Subnostr

AJ Nobody ⚡🏴 2y ago

#Nostr Devs: "that's a cool image/video. Here have 400 characters of extra URI parameters."

WTF guys? Please explain like I'm stupid.

(Mostly I am.)

Reply to this note

Please Login to reply.

Discussion

Derek Ross 2y ago

I believe you're talking about NIP-94? It's for image validation.

AJ Nobody ⚡🏴 2y ago

At first, it was CAUSING me problems seeing images, so I figure it causes others trouble too.

So I've been taking the time to delete the extra parameters.

Got the TLDR on why I shouldn't?

Derek Ross 2y ago

Clients that do image or video validation can confirm that the image or video matches the hash. Verifying that it hasn't changed or been changed by anyone.

AJ Nobody ⚡🏴 2y ago

Hmm. Interesting.

Protects against someone swapping the image?

I wouldn't have figured that a problem or vulnerability.

Ava 2y ago

it is

Derek Ross 2y ago

It's not happened yet, but it could.

Alice 2y ago

How do you fix this

AJ Nobody ⚡🏴 2y ago

Fix the extra URL Parameters? (You're not seeing images correctly?)

If that's the question, updating your client may help.

Fix image switching? Don't delete the new URL Parameters when uploading like I've been doing.