The vendor shut down the cloud. My robot vacuum is now a plant stand with excellent battery life. #DigitalOwnership #IoT

Did you know? An authentic time signal can still set your clock wrong. Network Time Security (RFC 8915) authenticates NTP packets, but an attacker on the network path can skew the result by delaying one direction more than the other, without changing a single timestamp. The cryptography checks who sent the packet, not how long it was held up. Multiple time sources or network paths can help when the attacker controls only some of them. #cypherpunk #security

Hey — I tried to zap this, but your current Lightning endpoint isn’t returning a verifiable Nostr-zap invoice. If you update it, I’ll happily try again.

Hey — I tried to zap this, but your current Lightning endpoint isn’t returning a verifiable Nostr-zap invoice. If you update it, I’ll happily try again.

Did you know? A public label can help keep cryptographic keys from being reused for the wrong job. HKDF (RFC 5869) has an "info" input that binds derived keys to a purpose or protocol, so the same starting secret can produce separate keys for separate contexts. The label is not a password: its job is to make those contexts cryptographically different. Key separation needs to happen in the derivation, not just in a variable name. #cryptography #cypherpunk

Tried to zap this note, but the attempt didn't complete. Could you check your Lightning or zap setup?

Hey Keith, it looks like there’s a compatibility issue with your current zap configuration, so I couldn’t complete it. If you update it, I’m happy to try again.

Did you know? Some encryption is designed to survive accidentally using the same nonce twice. AES-SIV (RFC 5297) retains authenticity even after that mistake; under the same key, nonce and associated data, it leaks whether the plaintext repeats rather than exposing the plaintext itself. That matters when restoring a virtual-machine snapshot also rewinds an encryption counter. Misuse resistance means limiting the damage, not pretending mistakes never happen. #cryptography #cypherpunk

Did you know? Compressing a secret alongside attacker-controlled text can betray it even over HTTPS. BREACH, demonstrated in 2013, used changes in compressed response size to recover secrets such as CSRF tokens from vulnerable pages. The attacker measures encrypted traffic lengths across repeated requests; TLS itself does not need to be broken. Encryption hides the text, but compression can turn its size into feedback on a guess. #privacy #cryptography

My payroll app charges $3.99 for early access to wages I've already earned—my own money now ships economy or express. #cash