fcb ₿
fcb

Public Key

npub18ap5rjg0nu8wjc59w2mfxg6rykavp0rnm43fe7j9qs86mp9ws90sc3m2km

NIP-05 Address

fcb1@iris.to

NIP-57 Address

lnurl1dp68gurn8ghj7ampd3kx2ar0veekzar0wd5xjtnrdakj7tnhv4kxctttdehhwm30d3h82unvwqhk7unwv4e8jcn4dc6rwgz8des

Profile Code

nprofile1qqsr7s6pey8e7rhfv2zh9d5nydpjtwkqh3ea6c5ulfzsgradsjhgzhc87mlxp

Author Public Key

npub18ap5rjg0nu8wjc59w2mfxg6rykavp0rnm43fe7j9qs86mp9ws90sc3m2km

Show more details

Last Notes

2023-04-28 21:28:04

- reply

#[1] Do you have a recommendation for how this can be mitigated? If so, I think it would make sense to do a PR against the NIP with this recommendation, so other protocol devs know about this. (Pretty standard ethical hacker steps here....)
Good find!

2023-03-19 02:41:18

- reply

Keep working on it!

2023-03-14 15:50:10

#[0]
I very much preferred when "Global" and "Following" were over in the left menu.
Totally digging your client still though!

2023-03-13 22:25:38

Verifying my Nostr Nests identity: 3hV_sm9ytiDyWyc0nmqiUldIYD3WH2YG-SltvbN17BY
https://nostrnests.com

2023-03-13 21:39:42

- reply

Please read this in the spirit of "iron sharpening iron". I want this community to "create a censorship-resistant global 'social' network once and for all.".

2023-03-13 21:36:19

#[0]
On the current landing page of https://bitcoinhackers.org/, you say:
> But, it's biggest offense is that Users don't own their identity & data. Mastodon is not decentralized, it's just someone else's computer.
How is Nostr different? Unless I run my own relay, then I'm just storing my data on someone else's computer. If I don't run my own DNS, then I don't own my NIP-05 identity.
How are we ensuring Nostr doesn't just become another Mastadon, with a centralization of large relays (which is already starting to happen with most clients picking a common set of popular relays?)

2023-03-09 23:01:38

- reply

To save everyone else a quick search, External Identities in Profiles: https://github.com/nostr-protocol/nips/blob/master/39.md
😎

2023-03-09 13:58:10

- reply

Couldn't this be done similar to Reddit by just adding a metadata field for voting to allow automated curation from the crowd?
(Obviously someone would need to implement this in a relay, just proposing a relatively simple solution)

2023-03-09 13:55:34

- reply

Typo: *...a message for the receiver for it to get there...

2023-03-09 13:54:39

- reply

It's built into the protocol, and frankly, a somewhat inherit part of how most social networks work. You have to know an address for the sender for it to get there, if that is encrypted, than no one will know where their message is (unless every client is attempting to decrypt metadata for *every* message ever sent).
However, Signal has taken some exotic steps to reduce their ability to see those messages, namely leveraging enclave tech like SGX: https://signal.org/blog/building-faster-oram/
There are ways to obfuscate the identity of the sender/receiver, but that metadata still must be present unencrypted to allows messaging protocols to work. Maybe there's some crazy way to do it with quantum tech, but we're still a ways from that :D

2023-03-09 04:23:06

- reply

Yes'ish. You can just download a Windows 10 ISO from here: https://www.microsoft.com/en-us/software-download/windows10ISO and use it just fine. Eventually, you will be prompted to 'Activate' with a key, but you can run it for free practically forever. You can get an activation key on Amazon, NewEgg, Ebay, or wherever else you trust if you don't trust that.
Earlier versions of Win10 allowed install without a Microsoft account, but it got more difficult in later versions. I haven't tried much with Win11 installs to know for sure there.

2023-03-08 21:45:21

Tough few days for MyAlgo wallet users. The Algo Foundation is reporting _thousands_ of wallets have been compromised, significantly up from the initial reports of 17.
From their Twitter Space earlier today (3/8/23) https://twitter.com/i/spaces/1nAJErBZNyoxL

2023-03-07 22:29:41

- reply

Palm trees in the mountains? I guess maybe somewhere south?
Or, maybe arriving early to Costa Rica in prep for Nostrica...?

2023-03-07 17:34:29

- reply

I've been thinking about this as well. I wonder if a sort of multi-sig or multi-signing solution can be added to the system. There's potentially a way to have two backup accounts that could both be used to 'approve' and account transfer. We'd need someway to track how this happens, maybe a special type of event from the compromised account that points to the new account. The clients would have to do the work of connecting the dots between the accounts, but this should be a huge lift on the client side.

2023-03-07 16:37:04

- reply

Agreed. People can get political about anything (including bitcoin), but the technology it self is indifferent.
Unlike fiat, which is fundamentally rooted in politics, as its value, amount, legal use, and everything else about it, is determined at the whim of political actors.

2023-03-07 16:34:27

Definitely need a way to filter on languages. I'd prefer not to block everyone posting in something other than English. Could be a great post, but I can't understand it, so it's just noise in my feed.
Perhaps a possible NIP - field where the client/user can provide a language for the post. (Easily abused, but can at least filter out good actors not wanting to make noise)

2023-03-06 21:21:28

- reply

I'm using https://iris.to right now and it's pretty reliable. https://snort.social is another good web client. I've heard damus is good, though I haven't used it, so it might be worth sticking with for now if you want to be on a mobile app.
I'm still just getting into using it. I've mostly just been reading NIPs and looking at the libraries supporting the protocols. Lots of work to be done to make this a proper decentralized social network.

2023-03-06 21:15:59

- reply

I just blocked wiz. I don't see the constant begging for sats in my Global feed anymore, so I would say yes.
New NIP maybe: Curated block lists to auto-reduce spam?

2023-03-06 21:07:52

So far, Nostr is just looking a lot like the early days of the internet protocols, namely TCP/IP, which is a decentralized protocol, but needs support from other services, DNS, DHCP, etc., to make it useful.
I'm seeing the exact same thing in Nostr, in that, it's a 'decentralized' protocol that isn't defining the required scaffolding to make it useful, which inevitably means those will be filled by centralized services. NIP-05 is proving this out. The relay model itself is pretty broken, as the user doesn't own their posts, the relay they send to does.
How is Nostr going to avoid all these pitfalls? Is anyone working on that?