Having trouble donating with Phoenix wallet using default fee settings. Maybe someone can have a look at channels?

🍯

Orange Pill App founder doesn’t believe in #Nostr

Starting to think damus needs an android app

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

#ecash #cashu

Take one, reply when you take it.

It’s a nice convenience for sure but it’s not so difficult to send funds manually. I would like that though.

I don’t think there’s anything wrong with custodial wallets as long as you’re only keeping the money you’re willing to lose. Obviously don’t use as a savings mechanism but spending cash is fine.

Custodial provides better UX, easy to use. If someone cares that much about their privacy, there is a product for them if they wish to put in a little extra work.

Why doesn't this exist?

Can't do TOTP if the device doesn't know what time it is! There's no Raspi Zero clock battery so it's the beginning of time every time you power it up.

That would probably introduce enough complications to make an attack improbable, but I think someone could still get around it.

They could basically run your protected version through a secret internal emulator, pass the PIN you enter off to the emulator, and play back what the emulator produces.

This all being said, in most cases these exotic, sophisticated attacks wouldn't even happen; it'd just be a $5 wrench attack if they have physical access into your home.

Ok just a random thought, what about a user could download the seedsigner binary, verify it like normal but than sign the binary using his Nostr or even bitcoin key and part of the signing process is applying a PIN code to the binary. Now he flashes the binary and every time the seedsigner boots he needs to enter his pin or scan a login QR code as a challenge, if correct the ui would show something that only the owner knows if not you know it’s tempered.

Yup. Python can do anything python can do (couldn't play the videos in Iris, but it all sounds right).

A lot of (er, all?) the onscreen security checks people occasionally ask for end up just being security theater since a compromised SD card can show you whatever it wants onscreen. Removing the SD card in the new SeedSigner OS def helps. And when the MicroPython port is done, there'll be firmware-level checks that will make "evil" SD cards much more difficult/impossible(?).

Americans, now that lnurl is getting some adoption, if you host your own lnurl server make sure you're blocking Iranian, Cuban, North Korean, Russian, and Syrian IP addresses so that you don't wittingly accept a payment from users in those countries! Not worth jail time or fines.

Just got around to setting it up on mine, luckily nginx makes it easy.