Replying to Avatar The Fishcake (nostr.build)

I am more worried about multitude of sockets to random IPs, and their implications on security. Selective fetching and on demand connection to specific relays is probably fine, but that still can be insecure and may result in some exploit or user activity tracking. As I posted a few days ago or longer, even TOR crumbles under many connections to multiple sources. I don’t have the solution, but I think proceeding with caution is warranted.

There, in a more civilized and less casual language
Avatar
Ryan 4mo ago

An interesting article. I wonder if anything in Tor has improved these issues in the 15 years since it was written? A lot was about bitorrent itself having issues, but the third point could be of concern, if it still is an issue.

Reply to this note

Please Login to reply.

Discussion

Avatar
The Fishcake (nostr.build) 4mo ago

I think the issues was architectural, and that may have improved, but I also think that “the state” could inject enough nodes into network to uncover the origin.

Avatar
Ryan 4mo ago

I think for a lot of people using a proxy relay could be a good choice. I'm actually connecting to less relays on average than I was before when I set it up that way.

Avatar
The Fishcake (nostr.build) 4mo ago

Is it a default though? The defaults will be used in majority of cases

Avatar
Ryan 4mo ago

No you gotta set it up, default is outbox mode. I'm not sure what relays would be a good choice for that and are free. I use my own WoT relay & Nostr.land, but I think aggr.nostr.land needs subscription, and a wot relay is less useful if it's not configured for your own npub.