Ostrich McAwesome on Nostr: I took notice of this account today, and want to first clarify that I am not ...
I took notice of this account today, and want to first clarify that I am not affiliated with it. Looks to be someone's old account with a leaked nsec being puppeteered by a handful of trolls. Someone decided to take credit for the drama of the day it seems...
But there are some recent threats of exploiting #Mostr that I found quite fascinating. Not really the kind of exploit I'm interested in, but it sounds quite eggregious. It looks quite trivial to turn Mostr into a problem, attacking from either the Nostr or ActivityPub side, since it seems to blindly relay everything. You could just flood it with spam and it would do all the work of delivering it.
Someone should consider testing that. It sounds like a weakness to me.
You would have to stop using Nostr because our new bot Ostrich McAwesome (npub1wq6…7d9k) is monitoring your IP.
Published at
2024-01-22 02:02:00Event JSON
{
"id": "de8f9394ce3fd796e82df37cffae657bded06e90601b5d660735d0e711511e1e",
"pubkey": "703533c2c16ac7771efb1bdf60a85df74e42f8409a007900f402ba4684f99184",
"created_at": 1705888920,
"kind": 1,
"tags": [
[
"e",
"b11b2e5d2c3093c0c5685e750d98e4f59b698d2afbbbb6ef148b1ae7227f73ce",
"",
"mention"
],
[
"p",
"f1ea91eeab7988ed00e3253d5d50c66837433995348d7d97f968a0ceb81e0929",
"",
"mention"
],
[
"t",
"Mostr"
],
[
"t",
"mostr"
]
],
"content": "I took notice of this account today, and want to first clarify that I am not affiliated with it. Looks to be someone's old account with a leaked nsec being puppeteered by a handful of trolls. Someone decided to take credit for the drama of the day it seems...\n\nBut there are some recent threats of exploiting #Mostr that I found quite fascinating. Not really the kind of exploit I'm interested in, but it sounds quite eggregious. It looks quite trivial to turn Mostr into a problem, attacking from either the Nostr or ActivityPub side, since it seems to blindly relay everything. You could just flood it with spam and it would do all the work of delivering it.\n\nSomeone should consider testing that. It sounds like a weakness to me.\n\nnostr:nevent1qqstzxewt5krpy7qc459uagdnrj0txmf3540hwakau2gkxh8yflh8nspzpmhxue69uhnzdps9enrw73wd9hsyg83a2g7a2me3rkspce984w4p3ngxapnn9f5347e07tg5r8ts8sf9ypsgqqqqqqs53nh8y",
"sig": "4e0f591a1c00d47478daa8fbfcd513bb22c468bf7e25ffd4db7e69ed2edafa5cba9e186d151678d642dc828b31ae6286d563065022e4b72d1b1514c660f08cb4"
}
