Damus

Recent Notes

The Daniel 🖖 · 3h
Not the half I like to spend my time in. 😁
note1wqty8...
Technical Debt profile picture
I don’t know the specifics that make IPFS slow, but I’m skeptical it’s something that could be fixed easily without some sort of hairy drawback (otherwise it would’ve been fixed upstream already).
Your proposed solution would help offload blossom servers but not propagating notes themselves.

I don’t think it’s fair to say “this is just a side channel” to deflect issues because it opens a terrible precedent, why should a dev support the “bad” transport instead of just supporting the canonical one?

Don’t get me wrong, if you look at my past notes you will know I’ve been tooting the P2P horn, the problems with tying features to specific relays etc. but I also appreciate the pragmatic approach nostr devs have taken to get something off the ground.

My point is, I think we should learn from past experiences (also see Zeronet) so we don’t repeat the same mistakes.
note1h3zzq...
Technical Debt profile picture
Regarding auto expiration of messages, I believe it should be optional (we probably should have a service that splits the costs of hosting a group between the members, whatever).

Message persistence is one of the reasons people choose Telegram over WhatsApp.
note1ld2qs...
Technical Debt profile picture
DHT is not a silver bullet.

Torrents get spam attacks, CJDNS routing tables have grown enough to require offloading the routing to dedicated nodes (this scaling problem inspired the creation of the Yggdrasil network, which our friend @FIPS shares some similarities, namely the spanning tree routing algorithm), IPFS supposedly addresses the vulnerability issues but discoverability of “unpopular” content is slower than finding whatever most of the nodes are already hosting.

Bottom line is, resiliency is hard.
Nuh · 6h
I am basically making the point that people don't actually need cold emails at all. You can have a situation where you only get messages from people you shared contacts with. But I am not too committed to this take, I am perfectly happy with 100000 friend requests that I can check at my leisure or ...
Nuh · 7h
Yeah but the bad guys also are more likely to be newly registered, but regardless they are also cheap to black list, you just need to subscribe to a good list, or you know, just let them send stuff an...
Technical Debt profile picture
Blocklists bring back central authorities, hiding everything by default once again risk hiding legitimate requests (hey email also has this issue of putting legitimate senders randomly into the spam folder because of some spam heuristic), at least WoT somewhat alleviates this.

Considering centralization no longer shields from spam (see the comments section of any YouTube video), it’s interesting to see that, as long as you don’t touch public groups, facebook posts don’t get spam, I would say it’s because of the “only friends and friends of friends can comment”.

I don’t know if the Instagram analogy counts though, in that case it’s more of an ego booster and real connections are negotiated out of band.
2
Technical Debt · 6h
Speaking of out of band, this is something which also happens from time to time. Not sure if it could be handled better. nostr:nevent1qqsvcx0dvpg3q7ffz6h95y9scez57mvyv69lzpdpgx5kz36nqjugfjszyzc2c0we3qz5y96f72s95daj2ndq8d0r58r2zt369mkf3z4uvsdcwqcyqqqqqqga2460k
Nuh · 6h
I don't think unsolicited messages are that important of a problem to solve, and I think just letting everything in (as long as the storage is minimal) then filter them manually or with AI or with a trusted server using TEE, all these are doable. How many meaningful connections have you had from co...
Nuh · 7h
This is why you need to use an identity system where creating identities cost something. Email does this by blacklisting spammy servers so servers have to limit who sign up somehow. My idea for a co...
Technical Debt profile picture
Even if the influx of invites don’t take down a server, they still annoy the end user and are otherwise indistinguishable from legitimate requests.

Email is an interesting example, just like Matrix they have a DNS prefilter, access to message contents and yet they often decide to drop messages from new/unknown servers.

In principle the system you’ve described could end up needing layers, a domain name is not free yet it is cheap enough not to matter for scammers/spammers.

I also think it’s safe to say the bad guys have a bigger budget than the average user just trying to join the network.
1
Nuh · 7h
Yeah but the bad guys also are more likely to be newly registered, but regardless they are also cheap to black list, you just need to subscribe to a good list, or you know, just let them send stuff and don't show them in the app, until the user is reaaaally bored and want to check it. We need to as...