Surprisingly, I've gotten more spam on the #Nostr than on the birb app.

One thing that worries me about the future is someone can gen many pubkeys and use bots to spam the shit out of someone.

Or, use it for harassment. You'd basically need to never turn on notifications or open the app as it'd be like a DDoS lol

The process from start to attack is far easier to employ with Nostr than traditional social media with having to register a throwaway email, check activation email, send a few responses, rotate IPs, before getting banned. Rinse, repeat.

Curious, what our mitigation options will be to thwart say tens of thousands of spam comments from destroying one's experience. Or, straight filling up a relay's disk and bringing it down.

Some form of rate-limiting? #AskNostr

Reply to this note

Please Login to reply.

Discussion

I would imagine that reporting them at those numbers would do the same thing to relays? Good thought though!

It would likely have no impact, sadly. Someone could spin up a new npub for every message 😬

One way to tackle this is to have an ‘option’ for users (“at the protocol level”) to set a one time zap to comment on your note. The subsequent comments won’t need any zaps. If there is still spam it would just be a matter of you increasing the one time zap threshold. This should significantly reduce spams. The key is it should be optional so the users themselves can decide if it is needed or not. This is a much better preventive approach rather than relying on detective approaches of muting users or relying on relays to do the job. Thoughts nostr:npub1xtscya34g58tk0z605fvr788k263gsu6cy9x0mhnm87echrgufzsevkk5s nostr:npub180cvv07tjdrrgpa0j7j7tmnyl2yr6yr7l8j4s3evf6u64th6gkwsyjh6w6 ?

In Nostur you can active the Web of Trust spam filter to stop this kind of spam, I wrote something about it here: https://habla.news/u/fabian@nostur.com/nostr-web-of-trust

https://nostrcheck.me/media/public/8cb789b0a2dada76afd35b23fbabfd2c480e3bccbf822a3d6f6a8f0a7d3e85e3.webp

I do have that enabled. So with the normal option this would mean someone I'm following is following the LayerZero account?

https://nostrcheck.me/media/public/3d3d44c40c2d28dd666661d5c90cbf0c0c86b84e69138267ec461d1781642c17.webp

That or the WoT filter is not activating correctly, I think it’s fixed in the latest TestFlight, the current App Store release might be a bit buggy. If you see a count with how many contacts are allowed then its working

This is already a solved problem, you just need to use a client with web of trust, like Coracle or Nostur. I haven't seen any spam since I started using the updated Coracle.

Hmmm I am using Nostur when on iPhone and have WoT enabled with a normal threshold