Those people who think they know everything are a great annoyance to those of us who do.
— Issac Asimov
it's a neat little trick. the DLEQ's original purpose was to prevent tagging by the mint but we noticed that it can also be used to make the signature publicly verifiable.
Some people aren't using Signal because of the metadata but if you're a targeted individual, you shouldn't use a phone for anything very sensitive anyway (you could have been pegasus'ed without ever knowing it).
Relevant section: Carol (another user) verifies DLEQ proof
You check the DLEQ proof the payer includes in the token (which is a proof that the signature of the mint is correct):
> Do you really believe in that?
Yes, I think it's safer to assume that the NSA has a 0-day for every phone than not.
> why should we care
You can't protect against the NSA. But you can protect against the telecom company, the messenger company, and whoever else could have access to the data.
> that would at least make their lives harder
I agree
It works very similar to Bitcoin. A Bitcoin address is essentially a public key and only its owner can spend coins on that address.
With ecash:
- the receiver shares a public key P with the sender
- sender locks ecash to P and sends locked ecash to receiver
- receiver looks at the ecash and sees "the ecash is signed by the mint and it's locked to P" -> it can only be spent by the owner of P (which is the receiver)
"locking" is like creating smart contract and attaching it to the token (it can't be detached). Not sure I understand your question but you don't need a proof, you just look at the contract to see the spending condition: pay to pubkey locked to P
Even if the sender would send it to anyone else, nobody can spend it except for the receiver. That's how publicly-verifiable nutzaps (NIP-61) work: I can post a token that's locked to your npub, everyone can see it, only you can spend it.
Does that answer your questions?
Here is the spec: https://github.com/cashubtc/nuts/blob/main/11.md
not the payer, just the mint
> Can you find any criticism of Signal on the internet by any serious privacy advocate?
Yep, I've had many discussions with privacy people about it, and most seemed very much down to earth about it. Only half-jokingly: It's kinda obvious that they are funded by the CIA and that the NSA doesn't care about e2e because they have root on every phone if they want.
Yes, that's indeed the standard protocol. The receiver immediately swaps the token against a new one with the mint.
The alternative flow is to lock a token to your pubkey and send it to you. Then, nobody can spend it except you so it can't be double-spent.
Their encryption is top notch tbh. MLS is probably better but they're doing some crazy shit to avoid knowing things like group memberships, group roles, etc.
It's quite a lot but I'll drop this here for anyone who's crazy enough to read it https://eprint.iacr.org/2019/1416
Do you remember what the world of chat apps looked like before Signal?
Not quite accurate. Signal for Android has reproducible build and there is also Molly, an alternative Signal client.
https://github.com/signalapp/Signal-Android/blob/main/reproducible-builds/README.md
I hear that simplex is better than signal
Total privacy: no app
Balance: Signal
WhatsApp has e2e, the others are just plaintext. I would avoid WhatsApp though.
FUD'ing Signal is arguably one of the worst things you can do because it drives people to shittier alternatives, not to better ones.
Signal's stated goal is to prevent mass surveillance. It doesn't claim it can protect targeted individuals.
Sir WhatsApp is on another level than the rest here.
WesternBTC is now running a Cashu mint! Another project added to the suite of services.
Learn more about it and how to get started at https://westernbtc.com/mint.
LFG!
What's pokey, should I need it? 🫠
I certainly thought that we would see a thousand side chains by now...
Yes absolutely ;) happy that damus is getting a wallet in either case, looking forward to it!
It's better than X, that's most people's comparison.
do you really think someone who makes such a stupid comment has the ability to write a half-assed essay about CTV all with proper formatting and all
Sometimes I wonder what would have happened to Bitcoin if Satoshi hadn't chosen a hard cap but instead an ever-growing supply.
You could be moving backwards without noticing. Take care anon 🫂.
🐢
🐢
🐢
🐢
...
We should explore decentralised identity here instead. https://www.w3.org/TR/did-core/
OpenID providers are centralised ID providers who devour any data we send to them. Let's try to avoid doing that.
Unless, again, I am missing something.
Feel free to open a PR
Hey nostr:npub12rv5lskctqxxs2c8rf2zlzc7xx3qpvzs3w4etgemauy9thegr43sf485vg does redeem.cashu.me not support v4 cashu tokens? I created one in 0xChat and the site gives me an error saying "Invalid token".
That's right it doesn't, but it probably should! Wanna help?
If you run a web shop, a web hosting business or you offer VPS rental etc. you might want to use Cashu to improve your customer's privacy and avoid having to handle and store toxic data.
Here is how a VPS provider could use Cashu to unlink payments from purchases:
- Costumer logs in
- Charges their account to obtain Ecash minted by your own service (for example Bitcoin in, Ecash out or Fiat in, Ecash out)
- Ecash appears as the user's balance
- User uses Ecash to rent a VPS, paying it back to you
We made everything so easy that this can be integrated into your website using a simple wallet library. From the user's perspective, nothing changes compared to a classical top-up and purchase experience.
That way, you wouldn't need to know which credit card transaction belongs to which VPS purchase. No custodial risk eitther, you're the service provider.
Win win.
MSTR is a litmus test
nostr:note145q4xt8aepyzrz3ucrx5582x6ghaxzdm039fy9zj3l3flqazp6fqnx0dsw
4. Threaten it with violence if it makes any mistakes, research has shown that this increases LLM's math performance on standardized tests.
nutshell mint runners, add your mint's logo to your config:
```
MINT_INFO_ICON_URL="https-://your-url/icon-256x256.png"
```
Hey nostr:npub1arcweuxy0zkdcg08sljh058qp02ytrgnpzh4csa3ar42szyfgrpsw6ggtw, got this error when trying to send to a payment request generated in cashu.me
nostr:nprofile1qqsvxhlccdqyf8cddzh34mzggja5f2wqhrqa6n6dfmauvhsjqwdrfzspzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhgqg5waehxw309aex2mrp0yhxgctdw4eju6t0qyw8wumn8ghj7mn0wd68ytndw46xjmnewaskcmr9wshxxmmdtsxx9q nostr:nprofile1qqsvvlxnux5rm2jkelck7c6akt7mnmvkrycq9xx5wqd93e5wssycx3gpr9mhxue69uhhyetvv9ujuumwdae8gtnnda3kjctv9uq32amnwvaz7tmjv4kxz7fwv3sk6atn9e5k7tcpzemhxue69uhk2er9dchxummnw3ezumrpdejz73lr3ea
PSA local storage is limited to 5 MB
Same and same. No need to oversell a technology that is powerful enough by itself. Freedom go up on all levels of the sovereign stack 🤝
First, you should manually get the ecash from npub.cash (history). I'll run a few test to figure out the issue. Feel free to dm me on matrix @callebtc:matrix.org or nip17 here so we can figure it out.