I seem to now be on the Nostr. Thanks to Lyn and Eric.

npub1rfhq4ml3mwnm5yslh6enhuck9yq5jh0nlj6wffqyy0suzrklph9qp5n5g3

I'll post on Twitter.com/rudyhavenstein so you know it's me. Don't expect too much right away.

Baby steps.

I have been using Nostr for two years now, and the lack of a NIP-09 (event delete) or its equivalent standard on Nostr is, more than ever, a significant privacy and safety issue built into the current version of the protocol.

Snowden warned us of the dangers of a permanent record. Have we not learned anything?

Nostr, as it is right now, is a permanent record that seeks to tie all of your apps and your coin transactions to one key pair.

If that key pair is ever compromised, EVERYTHING is compromised.

If you accidentally doxx yourself, you are HOSED.

It's bad OPSEC. And it sounds like a honeypot waiting to happen.

Amber (event signer) is a decent workaround, but it has not passed a third-party security audit, and I still believe a parent/child key system is the way to go as it does not expand your attack surface by having to depend on a third party to keep all of your Nostr business safe.

Now back to event deletion...

The protocol is the protocol. Relays must use the protocol to participate in the network.

If the protocol requires honoring event deletion requests to participate in the network, then Nostr will have avoided this festering security and safety issue.

If certain #Nostr devs don't stop saying universal post deletes can't happen because of xyz (insert biased limiting belief/excuse here), and start figuring out how it can be done... it's a protocol design that's dead in the water to anything but mostly nameless, faceless anons.

The future is privacy-first, client-side computing, not relays. The clock is ticking.

I have been using Nostr for two years now, and the lack of a NIP-09 (event delete) or its equivalent standard on Nostr is, more than ever, a significant privacy and safety issue built into the current version of the protocol.

Snowden warned us of the dangers of a permanent record. Have we not learned anything?

Nostr, as it is right now, is a permanent record that seeks to tie all of your apps and your coin transactions to one key pair.

If that key pair is ever compromised, EVERYTHING is compromised.

If you accidentally doxx yourself, you are HOSED.

It's bad OPSEC. And it sounds like a honeypot waiting to happen.

Amber (event signer) is a decent workaround, but it has not passed a third-party security audit, and I still believe a parent/child key system is the way to go as it does not expand your attack surface by having to depend on a third party to keep all of your Nostr business safe.

Now back to event deletion...

The protocol is the protocol. Relays must use the protocol to participate in the network.

If the protocol requires honoring event deletion requests to participate in the network, then Nostr will have avoided this festering security and safety issue.

If certain #Nostr devs don't stop saying universal post deletes can't happen because of xyz (insert biased limiting belief/excuse here), and start figuring out how it can be done... it's a protocol design that's dead in the water to anything but mostly nameless, faceless anons.

The future is privacy-first, client-side computing, not relays. The clock is ticking.

It’s true. I get so envious when I see pics of art studios and I’m not much of an artist at all. It is good for the soul, I’m sure, to just spend time there.

Whata timing workin on choppy boeard. And got prezent, a nice partizant style knife fro'm friend. #craft #foodstr #chefinglife

GN