pSacramento

pSacramento

Pix Privado: A Practical Tool for Inspecting Privacy Risks in Pix Payment Information

Pix Privado: A Practical Tool for Inspecting Privacy Risks in Pix Payment Information

Pix Privado was created to help people inspect the hidden data inside Pix QR codes and Copia e Cola strings, understand the risks of exposing that information, and generate reduced-exposure payment information that is better suited for public sharing.

SparkStalker: Making Spark-Enabled Wallet Privacy Problems Visible

SparkStalker: Making Spark-Enabled Wallet Privacy Problems Visible

As I explained in my previous post, I became very concerned after seeing Lightning payments being made publicly visible in Tether Wallet. The core issue is simple: people may be using these Lightning wallets for privacy-sensitive payments without realizing that their transactions can be made publicly accessible. In some

Tether Wallet Lightning Privacy Issues

Tether Wallet Lightning Privacy Issues

Tether’s new wallet routes Lightning payments through Spark, which exposes transaction details publicly and undermines the privacy of Lightning. The current setup misleads users by failing to communicate this clearly.

Geolocator: Building my first Lightning app

Geolocator: Building my first Lightning app

My background is in UX design. I know how to think about user flows, how to make things feel right, how to design something people actually want to use. What I don't have is a background in full-stack web development. This lack of knowledge has always prevented

Privacy as Infrastructure: What Brazil's Pix Teaches the World

Privacy as Infrastructure: What Brazil's Pix Teaches the World

Privacy was not a priority when developing the payment system Pix. What can we learn from this?

Pix in Brazil: A Field Study for the Bitcoin Community

Pix in Brazil: A Field Study for the Bitcoin Community

What are the lessons that the Bitcoin community can learn from the Brazilian experience with the adoption of the Pix?

Field Study proposal: Fedi for Chamas, a study in Kenya

Field Study proposal: Fedi for Chamas, a study in Kenya

ℹ️This proposal outlines a Field Study in Kenya to explore the potential of Fedi to improve the operations of informal cooperative groups, commonly referred to as Chamas, in the country. Introduction The federated eCash platform Fedi offers versatile solutions that can address various challenges across different scenarios. Following extensive

Domain Spoofing Mutiny, a Web-Based Bitcoin Wallet

Cybersecurity Featured

Domain Spoofing Mutiny, a Web-Based Bitcoin Wallet

In this article, I will address one potential danger of browser-based wallets called domain spoofing. More specifically, I want to use Mutiny to give a practical example of the risks of a specific type of domain spoofing called a homographic attack.

How Developers Can Mitigate the Risks of User Data Being Exposed on Nostr

How Developers Can Mitigate the Risks of User Data Being Exposed on Nostr

I am excited about Nostr, a new technology, but also concerned about missing features like "delete" and automatic removal of metadata. Developers should inform users and provide tools to protect privacy.

The 7 Primal Elements Of The Bitcoin Brand

In this article, I argue that one of the main reasons for bitcoin's success dwells on something that resonates with us humans on a much deeper level: the primal elements of its brand, which combined turn it into a belief system.

Bitcoin UX Challenges

Bitcoin UX Challenges

What are the biggest challenges to the improvement of the UX of bitcoin products?