jeremy
J L W

https://jeremy.whelchel.me

ky, nyc. swim. fly. code.

Public Key

npub1hrc008qk3rvteut0xvazc4sh5tpex4rfew75an3e3pttrglhamsqnw648j

NIP-05 Address

jeremy@whelchel.me

NIP-57 Address

jeremy@whelchel.me

Profile Code

nprofile1qqst3u8hnstg3k9u79hnxw3v2ct69sun235uh02wecucs44350m7acqxrftdx

Author Public Key

npub1hrc008qk3rvteut0xvazc4sh5tpex4rfew75an3e3pttrglhamsqnw648j

Show more details

Last Notes

2023-03-11 15:06:27

- reply

+1 for Caddy
config format was somewhat confusing at first, but awesome once it clicked

2023-02-21 02:17:58

- reply

Another twist on “render an image customized to my ip” would be the recently popular wttr service. you can see your local weather here:
https://wttr.in/.png
#[0]

2023-02-02 04:29:25

this is how you do an off grid relay!
https://ksltv.com/516749/why-are-antennas-popping-up-all-over-the-foothills-salt-lake-city-seeks-to-solve-mystery/

2023-01-22 12:25:49

- reply

my first reaction is that nostr isn’t suitable for that kind of blob storage. someone tried building a filesystem on top of nostr and it was pretty discouraged
however should maybe just be up to relay & client policy. with a new event kind, why not? if some beefy relay wants to support it, they should feel free imho. most pleb relays prob won’t deal with them—and i’m guessing there’s a reasonable event bytesize cap that comes into play already

2023-01-12 02:28:22

- reply

#[2]

2023-01-11 13:37:08

- reply

I'm also old enough to remember when it stood for "Notices to Airmen"
https://nostr.build/i/3424i.png
https://www.aopa.org/news-and-media/all-news/2021/december/06/faa-publishes-changes-to-notams

2023-01-11 13:35:24

The FAA grounding is interesting. I'd expect it to be officially communicated via a NOTAM. Except the NOTAM system itself is what's busted.
I'm sure there are other announcement channels, but this smells of a circular dependency (not to be confused with an advisory circular :P)

2023-01-11 13:14:47

Today's my one year nostrversary
#[0]

2023-01-11 03:14:01

- reply

that’s great. what client?

2023-01-10 20:22:30

- reply

Code for dynamically generating that image containing request info:
https://github.com/jeremywhelchel/whodis
live at https://whodis.fyi

2023-01-10 15:50:11

- reply

that's great to have it optional

2023-01-10 15:36:51

- reply

profile pics too

2023-01-10 15:35:04

- reply

"the user" is you. image is just dynamically generated based on the request info
good that you use a vpn :)

2023-01-10 15:32:31

- reply

Whitelist is better than blacklist, for sure.
Pi-Hole, PfBlockerNG, uBlock, the DNS resolvers with build in ad/tracker blocking (popular with VPN providers now). Those are all just blacklists. Very easy to spin up a new domain to get around it.

2023-01-10 15:27:48

#[1]

2023-01-10 15:27:39

- reply

good point. same issue there too

2023-01-10 14:21:50

- reply

The issue is more that anyone could proactively make you visit a website to collect that tracking data.
Yes. People should use VPNs. It would partially help. Device/os/browser still not obfusciated, but they're less sensitive.

2023-01-10 14:11:04

- reply

It's my toy website. I should share the source--it's really simple
Also has very coarse stats. Here's the last few mins of views:
https://nostr.build/i/3160.png

2023-01-10 13:58:14

- reply

Yeah. I think image proxy is the way.
VPNs should also be used. Depending on the platform, the client can obfuscate the header details (device/browser/os)

2023-01-10 13:56:54

- reply

That's great. Can you share what the image proxy service is? Other clients should consider using it.

2023-01-10 13:37:53

- reply

In centralized systems (twitter, hosted email), you can be more protected from anonymous third-parties triggering a fetch to get that data. The provider has the info, but you're trusting them with it anyway.
There's not an easy solution in decentralized systems like Nostr. You could whitelist trusted image serving domains (e.g. nostr.build). Or have trusted image proxies--perhaps relays could even offer this.

2023-01-10 13:37:17

- reply

It's trivial to craft a custom tracking pixel and send to anyone as a DM. Most clients today will fetch the image without a second thought. Damus will blur the image from anyone you don't follow--but it still fetches it.
Of course this shits happens elsewhere, too. This is why Gmail will proxy images for you, and gives you the option to disable automatic loading:
https://support.google.com/mail/answer/145919

2023-01-10 13:36:06

Nostr clients should rethink automatically rendering all images found in notes. Most users are not aware this leaks request info: IP address (thus location), device, browser.
https://whodis.fyi/data.png

2023-01-10 13:02:36

- reply

# go big
##### or go home
*wondering which clients support headers*

2023-01-03 00:50:36

Was curious where Astral was getting its list of bots from. Apparently there's this bot tracker, that just follows bots:
#[0]
https://github.com/monlovesmango/astral/blob/master/src/pages/Feed.vue#L120

2022-12-30 15:15:22

- reply

i suspect lost followers happens when you update your contact lists separately on two different clients. the list is just a big blob. adding or removing a contact isn’t done atomically.

2022-12-29 21:47:52

- reply

same. i have no sense for how notifications are supposed to work here. there is no ability to sub to a thread that i can see

2022-12-29 20:57:47

- reply

testing a note ref…
this is hopefully the “failed to decrypt” problem
#[0]

2022-12-29 20:49:16

- reply

yep. getting the same failed to decrypt dms on damus. btw, where did you see that the problem was with brb relay?

2022-12-25 19:24:50

Nostalgia for the days when mincemeat tarts lived up to the name. Merry Christmas!

2022-12-24 04:12:42

#[1]

2022-12-24 01:33:24

spun up a nip-05 "server" using Caddy
😊

2022-01-22 16:22:56

- reply

was testing crl+enter to publish. works on nostr.rocks, not on branle.fiatjaf.com
still seeking a way to delete posts...

2022-01-22 16:21:54

line one
enter

2022-01-11 14:30:19

this looks promising

2022-01-11 14:12:04

running branle