Avatar
Dr. Hax
d30ea98ea65e953f91ab93f6b30ea51eb33c506f87d49f600a139aef00aa9511
Cypherpunk. Infosec veteran of about 15 years (vulnerability research, exploit development and cryptography). Cypherpunks write code. :-) Signet maintainer. Self-custody your passwords... in hardware! https://hax0rbana.org/signet Want to see wider adoption so Bitcoin can be used as digital cash and not just an investment vehicle. XMR: 44RDkTFmTeSetwAprJXnfpRBNEJWKvA5dBH5ZVXA4DofgoZ9AgjyZdSa2fo7pMD3Qe3pdKga8X22y3Lyn1xYde5kPQPzVUu

I don't know if this #doomer movie is worth the time it'd take to watch it, but I'd be willing to send someone some KYC sats to let me give it a try.

https://revealnews.org/the-grab/

There's no option to give them #bitcoin to rent it, but if you can hook me up somehow, I suspect we can make a deal. #food

Semisol nailed it.

Also, if you want each deposit to go a different address but associated with the same seed phrase, you can export your xpub and import it as a watch only wallet.

I'm not familiar with how to do this with Jade, but I've done it with a nostr:nprofile1qqs09jtvjlmyrxjn37zv70a89csegcz7rpyqjmnw29cveedhv7vagqqppemhxue69uhkummn9ekx7mp0pyt0kr and imported it into BlueWallet. Each time you hit receive in BlueWallet it'll be a fresh address (note: it'll be the same address if nothing was received yet).

#Signet #Saturday was a small simple, task: figure out how USB device names, device manufacturers, devive codes and model codes work; find the place in the code that controlls these things, update the string to remove the company who is no longer involved, and potentially update the udev rules packages with the client to work with new name.

Turns out, everything was based on the ID and the manufacturer name can be changed independently. No need for client updates nor udev rule changes. Just a simple change to the firmware and a quick flash.

Also, bow I know how to modify the firmware to masquerade as any device ID, so that could be fun.l too. ๐Ÿ˜ˆ

#FOSS #hardware #cypherpunk #cryptography

They're not scanning everyone, only people who need access to restricted areas. https://www.biometricupdate.com/202407/wicket-facial-authentication-rolling-out-at-all-nfl-stadiums-starting-aug-8

Still concerning, because maybe an entrance to some restricted area is off of a main hallway and it's nabbing everyone walking by.

But yeah, this is Twitter people hungry for attention, posting things that aren't accurate to get people fired up, followed by other people reposting it without bothering to see if it's true.

Replying to Avatar deeznuts

It doesn't give the government any new powers and reduces the president's power to...

American voters: What do you think about having a bipartisan committee to decide on supreme court justices to be nominated?

#HealTheDivide

I've been thinking about how much smaller and weaker the #cipherpunk movement is as compared to the 1990's.

Now, to be fair, people in that era were legands. Bringing #PGP to people, for example. DeCSS, the battle for #privacy, and so on.

Now I see people who not only hate #bitcoin and #crypto, but they dedicate time and effort to convincing others that it's a technology which must be defeated at all costs.

So what happened? Why are people who would normally be happy to cheer on those who try to empower the user and cut out huge #corporations be treat us with such hostility?

1. The cipherpunks were always a very small number of people, in a few small groups. Many of the groups are no longer around due to implosions that people outside the group do not fully understand. But new people have appeared, so that doesn't explain everything.

2. People have given up the the fight for privacy. Many people have told me they don't care if corporations see their data as long as they get high quality, cheap or free service. Some never cared, others have been ground down over the years, still others can't justify the level of a pain in the ass that it is to have a reasonable amount of privacy. I think this is a big part of the lack of entheuasim. It's hard to get excited when you feel like you can't win.

3a. As for bitcoin in particular, it seems to be the people who haven't stayed humble. You know the type. The ones who will tell nocoiners to "have fun staying poor". The ones who write off concerns about the environment and insult people instead of taking the time to explain the grids being built in Africa, the methane capture, the increased speed of building out of solar and wind power generation, and so forth.

3b. Bitcoin is lumped in with the blockchain projects, and the failures like FTX and MtGox. The community has gotten better at trying to distinguish bitcoin from the wannabes, but there's more work to be done. Again, insulting people will not cause them to change their mind nor their ways.

3c. At the same time, bitcoin is seen by many as a wall street toy that makes big #bankers rich. The #community has not done as well at disputing this, and a large part of that is because so few business want to accept btc. The "it's not currency because you can't use it to buy goods and services" isn't entirely wrong. People on nostr know you can buy a few things directly in btc if you really try hard enough, but groceries, gas, the power bill? Ha! No. We also know you can buy gift cards and use them at places like Amazon, but that's just a pragmatic hack which sort of reenforces that so few places/people accept bitcoin. To compound matters, few want to part with their coins because NGU. It's a rut where the only way I can see out is to get individual people to accept and then hold btc for goods they make or services they provide. If it were more useful as a currency, it'd take the wind out if the sails of this "but purely speculative" perception. Keep having those conversations when the opportunity arises, and realize that if your pushing bitcoin on people who don't want to hear about it, it'll just entrench them in their existing views. Talk about how it has benefited you personally and if they are curious, they'll ask.

4. Being against corporate dominance, and living by what they believe, cipherpunks have a hard time getting their message out. It's not like they're going to buy ads on Google or Facebook to tell people to use Tor. This also somewhat dovetails with the first point. When there were a small number of groups, it was easier for people to know what is going on and try to join in the efforts. When there are instead 1000 different projects that don't talk to one another and new projects spinning up that are doing the same thing that the existing projects have done for a decade, it's really hard to stay in the know. On top of that, there's few people to do the work at hand because efforts are so fragmented. I appreciate all of you who ask for projects that do XYZ and those who boost and answer. I don't have any delusions that people are going to abandon their project in order to join forces with another project, but maybe we could at least stop digging this hole even deeper? Just a thought.

5. Maybe the threats to #freedom and privacy aren't that bad as compared to how they were 30 years ago. I don't buy it, and the doomers clearly don't either. Still, if people do believe this, it would explain the lack of urgency and enthusiasm.

I'm sure there are others, but these are the ones that came to mind today. And if you've gotten this far and still want to tell me I'm completley wrong and that bitcoin is not just a speculative asset, I mean I guess go ahead if you want, but you're preaching to the choir. So if that's you, try telling me how I can communicate my message better instead. Where did you get confused? How can I use fewer words and get my message across more clearly?

If there's any question about what that message is, it's that I want the people to be on the side of the cypherpunks who are fighting evil corporations. And not just the people on #nostr, or on social media. I mean everyone!

Hackers exploit VMware vulnerability that gives them hypervisor admin

Create new group called "ESX Admins" and ESXi automatically gives it admin rights.

https://arstechnica.com/security/2024/07/hackers-exploit-vmware-vulnerability-that-gives-them-hypervisor-admin/

It seems like a total crapshoot to me.

I've gotten zapped for just sharing what I'm doing today and had other posts with insight, a bunch of research and cited sources seem to go unnoticed.

I think it's a combination of two things:

1. I don't really know what people value

2. If people don't happen to check their feed within minutes, or at most hours of when I say something clever, they'll never see my post

It's reasonable to value humor. I've zapped things that made me laugh. The things I zap the most consistently and the hardest are good answers to questions I posted. So if you want my money, now you know how to get if. ๐Ÿ˜„

I can't speak to those two since I haven't personally use them, but there's a large cost to switching platforms because the one you were using was discontinued or they jacked up the prices to unreasonable levels.

Software rarely does everything you want it to. It'll do 80%, maybe 90% if it's good, but there's always missing features and options. With open source code, businesses can have someone add those features, change things, and fix bugs. With closed source software, the best you can do is report it to the vendor and wait.

The common theme here is that you are not in control of things that are vital to running your business. That is a risk. How big of a risk depends on how big of a business you have and how big the software/service provider is. Even if they are responsive now doesn't mean that will always be the case.

It's not just the centralization, but that it's so corporate and closed off. This was even true before it was bought and renamed to X.

To be fair though, if they were only on Twitter but they were constantly posting about repurposing subsidized corporate tech to run full open source code, and the open source cryptography code they're writing, I'd say they're legit. Maybe they're on Fedi, private Matrix groups, the cortex implant forums and other places. Or maybe they're on nostr under another nym?

I say if you're going to judge them, do so based more on the content of their posts than where they post it.

A few days/weeks ago, someone asked if bitcoin was still really the best blockchain. Have none of the other coins made **any** improvements, they asked.

This is social media, so of course I can't find the post now, but if you're out there, here's my response.

1. As other responders suggested, Monero might be technologically better. It hasn't been as battle tested as bitcoin, but then again, nothing has. I'm not aware of protocol level issues being found in Monero.

2. Bitcoin has a narrow focus*. Many subsequent projects are trying to be everything to everyone (smart contracts), or applying blockchain to solve problems that are better solved by other distributed technologies/algorithms.

3. Perhaps most importantly, Bitcoin **has** changed over the past 15 years. It didn't originally have a seed phrase to back up your wallet, for example. That came later. Now we have segwit, taproot, multi-sig, and the lightning network too. A lot has changed. It's just things that are barely visible to people who are not Bitcoin developers or very plugged into the development scene. But the main use case of entering a wallet address and sending some coin still works pretty much the same (okay, that's not true for the lightning network, but the other changes were pretty close to invisible).

* Yes, I know some people are trying expand the scope of what Bitcoin can do, but even there we're seeing pretty modest [proposed] changes to the protocol itself.

How to build a better society:

1. Don't be a wage slave

2. Localize production

3. Scale down consumption

4. Take care of your neighbors

5. Work efficiently, and focus on things that actually matter

Remember, we have more in common than what separates us. We can focus on the differences and ignore what people say based on labels and stereotypes, or we can focus on what we have in common and try to make progress on the things we agree on.

Source: https://web.archive.org/web/20240107150021/https://joanwestenberg.com/blog/how-to-quit-capitalism