Thread

Periodic reminder that your relays see absolutely EVERYTHING you do on Nostr. Regardless of which Client you use. They literally see the app downloading zaps, replies, and reactions when you scroll your posts in real time. So... MAKE SURE TO KNOW WHO THEY ARE and that you TRUST THEM with that information. Nostr is just like a browser. The server has to know what you want to see to send it to you, and that gives them the power to track you and see what you are asking for. There is no way around it. I can't stress this enough.

Replies (46)

↩ replying to Vitor Pamplona
In your OP you wrote: > Periodic reminder that your relays see absolutely EVERYTHING you do on Nostr. Regardless of which Client you use. They literally see the app downloading zaps, replies, and reactions when you scroll your posts in real time. I understand that the relay data is public by design and that is what makes the accountability impossible. You also wrote. > So... MAKE SURE TO KNOW WHO THEY ARE and that you TRUST THEM with that information. How would a user know who is running the relay and why would you trust them with your data?
there are currently so many factors that make this whole process near impossible to achieve: - it's not only about trust in relays, but also trust in end users as they could re-broadcast what they see. - clients have default big pre-defined relays users are told they "own" their data which is kind of true only under very specific conditions among other major onboarding issues, nostr is advertised with crazy statements: "you own your data" but as many others also mentioned before, data ownership is not real, it has never been. and you can't ever have true control over where your data is going. for this to be real, each user would have their own household relay, all clients would use outbox model and, even then, it would only work for protected events while also hoping your posts don't end up broadcasted to relays that don't care about nip-70. this makes me think there could be data crawlers all over nostr that will find your data and possibly just sell it. PoW and paid relays are solutions yet to be, for the former, deployed on more clients, and for the latter, accepted by people (no one wants to pay) - there's basically no information on the biggest relays rn and who owns them as far as i know what relays to use in order to have the broadest view possible or to help with discoverability? nostr.wine looks okay... but what else is there? if your client doesn't use the outbox model, setting main big relays is the only way for you to discover new content. at this point i have accepted that anything posted on nostr is automatically freely accessible to everyone on earth by default. and we should expect all the companies in the world to track everyone's data. the censorship-resistant aspect is real though.
Been saying for ever #nostr and #bitcoin are open public network .. If you are sharing your real Identity.. behave well If you are anonymous..there is no reason for you to NOT behave well :-)
Vitor Pamplona's avatar Vitor Pamplona
Periodic reminder that your relays see absolutely EVERYTHING you do on Nostr. Regardless of which Client you use. They literally see the app downloading zaps, replies, and reactions when you scroll your posts in real time. So... MAKE SURE TO KNOW WHO THEY ARE and that you TRUST THEM with that information. Nostr is just like a browser. The server has to know what you want to see to send it to you, and that gives them the power to track you and see what you are asking for. There is no way around it. I can't stress this enough.
View quoted note →
Periodic reminder that your relays see absolutely EVERYTHING you do on Nostr. Regardless of which Client you use. They literally see the app downloading zaps, replies, and reactions when you scroll your posts in real time. So... MAKE SURE TO KNOW WHO THEY ARE and that you TRUST THEM with that information. Nostr is just like a browser. The server has to know what you want to see to send it to you, and that gives them the power to track you and see what you are asking for. There is no way around it. I can't stress this enough.
Vitor Pamplona's avatar Vitor Pamplona
Periodic reminder that your relays see absolutely EVERYTHING you do on Nostr. Regardless of which Client you use. They literally see the app downloading zaps, replies, and reactions when you scroll your posts in real time. So... MAKE SURE TO KNOW WHO THEY ARE and that you TRUST THEM with that information. Nostr is just like a browser. The server has to know what you want to see to send it to you, and that gives them the power to track you and see what you are asking for. There is no way around it. I can't stress this enough.
View quoted note →
Reminder that store owners can see you walking into their store, and can notice how long you stand infront of what products. Their eyeballs can also observe everything you buy at that store. I can't stress this enough
Vitor Pamplona's avatar Vitor Pamplona
Periodic reminder that your relays see absolutely EVERYTHING you do on Nostr. Regardless of which Client you use. They literally see the app downloading zaps, replies, and reactions when you scroll your posts in real time. So... MAKE SURE TO KNOW WHO THEY ARE and that you TRUST THEM with that information. Nostr is just like a browser. The server has to know what you want to see to send it to you, and that gives them the power to track you and see what you are asking for. There is no way around it. I can't stress this enough.
View quoted note →
Vitor Pamplona's avatar Vitor Pamplona
Periodic reminder that your relays see absolutely EVERYTHING you do on Nostr. Regardless of which Client you use. They literally see the app downloading zaps, replies, and reactions when you scroll your posts in real time. So... MAKE SURE TO KNOW WHO THEY ARE and that you TRUST THEM with that information. Nostr is just like a browser. The server has to know what you want to see to send it to you, and that gives them the power to track you and see what you are asking for. There is no way around it. I can't stress this enough.
View quoted note →
I'd nuance the privacy part a bit. On nostr, every follow, reaction, reply and post is necessarily public - it goes with the interoperability and portability dimensions. And relays can still infer a lot of a user's interactions from the data they request. See Also, since everything you post is signed, nostr doesn't really have a delete or "forget me" mechanism. Which is something to keep in mind, always.
Vitor Pamplona's avatar Vitor Pamplona
Periodic reminder that your relays see absolutely EVERYTHING you do on Nostr. Regardless of which Client you use. They literally see the app downloading zaps, replies, and reactions when you scroll your posts in real time. So... MAKE SURE TO KNOW WHO THEY ARE and that you TRUST THEM with that information. Nostr is just like a browser. The server has to know what you want to see to send it to you, and that gives them the power to track you and see what you are asking for. There is no way around it. I can't stress this enough.
View quoted note →
This is important for people to understand.
Vitor Pamplona's avatar Vitor Pamplona
Periodic reminder that your relays see absolutely EVERYTHING you do on Nostr. Regardless of which Client you use. They literally see the app downloading zaps, replies, and reactions when you scroll your posts in real time. So... MAKE SURE TO KNOW WHO THEY ARE and that you TRUST THEM with that information. Nostr is just like a browser. The server has to know what you want to see to send it to you, and that gives them the power to track you and see what you are asking for. There is no way around it. I can't stress this enough.
View quoted note →
It's not just the relays you use. It's ALL relays that are publicly writeable. If you care about privacy, use a VPN or TOR.
Vitor Pamplona's avatar Vitor Pamplona
Periodic reminder that your relays see absolutely EVERYTHING you do on Nostr. Regardless of which Client you use. They literally see the app downloading zaps, replies, and reactions when you scroll your posts in real time. So... MAKE SURE TO KNOW WHO THEY ARE and that you TRUST THEM with that information. Nostr is just like a browser. The server has to know what you want to see to send it to you, and that gives them the power to track you and see what you are asking for. There is no way around it. I can't stress this enough.
View quoted note →
What Vitor is pointing out here is extremely important, BUT it is very easy to misinterpret it as: "RELAYS ARE TRACKING YOUR NPUB AGAINST EVERY QUERY YOU MAKE" which is just false, since they can't. They can however see every write that you do. So can everyone else, but they can also associate your IP to it. So use a VPN. Now what this post is hinting at is that relays CAN do meta analysis to figure out who is querying these posts(by looking at follow lists and author filters) or which IP is browsing what content, so they can create a profile to some degree. Which is why you SHOULD connect to trusted relays. Just pointing out the hidden details so people don't get the wrong ideas from it.
Vitor Pamplona's avatar Vitor Pamplona
Periodic reminder that your relays see absolutely EVERYTHING you do on Nostr. Regardless of which Client you use. They literally see the app downloading zaps, replies, and reactions when you scroll your posts in real time. So... MAKE SURE TO KNOW WHO THEY ARE and that you TRUST THEM with that information. Nostr is just like a browser. The server has to know what you want to see to send it to you, and that gives them the power to track you and see what you are asking for. There is no way around it. I can't stress this enough.
View quoted note →