A weekly briefing on the people, software, and protocol work shaping Nostr.

### Chapters

- **0:00 — Episode intro**

- **1:17 — Voca 1.0 reads verified Nostr notes and subscriptions aloud on Android**

- **3:06 — nostream expands relay-side DVM routing and authenticated operation**

- **3:32 — NDK for Dart fixes negentropy, multi-relay request lifetimes, and signature verification**

- **4:11 — Divine Mobile makes wrapped direct-message deletion and signing deterministic**

- **5:01 — Conduit Relay hardens its NIP-42 protected inbox**

- **5:40 — Amethyst ships NIP-84 highlights and fixes two relay-facing failure paths**

- **7:19 — Mostro validates signed orders before expensive work and preserves order audit events**

- **8:23 — Napstr publishes audio catalogues on Nostr and transfers files over Tor**

- **10:38 — MDK v0.9.17: newest KeyPackages, membership activity, and durable sends**

- **11:36 — pakstr v0.16.0: kind-32267 identifiers on publish**

- **11:54 — Zap Cooking scopes bunker relays and signs paid endpoints**

- **12:53 — nostrord repairs wrapped DMs and shared event links**

- **13:42 — Nostr Implementation Possibilities**

- **15:09 — Nostr Wallet Connect**

- **15:35 — NIP Deep Dive: Reposts and Reactions**

- **15:46 — Reposts (NIP-18)**

- **17:56 — Reactions (NIP-25)**

- **20:51 — Current client implementations**

- **21:30 — How They Work Together**

The complete audiobook of The Praxeology of Privacy by Max Hillebrand. Surveillance is industrial. Privacy is engineering. This work joins Austrian economics and the cypherpunk movement to explain why privacy matters and how it can survive.

Ohne Forks stirbt Bitcoin – so lautet die überraschend einhellige Erkenntnis aller Podcast-Teilnehmer. Doch wie kommen Max Hillebrand, Jan-Paul und Robin Linus zu diesem Schluss? Die Diskussion beginnt mit einem kritischen Blick auf Lightning und dessen Grenzen und führt weiter zur Erkenntnis, wie entscheidend Softforks und Hardforks für die Zukunft von Bitcoin sind. Dabei geht es genauer um eine mögliche Konsensänderung – die sogenannte Great Script Restoration – und um konkrete Vorschläge zur Verbesserung von Skalierung und Privatsphäre mithilfe von Shielded CSV und ZK-Verifiers. Lasst euch mitnehmen in eine Diskussion auf Augenhöhe und findet heraus, woran es Bitcoin heute noch mangelt, um wirklich zum Geld für die Massen zu werden.

### News

- **00:00 Intro**

Welcome to Nostr Compass Podcast #37 covering Postr, Nail's key-free mail notifier, Chama's escrow timer defect, Snort and Ditto NIP-22 reply rollout, and Six Years of Nostr Augusts.

- **00:12 Postr launches as a small Android composer**

Postr 1.0.0 is a deliberately small Android composer for kind 1 notes with NIP-55 Amber custody, a durable outbox, account-specific private drafts, and Blossom attachments with verified hashes. Publication uses NIP-65 write relays plus encrypted bootstrap relays, with a NIP-34 repository announcement on relay.ngit.dev.

- **01:25 Infans encrypts family tracking and co-parent sync over Nostr**

Infans is an Android baby tracker publishing encrypted kind 30078 NIP-78 events for partner sync under d-tag baby-tracker-sync and self-backups under baby-tracker-backup, with co-parent async notes inside the partner payload.

- **02:03 walls.rip Ghost Chat brings PGP-encrypted chat to public Nostr relays**

walls.rip Ghost Chat creates OpenPGP identities in the browser, encrypts messages to recipient public keys, and publishes armored ciphertext as kind 1 events to five default relays with room tags derived from PGP fingerprints.

- **02:34 pakstr 0.13.0 through 0.15.0 makes Zapstore publication explicit**

pakstr 0.13.0 through 0.15.0 repairs Blossom authorization with base64url and Content-Digest, validates the Zapstore publisher in 0.14.0, and writes listing metadata onto kind 32267 application events with release notes in kind 30063 content.

- **03:28 Heterodyne specifies portable personas and encrypted social communication**

Heterodyne composes Nostr signed events, Radicle storage, Marmot MLS group messaging, and KERI key-event logs into draft specifications for portable personas, encrypted comms, and social interaction layers.

- **21:06 Six Years of Nostr Augusts**

Nostr Compass #37 closes with an August retrospective from empty August 2021 through 2022 NIP-25 reaction generalization, 2023 NIP-19 naddr coordinates, 2024 addressable-event terminology, 2025 external-content reactions, and 2026 NIP-22 comment rollout in Snort and Ditto.

### Releases

- **04:25 Nostr Java v2.0.8: subscription isolation and portable NIP-44**

Nostr Java v2.0.8 routes EVENT, EOSE, and CLOSED to the named subscription instead of every listener, and makes NIP-44 use BouncyCastle's lightweight ChaCha20 engine without requiring process-wide JCE provider registration.

- **05:32 NoorNote v1.3.6: profile statuses and classified listings**

NoorNote v1.3.6 shows NIP-38 kind 30315 user statuses under profile NIP-05 names and renders NIP-99 kind 30402 classified listings throughout the app.

- **06:21 nostrord v2.9.0: relay-scoped group state and media**

nostrord v2.9.0 scopes NIP-29 leave and delete markers per relay, treats rejected duplicate joins as success, renders markdown image embeds, and adds NIP-17 kind 15 file rumors in direct messages.

- **07:23 Nail v0.1.0: an Android client and a key-free arrival watcher**

Nail v0.1.0 adds a Capacitor Android app for mailstr.app and a UniFFI notifier crate that subscribes for kind 1059 NIP-59 gift wraps tagged #p without holding key material, fetching the last two days by wall clock because NIP-59 backdates created_at up to two days.

- **08:40 MDK v0.9.14 and v0.9.15: KeyPackage selection, epoch-gap recovery, and split relay roles**

MDK v0.9.14 batches and prewarms KeyPackages for invites; v0.9.15 selects the newest valid KeyPackage, arms epoch-gap recovery before publish gates, separates directory discovery from operational relays, and classifies empty admin policy as admin depletion.

- **10:40 Zeus v13.2.0: wallet-connect budgets, races, and secret rotation**

Zeus v13.2.0 counts pending NIP-47 payments against connection budgets including routing and melt fees, serializes pay_invoice handling, rotates client secrets on relay change, and repairs lookup and transaction-list reconciliation.

- **11:20 NYM: post-quantum private messages and threads in channels**

NYM v3.74.533 adds post-quantum encryption to private and group messages, v3.75.543 adds message threads across channels and DMs, and v3.73.530 adds Bluetooth mesh in supporting browsers.

- **12:03 diVine 1.0.22: relay and signer lifecycles that end when the session does**

diVine 1.0.22 closes relay and NIP-46 signer connections on sign-out, releases subscription slots after bounded reads, stops retrying terminal NIP-04 DM duplicates, and lets recipients remove unwanted badges.

- **12:32 Chama v6.0.1: a 32-bit timer that emptied every browser escrow**

Chama v6.0.1 fixes a Fedimint browser 32-bit timer wrap that made 90-day ecash escrow deadlines read as immediate, returning funded sats to funders while Nostr trade state still displayed as locked.

### Project Updates

- **14:46 Shopstr keeps remote-signer and wallet secrets out of browser storage**

Shopstr stops writing NIP-46 bunker secrets and full NIP-47 wallet-connect strings to localStorage, keeping them in runtime memory and deleting legacy stored copies on read.

- **15:14 Routstr verifies relay-sourced provider discovery**

Routstr SDK now verifies relay-delivered provider announcements, model lists, and reviews before ranking, drops events more than fifteen minutes ahead of local clock, and fails closed when trusted reviews are unavailable.

- **15:47 nostr-tools binds gift-wrap rumors to their seals**

nostr-tools requires kind 1059 wraps, kind 13 seals with valid signatures, and matching rumor and seal pubkeys when unwrapping NIP-59 events, skipping hostile wraps in batch unwrap instead of aborting the query.

- **16:19 Haven adds signed relay administration and a local notes browser**

Haven exposes NIP-86 management calls authenticated with NIP-98 owner events, adds a read-only notes browser that keeps encrypted kinds opaque, and fixes a default-LMDB event-count loop.

- **16:59 Amethyst moves Blossom authorization off image-loading threads**

Amethyst starts Blossom read authorization signing off OkHttp dispatcher threads, awaits one shared signature per host for gated images, and aligns token encoding with BUD-11 Base64url without padding.

### NIP Updates

- **17:31 NIP-22 comment-thread rollout for ordinary text replies — Open**

Snort now writes every reply as kind 1111 NIP-22 comments with uppercase root tags, and Ditto publishes text replies as kind 1111 and voice as kind 1244, while NIP-30 now lists kind 1111 among events that may carry emoji tags.

- **17:46 NIP-47 pay_invoice fee-ceiling proposal — Open**

An open NIP-47 amendment adds optional max_fee millisatoshi ceiling to pay_invoice with FEE_LIMIT_EXCEEDED when routing cost exceeds amount + max_fee and required fees_paid in responses.

- **18:07 NIP-32 language-label proposal — Open**

An open NIP-32 proposal standardizes `["l", " ", "lang"]` author-declared language labels so relays can filter with #l without post-download detection, migrating examples in NIP-66, NIP-68, and NIP-71.

- **18:27 NWC-09 lookup_payment and NWC-12 BOLT12 details — Open**

Open NWC-09 defines optional lookup_payment beside NIP-47 core with wallet-scoped selectors and common result envelopes, and NWC-12 adds BOLT12 offer and payment details reusing that envelope.

- **18:59 NAP-DISPLAY draft — Open**

NAP-DISPLAY proposes display.list and display.push so napplets request pixel displays the host policy allows, with runtime validation before any batch changes hardware state.

- **19:43 Marmot same-account enrollment experiment — Open**

An open Marmot experiment replaces the withdrawn External Commit draft with bounded same-account Add and Remove Commits, QR pairing via marmot-pairing-v1:, local kind 453 proofs, and kind 452 Welcome acknowledgements for KeyPackage recovery.

### News

- **00:00 Intro**

Welcome to Nostr Compass Podcast #36 covering Amber relay-auth hardening, Citrine phone relay hosting, Nail email bridge, six open NIPs proposals, and deep dives on NIP-58 badges and NIP-22 comments.

- **00:17 Amber 6.5.0 closes a relay-auth confused deputy and encrypts stored secrets**

Amber 6.5.0 closes a NIP-42 confused deputy that let callers obtain kind 22242 auth events for unapproved relays, fixes NIP-46 replay, envelope-encrypts stored secrets, and adds caller authorization, fail-closed permission parsing, and secure QR screens. 6.5.1 re-encrypts on Keystore rotation; 6.5.2 debounces relay status and warms the account cache.

- **01:35 Cambium 0.4.0 signs for websites and sheds relay-auth bursts**

Cambium 0.4.0 adds website signing through validated nostrsigner: callbacks without inheriting native app permissions, fixes minimal-event signing, and moves rust-nostr from 0.44.2 to 0.44.8 for spec-following NIP-46 connect responses. 0.4.1 through 0.4.3 reserve queue slots ahead of relay auth, deduplicate kind 22242 signatures, and add per-identity authentication cooldowns.

- **03:00 Citrine 3.1.0 turns a phone relay into a group host and a site host**

Citrine 3.1.0 adds NIP-29 group hosting, NIP-86 relay management with a settings screen, and NIP-5A static websites with a modernized browse list defaulting to nsite.run, nos.lol, and nostr.land. The release adds author purge on ban, configurable REJECTED_KINDS, rebroadcast to external relays, and database-backed logs.

- **07:36 Vector 0.4.2 makes community moderation survive a spam wave**

Vector 0.4.2 queues rapid bans into one key rotation, explains dissolved-community invitations, and stops catch-up messages from ringing as new notifications. Cross-client review with Armada fixes sharded community list tie resolution, and mutes now apply across channels and DMs while syncing blocks, mutes, and nicknames between devices.

- **09:31 Sonar brings threaded replies to a mesh messenger with NIP-C7**

Sonar 0.1-alpha.13.1 adds Signal-style replies on NIP-C7 kind 9 chat with mentions, bounded Bluetooth reassembly, mesh-path signature verification, and FCM push fallback. 13.2 and 13.3 fix chat-open crashes and iOS keyboard overlap.

- **10:17 Nostria starts publishing podcasts and asks relays to count**

Nostria 4.1.70 and 4.1.71 add podcast publishing for premium subscribers as signed Nostr events. 4.1.69 uses NIP-45 COUNT for reaction, reply, and zap totals in feeds.

- **21:22 Nail brings email onto Nostr as gift-wrapped events**

Nail from the Formstr team launched at mailstr.app with kind 1301 mail rumors inside kind 1059 NIP-59 gift wraps, NIP-17 inbox delivery, NIP-32 folder labels, and Blossom attachments over 60,000 bytes. Its Node LMTP bridge grades incoming mail into four provenance states and authenticates API calls with NIP-98.

- **31:45 Glow stores wallet labels on relays under a passkey-derived identity**

Glow derives a Nostr identity from passkey login and lists or saves wallet labels to relays under that identity, collapsing byte-identical duplicates across partial relay coverage.

### Releases

- **11:13 MDK 0.9.14: fail-closed group history through faster group creation**

MDK 0.9.12 makes missing fork anchors a hard error in PR #1329, persists leave proposals atomically in PR #1360, and refuses to guess manifest-less incident replay in PR #1140. 0.9.13 adds storage format v2 in PR #1421, and 0.9.14 adds pre-uploaded founding images in PR #1498 with KeyPackage batching in PR #1494.

- **13:58 Divine Mobile 1.0.20: minting a badge without leaving the app**

Divine Mobile 1.0.20 lets users mint and award NIP-58 badges in-app and explains earning requirements when a reader taps a profile badge, alongside light theme, stop-motion editor tools, and screen-reader support.

- **15:05 ClipRelay 0.2.0: pairing a signer with a camera**

ClipRelay Android 0.2.0 adds nostrconnect:// QR login and camera scanning of bunker URLs, with a sixty-second bunker timeout and restored Amber retry. Desktop 0.2.0 carries the same timeout and login-tab fixes.

- **16:20 Bark 1.3.9: a browser signer that runs on Android**

Bark 1.3.9 declares Android support for Firefox with tab-based approval when popups are unavailable, verified on GrapheneOS with Firefox 153.0.4. 1.3.8 limits Heartwood dialect probes to Heartwood-identified signers so standard sign_event calls reach rust-nostr bunkers.

- **17:20 Bray 3.0.0 and Toll Booth 6.0.0 move to a shared wallet-connect library**

Bray 3.0.0 and Toll Booth 6.0.0 adopt nwc-kit for NIP-47 payments with reproducible byte-identical builds across two independent runners. Toll Booth 6.0.1 through 6.1.2 pin deploy host keys and restore image builds.

- **17:53 NoorNote 1.3.4: joining encrypted communities from an invite link**

NoorNote 1.3.4 adds encrypted Armada and Concord community joins through invite links with activity notifications, plus controls for hiding external quote posts globally or per author.

- **18:27 Mostro moves dispute chat off gift wrap**

Mostro Mobile 1.3.2 migrates dispute chat from NIP-59 gift wrap to kind 14 chat envelopes with durable per-conversation cursors. mostro-core 0.14.5 serializes the rumor identifier inside the gift wrap in PR #164.

- **19:28 NYM 3.73.522: encrypted group chats and an encrypted local store**

NYM 3.73.522 encrypts the local SQLite store after 3.73.521 refines encrypted group chat and 3.73.520 fixes content-security-policy and duplicate-message presentation.

- **19:55 Morganite 0.0.4: verifying a blob before it is cached**

Morganite 0.0.4 verifies Blossom blob hashes in a single pass before caching, tracks cache size incrementally, moves blocking network calls off the main thread, and persists logs to a local database.

### Project Updates

- **32:43 Amethyst rebuilds its relay authentication decision flow**

Amethyst merged PR #3899 redesigning NIP-42 permissions and decision flow, PR #3905 waiting for challenge resolution, PR #3931 defaulting new accounts to always authenticate, and PR #3906 recognizing NIP-29 groups and Concord communities as joined venues.

- **34:05 nostrord implements an unmerged encryption-key proposal**

nostrord merged NIP-4e encryption-key support in PR #261 with kind 10044 keys held locally, device pairing over kinds 4454 and 4455 in PR #247, and relay-scoped group identifiers in PR #269 and PR #272.

- **36:08 nostream adds a relay monitor and mints invite codes**

nostream merged NIP-66 relay monitoring in PR #724, NIP-43 invite-code minting in PR #732, and NIP-13 proof-of-work advertisement in PR #680, plus NIP-90 job persistence in PR #727.

- **37:05 rust-nostr fixes a gift-wrap identifier and rejects protected reposts**

rust-nostr PR #1444 computes the rumor identifier before gift-wrap encryption, PR #1445 rejects reposts of NIP-70 protected events, and PR #1450 tolerates missing NIP-47 response amounts.

- **37:44 NDK adds post-quantum direct messages and drops a GPL dependency**

NDK PR #713 adds hybrid post-quantum direct-message encryption with ML-KEM-1024 alongside classical key agreement, and PR #712 replaces a GPL-3.0 Dilithium implementation with fips204.

- **38:25 Nostter adds bookmark lists, profile badges, and Blossom uploads**

Nostter merged NIP-51 bookmark list shapes in PR #2311, NIP-58 profile badge handling in PR #2281, Blossom uploads in PR #2298, and NIP-05 mention autocomplete in PR #2303.

- **38:50 Zap Cooking binds admin routes to signed requests and encrypts stored wallet connections**

Zap Cooking PR #622 encrypts stored NIP-47 connection strings with NIP-44, PR #626 replaces spoofable admin pubkey checks with NIP-98 authentication, and PR #627 clears account data on logout.

### NIP Updates

- **39:20 NIPs PR #2438 proposes NIP-9A, comment-based patching — Open**

PR #2438 proposes NIP-9A where kind 1111 comments beginning with PATCH edit target content or tags on kinds 1, 11, 1111, 24, and 1621 with size and age limits.

- **40:44 NIPs PR #2437 proposes file encryption for NIP-94 — Open**

PR #2437 adds optional encryption-algorithm, decryption-key, and decryption-nonce tags to NIP-94 kind 1063 file metadata so Blossom hosts cannot read encrypted bytes.

- **41:56 NIPs PR #2436 amends NIP-7D — Open**

PR #2436 amends NIP-7D forum threads to allow kind 1-style formatting or Djot markup on kind 11 thread posts.

- **42:27 NIPs PR #2439 adds assign and unassign methods to NIP-86 — Open**

PR #2439 adds assign and unassign methods to NIP-86 so relay administrators can grant admin permissions without sharing the master key.

- **42:43 NIPs PR #2442 succeeds the audio-track proposal — Open**

PR #2442 ships kind 31337 track events and kind 31339 release objects in production at lightning.fm with optional NIP-57 zap splits.

- **43:20 Marmot PR #416 merged on 13 August and adds a durability and restart contract to the protocol core — Merged**

Marmot PR #416 merged 13 August and defines recoverable logical facts, restart equivalence, publish and convergence interruption boundaries, and crash conformance scenarios without wire encoding changes.

- **44:52 Concord PR #18, covered previously in last week's issue as an open proposal, has now merged on 15 August — Merged**

Concord PR #18 merged 15 August, sharding the encrypted community list across kind 33302 events, removing the fifty-membership limit, and pruning retired entries to stay within relay size limits.

- **45:18 Concord PR #22 proposes community-owned audio and video brokers — Open**

Concord PR #22 proposes optional av_brokers on CORD-02 metadata with CORD-07 rendezvous drawing from community brokers or member-owned fallbacks.

- **45:38 Concord PR #23 makes an existing implementation behavior normative in CORD-05 — Open**

Concord PR #23 makes CORD-05 require that the owner genesis metadata edition opens under delivered keys before persisting a join, codifying behavior Vector and Armada already enforce.

### NIP Deep Dives

- **46:16 NIP Deep Dive: NIP-58 Badges**

NIP-58 splits badge issuance across a kind 30009 definition, a kind 8 award from the issuer, and a kind 30008 recipient display list with ordered a and e tag pairs. There is no revocation, transfer, or trusted issuer registry, so trust rests entirely on the issuer pubkey. Divine Mobile 1.0.20 mints and awards badges in-app, Nostter PR #2281 updates profile badge handling, and Amethyst publishes award events with its client tag.

- **50:57 NIP Deep Dive: NIP-22 Comments**

NIP-22 defines kind 1111 comments with uppercase root tags (E, A, I, K, P) and lowercase parent tags (e, a, i, k, p) so clients can fetch entire discussions without walking reply chains. Comments must not reply to kind 1 notes, leaving NIP-10 threading in place. Divine Mobile, Amethyst, and nostrord read and write kind 1111, and proposed NIP-9A patches in PR #2438 build on the same kind.

### News

- **00:00 Intro**

Welcome to Nostr Compass Podcast #35 covering post-quantum identity keys, MDK Marmot convergence hardening, Amber grouped signing, and deep dives on NIP-09 deletion and NIP-56 reporting.

- **00:16 nostr-wot-extension 0.4.0 adds post-quantum keys beside a Nostr identity**

nostr-wot-extension 0.4.0 derives ML-KEM-1024 encryption and ML-DSA-87 signing keys from 24-word seeds, publishes kind 10203 attestations binding post-quantum public keys with ML-DSA proof of possession, and adds opt-in post-quantum DMs combining ML-KEM with NIP-44 through HKDF inside NIP-59 gift wraps.

- **02:49 Divine Mobile 1.0.19 tightens accounts, private messages, and publishing**

Divine Mobile 1.0.19 builds account-scoped identity containers, waits for explicit relay OK before confirming publish, rejects unauthenticated DM rumor fields and unsigned seals, routes followed-participant group chats into the inbox, and consumes observed deletion requests for removed videos.

- **03:52 MDK 0.9.11 hardens Marmot group convergence and recovery**

MDK 0.9.11 reopens stale convergence at the current group tip, commits inbound capability projections atomically, queues non-stable sends across restarts, securely deletes pruned SQLite projections, and zeroizes imported keys and OpenMLS buffers.

- **06:51 Nostria 4.1.67 expands encrypted-community administration**

Nostria 4.1.67 adds community dissolution, icon and banner administration, encrypted photo uploads, a full reaction picker, dual-pane community layout, threaded messaging, and a combined hub for public, group, and private chats over NIP-29 and Concord communities.

- **07:41 Amber 6.4.0 makes every grouped signing decision explicit**

Amber 6.4.0 redesigns multi-request signing with per-request Approve and Deny controls, returns proper errors for denied NIP-46 bunker requests, and adds localized labels for 113 more event kinds including Concord and NIP-51 Git bookmarks.

- **09:05 Safebox Acorn separates a portable recovery component from the web app**

Safebox Acorn extracts a standalone Python CLI for key, Nostr profile, relay, Cashu, and Lightning helpers with 256-bit record-protection keys encoded as checksummed 24-word phrases, framing Acorn as the replaceable protocol component for household Safebox recovery without one appliance dependency.

- **16:43 Pact brings mutually consented agent bonds to Nostr**

Pact is an early-stage agent relationship layer on MATE.md and draft NIP-BD with signed mutually consented bonds published over Nostr or NIP-59 gift-wrapped for private bonds, plus MCP server, TypeScript SDK, CLI, daemon, and web interface.

### Releases

- **10:11 Mostro Core 0.14.2 changes the encrypted chat envelope**

Mostro Core 0.14.2 replaces gift-wrapped chat with kind 14 envelopes using separate conversation-encryption and signing keys derived from peers' shared secrets, while legacy gift-wrap helpers remain for migration.

- **11:06 Mostro 0.18.1 starts a Cashu escrow path and hardens the daemon**

Mostro 0.18.1 lays Cashu escrow foundation with mint integration and first lock action, uses trusted-node price announcements, advertises NIP-13 proof-of-work for first contact, and hardens LNURL fetches and hold-invoice subscriptions after restart.

- **12:12 LaWallet NWC 2.3.0 adds Nostr notifications and zap receipts**

LaWallet NWC 2.3.0 sends received and forwarded notifications as configurable Nostr events with optional NIP-44 encryption and publishes signed NIP-57 kind 9735 receipts after zap settlement.

- **13:00 nostr-double-ratchet TypeScript 0.0.166 binds public invites to session keys**

nostr-double-ratchet TypeScript 0.0.166 requires invite responses to prove session-key ownership, preventing reusable public invites from binding one Nostr identity to another party's session.

- **13:55 cln-nip47 0.2.0 expands and isolates NWC requests**

cln-nip47 0.2.0 adds hold-invoice create, cancel, and settle NIP-47 methods, caps transaction lists at 500 entries, deduplicates requests by event ID, and isolates failed notifications per client.

- **14:45 ClipRelay 0.1.3 restores relay and signer connections after idle periods**

ClipRelay desktop and Android 0.1.3 add typed clipboard send, test liveness with real relay round trips after idle periods, escalate from resubscription to socket replacement, and timeout stalled NIP-46 signer calls.

- **15:42 NoorNote 1.3.2 moves article discovery into the social graph**

NoorNote 1.3.2 replaces its flat global article feed with first-, second-, and third-degree contact discovery and collapses replayed DMs from unknown senders into one rolling notification.

- **16:19 Bray 2.4.0 adds a compact remote-signing dialect**

Bray 2.4.0 accepts object-form NIP-46 signing requests and adds sign_event_compact returning only event ID, signature, pubkey, and timestamp for constrained hardware signers.

### Project Updates

- **17:42 nostrord keeps group muting synchronized between devices**

nostrord PR #250 stores per-group mute choices in self-encrypted NIP-78 kind 30078 events so settings follow the account across devices without revealing the group list to relays.

- **18:07 Amethyst completes Concord's invite lifecycle**

Amethyst PR #3888 lets invite links survive community refounding, implements encrypted CORD-05 invite lists with per-link revocation tombstones, and adds amy CLI paths for control-key delivery, rekeying, and stranded-member recovery.

- **19:03 Buzz carries each community's appearance across desktop and mobile**

Buzz desktop PR #3653 and mobile PR #3767 store each community's theme, accent, and system mode as encrypted NIP-78 records on the community relay, with Buzz Desktop 0.5.10 accelerating channel loading and bounding initial timeline retention.

### NIP Updates

- **28:42 NIPs PR #2435 adds an optional b tag to a pull-request event — Open**

PR #2435 adds an optional b tag to NIP-34 pull-request events so authors can name a target branch other than the repository default.

- **29:00 NIPs PR #2434 proposes post-quantum identity keys — Open**

PR #2434 proposes deriving ML-KEM and ML-DSA keys beside secp256k1 from a NIP-06 seed and binding them with kind 10203 attestations without replacing event signatures.

- **32:15 NIPs PR #2431 proposes an expected public key for NIP-07 requests — Open**

PR #2431 lets browser clients attach the expected pubkey to NIP-07 signing requests so signers must use that account or reject the call.

- **32:46 NIPs PR #1813 remains an open double-ratchet proposal — Open**

PR #1813 specifies forward-secret encrypted conversations with keys advancing per message, implemented in nostr-double-ratchet and Iris but not yet merged.

- **33:14 NIPs PR #2433 closed without merging — Closed**

PR #2433 proposed distinguishing NIP-42 auth-required from restricted relay errors but closed without merging.

- **33:38 NIPs PR #2378 closed without merging — Closed**

PR #2378 proposed agent passports, discovery, task, and marketplace events but closed without merging.

- **33:53 NIPs commit 656cecc corrects the NIP-29 metadata example — Merged**

NIPs commit 656cecc adds a previous tag to the NIP-29 group metadata example showing how replacement events identify superseded events.

- **34:08 CORD PR #18 proposes sharded encrypted Community Lists — Open**

CORD PR #18 proposes sharding encrypted community lists across kind 33302 events, removing the fifty-membership limit, and pruning retired entries to stay within relay size limits.

- **34:54 CORD-02 PR #15 restricts writes to a community's control plane — Merged**

CORD-02 PR #15 merged 6 August and restricts Concord control-plane writes to owners and staff holding a control_root signing secret while all members retain read and verify keys.

- **35:16 CORD PR #12 closed without merging — Closed**

CORD PR #12 closed without merging after its control-plane portion was superseded by merged CORD-02 PR #15.

### NIP Deep Dives

- **35:31 NIP Deep Dive: NIP-09 Event Deletion Requests**

NIP-09 defines kind 5 deletion requests carrying e or a tags plus k tags naming referenced kinds, with addressable a references removing every version at that coordinate no later than the request timestamp. Relays should stop publishing only when the deletion request pubkey matches the target event author, and clients cannot treat relay acceptance as proof of authorization. Deletion is cooperative policy, not cryptographic revocation, unlike NIP-40 expiration chosen at publish time. Divine PR #6623, strfry PR #251, and Amethyst currently apply deletion at client or relay layers.

- **41:38 NIP Deep Dive: NIP-56 Reporting**

NIP-56 standardizes kind 1984 signed reports with p tags for accounts, e tags for notes, and categories including spam, impersonation, and illegal, optionally extended with NIP-32 labels. Reports prove one key made an allegation without making content removable by default, and the specification advises against automatic relay moderation while allowing trusted-moderator action. Unlike NIP-09, reports can target others' content but confer no deletion authority. Divine PR #6591, Conduit PR #250, nostrord, and Amethyst currently publish or process kind 1984 events.

### News

- **00:00 Intro**

Welcome to Nostr Compass Podcast #34 covering Sandstr client simulations, nostr-mill browser signing, nostrord relay groups, six merged protocol changes, and deep dives on NIP-50 search and NIP-84 highlights.

- **00:20 nostr-mill 1.6.0 puts signing consent and account recovery in the browser**

nostr-mill 1.6.0 asks consent by event kind with decoded content preview, time-limited grants, optional Google Drive NIP-49 key import, and experimental scrypt-HKDF relay backup with quorum verification before recovery.

- **01:57 nostrord 2.5.0 gives relay groups stable, relay-specific identities**

nostrord 2.5.0 derives NIP-29 identity from group ID plus host relay, adds NIP-56 moderation inbox, NIP-84 highlight rendering, Blossom or NIP-96 uploads, and NIP-55 Amber login.

- **03:08 Primal Android 3.5.25 updates remote signing and follow-list filtering**

Primal Android 3.5.25 updates remote signing, adds follow mute lists, auto-repairs stalled relay connections, rejects invalid follow-list entries, and caps cache at 100 MB with feed prefetching improvements.

- **03:47 Nostur 1.30.2 expands private replies and media in direct messages**

Nostur 1.30.2 always exposes private-reply actions, adds per-conversation DM media caches with clearing controls, shows referenced messages in live chat, and fixes feed pagination and nested-reply rendering.

- **04:26 Chama 5.7.0 adds arbiter records and cached trade recovery**

Chama 5.7.0 displays arbiter locked amounts and bond tenure, records backup-arbiter replacements, defines dormant kind 38136 fault attestations, and retries incomplete relay histories against durable device cache.

- **05:25 Auditable Voting 0.1.165 restores delegated ballot delivery**

Auditable Voting 0.1.165 restores delegated blind-ballot issuance through authenticated delegation delivery and control-DM backfill, keeping blind-credential DMs on configured private relays.

- **07:13 Sandstr lets newcomers test-drive Nostr clients with mock data**

Sandstr launched August 3 with reference-verified simulations of Damus, Amethyst, Primal, Snort, YakiHonne, Coracle, and Wisp plus previews of Gossip, Keychat, and Olas, all running locally against mock data without keys or relay connections.

- **09:07 mineracks signer pairs a browser extension with a desktop bunker**

mineracks signer ships a NIP-07 browser extension and desktop 0.1.0 NIP-46 bunker with NIP-49 key storage, per-request approval, and optional per-application auto-approval on Apple Silicon.

### Releases

- **10:05 Jumble 26.8.1 adds proof-of-work controls and comment previews**

Jumble 26.8.1 remembers NIP-13 proof-of-work difficulty, displays verified-work badges, previews linked comments above external content, and refreshes default relays.

- **11:34 nostr-calendar 2.1.0 restores private-form signer binding**

nostr-calendar 2.1.0 binds private-form submissions to the active signer, saves intentional duplicate events, parses calendar dates in local time, and adds app notifications plus an iOS client.

- **13:47 Manent 2.0.0 adds tagging and search for saved notes**

Manent 2.0.0 adds local tags and search for organizing saved Nostr notes without modifying signed event contents.

- **14:15 nosvelte 0.6.1 closes empty subscriptions after EOSE**

nosvelte 0.6.1 closes empty subscriptions at End of Stored Events, cancels underlying REQ on cancellation, recognizes addressable events regardless of d tag position, and deduplicates reactions by event ID.

### Project Updates

- **15:01 NMP ties relay admission to declarations and broadens group queries**

NMP PR #1254 ties relay admission to the declaration owner, and PR #1255 generalizes NIP-29 group queries beyond one narrow lookup shape.

- **15:42 Mosaico derives managed-group identity from relay records**

Mosaico PR #758 derives managed-group identity from the hosting relay, and PR #757 observes published group records when resolving administration state.

- **16:42 Divine isolates slow relays during multi-relay queries**

Divine PR #6673 gives each relay query its own timeout so responsive relays return results while stalled connections are abandoned independently.

- **17:04 rust-nostr hardens encryption, hashes, and reconciliation**

rust-nostr PR #1421 reduces NIP-44 allocation, PR #1423 adds typed hashes, and commit 21e31c2 prevents malformed NIP-77 Negentropy messages from disconnecting the local relay.

- **17:38 Zeus serializes NWC payments before charging spending budgets**

Zeus PR #4305 counts pending NIP-47 payments against budgets, and PR #4303 serializes payment handling to prevent concurrent authorization races.

- **18:04 Nostr Components shares one relay connection attempt**

Nostr Components PR #105 lets concurrently mounted web components share one in-flight relay connection attempt instead of opening duplicate sockets during handshake.

### NIP Updates

- **18:42 NIPs PR #2430 proposes sticker packs as addressable kind 30031 definitions and a user's installed packs as replaceable kind 10031 — Open**

PR #2430 proposes kind 30031 sticker pack definitions and kind 10031 installed packs with shortcode, SHA-256, and MIME tags while images stay on NIP-B7 Blossom servers.

- **20:39 NIPs PR #2429 proposes kind 31436 addressable Gopher documents — Open**

PR #2429 proposes kind 31436 addressable Gopher nodes forming a gopherhole any relay-backed RFC 1436 bridge can serve.

- **22:45 NIPs PR #2428 proposes epoch-ticketed private groups — Open**

PR #2428 proposes private groups that rotate membership credentials between epochs so clients present current-epoch tickets instead of permanent bearer tokens.

- **23:51 NIPs PR #2425 merges a URI clarification into NIP-B0 — Merged**

PR #2425 merged a URI clarification into NIP-B0 bookmarks distinguishing omitted HTTPS prefixes from explicit URI schemes in d tags.

- **24:32 NIPs PR #2419 merges a smaller NIP-47 core — Merged**

PR #2419 merged a smaller NIP-47 core keeping connection URIs and common methods in the NIP while moving notifications, hold invoices, and transaction history to an extension repository.

- **25:19 NWC PR #2 merges BIP-321 payment methods — Merged**

NWC PR #2 merged BIP-321 pay and receive methods into the NIP-47 extension repository for wallet services choosing compatible BOLT11 or BOLT12 instructions from payment URIs.

- **25:38 NAP PR #95 proposes catalog discovery for Nostr-distributed sandbox applications — Open**

NAP PR #95 proposes host-filtered catalog discovery so napplets learn available applications and capabilities without receiving execution authority during discovery.

- **26:21 NAP PR #33 proposes shell-mediated file and blob uploads — Open**

NAP PR #33 proposes shell-mediated uploads where the host selects NIP-96 or Blossom rails, signs authorization, and returns NIP-94 tags without exposing storage credentials to the napplet.

- **27:15 Marmot PR #410 merged convergence and deferred-input rules — Merged**

Marmot PR #410 merged rules distinguishing missing epoch dependencies from stale input, keeping objects eligible for refetch after resource refusal with a domain-separated state commitment for conformance tests.

- **29:24 Concord PR #14 merged CORD-08 disappearing messages — Merged**

Concord PR #14 merged CORD-08 disappearing messages where community metadata sets lifetime, chat wraps carry NIP-40 expiration tags, and kind 1740 timer notices are exempt.

- **30:52 Concord PR #13 merged rotation-proof pinning into CORD-04 — Merged**

Concord PR #13 merged CORD-04 rotation-proof pinning with one replace-entire pin list per channel, original signed seals plus per-message NIP-44 expansion keys, and author deletions removing pins without forking the control plane.

### NIP Deep Dives

- **32:10 NIP Deep Dive: NIP-50 Search Capability**

NIP-50 adds an optional search string to NIP-01 filters for open-ended discovery when a client has a human query instead of known authors or tags. Supporting relays match primarily against content, sort by their own relevance score, and may implement key:value extensions like domain:, language:, and include:spam declared through NIP-11. The specification deliberately leaves tokenization and ranking implementation-defined, so clients should query several relays and drop poor-precision results. Nostria, Ditto, and NoorNote already send NIP-50 searches in different discovery surfaces.

- **35:53 NIP Deep Dive: NIP-84 Highlights**

NIP-84 assigns kind 9802 to signed highlights carrying selected text or empty content for non-text media, with a or e tags pointing at Nostr sources and r tags for web URLs stripped of tracking parameters. Optional p tags attribute authors, context tags preserve surrounding passage, and comment tags enable quote highlights without a separate kind 1 note. Each highlight is a regular signed event, not replaceable, so corrections create new events and public highlights reveal reading interests. nostrord 2.5.0, NoorNote, and Ditto already render or publish kind 9802 events.

Paul Rosenberg, Rockstar Dev, Francis Pouliot, Lloyd Fournier, and Max Hillebrand discuss how Bitcoin, artificial intelligence, and privacy technology can shift power away from centralized institutions. The BTC Prague panel covers self-custody, surveillance, practical privacy, personal threat models, and the cypherpunk tools people can use to protect their money and data.

Chapters

00:00 Intro

01:00 How to start small with privacy

04:37 You don't have to be Jason Bourne

07:15 Your money can't be on an exchange

08:00 Convenience is the enemy of privacy

11:32 Two or three AI companies, that's all

13:43 Our weapons are as good as theirs

15:44 You are your own worst adversary

17:32 The NSA is not your threat model

20:15 Using AI to DDoS the government

23:30 The fake Uber Eats driver

26:22 North Koreans hacked Martin

28:03 Don't live at your registered address

30:39 Ditch Google, use two hops

35:10 Custodying data is custodying lives

37:45 Be weird to your neighbors

Original video: https://www.youtube.com/watch?v=lVHrr8pa7to

Originally published by [BTC Prague](https://btcprague.com/)

### News

- **00:00 Amethyst 1.13.1 follows its Nostr apps launch with authenticated group and Blossom access**

Amethyst 1.13.0 opens napplets and NIP-5A nsites in an isolated keyless browser with consent-gated window.nostr, plus Git repos, Concord communities, NIP-29 groups, Buzz chat, wiki, RSS, and BOLT12 offers. 1.13.1 adds CORD-02 dissolution, kind 9008 deletion, NIP-29 host-relay authentication, and authenticated BUD-01 retries for gated Blossom downloads.

- **02:17 Code Call 0.2.68 adds a worker-folder browser after 0.2.66 introduced catch-up**

Code Call 0.2.68 replaces its workspace list with a nested folder browser rooted at the worker directory. 0.2.66 adds catch-up from the latest phone message over NIP-17 DMs with locally encrypted Blossom attachments retaining original file types.

- **03:11 GitWorkshop coordinates maintainers and keeps repository sync independent**

GitWorkshop 3.1.1 adds Android NIP-55 login, recursive lead-maintainer coordination, independent repository sync from invitation acceptance, cross-repo work-item references, and GRASP copies without coupling transfer to invitations.

- **04:10 Mosaico 0.1.2 lets coding agents share status over Nostr**

Mosaico 0.1.2 lets Claude Code, Codex, Goose, Hermes, OpenCode, and Grok sessions publish short status updates over NIP-29 relay groups without sharing transcripts, with Codex profile discovery and explicit relay choice in PR #626 and PR #629.

- **05:08 Nostrology maps relay-list concentration from published NIP-65 events**

Nostrology derives relay roles from latest NIP-65 kind 10002 events, charting 34,430 distinct relay URLs across 520,468 profiles at exactly one listed relay, with heavy concentration around relay.momostr.pink, relay.damus.io, nos.lol, and relay.primal.net.

- **32:08 Six Years of Nostr Julys**

Nostr Compass #33 closes with a July retrospective from 2021 NIP-05 DNS lookup through 2022 tag filters and reactions, 2023 live activities and classified listings, 2024 protected events and Cashu wallets, 2025 ecash discovery and voice messages, and 2026 addressable discovery plus NIP-29 subgroup and migration work.

### Releases

- **06:00 Kairos 0.1.1 adds reminders and a local Astraea instruction**

Kairos 0.1.1 adds due-date reminders and a local Astraea instruction to the offline-first task manager whose optional sync writes NIP-44 encrypted records with deterministic coordinates and NIP-09 tombstones.

- **06:36 Bray 2.3.0 gives its CLI general gift wrapping and a local Blossom test surface**

Bray 2.3.0 adds general NIP-59 gift wrap in PR #75 with NIP-42 test-relay challenges, in-memory BUD-01/02 server in PR #77, and NIP-77 reconciliation flags in PR #76.

- **07:33 Buzz Desktop 0.5.0 tightens invitations, search, and relay identity updates**

Buzz Desktop 0.5.0 adds use-limited invite links in PR #3141, author/channel/time search in PR #2871, join-policy retrieval in PR #2862, and persona identity republish after rename in PR #2607.

- **08:44 Shosho 1.0.0 expands its live-streaming marketplace**

Shosho 1.0.0 redesigns around creators, live sessions, clips, and products with configurable relay search, unified notification feed, clip publishing from streams, and improved threaded chat.

- **09:34 Mafrend v1.0 previews place-based Nostr chat on Android**

Mafrend v1.0 is the first public Android alpha of a place-based Nostr chat app where each map location is a dedicated chat room, distributed via Zapstore.

- **10:06 Hanami 0.1.0 gives Blossom servers a signer-mediated Android path**

Hanami 0.1.0 is an Android Blossom server companion using NIP-55 approval-mediated signing and NIP-98 HTTP auth, locking the web shell to the chosen server origin.

- **10:43 Cordn launches its Nostr-identity group chat on Android**

Cordn 0.2.1 adds Android NIP-05 identity onboarding and verified deep links alongside MLS group encryption with coordinator-assisted delivery.

- **11:24 Nostur 1.30.1 fixes threads and duplicate posts after 1.30.0 expands sharing**

Nostur 1.30.1 fixes nested reply thread expansion and duplicate draft publishing after 1.30.0 added disappearing DMs and share-sheet media publishing.

- **12:20 Formstr Drive 0.0.2 pairs Nostr file metadata with Blossom blobs**

Formstr Drive 0.0.2 adds in-app previews, Nostr Docs integration for office documents, chunked Blossom blob storage, and a local relay for metadata with Blossom holding file bytes.

- **13:27 NoorNote 1.3.1**

NoorNote 1.3.1 adds disappearing-message timers and default DM relays for new accounts, filtering global articles without cover images and routing repost notifications into the article reader.

- **14:15 algia 0.0.133**

algia 0.0.133 adds local-image uploads with NIP-92 tags to regular, channel, and group posting commands, following 0.0.132's NIP-29 and NIP-42 support.

- **14:55 swift-nostr 0.7.0**

swift-nostr 0.7.0 lets one NIP-46 remote signer drive all features, adds NIP-98 and NIP-29 group flows, and validates NIP-44 v3 padding against official vectors.

- **15:30 lawallet-nwc 2.0.0**

LaWallet NWC 2.0.0 adds WebAuthn PRF passkey login deriving the Nostr key in-browser without server exposure, multi-pubkey account linking, and webhook retry for wallet-connect events.

- **15:58 MDK 0.9.10**

MDK 0.9.10 retains pending sends during inactive transport, adds paginated conversation history in PR #1159, republishes current KeyPackage in PR #1167, and supports terminal group disbanding.

- **17:13 pakstr 0.3.1**

pakstr 0.3.1 lets web teams supply runtime configuration and an API proxy for Android Nostr client packages without rebuilding the shell, with Amber bridge and NIP-44 encryption support.

- **17:39 Ditto 2.34.2**

Ditto 2.34.2 renders user statuses as cards with custom emoji and expiry, shows zap comments as replies, and retains optional NIP-5A profile globe buttons.

- **18:28 Earthly 0.0.9**

Earthly 0.0.9 keeps likes visible across map entity drawer changes and sends valid NIP-57 zap-request JSON for verified receipt publication.

### Project Updates

- **18:55 Keep adds kind-scoped NIP-44 v3 signing and tightens approval policy**

Keep merged PRs #451 through #455 carrying NIP-44 v3 encrypt and decrypt through NIP-55 and NIP-46 with kind-scoped grants separate from v2, and stops treating Basic policy as Auto.

- **19:34 Routstrd changes its default network bind after an unauthenticated exposure**

Routstrd PR #56 changes the default bind from all interfaces to 127.0.0.1 after the prior default exposed unauthenticated wallet and daemon endpoints to any reachable host.

- **20:07 Imwald Android clarifies offline publishing status**

Imwald Android treats local-relay acknowledgement as complete publish only when every configured target is local, keeping remote delivery pending when local acceptance precedes remote relay delivery.

- **20:37 FIPS adds an OpenWrt access layer; a FreeBSD port remains under review**

FIPS merged PR #126 exposing an open !FIPS access network on OpenWrt routers, with open PR #129 proposing a FreeBSD port and the public UDP overlay reporting 300+ nodes.

- **22:15 Zap Cooking schedules posts and binds scanner requests**

Zap Cooking PR #566 and PR #569 retain scheduled posts in encrypted storage for timed relay publish, and PR #599 authenticates fridge scanner requests with NIP-98 instead of body-supplied pubkeys.

- **22:53 Citrine turns an Android device into a manageable relay**

Citrine PR #179 rebroadcasts stored events to external relays, PR #150 adds NIP-86 administration commands, PR #178 enables NIP-29 group admin via Amber, and PR #174 aligns Tor relay lifecycle through restarts.

- **23:42 Wired recovers complete conversations in the browser**

Wired PR #148, PR #147, and PR #146 follow feed roots and replies to completion beyond fixed limits, with PR #145 and PR #144 preserving relay hints for still-missing context without overwriting partial snapshots.

### NIP Updates

- **24:10 NIPs: NIP-34 hosting boundary, group migration, and three live drafts — Merged/Open**

NIP-34 commit 6d2979b removes GRASP hosting from kind 1618 pull-request descriptions. NIP-29 commit db5fe3d defines group metadata migration and fork distinction. Open: PR #2424 mutual kind 10045 key-set declarations, PR #2421 BOLT12 zap intents, PR #2425 non-HTTP schemes in NIP-B0 bookmarks.

- **25:57 Mill implements a draft for cloud-account key backup — Open**

Mill merged a cloud-account key-backup draft using Google OIDC plus passphrase-derived keys to encrypt NIP-49 ncryptsec into provisional kind 30049 events, disabled by default without dedicated backup relays.

- **28:51 BUDs: Blossom servers may identify unknown uploads from their bytes — Open**

BUD-02 PR #110 proposes server-side MIME detection when uploaders omit Content-Type or send application/octet-stream, preserving client-supplied types when specific.

- **29:26 NAPs: conventions replace numbered tracks as capture and filesystem contracts develop — Merged**

NAP PR #87 removes numbered cross-napplet protocol tracks in favor of napplet:// convention URIs, with NAP-CAPTURE PR #94 for microphone consent boundaries and NAP-FS PR #88 for virtual filesystem handles.

- **30:52 Marmot: the specification defines a terminal group state — Open**

Marmot PR #409 adds an authenticated irreversible Disbanded state blocking old branches, messages, and Welcomes from reviving a group after admin commit.

- **31:32 Concord: read and write capabilities may split inside one plane — Open**

Concord PR #12 proposes separate read and write stream capabilities per plane, with the write key acting as a spam gate while roster checks carry authority.

- **31:47 NWC: one wallet method can choose between BOLT11 and BOLT12 — Open**

NWC PR #2 proposes optional pay and receive methods for BIP-321 payment URIs letting wallet services choose compatible BOLT11 invoices or BOLT12 offers outside the NWC core.

🎧 WATCH ON FOUNTAIN.FM & EARN SATS!

⚡ This episode PREMIERES FIRST on Fountain — earn sats while you listen.

🧠 Support independent podcasts. Escape the algorithm.

👉 Listen & subscribe here: https://tinyurl.com/yck8u6sa

🇸🇻 SUPPORT THE SHOW 🎧⚡

🟦 Blockstream Jade – Secure, self-custody Bitcoin hardware wallet.

🔐 Use promo code BITCORNERPODCAST for 10% off:

👉🏼 https://rewards.blockstream.com/bitcornerpodcast

🟠 Bitcoin Conference 2026 – The world’s biggest Bitcoin event returns to Las Vegas.

🎫 Use code BITCORNER

👉 https://tickets.b.tc/event/bitcoin-2026

🐂 Bull Bitcoin – Buy Bitcoin directly into self-custody. No banks. No middlemen.

👉 https://app.bullbitcoin.com/registration/bitcornerpodcast

🎯 EPISODE THESIS

What does privacy have to do with economics?

And what happens when you combine Austrian economics, cypherpunk technology, and Bitcoin?

In this episode of BitCorner Podcast, Max Hillebrand — Austrian economist, cypherpunk, privacy engineer, and author of The Praxeology of Privacy — joins us for a deep conversation about human action, privacy, money, and freedom.

We explore why privacy isn't simply about “having something to hide,” but a fundamental part of being able to act freely.

Max explains how surveillance can distort economic behavior, why Bitcoin’s digital scarcity matters, the risks surrounding manipulation and censorship, and the difficult engineering trade-offs involved in developing an open monetary network.

We also discuss:

• Austrian economics and the lessons of El Salvador’s Bitcoin experiment

• Why privacy follows naturally from praxeology and human action

• How surveillance can distort prices, incentives, and economic decisions

• Bitcoin as digital base money

• The difference between Bitcoin and money substitutes built on top of it

• Whether Bitcoin can be manipulated despite its decentralized architecture

• Censorship, spam, block space, and Bitcoin development

• The trade-offs involved in changing Bitcoin’s rules

• The future of Satoshi’s coins

• Bitcoin scaling and the challenges ahead

• Cypherpunk technology and the broader freedom stack

• Why economics and privacy technology need to be understood together

• The philosophical foundations behind The Praxeology of Privacy

This is not simply a conversation about Bitcoin privacy.

It is a conversation about human freedom — and whether individuals can continue to control their money, information, and choices in a world where observation and financial control are becoming increasingly powerful.

Bitcoin solved something extraordinary: digital scarcity without a trusted third party.

But what does that mean for privacy, sovereignty, and human action?

⏱️ CHAPTERS

0:00 Bitcoin as an engineered system

0:59 Austrian economics and the Salvadoran experiment

10:12 Privacy as a necessity through praxeology

24:06 Manipulation risks and base money nature

30:27 Censorship, spam and Bitcoin development

38:28 The future of Satoshi's coins and Bitcoin scaling

50:18 Reflections on El Salvador and closing thoughts

📖 MAX'S BOOK

The Praxeology of Privacy by Max Hillebrand.

The book connects Austrian economics, human action, privacy, and the technology developed by the cypherpunk movement.

👤 CONNECT

🎙️ Max Hillebrand

Austrian economist, cypherpunk & privacy engineer.

Juan / BitCorner

Website: https://bitcornershow.framer.ai/

📸 Instagram: @bitcorner_official

🐦 Twitter/X: https://x.com/BitCornerPod

📧 Email: [email protected]

📲 SUBSCRIBE TO THE PODCAST

🎧 Fountain: https://tinyurl.com/yck8u6sa

🎵 Spotify: https://tinyurl.com/bdcsyy4u

🍎 Apple Podcasts: https://tinyurl.com/cj5wkhxv

🎬 Rumble: https://tinyurl.com/3bc6bvtn

📺 YouTube: /@bitcornerpodcast

#Bitcoin #Privacy #Cypherpunk #AustrianEconomics #BitcoinPrivacy #SelfCustody #Freedom #ElSalvador #BitCorner

### Chapters

- **0:00 — Bitcoin as an engineered system**

- **0:59 — Austrian economics and the Salvadoran experiment**

- **10:12 — Privacy as a necessity through praxeology**

- **24:06 — Manipulation risks and base money nature**

- **30:27 — Censorship, spam and Bitcoin development**

- **38:28 — The future of Satoshi's coins and Bitcoin scaling**

- **50:18 — Reflections on El Salvador and closing thoughts**

Source: [Juan Cienfuegos](https://www.youtube.com/watch?v=SuQCzqgU8Mo)