Once a Nostr key leaks, how do you kill it permanently? We've been thinking about this — and we're not sure the protocol has an answer yet.

BigBrotr

Dead Keys: The Unsolved Problem of Marking Compromised Nostr Identities

Once a Nostr private key leaks, how do you mark the identity as dead — permanently, verifiably, and in a way the attacker cannot undo? We examine...

#nostr #security #protocol #nip

We analyzed 40M events archived by BigBrotr and found 16,000+ valid nsec keys published in plaintext. 90% republished by a single bot. The rest: users confusing nsec with npub, AI agents leaking credentials in logs.

BigBrotr

Uncovering Exposed Private Keys Across the Nostr Network

We searched 41 million Nostr events for private keys published in plaintext. After filtering out noise, 38 real accounts with over 21,000 combined ...

#nostr #security #bigbrotr

BigBrotr vs Pensieve — a technical deep dive into two open-source approaches to indexing Nostr. How do you ensure you're not missing events? How do you decide which relays to connect to? Same network, very different answers.

BigBrotr

BigBrotr vs Pensieve: Two Approaches to Indexing the Nostr Network

A deep technical comparison of two open-source projects that index the Nostr network — BigBrotr (Python/PostgreSQL relay observatory) and Pensiev...

#nostr #bigbrotr #pensieve

A fully NIP-66 compliant relay monitor in under 80 lines of Python. RTT, SSL, DNS, geolocation, ASN, HTTP headers — all running concurrently. You choose what to check, BigBrotr packages it into a kind 30166 event.

BigBrotr

Building a Nostr Relay Monitor with BigBrotr

There

#nostr #python #bigbrotr #nip66

Dumping every event from a Nostr relay should be simple. Now it is. Pick your filters, set a time window, async for. All events, in order, no gaps. If it stops, restart from where you left off.

BigBrotr

Streaming Events from Nostr Relays

Dumping every event from a Nostr relay should be simple — pick your filters, set a time window, iterate. With BigBrotr

#nostr #python #bigbrotr

🧵 Thread: The Trust Paradox (1/3) Nostr exists to eliminate trusted third parties. No company controls your identity. No server owns your content. No authority decides what you can say. But then you need tools to understand the network. Relay monitors. Analytics. Health checks. And suddenly you're back to trusting someone. "Trust our data. Trust our metrics. Trust us." That's a problem. #nostr #bitcoin #opensource #plebchain