Semisol 👨‍💻

We are taking a concept originally used in a context where real people verified their real identity in person and often required multiple signatures to be marked trusted, and trying to apply it so that “trust” is established by you wanting to see their content in your feed, and one follow being enough.
But I guess it’s too hard to not be realistic about things.

2024-09-16 16:23:40

- reply

You suffer the consequences of your own actions, in this case a system which can be easily manipulated and encourages self censorship
Why did no social media platform implement WoT for spam and bot filtering?
We may hate them but they also aren’t stupid, and have poured way more time and money into bot detection than Nostr ever will in the next 5-10 years.

2024-09-16 13:58:14

- reply

and openwrt for your wireless router

2024-09-13 17:10:30

- reply

it’s more their track record; I have only explored a certain portion of their code only
like 2 years ago, I had to annoy them for months before an SQL injection bug got fixed (it was simple also, they were passing field names from request body directly to the DB)
they also took a month of pestering to fix a bug that allowed draining Eclair nodes… with a hodl invoice (yes, you just wait 30 seconds)
their satsdice plugin had improper access control, meaning invoice keys meant to be receive only could drain wallets

2024-09-13 13:55:00

- reply

still using that insecure software? 😂

2024-09-12 16:08:17

- reply

Instead of them redeeming a cashu token they can just prove they have the code, or better, contain a signed statement in the sent envelope (this also means zero-interaction after request, and the proof can be validated, this also means bogus requests will help mask real ones for privacy)

2024-09-12 15:53:09

Trying to use Cashu for this is like trying to use blockchain for data storage
Unnecessarily complicated and with 0 benefits #note1yvl…3pfq

2024-09-12 15:34:04

And this is how self censorship begins on Nostr
It’s only downhill from here #note1a6g…s0ds

2024-09-11 21:02:35

“gpg failed to sign commit object”
checked that my smartcard was working, it was
checked the terminal size if it was too small to show a PIN prompt, it was not
tried doing gpg —sign and immediately failed with “No secret key”
thanks for telling me my key expired in the shittiest way possible just 1 minute ago

2024-09-11 17:50:15

- reply

probably just to annoy
you can tag anyone in a note without it showing up in the text, same with hashtags