Why You Should Never Use AI to Generate Passwords AI can generate passwords that look random, but looking random is not the same as being secure. This post explains why AI is the wrong tool for password generation, what real randomness means, and what you should use instead.
Centralized Power, Open Models China may see letting people around the world freely use and adapt its AI models as a way to strengthen its geopolitical power.
MethodMatch: A Simple Tool for Finding the Right UX Research Method I created MethodMatch to make it easy to find UX research methods that fit your project's goals, time, budget, and other constraints.
Pix Privado: A Practical Tool for Inspecting Privacy Risks in Pix Payment Information Pix Privado was created to help people inspect the hidden data inside Pix QR codes and Copia e Cola strings, understand the risks of exposing that information, and generate reduced-exposure payment information that is better suited for public sharing.
SparkStalker: Making Spark-Enabled Wallet Privacy Problems Visible As I explained in my previous post, I became very concerned after seeing Lightning payments being made publicly visible in Tether Wallet. The core issue is simple: people may be using these Lightning wallets for privacy-sensitive payments without realizing that their transactions can be made publicly accessible. In some
Tether Wallet Lightning Privacy Issues Tether’s new wallet routes Lightning payments through Spark, which exposes transaction details publicly and undermines the privacy of Lightning. The current setup misleads users by failing to communicate this clearly.
Geolocator: Building My First Lightning App My background is in UX design. I know how to think about user flows, how to make things feel right, how to design something people actually want to use. What I don't have is a background in full-stack web development. This lack of knowledge has always prevented
Privacy as Infrastructure: What Brazil's Pix Teaches the World Privacy was not a priority when developing the payment system Pix. What can we learn from this?
Pix in Brazil: A Field Study for the Bitcoin Community What are the lessons that the Bitcoin community can learn from the Brazilian experience with the adoption of the Pix?
Domain Spoofing Mutiny, a Web-Based Bitcoin Wallet In this article, I will address one potential danger of browser-based wallets called domain spoofing. More specifically, I want to use Mutiny to give a practical example of the risks of a specific type of domain spoofing called a homographic attack.
How Developers Can Mitigate the Risks of User Data Being Exposed on Nostr I am excited about Nostr, a new technology, but also concerned about missing features like "delete" and automatic removal of metadata. Developers should inform users and provide tools to protect privacy.
The 7 Primal Elements Of The Bitcoin Brand In this article, I argue that one of the main reasons for bitcoin's success dwells on something that resonates with us humans on a much deeper level: the primal elements of its brand, which combined turn it into a belief system.
