Thread

I guess in principal, this is Bluesky "The company" asking, not BlueSky the protocol...

understanding how the AT protocol works, in reality it is not very decentralized, because as I understand it, the essential keys to access one's account are held by the bluesky company, so although one can set up their own servers, they still have your account.

Indeed, the load is decentralized, the management is not. You're free to provide Bluesky with load balancing bandwidth for free, basically.

My first thought was hash the birthday and add salt, but that only works with a centralized server, which bluesky appears to be anyway.

Bluesky is federated much like mastodon. If your relay doesn't talk to your friend's relay, you won't see them.

Yeah that sucks. I ran Mastodon for a while, but didn't use it because of this.

Yeah, I agree to some extent.... We need better mobile signers... It sucks that the only way to get that on Android is to get a custom app store But it's really not that hard to just generate an nPub/nSec pair and start talking. I mean it's probably a lower barrier to entry than just about any other social media system...?

We unfortunately have 200 other problems to solve besides NIP-47, starting with Nostr content and the attitude towards non-bitcoiners, but this is a big one for sure. I don’t think most folks are ready to move to totally ephemeral pubkeys, and reusing nsecs across experimental, increasingly vibecoded clients is just... dangerous... Nostr really needs to get the basics done right. As a community, we have wasted so many opportunities to scale Nostr already. I joined about a year and a half ago, during one of the many huge waves of people quitting Twitter. Since then we have lost at least three other opportunities to grow. The last one was the hype around @rabble’s deVine stuff. Every time one of the non-BTC Twitter experiments shows some promise, Nostr seems to crap its pants. We really, really need to get the basics right for Nostr to have any chance. I don’t think lightning will keep striking the same place over and over again, and we may not get many more opportunities to make Nostr scale.

I mean... I guess... People use passwords anyway so I don't see this as a huge ask? And maybe I'm out of the loop, but what exactly is the "pants crapping" that's happening about deVine?

Nah, nsec is like the password for your Bitwarden or 1password, it is much more than just a password for an individual social media website. And if you have a lightining address it is like throwing your credit cards in the mix as well, you simply shouldn't use it on experimental clients (which is most of Nostr). Yes, reusing your Gmail password on vibecoded sites is bad, and this exactly why people shouldn't do it. The problem is the path not to do it in Nostr is broken. TL;DR on deVine is that press and some big timer YouTube channels like Linus Tdch ztips got wind of it and a gazillion folks tried to join at once. Basically too many users / too heavy of a worjload for existing relay software and available relays. There was a room with the usual folks trying to provision relays for it (Gleason et all) but if you don't have the infrastructure for the normies to flock in all of the hype is wasted.

As long as it stays decentralized and censorship resistant we will be good. No need to push it too hard, everyone getd NOSTR when they're ready. The glitches will be sorted out.

We need better mobile OS's, because a custom app repository or sideloading shouldn't even be something anyone blinks at. A standard one is more eyebrow raising. Thank God for @GrapheneOS

If you have a lightning address...with NWC. An nsec that you use with separate lightning wallet to pay invoices just controls your online identity, not your money. And NIP-05 is supposed to address that possibility, but admittedly it doesn't seem to do it the best.

The main problem is that a lot of Lightning, ecash, etc. wallets allow you to associate an nsec to unlock the wallet. Not many people pasting their nsecs into random vibecoded apps are security-conscious enough to use a separate Nostr key, so if one of those vibecoded apps leaks nsecs, you can pretty much scan the respective lud16 for half a dozen popular wallet domains and, more likely than not, hit the BTC jackpot.

Far as I know, about $1m per month in grant funding is being spent on nostr. Maybe more. If that money dries up before more users come on, that is a real problem. Needs to be taking into account in your "when they're ready" analysis.

Also 'disposable nostr' (ephemeral nsec/npub keypairs) is directly at odds with web-of-trust nostr. It's one or the other. You can't base filtering systems on web-of-trust when you can't trust normal users to keep safe the very thing on which that web is ultimately trusting.

Oh yea, if you're raw dogging your nsec around like that, good luck. The more I've looked at NWC the more I think I'm just going to keep paying the invoices manually with my existing lightning wallet. It was annoying when I was using speed wallet but now that I can see who zaps me using Zeus I'm pretty content with the flow as is. A little friction with the flow of money is often a good thing.

You can send zaps out with ZEUS with NWC in our next release. No need to reveal your nsec to us. Receiving remains the same.

What are the trust tradeoffs when choosing a nostr relay for NWC? What information about my node am I giving up to relay operators or assoiating with my npub?

I did hear that and will be taking a look, but not actually sure it's something I'll be using regularly. I sort of like a bit of friction in sending money -- call me old fashioned. But I do appreciate y'all giving us options :-).

Only what you broadcast publicly. You use a new key pair for each NWC connection..

This is hilarious.👍

That's the scariest scenario. Imagine how easy DNA collection would have made executive order 9066 much easier to accomplish. A Jewish gene added to KYC papers would have been Hitler's dream. People think these historical events are anomolies. They chant Never again, but that's not how history works. The COVID lockdowns quickly turned into a struggle between the vaxed an unvaxed. Tribalism takes on many forms and you never know when you're Identity will make you the enemy.

Things are reaching crisis point. UK has become rancid. Posting memes, supporting palestine, etc lands one in prison. Not just here. US too. The zionists pushing it globally. Freaking coz the world no longer falls for their crap. They lost control of their narrative. Now the world suffers...

I've noticed. I'm an anti-war hippie, but according to the official narrative, that makes me an anti-semite. I listen to a podcaster who was an Israeli citizen who is also against the war. Is she an anti-semite? This is a total psych op.

Yes. The Israeli government represents the values of Jews for them. Any Jew who doesn't stand with the Israeli government on every issue clearly has a problem with Jews.

Anf the palestinians et al are too. Ergo the genocidal zionists ARE the real antisemitez...

The Elsagate is still here