Oddbean new post about | logout
▲ ▼
steepdawn974 | 4 months ago (raw) | root | parent | reply | flag 
 Having a permanent public record of all my npub's activity, plus associated metadata (IP address, timing) - it feels like a disaster to happen.
Not having an option to roll over your identity into a new npub is a major issue for.

It's like constant address reuse in Bitcoin.
▲ ▼
melvincarvalho | 4 months ago (raw) | root | parent | reply | flag +1 
 Completely agree.  I mean npub + nip05 + key rotation as it evolves with time.  IP address should not be stored.  Only the fields the user wants.
▲ ▼
steepdawn974 | 4 months ago (raw) | root | parent | reply | flag +3 
 but the relay operator can always log incoming connections and IP addresses, no? Outside of the Nostr protocol. So they are huge data collection honeypots
▲ ▼
melvincarvalho | 4 months ago (raw) | root | parent | reply | flag +3 
 Yes, unfortunately that is the case.  It happens far too often on nostr, for example fiatjaf's njump dot me and benarc's nostr dot com contain spyware that deliberately send your ip address and browsing history to certain VC (bad guys imho), without gaining user consent.  I try to raise awareness of this, but there is very little action, sadly.  Nostr needs to develop good reputations for those that respect privacy.  Most currently do not.  Sadly.
▲ ▼
steepdawn974 | 4 months ago (raw) | root | parent | reply | flag +6 
 Wow I didn't even know that. Really bad.

But in general, the Nostr protocol is just not private, but pseudonymous - and thus succeptible to the same dragnet-style surveillance as Bitcoin. You just need to collect enough metadata..
▲ ▼
Derek Ross | 4 months ago (raw) | root | parent | reply | flag +1 
 What spyware are you referring to?