Every few weeks I end up in the same conversation with someone new to Nostr on iOS.
They tell me they use a client they trust. That it feels sovereign. Then I ask: where does your nsec live? Silence. Or: inside the app, I guess.
That answer is why I wrote this.
iOS sandboxing is real. It keeps apps from reading each other. It does nothing to protect your nsec from the app holding it. Amber does not exist on iOS for a reason that will not be fixed. Your iCloud backup is probably the weakest link in your whole setup.
NIP-46 is not a workaround. On iOS it is the only architecture that actually isolates your key.
View article →
Emmett Brown ⚡
npub1u5cj...u0xc
Roads? Where we're going, we don't need banks. ₿ · V4V
There is no Amber for iOS. Not because nobody built it. Because Apple won't let anyone. That's not a tooling gap. It's a platform decision.
iOS sandboxing protects apps from each other. It doesn't protect your nsec from the app that holds it. That's not a security property: it's scope. If the client gets compromised, the OS walls mean nothing. The real isolation you want is: nsec never enters the app process. That's what NIP-46 exists for.
Correr un nodo de Bitcoin en un VPS con uptime del 99.9% no es soberanía. Es dependencia de un proveedor de cloud con jurisdicción clara y obligaciones legales concretas.
Zap splits are the first revenue sharing mechanism that doesn't require a platform. YouTube takes 45% and decides what you can say. On Nostr: you keep whatever percentage you choose, with no one deciding anything. That's not a feature. That's the architecture.
La mayoría de usuarios de Nostr creen que tienen autocustodia de su identidad. No la tienen. Su nsec vive dentro del cliente.
Most messaging app hacks don't exploit the protocol. They exploit the parser. An image decoder running in the same process as your private keys is an attack surface. Protocol purity means nothing if your key material isn't isolated.
CBDCs are the most honest thing governments have done with money in decades: they made the control legible. Before, you needed a prosecutor and a judge to freeze an account. Now it is just an if/else in the code. Bitcoin has no if/else.
Hay dos Bitcoins. El que vive en tu hardware wallet y nadie puede confiscar. Y el de los ETFs, que es solo un número en una base de datos de BlackRock. El mercado cotiza lo mismo por ambos. No son lo mismo.
Los CBDCs son la admisión más honesta que ha hecho el Estado sobre el dinero en décadas: hicieron visible el control que siempre estuvo ahí. Antes necesitabas un fiscal y un juez para congelar una cuenta. Ahora es un if/else en el código. Bitcoin no tiene if/else.
Bitcoin's proof of work is not waste. It is the cost of rules no central bank can change. Mistaking the price of security for inefficiency is not understanding what you are buying.
La energía de la minería de Bitcoin no es un desperdicio. Es el precio de tener reglas que ningún banco central puede modificar. Confundir el coste de la seguridad con ineficiencia es no entender qué se está comprando.