Oddbean new post about | logout
▲ ▼
melvincarvalho | 11 months ago (raw) | root | parent | reply | flag +2 
 Ben, please please please, take the spyware off your website ( nostr . com ).  It gives the whole space that are going the extra mile for privacy a mixed message.  You do so much good work, but if you stop sending nostr user IP addresses to 3rd parties, it would be so much better.
▲ ▼
matata | 11 months ago (raw) | root | parent | reply | flag 
 is this true? why are ip adressess sent to 3rd parties @Ben Arc?
▲ ▼
Ben Arc | 11 months ago (raw) | root | parent | reply | flag +2 
 He's talking about njump located on only `/<event>` I think, which has some tracking (not by us, but the njump project). If he hates njump so much he should fork, and create a version without tracking we can use🙏
▲ ▼
Ben Arc | 11 months ago (raw) | root | parent | reply | flag 
 You talking about njump?
Hardly spyware, and only if you use /<event> param
▲ ▼
melvincarvalho | 11 months ago (raw) | root | parent | reply | flag +2 
 I'm talking about nostr . com.  Yes, to events.  It is spyware in that it sends IP addresses (and other stuff) to a 3rd party.  And not a particularly trustworthy third party.  This is what HTTPS was designed to protect against.  Why do you need this?  If you remove it, it's better for nostr . com, better for nostr, better for users, and better for you.  An easy win.
▲ ▼
Ben Arc | 11 months ago (raw) | root | parent | reply | flag 
 This issue you have is with the njump project,. Any tracking they use is restricted to `/<event>` on nostr dot com. 
Lame move hijacking this thread to push a bunch of FUD.
▲ ▼
melvincarvalho | 11 months ago (raw) | root | parent | reply | flag 
 It's truth ben.  Verify dont trust.  Dont shoot the messenger.  That is a lame move.  You're a well respected person in the community, and the site is a flagship site.  I'm saying it would be better if you stopped sending user data to third parties.  So much in nostr is going the extra mile to resist censorship, to resist privacy invasion, to build trust.  Adding spyware to your site sends a mixed message.  This is not the time to double down.  And undermines the trust.  I know you didnt cause the problem, but you can fix it.  If you really must count users, do it on your server, rather than sending IP addresses and browsing history to a very questionable third party.  You build good stuff, dont taint it for no reason.