Oddbean new post about | logout
 Apple Problems as usual 
nostr:nevent1qqs96t58lszflzkevzswdwyz2ts8s8x5ymgz8l3w3y6wv8pyqdgdxzcpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhsygpjuxp8vd29p6ancknaztql3eajk52y8xkppfn7au7elkw9c68zg5psgqqqqqqs54t4hr 
 wdym? this is a problem with all nip07 plugins except ones that communicate to a native app or device that does the signing. I think all nip07 plugins currently work this way. 
 So than that's fucked up

Is it true @fiatjaf Nos2x extension leak the nsec on Javascript environment?

And what about Amber @greenart7c3  
 it doesn't leak it to websites, since extensions are isolated. damoose just takes it a step further and isolates it from the js-plugin environment. it acts as a native signer that is network-sandboxed. your keys are likely fine, this is just improving the security even more.