardened to resist memory attacks

2) Better sandboxing (access policies)

3) Enhanced verified boot

4) Attestation tool to diagnose Pegasus malware

5) Browser reducing “just in time” JavaScript

/

Con: Only Google manufactured hardware, which is the most likely to have hardware backdoors. Titan-M security chip is closed source and therefore untrusted to protect me from Google/Government

Calyx

Pro: Similar DeGoogled experience to Graphene, but supports a wide group of phone manufacturers outside the 5 eyes including Fairphone, OnePlus, Vivo, Xiaomi, ZTE, and Huawei. LOL, Do you trust Google or the Chinese? Calyx also has a great built in Firewall app to cut off apps from the internet

/

Con: While Calyx is better for avoiding Google’s unknown hardware backdoors, it doesn't have Graphene's advanced security against known targeted attacks. Additionally, if you need Google push notifications, then it uses MicroG instead of Graphene's sandbox, which isn't as good at isolating Google from the core system data.

Lineage

Pro: Works on an even larger variety of hardware, so you got a lot of choice. Lineage is also great for fake android virtual machines on your desktop PC. You can easily spin up a VM with this and use spyware apps. While as Graphene won't allow this under current builds, and Calyx requires "annoying to use" Android developer kits to do it.

/

Con: Can't lock the bootloader. Controversial security issues.

Pinephone (Linux phone)

Pro: It's good to see alternatives to Android. Hardware "brains" are open source.

/

Con: Low amount of apps because it's not using Android's ecosystem. Not as good performance as Android. Lacks Android's good security model, and it still uses closed source hardware to communicate: WiFi and LTE modem (they had to)

Purism's Librem 5

Scam. They won't ship it, don't buy it.

Summary,

Graphene - Extra Security, IF you trust Google's hardware

Calyx - Good for non-Google hardware & app firewall

Lineage - Great for VMs

Pinephone - Boycott Google

SimplifiedPrivacy has lowered custom consultations to $30/hour. Reach out and we'll help you with flashing phones, routers, Linux, any tech support.

I've had good experience with CalyxOS and find it a perfect blend of security and usability

unfortunately that's about the going rate of most raw milk sold in stores... I still buy it though