they contacted me two years ago and showed me an attack where if you connected to a rogue relay it could send forged notes.

at the time I was busy with all the nostr hype and it was an obscure attack and I felt like the threat wasn't realistic for most people at the time and I had more important things to work on.

this eventually convinced me I need a more robust engine that de-duped and checked everything as it came off a subscription, which lead me to build nostrdb.

this combined with apple censorship sent me off on a quest to build a new client from the ground up that was hardened from day one, the client I am now writing this note from on my android phone.

Daniel has a few more patches that fixes a few of these remaining issues when connecting to rogue relays, but we can't even release them because apple has officially blocked us from releasing new updates without removing zaps again.

Daniel is also working on migrating damus to androids's local relay model (only talking to the embedded relay) which should make everything a lot faster and secure like damus android