Oddbean new post about | logout

Notes by brugeman | export

 Also check out how the newer version of nostr-login works on nostr.band - there is a N banner on the right screen border.
If you support nip07 you could just drop this script to your html head and it should work: https://www.unpkg.com/nostr-login@latest/dist/unpkg.js 
 And with 'Sign in with extension' button if one is present. 
 Is there a way to connect satellite.earth to nsec.app ? 
 Not yet 😟 
@Stuart Bowman any plans for nip46 support? 
 Is anyone using key delegation for a business social media use case on nostr today? If this is no... 
 Nsec.app already has some baby-steps shared access features released in the last couple of weeks. More coming very soon. Coracle and Nostrudel work fine with nsec.app as far as I know. 
 As far as I understand from a quick investigation, your ln wallet publishes invalid zap events. Most clients don't really verify anything, but nostr.band does, because it tries to count real payments. 

> SHA256(description) MUST match the description hash in the bolt11 invoice.

This nip57 rule is broken in 9735 events published by your wallet (minibits I'm guessing): 
 I don't think there is anything more reliable, _especially_ when it comes to active user charts, but I'm happy to be proven wrong.  
 I don't remember about primal. Some numbers are more reliable, some less, our stats are the best estimate I have seen. 
 Also many numbers under npubs/events are probabilistic counters, they are never accurate, but reliably around the actual numbers. Overall stats are different and much more accurate. 
 Because of our broken code, or probabilistic counting, or decentralized nature of nostr where we can't be sure we have all the data 
 I am not aware of other stats 
 Outbox is already used to discover new relays to crawl. No there will never be accurate data, just like there can never be accurate data about the web - only good estimates. 
 My thing is having to paste in my nsec every time I switch. It's a little discomforting. 
 Some extensions work on mobile on some browsers. You can also try nsec.app 
 Insane! My kid came up three times to tell how freaking good the music is! 
 Turns out he does! 
 I'm using nostrudel without having to enter my nsec (using an nsecbunker with nsec.app).

🧡

I... 
 Which browser and OS are you using? 
 There is a list of apps supporting nip46 on nsec.app homepage. 
 How to login to Wikifreedia.xyz with Nsec.app:

https://v.nostr.build/6G6Rn.mp4 
 nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyv9kh2uewd9hj7qgawaehxw309ahx7um5wghx6at5d9h8jampd3kx2apwvd... 
 You could decrypt them once and re-encrypt with your local cache-key, and then only use that local key for cache data. That's a lot of work, but it's not impossible. 
 You can do batching right now, just send 100 nip46 requests without waiting for the replies and you've got the batch - you pay 1 RTT per batch. We discussed this once on github, IIRC nsec.app was able to do ~50 decrypts per second. Unlikely to get much faster, 90% of time is spent verifying signatures of nip46 requests etc.  
 Ok now that I'm thinking about it, the signature verification overhead could go away with batching, maybe it could make sense.  
 @verbiricha could you please consider updating to the latest NDK on Habla and others? It fixes nip46 connect call, more info: https://github.com/nostrability/nostrability/issues/25#issuecomment-2018748964 
 nostr:nprofile1qywhwumn8ghj7mn0wd68ytndw46xjmnewaskcmr9wshxxmmd9uq3xamnwvaz7tm0venxx6rpd9hzuur4vg... 
 Could you please try again now, looks like Coracle listing was updated. I've just tried it, seems to work. 
 Awesome! That's not me, I guess @hodlbod updated the listing to fix it. 
 Can I change my nsec key without loosing all my content?

#asknostr
 
 You can try nsec.app, it uses the same protocol as nsecbunker but you don't have to run it on your server - it stores keys in your browser. 
 How about generating a 'cache key', encrypting it using nip04, storing it locally, encrypting locally cached stuff with it, and then when you reload - decrypting only that key and then decrypting all the cached stuff?  
 Nsec.app homepage has a list of clients and short video-guides at the bottom of it. 
 @fiatjaf please take a look, fixing nip46 connect call https://github.com/nbd-wtf/nostr-tools/pull/391 
 As I said, it's fascinating. Our CEO should fire us all. 
 Maybe Nostr should separate decryption key from signature so that a decryption heavy client can u... 
 I understand the penalty of the initial load of all DMs, but you're probably writing them into the local cache so further operation shouldn't be costly?  
 How about generating a 'cache key', encrypting it using nip04, storing it locally, encrypting locally cached stuff with it, and then when you reload - decrypting only that key and then decrypting all the cached stuff?  
 The use case is that I won't paste nsec to blowater, that I can have restricted permissions, etc.  And the complexity is probably worth it in terms of performance bcs you can use native encryption instead of nip04 
 Oh sorry, I forgot nip04 uses browser-native aes 
 @hzrd149 please take a look, fixing an issue in nip46 connect call https://github.com/hzrd149/nostrudel/pull/152 
 @hodlbod please take a look, fixing an issue in nip46 connect call https://github.com/coracle-social/coracle/pull/321 
 Made the decision today to cut down on Twitter and get more involved on here.

Also as part of th... 
 Try with nsec.app 
 Best way to imbed nostr notes on websites currently? 
 Try embed.nostr.band 
 The Bank Secrecy Act (1970), the third party doctrine (United States v. Miller, 1976), and The Ri... 
 Is it? Please tell me more 
 Thanks for the numerous report, heh. Will look into the issue. 
 Here is how you can login to Snort with Nsec.app:

(more video guides on nsec.app homepage)

https://v.nostr.build/jYgxV.mp4 
 One day someone asks to export their keys from your app, giving them ncryptsec would be safer than exporting in plaintext. 
 Does anyone know which relay projects support NIP 46? Is there an "awesome-nostr-relays" list wit... 
 I just use a strfry with custom write policy that only accepts 24133.  
 Note though that strfry may not delete ephemeral events (it's some known issue and I didn't investigate deeper), so use 'since' filter to cut the old events when requesting 24133 from there. 
 The safer DM encryption (NIP-44) now supported by nsec.app!

Try it with Coracle. 

@Water Blower when nip46 for Blowater? 
 Can anyone yell me how to log into nostrnests? I was able to login with Alby on my desktop but no... 
 Let me know if you have any feedback if you try nsec.app 
 Awesome! 
 China is an untested superpower without real-world wartime experience with modern weapons, modern... 
 Exactly. Both are fake. 
 Working hard on a esp32 based hardware nsecbunker. 

Currently unencrypted comms are supported. M... 
 Nip46 signer (which is what nsecbunker is) does not need a tunnel. it does not need a public IP, does not need a reverse proxy.

Nip46 client sends requests to some public relay, and signer reads those events from public relay, signs, and sends replies to the same relay, which client reads. Nsec.app runs this nip46 signer in your browser service worker.  
 Any relay that supports ephemeral events.  
 Yes that's simpler, but that's not what nsecbunker/nip46 are. 
 No, they don't have to do any special forwarding - peers just use REQ to subscribe to the requests/replies they need. Nip46 describes it pretty well. 
 You may or may not be right, my point is that nsecbunker doesn't need any tunnels and can work on your phone. 
 Since you have nip07 support you can just drop in the nostr-login library to add nip46 support. 
 nostr:nprofile1qyvhwumn8ghj76r0v3kxymmy9ehx7um5wgcjucm0d5hszxnhwden5te0wpuhyctdd9jzuenfv96x5ctx9e... 
 Nsec.app now supports Nip44, and it works with Coracle, you can try it instead of the extension. 
 Try Primal with nsec.app!

Go to primal.nostrapps.org (a forked Primal with nostr-login widget) and use your name@nsec.app to login.

https://v.nostr.build/lLLBG.mp4 
 how is nostr cool? i am going to publish this note to my personal relay ONLY. however, thanks to ... 
 Our relay may hide the absence of gossip implementation in clients, so I wonder if I should turn the relay off to support this small relays movement. Although at this point with rebroadcasting etc it might not make much of a difference. 
 @verbiricha please take a look, adding support for nip46 secret
https://github.com/verbiricha/habla.news/pull/161 
 Could you please also propagate this to ngine and Badges, please? Btw when nip46 on Heya? 
 Awesome! Thanks a lot! 
 @hodlbod please take a look, adding support for nip46 secret (to make Gossip work with Coracle)
https://github.com/coracle-social/coracle/pull/314 
 Ping me next time you wish to avoid something nip46-ish. 
 @hzrd149 please take a look, adding support for nip46 'secret'
https://github.com/hzrd149/nostrudel/pull/149 
 Thank you! 
 @Egge please take a look, improving nip46 code.
https://github.com/lightning-digital-entertainment/cashu-address-sdk/pull/1

The first PR to cashu-address-sdk! 
 Is it just me, or does the nostr.band 24 hour trending list never change? 
 Tag me next time, I will check your sanity 😉  
 How do I login to npub.cash from my mobile? Can do it from my desktop through alby but don't know... 
 There is a guild on the nsec.app homepage. 
 Before I enter my nsec, how can I verify that shopstr.store is legit? 

There is literally no inf... 
 Which phone and browser?