Avatar
Fabulous Mindset
247c52f4178e6c9c12c47fae265ef4a8cc8c5395f24d6f851230d04a5932b46f
Cosmopolitan Bitcoiner on a journey to discover the secrets of the universe with suggestions on how to live a happy, healthy, and prosperous life : ) https://linktr.ee/fabio108

Hey nostr:nprofile1qy2hwumn8ghj7etyv4hzumn0wd68ytnvv9hxgqgdwaehxw309ahx7uewd3hkcqpqvmwjykc3rpmtpmrrlwrf4u8lfxdnnf0uj083fxtqm5gk2kgaee4qrg6qqd same issue for me, on X I'm almost invisible, with 795 followers my posts rarely get 1 like if any from one of my closest friends.

Obviously shadow banning is still a very real thing.

I would love to join your thread here understanding how to thrive in a new decentralized social media environment.

Funny I just posted a NOSTR note about this 5 minutes ago 🙂

https://primal.net/e/nevent1qqsxpqrnfhszvgeze52jfya50gskyscqu977z8rzffegv9nxnhc4jkq2tf2yu

I lost him right at the beginning when he said:

"A person's contemt is another person spam" ... that's like saying "A person being mugged is another person's job" LOL

The "Decentralized ID" Merkle Root would become the anchor or the immutable peg for a certain WoT network, because networks are dynamic and I keep going back to thinking about the need of a timechain to anchor their legitimacy...

Or another way to self finance could be that a certain amount of "shorter names coupons" could be given out as reward for example for people and orgs running the federated relay system.

Initially the 1, 2, 3 letter names could be reserved for internal use and for the 4 letters and up a donation of a certain amount of sats could be asked inversely proportional to the length of the name.

For example for 1,000 sats someone could get a 10 letters name.

And up with the same logic to get to 1 full BTC or more for 5 letters names, this could be also a smart idea to fund the project : )

Claude.ai suggested me earlier today also other possible attack scenarios:

Username Squatting:

Attacker registers thousands of popular names

Defense: Rate limiting, cost per registration, reputation system

Federation Collusion:

5+ federation nodes collude to register conflicting usernames

Defense: Bitcoin timestamp provides proof of fraud, community can fork

51% Attack on Bitcoin:

Attacker reorganizes Bitcoin blockchain

Defense: Wait for deep confirmations (6+), extremely expensive ($billions)

NOSTR Relay Censorship:

Relays refuse to propagate certain registrations

Defense: Users can query Bitcoin directly, run own relays

DNS Hijacking (if using domain):

Attacker compromises domain used for federation

Defense: Use IP addresses, Tor hidden services, or multiple domains

Replying to Avatar david

It’s an interesting proposal. Right now, as nostr:nprofile1qqsyvrp9u6p0mfur9dfdru3d853tx9mdjuhkphxuxgfwmryja7zsvhqpzpmhxue69uhkummnw3ezumt0d5hsz9mhwden5te0we5hgmmj9ehx7um5wgcjucm0d5hsr097r2 pointed out, the only universal identifiers are pubkeys and event ids. Which of course are not human readable.

So the question is: can we make a human readable name like Fabio that is also in some sense “universal”? Primal does this; you subscribe to their services and you can reserve your username. But of course that’s a centralized entity, so the question is whether you can do it in a manner that does not rely on a centralized entity.

Your method proposes a naming system that does not rely on any single entity. It might be too strong to say it’s “centralized” around the system itself, but we would have to ask whether the system itself would be universally adopted. In the real world, there will never be one and only one Fabio; it may be unique within some small domain, but not universally unique. That’s the price of making it human readable. Your system is first come first served; will people accept that as opposed to, say, a system that selects the “real” Fabio to be the one with the most proof of work? There could be more than one decentralized naming system. But with your system, I would have the comfort of knowing my name won’t be taken from me.

Perhaps a use case could be: suppose I want you to zap me some sats, I can’t remember my npub, I don’t want to use a centralized naming system like primal, so I tell you to zap “Fabio” using your system as the naming system.

When I put on my product hat it’s hard for me to see this gaining wide utility as is, but it is worthy of thought.

Thanks for your feedback David,

Yes you are making very valid points, for me the important part is not that this becomes "the only one system" (although I said "Universal" perhaps I should change that) , the important part is that it has the potential to become fully decentralized.

Probably in a fully developed decentralized web of trust environments there would be many of these systems to cover different verticals, and ideally they would all be fully decentralized and not dependent on any DNS or private companies.

Replying to Avatar Rasha

Always! The Universe makes no mistakes ✨️

Thanks for the great call @david @Jon Gordon @Vitor Pamplona @Avi Burra and everyone else present!

#wotathon

I had a question I was trying to put together at the end of the call but couldn't formulate it fast enough during the live call, I'll write it here:

In the context of the Nostr "flat space of encrypted signed notes" is there ever a need for a universal time based source of trust?

Meaning since anybody could spoof a note "created_at" field I guess the current spam protection is set on the individual relays filtering capabilities?

If the relays are filtering the notes based on the current time when processing it the whole system seems to be very dynamic and maybe this is good enough but I'm not sure about how solid or fragile such system could be.

I've been thinking about this in terms of creating a "universal id" that would not require a domain name (because DNS is a centralized service) but instead having just a handle like for example '@fabio' and that handle could simply be everything needed for someone to have their "universal id", meaning that would be all that is needed to link to an npub/nsec pair.

The only way I can wrap my head for solving this in a truly decentralized way would be to use a chronological source of truth with a first come first served logic like this:

1) A foundational layer with a "timechain" record (think for instance at a hash in the OP_RETURN field of a Bitcoin transaction) (no need to get into the Knots vs Core debate on this one because the original 80 bytes would suffice for a hash 🙂 )

2) A layer of "federated relays" acting as a cache so the amount of timechain or blockchain transactions would be minimal, like let's say just once every 24 hours.

In this way it would always be possible to have a proof of authority from history with a chronological first come first served logic that would be written in stone and always verifiable forever.

Would this be something useful or am I missing something and this is already a non issue with the Nostr relays ecosystem?

Thank you,

Fabio

Yes and they are probably more talented, not less talented, because:

"The world rewards action, not potential" 😄

That's the way!

Slap down those bad boys, you'll feel them on the way out too! 😂 😂 😂

Replying to Avatar Final

We at #GrapheneOS were contacted by a journalist at Le Parisien newspaper with this prompt:

> I am preparing an article on the use of your secure personal data phone solution by drug traffickers and other criminals. Have you ever been contacted by the police? Are you aware that some of your clients might be criminals? And how does the company manage this issue?

Absolutely no further details were provided about what was being claimed, who was making it or the basis for those being made about it. We could only provide a very generic response to this.

Our response was heavily cut down and the references to human rights organizations, large tech companies and others using GrapheneOS weren't included. Our response was in English was translated by them: "we have no clients or customers" was turned into "nous n’avons ni clients ni usagers", etc...

GrapheneOS is a freely available open source privacy project. It's obtained from our website, not shady dealers in dark alleys and the "dark web". It doesn't have a marketing budget and we certainly aren't promoting it through unlisted YouTube channels and the other nonsense that's being claimed.

GrapheneOS has no such thing as the fake Snapchat feature that's described. What they're describing appears to be forks of GrapheneOS by shady companies infringing on our trademark. Those products may not even be truly based on GrapheneOS, similar to how ANOM used parts of it to pass it off as such.

France is an increasingly authoritarian country on the brink of it getting far worse. They're already very strong supporters of EU Chat Control. Their fascist law enforcement is clearly ahead of the game pushing outrageous false claims about open source privacy projects. None of it is substantiated.

iodéOS and /e/OS are based in France. iodéOS and /e/OS make devices dramatically more vulnerable while misleading users about privacy and security. These fake privacy products serve the interest of authoritarians rather than protecting people. /e/OS receives millions of euros in government funding.

Those lag many months to years behind on providing standard Android privacy and security patches. They heavily encourage users to use devices without working disk encryption and important security protections. Their users have their data up for grabs by apps, services and governments who want it.

There's a reason they're going after a legitimate privacy and security project developed outside of their jurisdiction rather than 2 companies based in France within their reach profiting from selling 'privacy' products.

https://discuss.grapheneos.org/d/24134-devices-lacking-standard-privacysecurity-patches-and-protections-arent-private

Here's that article:

https://archive.is/AhMsj

This is absolute nonsense, obviously propaganda of the lowest level that can only be accepted by a severly retarded population.

It's like saying to a chef kitchen knife's manufacturer that there are muggers on the streets using their knifes to rob people, or calling the Mercedes dealership and accusing accusing them because someone just used a Mercedes to rob a bank.

The only way to deal with these types of media is IMO to completely disengage, just ignore them and use other sources, otherwise they will distort your cobtent and ideas because the clearly have an agenda that is way above their journalistic ethics.

Yep, it's not what we say, it's what we do that qualify ourselves.

Amazing how Cloudflare just became The Internet's single point of failure.

Look them in the eyes, smile and say a genuine "Thank you".

Then ask them something about themselves to change topic 🙂

"Some people grumble that roses have thorns, I am grateful that thorns have roses"

- St. John The Baptist

Never confuse aloneness with loneliness, I love to spend time with myself!