Parker really doesn’t like Nostr lol

Reply to this note

Please Login to reply.

Discussion

Parker has Nostr Derangement Syndrome 😢

We do need some better dummy proofing key management, coming from a dummy

True. But he's completely discounting that the WAY you would be hacked on nostr is completely different. So much easier to take over an account on a centralized platform with support and account access lmao

Is he an investor in a competing solution or is he just an idiot? lol

He’s an investor, and has also probably invested significantly in buying his followers on X.

That’s what I assume and mentioned in this note. Tagging it instead of retyping it all, but to him it’s about “followers” and perceived clout

nostr:note1yc8z43pqlwkuu6cqxwuvtrt7v24jd72x8wttcu0679f8h3hj9zfs3c5a6g

If Larry got hacked how I think he got hacked, I don’t think it’s possible to be hacked like that on Nostr

Exactly

He also doesn't understand it. You can generate your own key. That was one of the first questions I asked on Twitter and someone told me how to do it.

Didn't you just praise people that have other opinions regarding bitcoin itself? And schooled everyone not watching you John C podcast?

I literally only said “parker really doesn’t like Nostr lol”

I made no comment on the validity of his opinions; it was simply a statement.

And I didn’t “school” anyone for not watching my conversation with John. I invited open-minded people to watch it and commented on the general trends I observe.

Okay :)

Getting Bitcoin and not getting NOSTR is actually quite mind-blowing 🤯

bitcoin evolved to its current state. nostr will have to evolve as well to make it. you can appreciate bitcoin and simultaneously be pretty surprised it worked and that something like nostr can replicate its success.

He's not wrong that the repercussions of having your "account hacked" are worse on Nostr. There are trade offs. If my password is leaked or hacked on Twitter, I can deal with a central authority to reset my password and get my account back. If my nsec is leaked, that cat can never go back in the bag. It's leaked for life. Twitter allows you to recover your identity, that they own. Nostr allows you to create a brand new identity that you own.

Yes. I’m not saying he’s wrong. I’m saying that he clearly has an axe to grind with Nostr as evidenced by this and numerous other posts.

I wish I understood why he was so bearish on decentralized social communication when he clearly understands decentralized money.

I don’t think he’s bearish as much as he sees it as a distraction from Bitcoin. He believes Bitcoin is losing brainpower to a less important project

He said that in some interview I saw

I don't think you want to know... once I started conversation on this with him, and nostr:nprofile1qqsvextkm9nssu5u3yp8cyfhxspenl63ra78g9trk399k8760wu9pzcpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhspcp49u all but begged us to stop 😂

Do tell

He milks decentralized money industry, he's having a hard time milking decentralized social app because the key pairs can't be custodied by his services.

the short of it is that Parker is more concerned with reach than censorship.

Rhymes with the monero bros

To be fair censorship resistance without reach is meaningless. Everyone in the world has more or less immediate access to censorship resistance without reach. I can stick a note on my window and nobody can come in to my house and take my "window account" away. Or I can get a tattoo. Or I can write anything I want on my computer and save it as my screensaver. What's the reach though?

Basically you need a certain level of reach before you can make censorship resistance an attractive selling point.

I'm not sure I agree. I don't feel the need to talk to thousands of people with Elon's permission. I'm happy with a small group no one controls.

Now, Joe?, do the Venn overlap of reach with truth and lies

That's fair, though I'd argue that asking someone who *already has* a lot of reach to trade in that reach for censorship resistance would rightfully lead that someone to ask "what's the point?". It's essentially asking them to retire and then spend their days shooting the breeze with their pals in a bar.

I guess the question is then why is he into bitcoin? is it just a great asset in fiat terms? Looking for a consistent position, here.

I've no idea. I'm new to bitcoin. Though I do observe that bitcoin people view bitcoin as very different than other coins/crypto. There is only one bitcoin, as it were. But there are very many decentralised social networking protocols, and I could see someone asking on what basis Nostr gets to be the "bitcoin of them all" (and not the "eth of them all" or the "ripple of them all" or whatever). Architecturally they're all quite similar, just different sets of trade-offs.

we definately view bitcoin as different. and I don't see it as a twitter vs nostr thing but a centralized vs decentralized thing.

I suppose but then I'd expect passionate bitcoin folks to prefer a social networking protocol that is far more decentralised than Nostr.

like what?

OG-nostr for one. That is to say nostr as first envisioned, with outbox across the board and users spread evenly across 1k or more relays (no relay clumping), and anything requiring a global view either not part of client architecture or (when tech matures) achieved through decentralised means, such as decentralised indexing. Plus relays being financially viable.

You can also make a technical argument that a hacked-together AT-proto network consisting of self-hosted PDSs, custom scaled-down app-views and an alternate DID/PLC directory (i.e. all of it totally detached from any company) would actually be more 'bitcoin like' than nostr. With that you wouldn't have the "not your relay, not your notes" and "not your storage, not your media" stuff to deal with (it's all on the PDS and, critically, content addressed) and you would also have general scalability closer to that of bitcoin, especially with how ATproto handles lexicons. Of course the cultures of bluesky and bitcoin don't align well, but such an ATproto network can be implemented entirely outside of bluesky's purview, and some have been already by enthusiasts.

I myself am not interested in Nostr for max decentralisation or censorship resistance. I’m interested in Nostr for commerce, interop and the integration of e-cash, so the way nostr is developing is totally fine for me. But I can understand how a bitcoin purist would see it as anathema.

possibly sour bitkit isn't winning?

Indeed. You might wind up having to become a Derek Ross clone trying to prove your identity in a battle royal.

Ah yes, the future "this is my new nsec" battles :)

5. You'll need to get your primal.net/dude link back from Primal (example) to ensure that if your profile has been linked to on the web by others then it'll go to your new npub. (Many people are going to share your profile via a link) To do that you'll have to prove you are you to Primal, but Primal might be hesitant, as that'll make them look like a central authority. And that's assuming you have a way to prove to them that it's "your link". There are a few clients that make such links.

6. You'll have to accept that all the places on the web that have shared you via pasting your npub directly (StackerNews, Reddit, whatever), or where you've shared it yourself, are at best dead links, and at worst (if you can't nuke your account) leading unsuspecting people to a phishing account.

7. All your private DMs are potentially exposed

8. If you're slow to nuke your account the hacker can insert notes in the past from before you announced you lost the key, causing much confusion

Thank you. That all makes sense and is helpful. The last one is particularly difficult to deal with.

Would it be possible to create a recovery key scheme... Like when you create your keypair you create a second keypair (offline, cold storage, etc) that signs a single "distress signal" linked to the original keypair, and all of the clients incorporate a flag of some sort when you are seeing a note from an npub that had it's distress signal broadcasted?

Things like that are strong ideas but are difficult for various reasons. The closest NIP is the newly-merged nuke your account NIP (tell client to tell relays to delete everything and ignore your pubkey) but even that will be hard to coordinate, have a read of the link below for all the chatter on that NIP, good stuff.

Another thing to consider is that most times your key is compromised you'll never know. The hacker is waiting, reading all your DMs, keeping a close eye on your zaps, your cashu balance, for months, maybe even years—all the while you have no idea your key is compromised. There is no "see all devices where I'm signed in" UI in Nostr, nor can there be.

It could be that the future of Nostr is simply not for the kind of social history building that we're doing now, but for something else more transient in nature.

https://github.com/nostr-protocol/nips/pull/1256

Thanks. Will have a look. Personally, I treat nostr as a permanent internet public square (everything is open for all to see, including eventually DMs). And what I carry in my wallet in this square could get stolen. So I don't care about deleting stuff already on relays; I care about making sure that I and only I can broadcast to the network that my key should be considered forked to a new key. That seems like it ought to be doable.

I think that's probably the right way to look at it, a sort of glass box but one that you own.

The key forking thing is hard. The best way may be to start off from scratch with the combo of both a virgin (secure) nsec and FROST bunker URL, created at the same time. You can get such a combo at njump.me via the join nostr thing.

Write that nsec down somewhere, store it in a few places, and never paste that nsec into anything. Nothing. Nowhere. Ever. Only use the FROST bunker URL with clients. And only come back to the nsec to create a new or revoke an old FROST URLs (those are disposable).

That way you'll never lose your account, some hacks your FROST URL, just revoke it, nothing about your npub needs to change.

Problem is FROST is in early stages, not a lot of clients support it. But it is the solution you're looking for by the sounds of it. This guy below gets it:

nevent1qvzqqqqqqypzpx8xhrzg2fzrs2kr89sz4x8c8svrsg8ptwy4z4unzdv9lfwy0kuyqqsdc20kcqqcns2c5cd6t5jvvgcg7slrqtkc6xv7k7vtyu9vhvkv06cjc04mr

Sounds like what I had in mind!

Cool. Give it a few months, I'm guessing. Driving force here:

nevent1qvzqqqqqqypzq77777lz9hvwt86xqrsyf2jn588ewk5aclf8mavr80rhmduy5kq9qqsqqqqv6w6jgsef6cfw8k8djv9yw36pdthjf0qa890vvzysgk964zqqsregp

Low T is the real pandemic

Just admit it, Bitcoin is bad because if you get hacked you lose everything 🤡

Beginners question admittedly, but isn’t the point that on Nostr if someone got hold of your nsec you’d just start again with a new nsec?

And you’d achieve this via a social layer of trust, showing it to people in person who know you etc, and building up your network from there. And this would fairly rapidly overtake and discredit the former one.

I thought the same thing, seems pretty straightforward, and like a feature for its simplicity.

From a user perspective I would still hope for an one time login key derivation feature for less risky testing of new clients eventually.

Personal web of trust seems sensible and relevant regardless. Difficult to infiltrate an entire specific group of nsecs at once.

Yeah I think that’s it - there are ways of securing your nsec and not exposing it etc, but once it’s out in the open that npub might as well be considered like any other imitation account of you.

It takes a special kind of privilege and ego to argue that self sovereignty over your identity is less important than that over your money. I feel bad for Mr. Parker. Hope he can find his way.

It's nice we get to have a Peter Schiff for nostr 🫂

hahah

Like saying..

"Just be honest about possibility of losing all your wealth if someone steals your private key and move your bitcoin. You should use a service like..."

Oh wait.. they say that also.

The incentives, it's all about incentives..

nostr:nevent1qqstgu6hed6fu5tppz3guu3f6d4h79p87ykkhd2949aqmr30ajd953gpzdmhxue69uhhwmm59e6hg7r09ehkuef0qgsvfr3f7p95stxqrjslnmuvsmhcxxxqt8swjdfjx5tz7zq0yms5cygrqsqqqqqpf7axnj

Okay but if someone gets your BTC keys, it's over. They send 1 transaction to a new wallet that they control and you don't, and you never get your money back, ever.

If someone gets your Nostr nsec, sure they can post under than npub, but you can also still post as that npub. So just post saying "hey y'all this nsec is compromised, follow me at this new npub." and many of your followers will move.

Yes, which is what will happen initially, as with compromised accounts on X: posts about a shitcoin scam & 1 post about here’s my new npub

When the hackers get 3 brain cells to rub together, instead of 2? Post while real person sleeping, change to hacker zap wallet, ask for zaps to save real person pet life/family/etc with AI txt that sounds like real person. Profit within few hours & real person wake up to DMs asking for status update on the charity fund

Thanks, Good reminder to personally role play different opsec scenarios anyway

NDS.

Did he post this on MySpace?

Public private key pairs have been used to verify identity for decades for a reason. He doesn't get it.

Why do so many content creators restrict the reach of their content?

I don't care if your note is the same crap you posted to X. If it's quality stuff, I will zap you little bits of GodMoney for the whole ten seconds it took you to Highlight > Copy > Paste > Post

Does X punish content creators who use Nostr?

As someone who grew up listening to bands who would dress like chicks to get a record deal, I'm genuinely puzzled as to why someone whose livelihood depends on exposure to their content won't take a few extra seconds to post it to every place willing to host it.

nostr:nevent1qvzqqqqqqypzp3yw98cykjpvcqw2r7003jrwlqcccpv7p6f4xg63vtcgpunwznq3qqstgu6hed6fu5tppz3guu3f6d4h79p87ykkhd2949aqmr30ajd953ggz9mj3

Prove me wrong.

Idk you Parker so I’ve no dog in the fight. Zero context on your backstory. Curiosity is all. Did you get hacked? Nsecs aren’t currently hackable last I knew, and I know people who’ve tried + tried with AI.

You can't hack a nostr key the same way you can't hack a Bitcoin key.

i think you missed the point. nsec is always hot.

he’s not wrong. but solutions will be created by those smarter than me.

Theee is little incentive to control an identity since there is NIP5 as soon as an account is compromised they can notify followers and make the NIP5 invalid on the old account. Followers will know almost immediately the user isn't authentic if it were a big name account where there was an incentive to control it.

it goes beyond public posting. for example, don’t all your private conversations get compromised? which could be more devastating depending on the content on those messages.

Yes. Nostr is not a secure coms protocol. It's an open coms protocol. If conversations are meant to be private, they're best done with another protocol.

Nsec is always hot just like Satoshi's and every early adopter's Bitcoin wallet.

Further, nsec isn't nearly as valuable as your monies.

Not really a proof but the only way of getting my nsec is to specifically target me on my devices. No way of social engineering third parties to get my identity.

Indeed if I lose it my nsec is toast but I trust my setup a lot more than I trust X. Look into what happened just recently to nostr:nprofile1qqsxc56ajk5xtxerf4dqspgrfa0s5elrcr80lnz9nasldq87j3zzf0cpzdmhxue69uhhwmm59e6hg7r09ehkuef0nlyql2

Who is "Larry"?

Lepard

Who?

Lawrence lepard

Sorry, too busy proving trump is wrong when he say, "We subsidize cana-duh 200 billion a year" :)

Uhhh there's been many people who lost their nsecs and rebooted - people followed them again.

C'mon now, judging how keys are handled right now is insane.

It will be figured out, but either way the tradeoff is totally reasonable:

Freedom for the appearance of "security".

I don't expect corporates to move to Nostr & we don't want you guys here.

Your biz models rely on people who are allergic to self custody.

We are the intolerant minority.

The ungovernables.

The self custody cult.

you put your keys on a password encripted database, 2fa with cellphone or google or yubikey or whatever and save it everywhere.

what is the problem, am I not seeing danger or what?

Fuck corporate

🤙🏻

FROSTR is the solution.

Link me?

See here:

https://github.com/nickfarrow/frostr

Still has a long way to go, but you can create an account and post for the time being, see my GitHub issue raised here:

https://github.com/nickfarrow/frostr/issues/5#issuecomment-2641938317

See here how Parker is / was right, but won’t be for much longer:

https://primal.net/e/note1ms5ldsqp38q43fsm5hfycc3s3ap7xqhd35veaduckfc2ewevcl4sufrv6p

He's not right, it's a pseudo truth to divert attention.

Yo. Get out of the matrix

You also trust some software to generate your bitcoin key. And that software can also be hacked. Where is the difference?

Idk him but the “just be honest, be honest” is giving Beckham.

You can't "hack" a nostr key the same way you can't "hack" a Bitcoin key. His argument is fundamentally flawed. He's showing his ignorance.

nostr:nevent1qqstgu6hed6fu5tppz3guu3f6d4h79p87ykkhd2949aqmr30ajd953gpz4mhxue69uhkummnw3ezummcw3ezuer9wchsygxy3c5lqj6g9nqpeg0ea7xgdmurrrq9nc8fx5er2930pq8jdc2vzypsgqqqqqqsxex8vx

Another VC cuck

It’s honestly weird to see die-hard bitcoiners take such an antagonistic view toward something so aligned to the mission of open source software, decentralization, identity ownership, and digital property rights. I don’t get it. Maybe my IQ is too low or something.

What makes this guy a die hard? He's milking the scene & Nostr is not going to aid in this greedy journey.

He wrote a bitcoin book and runs a bitcoin company. I think that qualifies. I’ve met him and have a lot of respect for the guy, we just have a difference of opinion, and I personally think he’s missing something incredibly important for bitcoin’s adoption.

He's dedicated his life to grifting and only in the last few years has changed his dynamic due to Bitcoin.

He's a rent seeker who's working his shit out maybe but don't let the book change your perception of who someone really is.

Pow = pow.

How is graduating from a top school and then working your way up to a leadership position at a respected bitcoin company and then becoming an entrepreneur considered “grifting”? Come on, dude.

Those jobs in finance are grifting, they provide no value to society & are the opposite of PoW.

You don't have to believe me though.

If you reread what I wrote I said nothing bad about unchained but they are targeting the opposite of Nostr users.

Parker lewis is definitely not promoting radical self custody with his product.

They have zero privacy guarantee or ZK proof system to shield user funds' privacy from their eyes last time I checked.

These are implementable things that would make his service awesome vs a KYC honeypot.

Hating on Nostr is wasting valuable time he claims is already being wasted.

Go work on preserving user privacy at unchained instead of counter marketing freedom Tech and radical self custody/responsibility.

That resume is outdated anyway. He’s at nostr:npub1cwneqlnjgs3rdtk97c2ffy2df9dm5zycgj3dsg8c3z00hchxjmfqtvraju now. Agreed on the wasting valuable time argument. He should be here.

Have you used this service?

Yes. It’s fantastic. I use it all the time.

What does it help you accomplish vs just providing a BTC address?

Lots. You can even check out their website instead of asking me!

https://zaprite.com

You shilled the product, I was just asking for a real life use case that helps you...

I did check out their website and it's just vague with no videos - so I asked.

You are not very genuine it seems.

No, I just don’t have the patience to deal with your shitty attitude.

Lol what 🤣

I’m not shilling a product. I don’t care if you ever use it or not. It doesn’t make a difference to me. You asked me if I used it and I answered, and then you folllwed up with a question you could easily find the answer to on your own and then called me “not genuine.”

We use it at our business every day. It’s a point of sale system. It does invoicing. It has itemized receipts. It integrates with dozens of platforms. It does non-custodial on-chain and Lightning payments, and you don’t have to install anything to use it. In short, it’s brilliant.

I hope I have answered your questions to your satisfaction. Please be sure to rate my service.

I give that a

You seem to have a lot of built up angst, thanks for answering my question.

Touch more grass fren, you need it.

I was just wondering what problem the product solved for YOU.

It's okay if you don't want to answer, but you're having a meltdown over absolutely nothing.

You did not need to resort to a character attack. I use it to invoice clients, and take payments from customers. It makes the whole process easier, and the team is very responsive to feedback. Did I answer your questions?

Bruh c'mon now you're shitting on me, no one attacked you.

Thanks 👍

Let’s just call it a misunderstanding and 🫂⚡️🤙 it out.

isn't Zaprite closed source?

run LNBITS. its open source and does basically the same.

LNBits is great but it serves a different purpose.

i think he just doesnt see how he can make money on it or use his existing businesses tp make money with it. i dont see a reason to look into it further 🤷‍♂️

If you want to character assassinate someone, there are much better candidates, I assure you.

i just dont buy that hes 'missing it', it feels like he's lying, to me personally, when he talks about nostr. feels inauthentic ( which is in contrast to when i have heard and read his takes on other topics) and since i cant read his mind, all i can do is not trust his sincerity ( which unfortunately makes me question his sincerity in general ).

A bit offtopic here with your ZKproof not being on Zaprite or Unchained. Where *else* is it?

💯.

he def seems to be mid curving it

and by definitely I mean that I have no idea

You guys sure love using Twitter still.

I'm not reading all that. Happy for you or sorry it happened.

Nostr is for anyone but not everyone.

He’s actually not wrong though, key generation and usage sucked! (Past tense).

You had to create your private key in app, enter the private key into the app to sign in with write functionality, or enter it into a browser extension.

Nsec bunker is the right direction, but it costs and runs on a singular relay which is a poor dependency.

BUT - FROSTR (NOSTR using FROST crypto) will fix this, by being able to (eventually) create keys outside the app, have sub keys with various mod functionality, so the admin key is never entered and can revoke the previous sub-keys at a moments notice.

So, Parker was, and largely is - because FROSTR still has a long way to go - right in the short - medium term.

But medium - long term, he couldn’t be more wrong.

this is the response I was looking for

I still don't think he's definitively wrong...yet

I’m doing my part 🤝

Is he wrong though? Genuinely don’t know.

IMO he is wrong. X, TG and other centralized platforms require email/phone number for preventing spam accounts and recovering your password. And these recovery mechanisms get hacked. Nostr doesn't have those. You will lose your key, if your phone is stolen. Period. It's solely up to you to backup it.

my question as well and I think only time will tell. I think it's a solid point to make, but there's no way of knowing the truth unless/until an alternative better option comes along

He doesn't want to give up his followers.

Why is parker so salty about nostr. Always had been.

Wonder if it's cause he can't VC it.

He likes the attention. He’s the Peter Schiff of nostr

this is the best take

What is a Larry?

probly referring to stacks larry 2023

Spoken like someone with “social media privilege” haha

I think with AI impersonation becoming worse everhday, having a cryptographically secure identity seems necessary.. Very surprised parker is against this

nostr:nevent1qqstgu6hed6fu5tppz3guu3f6d4h79p87ykkhd2949aqmr30ajd953gpz9mhxue69uhkummnw3ezuamfdejj7q3qcj8znuztfqkvq89pl8hceph0svvvqk0qay6nydgk9uyq7fhpfsgsxpqqqqqqzual3dt

weird

He probably doesn’t even say GM back.

Damn… that’s cold.

GM QW 🌞

haha! GM, QW

Surprisingly, I don't recall a single instance where anyone's Nostr account was hacked. Entering your private key into an insecure app would be the most obvious way how that could happen.

Compromise of a popular app would be bad. Maybe we'll need app and device specific keys signed by other keys of yours at some point.

However, Nostr doesn't have the traditional attack vectors associated with passwords, email, SMS and third party account recovery, which is already very good.

nostr:nevent1qgsvfr3f7p95stxqrjslnmuvsmhcxxxqt8swjdfjx5tz7zq0yms5cygpzemhxue69uhk2er9dchxummnw3ezumrpdejz7qgkwaehxw309ajkgetw9ehx7um5wghxcctwvshsqg95wdtukay729ss3g5wwg5ax6mlzsnlztttk4z6j7sd3ch7exj6g5e7yjt3

NIP-05 could be implemented better at the client level to make it obvious what's going on at the NIP-05 level. Like, what domain someone is verified through, and perhaps more importantly, if it has changed. For someone like myself, it's whatever, but for a more public personality, where you have your website people know you through, it'd be a pretty solid warrant canary style assurance that you are still in control of your nsec. If you're not, delete the file on your webserver, and bam, it should be obvious in clients that your npub is no longer you. Now, getting your followers back could be a pain at that point, but surely you can get creative with clarification back on your website for which new npub people can point to for your content.

Multisig could help too, but is probably honestly overkill in most cases. Long term thinking though, it's worth having built out and tested, and iirc, there are a few projects seeking to do just this, including Frostr.

Parker - stopped listening to him a while ago, noise >>> signal.

he's increasingly sounds too far away from the raw tech.

Use Lnbits, its open source.

Not zaprite, closed source, afaik, which parker shills.

have fun staying non-interoperable

Some of the feedback smells so defensive like people are afraid of him being right 🤷‍♂️

More ridicule and funny jabs, less derangement.

The few weaknesses of any tech can be used as arguments against them.

And the list of arguments against traditional centralized social media would be a far longer imo, therefore I’d happily accept the tradeoffs.

Also, paradigm shifts are hard 🙂

If I got this right, he is saying that we should keep our corn on centralized exchanges because if you leak your own key, you are done, while centralized entity can give you your corn back in case of an accident. If they wan't to, are able to. Makes sense. 🤡

Honestly, I think he's just worried about losing his Nostr key. He knows multisig on #Bitcoin is very safe, and he wants something similar on #Nostr.

We just need to educate him on something called #nsecbunker. 🛀

nostr:nevent1qqstgu6hed6fu5tppz3guu3f6d4h79p87ykkhd2949aqmr30ajd953gpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhsygxy3c5lqj6g9nqpeg0ea7xgdmurrrq9nc8fx5er2930pq8jdc2vzypsgqqqqqqsnu58nq

People should use nostr because they dont want to be brainwashed consumers anymore taking full control of what they want to see. This is the whole use case.

Influencers or social conditioners are the first victim here as people will trend to be more original not a herd guided to support the new thing or be angry about the most irrelevant issues.

nostr:nevent1qqstgu6hed6fu5tppz3guu3f6d4h79p87ykkhd2949aqmr30ajd953gpy9mhxue69uhhyetvv9ujumr90p5kuem5dahxy6t5vdhkjm3wdaexwtczyrzgu20sfdyzesqu58u7lryxa7p33szeur5n2v34zchssrexu9xpzqcyqqqqqqggghmcc

#Nostr is an ego test.

Lots of work to do to eliminate fragility.

Yes on #nostr, and especially when running a #Lightning #node to name the 2 lowest hanging fruits.

Someone really should let him know that if it's the clients generating the key he's worried about, that can absolutely be done locally, even on an airgapped system if you really want to go full blown paranoid about it. https://github.com/jeffthibault/python-nostr has the library and a use case for generating the keys. Clients just generate keys as a convenience, much like how signers will generate bitcoin keys for you -- you can always generate them yourself.

It doesn't sound like he dislikes it, he's just pointing out that if you get hacked (someone gets a hold of your private key) you now permanently share your account with the hacker and there's no mommy and daddy to call up to kick the hacker out and "change your password" (private key) And it's true. But also: the hacker can't lock you out of your account either unless you also lose your private key. So you can always tell your followers where to find you if you change accounts. Of course, you have to prove that it's you posting because a hacker can also post accusing you of being a hacker and re-directing your followers to a different account...

With more sovereignty comes more responsibility and less help. But I think it's worth it. We just need to NORMALIZE NOSTR CLIENTS NOT REQUIRING YOUR PRIVATE KEYS!!!! Because every client is a new way to get hacked and if your private key ain't in there, the damage a hacker can do is limited.

Maybe he should learn about Nostr Signing Devices more!