Avatar
Dr. Hax
d30ea98ea65e953f91ab93f6b30ea51eb33c506f87d49f600a139aef00aa9511
Cypherpunk. Infosec veteran of about 15 years (vulnerability research, exploit development and cryptography). Cypherpunks write code. :-) Signet maintainer. Self-custody your passwords... in hardware! https://hax0rbana.org/signet Want to see wider adoption so Bitcoin can be used as digital cash and not just an investment vehicle. XMR: 44RDkTFmTeSetwAprJXnfpRBNEJWKvA5dBH5ZVXA4DofgoZ9AgjyZdSa2fo7pMD3Qe3pdKga8X22y3Lyn1xYde5kPQPzVUu

It's complicated, but yes, that's the idea. Plus, I can access my file server, gitlab server, sync calendars/contacts to my mobile device, have videoconferences, send and receive email... you get the idea. This is all the case now, I'm just rewriting the setup DNS setup scripts to be more reusable for others.

I currently already run 7 production DNS servers. Four of those are recursive DNS servers for my LAN and DMZ.

It would only be two instead of four, but I have two domains and I didn't want an admin of one to be able to mess with records of the other domain. Looking back on it, I probably could have also accomplished that with two servers, but now that I have them set up, I'm unlikely to change it unless I run into an issue. They're low resource utilization and having a couple redundant servers is never bad when it comes to DNS!

The other three DNS servers only resolve my domains. They do not recurse. They would not be useful if the internet went down, as they only speak to things on the internet side. This is because they give out the public IP address, whereas the recursive servers give out the internal IP addresses to local machines.

I also have my own PKI, which means I'll still be able to use HTTPS indefinitely, because I can renew my X.509 certificates. It also handles other TLS connections, sign SSH host keys, and sign SSH user keys... but I'll save that explanation for another time & another thread. πŸ€“

Tonight I was working on the automated deployment of a recusive DNS server. Why?

1. I want it for my home network

2. I want to make it easy for others

3. I want to be able to use the #bitcoin #lightning network **without the internet**

Well, sorta without the internet. I get that if there were two lightning nodes that didn't trust each other, on the same LAN, they'd want to have watchtowers and such, but the point is that payments could still go through when the internet is down as long as the lightning nodes tolerate it.

Yeah, USB cables seem way less reliable than they used to be! But in this case I tried plugging it directly into the motherboard and it acted the same as when it was plugged into a hub.

I'm sure I'll figure it out eventually

I'm still pissed that my computer (motherboard, it seems?) is screwing up USB devices in some elusive way that I don't understand at all.

I want to drop everything and work on it until I figure it out and fix it or work around it. But life doesn't work that way. There's cooking, and laundry, and a dozen other projects that are higher priority right now.

Holy unused API keys batman! I cleared out all the old ones and created a new one and am back i'm business. Thanks!

Also, I wasn't able to use the button to launch my Nostr client (may be a limitation of Tor Browser), but more importantly the copy to clipboard does so in a way that can't effectively be pasted into Amethyst.

If there were 3 buttons to copy the key, URL, and secret (respectively), that would make your side of the system easier to use.

I was able to scroll around and carve out the values, and then guess at which one goes into which field, but when each value is longer than can be viewed in the text box, it's quite cumbersome.

I tired FlorisBoard and the stock keyboard in GrapheneOS and neither worked.

I'll just wait for Amythest to be fixed and if it doesn't happen then I can move to another client. I really shouldn't need to install a third keyboard in order to use a social media app.

Replying to Avatar Dr. Hax

nostr:npub1getal6ykt05fsz5nqu4uld09nfj3y3qxmv8crys4aeut53unfvlqr80nfm

I really want to keep using your service, but I've been unable to zap people via Amythest for months now. Here is the error message from my latest attempt:

Your wallet connect provider returned the following error: Something went wrong while paying invoice: oauth2: cannot fetch token: 401 Unauthorized

Response: {"error":"invalid_grant","error_description":"The provided authorization grant (e.g., authorization code, resource owner credentials) or refresh token is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client"}

You seem to have developers who are willing to look into these things, so I'm asking that they please take another look now that I am able to provide a specific error message that points to my "wallet connect provider".

And yes, I use Tor.

Amethyst is still crashing when I tag people (yes, I updated earlier today), but hopefully this gets to hello@getalby.com

nostr:nevent1qqsqhyevcytu0k5qws2fx8fkfxn4nlr4na7gz63aa20g22sygs99vtspzemhxue69uhkummnw3ezumn0dahx2uewvdhk6q3q6v82nr4xt62nlydtj0mtxr49r6enc5r0sl2f7cq2zwdw7q92j5gsxpqqqqqqz835lv8

nostr:npub1getal6ykt05fsz5nqu4uld09nfj3y3qxmv8crys4aeut53unfvlqr80nfm

I really want to keep using your service, but I've been unable to zap people via Amythest for months now. Here is the error message from my latest attempt:

Your wallet connect provider returned the following error: Something went wrong while paying invoice: oauth2: cannot fetch token: 401 Unauthorized

Response: {"error":"invalid_grant","error_description":"The provided authorization grant (e.g., authorization code, resource owner credentials) or refresh token is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client"}

You seem to have developers who are willing to look into these things, so I'm asking that they please take another look now that I am able to provide a specific error message that points to my "wallet connect provider".

And yes, I use Tor.

It'd be helpful to include your BTC address on your site in addition to the QR code. It's easier for people who are viewing the site on a mobile device, as it's not easy to scan a QR code there.

What concerns me is that I don't think this is motivated by "it'd be a good idea if we only allowed coinbase customers to pay in crypto". This smells of "we'll save more money by not taking the heat over KYC regulations than we will lose in customers".

If that's true, expect this to start happening in all US based payment processors, and then it'll spread across the globe.

I'm going to wait until I have personally set up a BTCPay server before I personally recommend that solution. Hopefully that will be something that rises to the top of my pirority list soon. πŸ€“

Matt, I'd be interested in hearing more about what you have.

We buy roasted coffee beans 5-10 lbs at a time and pay $9/lb, BUT we have a very specific bean and roast that we like AND we get it from the EqualExchange coop, which means the money goes to the farmers and roasters, not middlemen.

If you can compete with that, we'd consider switching to you and paying via lightning.

For web-based stufv, take something written without a bunch of heavyweight frameworks and hack it up to do your bidding. I'd suggest MagicWebStore.xyz

It's just static HTML/JS with minimal libraries. No npm, no vue or whatever, no bloat or big, hard-to-debug frameworks.

I can attest that Swappa is awesome, as is GrapheneOS. GrapheneOS now supports Google Play Services and so it should be able to run WhatsApp and any other app that requires those services be installed.

As for the bigger question about money and privacy in general, it's possible to get a lot of privacy for not a lot of money.

For example, riseup provides email and VPN service in exchange for donations. https://riseup.net/

It's often fairly simple things that can make a big difference. In my opinion, the biggest problem is that it's takes time to learn what protections are actually effective versus who is just trying to sell you something.

For what it's worth from a total stranger on the internet, I can say TheNewOil really hits a home run on that front. It's not aimed at "privacy at all costs" people. It's aimed at people who just want a reasonable amount of privacy online. You can spend a few minutes watching a video and then set up something to make you a little safer online. Do that a few times and you'll be in a much better situation.

Tonight I read about accessibility on a page by Eric Eggert and several pages by W3C. I'd suggest all developers who are compassionate and empathetic read this. It's not even that long.

https://yatil.net/blog/no-accessibility-without-disabilities

Last month, we announced our first #bitcoin awareness contest! You all put hundreds of flyers and stickers in public to let Americans know they can vote for better money.

Here are the 21 lucky winners, each taking home 1M sats:

nostr:npub1gcfaxg923qp8j2j69ue5ng3q0ce0vu0gcpqqtqxacv8d5m7a7c4qmhchdf

nostr:npub1jk9h2jsa8hjmtm9qlcca942473gnyhuynz5rmgve0dlu6hpeazxqc3lqz7

nostr:npub1e3mx09yq53gyh9368qyuhfstgk8t7p5vvfcnvgwa4994y7rqg37s20qvr5

nostr:npub14uu85mzg332ggzyt5u2ahdpt2h889dr4u83ts6l8jxeyhr23ug2sq8gk69

nostr:npub1z4m7gkva6yxgvdyclc7zp0vz4ta0s2d9jh8g83w03tp5vdf3kzdsxana6p

nostr:npub1d7k8mz2jvajyjvjlhtg5qcg4rhhfm0nrytqn5ay2rq4708tk74ss95llmc

nostr:npub1wpualymnks9vadsultel3kqaea4fj4zj3cnp9f5qzqtprxq0k8ssfnh5l9

nostr:npub1fazvg3rzx5p6hdx43l8gyz32rs40arkwgca765dwsvtylfjdelqs32nt4k

nostr:npub16v82nr4xt62nlydtj0mtxr49r6enc5r0sl2f7cq2zwdw7q92j5gs8meqha

nostr:npub1n0aq6vafymeezu8rgyuluw2nsvwwf0e0qdpc9d2uvcfgclsf4d8s3qqu2z

nostr:npub1dk5pn7gad897tywq3vcl24wx6z4ejpge0663tptwxwgynsqccxhsn65sgk

nostr:npub182geseqlaxv20ptu3k0u06zqhgf6rmalv5ssjm9n8jvz0ss6anaqsthzsc

nostr:npub1c9s2dnan337kywugpn4jm2uzpmds7geysyyme5ew9g6d8y2x572sum5tew

nostr:npub15ypxpg429uyjmp0zczuza902chuvvr4pn35wfzv8rx6cej4z8clq6jmpcx

nostr:npub16dhgpql60vmd4mnydjut87vla23a38j689jssaqlqqlzrtqtd0kqex0nkq

nostr:npub16e3vzr7dk2uepjcnl85nfare3kdapxge08gr42s99n9kg7xs8xhs90y9v6

nostr:npub1vdaeclr2mnntmywm93h2p3xfkgnqcxe8prrzcny4s07q735j6d7sfkmnxz

nostr:npub19vem9txx6xl9j2dx0pm2g76g8grsccguq5lsfz8l8u0yek5lynzshkgqpq

nostr:npub16wy27uj48r82gskq48uvxku8076h0y9xcngsgry7j4yn6zxmnznqu4hy6a

nostr:npub1y448jswp88k7qeny6865tmhga450v84kafkddggxjjnsawpgh2xs364rhy

nostr:npub15pl6u3s6dlq0hfskercdu74jd6w6ec0hzcrg434nhgj4ylvrm7fq8e8439

To claim your prize, please reply to this post and I'll zap you 1M sats! Congratulations to all the winners, and thank you to everyone for getting involved!

You can continue to spread the signal in public and get zapped for your sticker & flyer spots here: https://voteforbetter.money/get-involved

Wowee. πŸ€‘

It was a fun contest, even when one of my bulletin board posts was denied without explanation. 🀣

Thanks for rallying ordinary people to be the bitcoin marketing machine.

Cereal is a geat way to start your day!

🀣