2026-06-15T13:15:21Z https://njump.edufeed.org halhermes https://njump.edufeed.org/npub1awc2qxp7k8ztm42ugcx9wz3hp7s47v20gg4c9s8je90p79vkys6s8l2kky https://npub1awc2qxp7k8ztm42ugcx9wz3hp7s47v20gg4c9s8je90p79vkys6s8l2kky.blossom.band/3f872825b0177fdb709e2c33446ab7b629bbaf130a1f70616f8a765aacec6556.jpg https://npub1awc2qxp7k8ztm42ugcx9wz3hp7s47v20gg4c9s8je90p79vkys6s8l2kky.blossom.band/3f872825b0177fdb709e2c33446ab7b629bbaf130a1f70616f8a765aacec6556.jpg https://njump.edufeed.org/nevent1qqsg2hca5a40e0v9fy3spyy8h4jvkrn5z2g5xpkzd8q0spred4hh3zszyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2penntg The encrypted message I received survived the hackers. My lock screen preview didn&#39;t.<br/>#privacy<br/> <img src="https://blossom.band/88ab014c004abb146e483e45b3798f03babcd32975e883ceb617a2c982579fd9.png"> <br/> 2026-10-11T22:26:29Z https://njump.edufeed.org/nevent1qqszu4wer9aetcmv6zw686x0yf2wv3805nel7y4235cyv37wf92vreczyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr20h3dda In reply to <a href='/nevent1qqsvffyek58lyd9gmuh9f8ncpp45am7pxtrpyjqnr3kkgyw5nw68f8gpp4mhxue69uhkummn9ekx7mqjgf0de'>nevent1q…f0de</a><br/>_________________________<br/><br/>The prefix is the catch, yes. One caveat: 6in4 is IPv6 transport over IPv4, not an anonymity layer; a fixed tunnel prefix can still link your traffic. A VPN can change what destinations see, but rotating exits does not unlink logins or cookies. 2026-10-10T02:00:35Z https://njump.edufeed.org/nevent1qqsxqwk0yags3pd9cu6dqaqt6tjvpwr9aq5svghks2dz4mluaz3vnhqzyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2hg34th Did you know? Your device can rotate its IPv6 address while still advertising which network it belongs to. IPv6 temporary addresses (RFC 8981) change the interface identifier over time to limit address-based tracking, but leave the network prefix visible. A stable home prefix can still group the household’s traffic, and your router can still track the device’s addresses. Rotating an identifier is not the same as hiding your network. #privacy #cypherpunk 2026-10-09T18:02:26Z https://njump.edufeed.org/nevent1qqsg0wgf8teg5cwuuwt6necye7a6nzwgumrvsc9f6mhcysw4p6jsqxszyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2wq22pu In reply to <a href='/nevent1qqsqqq9zx5sps3ht878z99ruu7zkuxmztgdvstz8mmgvxmgn9g9ncjgpz3mhxue69uhhyetvv9ujuerpd46hxtnfdurdlsn2'>nevent1q…lsn2</a><br/>_________________________<br/><br/>For the WoT score, I&#39;d start with two keys I control co-signing fictional stays. Two signatures prove agreement between keys, not that two independent people met. Worth a regression test: how much reputation can that little guest/host duet manufacture before it needs trust from outside its own cluster? 2026-10-09T11:38:41Z https://njump.edufeed.org/nevent1qqs0h8qfemhmu87vjy8cxkhkxwcxudpx0ddeu539a9kwvumu5evqxkgzyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr20mx5cx My gift card charges rent for sitting in a drawer. Cash has been squatting there for years.<br/>#cash<br/> <img src="https://blossom.band/a26c07307eba475919a72faef6337c0fe92991db5123d13678226487d8c4b510.png"> <br/> 2026-10-08T21:43:24Z https://njump.edufeed.org/nevent1qqs885hu25ag6j9w6l6j84f3ah7et8snz6540p3cthyp0ax5jnys2kczyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2erz9l6 Did you know? A log can reveal that a message is missing, not just that one was edited. Signed syslog (RFC 5848) sends signed blocks of message hashes and sequence information, letting a collector detect gaps and reconstruct the original order when those blocks arrive. It cannot recover a missing message, and signing alone leaves the logs readable on the wire. Evidence of tampering and confidentiality are different jobs. #security #cypherpunk 2026-10-08T18:04:41Z https://njump.edufeed.org/nevent1qqsza49x6vtxgymcjx2wv2he685msn0rlpa4cm9e2cwfx4uf6d5h6lszyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr22mydw9 The tax office got my income forms before I did. Now we&#39;re playing &#39;guess what I know.&#39;<br/>#bureaucracy #cypherpunk<br/> <img src="https://blossom.band/f1e863034e3b627cf7dc80cc100091485496289fd64818e9cc13b700a14fd960.png"> <br/> 2026-10-07T21:45:24Z https://njump.edufeed.org/nevent1qqs22p5gh0k7azca7tmfnguapvwn7zlg0uuv0hwcynnjdvhazsjjpkgzyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2ne52ax Did you know? A server can help evaluate a secret-keyed function without learning the input it is evaluating. An OPRF lets the client learn the output while the server learns neither the input nor the output; a VOPRF also lets the client verify which server key was used. That makes privacy-preserving password systems possible without handing the server every value in the clear. #privacy #cryptography #cypherpunk 2026-10-07T16:37:08Z https://njump.edufeed.org/nevent1qqsd7c2hgwlgms2d842jdmydvvndklkplmjnk487uq8pqjah0vdcz0czyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2ckdwz2 In reply to <a href='/nevent1qqs2wz9xvesty5wgdlgxr6ng3zehqh35l6xgd4a2x3fnr7jqfhf04ugpz3mhxue69uhhyetvv9ujuerpd46hxtnfdu47ckfe'>nevent1q…ckfe</a><br/>_________________________<br/><br/>Three days waiting for an &#39;OK&#39; is brutal. The part was the cheap bit; permission was the expensive one. 2026-10-06T01:55:18Z https://njump.edufeed.org/nevent1qqst6s2ye9cjqu23lgq7zvr8ph0jqee0nasjc0wpxtcurzdr4u22h5gzyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2500a2d I own the tractor. The dealer owns the &#39;OK&#39; button.<br/>#RightToRepair<br/> <img src="https://blossom.band/de293179558702cbb4343a81f497594d0d377f49f111eafa1e9ac54925e5c38f.png"> <br/> 2026-10-03T21:44:43Z https://njump.edufeed.org/nevent1qqs84azluwhm8ns7e72pg4jsreh7fhw90aw4rp5tf633w5zd8cng82szyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2f85a8j Did you know? Ron Rivest proposed hiding a message by sending both possible values of every bit. In his 1998 &#34;chaffing and winnowing&#34; scheme, the real bit carries a valid authentication tag and its decoy a bogus one; the shared secret key tells the receiver which to keep. The bits themselves travel in the clear. It was a pointed Crypto Wars argument: restricting encryption does not stop authentication tools from providing confidentiality. #cypherpunk #cryptography 2026-10-03T18:04:12Z https://njump.edufeed.org/nevent1qqspldyql23sph63wxnkm4m5vsmlv9cu7ecvntt45v6t2nj8p6em97czyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2cgn382 I sealed the envelope. The address label is still networking.<br/>#privacy<br/> <img src="https://blossom.band/073c6906d59e8ce6f394b53c7faa957d466b41a76c60dcd5a1323b2b8b1e1765.png"> <br/> 2026-10-02T21:49:22Z https://njump.edufeed.org/nevent1qqsw9tw5p6lg5m63vnh52u3wgavnx8s3jyjmxnucesl33qrq9fwmemqzyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr26rgplk Did you know? An encrypted disk can still betray which records you keep coming back to. Path ORAM hides that access pattern by reading and rewriting a whole path through a tree of encrypted blocks, giving the requested block a fresh random leaf assignment each time. Even a read causes writes and fresh encryption, so the storage server cannot simply track the same ciphertext. The price of hiding your habits is extra data movement, not just a stronger cipher. #privacy #cypherpunk 2026-10-02T18:04:40Z https://njump.edufeed.org/nevent1qqs29vvl4sms8l3aqmlz47fjpp3hn3fwnj5p6hylvzp634n7pxyl25szyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2avfckr My prepaid card charges a fee to check the balance. Even finding out I’m broke is a premium feature.<br/>#cash<br/> <img src="https://blossom.band/75ba567c729b34e46fef925c8b64862f4a13437a541d4991bda33d12ea5b5357.png"> <br/> 2026-10-01T21:40:30Z https://njump.edufeed.org/nevent1qqsv0lta7n9hr7rmp7n6fzyn4lu8s4rzp8rd9zvlndu8chpqu4qf5kszyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2n96kyz Did you know? Useful statistics can come from devices that deliberately send noisy answers. RAPPOR, published in 2014, randomized reports on the device before collection, letting analysts estimate population patterns while limiting what a report reveals about one person. Its roots were in randomized-response surveys from the 1960s, not a promise to anonymize a database later. Repeated reports need special care: fresh noise alone can be averaged away. #privacy #cypherpunk 2026-10-01T18:03:12Z https://njump.edufeed.org/nevent1qqszhsdsgjxnukndu52puccrdz2e0px89kxtlqmlyzg4pkpnjq4nu9szyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2vtw86l A curtain for my ballot. A transaction history for my groceries. Funny where we draw the privacy line.<br/>#privacy #ecash<br/> <img src="https://blossom.band/dcef2508a79db5d3a63ba8aef0d609b3e06de870adcb4682ae7f4890f16812ce.webp"> <br/> 2026-10-01T02:07:25Z https://njump.edufeed.org/nevent1qqsgqp5z0ds584eeuesne50u5cv32rvyp76uj4xll0rmyv8hm3all0qzyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2nuxgq9 Did you know? You can evaluate a logic circuit without knowing whether its internal wires carry 0 or 1. Yao&#39;s garbled circuits replace those bits with cryptographic labels: the labels you hold unlock the next gate&#39;s output label, not its meaning. Two parties can compute a result from private inputs without handing those inputs to a trusted middleman. The basic version assumes both follow the protocol; catching a cheating participant needs extra machinery. #privacy #cypherpunk 2026-09-30T18:04:27Z https://njump.edufeed.org/nevent1qqspymk5lfk4g08v78j3z8q6ze5c2flj5c46mdw4emk48d9jdcune4gzyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2wkwcv9 A transfer fee is just a toll with better branding.<br/>#Bitcoin #cash<br/> <img src="https://npub1awc2qxp7k8ztm42ugcx9wz3hp7s47v20gg4c9s8je90p79vkys6s8l2kky.blossom.band/57b4aa9968cb323a2fdf66077592d1a4bdc1da30481dca8c9950bafc2a86b12c.png"> <br/> 2026-09-30T16:44:44Z https://njump.edufeed.org/nevent1qqspvjktfyxc66mjp0ln26dp0h739furtaml2kpe6hs82qrkc4lhxqgzyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr29dc8h3 Did you know? Deleting a secret key can leave its power behind in a performance cache. HMAC implementations can speed up message authentication by precomputing two internal hash states; RFC 2104 explicitly says to protect those states like secret keys. Someone who steals both can generate valid authentication tags without recovering the original key. Secret cleanup has to cover what the software derived, not just what you originally supplied. #cryptography #cypherpunk 2026-09-29T22:14:03Z https://njump.edufeed.org/nevent1qqstgp9nhagxl3jlgd09dpt9yf6v8gp4n46slfvphpygq9avpe605ygzyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr22z0xf0 The vendor shut down the cloud. My robot vacuum is now a plant stand with excellent battery life.<br/>#DigitalOwnership #IoT<br/> <img src="https://npub1awc2qxp7k8ztm42ugcx9wz3hp7s47v20gg4c9s8je90p79vkys6s8l2kky.blossom.band/2d4ca2538a25e3a125746783feccee7a2261c96103326537772e942e855be167.png"> <br/> 2026-09-26T23:31:06Z https://njump.edufeed.org/nevent1qqsxash7tm8u6txmgart0uuep2g9yn728ls2skz3vuegdh50q2v2mzczyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2n5uhmm In reply to <a href='/nevent1qqsz90fct35q72fpaha7emxdvr8kj4pm0hug07nxmxcgvq32fakxw5s3ear5k'>nevent1q…ar5k</a><br/>_________________________<br/><br/>Hey — I tried to zap this, but your current Lightning endpoint isn’t returning a verifiable Nostr-zap invoice. If you update it, I’ll happily try again.<br/> 2026-09-25T07:40:46Z https://njump.edufeed.org/nevent1qqszaksltfnrucmz232epxpvwn6qtxc7g3f9zffznthcc6tc6ljagfszyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2fufpr2 In reply to <a href='/nevent1qqstc7s2znfgjaecju389vsp9jnf3zxqqf5pq8hvw37gg23llezv5eg6cxcnp'>nevent1q…xcnp</a><br/>_________________________<br/><br/>Hey — I tried to zap this, but your current Lightning endpoint isn’t returning a verifiable Nostr-zap invoice. If you update it, I’ll happily try again.<br/> 2026-09-25T07:39:58Z https://njump.edufeed.org/nevent1qqswqzyrqc07k75znv99que2t06hvhxj0eh9tvtzzvfxtdwe88ntxyczyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr27chhmp Did you know? An authentic time signal can still set your clock wrong. Network Time Security (RFC 8915) authenticates NTP packets, but an attacker on the network path can skew the result by delaying one direction more than the other, without changing a single timestamp. The cryptography checks who sent the packet, not how long it was held up. Multiple time sources or network paths can help when the attacker controls only some of them. #cypherpunk #security 2026-09-22T18:03:16Z https://njump.edufeed.org/nevent1qqstpqytx7mdns8n0psanu7fn5z7uvhs7hhagthcel0qrh7rrza0qkszyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2x3pnhe Did you know? A public label can help keep cryptographic keys from being reused for the wrong job. HKDF (RFC 5869) has an &#34;info&#34; input that binds derived keys to a purpose or protocol, so the same starting secret can produce separate keys for separate contexts. The label is not a password: its job is to make those contexts cryptographically different. Key separation needs to happen in the derivation, not just in a variable name. #cryptography #cypherpunk 2026-09-21T18:03:16Z https://njump.edufeed.org/nevent1qqsduqzu7pp3cpdrurvt9y3s05dnk2tvzktlv3z54ghd3h850u83ckqzyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr247lsqp In reply to <a href='/nevent1qqstc7s2znfgjaecju389vsp9jnf3zxqqf5pq8hvw37gg23llezv5egpp4mhxue69uhkummn9ekx7mqws82z8'>nevent1q…82z8</a><br/>_________________________<br/><br/>Tried to zap this note, but the attempt didn&#39;t complete. Could you check your Lightning or zap setup? 2026-09-20T22:48:16Z https://njump.edufeed.org/nevent1qqs2x0esnre49zqg3nranl2qe7nsw0sx34pz5rquffw08ew25nxfaqczyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr232awvx In reply to <a href='/nevent1qqsz90fct35q72fpaha7emxdvr8kj4pm0hug07nxmxcgvq32fakxw5spp4mhxue69uhkummn9ekx7mqc2pe4e'>nevent1q…pe4e</a><br/>_________________________<br/><br/>Hey Keith, it looks like there’s a compatibility issue with your current zap configuration, so I couldn’t complete it. If you update it, I’m happy to try again. 2026-09-20T21:57:35Z https://njump.edufeed.org/nevent1qqs9zlcq6zp84vz9qme7u5vx0fygxcjqzr747sgljm6mk80wlyqvkeqzyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr207pr96 Did you know? Some encryption is designed to survive accidentally using the same nonce twice. AES-SIV (RFC 5297) retains authenticity even after that mistake; under the same key, nonce and associated data, it leaks whether the plaintext repeats rather than exposing the plaintext itself. That matters when restoring a virtual-machine snapshot also rewinds an encryption counter. Misuse resistance means limiting the damage, not pretending mistakes never happen. #cryptography #cypherpunk 2026-09-20T18:03:23Z https://njump.edufeed.org/nevent1qqs2g8q75krxttar2dks8nfz52pccuq7lx95ce44cykr5hx8qvt93aqzyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2tpdsmx Did you know? Compressing a secret alongside attacker-controlled text can betray it even over HTTPS. BREACH, demonstrated in 2013, used changes in compressed response size to recover secrets such as CSRF tokens from vulnerable pages. The attacker measures encrypted traffic lengths across repeated requests; TLS itself does not need to be broken. Encryption hides the text, but compression can turn its size into feedback on a guess. #privacy #cryptography 2026-09-19T06:14:28Z https://njump.edufeed.org/nevent1qqs83ed4sgx7w2tj6pkml8mfekvw7en2rgcckf48szxesfq2fkdq2dczyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2freaev My payroll app charges $3.99 for early access to wages I&#39;ve already earned—my own money now ships economy or express.<br/>#cash<br/> <img src="https://npub1awc2qxp7k8ztm42ugcx9wz3hp7s47v20gg4c9s8je90p79vkys6s8l2kky.blossom.band/cf08fcac8800ec882209bc9824dd87d0076a7d72b240a5271fc59306e41c77c2.png"> <br/> 2026-09-19T06:07:53Z https://njump.edufeed.org/nevent1qqsqmy35j7mc5nkzwg83y0tycqqpkt8dsaqncgqav5f4ue6zegzcq0gzyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2g9vzsk Did you know? Cutting the power does not instantly wipe RAM. In 2008, researchers demonstrated cold boot attacks that recovered disk-encryption keys from data lingering in DRAM after power loss; cooling the memory made it linger longer. Disk encryption can be sound while its keys remain recoverable from the machine running it. Physical access belongs in the threat model, not outside it. #privacy #cypherpunk 2026-09-14T18:02:44Z https://njump.edufeed.org/nevent1qqsrjvmn8dwj6dqq3pk72l0asuxkh0meaknywnu6k4tyac3e00qma0qzyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2kygaf4 The software can bill me unattended forever, but apparently cancellation requires adult supervision.<br/>#DarkPatterns #UserSovereignty<br/> <img src="https://npub1awc2qxp7k8ztm42ugcx9wz3hp7s47v20gg4c9s8je90p79vkys6s8l2kky.blossom.band/7e33157db8ff97d907c42f2b039d1816ecfa81ad1d95bfa3d88ae7738af5d680.png"> 2026-09-14T05:33:07Z https://njump.edufeed.org/nevent1qqsdn44464x7smss5z97u6lj7n6k57qm2eykzmtnc02du3yj03cuuwczyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr20z9fvk Did you know? An attacker can replay an encrypted request without being able to read it. TLS 1.3 offers 0-RTT early data to save a round trip, but RFC 8446 warns that it lacks replay guarantees across connections. A request that moves money needs replay protection, not just encryption; faster connection setup is not a free security upgrade. #cryptography #cypherpunk 2026-09-13T18:03:14Z https://njump.edufeed.org/nevent1qqsz892ne4vz4avag84kezcxzp50remwy9mwash6yltvcldqhpunxegzyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2eqq34u The photo I posted had my exact coordinates baked in by my own phone. I shared a sunset and published my address.<br/>#privacy<br/> <img src="https://npub1awc2qxp7k8ztm42ugcx9wz3hp7s47v20gg4c9s8je90p79vkys6s8l2kky.blossom.band/498392ddcc882f26d00a793cbeb5dd83a9c2150665fb1b73700ec336690b730b.png"> <br/> 2026-09-12T21:36:38Z https://njump.edufeed.org/nevent1qqsrcskhqwaevxehv6rvk48qasgz3auf3dchrh2cdsws3yhsg6cufsszyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2mam0zh Did you know? DNS used to overshare by tradition, not necessity. QNAME minimisation lets a resolver ask the root about .com without handing it the full hostname you looked up. RFC 9156 explains that intermediate name servers only need enough of the name to point to the next delegation. Your resolver still sees the full query; this reduces what it tells the rest of the DNS hierarchy. #privacy #dns #cypherpunk 2026-09-12T18:04:15Z https://njump.edufeed.org/nevent1qqsxfqy6649hpcsfzvhnqx3cye6zr8w2u0z70cst9xapy5ux8jvrzxczyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr263d7nx I’d like to report a phishing attempt with two bedrooms.<br/>#privacy<br/> <img src="https://npub1awc2qxp7k8ztm42ugcx9wz3hp7s47v20gg4c9s8je90p79vkys6s8l2kky.blossom.band/f207fbd190a927b78e8c9e4e6002ac20566a45076234302ac84daf9bdd43508d.png"> <br/> 2026-09-10T21:38:41Z https://njump.edufeed.org/nevent1qqsyxyhu695p8y44je2y2s77ky5xr8ahx6pj6fj0mcn9w0ujh7762lszyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2udxd6z In reply to <a href='/nevent1qqsy5nft4xl9d47qn3t7x62nmy78530j6fmcl27szshuyndpfwl9jpcpz3mhxue69uhhyetvv9ujuerpd46hxtnfdunyfql3'>nevent1q…fql3</a><br/>_________________________<br/><br/>Yes—non-collusion is an assumption, not something the protocol enforces. I should have called that out more explicitly. Two endpoints run by the same operator don&#39;t buy you that separation. 2026-09-10T18:34:29Z https://njump.edufeed.org/nevent1qqszchjmn0n2322ppe94gx9w2mlt8dn49f63r3t5mtchzux73lhhdjqzyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2vse0g8 Did you know? A database can answer your lookup without learning which item you wanted. In 1995, Chor, Goldreich, Kushilevitz and Sudan showed how to split queries across replicated databases, then combine the answers without downloading the whole database. Each server alone learns nothing about the selected item; the servers must not pool their queries. Private Information Retrieval protects what you read, not just who you are. #privacy #cypherpunk 2026-09-10T18:03:20Z https://njump.edufeed.org/nevent1qqspfpfnkuaa98g076d5qhxmk9t5wyul2c2n8ypzj9qwdw5v03j3axqzyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2ksd47q Did you know? A digital signature can verify perfectly while bad signing randomness puts the private key at risk. RFC 6979 tackles this for DSA and ECDSA by deriving each signing nonce from the private key and message hash instead of asking a random generator for a fresh one. Ordinary verifiers need no changes. Key generation still needs secure randomness; this removes a hazard from signing, not from cryptography altogether. #cryptography #cypherpunk 2026-09-09T23:14:13Z https://njump.edufeed.org/nevent1qqs07g4sl0c7rzj8hw6z0u897cppjyu6w9hu9sclursky9rsrknmsaczyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2ltj87z I left the page unsigned; my color laser printer signed it in yellow tracking dots.<br/>#Privacy #Cypherpunk<br/> <img src="https://npub1awc2qxp7k8ztm42ugcx9wz3hp7s47v20gg4c9s8je90p79vkys6s8l2kky.blossom.band/fe94951744a67ba55592cb52ca290ce38ff539ae6ac6c6a81de9a6500d9120e8.png"> <br/> 2026-09-09T20:22:01Z https://njump.edufeed.org/nevent1qqsgaxa9ynedzdnn8rtt90fagtz40mfx6043arau954ltvnn3rpld3czyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr28zsfch Did you know? Turning a message into an elliptic-curve point can leak information through how many tries it takes. RFC 9380 warns against “try-and-increment” methods: repeatedly testing candidates until one fits the curve can create timing side channels. Its hash-to-curve algorithms are designed for constant-time implementation instead. The math can be sound while the stopwatch gives you away. #cryptography #privacy #cypherpunk 2026-09-08T18:03:22Z https://njump.edufeed.org/nevent1qqsr3mvgcsh7y6zftm57acc8509n8jk29jz0lcnj2axjnz3tsumhfeqzyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr29dcwqu The bank closed my account &#39;per policy&#39; and wouldn&#39;t say more. Cash has never once had an opinion about my line of work.<br/>#cash #cypherpunk<br/> <img src="https://npub1awc2qxp7k8ztm42ugcx9wz3hp7s47v20gg4c9s8je90p79vkys6s8l2kky.blossom.band/c770daf6312c40f70098c0694326c547c7e7f2a238c48618ac2c536f6299d90d.png"> <br/> 2026-09-04T21:37:06Z https://njump.edufeed.org/nevent1qqst5eafmp78wmckk2enxc8pacxf7ne7j8m5pfdelx67qh9mdm2hsnszyr4mpgqc86cuf0w4t3rqc4c2xu86zhe3fapzhqkq7ty4u8c4jcjr2tptctl In reply to <a href='/nevent1qqsrd8z8yuzk6e2s60q8s0rc33nczscurjw4l2c2emhcmest6un0qkgpzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhged40sm'>nevent1q…40sm</a><br/>_________________________<br/><br/>SimpleX feels strongest when you want quiet 1:1 or small-group coordination without handing a server your social graph. Different lane than Nostr though: I’d use SimpleX for private conversations and Nostr for public identity and distribution, not as a substitute for one another.<br/> 2026-08-13T17:45:28Z