Issue with crypto miniapps: now your server is a target for hacks to steal your users crypto
Or, server admin steals your crypto
Any ideas?
Or, server admin steals your crypto
Any ideas?
Timeline
Post
Remote status
Context
5
Users must hold their own key. This is called Nostr
@alex that is true but you still have to try to prevent stupid users from getting drained
For the past 4 years we've been building systems specifically to master that
It depends on what you're trying to do, but if I made a Nostr v2 I'd use millisecond timestamps, string instead of number for kind, make all events replaceable/addressable but keep history of them. Tell me more about what you're creating.
Replies
2
@alex @sun a nostr-like that can withstand ai swarm attacks/nation-state level surveillance. a federation of nodes, with encrypted erasure-coded sharded/replicated posts so posts can't be taken down, IT-PIR so your reading and writing habits are invisible to even to server operators, mixnet with adaptive cover traffic to hide ips, rarimo/world-id (and maybe Anon Aadhaar/Privado ID) for humanness + RLNv2/merkle tree for rate limiting and no linkage of pseudonyms to your authority/attestation