Well hot damn, I didn’t realize a wallet had been added to Damus. ❤️

Can someone please help explain this NWC thing. Is my nostr private key also my wallet key?

I control the key too and just tell everyone to follow my new account. You do the same. How is this resolved?

If I steal your key and revoke it what happens then?

In this scenario who runs the key registries and how do you trust registry A vs B?

The email + pin thing is a surprisingly useful pattern. Damus adopted a form of it for their website login which is cool. Pushing it further, wonder if the key could be sharded across a collective of providers and you never even see it. It’s just out there.

RE: 2FA… different topic but if you are on iOS the 2FAS app is very nice and clean, open source, and you can store backups in your iCloud account. Not perfect, but better. Been moving off Authy.

💯 people are so used to email as auth that fighting it at this point feels counterproductive. Trying to explain you don’t have a password, you have a private key, but it’s like a password, but you can’t change it, or reset it, or lose it.

Maybe we focus on bridging legacy oAuth with keys and just riding the semi-custodial rails for now. What’s the Venn diagram of Christians or Farmers and people who understand the importance of open internet standards?

A community needs quality content first, nobody arrives for the protocol (unless the community focus is the protocol - IE current nostr active users) Hardcore nostr folks who understand identity get frustrated and think everyone would just get it if you explain it properly, but the reality is very few will even listen. Do it for them, and then offer it up later should they need it.

Also, to pre-empt any “your key is not your identity” comments. Without a key, it’s just anonymous json. The entire concept of portability dissolves without the identifier. Nostr is an identity system with a collection of semi-documented schemas.

Totally, also the risk if we don’t solve the problem might not be violence, it could be people who can’t trust the floorboards under their feet. People with so little trust they couldn’t even fathom a response because they are unable to coordinate. Babel 2.0

Nobody's talking because everyone's too busy reverse-engineering the algorithm for being heard.

It's a pretty terrible place, an algorithmic shit show. But it's also the largest collection of normie developers, system engineers, data scientists.. etc, across all industries. Yes it's filled with ridiculously misinformed takes on AI and Bitcoin, but where else are you going to engage with people with different perspectives on these topics?

You could argue that you should just ignore them, that it's a waste of time. But I would rather understand perspectives from all sides then use them to sharpen my own.

I wish there was another place to have pragmatic discussions about applied technology, but nothing else exists. There is no basic ass business of technology forum out there. I’d say HN is probably the nearest thing. It’s sad but conversations on the internet is fucking dead.

Couldn't make it any further than the net worth scene in Mountainhead. As Silicon Valley so brilliantly demonstrated, roast people for how they actually behave. Don't get bitter at tech bros and write about how you secretly wish they'd act.

Right, useful feature until it’s not. And different users have different tolerances depending on their preferences.

Damus has a notifications toggle but it’s binary, the ideal solution learns the gradients.

As a freedom maxi I despise constraints. As an ML practitioner I recognize freedom without constraints results in an unstable and ultimately incoherent model. What are useful or desirable constraints for nostr?

Good stuff man! Just read a couple of your posts and like how you don’t sound like you are trying to fix things from the inside out.

follows this line of thinking I guess....

* Access to privileged or specialized knowledge is dead.

* What do models not have? Answers to things we don't know.

* Teachers can't teach things they don't know, they can only facilitate.

* If people don't care about something they will get bored and quit.

* When you care about something you will work on it without promise of resolution.

The entire operation needs to get much more comfortable with uncertainty.

Education needs a radical transformation from “what do you know?” to “what do you care about?” Not in a trite "pursue your passions" or "follow their interests" way either. Students need something to grapple with that’s not contrived or transactional.

embedding space is the real cyberspace. few

Totally! Privacy and security are often touted as the primary reason, but change control should also be right on up there.

A huge UX challenge for hosted models is how to communicate updates when you can’t anticipate what the net effect to the user will be until they start using it.

With a traditional app, a developer can change things, and while users will complain, visual updates are more obvious. When using something like Claude, you can wake up one day and it’s like talking to a completely different person.

This is frustrating, because similar to talking with another person, you learn to adopt your style. This takes time, and with a model you can’t just scan the settings page on the new version hoping the dev put a toggle button to revert to the old way.

Source code is available if somebody wanted to pick it up and run with it. It’s a great app, so something else must have led to it being shelved so quickly. Probably just best to leave it at that 🤷‍♂️

Couple weeks ago when zaps came back to Damus I was like “wait can I zap with Cashu?” Again, at the time I was mistaken in my belief that it would be non custodial zaps. I was hoping to not be dependent on something like a Primal hosted wallet (or strike or cash app)

It was then I discovered the eNuts app that had been lying around for months was defunct. Apparently the only path to full sovereignty with privacy controls is running a lightning node and I have never heard anyone say anything positive about that experience. 😅

Yeah it’s a nice little app.

The relationship between private key, lightning node and your eCash mints at the app level is still a little unclear. More specifically, if I create a minibits user name, this appears to be a lighting address….

Ok, so then I add 5 mints and 100 sats to each. And then next month minibits goes up in flames. My next move is to find another eCash app and then it’s my lightning key that is interoperable with those 5 mints??

I think that’s how it works, but with so few options I have not been able to attempt a cross app migration at an account level. Bailing out of eNuts involved physically sending the funds.

Thankfully it was a really small amount. There were proper disclaimers all over .. this is an experimental app, not reviewed, etc.. so I’m not upset at anyone.

It did reveal what I think is a cognitive gap between real and perceived risk with eCash. When you use a bearer token and send it to yourself over SMS, it feels like magic. It feels like you “own” it. Then reality thumps you on the head when you remember it’s just an IOU. Using the name “cash” carries with it an association of ownership that eCash does not have. (yes I know a dollar is an IOU as well 😄)

This points back to the eNuts thing. You seriously need to trust the person running the mint. In a world with a bunch of Uncle Jim’s running mints, you might decentralize risk, but some will still lose everything. Run your own? I repeat, some will lose everything. Perhaps the pattern is just to spread your funds out.

I’m using minibits on iOS now. It’s on TestFlight.