Avatar
Richard Carback
c77144956c11ec77326490669dd75b7a94c1bd6de52956e5e21a6d1a03930795
Privacy Preserving Cryptography - Voting and Governance - Blockchain - Cyber Security co-founder https://xx.network
Replying to Avatar Richard Carback

https://nymag.com/intelligencer/2023/03/barney-frank-says-more-shuttering-signature-bank.html

Apparently Silvergate was solvent when it was shut down. That raises some questions...

Whoops, I meant Signature. The names are too similar!

https://nymag.com/intelligencer/2023/03/barney-frank-says-more-shuttering-signature-bank.html

Apparently Silvergate was solvent when it was shut down. That raises some questions...

Out of curiosity, are there any legal briefs or analyses from lawyers in this space about this? If he's right, then why isn't he doing his job and taking the high profile projects to court to set a precedent?

Putting up money to win a lottery seems to fail the efforts of others part, but IANAL 🀷. There's also no risk of fraud or of losing the investment, so I don't see the point from a policy perspective.

I don't even think such a rule breaks most PoS systems, but instead it would force them to use a rent and guarantee model to the nominators (i.e., significantly more stake from the validator and significantly less profit for the nominator, as now stake is collateral to pay them for renting the nomination). That keeps the protocol viable but makes it harder to participate as a little guy for no ones benefit or risk.

Has anyone written a rebuttal to Nicholas Weaver's latest slanted opus? Link:

https://law.yale.edu/sites/default/files/area/center/isp/documents/weaver_death_of_cryptocurrency_final.pdf

It's started to gain traction with the policy wonks I know. He's obviously not entirely wrong about some things, but the ideological bent on this thing is anti-all things crypto, so it would be useful if anyone has done a more fair analysis.

Please reboost for visibility with your audiences.

Great point, and I do think this is a reasonable change (and I gave you sats for it πŸ˜‚). I was merely suggesting an alt path to consider.

The impl I was thinking of checks size and ignores w/ a warning, and that wouldn't actually "break" here, just drop it semi-silently. FWIW, Implementations doing more strict checking are likely to be more secure and avoiding issues like resource exhaustion but, in these early days, you are right that it doesn't matter right now. ✌️

It wouldn't be hard to fix, but it would break some clients. Nothing stops the NOTICE message from following a standardized format which includes a subscription id, so it might make more sense to define that format in another NIP. The disadvantage is a second decode step, but you're already processing an error message, so that doesn't seem all that bad to me. #[2]

Neat howto for speakeasy sent to me by a community member:

FWIW, you don't need to use the speakeasy website to use speakeasy (most of our users don't, actually!), you can run the npm app locally:

https://git.xx.network/elixxir/speakeasy-web

Really pleased to release v0.3.0 of speakeasy today, which has the following improvements:

πŸ’¬ Dms are finally here. Click a username to try it out. You can disable them in your channel settings.

πŸ”’ Control your DMs, what channels you can be DMed from and which Users can DM you

πŸ’ͺ Performance enhancements for large channels.

πŸ‘€ A few UX tweaks, channel settings are now in the channel header and account settings are now in the top right corner.

You can check it out at https://alpha.speakeasy.tech and the main channel invite link is:

https://alpha.speakeasy.tech/join?0Name=xxGeneralChat&1Description=Talking+about+the+xx+network&2Level=Public&3Created=1674152234202224215&e=%2FqE8BEgQQkXC6n0yxeXGQjvyklaRH6Z%2BWu8qvbFxiuw%3D&k=RMfN%2B9pD%2FJCzPTIzPk%2Bpf0ThKPvI425hye4JqUxi3iA%3D&l=368&m=0&p=1&s=rb%2BrK0HsOYcPpTF6KkpuDWxh7scZbj74kVMHuwhgUR0%3D&v=1

The xx team just released this tech preview for Proxxy, which adds some privacy when working over Metamask. 🦊

https://media.nostrgram.co/v/d8/media_d8a703866a046.mp4

I work on the backend of this with the mixnet. Happy to answer any questions.

"Then, we show how this vulnerability can be used to construct second preimages and preimages for the implementation, and we provide a specially constructed file that, when hashed, allows the attacker to execute arbitrary code on the victim's device. " πŸ’₯πŸ”₯

https://eprint.iacr.org/2023/331

This is certainly reality in a world lacking a functioning legal system like ours but, in practice, it's extremely rare that a violent criminal emerges without a history of criminal behavior. Society is both too lax and too strict in all the wrong ways. There's no emphasis on rehabilitation and monitoring earlier, when it counts. The punishments are also purely punitive and paint individuals with scarlet letters that make it difficult for them to ever be productive members of society again.

In other words, the current systems are largely designed to produce worse criminals (unintentionally, unless you're a prison corpo...). While a statement like this is true on it's face, it naturally leads to policy preferences that make the problems worse (i.e., less gun control for all including all the known and worst criminal elements out there). Responsible citizens and policies get sidelined.

Today I had some fun getting my golang library running in C#, if any .NET aficionados are out there I'd appreciate feedback on how to make it better:

https://git.xx.network/carback1/libxxdk

The Electronic Frontier Foundation (EFF) is defending the Internet Archive against a lawsuit that threatens its Controlled Digital Lending (CDL) program: https://www.eff.org/cases/hachette-v-internet-archive

The CDL is a hugely useful resource and EFF is doin great work here. I hope they win and it will be a travesty if they dont!

This was a really good and accessible discussion, and I will be bookmarking and recommending this audio to folks who ask me about this topic the next time it comes up.

Do you have any write-ups that summarize the main strategies and issues you discuss here?

If you care about election security, Matt Bernhard from voting works is talking about it on a live stream right now: https://www.youtube.com/chihacknight/live

I'm not affiliated, but I can tell you these folks more than any others are focused on high impact practical improvements. Definitely worth a watch!

πŸ’― and I agree amount and time should be fair game, but I loathe the idea of this becoming another product offering for palantir or chainalysis..

Especially in this context its really disturbing. This isn't a dark web marketplace, its words. The targets here are activists and dissidents. The opinions might be disgusting but any crime is happening elsewhere.

I'm also interested to know the details. Presumably it picks a random keypair then encrypts and puts your real info inside the encryption. This is kind of like sealed sender in Signal or DM in xx.

Not announcing on the network is a huge step, but its likely that other tech is needed for full protection. LN payments aren't that private even with private channels and the relays are in privileged positions to break privacy.

There could be weaknesses introduced by the mining alg that make it predictable but, naively, it's the probability that the rest of the bits randomly selected are the same.

So, assuming your vanity is 6 bytes, thats 32-6 => 26 bytes or 208 bits of entropy if i'm remembering the pubkey size right, so chances are 1/2^208 => 2.4308653429Γ—10⁻⁢³ to choose the same key that was mined, then doing that over and over until you find it. 208 bits is pretty safe. #[2]