jbnevin
6 months ago

New in 1.3:
- Removed some dead code - declarations for unused variables
- Better nesting and tabbing, Alt-4 now works in Notepad++
- Optimized a DOM clearing loop that was taking at least one unnecessary action, IIUC
- Fixed potential memory leak issue in lightbox function
- Images may load more reliably on slower devices
- Reuse existing websocket connections to get usernames rather than create new
- Removed duplicate css declarations
- Alert at top of nooblanding text updated and renders more nicely than it really did earlier
- Soft whitelist for URLs: Links all render, most common are labeled, otherwise say [unknown web]
- Stricter event / note check, only shows strictly formatted notes (size, type, hex, timestamp, tag validation)
- Only checks for images at nostr.build, rather than only rendering them if they are from nostr.build (whoops)
- Even display of date/time
Bugs that still exist:
- Code comments are AI generated, some may not be relevant, some more may be needed to be added by human, and some (most) are commenting on code that I don't understand well enough to audit :D
Best Practices Improvements:
- Ask AI to further help me optimize and enhance security / remove vulnerabilities
- rearrange code blocks to convention / sensible order
- implement actual cryptographic schnorr signature verification
- outbox model
- Contributors much smarter than me that can tell me how I or AI has bungled the code, help with convention, sanitize, reduce vulnerabilities, optimize the code, etc
Enhancements planned:
- Ability to click on note to see it on njump.me
- 'See whole conversation' button on each note… linking to one of a set of random web clients that displays conversations well
- clicking 'just go' with a feed already there, and with the same settings, should only load new notes without disturbing the reading order. right now it's refreshing the whole page.
- see most zapped posts (with explain about what zaps are) possibly call it 'most popular' or 'trending' and then alert at top of page explains proof of work stored as value vs gamable fiat. Fetch posts until 50 that have zaps are found, and then sort them by amount zapped? Not on slow connection mode
- Spoiler Alert! … text 'Self sovereignty means hosting your node and owning your keys… learn how now..' what's hilarious about this is I don't know how to do this yet.
- Secondary options for user to find npub/follows and relays aside from nostr.directory and nostr.watch
- Options to choose variables, # of notes to fetch or since when
- Instead of repeating messages in the debugger log, keep a count next to it (?) of # of times, for instance, images or notes were rejected
- Securely fetch thumbnails or any other previews that are possible without increasing attack surface
- Add to homescreen / desktop / install app / pwa
- lite.noobstr.me full.noobstr.me ?
Questions:
- Hosting considerations?
- Who to talk to about getting this listed at places like 



See an example of what gets posted on NOSTR in one click!
Intuitive onboarding website that functions as a basic read-only client for NOSTR.
Q: "What is NOSTR?" A: "I dunno. Look @ noobstr.me and see."
New in 1.2:
- Event signature validation
- Comprehensive NIP-11 relay information checks
- Content length protection to avoid memory crashes / performance issues
- No longer renders note at all if it includes a malformed url
- Fixed lightbox memory leak vulnerability
- Improved websocket error handling
- DOM updates more efficient
- Lazy load debugger console
- URL, nostr identifier, protocol validation / sanitization
Bugs that still exist:
- Code comments are AI generated, some may not be relevant, some more may be needed to be added by human, and some (most) are commenting on code that I don't understand well enough to audit :D
Best Practices Improvements:
- Ask AI to further help me optimize and enhance security / remove vulnerabilities
- rearrange code blocks to convention / sensible order
- implement actual cryptographic schnorr signature verification
- outbox model
- Contributors much smarter than me that can tell me how I or AI has bungled the code, help with convention, sanitize, reduce vulnerabilities, optimize the code, etc
Enhancements planned:
- Ability to click on note to see it on njump.me
- 'See whole conversation' button on each note… linking to one of a set of random web clients that displays conversations well
- clicking 'just go' with a feed already there, and with the same settings, should only load new notes without disturbing the reading order. right now it's refreshing the whole page.
- see most zapped posts (with explain about what zaps are) possibly call it 'most popular' or 'trending' and then alert at top of page explains proof of work stored as value vs gamable fiat. Fetch posts until 50 that have zaps are found, and then sort them by amount zapped? Not on slow connection mode
- Spoiler Alert! … text 'Self sovereignty means hosting your node and owning your keys… learn how now..'
- Secondary options for user to find npub/follows and relays aside from nostr.directory and nostr.watch
- Settings menu to choose variables, how many notes to fetch or since when
Questions:
- Hosting considerations?
- Who to talk to about getting this listed at places like 








Approximately my 10th day of practicing only this shot (the longest that can be executed with normal stance and bridge) without applying new chalk (with a decent tip, it won't miscue so long as contact is center center.)
No matter what is happening fundamentally, or what is going through my mind, if the shot works this way, everything is fine.
In other words, leveraging cause and effect, repitition, and observation to force fundamental mechanics into place.