it's about to implode economically, and the timeline is way compressed, all of it has passed to here within like 25 years, from relative decentralization and sovereignty.
the leaders of the centralization effort are clearly the WEF and this nest of saturnian baby eating blood suckers.
some people are deluded into thinking that russia and china are not also compromised, the network spans the globe. mass slaughter is just around the corner.
U do understand that means the assets of the entire world get devalued right ?
https://x.com/santiagoaufund/status/1720915858623529469?s=46&t=2CUn6kfonyumjRZru-DDQA
do you pay the subscription to that site?
the noise level on nostr is rising every day.
the major nostr clients are favouring and promoting certain accounts.
these accounts become more followed and engaged with
these accounts then become "popular" and infect everyones feed with noise.
the use of trending algorithms is inducing other clients to favour the ones being favoured by other clients.
this is a dark pattern that is the root of how social media is orchestrated to propagate an agenda.
i'm purging my follows of those who frequently engage with these popular accounts, and focusing on building my network at the edges where i'm more likely to find original and valuable and authentic users.
scammers are attaching themselves to these "popular" accounts as well, and the noise from them is also increasing.
there is a problem brewing in nostr that is going to be very hard to avoid without intense vigilance.
it will just be virtually another twitter in 6 months time the way things are going.
many things don't wash off with half an hour of soap.
maybe if you treat it like grease and use mechanics sandy soap and remove the tainted skin cells the smell will abate.
other than that, open the damn windows.
wrap the weed in another bag too. better still, put it inside a glass jar.
when i allow DRM content to be displayed, and i have disabled display it, i get a nag on firefox, and i can't take screenshots of anything on my computer at all, and i can't upload png files, they all end up as blank colour boxes, same as the screenshots.
this means the software is tampering with my X server memory access, which is essentially hijacking my computer.
https://en.wikipedia.org/wiki/Digital_rights_management
my god, has everyone forgotten about this scam already?
with most video hosts, it's either ads, or DRM.
we want a third way.
the more i see replies to the most popular, promoted users, who have popularity because clients are being paid to promote them, the less i want to look at my feed.
resuming the cull and chasing up on all the better quality humans in the lower range of my follow WoT scores.
i can't believe how many of you people are swallowing this narrative about the genius of certain nostr users who are literally proposing to create NIPs that can't be implemented without custodying nsec keys.
i doubt he's going to like the requirement of caching people's nsec's or forcing a key derivation delegation scheme that complicates everything.
maybe the coordinated media programming system to get the drones to squeal at it.
you already touched it tho. that's your dirty fingers.
i already reminded everyone 2 days ago about the date of today, but anyhow:
It doesn’t silo them.
Maybe watch nostr:npub1wmr34t36fy03m8hvgl96zl3znndyzyaqhwmwdtshwmtkg03fetaqhjg240 fantastic keynote to get context on why this type of flow is important.
how does it work without giving away your nsec or requiring a complex key delegation system and database?
on the second flight I finished writing the implementation (and modifications to NIP-46) to make the following possible:
1. Alice goes to App A (e.g. Coracle) -- she clicks "create account" and gets a NIP-05 "alice@somesite.com". She uses Coracle as she normally would.
2. Alice goes to App B (e.g. Primal) -- she clicks "login" and types in "alice@somesite.com". A popup comes up and asks Alice if she wants to authorize this application to access her account. In an advanced setting She can scope down what the application can do (e.g. only create short notes but don't change the profile data)
At no point is there any mention of nsec, npub, keys, NIP-07, nsecbunker. Nothing. It just works.
cc nostr:npub1r0rs5q2gk0e3dk3nlc7gnu378ec6cnlenqp8a3cjhyzu6f8k5sgs4sq9ac nostr:npub16c0nh3dnadzqpm76uctf5hqhe2lny344zsmpm6feee9p5rdxaa9q586nvr nostr:npub1wmr34t36fy03m8hvgl96zl3znndyzyaqhwmwdtshwmtkg03fetaqhjg240
how can a remote third party who doesn't have your nsec sign on your behalf?
it's literally a custodying scheme.
first of all, it requires a keychain system like keybase to implement, he hasn't mentioned that.
second, the first implementation will be remote sites holding your NSEC.
third, pablo is not helping anyone with this idea, except VCs
on the second flight I finished writing the implementation (and modifications to NIP-46) to make the following possible:
1. Alice goes to App A (e.g. Coracle) -- she clicks "create account" and gets a NIP-05 "alice@somesite.com". She uses Coracle as she normally would.
2. Alice goes to App B (e.g. Primal) -- she clicks "login" and types in "alice@somesite.com". A popup comes up and asks Alice if she wants to authorize this application to access her account. In an advanced setting She can scope down what the application can do (e.g. only create short notes but don't change the profile data)
At no point is there any mention of nsec, npub, keys, NIP-07, nsecbunker. Nothing. It just works.
cc nostr:npub1r0rs5q2gk0e3dk3nlc7gnu378ec6cnlenqp8a3cjhyzu6f8k5sgs4sq9ac nostr:npub16c0nh3dnadzqpm76uctf5hqhe2lny344zsmpm6feee9p5rdxaa9q586nvr nostr:npub1wmr34t36fy03m8hvgl96zl3znndyzyaqhwmwdtshwmtkg03fetaqhjg240
this is effectively OAUTH on a system that already has authentication using elliptic curves.
another brick in the wall of centralisation of nostr.
i doubt that it's going to get support from anyone not wanting to silo their userbase.
would be cool if it randomly selected from all of the liars
it's asking for me to unlock a keychain, i assumed it wants to access a private repository maybe.
i know there was similar exploits done to tiny, far flung dependencies in NPM in the past maybe a similar attack.
i've set them back to work and now i just have link previews disabled, but images and gifs are loading like normal.
i want to run a dufflepud instance but when i run 'poetry install' it asks me to unlock my kde wallet and i never put a password on said key anyway, and i'm very puzzled why it picks the kde keychain when i have seahorse and keepassxc configured to do the gnome keychain.
would be cool to run the image cache myself too...
gonna try and figure these things out, there might be a way i can bundle them up and have them run in a docker... well, not high priority issue but still, a docker to run all the coracle.social pieces without accessing the web directly would be cool nostr:nprofile1qqsf03c2gsmx5ef4c9zmxvlew04gdh7u94afnknp33qvv3c94kvwxgspz4mhxue69uhhyetvv9ujuerpd46hxtnfduhsz9rhwden5te0wfjkcctev93xcefwdaexwtcpr3mhxue69uhkx6rjd9ehgurfd3kzumn0wd68yvfwvdhk6tctty609 (just in case it's an easy question to answer, otherwise, no problem).