It really makes me uncomfortable having my private key (Nsec) in my clipboard just because I want to set up some extension or native app. Right now, our login process is extremely dangerous, and I mean, you're just one mistake away, and it's over; you can't do anything about it. Sooner or later, we have to get this fixed, but for now, it's like we are just waiting for something bad to happen.
It is basically a password you can't change
And there is also no way to recover. Anonymous accounts will have their identities stolen, and we wouldn't even know.
The flat singing though, embarrassing
NIP-05 right now partially protects against it.
I really don't want to tie my identity to a domain
Makes sense 🤔
Nsec bunker is the fix. However, I think nsecbunker w/ nip 05 + password login authorized via OAuth is where we should be aimed
Nsec bunker seem like a perfect solution, it's really fixes all the problems, we just have to make it cheaper and accessible to everyone.
And that’s an expensive thing to do. 😉
I agree. I'm afraid to copy my private key even to make a backup copy of it. I hope there will be a better solution soon.
Brazil, recently: a youtuber demonstrating a BTC app read, on-line, a password from a .txt file. in the same file, a few lines above, there was... his wallet seedphrase ==> his BTC were stolen on-line, in a few minutes, visible in the same video. I did not see it, but that was the tale on twitter
Yeah, I wonder every time I do it if I’ll have to make a new account.
@jack is supposed to fix this with the hardware and wallet ☹️
exactimo! not a good look for non-techy users onboarding, like how do you even start to tell them how it's done, especially for users of centralized platforms like we all have been. they might as well not take #nostr seriously because of the tons of work to be done (even for techy ones, it's a lot of work)
Dann sollte man sich die Mühe machen, den NSec einfach einzutippen, anstatt aus Bequemlichkeit die Zwischenablage zu nutzen. Es kann so einfach sein.