Avatar
Dr. Hax
d30ea98ea65e953f91ab93f6b30ea51eb33c506f87d49f600a139aef00aa9511
Cypherpunk. Infosec veteran of about 15 years (vulnerability research, exploit development and cryptography). Cypherpunks write code. :-) Signet maintainer. Self-custody your passwords... in hardware! https://hax0rbana.org/signet Want to see wider adoption so Bitcoin can be used as digital cash and not just an investment vehicle. XMR: 44RDkTFmTeSetwAprJXnfpRBNEJWKvA5dBH5ZVXA4DofgoZ9AgjyZdSa2fo7pMD3Qe3pdKga8X22y3Lyn1xYde5kPQPzVUu

nostr:npub137c5pd8gmhhe0njtsgwjgunc5xjr2vmzvglkgqs5sjeh972gqqxqjak37w I hear you know things about lightning. Do you have any recommended documentation or guides?

Specifically, I want the understand what it means to open a channel (inbound or outbound), what signatures are generated and shuffled around between servers for each transaction, who can do a force close and why they might do so, why liquidity managemrnt is necessary, why all nodes need to watch the chain at all times, what they are looking for and what they do if they see it, and what reconcillation looks like on-chain.

All the guides I have seen so far seem to either omit all of these things, or they just assume the reader knows all of these things. In either case, they don't offer an explanation.

I thought these were all just basic, high level concepts, as opposed to getting into low level things like op codes but as I talk to more people about ln, it seems they're somewhere in between high level and low level. Maybe that's why I am having trouble finding this info?

I hand build and sell encrypted hardware password managers to help people (and their family and friends) stay safe online. I am trying to make it as easy to use as possibld. It's also 100% open source!

Details at: https://hax0rbana.org/signet

If you want more security than a software password database, check it out.

I prefer #Bitcoin, but to be accessible to the maximum number of people, I will also accept fiat. πŸ™‚ β€οΈπŸ™

Rough. I am not great at taking regular backups, but I just happened to have done one within the last week.

I've mostly been storing things on my Nextcloud server lately and just mirroring them locally, so backups are less important, but they sure make me feel better to have them.

And the servers have redundant storage AND are backed up regularly to an offline disk.

My first thought when I read this was "that's preposterous!", but if you told me in the 90s that being smart and good with computers (aka, being a geek) was going to be really cool, I would have said the same thing.

And yet, here we are today. And hackers already kinda have that status, so... maybe.

Either way, I'm just going to keep doing what I love and am passionate about. πŸ€—

Replying to Avatar Dr. Hax

Hey everyone. My desktop just blew up last night (likely CPU or motherboard).

I'm not asking for donations, but if you'd be willing to spread the word about the open source hardware password managers that I build and sell, it'd really help me out.

https://hax0rbana.org/signet

I am an independent open source software/hardware maintainer and my dream is to be able to earn enough doing that to pay for my food and shelter.

I sell the hardware at just above cost to fund experimenting with new designs (and now, apparently, to save up for desktop computer repairs).

I'm committed to open source hardware/firmware/software and long term support!

#OpenSource #Software #Hardware #Security #infosec #cybersecurity #OpenHardware #GrowNostr

I accept (and prefer) #bitcoin. The way my store operates is you send me your order, payment, and where you want me to ship the hardware, and I ship it there. No names, email addresses, nostr pubkeys, or any other personal data. I don't even care if you give me someone else's address. Doesn't matter to me. Also, the store uses #nostr as a back end.

So, as you can probably tell, I'm pretty committed to the nostr and bitcoin communities. Y'all are bringing back the energy of the world wide web from the 1990s and the cypherpunk movement that went with it. ❀️

nostr:nevent1qqsqkvncp3mgn8kym5xvzfnu6w7fxh5dalm5uac3nkfuxnu8lrth6wgprfmhxue69uhkummnw3ezucm0d9hxvatwv35hgtnrdaksygxnp65cafj7j5ler2un76esafg7kv79qmu86j0kqzsnnthsp254zypsgqqqqqqszg9es7

Hey everyone. My desktop just blew up last night (likely CPU or motherboard).

I'm not asking for donations, but if you'd be willing to spread the word about the open source hardware password managers that I build and sell, it'd really help me out.

https://hax0rbana.org/signet

I am an independent open source software/hardware maintainer and my dream is to be able to earn enough doing that to pay for my food and shelter.

I sell the hardware at just above cost to fund experimenting with new designs (and now, apparently, to save up for desktop computer repairs).

I'm committed to open source hardware/firmware/software and long term support!

#OpenSource #Software #Hardware #Security #infosec #cybersecurity #OpenHardware #GrowNostr

Sure. Medium grind, toss it in a bucket with tap water for 8-24 hours, drain through a filter and drink (after doctoring it up, if desired).

I am not trying to get any specific pH. I only measured it because I got an open source pH meter and now I'm using it on everything. πŸ˜„

The pH monitor's actual purpose is for measuring the pH of our pasta sauce to see if we can steam can it, or if it has to go in the freezer (we don't have pressure canning equipment).

If anyone wants to bankroll a buy of 50 mics and then have me make them available to individuals for BTC only, it could be an interesting experiment to try to get people into #bitcoin.

Want this awesome audio tech? better learn how to use BTC. 😁

I'd be happy to facillitate being the Bitcoin-only vendor for hot tech.

I highly doubt anyone will be willing to take a chance to the tune of .25 BTC on a random stranger on the internet (me), but if we want to see more vendors accepting bitcoin, someone needs to be the change they want to see in the world!

nostr:nevent1qqs2u7xvt05ycjndfy6f7g9negdpg7fm6lmnv7k5dw2cql6yrdt6v2gpz3mhxue69uhhyetvv9ujumn0wd68ytnzvupzp5cw4x82vh5487g6hylkkv82284n83gxlp75nasq5yu6auq249g3qvzqqqqqqyzw4w4x

Replying to Avatar Dr. Hax

I found the docs on how Qubes gets audio from and to VMs. https://www.qubes-os.org/doc/audio-virtualization/ and I have a pacat-simple-vchan process running (in dom0) for each vm, I have the UNIX sockets in dom0 as well, so everything looks reasonable there. In the VMs, I can see pulseaudio running, and audio played in a VM comes out the speakers, so audio transmission seems to be working fine in that direction...

I've given up for now and am using my Acusis Echo-Cancelling Microphone Array, which is a USB device that passes through just fine (just like all my other USB devices).

BTW these Acusis microphones are absolutely phenomenal! I paid $100 each for the ones I have now, and I'd pay the $200 price from the new company that's manufacturing them in Germany! They pick up voices and music, ignore white noise like fans and never have ANY echo or feedback.

Unfortunately the only way to get them now is to order at least 50 of them, and I don't have $10,000 USD to spend to stock microphones, no matter how awesome they are.

I tried getting a group buy together last year, but I could only reach about 5 people who were verbally committed to buying one. So unless nostr has a lot more people who are interested, we're all out of luck.

It's difficult to truly convey the joy of never having the problem of "I'm getting some echo" when everyone is using these. It's nothing like software noise cancellation which kinda filtered things out, if there's not too much lag.

They are not open source hardware, but you can modify, compile and flash the firmware onto the microphone itself. So it's still hackable.

nostr:nevent1qqsrj068n28zl03rdwvvaxt60506xw94qj8rmjlwcax08d0pvnnftuqpz3mhxue69uhhyetvv9ujumn0wd68ytnzvupzp5cw4x82vh5487g6hylkkv82284n83gxlp75nasq5yu6auq249g3qvzqqqqqqygwvp37

I found the docs on how Qubes gets audio from and to VMs. https://www.qubes-os.org/doc/audio-virtualization/ and I have a pacat-simple-vchan process running (in dom0) for each vm, I have the UNIX sockets in dom0 as well, so everything looks reasonable there. In the VMs, I can see pulseaudio running, and audio played in a VM comes out the speakers, so audio transmission seems to be working fine in that direction...

I've given up for now and am using my Acusis Echo-Cancelling Microphone Array, which is a USB device that passes through just fine (just like all my other USB devices).

I don't know, but my cold brew is delicious according to multiple sources, and even drinking it black I wouldn't say it's sour or bitter.

We get either medium or light roasted beans, which I expect is a big factor, but that's just because we don't like the dark roast (whether brewed hot or cold).

I don't know who needs to head this, but the pH of my cold brew #coffee is about 6.14 (before I add cream and sugar)

I've liked most of OXO's products that I've used in the past (except their slap chop knock off), so this is encouraging.

You taking about this one? https://www.oxo.com/chef-s-mandoline-slicer-2-0.html

Do you have any recommendations for a glove?

I tried that once with a "cut resistant" glove and it worked, but also sliced a small hole on the thumb that would only get worse if I continue going that route.

I wanted a chain maille glove with super tiny rings and no lead (e.g. in solder to close the rings) but then I got the cut resistant one instead.

As for a finger guard, I don't think my current mandoline has that feature. 🫣

Also, if you had 2FA enabled, you're pretty much safe.

I had it enabled on my account, but some users on my server did not. That has now changed. Fortunately, we weren't exploited.

I did a little cost comparison and I can produce honeycrisp apple chips for about $1/oz if my labor is free, and about $7/oz if my time is valuable.

The cost goes higher if I factor in lost productivity for each time I slice my thumb on the mandaline and am slowed down in everything I do for the next week (which happened today).

Commercial apple chips are sbout $2.50/oz, but they are not honeycrisp. That's for fiji and "reds" (red delicious?). Mine are better, but not to the tune of three times better.

So I will not be selling any apple chips, but I will continue making them for my household.

I am also going to change my sliding technique to one that I think might be safer when my hand slips.

I'll also be looking at better mandolines. We got a cheap one to see if we would even use it, and it turns out we do, so it's reasonable to consider investing in a better one.

If any one who follows #foodstr or #cooking has any mandoline recommendations, LMK. Looking for safety features (b/c I clearly cannot be trusted) and an adjustible thickness. #prepping #prepper #GrowNostr #food

When you are learning a new code base and you kinda understand how some of it fits together, and you've started documenting what you do understand, but there are huge gaps...

That's when you get diagrams like this...

#m=image%2Fjpeg&dim=1440x1920&alt=An+extremely+crowded+UML+diagram+with+arrows+going+every+which+way.+There+are+lots+of+sections+floating+off+on+their+own%2C+not+connected+to+anything.+Only+about+10%25+of+the+elements+are+color+coded%2C+but+there%27s+no+key.+In+summary%2C+it%27s+a+hot+mess%21&blurhash=_2I%7Dq%5BXY00%24u55NfV_%25X%5E%23InE5RUt6xt00MvVxSi-Vs%2BNK0E4%7Cs%3D%3D%5EtiR%2BaK4m%3F8.6R%3BIvX8tKw%40%24zt5t1%24%7Ea%23E8029hESRjkQxU%24zb%3Bws%24%7BR%3AIbNdxrIUoM%25I-hxVRoIb&x=9d66f78c09bdfdb18cc403ba6df690973c4a962c96ae2f3e13fa2b533aa2e015

I make these same kinds of things when #reversing something that is large and complex. And I am basically #ReverseEngineering this code right now. I mean, I have source code, but it's all static analysis, just the same if I were reading ASM in CFGs.

#infosec #cybersec #cybersecurity #security #GrowNostr #FreedomTech