Zero-knowledge

Every Crowd Hides You Differently

From Bitcoin CoinJoin to zero-knowledge proofs, every serious approach to financial privacy bets on a different crowd to disappear into.

Cover image for Every Crowd Hides You Differently

Private Relay Connections: Zero-Knowledge Solutions for Nostr

Nostr relays see everything - who connects, what they fetch, how often they post. Zero-knowledge cryptography can fix all three problems: Semaphore-based authentication hides which whitelisted user is connecting, private information retrieval hides which notes you're fetching, and Privacy Pass enables rate limiting without identity linkage.

Cover image for Private Relay Connections: Zero-Knowledge Solutions for Nostr

Computing on Secrets

Services no longer need to see data to compute on it. Cryptographic and hardware primitives make that contract a deployed reality.

Cover image for Computing on Secrets

The Gossip Vulnerability: Why NIP-17's "Deniable" Messages Aren't

NIP-17 promises deniable messaging with its three-layer design: an unsigned "rumor," a signed "seal," and an ephemeral "gift wrap." However, this setup has a hidden vulnerability. The signed seal allows recipients to prove that a message was sent by the claimed author, even without revealing the content. This creates a perfect scenario for gossip attacks, where the mere proof of communication can damage reputations. As we explore NIP-17, we find that the rumor, despite being unsigned, is not as deniable as it seems, making it a potential risk for exposure.

Cover image for The Gossip Vulnerability: Why NIP-17's "Deniable" Messages Aren't

Proof of Personhood Is a Trap

Most proof-of-personhood schemes claim to defend the human internet from bots. In practice, they smuggle a border regime into everyday computing, and they fail to solve the problem they were invented to solve.