Avatar
Matthias
ad941987659b6723589f8fb6a3c65f5a6cbaf42d80fa2e6c4615e2f152cafaa1

Always read the Terms of Service and Privacy policy. I was just upgrading my LG TV to WebOS 13, with a slew of new asks:

- Terms of Service

- Privacy Policy

- ... 6 sub categories of data sharing with third parties.

I unchecked the third party stuff, but I was appalled to see in the LG privacy policy this statement:

LG will not only record what you watch through their WebOS software, but it will also use ACR (Automated Content Recognition) to recognize anything you're playing on the TV even through HDMI inputs.

So even the DVDs or the Chromecast content that you play, gets vacuumed up by the data monster, to sell to the brokers.

I don't care if it's anonymized or not. They have no business collecting what I watch. **It's beyond impolite; it's actually offensive.**

Anyway it's possible to uncheck that box, and the TV still operates. So at least there's that.

Replying to Avatar Dawn

Freedom | Control

The early Underoath albums are the only ones I like. It's screamo, but it has a distinct reverence for God, which makes it an even more potent depiction of human struggle.

It even depicts the struggle of passion of the Christ, if you have eyes to perceive it.

There is so much meaning in between the words of the lyrics, and I'm sure I'm not just making it all up.

Currently listening to Casting Such a Thin Shadow, from the album Define the Great Line.

"I've become a stick figure illustration"

Later albums aren't the same. Band members changed.

Apparently the IRS has a crypto unit. Interesting.

It doesn't exactly say how they were able to catch them. It says they tried to anonymize themselves but apparently there was a fatal flaw somewhere.

Which was obviously good in this case because these guys were bad. But if the government turns bad, I'd want bulletproof anonymity. I wouldn't want the government to be able to associate me with a Bitcoin address.

I think it's a troll. Anyone who uses the term "fiat" is on the side of bitcoin. I think they just reversed the words.

Yeah it looks like NIP-26 "Delegated Event Signing" can be used for this.

The delegator would be the master key, and the delegatees would be the low-security keys.

It doesn't look like there's a revocation mechanism, and delegation has time bounds, so you'd need to generate new delegatee keys periodically. Which can be an airgapped operation.

Is there a NIP for key backup and recovery to handle situations like this?

One clear protocol would be: create a master key locked in a vault or whatever, and have other lower security keys. But you also need a two-way signed attestation:

- master key: I control this other key.

- other key: I am controlled by this master key.

That signed attestation could be a VC that could be presented at any time to a compliant nostr client, for account recovery.

... but it would also need to be visible and supported by all consumers of your data that was assigned by your old key.

Using pubkeys to log in is so great. It's self-custody for user identity. I can't wait for it to take off, but right now it's hampered by two things:

- requiring a browser extension, and

- the backup/recovery story

There is FIDO with passkeys, which is built in to OSes, but you can't manually back up your keys, and there is no mechanism for backup besides letting Google do it for you. Then you're still tied to a Google account.

With Nostr extensions you can see and manually back up your keys, but the extension is required. This makes it especially hard on mobile because the major mobile browsers don't support extensions. So you have to use an alternate browser.

How does someone lose OPSEC like that? Just curious. They lost their nsec? Or exposed their IP address? Or what?

Hi #buildinpublic, I implemented some stripe webhooks yesterday, with some postgres tables. Now tracking checkout sessions 🙂

Wish I could search Amethyst for "Amethyst creator" and find the right person. That would be something ... Semantic search backed by WoT-driven dRAG.

Anyway, does anyone know... if I upload an image using Amethyst, does it strip EXIF metadata like the geolocation?

Lol, ...yes.

Those who can't speak can't think.

Those who can't name variables well can't speak well, because they can't think well.

The ears and the eyes are two different modes of perception. Each has its strength. And both were conceived by God.

I want to! Give me some names and I'll do it.

The bark is not dogwood. Too smooth. It's either a pear or apple type of tree.

Looks good, but why are the pliers facing the wrong way? 🧐

"Want to make money? Give up half of it" 😭

Recommendations for nostr people who post genuine content and no junk? #f4f