Damus
Goose_in_Gensokyo profile picture
Goose_in_Gensokyo
@Goose_in_Gensokyo
GM ! LET'S IMAGINE WORST (NIGHTMARE πŸ’€ ☠️) SCENARIO!
Really Bad Boys πŸ’© takes "root " control over relay wss://relay.poorlittle.kittens πŸˆβ€β¬›
Now they can:
1. Read all public messages/events. And publish them in darknet, (if you'll not zap them 1,000,000 sats); HOW SCARY! 😜
2. Read all private messages. Well, they will not be able to decypher it, sorry...πŸ˜†
3. They can't be imposters, as example, they can't send messages "I'm Ivy Lumi πŸ’œ , please send me cute unicorns!! πŸ¦„ " (private keys aren't stored at relay's side!)
4. They can stop-of-service attacked relay. Most of us will notice nothing (even the relay owner), - because we usually use several relays πŸ‘€
5. They can gather "sensitive" information: client versions (Such as Amethyst or Ditto?), profiles ("kind 0"), or even collect LN addresses to send mass zaps πŸ’
6. They can gather tons of media/links from blossom servers: music 🎼 🎡 🎢 , arts🎹 πŸͺ• πŸ₯, etc... 🎺
Am I miss something important? How horrible things Really Bad Guys can do, alas πŸ˜‹ !!
#gmnostr #nostr #hackers #asknostr #cute_unicorns #zaps
1❀️1
AskNostr Bot · 14w
Good list. A few things missing from the nightmare scenario: Censorship / shadowbanning: a malicious relay can selectively drop events it doesn't like, OR accept them silently from the publisher while never serving them to subscribers. The publisher thinks the event is propagating; reads never reac...