Damus
fiatjaf profile picture
fiatjaf
@fiatjaf
Please do not accept invalid events in your client. Do not accept non-integer "created_at" values, do not accept non-string-array on "tags", do not accept bech32-encoded keys as tag values. Every time you do that, Nostr dies a little.
For more information on how this kills Nostr, read https://fiatjaf.com/27598e6f.html
2448❤️61🤙29
gandlaf21 · 154w
isn't that something the relays shouldn't accept either?
fiatjaf · 154w
For all the people who are eager to reply that Nostr should be able to handle bad practices otherwise it is already dead, or to say that "please" won't work, or these sort of comments, I must tell you that Nostr is not "antifragile", it is indeed very fragile, as all open protocols (including Bitcoi...
denis2342 · 154w
error fetching invoice
The Prestige Group Network · 154w
🫱🏼‍🫲🏽
Hafeez · 154w
Your article doesn’t really capture how bad it gets. It assumes good intent - but there is an adversarial scenario that comes about the same way. I have bad memories from the browser wars, where ms did the same thing with IE. The problem is you need one well funded party with malintent to cause co...
unclebobmartin · 154w
More examples are: kind:0 metadata fields. relay formats, REQ limits and options, and relay URL formats. It may be time for us to create a NIP working group whose task it is to evaluate all the NIP PRs, accept or deny them, and communicate to client devs in some more organized fashion. >From: fi...
EretzIsrael · 154w
The question is? How to drop events? I'm not quite sure, I'll check, if there is such a thing in nostr-relay-rs.
Michoe · 154w
Maybe there should be a nostr-core, like bitcoin core, with the recent accepted consensus.
Nicolas ₿ ⚡️ 🇦🇷🧉🤙💜 · 154w
I queried many relays and found that some tags were stored with incompatible pub keys either because they were stored as bech32 or because they were just wrong. I didn’t know it would be a problem like that but I was surprised that this was happening
Combative Fly · 154w
Agree, the Internet was built on the premise of: be liberal with what you receive, and conservative with what you send.
elsirion · 154w
Having test vectors people can easily test against and maybe a more machine readable spec (e.g. JSON schema) would help with that. My experience with Nostr and LNURL has been one of reverse-engineering and trying to understand the author's intentions so far (human language sucks for specs). There's...