The Frontier

Ronin Dojo remains active despite setbacks, with Pavel finishing a UI update that will reintegrate a transaction privacy analysis tool, similar to the defunct kycp.org site.

Pavel says a key lesson from the Samurai case is to not publicly announce plans, as the team's open discussion of decentralizing Whirlpool likely triggered the swift FBI action.

Pavel believes the Bitcoin privacy movement lacks clear direction post-Samurai, with many users moving to Monero or giving up, though projects like Ashigaru continue the work.

Ashigaru is a fork of Samurai Wallet that demonstrates open-source code cannot be stopped by arrests; its team recently relaunched Whirlpool as an act of defiance.

Pavel notes Ashigaru's team communicates only via email, making public trust reliant on their transparency in documenting code changes and their rationale.

A recent Dojo update includes Soroban, a peer-to-peer network that routes transactions through random nodes to obfuscate their origin before broadcasting to Bitcoin.

Pavel recommends following Frank Corva, Econo Alchemist, and Max Tannehill for accurate information on the Samurai case and Bitcoin privacy.

Justin states running a guardian can expose your IP to users and your ISP. He recommends using a VPN like Mullvad for privacy, as integrated Tor support is still in development.

Armin describes how wallet fingerprints - artifacts like signature grinding, SIGHASH flags, and nSequence values - can break PayJoin privacy. Analysts can partition transaction inputs between sender and receiver by spotting inconsistent behaviors between collaborating wallets.

Explicitly stating SIGHASH_ALL in Taproot signatures is a wasteful bug that creates a fingerprint. Since Taproot defaults to SIGHASH_ALL, including the byte adds unnecessary transaction weight and identifies non-compliant wallets.

When asked about interesting altcoins, Poelstra names Monero and Zcash for privacy tech, Sia for its file storage model, and Grin for Mimblewimble. He distinguishes these from scams by their lack of ICOs and sincere technical goals.

He positions zero-knowledge cryptography and Zcash as the defense against AI-powered surveillance and chain analysis. Zcash aims to be simple, fungible, private, scalable, and quantum-safe digital cash, fulfilling Milton Friedman's 1990s prediction.

Palantir's software does not collect data; it functions as a tool for users to analyze their own lawfully collected data. The platform includes built-in security and auditing features for civil liberties protection, unlike a 'surveillance state,' Sean Sankar clarifies.

A short-range 'on-spend' attack could intercept a Bitcoin transaction in as little as nine minutes using the improved algorithms, forcing the entire network to be post-quantum before the computer is built.

Supratic outlined several privacy attacks on Lightning, emphasizing that blinded paths improve privacy but are not a 'magic shield' against tracing. These attacks include CLTV correlation, graph analysis on small nodes, payment probing, introduction, and node visibility.

Malmi notes content hash key encryption in Hashtree provides deduplication and removes moderation liability for server hosts.

Malmi sees private chats and groups as a use case where Nostr can solve real problems without depending on network effects.

He has been working on a double ratchet protocol for Nostr to enable secure private messaging and group chats.

Malmi believes perfect encryption in large groups is less critical because participants can be compromised or leak screenshots.

He built NostrVPN due to annoyance with Tailscale's requirement for Google or GitHub logins, using WireGuard and Nostr relays.

The New Mexico case focused on child safety, claiming Instagram became a "playground for predators" and criticizing Meta's end-to-end encrypted messaging.

Meta discontinued encrypted messaging on Instagram in March, suggesting users switch to WhatsApp for privacy, a move Casey Newton calls a "horrible outcome" for online privacy.

Webinar TV records Zoom meetings by scanning the internet for links and converts them into AI-generated podcasts for profit, often without participants' explicit knowledge.

Sharma started Cake Wallet after realizing there was no open source Monero wallet for iPhone and believing others would want the same tool.

The first version of Cake Wallet was Monero-only for about a year and a half after launch.

That Coinbase closure in 2016 or 2017 led Vik Sharma down the rabbit hole of chain analysis and Monero's privacy features.

Sharma built a privacy-focused email client disguised as a calculator app for iPhone before ever getting into cryptocurrency.

Sharma observes a significant increase in interest in transactional privacy and tools like Monero today compared to four or five years ago.

Sharma tweeted years ago that Bitcoin maximalists dislike Monero not because they don't understand Monero, but because they don't understand Bitcoin.

Frigate 1.4.0 enables easier use of silent payments by handling the heavy scanning burden server-side.

Silent payments improve privacy by eliminating address reuse and solving the gap limit problem in wallet software.

AI models, particularly from opaque companies like OpenAI, raise significant privacy concerns as user inputs are used for training (e.g., GPT-6), potentially mixing personal data and making it vulnerable to data leaks or government subpoenas, a risk Apple acknowledged by prohibiting internal ChatGPT use.

Mark, co-founder of Maple AI, which offers an end-to-end encrypted AI solution, emphasizes his background at Apple working on machine learning and privacy, and his earlier experience in cloud computing where he observed the routine accessibility of private user data by engineers.

Maple AI distinguishes itself by using open-weight models, having open-source client and server code, and employing Trusted Execution Environments (TEEs) to provide cryptographic proof that the code running on servers matches the publicly available code, enhancing transparency and verifiability.

Mark advises treating AI interactions with caution, similar to communicating with an 'enemy,' due to the risk of data leaks and documented instances of systems like ChatGPT, Grok, and Meta accidentally posting private user chats online.

The Human Rights Foundation announced 1.5 billion satoshis in new grants through its Bitcoin Development Fund.

HRF's grants support 26 projects across Bitcoin privacy, payments, development, community, freedom tech, and research.

Blockstream researcher Jonas Nick presented Shrimps, a post-quantum signature scheme for Bitcoin that supports multi-device signing.

Shrimps signatures are around 2.5 kilobytes, compared to SLH-DSA's 7.8 kilobytes, offering a compactness advantage.

David Bennett notes Bitcoin developers have been working on quantum resistance for years, countering claims that no one is addressing the threat.

A decentralized house-sharing model using Nostr involves anonymous blobs for travel requests, agent responses, Bitcoin escrow, and QR code check-in/out.

Shadrach advocates a 'demand-based economy' where buyers broadcast their needs (e.g., looking for a lamp), and sellers respond to encrypted Nostr blobs, reversing traditional advertising.

Nostr has proven to be an effective, modern implementation of a web of trust, overcoming the usability issues that plagued earlier technologies like PGP.

Modern privacy-focused communication apps like White Noise, MLS, and PECA leverage Nostr for contact lookup and handshakes, then use signal-level encryption for actual communication.