I don't think we will ever have key rotation outside of these shard rotations.

I don't think we will ever have key rotation outside of these shard rotations.

We need to make sharded nsecs the default for Nostr.

Amethyst partially signs with its share of the nsec and sends to Amber. Amber can only finish the signature or reject. Amber should not be able to reassemble the nsec from any event from Amethyst (or any other app).

Now repeat this for every single Nostr app.

No single app has the full nsec. The only way to "leak" an nsec is to break into the code of both apps at the same time.

Frost does that. But for singing only.

We also need sharded encryption and decryption schemes.

I just created an account on a new social networking platform today. I did it because I heard about it on the internet, no one I knew invited me. When I joined I was presented with a feed of a bunch of random posts from random people talking about topics that didn't interest me.

Was that platform called "Nostr"?

Or is that the default expected experience of any person who joins a new social network just for experimenting it?

What is the best long form criticism or caution regarding the strategic bitcoin reserve?

I'm all about building civilization's most incredible and unpenetrable defensive systems, to be used by any community to keep out whoever they want.

“Important information: Warning strike at German airports” how great

When is your fiction book coming out!?

Some people say I should post more about bitcoin on Nostr.

But you already know about bitcoin, don’t you Neo?

Your real question is what you should do with it now.

👍

Clown world can always clown harder.

Well at least bitcoin is on sale.

So we’ve got that going for us.

So the ByBit attack was able to happen because:

Gnosis Safe front end is a web app whose JavaScript gets served from an Amazon S3 bucket.

A Gnosis Safe developer had production AWS keys saved on their machine.

The Dev's machine was compromised and the AWS key used to deploy a malicious front end that only targeted ByBit's wallet.

JavaScript web apps have no cryptographic integrity checks to ensure the code being delivered was actually written by the expected author.

Signing complex EVM transactions can't be done securely on airgapped hardware because the hardware simply doesn't have all of the contextual information needed to know the outcome of executing the transaction.

Eggs are so pricey that "Backyard hen raising" in the city is back in vogue. 🚀

GM

Calm, Around 35k sats. Less or more

Since I've had 120% flu symptoms (cough, runny nose, basically everything) for 1.5 months, I naturally decided to call a doctor (maybe it's that long-awaited long COVID that the communists have been dreaming of), but I couldn't reach the free one, so I decided to call a paid one. Good idea? Sure, but without blood tests, the doctor for the monthly salary of a Russian would be more useless than ChatGPT and would probably prescribe me paracetamol and a popular antibiotic. Fine, how about we do a home blood test? Can we? Of course, but you have flu symptoms, and the nurse doesn't visit sick patients.

Should I clarify what would have happened if I were a corrupt official? With the first call, they would have taken me to a private elite room in a special medical center where they would pretend to treat me with taxpayers' money.