In Alby, when first signing a Nostr event for a new domain, it offers some beginner-friendly options for how paranoid you want to be about signing. One of them is "Let's be reasonable".
Apparently, someone thought it's reasonable to allow arbitrary apps to auto-sign kind 1 events, which I find entirely unreasonable. So, if you also use that extension for Nostr, and you also don't want some vibecoded thing to auto-post to your timeline, here's your warning.
Apparently, someone thought it's reasonable to allow arbitrary apps to auto-sign kind 1 events, which I find entirely unreasonable. So, if you also use that extension for Nostr, and you also don't want some vibecoded thing to auto-post to your timeline, here's your warning.