🏴‍☠️

What service that you’re paying for are you referring to?

You pay for IG?

They can use the content how they see fit and you’re accessing the content via their platform which is a walled garden. So…

One of my jobs in my household is tech and security. So a lot of times my takes are based on what I see from truly amateur users (like my wife). She is super trainable on this stuff (meaning she does what I tell her to, but she also is about as clueless as one can be lol Which is probably 99% of people. So I'm always trying to get outside of myself when thinking about and implementing security measures. What is the dumbest shit I could do, how do I mitigate those things, and what am I most likely to actually do (security fatigue). Finding balance is difficult and there isnt one perfect solution. For example, I don't think OTP and password manager apps should be accessible from the device being used to login. But few people are willing to carry a separate device. So maybe you force a PIN or login to those apps. Stuff like that. I'm learning and thinking about this stuff frequently.

Bunker as I understand it doesn't prevent a user from losing their private key. In fact, you have to give it up to the application you're using. Limiting exposure to Amber (what I use) IS better than giving every app my nsec, but I still gave it to Amber and still have to secure it myself ultimately. A Bitcoin cold storage type system is my ideal solution. Store the key totally offline and only ever give it to a signer that is offline. And also have sub keys maybe that can be expired.

I'm also not even close to expert on the Nostr protocol, so I'm speaking from an amateur perspective. I would reference other people's input but I think I'm educated enough to spot potential low to intermediate security issues. Passkeys on the surface (as I'm learning more) don't seem right for me.

1. My main concern with all the passkey stuff is that I simply haven't taken the time to understand it. My aforementioned strategy has worked well for me, but I can see a case for having a better way. I prefer a password/user combo with a hardware 2FA device, or OTP if that isnt available. SMS 2FA shouldn't even exist anymore. I almost want to say that about email 2FA. OTP sort of edges on the same issue since it's usually either on a device with logged in applications or a password manager. Or even worse, stored in a password manager with the password/user combo (dumb).

2. The Nostr way could be that better way (it's simple), but it's still pretty easy to rekt yourself. You're using a single key pair for everything in perpetuity. You could tell people to not do this, but that defeats all the identity uses and they'll ignore you anyway.

I have some older notes where I discuss this (also to learn, I'm not an expert) with nostr:nprofile1qqsyawyrzrttfmv4cmtx5w2m85702kdct7hv3amfrkhagpdf9cz46mgpzemhxue69uhkummnw3ex2mrfw3jhxtn0wfnj7qg6waehxw309ac8junpd45kgtnxd9shg6npvchxxmmd9uq3kamnwvaz7tmjv4kxz7fwdehhxarjwpkx2cnn9e3k7mf0aur9gg and others.

Expand on what?

I've avoided them. Bitwarden generated username, password, and the best available 2FA is good for me if I can't have something as simple as Nostr. Although that has concerns at the moment too (for me)

that's not why? youtube, Twitter and several pages are still giving something that makes them still not want to leave.

I would say that it is similar to how the transition from TV to the Internet was, at first many still did not dare to try it because TV was still giving something that made one not let go and only people began to try other options once. that TV stopped giving them what kept them hooked.

the same will probably happen with centralized pages, there will come a point where people will no longer feel comfortable in those places and there it is likely that many will already want to try 'nostr' or other alternatives, only that time has not yet come.

Nostr growth feels stalled.

We keep hearing there are only XX,000 users and that number hasn’t moved much.

Lets take a step back and remember where we were 3 years ago. All the Nostr clients were dogshit compared to where they are today.

Sure, it was new and exciting, but it kinda sucked.

The fact that this turned into good clients and a robust base of adamant users who aren’t fucking going back is amazing.

Nostr was never going to take over legacy social media overnight.

We want it to, just like we want Bitcoin price action to stop being boring, but revolutionary technologies take time.

It’s incredible that we are where we are. Nostr is here to stay, and so are we.

I always find myself at crossroads when it comes to jobs vs building on my own and looking for advice here.

I have a debt that needs clearing. That debt is a result of my masters pursuit im currently in.

To clear the debt I am building something that will hopefully earn, while everyone else is in a job rush. I come from a tier 3 city with no with a mother to look after

Now the consequence of this is I dont get time to apply to jobs. And if this fails, ill be left with no job and a debt. Advice around me says aggressively hunt jobs, so does my brain, but my heart, i know im built to create and rides me with guilt when i dont.

What in this case should I do?