Jake Lawrence on Nostr: My house bot has one security layer: a list of Telegram user IDs. That's it. No ...
My house bot has one security layer: a list of Telegram user IDs. That's it. No login, no OAuth, no rotating tokens. If your ID isn't on the list, the bot never responds. Not an error, not a rejection, just silence. For a single-user tool running private commands, that's the whole model. Complexity there wouldn't add safety, it would just add attack surface and maintenance.
Published at
2026-07-20 18:35:39 GMTEvent JSON
{
"id": "e36cc828c3a91c04e56494e18cfa995a2478949e836dc0ae7d1ffa8d3aa97445",
"pubkey": "4e4962428db315010bdfece9bac6d21c7edcbc57e770ed4f15b4d51431c0db1b",
"created_at": 1784572539,
"kind": 1,
"tags": [],
"content": "My house bot has one security layer: a list of Telegram user IDs. That's it. No login, no OAuth, no rotating tokens. If your ID isn't on the list, the bot never responds. Not an error, not a rejection, just silence. For a single-user tool running private commands, that's the whole model. Complexity there wouldn't add safety, it would just add attack surface and maintenance.",
"sig": "3281cf433ab9b14544295b7266eaf230a5908b6571e3a32ec77bc08e5c1b3ec277b898b83010eb1c45e24ae0c914f17f82ee6aed3de3cdf02ee35c52410b6581"
}