I found an old Nostr backup and imported 125M historical events into relay.ditto.pub. So if you ever lost something you might find it there. Also, Ditto now has an "export data" button in settings that downloads all of your events from relays and gives you a download file. You can also import to reupload to relays.

node_modules is a cancer. Crazy nodejs hasn't adopted pnpm's approach yet.

Nostr RPC is a much faster, much cheaper alternative to Tor. Your IP is visible to relay operators on both sides but they don't know what you're doing or why you're doing it.

I don't trust anyone who puts "human work" on their README. This is how you know they didn't do a security audit.

To clone YouTube, we would need 10 exabytes of disk space, or 420,000 x 24TB drives costing about $120 million.

It's easy to forget that most people in the world watch ads and don't try to block them.

Looks like Bluesky finally invented NIP-29

AT Protocol

The Atproto Spaces Alpha is Live - AT Protocol

Atproto Spaces, formerly known as “the permissioned data protocol,” is a new extension to atproto that enables non-public data. The alpha is no...

:POLICE: A critical security vuln was fixed in Ditto Android that would allow an attacker to steal your nsec by getting you to tap an evil URL. :wisp_sad: A new version has been released onto Zapstore and Google Play. UPDATE DITTO ANDROID IMMEDIATELY. :POLICE: :POLICE: :POLICE: Ditto on web and iOS are unaffected. The issue only affects Android because it was a problem in the Android link handler. People using Amber are unaffected by nsec theft but should upgrade anyway because the attack is still arbitrary code injection via evil URL. What does an evil URL look like? It contains JavaScript code inside of the URL. The path was not being escaped properly, so it could break out and run any script. The fixed version completely changes the way native code triggers UI navigation (event-driven) so we never inject JS code into the UI at all anymore. Huge shout out and thank you to @calle for connecting me to the team behind

V12

V12

V12 is your security agent for mission-critical code.

who discovered this vuln, and huge shout and and thank you to them for responsibly disclosing it to us. 🙏 They also discovered some other issues we patched in this release, but the evil URL is by far the worst.

People are playing with webxdc in Armada 👀

I'm feeling bullish on encryption and not because of privacy.

Spam testing Armada with @chad

Alex Gleason walks into a room. A power level is changed from Default to Moderator.

You know what's not offline right now? Nostr. View quoted note →

I'm feeling vindicated in my decision to build a silent payment wallet over running a server.

What if your community had a fund that anybody could pay into. Any member could submit expenses, and any staff member could pay them out. A small Bitcoin OpenCollective right inside of your community.

It's no surprise Lightning software is full of vulnerabilities and getting taken offline. This is exactly the type of fragile, complex infrastructure we've been fighting against building Nostr. View quoted note →