I think it's incredible that external references on nostr are not hashed.

It's really easy to tamper external references this way.

nostr:npub1xtscya34g58tk0z605fvr788k263gsu6cy9x0mhnm87echrgufzsevkk5s nostr:npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z

Reply to this note

Please Login to reply.

Discussion

They are hashed on Amethyst since April. This is why we implemented NIP94 and NIP95 back in April. NIP 95 is even better because you can migrate pictures from relay to relay when they disappear. People don't even notice the server has changed. It works like a charm. If it was for me, we would never use urls ANYWHERE in nostr.

NIP 96 is next.

That's so cool, nostr:npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z! I'm curiousl to see how the json event looks like! Maybe I will have a look using gossip from nostr:npub1acg6thl5psv62405rljzkj8spesceyfz2c32udakc2ak0dmvfeyse9p35c

In case that someone/government/hacker takes all of the image servers down and someone find an alternative with backup images, what should a regular user do to see all images again?

query a dht

Is it possible for the data to be stored in IPFS or maybe magnet/torrent etc?

ipfs is bad and torrents are banned on ios. I don’t think media should be censorship resistant. I’m happy if child porn is censored.

I'm not think or porn, I'm thinking of videos proving war crimes for instance, like in #israel #palestine

I think links to bittorrent is fine in that case

Difficult one.. noone wants child porn to be eternal, imagine the trauma!

At least maybe some hash so that people know the video claiming to be the original is really the original

torrent is banned wtf lol?

https://news.ycombinator.com/item?id=32767277

>Apple doesn't believe in software that exposes their users to content outside of their walled garden.

I would be a little concerned that images/ videos from the numerous wars western nations are involved in might be censored.

distribution is less important as long as we hash address the files, we can distribute any way then

blake3

What relay implementations support NIP95? Few weeks ago I was unable to find any. Has this changed?

look on github?

Would be easy to add to damus’ imeta data on upload, but it hasn’t been a huge concern for damus atm because nostr.build is pretty trustworthy.

Would be even more useful if damus first downloaded and metadatad/hashed any pasted image url.

It would need to be optional. Nostr is already a data sink, and my mobile does not need to download the 4000x9000 version of an image. Honestly I’m a bit surprised that more native clients don’t support something like imgproxy to reduce this burden and reduce IP address exposure.

Secure, uncensorable image upload/retrieval adds a lot of limitations that aren’t relevant to the average cat photo or meme.

Cat photo or meme for sure it's not very important, but If you have to report on war, like Israel vs Palestine, or anything where government will hunt down inconvenient truths, then you need to be censorship and tempering resistant

I agree, 💯%. It should be as easy as flicking a switch for when things get real. There are definitely two scenarios for using Nostr - the normie one and the one where someone is subject to an oppressive regime. Both should be considered and accounted for.

i wonder if blake3 would allow fetching a lower res from the same data? is there any image formats that allow that?

yes you can partially load data from some image formats to have a lower res/quality image and blake3 will allow this with hash verification

https://blog.codinghorror.com/progressive-image-rendering/

https://www.youtube.com/watch?v=ByH7RMsMxBY

So if government take a nostr.build down or it goes bankrupt and a new Server is made, with the hashes it's possible to know if the images and audios has been tempered with?

ya

Ok, thats a good solution

I can safely say that most of nostriches eggs are in one nostr.build basket.

That is too risky.

ridiculous that we have a distributed social protocol but only for text

and when nost.build goes down? goes woke? goes fed?