Pro/Con of Nostr Clients
Iris.to
Pro: Everyone has a web browser, so it’s easy for beginners to on-board. Simple easy layout.
Con: They use CloudFlare, so do NOT let the website see your private key. You need to use the Flamingo browser extension to sign events because CloudFlare strips away httpS encryption. Without a browser extension, it should be treated like you’re handing your private key to the US government. You can’t view DMs using a browser extension only. Also CloudFlare will browser fingerprint you and block Tor.
Primal.net
Pro: Fast for Tor. I recommend this only for Tor browser. The reason it’s fast is because you’re not getting the content from each individual relay, but it’s aggregated to their database.
Con: Primal’s model is closer to traditional social media, where they can censor content. Beyond using this for speed on Tor, it’s dangerous centralization.
Amethyst
Pro: FOSS Android client in the F-Droid store that works on degoogled phones. Not only is the interface just like Twitter, but they added in “sealed sender” style DMs, similar to Signal to hide metadata.
Con: Be aware that if you’re not using a degoogled phone, then the government and Google can probably get your private key. And for the high risk “tinfoil hat” paranoid, you can’t control the Baseband modem of ANY mobile device which hackers can remotely compromise. But for the average memer, private keys on mobile is fine.
Gossip
Pro: This is what I’d use for famous or controversial influences with a high threat model. Desktop Linux is supported, and it’s programmed in Rust which could potentially add security against memory corruption for poorly vetted third party images downloaded off relays. Password lock on posting is good.
Con: No sealed sender DMs yet. Hard to use.
Tip: You want to first try Amethyst, then graduate to Gossip when you understand that you have to enter a relay where someone posts to find them. (hint: lookup their relays quickly on Tor via primal.net.)
Lume
Pro: Lots of features such as mapping relationships, good widgets for hashtags and topics. Password lock is good.
Con: There’s still Linux bugs. I can’t recommend it for Linux, as I had issues. However, the developer has significantly improved Linux builds from just a few months ago, but it’s not there yet.
Damus
Pro: iPhone Client for less tech-savvy users
Con: Apple (and therefore the government) can probably get that private key, but again for the average person it’s ok.
</end>
Please consider reposting this to spread adoption. I might make video tutorials for gossip
Opinions on noStrudel?
Yeah was wondering the same, I'm not sure all that many people still use iris (?)
Second this. I’ve been using Nostrudel and it’s great. I prefer Damus because it’s an extremely fast native iOS client and closest to the Twitter experience I am familiar with, but Nostrudel is one of the most functional clients I’ve used. Nostur also deserves a solid review here, one of the first to implement features like nSec bunker, backups over cloud, media hosting (Nip98 I think) and more.
Awesome breakdown though!
I'm using Gossip and it's great. Simple and really fast. I had to compile it with the option "--features=video-ffmpeg" to get video reproduction.
Hope to learn more rust to contribute to the proyect.
What is baseband modem
So phones have two brains. One is like a computer with CPU and RAM. Another connects to cell towers.
This 2nd tower one is the baseband modem.
The problem is hackers can pretend to be the cell tower
For the love of all things holy make tutorials that morons like me can understand at a 5th grade level. We can talk about pathophysiology all day, but tech and my mind shuts off
Are there ANY desktop clients that are safe to use secret key with (directly, without a browser extension)?
By this you mean a website? Then no.
For a client, gossip and lume
Yeah, that's what I meant -- sorry. Thank you.
I use Primal and censoring channels are optional.
We our a team, but the author meant primal could censor since they aggregate. Primal said so themselves on a nostr podcast
Hello, I am using Amethyst (unfortunately not degoogled but i am not into this privacy tech thing, I know not enough but I like privacy and would like to know more) and I use X/twitter also and since I use nostr with amethyst I recognized that translations here are very bad compared to X. Is this only Amethyst or with every nostr client? Hopefully someone knows?!?
This video goes over degoogled phone basics:
https://video.simplifiedprivacy.com/degoogledphonebasics/
Thanks! very interesting but perhaps you know following: How does someone know that google didnt do something with their hardware to spy on you, because some time ago, I heard about intel having a hardware backdoor in some of their new processors so that they didnt need software vulnerabilities to spy on you
Yes true. For phones its the baseband modem
I googled explanation for baseband modem in my language and didnt understand 😅
But from your website it seems you dont see an issue with degoogling pixel phone instead other phones. So it must be a problem every phone has.
Now I am going to study your website first.
I am sure I will learn a lot there, so I thank you in advance 🤗
When you put your phone in airplane mode, that's just an API call to the Qualcomm baseband modem ASKING it to stop. You're not really in control of it
Thanks for your posts! I look forward to them! Please post more and more.
💜🫂🙌
ข้อดี ข้อเสีย ของแต่ละ #Nostr client ที่ฮิต ๆ กันตอนนี้ครับ #siamstr
nostr:nevent1qqs9nv0avqgvqag9mrz4u585rf350t29rhfezsp65g39x9gvzd0ps2qpz3mhxue69uhhyetvv9ujuerpd46hxtnfdupzptpldtlpwkflvxqs2y76exs7238g0wwwjxe86dac3mzclw4fq992qvzqqqqqqyxqq9ru
the government can never get my private key off Damus
Yes, they can, if you have icloud backing up your phone, it's pretty easy for them to coerce apple to give them access to your backups.
nothing in damus backs up to iCloud
Are you sure the whole phone isn't just backed up as a matter of course?
If not, cool.
All the cons sound apocalyptic 😰 in the end everything depends on the user and how they want to protect their keys.🔑
Every Android phone can steal your private key of any application but let's blame Amethyst.
It clearly said ALL in caps. But yes you're right it should have had a space to new section
@SimplifiedPrivacy.com Podcast
you say
"Primal.net
Pro: Fast for Tor. I recommend this only for Tor browser. "
May I ask how do you use tor browser with primal?
I am not sure i want to paste my nsec
but then I also should not install browser extensions in the tor browser
Oddbean new post about login | logout