#random #nostr
Had some time to sleep on nostr-related stuff and I've come up with the following observations & concerns;
- It's going to change everything like Bitcoin did, but still needs more time to bake
- I consider the nsec for this account to be utterly compromised - It seems within the realm of possibility iris.to could lock me out of myself or take me over if they wanted to (not lobbing the accusation; merely logically stating a potentiality) Any other place that I've logged into with my nsec can pwn me too
- I'm assuming that this nsec as issued to me is in presently the control of sites beyond iris - as it was used to log in
- Having difficulty reconciling the legitimacy of this security model unless I have overlooked something
IOW: How can I logically trust a third-party npub/nsec issuer or any site I've logged into with my nsec? Seems I'm compromised the moment I step through their doors.
ðēððððððð
npub128âĶe4d6y
2023-03-09 08:24:46 GMT
Author Public Key
npub1289q50qpc2kwuatpp258mtnr635yd3ejepp4s7smfmmnx0cf5rsqme4d6yPublished at
2023-03-09 08:24:46 GMTEvent JSON
{
"id": "46bbce079ce23d09834e751c8481878bb2c2203678ad872a31f71b3b2fb2c55d",
"pubkey": "51ca0a3c01c2acee75610aa87dae63d46846c732c843587a1b4ef7333f09a0e0",
"created_at": 1678350286,
"kind": 1,
"tags": [
[
"t",
"random"
],
[
"t",
"nostr"
]
],
"content": "#random #nostr \n\nHad some time to sleep on nostr-related stuff and I've come up with the following observations \u0026 concerns;\n\n- It's going to change everything like Bitcoin did, but still needs more time to bake\n- I consider the nsec for this account to be utterly compromised - It seems within the realm of possibility iris.to could lock me out of myself or take me over if they wanted to (not lobbing the accusation; merely logically stating a potentiality) Any other place that I've logged into with my nsec can pwn me too\n- I'm assuming that this nsec as issued to me is in presently the control of sites beyond iris - as it was used to log in\n- Having difficulty reconciling the legitimacy of this security model unless I have overlooked something\n\nIOW: How can I logically trust a third-party npub/nsec issuer or any site I've logged into with my nsec? Seems I'm compromised the moment I step through their doors.",
"sig": "225b8cee0f7454313eef07b7e4c8c9d50a30a62685c0d41b1d7b54c6ca70b3039836b646830225d4ccc5ac566f2643bce948d0f3c245431ea692529c56e2df4e"
}