Damus

Recent Notes

Ronin profile picture
Also not a big fan of WoT idea but the goal is if your seeing a lot of spam from bots in comments and stuff you currently have no way to block that, with WoT you can set to hide comments from WoT below X level. Ofc some valid new npubs can get hit.
Ronin profile picture
There is no algo, there is nothing baked in to boost engagement, there is no incentive anywhere for it, Nostr is anti engagement by default. Embrace it. Embrace the boredom.
Ronin profile picture
So, who's gonna vibe code the dating site on Nostr for the whites dating site refugees? lol
Ronin profile picture
about their caching setup I only know about their caching server, if it's this I don't think it relates here. nsec security I don't call it a Nostr best practice, I call just security best practices that applies to many things, nostr just offers different specs with different tradeoffs. about the QA I agree, about the honeypot ok I get what you mean and it related to QA as well and yes the attack vector is bigger than amber, but to do all these they would just be building another Amber, and these kind of attack vectors are in every app where you can paste your nsec or generate keys. Your arguments makes sense but I don't think it's like bad practice, or vendor lock-in I think they implemented nsecbunker integrated in the app for convenience and I think the tradeoffs are acceptable, I don't know if they support any bunker or amber though, if they did it would be better.
Ronin profile picture
let me be clear on my arguments. 1 - I don't belive it's vendor lock in because it follows the nip spec like i said prev. . 2 - we are talking about nsecbunker of primal, amber (that you mentioned) nsecbunker works the same way, I think nsecbunker in general is the best option to sign events across web and mobile simultaneously. 3- I don't think it's an honeypot bc they follow spec and your keys don't leave the signer. 4-Nostr best practices in development is to follow nip spec, regarding security of keys it's the user choice according to is preference and needs from the most secure options to the less secure but more convinient. To wrap, nsecbunker is a valid option and primal follows the spec, and to be clear I don't use primal at all.
Ronin profile picture
To use nsecbunker(remote signer) in amber you need internet access. offline you can sign events in your mobile. My point is if you want a single point where you hold you keys and can sign mobile and web nsecbunker is the best option and it needs internet access.