PSA: For #plebs playing around building with #nostr
You should treat all front end code (such as JavaScript) as INSECURE.
It can be manipulated or replaced in browser console by an attacker.
So any data sent to your back end server MUST be sanitized and verified.
Check the schnorr signatures before relying on event data.
That's why Nostr events are SIGNED!
Just contributed a NIP-98 authentication solution to the YEGHRO Nostr login plugin WordPress. If you use the plugin, upgrading to the latest version (1.5) is highly recommended for security.
I broke a tooth, and had to go to the dentist today to prepare it for a crown.
Amusingly (to me) the appointment was at 2:30 ("tooth hurty").
Now I'm sat with a numb mouth, feeling like an extra from the Godfather.
Anyhow, this unexpected expense and downtime prompted me to finally release some of my most useful WordPress plugins.
(I've been meaning to do it since about March).
I use these three WordPress plugins on pretty much every website I create.
I think you'll find them useful too.
I wanted to incentivize Bitcoin payments for my aMember sites, so I wrote a plugin that allows discount coupons to be tied to specific payment systems.
If you use aMember Pro, you can grab a copy of it here... and you'll save 20% using coupon "BTC2024" when you pay in Bitcoin 😉
Order here:
You can never tell what is going to upset or put off customers. Case in point, an email one of my clients received recently via their aMember site.
So I wrote an aMember plugin to make signup as user friendly as possible, while enhancing the security of the account...
It uses the Bitcoin BIP39 word list to generate simple to remember passwords with 33 bits of entropy (that's 8.5 trillion combinations). 🤓
It's in my Cogmentis aMember plugin store if you need it for your aMember site too.
I’m a there a way to use the BTCPay Server internal lightning node as the ⚡️wallet for a nostr client (eg via nwc)?
The BTCPay Nostr plugin seems to let you add an nwc string and make an external wallet the server ⚡️node.
But that’s the wrong way around.
I think I want a way to generate an nwc / lnhub or similar credential from BTCPay to use that in the Nostr client.
#asknostr @UNCLE ROCKSTAR