⚠️Nostr practical security — attack vulnerabilities ⚠️ Researchers’ quote: " Our results on Nostr show that their use of cryptographic technologies is simple and immature, showing a sharp difference from the modern messaging applications that the research community has scrutinised. We think there is a significant lack of understanding on the secure design and analysis of distributed SNSs: what security property should be set, and what about the security of popular growing services other than Nostr, such as Mastodon and BlueSky? " A new research paper (Aug 2025) analysed Nostr and found basic cryptographic and design weaknesses that allow attackers to abuse the protocol in ways that real users and services should be concerned about. 👉In plain terms: attackers can trick clients and servers, steal funds or impersonate users in practical scenarios unless fixes are applied. 👉Key impacts everyone must know 1) Financial risk — attackers can hijack or manipulate keys or requests, causing loss of funds (wallet integrations, invoice relays, LN payflows). 2) Account and reputation risk — impersonation and message forgery can damage user identity, enable scams, or undermine trust models. 3) Ecosystem availability and privacy risk — attacks can de-anonymise users or flood/poison relays, degrading service and exposing metadata. 👉Call to action for developers and users - Developers: audit signing and verification flows, wallet integrations, relay filtering and threat models; prioritise fixes for key handling and message-authentication weaknesses. - Users: assume higher risk for money-related actions; avoid new integrations until maintainers publish mitigations; verify payments and identity out-of-band. Looping in relevant parties below. Regardless of whether the source is trustworthy, the attacks described are worth investigating. @fiatjaf @Vitor Pamplona @Damus @Sedd Link to the research listing (paper referenced): 👉 https://eprint.iacr.org/2025/1459.pdf #asknostr #plebchain #plebs #nostr View quoted note →

you cannot demand freedom if it "only" applies to you. that's not freedom, that is entitlement. freedom comes with responsibility and if you cannot fight for it then you cannot demand it. if you cannot bear the responsiblity then it will be taken from you.

Revenge can cuse you illness. Your revenge and ill intent towards others will only tear you apart. You may feel the thrill of it, but nothing will come of it other than void and emptiness inside. External gratification will only eat away at your life. At the end of it, your hate will not go away but will slowly eat you from the inside into resentment until nothing is left of you. You may think you are doing it for a greater cause, but be sure you are not being manipulated and misguided into believing that one day you will be healed. Whatever learning you seek, harming others—even in thought—can turn on you in the disguise of illness. Do not wish on others what you do not want done to you. Be mindful of your thoughts. 🫂

you cannot experience what you don't believe ☺️

" I love you". When was the last time you said those precious phrase to someone you care? And when was the last time you regretted for not saying it until they moved on from this life? Don't let each day pass by without saying your true feelings to someone you care. Let them hear it and let them see it. That you owe it to them and to yourself. Have a blissful day my dear readers!🫂☺️

PSA: #nostr tribe if you want to explore nostr under the hood without getting too technical, the below case study is very insightful. 👉

Exploring the Nostr Ecosystem: A Study of Decentralization and Resilience

Two Key Challenges that the paper highlighted: 1. Post redudancy which causes a lot of resource overhead esp storage. 2. Duplicated Retrieval which causing download traffic wastage. 3. Lack of financial funding for relay operations The paper proposed solution to help optimised nostr operations and availability. I am curious if anyone has seen the paper or experienced the challenges the paper highted? and if the solution esp the pseudo algorighm are realistic in productions? Looping you in for thoughts? ☺️ thanks! 🫂 @ChipTuner @Vitor Pamplona @Sedd @The Fishcake (nostr.build) View quoted note →

if one thing I want you to take away today is the message from this video 👇 👉 "your thoughts and your emotions have frequency" so be mindful what you transmit. 👉 "the universe always gives back a thousand fold" even if you do not feel it. View quoted note →

when social media becomes toxic? - it becomes your identity. - addicted to the engagement, likes and attention — dopamine hit. - your public persona hinders your growth. - your life revolves around the attention and approval of others. - it becomes clique; you feel the need to conform to a certain community or ideology at the expense of yourself. - you second‑guess whether your virtual community approves of your behaviour. - your self‑worth is tied to feedback from the outside world.

which version of you is showing up today? can you rise above the noise and see beyond the façade? people will always have something to say regardless of what you do or what your background. Stepping into the public space is an occupational hazard, so "make it worth the while" and never be apologetic for how far you've come. Be true to yourself! 🫂