Am I doing something wrong, or is nostr:nprofile1qqs9xtvrphl7p8qnua0gk9zusft33lqjkqqr7cwkr6g8wusu0lle8jcpp3mhxue69uhkyunz9e5k7qg4waehxw309ajkgetw9ehx7um5wghxcctwvsrrnrxl completely borked on Android? It seems to hijack the keyboard, making it nearly impossible to type.

Reply to this note

Please Login to reply.

Discussion

Is it just happening on primal or is it happening when you text? Make sure your phone doesn’t have an exploit… that sounds like someone could potentially be running script on your phone

It's Graphene. It only happens in Primal. It's likely the underlying cross-platform library. It's always been wonky on ios, too, but it's all but broken on android.

Ahh gotcha, gotcha. I had a similar issue last September and that’s how I realized I had interacted with a malicious nostr client and had script running on my phone which then device hopped and infected my entire network- 10k in destroyed hardware later

^^ that’s why I was curious

Whoa

Yeah was a bitch but also rlly made me feel confident about my preferred methods of securing bitcoin

Which one?

Malicious nostr client? Which one? Is it still around?

I don’t want to pin it on a particular client because there’s 2-3 attack vectors that I think could have been the initial point of entry based on the clean up I did

I know this… my VPN was deprecated due to a patch I didn’t update which could have made my browser/ web front end insecure

I think this may have rawdogged my nsec in a client where my keys became compromised so that was user error

But also I’ve realized that some nostr clients have a backend way of getting around your phones permissions meaning they can remote access you camera without you knowing…

I run systems logs but iPhones are designed in a way that makes it hard to isolate when this exactly happened, however, the green and orange lights on your phone (mic and camera access) are big red flags

Eventually once the script was running it was very obvious as my keyboard was absolutely fucked and my entire phone looked off… font size had changed, app logos looked non standard… it was just weird

Do you remember if it was a web client or a full blown iOS app?

The phone camera issue happened on my iOS but the deprecated VPN happened on my PC

I was using 3 separate popular client apps, plus testing 1-2 in beta but I do believe that the compromise happened prior to the beta testing

Hmm… I guess it’s hard to pinpoint

You’re doing something wrong if you’re using Primal.

Fair.

Right, but what's the client that has the UI form and feel / features closest to twitter? That's unfortunately what keeps me using it 😅

Same thing for me.

This shouldn’t be happening… make sure no one is running malicious script on your device

Happens to me only after I have tagged someone and try to confine to add text.

Which keyboard are you using?

i stopped using it on mobile. swapped to YakiHonne and its been a much better experience.

Big fan of Yakihonne.

This is a known issue with GOS. I use https://github.com/Julow/Unexpected-Keyboard and it works fine. There are others that have been found to work, also. Remember to kill their network permissions, though.

Interesting. It does the same thing with Futo keyboard. And no other app exhibits this behavior, so I'd put the fault with Primal.

Don't know about that one, but I tried a couple that worked and a couple that didn't. Unexpected Keyboard is an easy one to install and try just to troubleshoot. No permissions requested other than sensors.

You could also use Amethyst and get the same behavior.

I did just install it. Thanks. No autocorrect is a deal-killer for me, personally, but I can see how it would be useful in termux.

Try out Futo. I'm super impressed.

I'm sticking with nostr:npub1yzvxlwp7wawed5vgefwfmugvumtp8c8t0etk3g8sky4n0ndvyxesnxrf8q for now.

So just confirming, Unexpected Keyboard also did not work in Primal?