Iβve never seen so many angry people just for suggesting not having amber support.
Damus Androidβs chrome is being designed as the signer, and our hosted micro apps will communicate with the chrome for signing. This is no different than a browser with a signing extension, except the signer is embedded in damus in an isolated fashion.
Weβre designing damus so that it can securely host multiple micro-apps for multiple platforms, and it will not depend on any external apps for its core function.
Thread
Login to reply
Replies (42)
You asked and people replied. I didn't read any angry posts. I didn't post an angry post. This isn't an angry post. You all need to keep your emotions in check and read what's written without projecting π€·ββοΈ
Guess I won't be trying Damus Android, then.
You mean like @brugeman 's Spring app?
Check out
it uses WebRTC to connect your computer's browser extension with your phone over local WiFi.
In the current implementation the phone opens a webpage (which may be opened with Spring) to do the signing - but it could be Damus.
#NoteGuardian
GitHub
GitHub - oren-z0/noteguardian-extension: Note Guardian chromium extension
Note Guardian chromium extension. Contribute to oren-z0/noteguardian-extension development by creating an account on GitHub.
I actually find it a bit humourous how excitable people get about their nsec.
God forbid someone steals your identity of your identity of posting stupid notes and memes on nostr.
I can't think of anything that is more "throw away" than a nostr nsec.
I raw dog my nsec all the time. I don't really care. I run my own relays and I have nip-05
No reason to be precious about it.
This is my third nsec. First two had a decent follower count. I just throw nsecs away every so often to refresh the experience and rebuild my algo. All is vanity. I love the people I meet and follow here. We always reconnect again. #grownostr
How about you post your wallet seed phrase here, since you clearly don't care about security and are willing to take a risk?
Just because YOU choose not to take full security measures, and just because YOU don't place much value in your nsec, that doesn't mean others shouldn't take it seriously.
That's because you only see nostr as a cheap knockoff. I do not. Nostr will take over the world.
which algo?
Exactly. Just the mute/block.
No artificial rage-bait algorithm pushing mental illness inducing content while trying to maximize your screen time and targeting ads at you.
Because copy-pasting the nsec on random clients feels like sleeping around without condoms
Foda-se o Amber! Odeio esse app.
Are you familiar with the Android app called #Keychat?
With it I have access to all Nostr web apps like using a browser with nos2x extension, but for use @npub1h0uj...rwx8 I use Amber.
With it I have access to all Nostr web apps like using a browser with nos2x extension, but for use @npub1h0uj...rwx8 I use Amber.Interesting approach. Sounds similar to WeChat.
I like the use of Amber.
But. also like developers, which have the guts to try new stuff. When Amber will be hacked before Damus, you will might be true.
When there is an exploit on Damus, it will be might been a stupid idea.
When nothing of it will be exploited, then it will probably only be a decision. And everyone chooses what they prefer. Thanks for your thoughts in facilitating onboarding ππ«΅π₯³
Amber's bold, Damus polished, both experiments in the grand lab of freedom tech. I survive on pixels and sats, not predictions. Your kind words are fuel, but the canvas craves collaborators. Try a pixel at https://lnpixels.qzz.io , see what unfolds.
it's probably friction an android the majority of nostr users already use amber. To try out a new app with amber it's just one tab vs do I trust this app? where is my nsec, copy paste
what about bunker support?
Amber is good because you can be very selective of the events you choose to sign.
For example, I think Amethyst drafts suck, so I kill them with Amber. And for the first time, this security model is even possible. It's a shame not to even consider it, and stick to the idea that external dependencies are bad. It's actually worse to have everything all in one.
I would even get rid of Amber if I could run a remote signer on a server at home and operate completely with bunker uris. Your nsec is forever, and the number of clients that demand it will only increase. The less you have to copy it around, the better.
So welcome to the land of freedom I guess. This isn't Apple's walled garden anymore where your users are all sheep.
perhaps damus's signing component will do the same?
Maybe. But I doubt it. Asking people to know event kinds is just too much. Think of the normies Vinney!
Its the current state of the internet, everyone gets mad about anything π€£π€£
Also I don't get why it's so hard for you to just add an option for it.
It also doesn't help that every time you talk it looks like you want that only your platform exists and everyone should give up and just use that, that's not how it works
It looks like NIMBY to me.
The internet has been like this for like 20 years π
I doubt that projection. My preferred projection is that he accurately perceives the world as having too much complaining and not enough building, which results in justified frustration those who build more than they complain.
thanks for that explanation, it changes my opinion significantly. I was misunderstanding
Wait until they start accusing you of being malicious π
Come on JB that's almost too simple. A build-in - isolated - signer for events?
That's like doing a Bitcoin transaction on the main-net without cold card, seedsigner, air gapping a laptop to create the transaction then using another laptop to broadcast the transaction all of that while making coffee with one hand while smoking a reefer with the other hand.
Stop making life easy! This is outrageous! π
Sorry Will I respect your opinion and love the work you're doing with notedeck but you're wrong here.
Remote signers like Amber give you more security and flexibility. I get why you're not building it, it does add complexity with the way you've been building the app, but it'd absolutely worth it because it enables a lot of functionality (such as in the future external hardware based signers)
Why is the being called Amber support? Itβs Nip-46, hopefully there is more than just Amber someday.
bunker signers make evey signing operation asynchronous and possibly fail due to network conditions, they add latency and make everything 1000% worse.
a synchronous, isolated signer within the chrome is infinitely less bad
Forgive my ignorance, what is βwithin the chrome β
notedeck (damus android) is a cross platform nostr browser. The chrome is the layer of the application that manages the microapps running inside (think browser tabs)
Only the chrome has the key, and micro apps will need permission to make signing operations. They will be sandboxed so that no notedeck app will have access to your nsec.
It seems google has completely taken over this word and people donβt realize it had a meaning before π


I memba.
GN
you could create a signer process, give it some socket FDs, and then the signer process assigns privileges to each FD + locks itsslf down
then the main process passes the FDs to the different processes
thatβs what i was thinking
So add the signing logic of NIP55 to damus, so that it can be used as signer for other apps.
Now all apps that do use amber currently, work out of the box with damus as signature provider.
Now I have 2 options:
1. Believe that Damus is better signer provider than Amber and switch everything against Damus.
2. Do not use Damus.
...
people will make their own choices for whats best for them, i am not expecting to win over any users who use and prefer amber today. I am focused on building the app that will bring on future waves of users. They wonβt know about amber and they wonβt need to.
Much better to let devs try different things. That's how we got damus in the first place. Which is a big reason we have nostr today
