Avatar
Shawn
c7eda660a6bc8270530e82b4a7712acdea2e31dc0a56f8dc955ac009efd97c86
Working toward a future built on Bitcoin. Helping founders on the same mission. Hosting trustrevolution.co.

Went for an ultrasound on my leg today. High ankle sprain a few weeks back; lingering soft tissue stuff.

The provider:

1. Misspelled my first, middle, and last name.

2. Lost my doc's req. Twice.

3. Had me scheduled for two, incorrect scans.

4. Attached some other guy's chart to my record.

HIPAA. American healthcare. Lol.

Strap in. Save in Bitcoin. nostr:note1jna246p897ah6e5d2sycpc5dc3y87chdkkmprcztyg6xwmvkp2lq43wwfx

nascent nostr > fumbling fediverse

Replying to Avatar hodlbod

Nostr will fail to the extent that people can't tell an impersonator from the real thing. The number of reports I get about my impersonator indicates to me that nostr is failing. But it doesn't have to be this way! Web of trust fixes this.

Let's play a game of "spot the impersonator". I created a fresh impersonator account with a valid NIP 05 from nostrplebs and all the same profile data. I didn't bother to clone my notes or create a bunch of sock puppet followers, but that could easily be done, and would improve the resemblance.

Coracle:

Pretty good if I do say so myself. Social trust is shown in two separate ways: web of trust indicator and followers tab (although followers is not complete or sybil resistant).

0xchat:

Exactly the same, other than NIP 05 address, which I don't consider any sort of validation at all. This is a classic phishing maneuver, and recently allowed nostr:nprofile1qyfhwumn8ghj7am0wsh82arcduhx7mn99uqjzamnwvaz7tmjv4kxz7fwwd5xzamw09jkzem9wghxxmmd9a5kucn00qqjqamnwvaz7tmjv4kxz7fwwd5xzamw09jkzem9wghxxmmd9a3ksct5qy38wumn8ghj7un9d3shjtnndpshwmnev4skwetj9e3k7mf0da6hgcn00qqjxamnwvaz7tmjv4kxz7fwwd5xzamw09jkzem9wghxxmmd9ac8y6tkv96x2qpqclk6vc9xhjp8q5cws262wuf2eh4zuvwupft03hy4ttqqnm7e0jrqlg4lcf's impersonator to trick some people.

Yakihonne:

Some social indicators are shown, but are not sybil resistant. They're also down the page a bit, and might not be noticed by users.

Jumble:

No social proof indicated at all — the tabs at the bottom can easily be faked by the impersonator.

Nostter:

No social proof, and failed to validate the NIP 05 for the real user.

Nostrudel:

Nostrudel does something original in showing the public key color. But how often are you going to memorize a user's color? I'd argue this is even worse than nothing because it obscures the NIP 05, which _might_ tip you off.

Iris:

Iris shows wot-vetted "known followers", which is good. In other places, a wot-based check mark is shown next to user avatars. This should probably be added to the profile page too, but still, pretty good.

Amethyst:

Amethyst shows some social proof, but it's hard to tell exactly what those profile pictures mean.

Primal:

Like yakihonne, social proof is visible, but not sybil-resistant.

Let's take a look at search now. Some clients do a much better job at this, some do a MUCH worse job.

Coracle:

WOT indicators, correct sorting, complete results. Arguably, the impersonators should be filtered out entirely, but I personally prefer to have them included.

Jumble:

Same thing, minus WOT indicators. Not bad.

Nostrudel:

It's a pass, but I'm not sure if duplicates are filtered out on purpose or not. The check marks indicate NIP 05 validation, not wot validation.

Yakihonne:

Only shows the legit version, along with a badge (I'm unsure if it's NIP 05 or something else). Pretty good.

Iris:

Very limited results, WOT-based check, pretty good.

Primal:

Eliminates impersonators, show follower count, pretty good (though not sybil resistant in all cases).

The winners are Iris and Coracle for web of trust indicators, and Primal and Yakihonne in the "global view of the network" category. I'd love to see this get better though, and not just because I am now famous enough to have an impersonator. WOT calculations are low-hanging fruit, especially with the vertex DVM by nostr:nprofile1qythwumn8ghj7un9d3shjtnswf5k6ctv9ehx2ap0qyt8wumn8ghj7ct4w35zumn0wd68yvfwvdhk6tcpzemhxue69uhk6mr9dd6juun9v9k8jtnvdakz7qg4waehxw309aex2mrp0yhxgctdw4eju6t09uq3wamnwvaz7tmjv4kxz7fwdehhxarj9e3xzmny9uqzpa5rapcrtaadfazwpwvvl0v4xlskg4df9nfcem7yevcaka2h7hhjm9zju5 around. Getting this right is a core value proposition of nostr and is worth the effort.

First time I'm hearing of an impersonator.

Replying to Avatar GrapheneOS

nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqwq8aszhx3cqfa5af0j2z6fnwxhu2fg3xcuy6m3ph4ut2hrg957fszth9ey nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpq58x7tu26f0uvm7mkzavp95xj99pav7pqrh7f64ldm62f920mcklqek0e2v GrapheneOS is working with a major Android OEM to help them produce devices meeting our requirements which may be sold with GrapheneOS officially. We hope to have this launched in 2026 or 2027. Pixels are currently the only devices meeting our hardware security and other requirements which are listed at https://grapheneos.org/faq#future-devices but there will be other options.

gm, good people. ☕ Which one of you is this?

It do be like that, don't it?

When you know you're over the target. 🎯 nostr:note1x3ch7fv77pfc5cluulyy8jl8328z8tgq9tra6l9flr9fj35xyxfsuxl3e4

It is not. I use Tailscale a/ Mullvad exit nodes. LAN traffic allowed.

Seems highly unstable, so I'll stick with Termux until they smooth it out. Cheers.

Replying to Avatar GrapheneOS

nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqclk6vc9xhjp8q5cws262wuf2eh4zuvwupft03hy4ttqqnm7e0jrqdasl9j nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpq7kyn2rjwfegmr3ff3gwtsllksmkguphqnnhx9snaht4sft7c8esqv3ev94 Note the Terminal app currently has a compatibility issue with VPNs in the same profile. You can work around this by putting it in a dedicated profile without a VPN since profiles each have their own VPN configuration. If you're interested in this area, you should try it out.

Unlike stock OS, it can be used to run GUI applications or whole GUI environments already.

I just tried it under a new, clean profile with no VPN. Whereas, in my owner profile, I could install and run, but it would crash on ’apt upgrade’. In this new profile, it crashes on install. 5 times in a row.

Look closely. The NIP-05 domain is misspelled, and they were clever enough to create a redirect to the real domain.

There's also the scam DM in my inbox.

A few high profile npubs have been duped. Be aware that this is a scammer:

npub18q5wtudjdcewwrc85t5wxegch39mddxfd38lswnyny3naj202zaqgtfqt9

Are breaches down? Are phishing scams down? Do you feel safer, anon?

When they measure activity, not outcomes, you know it's a racket.

"The global GDPR services market size, having reached USD 3 Billion in 2024, is poised for significant growth, projected to hit USD 16.8 Billion by 2033."

https://finance.yahoo.com/news/gdpr-services-market-report-2025-081100966.html

From what I can tell, it's only F-droid packages. For you?

Thanks. Seems highly unlikely that all these packages/repos would error at the same time.

Obtainium is throwing this error today. Anyone else seeing this? #asknostr

The former. Primal made it easy to follow them.

And yes, marketing matters. A lot.

On my nostr wishlist: consistent, inline rendering of link previews/embeds across clients. Some do, some don't, and some mix and march. Makes for an erratic reading experience.

I've emancipated a large chunk of my ebooks from Kindle and moved them to Readest. 80% of the functionality retained, with 0% of the annoying sales tactics.

https://readest.com/

*Windows 98 sound*

"Apple’s App Store policies disproportionately favor the surveillance capitalism business model employed by companies like Meta and Google and therefore entrench an online business model that routinely violates consumers’ personal privacy.

[…]

Companies that monetize user data in exchange for 'free' services that abuse your privacy aren’t affected by [the 30% cut from payments], as they don’t process payments through the App Store."

https://proton.me/blog/apple-lawsuit

You can just donate sats to annas-archive.org. 📖

High praise. This is what I'm working to do. 🙏 nostr:note1xtjnnwald9h2v5mj8vevmcut83uzsxfcx6wa77uwqv780vvskyjsyd2tqk