Nostr Web Client

Replying to

7fqx

I think this seems like a really well thought out ( SUSPICIOUSLY well thought out??🤔😉) and logical answer.

What are the parameters that relays have for WoT?

Does it take into account activity? Posts? Replies? Having a nip05? Having a lightning address?

Cos these boys wouldn't pass that 🤔

Rif'at Ahdi R 2y ago

>What are the parameters that relays have for WoT?

>Does it take into account activity? Posts? Replies? Having a nip05? Having a lightning address?

>Cos these boys wouldn't pass that 🤔

Yes, i agree with you if they can take measures to consider using those into account before marking as the 'trusted' users candidate. But, they (nip05, lightning address) also makes another problem especially for genuine and common users who just starting a Nostr barely know anything.

I don't know fully (since haven't read yet directly from source code) how but probably only consider simple "follows of follows" as the basjc parameters and separate them by following distance. AFAIK, in filter.nostr.wine it use one degree of separation as WoT. In Iris, it uses multiple degree of separation until 4 layers. Different clients or relay(s) may have different implementations. Hopefully maybe Mazin, Martti can give us some better insight. Coracle and Nostur also have WoT. I haven't look the code yet. TLDR: Basic implementations of WoT is using "follows of follows" with certain degree of separation.

Reply to this note

Please Login to reply.

Discussion

7fqx 2y ago

Who are #WoT people who might know some answers? 🤔 nostr:npub18kzz4lkdtc5n729kvfunxuz287uvu9f64ywhjz43ra482t2y5sks0mx5sz nostr:npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z nostr:npub18ams6ewn5aj2n3wt2qawzglx9mr4nzksxhvrdc4gzrecw7n5tvjqctp424 (sorry if I've tagged you and you don't care, I will untag in future replies to this)

Rif'at Ahdi R 2y ago

Hopefully, my replies won't tag them. I've already unchecked notifications for them using Amethyst in this note.

List of #WoT clients developer and relay operator that i've known:

- Iris (Multiple degree WoT): Martti Malmi

- Coracle (WoT with follows counter): hodlbod

- Nostur: Fabian

- filter.nostr.wine relay (One degree WoT): Mazin

- Amethyst (WoT using kind 1984 Report style): Vitor

Other client developers maybe understand although they don't implement (fully/partially) WoT.

Mazin 2y ago

I’ve noticed these accounts too. We have always planned on building out some type of “authenticity” score to try to determine what is a real human and what is automated. From there, we can further sort malicious bots (or unknown intentions) from friendly. Haven’t gotten around to it yet, but it’s on the roadmap.

To be honest, blank accounts without posts or any info won’t be very successful at breaking in to your WoT. With one degree of separation you can always see who your link is and unfollow them.

Rif'at Ahdi R 2y ago

> I’ve noticed these accounts too. We have always planned on building out some type of “authenticity” score to try to determine what is a real human and what is automated. From there, we can further sort malicious bots (or unknown intentions) from friendly. Haven’t gotten around to it yet, but it’s on the roadmap.

Great news, especially for wine users. Since they will get the first experience directly by using filter.nostr.wine with enhanced WoT methods. Hopefully you can also publish the paper (method) and open source the implementation thus clients dev can also learn from your implementation later

> To be honest, blank accounts without posts or any info won’t be very successful at breaking in to your WoT. With one degree of separation you can always see who your link is and unfollow them.

Yes. Normally it should be easy, but i think some users maybe still can fall for the bot tricks since they follow them back without fully checking. I think if there are some easy GUI tools to check those (who follows this account) can help minimize user mistake

7fqx 2y ago

If I were to try to penetrate the #WoT on nostr... I would probably be doing this Follow Bot thing but I would make sure everyone of them was named with 'hodl' 'nakamoto' 'satoshi' or some such other prefix or suffix in their username. And have b!tcoin midjourney pfps.

Not that I want to do that. I'm just saying this as I wouldn't want that to happen lol.