Oddbean new post about | logout
▲ ▼
Gigi | 4 months ago (raw) | root | parent | reply | flag +1 
 It's a very hard problem.  
nostr:nevent1qqsqme66cuc5yzlm0w3f7yrnuxwsxaw69hyuyxzwkn2tkpnvv52eawspzamhxue69uhkzarvv9ejumn0wd68ytnvv9hxgtczyrwkvn27gqtyxw5v660sqkhpfqyqgdgh3x6emed0qcnkmejkx0f3jqcyqqqqqqg93k5g2
▲ ▼
Gigi | 4 months ago (raw) | root | parent | reply | flag +1 
 I have my money on social recovery/rotation for what it's worth.

If a few close friends report the account as compromised, for example, and say "this is their new npub" - clients could easily pick up on it.
▲ ▼
mleku | 4 months ago (raw) | root | parent | reply | flag +1 
 there has been no case of compromised keys that i am aware of, i'm curious to know if there has been though

also, wen nip-06 in clients and signers ffs
▲ ▼
Laeserin | 4 months ago (raw) | root | parent | reply | flag 
 Can't get your keys back from some clients.
▲ ▼
mleku | 4 months ago (raw) | root | parent | reply | flag +2 
 yes, web clients are bad mkay, only use alby/nos2x/amber

all good client devs should just remove in-app signing, period @hzrd149  *nudge*
▲ ▼
mleku | 4 months ago (raw) | root | parent | reply | flag +1 
 also, my conservative instinct about using clients has been vidicated repeatedly

losing your keys is just the tip of teh iceberg... having your follow lists and relay lists clobbered is another problem that comes up