Logo
Picture

Nirvati @getnirvati

The open source 🄯 server management software for the future. nirvati.eu Self-hosted Joined January 2023
  • Tweets
    180
  • Followers
    513
  • Following
    21
  • Likes
    67
getnirvati Profile Picture

Nirvati @getnirvati

4 weeks ago

@LukeDashjr @KarmaCpu Which is why I specifically mentioned onion domains and IP addresses. A LNURL just encodes a URL, so it can point to an IP address or onion domain. IP address assignment is centralized as well, but Tor isn't (AFAIK, I have no idea how it works exactly tbh).

getnirvati Profile Picture

Nirvati @getnirvati

4 weeks ago

@LukeDashjr @KarmaCpu Why do you consider LNURL centralized? A LNURL can be any URL, including an IP address or an onion domain.

getnirvati Profile Picture

Nirvati @getnirvati

2 months ago

@Anton__BTC @arbadacarbaYK @oomahq @start9labs @bcc8333 (More specifically, I broke something while trying to improve server security - it will be fixed soon)

getnirvati Profile Picture

Nirvati @getnirvati

2 months ago

@Anton__BTC @arbadacarbaYK @oomahq @start9labs @bcc8333 Our website is temporarily offline because of technical issues, we don't reject VPNs.

Nirvati retweeted
LukeDashjr Profile Picture

Luke Dashjr @LukeDashjr

2 months ago

If you find a security flaw, please follow the following steps in order: 1) Give details to upstream developers to develop or merge a fix 2) Notify downstream developers/distributors of the risk and how to patch it (not the details) so they can ship it ASAP 3) Give people at least a week to upgrade on their own 4) Notify the public that a vulnerability in the old version exists (no details) 5) After you can reasonably hope everyone has updated (months or years later), publish details and/or proof-of-concept There may be circumstances (eg, active exploitation in the wild) that justify deviation from this, but generally, this is a good approach. However, starting with #5 is black-hat behaviour.

getnirvati Profile Picture

Nirvati @getnirvati

2 months ago

@_pi0_ > Imagine how much longer it takes to discover smuggled backdoors in binary blobs Go, Rust and Zig ship libraries as source code. You can put binary blobs or obfuscated code on NPM too. > JavaScript runtimes like V8 JS runtimes are hard to audit binary blobs.

getnirvati Profile Picture

Nirvati @getnirvati

3 months ago

@stephenz010 @jimmysong @ProductionReady > What Bitcoin needs is a new protocol implementation from the ground up. You mean like this? github.com/btcsuite/btcd

getnirvati Profile Picture

Nirvati @getnirvati

3 months ago

More useless AI slop code that makes misleading claims about security: - Not all dependencies are SHA256-pinned - Dockerfile "removes network-capable Python code" for no reason This just hurts actual security projects. If you don't understand security, stop making slop.

DoingFedTime Profile Picture

Sam Bent @DoingFedTime

3 months ago

Most Tor Docker images are running outdated Tor, no guard protection, and leave telemetry on by default. HiddenForge v2.0.0 (my creation): Tor 0.4.9.6 + Vanguards, every dependency SHA256-pinned, zero telemetry, read-only filesystem, rootless Podman support. Built for a

getnirvati Profile Picture

Nirvati @getnirvati

4 months ago

You should always self-host your node 😉

getnirvati Profile Picture

Nirvati @getnirvati

4 months ago

This is a dangerous idea. Someone else's TEE = Not your keys = Not your coins A TEE makes it harder to access the keys, but a TEE can be compromised. Here are two papers with examples of previous issues: i.blackhat.com/briefings/asia… misc0110.net/files/sgxrop.p…

callebtc Profile Picture

calle @callebtc

4 months ago

This wallet is super interesting. I don't know why they don't mention it but last time I looked it was running a Lightning node for you IN THE CLOUD in a TEE (a server they don't have access to). This is a major technical feat IMO.

Nirvati retweeted
callebtc Profile Picture

calle @callebtc

4 months ago

The Apple App Store rules are borderline illegal. This isn’t about security. It's not about malware. It's not about user experience. It’s about control. - Use Google login? You must add Apple login - Sell digital products? You must use Apple payments - Apple takes 30% of your revenue (this is frankly insane) - You can’t tell users about cheaper prices outside the app - You can’t use a different payment system like Bitcoin - Apple can reject your app with vague reasons (or bend over due to political pressure) - You can’t install apps outside their store (most regions) They own the platform. They compete with you on it. And you still have to pay them. Is this a monopoly or a mafia gang?

getnirvati Profile Picture

Nirvati @getnirvati

5 months ago

- Allow configuring Tailscale settings - Prevent installing conflicting apps (e.g. Bitcoin Core and Bitcoin Knots) at the same time - Various other bug fixes and improvements 🧵3/3

getnirvati Profile Picture

Nirvati @getnirvati

5 months ago

- Redesign the Contribute page to allow you to make financial contributions to Nirvati from the dashboard - Add an emergency repair feature that allows you to repair Nirvati if something goes wrong with an installation or update (Accessible on port 9080) 🧵2/3

getnirvati Profile Picture

Nirvati @getnirvati

5 months ago

Today, we're releasing Nirvati 0.9.0. We couldn't fit everything we initially planned in this release, but more is coming soon. Thank you for your patience! Here's what's new: - Add a new server overview that shows resource usage and connected servers 🧵 1/3

getnirvati Profile Picture

Nirvati @getnirvati

5 months ago

@defenwycke Not sure which AI you used to hallucinate this post, but tell it that this is intentional behaviour and only affects the mempool.

getnirvati Profile Picture

Nirvati @getnirvati

5 months ago

@coinjoined @BTCsessions But in the end, using the Bitcoin blockchain for this makes no sense for multiple reasons.

getnirvati Profile Picture

Nirvati @getnirvati

5 months ago

@coinjoined @BTCsessions This is a very common scam and old ladies probably fall for it too.

getnirvati Profile Picture

Nirvati @getnirvati

5 months ago

@coinjoined @BTCsessions But most attacks like these work by the user getting the malicious script from somewhere and executing it immediately... So having a second stage payload stored somewhere isn't really a benefit, because you can easily update the page that is tricking the users into executing it.

getnirvati Profile Picture

Nirvati @getnirvati

5 months ago

@coinjoined @BTCsessions because a) It's already very easy to set up an anonymous server (and pay for it with Bitcoin) quickly b) Antivirus software can still recognise this as an attack The biggest benefit of it would be to have an "unremovable" malware payload stored permanently.

Trends for United States

Bryson
Olive Garden
Rory
Jimothy
Brandel
The R&A
Meatloaf
Wyndham Clark
Friendly
Logan Paul
Golf Channel
Roger Waters
#TheOpen
Group 2
#BudSummerOf250
US Open
Taylor Farms
Mike Cox
Odysseus
#BLOODSAGA_IN_DALLAS

You might like

Dragonfly is a drop-in Redis replacement, delivering 25X better performance at 80% lower cost. Host it yourself for free or pay per GB for Dragonfly Cloud.
Dragonfly
@dragonflydbio
3K Followers
Sound money. Sound music. ⚡️ Press play. Subscribe. Opt out.
The Orange Pill Jam P...
@OrangePillJam
1K Followers
Empowering all with self-hosting & media freedom. Explore CasaOS, ZimaOS, ZimaBoard, ZimaBlade, ZimaCube – your tools, your rules. DM us!
ZimaSpace
@ZimaSpace
5K Followers
Real-time #Bitcoin dashboard. View live price action, monitor on-chain data, and track key economic indicators - all for free. Charts: https://t.co/Qxufpr4AfZ
Bitbo
@BitboBTC
8K Followers
Head Coach for ??? Professor de CS2 Clube Do Joseval | Fundador da @agc_gg | Parceiro @GamersClubCS
Joseval
@JosevalAGC
1K Followers
Block 840.000 - 1.050.000, S19 95T, only solar/battery, nostr:npub1t09z9jcafdfa6wl3yy6fz9m5f3ugksuya3k8svt8fvjvjteewzssrluvlq
Kellermining
@kellermining
2K Followers
Theoretical physicist, developer (IT), STEM and #Bitcoin enthusiast, mentor @bitcointalents. npub1up5nehx3r3za6n8sfz70pyy562dle3368jlmjaw2rse2sx4t9f8qq7mvsz
Mathias 🖖
@Mathias_U1F596
1K Followers
Akzeptiere Bitcoin und Lightning Zahlungen. Mehr auf: https://t.co/u7Zto91VLx / https://t.co/lur8Uph05a / https://t.co/tasl47OuEb ⚡jens@coinsnap.app
Jens Leinert
@leinert
1K Followers
Bitcoiner
Joseph P Gardling
@gardling
786 Followers
Quelloffen
Anti-Spasti
@CoinbitIO
1K Followers
Doing bitcoin things @spiral_xyz.
Elias Rohrer
@_tnull
886 Followers
overengineerd, overthought and overjoyed.
Oscar P
@oscpacey
998 Followers
Jesus, Bitcoin
TORTCHER 🔴🔴🔴...
@tortcher
2K Followers
Noderunner. Distributed Authoritarian. Used to work for labor unions. #RunKnots #npub1v2j9qp8sl8av3klnxny29pnkle8cmucc9m7unwrzauaehvhl0rzsrdgaq7
The Bitcoin Commons
@BTC_commons
1K Followers
born on 21.12.21 Bitcoin Wissen einfach erklärt. Wir sind eure Bitcoin Mentoren, die wir in unseren Anfängen gebraucht hätten.
Bitcoin-Mentoring.me ...
@BTCMentoring
792 Followers