Pro/Con of Nostr Clients

Iris.to

Pro: Everyone has a web browser, so it’s easy for beginners to on-board. Simple easy layout.

Con: They use CloudFlare, so do NOT let the website see your private key. You need to use the Flamingo browser extension to sign events because CloudFlare strips away httpS encryption. Without a browser extension, it should be treated like you’re handing your private key to the US government. You can’t view DMs using a browser extension only. Also CloudFlare will browser fingerprint you and block Tor.

Primal.net

Pro: Fast for Tor. I recommend this only for Tor browser. The reason it’s fast is because you’re not getting the content from each individual relay, but it’s aggregated to their database.

Con: Primal’s model is closer to traditional social media, where they can censor content. Beyond using this for speed on Tor, it’s dangerous centralization.

Amethyst

Pro: FOSS Android client in the F-Droid store that works on degoogled phones. Not only is the interface just like Twitter, but they added in “sealed sender” style DMs, similar to Signal to hide metadata.

Con: Be aware that if you’re not using a degoogled phone, then the government and Google can probably get your private key. And for the high risk “tinfoil hat” paranoid, you can’t control the Baseband modem of ANY mobile device which hackers can remotely compromise. But for the average memer, private keys on mobile is fine.

Gossip

Pro: This is what I’d use for famous or controversial influences with a high threat model. Desktop Linux is supported, and it’s programmed in Rust which could potentially add security against memory corruption for poorly vetted third party images downloaded off relays. Password lock on posting is good.

Con: No sealed sender DMs yet. Hard to use.

Tip: You want to first try Amethyst, then graduate to Gossip when you understand that you have to enter a relay where someone posts to find them. (hint: lookup their relays quickly on Tor via primal.net.)

Lume

Pro: Lots of features such as mapping relationships, good widgets for hashtags and topics. Password lock is good.

Con: There’s still Linux bugs. I can’t recommend it for Linux, as I had issues. However, the developer has significantly improved Linux builds from just a few months ago, but it’s not there yet.

Damus

Pro: iPhone Client for less tech-savvy users

Con: Apple (and therefore the government) can probably get that private key, but again for the average person it’s ok.

Please consider reposting this to spread adoption. I might make video tutorials for gossip

Hello, I am using Amethyst (unfortunately not degoogled but i am not into this privacy tech thing, I know not enough but I like privacy and would like to know more) and I use X/twitter also and since I use nostr with amethyst I recognized that translations here are very bad compared to X. Is this only Amethyst or with every nostr client? Hopefully someone knows?!?

Reply to this note

Please Login to reply.

Discussion

This video goes over degoogled phone basics:

https://video.simplifiedprivacy.com/degoogledphonebasics/

Thanks! very interesting but perhaps you know following: How does someone know that google didnt do something with their hardware to spy on you, because some time ago, I heard about intel having a hardware backdoor in some of their new processors so that they didnt need software vulnerabilities to spy on you

Yes true. For phones its the baseband modem

I googled explanation for baseband modem in my language and didnt understand 😅

But from your website it seems you dont see an issue with degoogling pixel phone instead other phones. So it must be a problem every phone has.

Now I am going to study your website first.

I am sure I will learn a lot there, so I thank you in advance 🤗

Its every phone

When you put your phone in airplane mode, that's just an API call to the Qualcomm baseband modem ASKING it to stop. You're not really in control of it