Nuh

Working on https://mlkut.org, designer and maintener of https://pkarr.org.

https://nuh.dev

Public Key

npub1jvxvaufrwtwj79s90n79fuxmm9pntk94rd8zwderdvqv4dcclnvs9s7yqz

Profile Code

nprofile1qqsfxrxw7y3h9hf0zczhelz57rdajse4mz63kn38xu3kkqx2kuv0ekgpremhxue69uhkscnj9e3k7unpvdkx2tnnda3kjctv9a5kucn00qq3vamnwvaz7tmzd96xxmmfdejhytnnda3kjctvpkjdvt

Publishing to

hbr.coracle.social/inbox

bitcoiner.social

dash.mockingyou.com

Author Public Key

npub1jvxvaufrwtwj79s90n79fuxmm9pntk94rd8zwderdvqv4dcclnvs9s7yqz

Show more details

Last Notes

2025-03-31 16:02:30

- reply

Guys this is not interoperability that needs lexicon, this is just good old web components that only need code and a docs page.
Interoperability is you telling others how to implement what you already implemented, but not actually use your code..
Lexicon don't magically replace code, although I am aware they are sold as if they do, as many things Bluesky sells with false advertising.

2025-03-31 15:51:39

- reply

I am idealistic too, but I don't pretend that idealistic is a business plan, I get a job and build what I want to see in the world on my own dime if I have to.
But my point stands, and confirmed, interoperability;
1. Only matters to idealists, not businesses nor most users.
2. It is incredibly hard and don't scale, because it is too social, it is much simpler to iterate a product vs protocols.
My point here is we have a very very limited budget for interoperable protocols, and it can only be spent effectively on stuff like udp/tcp/http and the last one stretches that.
Everything more complex is a lost cause in my opinion, so all the fuss on Lexicons is really overrated.
Finally I want to point out that if you make a "X lexicon" your sense of mission can still be fulfilled if users have to download your app to get the X use case. You don't need other devs to buy in... you can generously write specs to help them replicate your feature, but all the time you put there is time and energy you don't dedicate to your customers and their needs.

2025-03-29 18:18:18

- reply

Too obscure and cultural specific expression to translate, but it is a personal note anyways don't worry about it :)

2025-03-29 05:21:42

- reply

Hello, the author of Pkarr that uses Mainline DHT here, you can go to app.pkarr.org and put your npub and relays and whatever you want to put in a DNS packet (because that is what it is).
The only problem that prevented Nostr from adopting Pkarr despite my constant advocacy for it for almost two years; the root identity HAS to be ed25519 key, this is not my decision this is what the biggest DHT in the world decided to use decade ago (see estimate of number of nodes here relay.pkarr.org).
So yeah I would love it if Nostr supports Pkarr as a root identity or at least as much as it supports ICANN with Nip05... but that is up to client developers.

2025-03-29 04:57:03

- reply

Great summary, I just wanted to emphasise that the homeserver doesn't know anything about the app indexer, nor does it do any work to help this specific app other than hosting data as you expect from WebDav.
Thanks for your work on BitVM by the way.

2025-03-28 04:00:45

The Bitcoin white paper forever inscribed on the Bluesky free and open blockchain
https://plc.surge.sh/#did:plc:a2uf5uxhgznzzplom2qzgz6g
#nevent1q…vk63

2025-03-27 22:44:35

Bluesky identity system claims that it solved public ledgers without the need for any censorship or fees ... let's test that.
You can upload any file that allegedly will stay on the persistent ledger and will be mirrored by every audit service in the future
https://plc.surge.sh/#did:plc:trzxqotcyog2mmuxq7ab2vs6

2025-03-25 13:08:38

- reply

The unit that is really incentivezed is the unit that enough individuals incentives, either with money or relationships.
Peergos.net has been running on fumes for more than a decade because on person cares enough and charges enough and gets enough grants. Ente's CEO had his first salary after 5 years.
My point is, the Web solved hosting incentives long ago, and #Pkarr whole point was to allow for credible exit as reliably as DNS.
#mlkut is basically porting Peergos privacy and Pkarr credible exist to one place, and hopefully if enough people like it I can donate to Peergos because their dedication for privacy is legendary.

2025-03-22 06:59:36

- reply

I hope you are getting paid for making these UI elements an open source standard.

2025-03-22 02:50:06

- reply

Pretty slick. I also love how the images are stacked

2025-03-19 08:04:30

- reply

You wanted to restrict the CI's access to parts of the repo?

2025-03-19 08:03:05

- reply

They have no intention of doing so.

2025-02-18 12:34:25

- reply

What example of PWA that works on IOS and has traction/loved by users, and isn't basically a website pretending to be an app?

2025-02-14 19:07:39

- reply

where can I read about this?

2025-02-10 12:14:21

- reply

No I want UDP and TCP sockets please.

2025-02-09 18:38:58

- reply

I am ok with that, I think public timelines with infinite engagement was not good for anyone. And people managed to make friends before it, in forums, and even ICQ, remember that 😅

2024-12-20 18:44:54

Another day another bunch of zionists soldiers killed in Gaza, it is amazing that Palestinians still have fight in them, even if it is depressing how much their neighbours are conspiring against them.
Regardless glory to Gaze and death to zionists

2024-12-19 21:05:56

zionists killed 1 out of every 10 human beings in Gaza, most of which are children and new borns, not to mention the devastation and destruction inflected on the barely surviving population
zionsim is an existential threat to everyone in this region and we will never be safe until it's eradicated

2024-12-19 14:27:56

Not only are Palestinians still heroically killing zionists in Jabalia... one of them literally stabbed a soldier today, even after they ran out of weapons they are still fighting.
Death to zionists, and glory to everyone who is killing them.

2024-12-19 08:17:22

Glory to Yemen and death to zionists

2024-12-18 16:55:51

Few more zionists killed in Jabalia, may their names be forgotten, their crimes remembered and their killers celebrated and glorified generation after generation until we get rid of this cancer.

2024-12-18 14:59:36

While fake "liberal" zionists waste your time and pretend zionism is not mutually exclusive with peace, actual zionists are trying to settle southern Lebanon, Northern Gaze and more of Syrian Golan heights
zionists have no interest in peace, and we will never see any peace unless they are destroyed

2024-12-18 14:44:58

All glory to Ireland and death to zionists

2024-12-17 11:28:21

zionists only feel safe next to dictators that kill their people, as long as zionism is empowered people in the region are faced with the option of being killed by dictatorship or zionists warplanes.
It is clear that in order to be safe and free, we will have to get rid of this cancer.

2024-12-17 09:39:43

At least Nazis didn't expect people to like them, they knew what they are, their smug supremacy was matched with self reliance and apathy towards international PR.
zionists talk and act like Nazis then beg for ammunition AND love!
A cancer that we will never know peace until we eliminate.

2024-12-17 09:33:13

people behind Willow invented the sync protocol that Negentropy is based on.
#note17y4…vu7f

2024-12-16 18:28:57

The desperation of the remaining 3 "leftist/liberal" zionists pretending that zionism is not inherently a supremacist racist ideology of terrorism and ethnic cleansing, while the rest of zionists no longer care to mask their genocidal nature.. is definitely encouraging.

2024-12-14 20:58:55

- reply

is true that zionists showed enormous capacity for destruction, but none of it seems to translate to decisive solutions.
So with brutality proving not enough, and with their arrogance prohibiting any political or diplomatic attempts, what is left for them but death, slowly then suddenly?

2024-12-14 20:53:53

It is absolutely amazing to me that Palestinians still have enough fight in them to actually kill zionists after 15 months of the most brutal and ruthless attack on a believed population in this century.

2024-12-14 13:31:15

- reply

And both get 30 billion dollars worth of ammunitions from US tax money?

2024-12-14 12:40:40

"a blessing on the one who seizes your babies and dashes them against the rocks!" (Psalms 137:8-9)"
zionists citing scripture before going to kill Palestinians.. we will never be safe as long as this cancer exists.
https://twitter.com/ireallyhateyou/status/1867674283209896075#m

2024-12-12 12:21:51

How on earth are people letting this Clarissa Ward bitch fabricate so many stories with such stupid acting and get away with it?
Do journalists even care about their reputation anymore?

2024-12-11 19:59:42

zionists proudly describing "getting tired cleaning tanks from hand and feet" after driving over the corpses of their victims
We will never be safe as long as zionists exist.
https://twitter.com/NaamaAriella/status/1866778974212297071#m

2024-12-11 17:03:44

When zionists say "kahanism", they try to pretend that zionism itself is not inherently evil, and that merely being a zionist doesn't make you a genocidal racial supremacist, better dead than alive.
Both are lies.

2024-12-10 07:20:40

- reply

Without normalisation, it is only a matter of time before American guarantees are no longer reliable, and until then we only need to build our capacity, which despite the challenges is mad much more viable by a liberated Syria right next to Turkey.
Finally a hope for a fair fight.

2024-12-10 07:09:59

Before Oct 7th the nightmare was normalisation and submitting to zionism, luckily zionist have no more political will to pursue even fake peace, on the contrary their entire internal politics is making it impossible to not be radical maximalist threatening every sovereign state in the region

2024-12-09 13:07:25

Resistance in Gaza blown off zionists with the explosion they were transporting to destroy more of northen Gaza's buildings as a part of the ongoing ethnic cleansing.
Few zionists less in the world.

2024-12-09 09:07:45

Good morning for everyone celebrating Syria free of the nighmare that was the Asad family. Another day and zionists are still bombing and killing people in every direction with impunity, there will be no peace until we get rid of this cancer too.

2024-12-09 04:53:13

- reply

on one hand neitjer HTS nor Christian Syrians nor the rest of Syrians need to convince us of anything or give us any assurances, as only they matter. And on the other hand, you are the 10Mth to state that USA and zionists are a scourge on the region, not much of a secret.
That leaves us with; can Syrians rise to the responsibility, because they simply rejected the ugly claim that being slaves to Asad is better than taking a chance on themselves and failing.
And of course there is always the better alternative to cynicism; reaching out to them and see how can we help.

2024-12-08 10:02:08

Don't listen to these armchair conspiracy theorist, nothing more dangerous to zionism than competent, patriotic, prosper and thus independent neighbours... no one wants to see the end of zionism more than myself; a strong Syria is a massive step towards the end of zionism, just like crusaders states didn't end until their neighbours got their shot together, and even then it was a long and brutal battle where survival is just as important winning battles.
If you care about Palestine, support Syria and hopefully the more nascent independent and free states to come.
#note1hq4…9wu3

2024-12-08 09:55:09

- reply

Imagine if you saw a video explaining Nostr as a CIA psyop... that is how wrong this is.
Neither Turkey nor zionists are gods, Turkey will definitely take tons of credit for allowing rebels to survive long enough in the first place, but this was all Syrians, and they have been working hard on it on every level ... if anything this is the first ever organic seed of a competent and savvy Arab stare.
There is still huge risk of going south, but we simply never seen this competence since decolonozation, and that would have been true even if Asad army didn't melt like butter, even if they failed, they would have still ratcheted an unprecedented level of discipline, pragmatism and just all around maturity.
I have been do pessimistic about the region, but may Arabs actually have it in them.

2024-12-08 03:28:33

zionists' "Iron wall" doesn't work when people watch Oct 7th followed by Dec 8th back to back. It doesn't work when when the impossible keeps happening.

2024-12-07 22:55:44

Every single day, every single day zionists kill Palestinians, and not just in Gaza. Sooner or later we will get rid of these scum, but until then, too many crimes, and too many victims.

2024-12-07 07:32:05

As ugly and brutal and monstrous Asad supporters are, they are a minority in Syria, on the other hand every single zionist not only supports genocide and ethnic cleansing but gets great pleasure watching it unfold daily, this is why they film their crimes so often, to satisfy their sick society.

2024-12-05 14:47:35

- reply

Aleppo and Hama liberated in a single week, and they are already talking about going to the next big city Homs, which would be the last step before Damascus.

2024-12-05 14:33:59

The only thing more glorious than what is happening in Syria now, would be the return of Palestinians to their liberated villages and towns, which is much more likely with a free Syria. Now we have an idea about how fast and sudden it could happen... may it be a self fulfilling prophecy.

2024-12-05 14:28:33

Some of the liberated Hama prisoners, have been there since the infamous massacre 42 years ago... imagine how do they feel today.

2024-12-05 14:10:07

Just like zionists a little more than a year ago, Asad soldiers are being dragged out of tanks in the same way... I don't know, but I am optimistic that we are going to get rid of all that filth sooner or later.

2024-12-04 21:26:33

- reply

I don't even care to learn about anything about it, but if it works for you, enjoy. Signal has been the absolute first and still by far the most polished app that normal people can use simply and safely.
xmpp had its chance and it didn't deliver that, Signal did.

2024-12-04 21:13:56

- reply

All you need to do is offer people the alternative you prefer, but discouraging a Signal user, (or someone who is considering to use it to contact another Signal user), with thoritical FUD, does nothing but harm.
So my point stands the FUD is either psyop or people being irresponsible, if they actually care they would just offer the supposed upgrade.

2024-12-04 21:08:33

"The moment the Israeli army bombed tents sheltering displaced families in the so-called "humanitarian zone" of Almawasi, Khan Yunis, 6 innocent civilians were burned alive."
We will never be safe or at peace as long as zionists exist
https://xcancel.com/IhabHassane/status/1864381084793803159#m

2024-12-04 20:51:36

- reply

1. Be fair; The only reason Signal managed to do what it did is because they didn't give a fuck about interop, and went their own way, whereas Email and xmpp folks kept wanking in mailing lists arguing instead of delivering end to end encryption.
2. Them having control of the server is the only way to make sure that they only metadata available to the government is the most recent, not the entire history.
3. If non of that pursuades you and you think Matrix architecture is better, first you have to give Signal credit for pioneering, and second you should be careful who is listening to you, because most people won't fallback to Matrix, they will flat out use Telegram or some other garbage.

2024-12-04 20:31:55

"Judeo-Nazi influencer and wanker Yoav Eliasi (HaTzel, "The Shadow". 328k subscribers) writes:
"Exciting | The Gazan enemy reports that the number of those eliminated in the Mawasi strike is up to 20"
Source: https://xcancel.com/ireallyhateyou/status/1864386672135205083#m
https://nostrcheck.me/media/930ccef12372dd2f16057cfc54f0dbd94335d8b51b4e2737236b00cab718fcd9/98b06d26f00c0aa449bc08a6f58b514f9d8440475d1fa8acc033d869d104fec2.webp

2024-12-04 20:20:36

The rampant Signal skepticism has to be a psyop, no way all of these bitcoiners are actually that retarded, right? right?

2024-12-04 19:31:30

- reply

The upside of https://pkarr.org/relays is that while they started as a mean to support browsers, they are actually useful as a fallback to counter extreme conditions, for example udp throttling or flat out filtering out any udp packet that looks like a Bittorrent message.
It is also useful to circumvent censorship for specific queries (like dns level blocking) since an ISP can't read what are you querying for.
you can also use them exclusively just because you want privacy.

2024-12-04 19:27:29

- reply

Yes browsers are the pane of my existence.
There are two temporary but necessary hacks until browsers support Pkarr, both can be done in each web app independently:
1. Use the https://pkarr.org/relays to resolve signed packets using a proxy.
2. The resolved endpoint needs to be a normal icann for https to work.
So for the time being, any service that wants to support browsers will have to run an extra server (usually Nginx) with normal certificates.
Since I have to support browsers, people will definitely have an example of doing all of that in Pubky homeserver.

2024-12-04 18:49:55

- reply

writing a spec to also support SRV would be too much complexity in my opinion, it is hairy enough already, and given that you can't adopt any of this without adopting Pkarr, might as well just support the most recent and most appropriate record types, there is no legacy here, so why not simplify things?

2024-12-04 18:45:52

- reply

HTTPS is just a special version of SVCB, and the same logic I described works for SVCB records obviously.
I have methods to use either, even though Pubky is all in on HTTP exclusively, but when I write a spec for tls over Pkarr it will be for SVCB too.

2024-12-04 18:43:57

- reply

By the way, I will have to fork Reqwest to add a custom connector so I know what tls configuration I need to use (RPK for pkarr endpoints, or normal webkit CAs for ICANN domains) because Rustls just refuses to support both modes in the same ServerCertificateVerifier
But that has more usecases anyways so I guess it is worth it.
Let me know if you would like to help with that effort.
https://github.com/seanmonstar/reqwest/issues/2479#issuecomment-2515388507

2024-12-04 18:35:50

- reply

I think i can give you a public key, and you yourself replace your token with a token for my public key (can't be spent without the private key) and give it to me, so I don't have to redeem it myself.

2024-12-04 18:30:57

- reply

It maps an ed25519 keys to a DNS packet so a list of records, but that is besides the point.
Let's first consider a simple case where:
1. you lookup `my-app.<A>` (where A is a zbase32 encoded public key) only to find a CNAME record pointing to `hosting-provider.<B>`
2. you lookup `hosting-provider.<B>` to find an A record pointing to the socket address.
What you have heard is a chain of delegation, from the owner of key A to the hosting provider who owns key B.
Well, then we know for a fact that key B should be trusted as an RPK to establish a TLS connection, because Pkarr is already a signed so why not consider it as valid as x.509 certificate chain? only better because the CA in this case is the owner of the TLD (A).
Let's make things a bit more interesting by using HTTPS records instead of CNAME records, because they are more recent and work on APEX domains, and have optional parameters for stuff like ALPN, ECH, port number etc, making establishing HTTP connections more efficient.
HTTPs records are widely supported already, so not too exotic. And I consider them the perfect resource record.

2024-12-04 18:16:29

You should support (and hopefully eventually celebrate) ridding the world of zionists and similar genocidal scum.
https://twitter.com/ytirawi/status/1864361403991138768#m

2024-12-04 18:07:18

zionists again bombing people in their tents, burning people alive...
Remember this the next time a zionist face a fraction of the justice they deserve.

2024-12-04 12:53:42

Every single day a zionsist is committing an atrocity in the name of zionism, and people still humanise and accept them instead of treating them as the monestrous scum they are.

2024-12-03 20:54:28

zionism is a nightmare. Sadistic insane group of monsters that we will never know peace until we get rid of them.
https://youtu.be/kPE6vbKix6A?si=-0V33WuIb7z0M7py

2024-12-03 20:46:54

"When your surgical priorities on a beautiful 13 year old girl include reconstucting her eyelids so she can fit a prosthetic eye...a part of you dies.
Israel's war on children"
https://xcancel.com/GhassanAbuSitt1/status/1863560107474170239#m

2024-12-03 19:34:47

AI folks are so excited about the ghost in the machine, while I am desperate to find the machine in the ghost that is modern software.

2024-12-03 18:22:55

- reply

I know I sound rude, but engineers making claims lightly without thinking the challenges through AND doing so confidently ... is becoming a problem.
Or maybe it is just the curse of low stakes.. when you don't expect any of what you are discussing to ever matter, then why should you care for being correct... not like you will ever suffer any consequences if you are wrong.
And honestly.. I can't argue against this, it is low stakes and the demand for digital sovereignty is almost non-existent... so funky we can claim anything, who cares.

2024-12-03 18:18:03

- reply

I know it is frustrating when claims are challenged. But at the end of the day, other than taken offense and doing the Trump "wrong" meme... not a single line of code will be written, just saying words for the fun of it.
For everyone else who actually want a censorship resistant overlay network, they will be left with nothing but Mainline.
If I am disingenuous, while making my bet and working on it, what does make the rest who do nothing but making extra ordinary claims and have no interest to follow through?

2024-12-03 12:38:23

- reply

You are confusing spam and DDoS. You are also confusing spam and capacity.
Anyway, 10 years from now Mainline will still be going strong, and you won't even know the name of the second best thing.

2024-12-03 04:26:48

- reply

Interesting, what is your plan? How do you expect say a 100 nodes to serve the entire web, and fend of DDoS and be do all of that cheaply enough that they can keep running forever without churning?

2024-12-03 04:24:11

- reply

Mitigated how?

2024-12-03 02:54:28

- reply

Then it will never happen. Note that I also claim that it will be useless without large size DHT because a small DHT while maybe resistant to Sybil, is vulnerable to good old DDoS and just more likely to churn away and die, just like few relays are likely be discontinued.
Size really matters in a DHT, and you currently have zero nodes and headwinds ... research is just wasting time on the wrong thing when what you should be desperate for is scale.
Luckily, Mainline already exists.

2024-12-02 05:38:22

- reply

It is not just UX, if the plc directory censors your operations, you are screwed, and then people say oh but we can detect that and start using another registery, as if this is viable in practice, as if we couldn't in theory use a separate root servers than ICANN.

2024-11-30 22:32:02

- reply

Who is going to build it if not you?

2024-11-30 21:35:20

May we all live in uninteresting times, but this current type of interesting is not the worst.

2024-11-30 19:29:47

- reply

The paper is older than Mainline itself, if it was worth the paper it was printed on, we would have had such DHT by now, Nostr didn't invent WoT... people had many trust networks a decade ago... amounted to nothing, and I bet this will never change.

2024-11-29 17:24:43

- reply

No one seems to care about this thread... and rightfully so.
Apparently most devs, like me, don't care much about the opinion of idea guys who don't battle with reality, nor even care to be reasonable. Not being reasonable is usually afforded only by people who don't write code to face the consequences of their claims.
This is why they get under my skin :)

2024-11-29 17:16:42

All your ideas, all your research papers, all your white papers, all your blogs and graphs and rhetoric is worthless.. even less than worthless if you deliberately avoid putting it to test with working code.

2024-11-29 17:12:06

- reply

I have successfully and publicly engaged with many developers including Nostr, but I keep failing to talk to people who don't build stuff, there is a certain level of appreciation of the real world challenges that I need to respect you at all.
But you just don't know what you are talking about, and I don't see any evidence that you have bothered to put your "social graph" bullshit to the test at scale to know how it would feel to a developer vs their baseline DNS experience.
You are right to be insulted, I didn't respect you enough... mostly because you are not being serious.

2024-11-29 17:00:33

- reply

Bye

2024-11-29 17:00:01

- reply

Good luck with that.

2024-11-29 13:59:25

- reply

> How do you know which key Bob has?
How do I know that pippellia is your domain? or name? or how do I know my brother phone number?
what is this obsession with WoT, have you never exchanged contact informations or found a website and bookmarked it or just started accessing it by searching for its title in the browser address bar?
Pkarr does NOT need WoT to be valuable, this is just not true.
If you don't know which is better, 20 relays or millions of nodes, then maybe we don't have enough common grounds to discuss this topic at all.
Fwiw, you don't need nostr relays to do this nonsense anyway, you could have used search engines and PGP to find people's current servers... but that is retarded so no one did that, people used DNS and URLs instead.

2024-11-29 13:51:25

- reply

where is that competition? how many relays do you have to publish to so that 95% of all users can find your data?
how many relays will you need to publish to at the scale of the Web, when 4 popular relays all funded by Jack cant cope any more?
It is not that this is good enough even in theory, let alone in practice, it is whether or not you care at all, and if you don't, fair enough good for you even.

2024-11-29 11:43:44

- reply

> I ask a specialized relay which relay that key is publishing to.
Who is that specialised relay? and if 90% of clients read from that specialised relay(s) and these relays either censor your just are rurunning out of capacity to serve an increasing scale of the network... then what?
How is that different from an authority? ICANN is just that by the way, the place where all software consults to find something...it doesnt have some legal privilege just an accident of history.
Sure the fact that nostr events are signed makes things better, but will you be able to run your own specialised relay that finds anyone's nip65? how? are you going to crawl every know relay ever?
can you see how absurd this is? all to avoid changing the keys as if we achieved escape velocity or something?
Well, if Nostr did, and can't adapt, then where do people who want sovereign identifiers at the scale of the Web go? make a sseparate thing? alright.. that is what we are doing.
If you don't think sovereign identifiers at the scale of the Web matter, then you shouldn't care about Pkarr at all.

2024-11-29 11:34:11

- reply

Ok if you perceive Pubky as a social media and only comparable to Nostr as a social media and so the general Web use cases are outside of the comparison then you are misunderstanding pubky, and that is mostly the marketing fault, and that is why I hate this social media framing.
But even then, I think pretending that Nostr doesn't need URLs and you are always looking things up within a context is false. If you see an old note and the recommendations in it are no longer valid, then you really don't know where to go to find the thread that note was in reply to.
Pretending that iin Nostr everything and everyone is online often enough to gather enough context about where something is. is a false claim that not even Mike Dilger makes.. because it is false.
As for why do nodes store small data temporarily... the answer is because the DHT in their Bittorrent client decided to support that BEP, and it is not causing them any trouble to care, that is basically the definition of p2p networks, a software you don't mind to run.
Funny that we are discussing free riding when Nostr relays are much much much much more expensive to run, and come with serious legal liabilities, but we are all just happy to use them and not ask how are these people supposed to survive let alone be plenty enough to be censorship resistant.

2024-11-28 21:49:27

- reply

and of course, no one asked anyone to change the cryptographic curve... that is just your assumption.
but saying that sharing contact informations or sharing a link to something that you want to know will work tomorrow and a month from now or whenever someone reads the PDF, or note that link was mentioned at, is an edge case? is honestly so weird... like what do you think the World Wide Web is if not links?

2024-11-28 21:29:12

- reply

Are you arguing that the Web is dead because URLs don't matter anymore and people don't need domains or phone numbers or any long lived contact informations, since they always go through search engines and platforms search boxes?
If you are right, then yeah you don't need a sovereign version of something you don't need at all sovereign or not.
But maybe then give me your domain and phone number since your friends will find your new contacts info by Googling you, no big deal.
This is why I keep saying Nostr is not the next web, it is not even in the spirit of the web, it makes people focus too much on the discovery and ignore that most of the web is direct acccess.
Here is an invitation, count how many times you accessed people or websites directly in the next 24 hours, by their phone numbers, or domain names, or your browser history, then count how many times you accessed stuff through search. Then let's discuss if URLs are not very important for the web to work.

2024-11-27 15:01:01

- reply

It is not a bad question. This paper is mentioned in our recent writeup about how we try to circumvent possible attacks aiming for censorship https://github.com/pubky/mainline/blob/main/docs/censorship-resistance.md
Long story short, an attacker can't create Sybil nodes to target only one key without us noticing and circumventing that.
An attacker can however create millions of Sybil nodes, uniformly distributed and now it is very very transparent and very very public, and even if we can't act to deal with that, then we can hope that they can only degrade the performance because honest nodes still slip through, and if they don't then we can just wait it out. It is an extreme attack and if it was feasible at all Mainline wouldn't have worked despite billion dollars companies having interest in disrupting it because it enables piracy.

2024-11-27 11:32:16

- reply

Oh and the paper seems to be from 2010, almost as old as Mainline.

2024-11-27 10:44:52

- reply

Thanks for referencing Whanau, I don't have a chance yet to read it in depth, but I got enough idea to make a judgment.
1. It is way more complex than BEP0005, which wouldn't be a deal breaker if it actually delivers.
2. It assumes one of the hardest thing to assume ever: a web of trust! Its innovation seems to be leveraging such social graph efficiently but that is ignoring the fact that a robust and decentralised WoT is the holly grail of the Internet and sybil resistance in general, you can't just take it for granted.
3. In practice, trying to bootstrap this social network is going to directly translate into even smaller and slower growing DHT, because instead of just running a Bittorrent client that uses upnp to rund an embedded DHT, you need users to manually set up what nodes they trust ... that would at least lower the realistic size of your DHT in the foreseeable future by many orders of magnitude... for comparison Hyperswarm DHT that ONLY requires a public IP that isn't behind NAT, still never managed to have more than 2000 nodes.
4. I worry that the reality is going to be worse, and you will have a hub and spoke model where the social graph doesn't just uniformly churn, but can take sudden big blows whenever a Damus-like node churns, again this is more likely because unlike normal DHTs you can't just start trusting a hardcoded node, then start trusting others, that defeats the purpose, you need explicit user input in establishing trust edges
5. So yes you might be sybil resistant, but if that comes at the cost of being not only extremely small but also much harder to grow (social scalability), then you already lost, because you still need to serve the entire Web AND the DDoS.
If I am correct and a social network based DHT is impractical to scale beyond few hundreds of nodes, then that is not any different from few hundreds of nip65 only Nostr Relays that all keep the entire list of each other in memory.
What I am trying to say is, if you put even more friction in the way of scale, then whether your network is structured (DHT) or unstructured (flat list of gossip peers) is irrelevant, both are just as vulnerable to DDoS and can't scale as much as a DHT of millions of nodes.
That being said, ISPs already have this trust graph, so it would be technically interesting if all the world ISPs turned into a DHT :)
If you managed to pull this impossible task though and you built DHT that is both sybil resistant AND growing fast and consistently enough that it has a chance to resist DDoS, you will be my hero, especially if it supports ed25519 as well as secp, so that we can use it besides Mainline.

2024-11-27 09:43:28

- reply

We use Blake3 in Pubky, but it has little to do with the topic at hand; DHTs

2024-11-27 09:36:29

- reply

Deep on my bones I believe there is and never will be any way to counter Sybil attacks except scale of honest nodes Or some authority that decided which nodes are trustworthy.
But I don't want to spoil this so I will check what Whanau is, and in the very unlikely event that I was persuaded by it I will say so publicly.
I wouldnt start a whole thread about your reservations, mainly because you didn't ask for a reply, but also because I bet if you have to make a commitment to a DHT today, you won't even find the alternative, for these reservations to factor in at all.

2024-11-25 17:16:54

- reply

The only answers you will find are either silence or "we never said global anything it only works for limited context" ... the later is at least honest, but many just choose to ignore the question and live the fantasy, which honestly I understand.

2024-11-25 16:22:56

- reply

Me is the wrong attitude if your mission is to make public keys usable for most people. But I don't think I can offer much better alternatives given that key delegation was already rejected in Nostr before.
Diversity of experiments are good as well.

2024-11-25 16:09:32

- reply

A dns resolver can be (and most often is) literally your router, when your router doesn't have the cache it asks ICANN who owns .com and then asks .com who owns nostr.com and then asks who owns nostr.com for the ip address.
The only hard coded part here is ICANN 13 root servers, and Pkarr entire thing is to replace these 13 servers with Mainline DHT and make public keys TLDs.
Nostr relays don't have neither the hierarchy of ICANN domains nor the fallback to Mainline so if you don't find the data you are looking for in your hardcoded relays, now there are NO Authoritative way to find the data, it becomes literally ad you said "your imagination" so if you fail to gather enough breadcrumbs to find that elusive data, we'll skill issue.
If that still doesn't sound as a significant and fundamental difference, then we lack the common foundations to reason about system design.

2024-11-25 15:33:26

- reply

Don't you need multiple service providers to hold your keys and sign on your behalf, basically multiple signers, these are services.
I can't imagine the UX of asking normal people like myself to sign up to multiple providers and judge who deserves my trust and who don't

2024-11-25 15:05:56

- reply

😅 I am not concerned with collusion because I don't even think I can get a single human being to signup yo multiple services to do just one thing, I can't even convince myself to bother.

2024-11-25 14:50:20

- reply

so let me get this straight, you hire more nsecbunkers instead of just one? I am not going to pass judgment on that I promise I just want to know what is, and will keep mu opinions to myself this time.

2024-11-25 14:48:15

- reply

Again you are wrong in ways that I am sure you can figure out on your own, which is a bit discouraging.
But I will explain this one because it is less often discussed.
Pkarr is not comparable to IPFS NOR Bittorrent. It is comparable to IPNS and normal domains.
Hashes have no authorities, they:
1. can be hosted by anyone
2. no way to tell who among these self proclaimed hosting providers are more likely to actually have the data let alone be performant.
Does that make sense?