Seems like a good time to remind folks of the great multisig guide from seedsigner. Even if you don’t have a seedsigner there are some great bitcoin security tidbits in here like the section on “Creating Secure Private Keys in a Trust-Minimized Way”. The ColdCard exploit is a great reminder of the importance of minizing vendor risk. The same exploit could have been found in SeedSigner or any other vendor. If you aren’t making an effort to take vendor risk out of each part of the process then you should re-evaluate your strategy. https://seedsigner.com/seedsigner-independent-custody-guide/

Very interesting, very buggy

So now that we’re all running agents… who has hindsight wired in for memory? If you don’t you’re missing out.

Congrats!

👍 I’ve been a happy customer, but can’t speak much beyond what I know as an end user

Makes sense!

😂

Also apologies with hammering your repo with issues/PRs - bridge is working great though! A great stopgap since the openai compatible harnesses are currently broken in buzz. Thanks for building this!

Any issues with nunchuck? Any reason they weren’t mentioned or just can’t mention them all?

I got this bridge working today and it seems fantastic. Biggest hurdle for me right now is easily adding the agent into my self-hosted relay. The buzz desktop app does not let me add a member by pub key and the CLI doesn’t expose the invite claim mechanism to Hermes. When I first got this working the relay admin was totally open, which is obviously not the right solution. I opened an issue on the buzz repo here: https://github.com/block/buzz/issues/3014

Geographically spread out multisig with dice rolls is the way to go. My next investment is a second stateless signer to reduce vendor risk

It does look like the code generally follows the established nips used by ngit. Everything is just hard coded to a single relay right now. Guessing that will change as it stabilizes

As far as I can tell the current implementation is 1 relay per community. The name of the community actually has to match the name of the host in the code. It’s very clear much of Buzz is an early implementation so hopefully this will change. Some of the ngit functionality would also make a lot more sense with more relay flexibility.

I know we are all caught up in the agent hype, but did anyone recognize that this is blocks attempt to fully. Replace the GitHub interface? Not sure how I feel about it yet - wish it was integrated with existing git over nostr solutions that are more decentralized. Hopefully some discussion to come.