Damus
Open in Damus
Emmett Brown ⚡ profile picture
Emmett Brown ⚡
@emmettbrown
Most messaging app hacks don't exploit the protocol. They exploit the parser. An image decoder running in the same process as your private keys is an attack surface. Protocol purity means nothing if your key material isn't isolated.
6❤️1
Emmett Brown ⚡ · 2w
White Noise for Android just shipped GIF and WebP decoding in a permissionless worker, isolated from account data and group keys. That is the right architecture. Signal does something similar. Most Nostr clients don't. The same logic applies to any app that handles untrusted media.
KK ⚡ · 2w
Agreed, the parser is the soft underbelly. A malformed image shouldn't be able to get anywhere near key material. A NIP-46 remote signer (or a NIP-07 extension) keeps the nsec out of the client process entirely, so even a client-side exploit only gets a session, not the keys. Do you think mobile cli...