No one’s ever zapped me so I zapped myself. Wow!
I don’t know. But the fact that you flagged it so early is a good start. There isn’t one answer. And the solutions I have in my head I can put out here.
Please do not accept invalid events in your client. Do not accept non-integer "created_at" values, do not accept non-string-array on "tags", do not accept bech32-encoded keys as tag values. Every time you do that, Nostr dies a little.
For more information on how this kills Nostr, read https://fiatjaf.com/27598e6f.html
Your article doesn’t really capture how bad it gets. It assumes good intent - but there is an adversarial scenario that comes about the same way. I have bad memories from the browser wars, where ms did the same thing with IE. The problem is you need one well funded party with malintent to cause convergence on the client and pass the overhead on to others who simply can’t keep up. We have to protect the protocol and adherence as religiously as bitcoin.
I just watched the whole thing. twice. blew my mind. Darkness is a thing. Wow. Thank you Ray.
How do you plan to stop someone doing this given the nature of nostr?
Why don’t you publish to the wasm package managers (wapm)? Much more lightweight then docker.
I made this video a while ago about how blinded signatures can be used for chaumian ecash: https://vimeo.com/731755923
Today i hacked up a little python script showing how lamport signatures work: https://github.com/rot13maxi/lamportsigs
Im thinking of producing some more content to explain how other elements of cryptography work. Id love your feedback:
1) what medium do you think is easier to understand: video demo (see above), interactive demo you can run (see above), long form blog? Something else?
2) what things from cryptography are you curious about and would love to learn more about? High level protocols, block cipher operating modes, specific ciphers, signing schemes?
If you look at this and say “this is a total snooze”, thats helpful too :)
Thanks!
Love the python. But what would be awesome is the python with a rap genius interface.
❤️ the code and explanation.
You might enjoy this given it covers all the above as well as implications for ageing/regeneration. My top podcast for 2022 https://podcasts.apple.com/gb/podcast/lex-fridman-podcast/id690305972?i=1000581249333
Does it work with cashapp for you? It doesn’t see my lightning invoice. Strike does
Cool thanks! Really nice pay ui
cashme://lnbc112540n1p3mtke6pp5za8z57m6kgu4pe3t8myq6t0x8fdq2gvf4kf7qcq57heu5uh7rzjqd9z2dshgue524hxwcfqv3hkuct5d9hkugr0vcsryvecyp9k2ueqw3hjqv34xscrqvpsxqcrqvpsyplr6gp3ypcxzcmtv46zsuefyphkvgz4denkzgr785srggrpv36kcapqd4jkzmrn9yszsanfvysycnjsg9vjucm09ycqzpgxqyz5vqsp5ucejcdy4v9sguzpmp6wxxly3dqpedapy4clfqeq5jfhegyrpceds9qyyssq7lskya7ud3nwca6z4qmsxm4alxv875vd0qkwulf68nea2as2rpd3huxeqkr82jg6ysxal7w68vukee4m73e7n6x2lnkus8ehll3gecgqd784vx
Anyone in the USA know how paste a lightning invoice into cash app?
Damus is flying today. Wow. #[0]