Oddbean new post about | logout

Notes by Vitor Pamplona | export

 Spammers can just create a GitHub project, put the nip05 verification there as a GitHub Page and be valid for free. So, I don't really thing this does much. 

All they need is a free hosting service. They can even use their own personal computer at home behind a Tor connection to serve as the NIP05 address. 

They can even use Orbot and get their phones to reply to the nip05 verification. 
 You can do one Tor domain with 200,000 pre-generates keys or split them into a few hundred domains. Or just use IP directly.  
 I cannot access your server from here. That's why it's invalid. But Tor addresses work on Nip 05. 
 Seria muito interessante se no feed global do nostr:nprofile1qqs24yz8xftq8kkdf7q5yzf4v7tn2ek78v0z... 
 Posts don't have a language code in them so we need to download everything, process all of them of language code (which fails in 10% of the time) and then delete everything that doesn't match the user language. It's a lot of data usage. 

But the main issue is that it creates local bubbles. If you use Twitter for instance, you rarely see Arabic or Mandarin posts, even though there is as many of them as in portuguese. The client just hides all external viewpoints from you. Making users a slave of their own linguistic cultures. 
 Ou continuar avançando as traduções automáticas de forma que vc consiga entender o que acontece em qualquer língua. Temos o básico hoje, mas pode ser muito melhor.  
 Então vc quer se autocensurar do resto do mundo? Nunca achei que ouviria uma coisa assim no Nostr :) 
 Has any client tried it? People have been talking about this language tag for more than a year now. I'd love to get some data to see if it actually works or if it's going to be more messy than a local relay. 

I don't think it will work because nothing that requires the writing client to change works in Nostr. But I am open to the idea. 
 Nothing that requires the writing client and writing user to change works in nostr. You might as well just run a content tagger using NIP32 and make a client that filters by language code from the tagger.  
 Why not just tagging all posts with a NIP-32 language tag and then filtering by it? Then the solution is not dependent on other clients. 
 No, not by the client, but by a third party service. Then you don't need any client to do this, which will take forever to test.  
 I am just trying to get a test out and the only way to test it is to have sufficient tags in all posts with all clients. One client doing this won't work because the user will miss a lot of posts that are not tagged.

A service can test the idea ery quickly without modifying any client. If no one is willing to run the service, then I trully question if this feature is actually needed or if it is just a hollow feature that nobody actually cares. 
 Not really. I would do a service that creates 1985 tags with the language code using the same created_at the tagged post has. 

Then a client can just do a REQ for the latest 1985 tags and load all the event ids individually. A webpage could easily do that and I think it would work on Coracle right now, without any changes.  
 If everyone runs a mint, isn't it just lightning? :) 
 Nice! Can you go 5 levels of follow's follow? That's where I think most of the real game will be played. But it's a massive graph.  
 In theory yes, in practice you will need more memory to keep the list of keys while processing. :) 

Definatly less possible on a phone :)  
 That would be nice, maybe a DVM?  
 #Amethyst crashing on my #Samsung. 
 When any particular action or position? 
 This is dumb. You should almost never ask the notes I have reacted to. And if you do, you should be ready to receive LOTS of negative stuff. You should also check for reports and act accordingly. 

Reactions of a person are not always positive and will always include posts they didn't like.  
 Some folks just want to burn terrible specifications down and I am here for it. 

Static payment codes to replace LNURL-P 🚀

https://github.com/nostr-protocol/nips/pull/1460 
 It would transfer the payment through your relays. 
 Relays já deletam muita coisa hoje em dia. Mas sempre tem um jeito novo de contornar o que eles fizeram.  
 Sim, Web of Trust é uma opção, mas essa proposta mais raza de olhar só seguidor de seguidor e não seguidor de seguidor de seguidor de seguidor de seguidor é altamente centralizadora. Ela favorece contas maiores e faz com que elas cresceram ainda mais e bloqueia os usuários sem muitos seguidores ainda.  
 nostr:nprofile1qqsyvrp9u6p0mfur9dfdru3d853tx9mdjuhkphxuxgfwmryja7zsvhqpzamhxue69uhhv6t5daezumn0wd... 
 Add an English keyboard. Amethyst uses the installed keyboards as the languages you speak and thus don't need translations  
 In device AI model. We download the model from Google and run it in the app.  
 Yep 
 How can I hide muted/blocked posts from my feed in #amethyst? #asknostr 
 Hum... If the user is on the blocked users it should already be hidden. 🤔 Can you check if the user is there? You can always mute the person again to re add it. 

It could be that you reported his person but the subsequent hide list never got updated or got deleted 🫤 
 Testing

nostr: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 
 sad, that client devs seem to think mute words will stop a stalker or bots.. how naive they must ... 
 But they did stop it. At least in the user's own space. Mute words just make sense to a whole lot of people. Sure, there are way better options, but the simplest that gets the job done to that specific user always wins.  
 It worked as the thing it was. If the reply guy gets smarter, we can also get smarter. But it definitely worked against all the 50 or so replies that I got. 
 Has he done it or not. 

There is no perfect solution. In theory nothing works. But in practice, we only have to reply to what actually exists. 
 I agree with you. I just don't think this particular instance is representative of an actual attack. Whatever we code for it can be circumvented by a smarter player. Not that we shouldn't code it, but let's be mindful of what we are solving for. 

Real bots with WoT (because people will gladly sell their nsec to a bot maker and restart their accounts) will be much more demanding than this simple attack. They are going to look, act and work as a real human. 

Every message in Nostr with immediately get 200 replies with products and opinions from people that are paying for it by nsecs of previous real users with WoT and so on. Any serious defense on this will need to include a complete understanding of the entire network or it will be something selected by the user, like just people that I follow.  
 I did see it and I do agree its a massive problem and small relays are the solution. But small relays is just decentralized moderation. The moderation is still there, just run by thousands of relay runners instead of an organized central point. Which is better, but the infra to moderate in a decentralized way needs to be there. 

That's why you me relay ops interfaces are so crucial to the future of nostr.  
 Hey nostr:nprofile1qqsyzhwc4yyjfz75c5z46f6ze63gmyhflxt9rwxfp09l9wqkh4pae4qprpmhxue69uhhyetvv9ujue... 
 Alby Hub (either paying them to host or hosting yourself) is by far the best one to use on nostr. Nothing else comes close, even custodial ones.  
 It's fine, but def nowhere near Alby hubs experience.  
 Double click the zap button  
 Whatever happen to the instant translations on #amethyst?  That was neat

#asknostr 
 Use the Play version instead of the Fdroid one 
 Is there a way to have multiple timelines in Amethyst? Like, put different follows in different t... 
 You can use listr.lol to build lists of people and then use Amethyst's top bar to filter between them.  
 Sorted!!! 


nostr:nevent1qqs8tz0z6gda4z6rntcp842t0nax8lyefp25yk0xqcw4c04sq7lpnfgpzemhxue69uhkumm... 
 We need to code a sync button that connects to all 3000 relays, sends posts authored by the account to the public and private home/outbox, p tagged posts to the public inbox and DM inbox, depending on the type, and everything to the local relay.  
 No, it's just broadcasting everywhere. We need something smarter with the multiple relay lists into account.  
 seriouslydoesanyoneknowwhyitdoesthis

nostr:note1zqf6p0qxlu4m3uq5lplpmuf775rljyv9fgvas6tw3s5qg5g9... 
 Provavelmente é o seu teclado. Vc usa uma versão modificada do Android, tipo graphene?  
 Hi nostr:nprofile1qqsyvrp9u6p0mfur9dfdru3d853tx9mdjuhkphxuxgfwmryja7zsvhqpzamhxue69uhhv6t5daezumn... 
 Humm.. you need the Play version of amethyst, not the FDroid version. If zap.store doesn't show, try Obtainium. You can get it straight from the GitHub releases.  
 nostr:nprofile1qqsyvrp9u6p0mfur9dfdru3d853tx9mdjuhkphxuxgfwmryja7zsvhqpzamhxue69uhhv6t5daezumn0wd... 
 Any feed? Chats as well?  
 Bizarre. Do you see many videos on your feed?  
 Only use Citrine as public inbox/outbox if through Tor.
nostr:nevent1qqs0dkrlqa9z9ad96n7d55df7s59gmpcxtrllv80cjaq5txfgl2zx9spzamhxue69uhhyetvv9ujumn0wd68ytnzv9hxgtczyrkmgup8z2t6cknp7fml8ng5me2vvl44enfqauxemu5muxrgtwcqgqcyqqqqqqg9cs43c 
 Inbox must allow other people to access it to send you notes or DMs. If Citrine is only running on your phone, no one will be able to access it. Tor opens it up to the world. If you are not using something it open it up, you will never receive a DM.  
 Correct. If that is the only relay there, then people must use Tor.  
 Only use Citrine as public inbox/outbox if through Tor.
nostr:nevent1qqs0dkrlqa9z9ad96n7d55df7s59gmpcxtrllv80cjaq5txfgl2zx9spzamhxue69uhhyetvv9ujumn0wd68ytnzv9hxgtczyrkmgup8z2t6cknp7fml8ng5me2vvl44enfqauxemu5muxrgtwcqgqcyqqqqqqg9cs43c 
 Them: Don't come back here with your bullshit

Me: coming back with my bullshit
https://video.nostr.build/948ab0dbf071a449fb09c667c0f808cbf1f7c4231b81e9f1bf393401206326ad.mp4 
 So, is the spam completely gone? 😎 
 what are you using to download? 
 Play is up to speed. Obtainium is also ready. 
 Add him to the hidden words :)  
 Why? I don't think so.  
 What do you mean by "nothing to protect themselves with"? Many relays are blocking the spam just fine. It's definitely doable. 
 You have to add a few words to the hidden words filter in the Security Filters 
 His name for instance or xDBupZ which is what he uses as profile pictures. 
 Amethyst Drafts is where my unfiltered ideas and thoughts exist. It's an ethereal garbage bin. 

... 
 Nobody can read it. It's fully encrypted with your keys. Only your keys can decrypt it. 
 nostr:nprofile1qqsyvrp9u6p0mfur9dfdru3d853tx9mdjuhkphxuxgfwmryja7zsvhqpzamhxue69uhhv6t5daezumn0wd... 
 ad6? 
 No, but we changed the default view to simplified, which removes the second line. You can change it back on the app's settings. 
 We show flare videos on our Stories :)  
 Clear net or behind VPN/Tor? 
 Will keep an eye on it. We haven't change the preview code for quite a while. I am not sure why it would be failing now... 🤔 
 Yeah, one is a fluke. Two is more concerning. 
 keep an eye to see if it is just youtube or any url. 
 Challenge accepted Reply Guy. 
 yep, you can add their name to the hidden words in the security filter and it goes away 
 There is no way to block anyone on anything in Nostr. You can only hide them.  
Event not found
 You can add the NIP05 in the new version's hidden words. You can also filter by name or profile picture url. :)