Oddbean new post about | logout

Notes by brugeman | export

 @badonyx Hi, please take a look at PRs in your 'clients' repo. 
 Awesome login widget!
nostr:nevent1qqsg8yc3jezszp636657ychwgefxt9nmm4pw620uj2dfryx68a2vcegpp4mhxue69uhkummn9ekx7mqzyqlzjnf06vumk949gqagdcmxf9ra6syvfkr6qpn9ynu22uaw209guqcyqqqqqqg3dklws 
 It's a very good point. Those billions of reviews globally, if you exclude fakes and then divide by the numbers of products out there you get maybe 100 reviews per popular product (median number of reviews for all products is definitely zero). How many of those 100 reviews would be in my wot circle? If the 100 people I follow posted 100 reviews each, I would only be considering maybe 0.01% of all popular products. That doesn't seem good.

The solution could be a wider wot circle, and start from niche, and more reviews. If I knew my reviews wouldn't be lost in some corporate database, I might have posted more of them.

Also it will probably vary based on physical proximity to my contract list members. They would probably review a lot of local products, but not much in Dubai or on Alibaba. So maybe travel is not the best place to start. 
 Can you please tell me mo about vectorized trust? Maybe a link to read? 
 Also wrt 'headphones' example. Instead of looking through my wot circle for reviews, I could post 'please help me choose headphones' message that could propagate through my wot circle until some experts see it. They could reply with 'here is a one liner big advice, and here are a couple links for you to read, and if you want to hop on a call - schedule here and it will be 5000 sats'. This might turn out as a better solution to 'help me buy headphones' problem than trying to fix fake reviews or increase the review density in my wot. 
 It would be really cool if clients would open a WS a NIP46 comms relay straight as soon as they l... 
 If you're signed in, the app should definitely do that 
 Stacker.news, nostr.build, wikifreedia.xyz, nostr.band come to mind 
 Team hackernews, go!

nostr:nevent1qvzqqqqqqypzqwlsccluhy6xxsr6l9a9uhhxf75g85g8a709tprjcn4e42h053vaqy88wumn8ghj7mn0wvhxcmmv9uq3zamnwvaz7tmwdaehgu3wwa5kuef0qqs8drglu0yen4458837le3egjeg6lmwfn2hqulklkve89ejkzw99eqmara3k 
 Great q, need to expand on that on the page, and post a reply. Will get back to keyboard in a couple hours  
 Posted a reply there 
 Team hackernews, go!

nostr:nevent1qvzqqqqqqypzqwlsccluhy6xxsr6l9a9uhhxf75g85g8a709tprjcn4e42h053vaqy88wumn8ghj7mn0wvhxcmmv9uq3zamnwvaz7tmwdaehgu3wwa5kuef0qqs8drglu0yen4458837le3egjeg6lmwfn2hqulklkve89ejkzw99eqmara3k 
 Make sexy and selling would be amazing! 
 So overall, I don't have a great answer from real world practice, as the only products I know that integrated with Nostr that didn't have 'nostr functionality' are bolt.fun (defunct), geyser.fund and stacker.news (both have nostr functionality now). Also maybe wavlake and fountain? Any other I'm missing? Also Mutiny!

However, where I would consider nostr (if it's not a full-blown nostr app) is:
- if I need social graph for my app to function (access 100 connections per user - Mutiny case)
- if I need data for personalization and AI training (train on 1000 liked posts per user) (also personalized stream of zaps in Mutiny)
- if I need virality by social sharing (reach 10000 nostriches)

Does this sound like something saleable? 
 On the technical side, Nostr auth could work side by side (stacker.news - link to your Nostr account), or it can replace it (don't have an example aside from nostr apps). If nostr is your main identity system it may or may not affect your traditional model - you could just auth all HTTP API calls to traditional backend, or you could do a full-blown nostr app that uses nostr events and relays and no backend. I tried to briefly cover all this on nostrlogin.org but maybe it wasn't all that clear. 
 Also we might pitch from the bitcoin niche pov. "Reach 10000 bitcoiners". Could work for plebwork case. 
 Finally wrote something useful on https://nostrlogin.org.

PRs and issues are welcome. 
 global search is critical 

nostr:note1ph0l0mp820s028f75phfxpc5ncdxwtcn4s6fusss6t6m8uk4g8esr4pvlf 
 What is global pulse? How is it different than 'trending'? 
 Awesome stuff! Please drop nostr-login or window.nostr.js there so I could attach my nip46 keys. I.e. https://www.unpkg.com/nostr-login@latest/dist/unpkg.js 
 nostr:npub10000003zmk89narqpczy4ff6rnuht2wu05na7kpnh3mak7z2tqzsv8vwqk nostr:npub1l2vyh47mk2p0qlsk... 
 How about this https://nostrlogin.org/ ? PRs and issues are welcome. 
 Yes, started this morning just for you 
 Well on Nostr a lot of user data is public. I'm also not sure web3 auth adoption wasn't happening (was it not?) due to the lack of business model for apps. Maybe web3 is too focused on blockchains/shitcoins. We'll see where it goes with nostr. 
 Btw how does your preferred web3 auth provider solve the key storage, backup, recovery, etc? Removing passwords and 2fa is easy, but is there something to ultimately replace them with? 
 Thanks for the input, I agree that expecting an explosion of nostr auth is very premature. But we have to start somewhere, baby steps. 
 It's the job of a provider (browser extension or nsec storage like nsec.app) to help users recover. It's not black and white, we don't have to leave users on their own with how-do-I-store-this-nsec thing. 
 That's right, it's like explaining them how to store and backup bitcoin keys. It's always a facepalm.

That's why there are setups like Casa or Bitkey that don't expose keys, and instead build good storage and recovery tooling. It's not for experts, but most people aren't experts.

Nsec.app doesn't expose nsec too (at least if you don't ask atm), we will try to keep it safe and help you recover without making you write it on a piece of paper. 
 Are most nostr clients using NIP-50 for search or something else? The two most popular relay impl... 
 Well ideally you would only send search queries to it, then you probably wouldn't hit the rate limits, is that possible? It's quite heavily loaded, being one of few relays with full index of events and with search over all of them.  
 Since Flare was abandoned we need new clients for replacing YouTube with Nostr. 
 Try nsec.app, it's a bunker in your browser. 
 I'd like to try primal on android.  For logging in, it wants my nsec.  Can i use NWC to log in?  ... 
 You don't have to host it, try nsec.app, it's a bunker in your browser. 
 Let me know if you try it and have any feedback. 
 Amazing! Let me know if you ever have any suggestions or issues  
 Nostr-login is just a library that you can drop into your app to support many nostr login options - it supports nip07 (extension), nip46 (remote signing/nsecbunker) - using nip05 address and bunker url, read-only login with nip05 or npub. Also account switching is in the works.   
 Where users meet builders? 
 That's actually a good question, this thing is either more tailored to users, or to builders (it's unlikely to do excellent job for both).  
 How might we provide anti-jerk tools on a permissionless free speech protocol? nostr:note153qzla4... 
 Iirc nos has much more tools for filtering. In your opinion, would they have worked for Roya if she used nos? 
 You could set a budget with alby 
 Sorry about fething, fix should be live in a minute. 
 Works fast indeed! So you're making lnurl calls in parallel and then also sending NWC requests in more than 1 thread?  
 GM 🌤️ PV 🤙

Would it be possible to build a desktop Nostr client that you can simply sign... 
 Are we talking nip46 server in Damus/Amethyst/Primal? Or them being nip46 clients? 
 Terminology is confusing, your ask is nip46 server in Damus/Amethyst/Primal, nostrconnect as QR scanned by the mobile app-signer should work, I think. 
 Well I guess mostly that's bcs there are no mobile apps with access to camera that could scan the QR, nsec.app could do that theoretically, but I haven't seen any demand yet 
 Mobile nostr apps don't want to be nip46 clients, mainly for performance reasons. 
 No, native mobile apps can't use nip07. Web apps (mobile or not) could use nip07 extensions, but could also use remote signing nip46 (nsec.app etc).  
 There is Amber on android and a similar thing for apple named Keystache, not much support of those though 
 I've been playing with nostr:npub1mutnyacc9uc4t5mmxvpprwsauj5p2qxq95v4a9j0jxl8wnkfvuyque23vg some... 
 Any plans for nip46 support? 
 If I were Facebook, I'd charge for custom URLs ... fb.com/username or username.fb.com ... 11 buck... 
 If you tried nsec.app and found it hard to understand, I would really appreciate your feedback! 
 The is a video-guide on how to login to Coracle on nsec.app homepage, you should enter your bunker URL or your name@nsec.app
Don't share bunker URLs publicly - you have to put them where they belong, i.e. into Coracle :) Although I agree this bunker thing is confusing.
Nsec.app stores your keys in your browser - there is no 'admin key', all keys are separate. The password you specify is used for e2ee sync of your key between devices - so you can login to nsec.app with name and password and get your keys synched there. 
 
 Thanks man! It's great you're finding it useful, and thanks for the advocacy! 
 Ok so the 'nsecbunker' is one of the first nip46 implementations, and it had it's own 'connection string' format - it was 'npub' or 'npub#token'. But now the new standardized format is bunker://pubkey?relay[&secret] - all modern clients will support this format, some old clients support the old nsecbunker format. Nsec.app can't work with npub or npub#token format bcs this string doesn't allow to pass the relay address, which is needed to run the nip46 protocol (original nsecbunker had hardcoded relays so that wasn't needed). 

Thanks, I will adjust the wording. Basically, there are 2 kinds of bunker urls - with a &secret or without one, one with a secret must not be shared publicly, only pasted to the connecting app, nsec.app generates only urls with a secret now. 
 Cool, let me know if you have any questions or ideas! 
 Great! Don't hesitate to share feedback, it really helps! 
 nostr is still mainly used alongside twitter. in the best rare case, as a replacement. and only b... 
 Jerks' daily job is to find targets, not sure if deindexing from aggregators would help much, you should then deindex from major public relays too, and only post your stuff on paid relays (paid to read, not only to write). Meaning, you shouldn't be on public Nostr if you're afraid to be found by someone determined to find you.

I think the only anti-harassment solution that could work on Nostr is client-side filtering, based on contact/mute lists, friends' reports, etc. Don't show replies from people you don't follow, or that were reported/muted many times by people you follow, or replies from public relays. I bet some of these policies are implemented an nos.social, but the issue is - everyone's using Damus/Amethyst/Primal, and those have nothing like that.

The way I see it, we should have a separate pluggable layer/API/NIP for content post-filtering, that can be plugged into any app: an app forms a feed (main/replies/notifs/anything) and then passes all the events from the feed to the filter, and filter returns various labels (spam/harassment/nsfw/impersonation/...), and app covers the content of the labeled event and shows labels above it. This way apps don't have to rebuild their feed building logic - just apply another layer above it, users would specify the filtering API endpoint in the settings and get the filtering they want. Safe mode could be 'cover notes from users I don't follow until filter returns it's labels - uncover if no bad labels returned', more reckless mode could be 'show notes first, only hide them if filter returns some bad labels'.  

If nos or anyone is interested in experimenting with me in this area, let me know. 
 How do I get the list of relays for a user who's signed in with NIP46? The NIP46 method `get_rela... 
 You can get the user's relay lists from his kind 10002 event (nip65), nsec.app doesn't yet support get_relays method. 
 How do you Nostr? What clients or apps do you use on a weekly basis? 
 Thank you all! Spring is on hold in dev terms, but we haven't published any updates that could break it, so something on your system changed. From the issue you filed I see it's related to webview update - I will keep it open and try to google this stuff to figure out if there's a known fix. Thank you. 
 nostr:npub1xdtducdnjerex88gkg2qk2atsdlqsyxqaag4h05jmcpyspqt30wscmntxy so how accurate is the foll... 
 Thanks. No there is no easy way to know how many bots there are 
 Try nsec.app to dip your toes 
 Submitted! Thanks for contributing to the nip46 adoption! 
 Oh well they don't support bunker urls, only nip05 (which could be resolved to bunker url if only your signer had a domain name...) 
 Is anyone using the Flamingo signer? 
 We still haven't heard your feedback on nsec.app, we really miss it! 
 It is nip46 implementation, we can say it's a bunker in your browser. 
 Should bounties for nip46 remote signer / nsecbunker integration into clients be a thing? Would i... 
 Which clients interest you the most? 
Most web clients either already support it, or are trivial to implement with nostr-login or window.nostr.js
Native clients are mostly disinterested and I haven't seen any enthusiasm from them, unfortunately. 
 @Kieran I will zap you 500k if zap.stream gets nip46 support by the end of April 

Anyone else want to pledge? 
 Well for that to happen you should persuade him to implement nip46 on zap.stream  
 Not too much if it works 
 That's getting serious 
 Where is the place to add to a bounty to get nsecbunker/NIP46 support for the popular clients lik... 
 Let's just go to their github issues and post there?

Coracle looking for relays forever might be the case with brand-new keys. 

Nostrudel has everything working in their 'next' version at 'next.nostrudel.ninja', on main branch of theirs you must use bunker URL for now - click 'Connect App' in nsec.app, copy bunker URL, then select Advanced -> Nostr Connect / Bunker option in Nostrudel.

There is also Snort, worked fine last time I checked, just choose 'Already have an account' and paste your name@nsec.app