Oddbean new post about | logout

Notes by dtonon | export

 Can you shill me some great websites/apps that support Nostr Connect (bunker url)?  
 A feedback:
The login screen shows a “nsec / user@nsec.app” suggestion, but it can actually be used with any bunker url; I would highlight this.
Then I think that the main options should be Nostr Connect and the extension, I would move the "danger" nsec option below, with a proper disclaimer.
You should also hide the extension button if it is not present (and maybe show a box that explain why and how the user should install it), currently it just fires an error in console without any visible feedback. 
 Actually nsec.app is a bunker, I would just be prepared for the future :) in meantime educating a little the users :)
Btw I agree, the majoirity of people simply ignore extensions. 
 Share feedback for nostr landing page njump dot me with nostr:npub10000003zmk89narqpczy4ff6rnuht2... 
 I know, quite wordy, but the goal here it is explaining the details, not doing quick onboardng, this from my point of view should be left to the individual apps (spoiler: with an exception, that you will see soon).

Btw, do you refer to the first view, or the whole page? 
 Thanks for the feedback, I will reflect on this aspect! 
 The experience on a phone cannot be evaluated apart from scrolling, so the first screen is not totally crucial. Different matter, however, for the desktop. 
 https://image.nostr.build/36355bbf82c395163b3b271e9fd8b69b88121343a969c457aae53abc8a4bcaa9.jpg

Actually, I need to add a immediately visible image on mobile.

Any other feedback? 
 1) Tendentially I agree, “decentralization” is only a tool to achieve resistance to censorship.

2) This make no sense to me, what people think that? There are dozens of “strange” extensions used daily (.io, .ly, .lol. etc).

3) Actually you are right, something has changed, the light version as a poor contrast.

4) "Take your friends with you" make sense, but it's not much business oriented. Maybe "take your social network with you".

5) The page explain just that, doesn't? 
 I will steal "a better internet" and add it to the typewriter animation of njump.me 
 Really.
None of the proposed pages are low quality, so your this logic should not apply.
Users scroll to have a complete view of the page. 
 There are several strenghts, censoriship resistance is the first one declared in the fiatjaf presentation and currently present in the main repo.
I agree that for the vast majority, the portability of the social graph is a more attractive value. In fact, it is explained in the "You own your audience" paragraph. 
 2) Would be interesting to know how tech savvy are these people are and how much they trust you :D since usually you should check the link source to initially evaluate the potentially risk of a link. Btw, no links are virus if you don't deeply interact with the page (download and isntall something).
Finally, we are talking about the homepage here, not an internal link with the “strange” url.

5) I didn't say this is explained in the screenshot, I said it's on the page, and I said I think users are inclined to scroll on mobile. Of course the first view has to send a strong signal, and since different people are sensitive to different messages, Njump has an animation that alternates between various phrases that can “hit” the target audience. 
 > I would not focus immediately on the negative

I definitively agree!
Thanks for this interesting feedback. 
 A positive approach would be definitively better.
Keep in mind that the title rotate with different sentences, but all are still positive.

And yes, the text can be shortened. 
 No, you volunteered for the new super secret project, hahaha
But I would also happily accept any help with this! 
 Did I write something incredibly stupid and funny? :) 
 Native Nostr groups are a reality thanks to NIP-29, they are a great collaborative development tool, but also a strategic onboarding asset.

nostr:nevent1qqsxws5vjcttj7cwyf6sftq7w3dz7nqaen6e9hhz67vdw0s4twlzd0cpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhsygry26qmn5r8kx3k9397arwllxray3ndfxg9cfkt3lk9umah8t6usspsgqqqqqqsy2wq48 
 nip 46 is a never ending fractal nightmare 
 Hahahaha 
 URL?
I can see only a pic. 
 Sorry, just a bug in Gossip rendering! 
 Yes, it's a bug in the unstable version, btw now fixed. 
 I just make nostr connections work on Robosats Android App through Tor, not even I can believe it... 
 Cool! 
 I'm thinking whether it would be better to give bunker URLs a different enconding, e.g. url-safe base64. The current format for a new user is rather cryptic with special chars and some domains hints, but providing little useful information; and it has usability problems, e.g. it is easy to copy it incorrectly after a two-click selection, since this action copies only part of it.

Example:

bunker://8cfec14dc07bcc113fc447aee962af10d17eef6f7582a905f0bb1cd49904fa9a?relay=wss%3A%2F%2Fmyrelay.test.com

would became:

bunker://OGNmZWMxNGRjMDdiY2MxMTNmYzQ0N2FlZTk2MmFmMTBkMTdlZWY2Zjc1ODJhOTA1ZjBiYjFjZDQ5OTA0ZmE5YT9yZWxheT13c3M6Ly9teXJlbGF5LnRlc3QuY29t

A bit longer, but nothing dramatic. Probably I would also update the prefix, from "bunker" to something more nostr related and suggest that it is data that should be kept confidential. Maybe "nsecbunker".
Last, I would add a versioning param, es. v=xx, to facilitate future migrations.

Opinions?

/cc @fiatjaf @hodlbod @Mike Dilger @PABLOF7z @greenart7c3 
 I have identified a cons: the user cannot verify that the url matches their public key. But how many people remember the hex? 
 It's a solution, I thought about it but discarded the option, I don't remember why. 
 Definitely better. 
 "What I have noticed with big tech is if I think the can do x they will actually do it, and then the next question is if there's anything bad you can do with this tech, they will actually do it"

nostr:nevent1qqs0zdx5lpz4afzpg6wjrf4df28fm2cfzgatnf9jt8afs0j47uwaluqpr4mhxue69uhkummnw3ezucnfw33k76twv4ezuum0vd5kzmp0qythwumn8ghj7un9d3shjtnwdaehgu3wvfskuep0z65rp4 
 Actually Pokey also seems like an interesting solution if you decide to *not* install any other Nostr app on your phone: just get the notification without getting trapped, and put off any activity until when you are at your PC. 

@KoalaSat maybe you could think about some specific features for this use case, for example the possibility to pin a notification and snoze it, ora add a short note. 
 Yes, pinned notifications remain in a list within the app, snoozed ones are displayed again after the selected interval.

https://image.nostr.build/c1adc4789a700a750ed760e967859ffcba198b0f4efaccb04c26354665d17ec8.png 
 Your are welcome, feel free to ping me if you need some help with the UI/UX.

PS: I don't know if on Android you can actually show a dialog on a locked screen, the alternative is showing more buttons on the notification, but it could be confusing with many items stacked. 
 If it's possible adding a second row of buttons, you can let the user choose 3 options and put them there. Please verify that, so I can review the design.

I will review Pokey and open an issue with some suggestions.
If you are planning to add some features, please share them, so I can include them in the mockups.
 
 Cool idea, I love these physical and retro things, maybe because I am old.
Unfortunately it is not my area of expertise. 
 Do we really need screenshots for very open, easy to fetch public data?
nostr:note19zp6lhg0g2zryc... 
 I agree that Njump URLs doen't have a great usability, but are necessary. Screenshots have many limitations, starting with the fact that it has no interactivity to bring the user back to Nostr.
Btw a lot of services have really long and weird URLs, see Amazon. 
 Njump offers embeddable widgets, for an example see the homepage: https://njump.me 
 Scammers are doing exactly that with subdomains, I don't think it's a solution. 
 Well, speaking URLs are generally useful because more informative, you can know what you are going to open, and so make an evalutation on that. But in the proposed form, just the author while keeping the (necessary) nevent code, are useless imo. 
 What we needed to clarify this issue, thank you. 
 Mirror Android devices (video and audio) connected via USB or over TCP/IP, and allows to control the device with the keyboard and the mouse of the computer, handy!

 https://github.com/Genymobile/scrcpy 
 This is all I can do at this point:

nostr:naddr1qqyxzepcx3jnxc3nqyghwumn8ghj7enfv96x5ctx9e3k7mgz... 
 How can you verify that the timestamp is real? 
 Is it really so bad?
I was speculating here https://stacker.news/items/756409/r/dtonon?commentId=757681 that they have some AI to check potential abusive edits when the context requires it (great exposure and many responses/reactions already recorded).
Maybe I overestimated these big tech circuses.

Btw, I agree, delete and delayed sending is everything we need. 
 I see! 
 Nostr's bunkers are flourishing

nostr:nevent1qqsds9ywz06m2jswyqcch40q7hphk3shms3a89u746jgpsd787wd66cprdmhxue69uhkwmr9v9ek7mnpw3hhytnyv4mz7un9d3shjqg4waehxw309aex2mrp0yhxgctdw4eju6t09ushemcj 
 this is great news. people don’t want to follow a bunch of people they don’t know and then ha... 
 Is that what Damus does now?
@jb55 any details, please? 
 onboarding is somehow getting way worse. we're stopping all new new feature dev to focus our onbo... 
 Yes, solid features and better experience, starting from the onboarding, I'm just working on this. 
 I'm focusing on the creating the profile, I think this is the first crucial step, then we can redirect the user to any app, web or native.
Amber is great, but unfortunately is not cross platform. 
 Web. 
 KEEP NOSTR SIMPLE

VOTE “NO” ON THE EDITS REFERENDUM 
 Delayed sending is a thing, it could easily solve a lot of basic errors. 
 I said "a lot", not every :)
I understand that edit is an interesting and useful functionality, but it has several drawbacks on Nostr. Amethyst is the only that implement *this* kind of edit because others devs agree that the disadvantages are greater than the advantages. There is another proposal (by @hodlbod) that has been discussed and it seems more appropriate.

Btw, long contents (and lists) should probably use the long format, that actually has the edit feature precisely because it is considered important in the writing of an article. Why don't you use it? 
 I totally agree.
However, understandably, some people do not understand the consequences of implementing such a seemingly simple function. Perhaps we should integrate into the NIPs why some architectural choices (or non-choices) are made. 
 Every day, upon awakening, every debt, material or moral, to oneself and others, is reset. You have no more memory of it, as you do not know that it will be cancelled. Wouldn't that be an interesting way to live? Would good or evil emerge? 
 Interesting point of view.
By “debts” I was instead thinking of the more occasional and private ones (I lent you a book, you paid for my lunch, I take you to work every day, etc.). 

In any case, with this rule even in the financial world the flow of money would happen, you just don't know you have to pay it back and the lender doesn't know he has a credit (not so easy to imagine since transactions are heavily recorded). But things would be built anyway. 
Perhaps the lender, seeing that the other is doing interesting projects, would be spurred to do the same with his finances (and thus consequently lend less). 
 Are you really showing a graph with a scale of 500 millions of years, to demonstrate that there are not problems, now, for the human being? The temperature is just a symptom, not the biggest concern. Think about what you breath or eat. 
 I don't know what is the IPCC agenda, and actuality I don't care. I neither can do a full research on my own on planetary scale. I just observe the last 120 years timespan, when industrialization and chemicals arose, and evaluate the increasing problems on my local area, related to health,  (physical and psychological) and environment. It's quite clear that we reached great technological goals, that helped extend humans life, at least temporally, and their comfort, but we are also breaking some other balances.

As said, the temperature is just a signal. When the wise man (not me, of course, it's the planet) points to the moon, it is no use staring at his finger.  
 As I said, I know nothing about the IPCC, but the fact that they falsified data doesn't change the fact that in the last few decades, the climate, not only temperature, changed brutally. We should also keep in consideration the timespan in which events happen, not only the absolute values, because time is necessary to adapt. It's clear that "industrialization" moved some values suddenly, and humans have not been able to keep pace with evolution to avoid serious damage.

Btw, what IPCC's final goal? 
 So I ask, do you have a scientific answer?
And secondly, what is the purpose of this narrative based on erroneous facts?
I am genuinely interested. 
 Perhaps my language could have been misunderstood. By “I don't care” I meant what I pointed out in the following note, which is that the fact that they may be telling the falsehood does not change the fact that in the last decades the earth system has been put under pressure by many human actions.

I know very little about this subject, but I have noticed that there is often a clash on the subject of temperature and global warming, when the environmental issues are much broader. Indeed, temperature is only one parameter to be monitored, but there are many others, such as the presence of chemicals in the air, soil, plants and animals. Or like the incidence of certain diseases.

So when I see a graph that focuses on the change in temperature of the planet over 500 million years I sense the risk of bringing attention to a single parameter, which perhaps is indeed completely normal, consequently dragging everything else into denialism.

But as I said, I know little about this area and my reaction was probably too knee-jerk, although I think it has its own logic. 
 Thank you, I will try to read it.

About the erroneous narrative and underlying interests, I think it is interesting and important to talk about it openly. It may not be a scientific subject, but it helps to understand the positions of individual parties, and thus weigh their aims and intentions. 
 I didn't referred the 120 years span to a temperature graph or CO2 levels.
Mine was meant to be a broader discourse, I think I explained myself in the following messages. 
 Why some users put over 100+ relays into their NIP-65 Relay List 🤣 
 It should discourage him, suggesting a "sensible" approach. 
 I really dislike when clients expose the relay settings as "read" and "write"... Those words make... 
 Other's inbox relay are transparent from user's point of view, who should not have to worry about it.

I think that the main source of confusion is related to the fact the 99% of the time two different relays, inbox and outbox, are not really needed, they can be a single personal public relay.

Clients should just allow to add them, and only in an advanced configuration let the user tweak the read/write permissions (or deduce them by the actual permissions).

Then the user can be allowed to add an optional DM relay (suggesting that it enforces authentication), a search relay, etc.

As you see users think that the relay setting in Amethyst is quite confusing, after the Outbox model update; this approach could solve this. 
 The idea is actually not to have inbox and outbox sections at all, but a "personal relays" section that smartly manages read/write flags behind the scenes. If a relay requires auth to write, the client should (could) disable the read (inbox) flag.

The average person should just add a couple of big free relays and maybe a couple of paid relays. No need to explain much to new users; as soon thwy will understand more about Nostr, they will be free to tweak the details. 
 The restriction issue is an additional point, which remains valid for any user interface. I would only start by simplifying the way relays are exposed to the user, but not blocking them if they want to make more complex configurations. 
 How is the situation different today if you add nostr.wine to both incoming and outgoing mail, or flags both read and write, because you don't know the meaning of the terms and the implications, and then as is typical you turn everything on “to try if it works”?

Since nostr.wine requires auth the app might explain that this relay is poorly suited as a general inbox, but it might still be useful for users registered with it, and then suggest adding another public one, or disabling it as the inbox (read).

@Mike Dilger recently added a relay testing tool that could be a good example of how to direct the user to the most appropriate use of relays. 
 apparently my bitcoind leveldb corrupted *yet again* so I have to redownload the entire blockchai... 
 Same problem here using and external SSD formatted fat32.
What filesystem are you using? 
 So completely unrelated. Weird. 
 Sto seguendo alcuni utenti Nostr italiani/italofoni: nostr:npub1va4p93je9d2fnwpe2xuvs8lshjtugyd6h... 
 Benvenuto!