Vitor Pamplona

https://vitorpamplona.com

Nostr's Chief Android Officer - #Amethyst

Public Key

npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z

NIP-05 Address

_@vitorpamplona.com

NIP-57 Address

vitor@vitorpamplona.com

Profile Code

nprofile1qqsyvrp9u6p0mfur9dfdru3d853tx9mdjuhkphxuxgfwmryja7zsvhqpzpmhxue69uhkummnw3ezuamfdejsz9rhwden5te0wfjkccte9ejxzmt4wvhxjmc5q2c7m

Publishing to

nostr.wine

relay.damus.io

bitcoiner.social

Author Public Key

npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z

Show more details

Last Notes

2024-09-19 21:39:05

- reply

Yeah, you should just disable those languages. If you can read them, there is no point in translating it.
I am sure you appreciate when something in Japanese or Arabic pops in and you can read it.

2024-09-19 16:11:07

- reply

Isn't it from a hashtag that you are following. If so the hashtag will show up in the top right corner for the post, close to the time of the post.

2024-09-19 13:41:48

- reply

It doesn't count as encouraging. Reactions can be positive or negative. There are plenty of reactions ( 👎😡🤬😰😓👇⬇️) being used daily to demonstrate discontent with posts and people definitely don't want to see them in their profiles. Whoever is encouraging everything you react to needs to fix their client to filter the negative stuff out.

2024-09-19 13:31:49

Normalize Tor

2024-09-19 12:54:59

ThugAmy reaction added 🚀
#naddr1qq…vgt9

2024-09-19 10:18:35

I have only seen 5 spam posts in 3 days.
If you are still seeing spam:
1. You are not paying attention to your relay list. You should remove/disable relays that are sending them. Amethyst shows relays the post came from below the author picture in Complete UI mode on settings. Move to safer relays.
2. Use hidden words in the Security Filters to hide common names/phrases out.
3. Always report impersonators and csam content. This will alert your followers of potential bot traps and let your relay operators know you didn't liked their posts.

2024-09-19 00:49:30

Now you can add Amy to your reactions 🚀
#naddr1qq…vgt9

2024-09-18 21:57:55

- reply

Any chance you can give all Square merchants a Nostr account? 😁

2024-09-18 21:52:36

- reply

Let's go, Jack!

2024-09-18 21:52:09

👀
#nevent1q…e8q5

2024-09-18 21:48:21

- reply

Some say her full name is Amy Thyst

2024-09-18 20:31:28

Amethyst.social now forwards to npub.pro
Thanks for the theme @nprofile…kdah

2024-09-17 21:14:10

Did I mention #Amethyst has a mascot now? https://image.nostr.build/910702689c6c351e06c92b94506b61254460abb57dd2da90d125cbc8de11b59c.png

2024-09-17 02:48:45

WoT is the real PoW
#nevent1q…hhq3

2024-09-17 01:20:15

- reply

If the person replies to it, Amethyst sends both posts to Citrine.

2024-09-17 01:11:49

Cool learning from this spammer: if the nostr client downloads and stores the spam event locally and the relay deletes later, the client doesnt get any notice it was deleted and must develop it's own ways to clear the local database out of it.
Same for local relays, like Citrine. Once it gets there, Citrine doesn't have a good way to remove it. The client will just be getting the spam event over and over again.

2024-09-16 01:14:16

- reply

Which is already implemented today: the author can report the spam and it will hide, but only if you follow the author. It's the same mechanism.
However, authors are not repointing spam anymore. There is too much of it. They can't keep up.

2024-09-15 23:22:55

- reply

More info: https://github.com/nostr-protocol/nips/pull/761

2024-09-15 23:22:07

How would you feel if Amethyst automatically created a Relationship Status event for every person you interact with (every like, zap, reply) and add them to a "Interacted with" user list.
Then you can filter your feed using that list as authors OR filter your notifications by them, getting rid of all types of spam.

2024-09-15 01:34:42

People discovering all the hidden features of Amethyst. https://video.nostr.build/a3560bb2ca102f6d79f5f880b1941814d4c84a6b0b95b79fc4b4b1ac111f8925.mp4

2024-09-14 22:39:05

Picture this:
1. You type on Google "laptop won't turn on"
2. Google now knows you have a broken laptop and can estimate how desperate you are to fix it.
3. Because it knows how desperate you are, it can increase shop prices proportionally.
You are going to pay the maximum they get you to pay.
That's algorithmic pricing.
The more companies know about you, the more they can predict and sell how desperate you are to other stores out there.
An internet-connected car knows much more about you than you realize. A smart TV also knows what you like. Your Alexa knows if there is a problem in the home.
Privacy is much more than just sensitive data.
It's about not giving leverage away.
Because algorithms will use it against you.
Be safe out there.

2024-09-13 13:44:48

- reply

Hum.. which server would you use to host the pdfs?

2024-09-13 12:05:30

- reply

There is always something to be embarrassed about.

2024-09-13 11:08:00

Little things add up. Don't dismiss them.

2024-09-13 02:29:34

This is how people designed video games in the past.
https://video.nostr.build/06b9f8820ed6f9f3995ea5964ea7f9007d65bff8f8e5f5375437b5eb463c0b0b.mp4

2024-09-12 18:56:27

It's great to see OpenSats going outside of Bitcoin and Nostr with Tor and now WireGuard
#nevent1q…0mha

2024-09-12 14:06:14

Has anybody onboarded friends/colleagues to your Alby Hub's via the friends and family app?
Would you add a friend to your hub/node if you are onboarding them to Nostr?

2024-09-11 20:46:51

Testing an old idea: NFC-based transient accounts: accounts that log off as soon as the app goes to the background, deleting all traces of the account from the phone.
It looks like this in debugging speeds: https://video.nostr.build/ef4274d150303fd28f5e7b6b02a7b0102176263dfb1b491969a0caab6b61e6ad.mp4
If you are an activist and if your phone is confiscated, they will never find anything on the phone. Not even your public key.
Walk around with Amethyst installed and an NFC tag hidden in your clothing. When you need to use Amethyst, tap the tag, insert your password and login. Lock the screen to delete everything.
The NFC has a NIP-49 password-encrypted nsec. If you need, destroy and dispose the NFC tag.

2024-09-11 20:18:14

- reply

Even reactions and ephemeral events? That sounds ... costly...

2024-09-11 20:13:08

Dose who control your data, control your destiny
Make typos poetic again.

2024-09-11 18:36:43

- reply

Home relay is the relay that has your notes for everybody else to get from.
General is where your Amethyst will use to get posts from your follows.

2024-09-11 18:35:08

- reply

Bem vindo!

2024-09-11 18:14:30

First look at the iPhone 17 Fold Max. https://image.nostr.build/01bc28c7f2cc20853d8c2aed9e9de407b8b7c9b344c57dae3dc65b0b5a91327c.jpg

2024-09-11 07:55:39

If it's not open source, it's not private.
If you can't choose to use your own server, it's not private.
If you can't use it when the company is gone, it's not private.
If you can't create anonymous accounts, it's not private.
Stop trusting the marketing. Start verifying.

2024-09-10 20:47:39

Hum... what's the number of nuts that will force me to code a Nut wallet into Amethyst. 🤔 😎
#nevent1q…9fde

2024-09-10 20:13:43

Nostr smart contracts are coming.
Then we add verifiable computations.
And boom. Trustless machines for everyone.
#nevent1q…aqz2

2024-09-10 01:53:26

- reply

It might be too much info for new users. Gotta figure out a way to boil this down to grandma.

2024-09-10 01:50:44

- reply

No network? What do you mean?

2024-09-10 01:19:21

- reply

Humm.. good point. Is Orbot really that good? I had cases of leaking IP with Orbot. If the dev is not carefu with connection setup (mostly issues with dependencies doing the connection), it can leak indeed.

2024-09-10 00:06:04

Ok, it seems that the option of activating Tor for .onion relays is the bare minimum we should do.
The question is now, as a project, do we want to offer more privacy straight out of the box or not.
I am leaning towards also using Tor for:
1. Relays gathered from the Outbox model that are not in the user's relay list.
2. All relays that require Auth (no IP-Pubkey link)
3. All DM relays
By default.
More ideas are welcome.

2024-09-09 23:47:18

- reply

I guess there is a
4th: Tor enabled for onion relay only, clearnet for other relays, images and videos.

2024-09-09 23:45:38

What should be the default of a fresh Amethyst install?
1. Tor enabled for relays, but clearnet for all videos, images etc (since they are slow)
2. Tor enabled for everything, user can disable
3. Tor disabled for everything, user can enable

2024-09-09 23:40:30

If you can see this, Tor is now inside of Amethyst.
No more Orbot.

2024-09-09 21:09:51

The real Apple Intelligence 😅
https://image.nostr.build/45be6ac9a578202cfb784043b3500707c7847a86deec231365e317ac6ceb70f1.jpg

2024-09-09 19:04:59

- reply

Ok, if that is not enough. Let me give you more (yes, there is more).
If you are in a client that doesn't support reports and you make post people don't like and they start reporting on Amethyst, your post will disappear from everywhere and you won't even know.
If we send the warning reaction, you will know that some people are reporting you and your post and in some cases whole profile is now tainted.
I always side with letting people know, even when their client doesn't want them to know.

2024-09-09 19:02:01

- reply

I don't know... I have seen so many heated debates about bolt12 being great and terrible that, at this point, I don't even know what to think about it.

2024-09-09 18:40:13

- reply

Well, let's hope people keep these ideas coming.

2024-09-09 17:29:33

- reply

To help clients that don't yet implement reports, to help content indexers figure out how good a post is and to help clients that do not want to implement reports because they see as too harsh and/or form of censorship. The reaction tagging is a softer way of doing it.

2024-09-09 16:58:26

- reply

That's the wrong phrasing. Reactions are not likes. 🤪 is not a like. Clients should not call them likes. That's the other client's problem.

2024-09-08 22:29:20

- reply

Então vc quer se autocensurar do resto do mundo? Nunca achei que ouviria uma coisa assim no Nostr :)

2024-09-08 22:28:22

- reply

Spammers can just create a GitHub project, put the nip05 verification there as a GitHub Page and be valid for free. So, I don't really thing this does much.
All they need is a free hosting service. They can even use their own personal computer at home behind a Tor connection to serve as the NIP05 address.
They can even use Orbot and get their phones to reply to the nip05 verification.

2024-09-08 22:05:14

- reply

Ou continuar avançando as traduções automáticas de forma que vc consiga entender o que acontece em qualquer língua. Temos o básico hoje, mas pode ser muito melhor.

2024-09-08 21:31:28

- reply

Posts don't have a language code in them so we need to download everything, process all of them of language code (which fails in 10% of the time) and then delete everything that doesn't match the user language. It's a lot of data usage.
But the main issue is that it creates local bubbles. If you use Twitter for instance, you rarely see Arabic or Mandarin posts, even though there is as many of them as in portuguese. The client just hides all external viewpoints from you. Making users a slave of their own linguistic cultures.

2024-09-08 21:06:24

- reply

In theory yes, in practice you will need more memory to keep the list of keys while processing. :)
Definatly less possible on a phone :)

2024-09-08 20:38:29

- reply

Nice! Can you go 5 levels of follow's follow? That's where I think most of the real game will be played. But it's a massive graph.

2024-09-08 18:45:43

- reply

I agree with you. I just don't think this particular instance is representative of an actual attack. Whatever we code for it can be circumvented by a smarter player. Not that we shouldn't code it, but let's be mindful of what we are solving for.
Real bots with WoT (because people will gladly sell their nsec to a bot maker and restart their accounts) will be much more demanding than this simple attack. They are going to look, act and work as a real human.
Every message in Nostr with immediately get 200 replies with products and opinions from people that are paying for it by nsecs of previous real users with WoT and so on. Any serious defense on this will need to include a complete understanding of the entire network or it will be something selected by the user, like just people that I follow.

2024-09-08 18:02:24

- reply

Has he done it or not.
There is no perfect solution. In theory nothing works. But in practice, we only have to reply to what actually exists.

2024-09-08 17:04:56

- reply

It worked as the thing it was. If the reply guy gets smarter, we can also get smarter. But it definitely worked against all the 50 or so replies that I got.

2024-09-08 16:26:48

Some folks just want to burn terrible specifications down and I am here for it.
Static payment codes to replace LNURL-P 🚀
https://github.com/nostr-protocol/nips/pull/1460

2024-09-08 15:20:17

- reply

Sim, Web of Trust é uma opção, mas essa proposta mais raza de olhar só seguidor de seguidor e não seguidor de seguidor de seguidor de seguidor de seguidor é altamente centralizadora. Ela favorece contas maiores e faz com que elas cresceram ainda mais e bloqueia os usuários sem muitos seguidores ainda.

2024-09-08 02:25:13

- reply

Alby Hub (either paying them to host or hosting yourself) is by far the best one to use on nostr. Nothing else comes close, even custodial ones.

2024-09-07 18:24:57

- reply

No, it's just broadcasting everywhere. We need something smarter with the multiple relay lists into account.

2024-09-07 16:59:51

- reply

We need to code a sync button that connects to all 3000 relays, sends posts authored by the account to the public and private home/outbox, p tagged posts to the public inbox and DM inbox, depending on the type, and everything to the local relay.

2024-09-07 11:12:20

- reply

Any feed? Chats as well?

2024-09-07 11:05:46

Mastodon people saying GM on Nostr. https://video.nostr.build/38adaa56b1a4f6fbf2dc39238365a13db6d6e16d14dddece3807e54e724d9b1c.mp4

2024-09-07 09:04:57

- reply

Inbox must allow other people to access it to send you notes or DMs. If Citrine is only running on your phone, no one will be able to access it. Tor opens it up to the world. If you are not using something it open it up, you will never receive a DM.

2024-09-07 08:04:36

Only use Citrine as public inbox/outbox if through Tor.
#nevent1q…s43c

2024-09-06 22:48:09

Them: Don't come back here with your bullshit
Me: coming back with my bullshit
https://video.nostr.build/948ab0dbf071a449fb09c667c0f808cbf1f7c4231b81e9f1bf393401206326ad.mp4

2024-09-06 22:47:35

- reply

His name for instance or xDBupZ which is what he uses as profile pictures.

2024-09-06 22:43:42

- reply

You have to add a few words to the hidden words filter in the Security Filters

2024-09-06 21:53:41

So, is the spam completely gone? 😎

2024-09-06 21:13:57

- reply

Nobody can read it. It's fully encrypted with your keys. Only your keys can decrypt it.

2024-09-06 20:22:56

- reply

No, but we changed the default view to simplified, which removes the second line. You can change it back on the app's settings.

2024-09-06 19:46:31

- reply

Yeah, one is a fluke. Two is more concerning.

2024-09-06 19:44:16

- reply

Will keep an eye on it. We haven't change the preview code for quite a while. I am not sure why it would be failing now... 🤔

2024-09-06 19:40:26

- reply

Clear net or behind VPN/Tor?

2024-09-06 19:39:42

- reply

We show flare videos on our Stories :)

2024-09-06 19:35:24

- reply

Our trick to get people to stop sharing freaking YouTube links.

2024-09-06 19:34:23

- reply

All of the links or just some? https://image.nostr.build/dadc4199f80579c8a92654c70c1ddd5d88143cb35f4eb66bbfa2f10a1782d149.jpg

2024-09-06 17:51:51

BTC Sessions is starting his decentralized onlyfans.
#nevent1q…dl23

2024-09-06 16:58:31

- reply

The new version released today (0.91.0) does it.

2024-09-06 16:53:18

Slowly becoming a real app. A few more rewrites and we can start thinking about v1.0 :)
#nevent1q…6jvr

2024-09-06 13:42:20

Challenge accepted Reply Guy.

2024-09-06 13:12:16

Key delegation on Nostr will never work. It's either NIP-46 or GTFO.

2024-09-05 21:57:18

- reply

I think Cloudflare is blocking their Tor connection

2024-09-05 21:15:07

- reply

Private Home? It's a bug that has been fixed but not released yet

2024-09-05 20:00:23

- reply

On the list, but we never found a stable Tor library to use inside Amethyst. Much less one that we can control the routes to avoid routing everything through the same nodes.

2024-09-05 19:59:20

- reply

You can be a dev.

2024-09-05 19:52:02

- reply

Have you never seen the Broke, Woke, Bespoke meme before?

2024-09-05 19:51:18

- reply

I see a verified icon, not a red icon. 🤔
Maybe the website was still updating its records?

2024-09-05 19:20:43

Broke: Build things so complicated you are the only one that can fix it
Woke: Build an AI to fix things
Bespoke: Build things anyone can rebuild in a weekend

2024-09-05 14:10:43

Testing on foldables is always like "how the hell did this got there?"... "oh.. yeah, It makes sense".

2024-09-05 13:42:49

- reply

I just needed to re-do everything. 😅

2024-09-05 11:34:50

- reply

Too much work.

2024-09-04 12:59:11

Let's say there is a company whose sole purpose is to evaluate relay operators and offer relay list recommendations to the best ones.
How much would you pay for that service?

2024-09-04 10:41:52

- reply

It's a cache bug. We fixed it yesterday. New version coming. :)

2024-09-04 10:11:17

- reply

https://blob.satellite.earth/2bd7e308c1797d64fca09b1d61e9bde24c68dd45e501c7383eff1e85392df11f

2024-09-04 09:46:11

https://image.nostr.build/ec2bdf8160d94bf64db016a12374dfde3a31ff48e18887ad1484f7466fe01418.jpg

2024-09-03 23:44:44

- reply

Was satoshi Brazilian as well? 👀

2024-09-02 22:51:52

Pro Tip: if you are in Boston and see a Southern-style restaurant... Don't go.