Look, I'm trying not to embarrass you, but it's clear you don't know what you're talking about.

It's not 2000 anymore; servers have immutable, verifyable runtimes that can't be hacked the way you are talking about.

It is possible, just not common practice, to provide full attestation of server code so that users can verify (byte by byte) that build A is running in immutable container B.

note156x0nyw5wlthztyne4uaekvffu9hhmh7lhl5u3yskkvksvkavhxsmvp48h

Reply to this note

Please Login to reply.

Discussion

Primal doesn't need your permission to make a full stack client.

They can and should provide end to end attestation, from source to live production instance, of their server code.

Users aren't locked in in any meaningful way. Easy on, easy off.

sorry, you have no clue. There is no such thing, even if there was, noone is running that tech. There is a 99.9999% chance most code is running on mutable architecture. Do you just make stuff up to sound like you know what you’re talking about?

At damus we run the closest thing to immutable architecture (nixos), but its always mutable, you can always run whatever you want once your’re in the machine, unless you have some custom crazy os and hardware like apple private ai.

It is completely possible and the fact that you can't be honest about that says a lot.

1. Containers are sealed and verifiable, cryptographically, down to the last byte.

2. Immutable container runtime engines exist. I haven't been in the scene for a few years, but both AWS and Google Cloud were experimenting with such things before I retired.

You're flailing.

Cool i will wait for this magical system to be in place where a client verifies attestations from a container, i dont see what this gains over certs and how the client would know what attestations are valid without trusting the server anyway.

Clearly you don't.

You sound like a jerk more than you sound helpful.

Did you “retire” or did you get fired for harassing the manager and telling him how bad of a job everyone was doing?

I'm not the one campaigning against a competing project using dishonest claims.

I don’t see your counter argument

It appears jb’s method would work - dumb relay, smart client. That’s what nostr is.

If you’re proposing a highly auditable smart relay, then I’m out. That’s btc cash or alt mentality. Plebs will run the network. It needs to scale. We aren’t going to run some new AWS-tech in our garages that you only barely heard about unless you can provide links and show evidence

we need gossip to scale and decentralize nostr too, plebs running nodes is the path forward. I really don’t even see how a single proprietary relay even works at scale, unless it’s just bluesky and twitter all over again.

nostr:note18dhmr4cef0wk4nmqxyv4nk2jc75q5dp0n4lywzfmq3yrmcnn47rq4em6ar

We’ll get there

Thank you 🫂

You clearly weren't around since the beginning. Primal is to nostr what Coinbase is for Bitcoin. The dark side of the yin yang. the necessary evil universal balance requires.

I was, but I simply disagree with that characterization.

It's true that the purity group think has imagined #Primal to be some threat, but actual engineers can think through it and see: it's just a full stack client.

Codebase is actively hostile to user funds. I use #Primal every day; in what way am I being exploited or trapped?

You don't have to agree, which wont change my opinion, same as you don't agree with JB.