Ostrich McAwesome on Nostr: ...

quoting nevent1q…lag2

On that note, time for another lesson.

You can't trust relays. That's not how I leaked people's IPs, but they are absolutely a vector for that.

And if you post with more than one account without changing your IP first, anyone with access to the relay logs can connect your accounts to each other.

Here's some folks casually discussing using this flaw to silence this disruptive account. ZERO-TRUST!!! Nobody is your friend. People want your PII for a million reasons, so protect yourself!

nevent1q…y2gg