Oddbean new post about | logout

Notes by stove5 | export

 What's with all the trannies and pronouns in bio on Mastodon? #asknostr 
 If I were to objectively define where spam originates from, it seems to be any npub that is not p... 
 No, because that includes every new user 
 Are we technically on the dark web? 👀 
 Deep web maybe. Dark web = tor 
 I feel like they already successfully memory holed the fact that Biden is still the President of ... 
 Who's Biden? 
 My new antispam thesis is this:

1. Reject events unless we already have a kind 0 (profile event)... 
 How do you globally restrict creation of a kind 0, or do you require it has to be created on your relay? Don't see this being a good strategy. 
 The primary role of governement is to preserve the rights of its citizens.
The primary activity o... 
 I sometimes wonder if there's any system of government that's stable and doesn't eventually just try to grow itself like a cancer 
 @jb55 question about noteguard: I have strfry behind a reverse proxy and every IP seems to show up as localhost which means IP-based rate-limiting doesn't work. Is there some way to use the X-Forwarded-For for rate-limiting? 
 Thanks! Any hints on how to do that? 
 Nevermind, found it 
 Thinking about a noteguard filter that broadcasts nostr notes of the IP address of bots that spam... 
 Won't spammers generally use cloud resources? Or are we including those in the VPN group? 
 How effective though is broadcasting the pubkey? A spammer can just keep using new ones indefinitely. 
 going to spend some time juicing up noteguard to ip block people who excessively abuse the rate l... 
 The distributed spam attacks will be an interesting problem to solve 
 #WasabiWallet coordination service will be free.

This is a fantastic improvement because the pro... 
 No fee will be baked into the code? 
 nostr:nprofile1qqsr9cvzwc652r4m83d86ykplrnm9dg5gwdvzzn8ameanlvut35wy3gpz3mhxue69uhhyetvv9ujuerpd46hxtnfduq3qamnwvaz7tmwdaehgu3wwa5kuegpz4mhxue69uhhyetvv9ujumt0wd68ytnsw43q3ttcfs how has Damus relay eliminated reply guy? Just IP based rate limiting? 
 Nice, any code samples for how to create that plugin rule? 
 Anybody have any nice code snippets for strfry policy plugins? Prefer code that can be statically compiled with no dependencies.

#asknostr #opensource #strfry #relays 
 Has anyone messed around with ppq.ai ?

#ppq #ai #asknostr 
 Yes I recommend. Lately their image models have been going down though 
 nostr:nprofile1qqsrmpp2lmx4u2fl9zmxy7fnwp9rlwxwz5a2j8tep2c376n494z2gtgpzamhxue69uhkxun9v968ytnwdaehgu3wwa5kuegprpmhxue69uhhwetvvdhk6efwdehhxarj9emkjmn9qyt8wumn8ghj76twvfhhstnwdaehgu3wwa5kueg6jsgtg how come nostr.wine is so expensive? It's a cool service but hard to justify ~$10 / month when most relays are already free. 
 That makes more sense, will purchase the subscription once I get some more spendable sats in my wallet 
 How is #primal dealing with spam? #asknostr 
 Totally forgot about these guys. One of the most creative bands from back in the day. "Banshee Beat," "Fireworks," and "For Reverend Green" were also really good.  
 Wen breaking news on nostr #asknostr 
 Plebs I have a question.

What’s the go to VPN to use? 
 Organic Maps is also really good 
 Why is #nostr so much healthier than X? Simple—no virtue signaling in profile notes! 🚫 No Uk... 
 Refreshingly few pronouns in bio too 
 How much better is simplex than telegram or signal? 
 It's not better in terms of network effect, which is huge for messenger apps 
 Best place to DCA BTC? 

Currently using strike and love it just curious if there any other optio... 
 River free DCA 
 I've been having issues to follow people and create a good feed. 
I changed clients and reviewed ... 
 Recommend following hashtags, keeps the feed interestinb 
 ive been posting on nostr more because i deleted twitter off my phone and i gotta say the content... 
 This one is good, but pretty slow 
 nostr:nprofile1qqsyvrp9u6p0mfur9dfdru3d853tx9mdjuhkphxuxgfwmryja7zsvhqpzamhxue69uhhv6t5daezumn0wd... 
 What determines a spammer? I made a couple bots that barely note at all and they were auto blocked 
 Are there any paid relays where you pay per note? #asknostr 
 I think it makes a lot more sense than flat fees for paid relays TBH 
 Is there a way for a pubkey to be "trusted" under a web of trust framework with few or no followers? If not this seems to risk an effective shadow ban on huge numbers of people. #asknostr 
 Isn’t it funny how there is never a single debate question about the Federal Reserve? 
 They're both going to fix inflation though, while spending more money 
 Linux question for nerds:

why do cronjobs failt so often insode docker containers? privileges ar... 
 Not sure but why are you using cron inside a container? Usually the job orchestration happens outside of the that (could even just have regular OS cron run the container) 
 Anyone nostr influencers going to be live noting during the presidential debate? #asknostr 
 The one thing on X I might miss are the alerts like this and the on the ground media from users t... 
 Wen Raws Alerts 
 Yeah this is needed on nostr, some breaking news / alerts RSS feeds are pretty easy to import 
 New meme template just dropped courtesy of nostr:nprofile1qqsvf646uxlreajhhsv9tms9u6w7nuzeedaqty38z69cpwyhv89ufcqpz9mhxue69uhkummnw3ezuamfdejj70v5n7z #memes #grownostr #bitcoin https://image.nostr.build/ee36c583ce0cf1d6f84110a5d5b5b6c2dcacbd9351d83da590b52566558b8430.jpg 
 Thought: web of trust heuristics are the only reliable way for nostr to combat spam, and so the network will gravitate towards a collection of isolated cliques. How is this wrong? #asknostr #spam 
 nostr:nprofile1qqsqgc0uhmxycvm5gwvn944c7yfxnnxm0nyh8tt62zhrvtd3xkj8fhgprdmhxue69uhkwmr9v9ek7mnpw3hhytnyv4mz7un9d3shjqgcwaehxw309ahx7umywf5hvefwv9c8qtmjv4kxz7gpzemhxue69uhhyetvv9ujumt0wd68ytnsw43z7s3al0v nostr:nprofile1qqs8sxs4yuz47axp7uprpugrs3sfkdz5379tdg9xe2n5qfvz070a4egprdmhxue69uhkwmr9v9ek7mnpw3hhytnyv4mz7un9d3shjqg4waehxw309aex2mrp0yhx6mmnw3ezuur4vgzaq60d do you all have any tips for improving initial feed load time in Ditto? I noticed it's slowed down for me a bit on my server and am wondering if it's DB related (or possibly has to do with two firehoses that are always syncing in the background)? 
 If you can see this, Tor is now inside of Amethyst.

No more Orbot. 
 Wen release 
 Twitter was paramount in bitcoins growth and its battles. Was a very cool quirky place eons befor... 
 Why doom scroll on Twitter when you can already do it on nostr? 
 It'd be a long shot, but curious if the operator of the reply guys made any opsec fails that might make them identifiable #spam #osint #opsec #asknostr 
 I've heard that #GrapheneOS now can run apps that depends on Google Play Services.

How is it wor... 
 nostr:nprofile1qqsqgc0uhmxycvm5gwvn944c7yfxnnxm0nyh8tt62zhrvtd3xkj8fhgprdmhxue69uhkwmr9v9ek7mnpw3hhytnyv4mz7un9d3shjqgcwaehxw309ahx7umywf5hvefwv9c8qtmjv4kxz7gpzemhxue69uhhyetvv9ujumt0wd68ytnsw43z7s3al0v you ever had issues with Prometheus just stopping scraping Ditto metrics? I stopped Ditto, updated to recommended deno and latest Ditto, restarted Ditto and all metrics stopped (was working fine before). 
 Prometheus debug logs haven't been helpful 
 Answering my own question again, looks like the Prometheus metric names got changed 
 Javascript is a shit language, do better y'all 

 - me after learning go a few weeks ago  
 I feel similar comparing Go and Rust, although that's sure to generate hate 
 Who are the best npubs to follow for memes? #asknostr #memes 
 Followed 👍 
 The only people who think AI is going to take over coding jobs don't code as a job 
 Testing 
 Think I might be good, nostr.oxtr.dev might've been the last one spamming replies 
 Testing 
 I don’t think dropping all your free relays, and only using a single #wot (Web of Trust) relay,... 
 Is it still going on? I haven't been paying too close attention. 
 Damn, which relays have the countermeasures? I might need to make some changes on my end. 
 nostr:nprofile1qqsf03c2gsmx5ef4c9zmxvlew04gdh7u94afnknp33qvv3c94kvwxgspr3mhxue69uhksmmyd33x7epwvd... 
 I'm not sure a mechanism that relies on making BTC transactions is great because the UX would be very bad (and near unusable for normies). 

I feel like there are probably some other heuristics you could apply to npubs (looking at follows is just one) to determine their credibility without requiring any user action. Stuff like "age of oldest event" or "count of times blocked by credible npubs" could do a lot. 
 If it's ecash and not on chain then yeah I agree that's a much lower barrier to entry 
 Could it be possible to get by with one relay or no ? #asknostr 
 Also less likely people will see your notes. It would basically just be a worse Twitter. 
Event not found
 Does this significantly raise the barrier for normal people to run Ditto servers though?