Can you explain a bit more about how you say Primal changes user notes?
I did a test just now, publishing an image that was uploaded to nostr:npub1nxy4qpqnld6kmpphjykvx2lqwvxmuxluddwjamm4nc29ds3elyzsm5avr7 but pasting the URL into a note on Primal.
When I viewed the source of the published note, Primal had not changed the location of my image.
Help me understand what the problem is.
They are displaying a “primal thumbnail” and once you click on the media it directs to the original file. nostr:note179eu4er5nwde857484ewk99f5xhw766qvxtj5tlz8a8daq2u95gquaqfzt
OK, so it’s a CDN that caches a smaller display version for scrolling the feed faster, but the original note is unchanged. I’m not seeing how this is an intentionally malicious attack against Nostr, but it is definitely cause for concern that one might choose to delete an image from the source, such as nostr.build, but the cached version stays live.
What happens when the server is hacked and shows porn or worse for every media image on their server 🤷♂️
It’s poor functionality at best. And It’s mis representation of what the user intended to be posted.
That’s a valid point.
I’ve honestly just been trying to put into context for myself the arguments for and against. When I say I’m against it the primal army just says cuz it’s faster and I’m retarded. But it’s seriously starting to feel like and issues. (Or it will be one day).
But what’s to prevent any media host you use from changing the source image from the URL?
I asked this yesterday and it’s above my technical understanding. Nostr build could be attacked or go rogue. However, the way they implemented blossom protects that. There are mirrors that have hashed the media and it’ll go to those mirrors to retrieve it. Primal also implemented blossom. So the issue is the cdn thing. Which seems like it is really only a risk to primal’s business. Maybe I’m wrong about that though 🤷♂️
As I explained to mahdood yesterday, Nostr.build requires you to sign every upload/ event. If Nostr.build got hacked they don’t have your keys and cannot change your content.
Primal is centralizing users content and displaying their screenshots in the name of speed instead of fetching your content from relays.
People will leave primal and go to a different client. Will said this the other day
nostr:note15klxt0vek7klcgal47uv506v7lvfe8pkzngjm0v2q4awj5c5yp0qyl3cra
This is currently my view. Is it bad practice? Probably.
Is it malicious? Are they trying to attack nostr or intentionally harm users? That’s a big claim that I’m not willing to make at this moment.
Time will tell. If primal goes down or gets attacked and the images get fucked up, they will have to scramble to try and fix it before losing most of their users. The market will correct itself and punish them if they face that type of attack. People will leave primal and go to something else like damus.
On a free and open protocol, just like on a free and open market, the successes and failures of these clients is an overall win for the protocol. It sends a signal to everyone about what works and what doesn’t.
