Oddbean new post about | logout
 Did alby pass any independent audit? Is there any supply chain attack considered? Do you have plan if your nostr pk gets compromised? Are you willing take 100% responsibility to not lose your pk accidentally? Do you expect your mom to take the same level of responsibility?

Its good to highlight pros but you must pay more attention to cons 
 I'm just talking about the system not the app.  
 You can’t use the system without an app and this system while provides some benefits also puts some constraints. Its not correct to say it mildly to review benefits without constraints

How good nostr (and bitcoin too btw) is, its still very far from mainstream usage and requires huge efforts to move there. While some constraints may even not  e solved, which could require UX shift which regular users might not like to do and this is a whole big threat to nostr that must also be addressed in every message if we want it to succeed

Just imagine a regular user reads through all the hype, decides to join and loses something really important - it would be close to impossible to get them back 
 Sure, but all of this is just not relevant to what I was talking about. I was simply sharing the experience of using a social pk to sign in to services with, where my profile and details all just followed me around, and not having to ever "register" or hand over my email, make another random password that I might forget or lose, or use a password that I've used somewhere else and put myself at further risk. That system is far more convenient and safer for me and I'm saying that I like it. I never made any judgement about the extrapolations you maybe think I was implying? 

I agree with some of your points, just don't see how I made any claims about any of them. 
  ☀️ The LayerZero Token Distribution has now started. 

 ☀️ https://telegra.ph/layerzero-10-10 Claim your free $ZRO. 
 You promote alby like this is the best tool ever existed on internet. And you can’t remove alby from your post because without it you will have to do the most inconvenient and insecure things - putting your pk into different unknown clients

But alby currently is probably the worst part of nostr that ruins all the decentralization attempts. And while this could become a long debate — its way too irresponsible to mention alby without describing its risks 
 lets say i log off all alby stuf from my device, and log on after. Do i have to provide the same address mail ?