Avatar
jleger2023
597b42de56a9e0c19ee2d0cde5797dd58d48ce8dd25c732b4c873af11161f9fd
#Bitcoin 25+ year dev NostrGram (Nostr client): https://nostrgram.co/ YouTube: https://youtube.com/@regardingbitcoin Substack: https://jonathanleger.substack.com

Just pushed a small NostrGram update that parses links in notes before hashtags. I've seen a couple of times where somebody will put a hashtag in a note followed immediately by a link without any spacing in between. This caused the link not to get parsed and (for instance) the linked image not to show. Now the image will get shown since the link gets parsed out before the hashtag. Refresh for the update.

Pushing an update in a second that parses links before hashtags so if somebody doesn't put any spacing it will still work.

That's because there's no space between the hashtag and the link so it's not getting parsed out.

Have you tried to use NostrGram without the web sockets? For the few people that can't get NG to load this link usually fixes the problem: https://nostrgram.co/?nows=1

How would it be different than a client or solve the issue being stated (not seeing that many of your posts)? It seems to me that Nostr conversations (notes) have a lifetime of 30 minutes to 1 hour max. After that they rarely get seen or engaged with.

I don't think that's a problem. It mirrors the real world and conversations we have with people. Our conversations don't linger in the air for days so anyone else can walk into them and pick them up. It's an in-the-moment (or, in Nostr terms, Event-driven) model.

For those people you absolutely don't want to miss, NostrGram (for instance) allows you to create custom lists. You could just put the "most important" people into a list and load that list so you don't miss anything.

I'm certainly open to any other ideas though. I'm all for anything that makes the user experience better.

.. and what if it was all done intentionally for that purpose?

***WHY USING A NIP07 EXTENSION FOR BROWSER NOSTR APPS IS MORE SECURE***

*I just explained Nip07 to someone and figured if one person wanted to understand how the extensions work, others would also. This is an expanded explanation.*

**First, let me illustrate:** imagine that somebody wanted to rob your house and tried to pick your pocket for the key -- but you didn't have the key on you because it was safely stored in a locked place the robber cannot access. The robber would be out of luck.

The Nip07 extension is the safe that the web site stores your private Nostr key so a hacker cannot compromise your account.

**Now for the technicals (but not too technical):**

Nos2x, Alby and any other Nip07 extension injects an object (script) into the web page that allows the browser to ask the extension to sign events rather than having to sign them within the page itself.

That is, each time you want to post a note or Like a note, it hands the request to the extension which "signs" the event with the key that only the extension has access to. Unless the event is properly signed the relay will not accept it because it hasn't been verified as coming from your account.

This is more secure because if the website got hacked and your private key was visible to the page (which it has to be if the page itself is doing the signing), then the hacker would have access to your private key and could use it for nefarious purposes. With the extension holding your key, and with the website unable to access any data stored by the extension, it's much more protected.

Even if the hacker used the extension to sign some events while you were on the page, the hacker still does not have access to your key and you could stop using that website without compromising the security of your key.

Of course, you have to trust the creator of the extension not to use your private key and to handle it securely, but it's certainly much better than the website itself holding the key.

Native phone apps are already much more secure in this regard, so they don't need an extension. It's very difficult to "hack" a phone app and inject code into it. The app stores scan for viruses and do pattern matching and such to make sure apps are "safe". Websites do not have these security measures generally. You still need to trust the app maker, but again, it's much safer than a website handling your key.

**So always use a Nip07 extension if you're using a web-based Nostr client.**

Nos2x (like Alby or any other Nip07 extension) injects an object (script) into the web page that allows the browser to ask the extension to sign events rather than having to sign them within the page itself.

This is more secure because if the website got hacked and your private key was visible to the page (through a variable of some kind, which it would have to be if the web page itself was signing the events), then the hacker would have access to your private key and could use it for nefarious purposes. With the extension holding your key, and with the website unable to access any data stored by the extension, it's much more protected.

Even if the hacker used the extension to sign some events while you were on the page, the hacker still does not have access to your key and you could stop using that website without compromising the security of your key.

Of course, you have to trust the creator of the extension not to use your private key.

Replying to Avatar ⚡A C V⚡

Nice! More and more people realizing what it is.

Maybe 🤮 should be placed after it for added emphasis lol

Maybe I should highlight the word "fiat" in an ugly green color and put the 🤮 emoji after it automatically in NostrGram 😆

I love that "fiat" is used as pejorative by #Bitcoin folk. Soon the rest of the world will use it that way too.