Something we can call community notes. NOSTR already has support for reporting this type of profile. It depends on the relays identifying the profiles and not returning their notes.

We need basically an open standard, a NIP, for any user to broadcast "scores" for any content. Clients of course don't have to use or look at the data if they don't want. But if your client is targeting new Nostr users, maybe you would look at the scores or allow users to opt-in or opt-out of the scores. And anyone could publish their own scores -- they are probably just a {image_url: ___, score: _ } format or something. Score is between 0 and 1, with 1 being "very very likely child porn" and 0 being "ok"}

NIP-36 is all we really have for any kind of pornographic content filtering. For me, that is usually enough, because I don't want to see ANY pornographic content in my feed, CSAM or otherwise. Let the degenerates worry about how to specify what level of degeneracy they are ok with seeing.

Stopping people from posting it in the first place is going to be a game of whack-a-mole that relay operators and media-hosters are going to have to tackle. Hence why the only relays I operate are ones that only I can post to, or that only folks within my web-of-trust can post to.

very easy: don't follow CASM accounts, only view notes from those you follow.

Relays have to become more whitelisted and less open, and clients have to implement outbox model and stop relying on 2 or 3 big relays, then we can just stop worrying about this.

Broadcasting public notes that identify CSAM is probably illegal, because it could be construed as "advertising" that content. I think the only option we really have long-term, at least in the US, is for someone(s) to run a service that crawls the network, matches images against microsoft's hash database product (closed source, but for good reasons, since hash databases can be reverse engineered), and reports matches to NCMEC. A bonus would be to do the same thing but analyze note text for exploitation keywords. Privately hosted and encrypted content are pretty much immune to this fortunately/unfortunately. nostr:nprofile1q9n8wumn8ghj7enfd36x2u3wdehhxarj9emkjmn99ah8qatzx96r2amr8p5rxdm4dp4kzafew3ehwwpjwd48smnywycrgepndcu8qd3nx36hguryvem8xdr5d56hsmt5xfehzemtxejxkeflvfex7ctyvdshxapaw3e82egprfmhxue69uhhyetvv9ujumn0wd68yanfv4mjucm0d5hszrnhwden5te0dehhxtnvdakz7qg3waehxw309ahx7um5wgh8w6twv5hsz9nhwden5te0wfjkccte9ekk7um5wgh8qatz9uqzpxvf2qzp87m4dkzr0yfvcv47qucdhcdlc66a9mhht8s52mprn7g98p5le2 currently checks a hash database for all images uploaded, and I believe they report matches.

As non-cypherpunk as this all is, I think it's the only real option we have unless Ross Ulbricht's ZKANN idea gets built. We need to demonstrate to anyone watching that we take the problem seriously and take measures to self-regulate. This is similar to the bitcoin KYC/AML argument. If we don't want financial surveillance or legal restrictions on social media, we should help law enforcement actually chase down the people who are the problem rather than presenting ourselves as the scapegoat. See iftas.org for some work being done in the fediverse on this.

https://github.com/hzrd149/blossom/blob/master/buds/09.md

reporting those medias and events. relays and clients must care about them.

primal seems to be the worst offender

I don’t think it needs to be handled at the protocol level - more like individually

Yeh, building an AI powered CP search engine probably isn't a good idea.

No idea how you implement any of it, but so, so glad you're talking about it. Protect the kids, eliminate the abusers.

I don't have images displayed by default and I don't have any way to tell (other than the person I'm following) whether to display the image or not. Once I see it I cannot unsee it.

I think encouraging self-publication of honest text descriptions of non-text content is the way to go. I recently encountered someone who did not wish to publish a content warning so my recourse was to mute that person. If we repeat this process continuously, where both clients and relays can try to evaluate whether a description of media is honest or not, and block dishonest descriptions, that would go a long way.

In other words, use classification systems not to identify one particular type of content on a scale from 0.0 to 1.0, but rather have it judge whether the attached description of an image or video is honest on a scale from 0.0 to 1.0. Then everybody can block dishonest npubs and filter what they wish to see or not see based on descriptions. If an image or video URL does not have a description alongside it, score it 0.0. I don't know which NIPs this would use or add. And the classification systems would not be required to be used by anyone, but they might help identify dishonest sources.

Unpopular opinion: Because of this problem, because of the refusal of relays block image links which contain CSAM, several of the major Nostr apps, possibly including nostr:npub1yzvxlwp7wawed5vgefwfmugvumtp8c8t0etk3g8sky4n0ndvyxesnxrf8q , nostr:npub12vkcxr0luzwp8e673v29eqjhrr7p9vqq8asav85swaepclllj09sylpugg , and nostr:npub18m76awca3y37hkvuneavuw6pjj4525fw90necxmadrvjg0sdy6qsngq955 will be kicked off the Play Store and App Store. This might happen fairly soon, too. Web applications will be fine and won't be impacted. Relying on "user reports" or "web of trust" is a joke and won't prevent these apps from getting killed by Apple or Google. Sorry.

@YakiHonne @fiatjaf @PABLOF7z @miljan @ hodlbod This proof of concept shows real-time events that we've found on Nostr relays which are likely bad enough that Google or Apple, if they discover them being "served" by an app like @primal or @Damus or @YakiHonne might decide to take action and remove these apps from the App Store and Google Play. Here is the dashboard where you can see the events: https://nostr-media-alert.com/ .... .... There is definitely an argument to be made that the best course of action is just "do nothing" and wait and see if the apps get removed. From another perspective, it might be nice (in my opinion) if NORMIES, when they first sit down with a Nostr app, aren't immediately blasted with porn. One way to do this would be for relays to consume these "scores" we are producing (and others could produce also), and allow new users to "opt-in" to seeing hardcore porn in their feeds, instead of just like assuming that they will want to see it?