Vitor Pamplona

https://vitorpamplona.com

Nostr's Chief Android Officer - #Amethyst

Public Key

npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z

NIP-05 Address

_@vitorpamplona.com

NIP-57 Address

vitor@vitorpamplona.com

Profile Code

nprofile1qqsyvrp9u6p0mfur9dfdru3d853tx9mdjuhkphxuxgfwmryja7zsvhqpz3mhxue69uhhyetvv9ujuerpd46hxtnfduq3wamnwvaz7tmwdaehgu3wvekhgtnhd9azucnf0g9y6mnn

Publishing to

relay.damus.io

nostr.fmt.wiz.biz

nostr.wine

Author Public Key

npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z

Show more details

Last Notes

2024-09-20 01:30:20

- reply

It's a good one

2024-09-20 01:20:22

- reply

Find a way to add this to your client. https://emojito.meme/a/naddr1qqyyzmt9w358jum5qyt8wumn8ghj7enjv4h8xtnwdaehgu339e3k7mgzyprqcf0xst760qet2tglytfay2e3wmvh9asdehpjztkceyh0s5r9cqcyqqq82nskznv42

2024-09-20 01:19:03

- reply

Ok amethyst or which client?

2024-09-19 21:39:05

- reply

Yeah, you should just disable those languages. If you can read them, there is no point in translating it.
I am sure you appreciate when something in Japanese or Arabic pops in and you can read it.

2024-09-19 21:22:07

- reply

Oh, Just add a Dutch keyboard.
Or click on the language and select don't translate from Dutch and Afrikaans when the translation message appears.

2024-09-19 20:38:46

- reply

Only on an app manager client: https://nostrapp.link/

2024-09-19 20:14:50

- reply

It's not as effective because the app either needs to check 200 or so NIP-05 on start up or it has to check during rendering, creating "now you see the post, now you don't" issue.
But disabling downloads from damus and nostr.mom on your General Relay list seems to reduce most if not all of it.
For instance, I haven't seen a spammer or impersonator today.

2024-09-19 17:39:09

- reply

Well, in one case, people will report that as Nudity and relays of that culture will accept the report and delete the event. Same for followers in the same culture.
While in the west, the post will stay.
So, processing reports and reactions is always culture dependent. As long as everybody acknologdges that, it should be fine.
Reporting is free speech. Reporting a reporter for misreporting something is also free speech. And people can make decisions based on those records.

2024-09-19 17:06:31

- reply

The project itself was a bit shady but centralized platforms are like that.
No one can ban zaps to a Note. :)

2024-09-19 16:59:07

- reply

Showing a woman's skin is ok in the west, but not ok in the Arab world.

2024-09-19 16:11:07

- reply

Isn't it from a hashtag that you are following. If so the hashtag will show up in the top right corner for the post, close to the time of the post.

2024-09-19 15:04:16

- reply

Lets go!

2024-09-19 14:48:54

- reply

Jesus, fix your relay list and get a better client. :)

2024-09-19 14:46:14

- reply

Intentionality cannot be assumed as well.
Lots of people have been replying, reposting and even zapping spammers and impersonators lately. This notion of "users should avoid associating themselves with bad content" doen't work because it is inevitable.
It's better if we normalize that association and then filter it down by what it actually meant at the time.
On top of that, Clients do a lot in the background. We are generally signing tons of events left and right to just operate. Yeah, we can ask permissions every single time, but that will get annoying really quickly. We already see that with Amber that people check the first times and then just approve everything the app needs to do to operate.

2024-09-19 14:32:04

- reply

Yeah, relays can easily operate inside Tor with an onion address directly. So, there is really no need to come back to the regular web for posts. (Might still need for videos and pictures)

2024-09-19 14:30:21

- reply

Registering does require signing a NIP-98 auth message. There might have been something blocking that action to process with Amber :(

2024-09-19 14:18:42

- reply

Change the "UI mode" on the app settings to "Complete". We simplified it a few versions ago

2024-09-19 14:17:50

- reply

What if there is no exit node? :)

2024-09-19 14:16:50

- reply

Reports ARE associating the content with the user of the app. There is no privacy on it. Users are creating an event and putting the reported id on it.
Reports ARE NEVER PRIVATE. The name "report" should already tell you that.
Mutes are private on Amethyst, but other clients make those public as well.
They are all associating the user with the bad content. There is no way to do any of this without that association.

2024-09-19 14:14:09

- reply

Reports are also contextual. There are plenty of people sending Nudity reports for things other people don't think it is Nudity at all.
Reports are absolutely the same thing as a bad reaction. They just use a different event numbers. But if you use them without interpreting what the user was trying to say, you are going to have a bad time in both cases.
You can just send a delete for a reaction. I have not tested it recently, but if you see the post again (might need to unblock the user) you should see your warning label there. You can click on it to delete it just like you do with any other reaction on Amethyst.

2024-09-19 14:09:01

- reply

Have you tried uninstalling Amethyst and logging into it with your nsec directly?
I wonder if there is a weird cache state happening.

2024-09-19 14:05:56

- reply

They don't need to. The UI simply CANNOT ASSUME they are all positive. That will NEVER make any sense.

2024-09-19 14:04:17

- reply

When you report, or you mute those notes or authors, you are engaging with them: you are creating Report Events or adding their keys or IDs to mute lists or block lists. It's the same thing as a reaction. Same thing happens on clients that mark event's as read, etc. Those are all interactions.
There is no way to only interact with positive content on Nostr. It's the wrong way to look at it. You are always interacting. That interaction can be positive or negative. But they will always be there... As they should.
Clients don't need to parse reactions into positive or negative if they don't want to. The only thing they absolutely CANNOT assume is that all reactions should be interpreted as the author supporting them.
We will make it more transparent that it's being sent. Right now only people using Amber can see the reaction event being signed together with the report and the mute list change.

2024-09-19 13:49:45

- reply

So, I can tell you that our push server doesn't have any token for your pubkey. It's as if Notifications were completely disabled in the phone because Amethyst is not even registering a new token.

2024-09-19 13:41:48

- reply

It doesn't count as encouraging. Reactions can be positive or negative. There are plenty of reactions ( 👎😡🤬😰😓👇⬇️) being used daily to demonstrate discontent with posts and people definitely don't want to see them in their profiles. Whoever is encouraging everything you react to needs to fix their client to filter the negative stuff out.

2024-09-19 13:31:49

Normalize Tor

2024-09-19 13:28:01

- reply

Why not? The reaction helps people using clients that don't support NIP-56 Reports (which is almost all of them) to know that the post is not good.

2024-09-19 13:03:07

Some cool new relays to try out
#nevent1q…8n20

2024-09-19 12:54:59

ThugAmy reaction added 🚀
#naddr1qq…vgt9

2024-09-19 10:18:35

I have only seen 5 spam posts in 3 days.
If you are still seeing spam:
1. You are not paying attention to your relay list. You should remove/disable relays that are sending them. Amethyst shows relays the post came from below the author picture in Complete UI mode on settings. Move to safer relays.
2. Use hidden words in the Security Filters to hide common names/phrases out.
3. Always report impersonators and csam content. This will alert your followers of potential bot traps and let your relay operators know you didn't liked their posts.

2024-09-19 09:13:59

- reply

Which relays are they coming from? I don't see anything 🤔

2024-09-19 00:49:30

Now you can add Amy to your reactions 🚀
#naddr1qq…vgt9

2024-09-18 21:57:55

- reply

Any chance you can give all Square merchants a Nostr account? 😁

2024-09-18 21:52:36

- reply

Let's go, Jack!

2024-09-18 21:52:09

👀
#nevent1q…e8q5

2024-09-18 21:48:21

- reply

Some say her full name is Amy Thyst

2024-09-18 20:31:28

Amethyst.social now forwards to npub.pro
Thanks for the theme @nprofile…kdah

2024-09-17 21:14:10

Did I mention #Amethyst has a mascot now? https://image.nostr.build/910702689c6c351e06c92b94506b61254460abb57dd2da90d125cbc8de11b59c.png

2024-09-17 02:48:45

WoT is the real PoW
#nevent1q…hhq3

2024-09-17 01:20:15

- reply

If the person replies to it, Amethyst sends both posts to Citrine.

2024-09-17 01:11:49

Cool learning from this spammer: if the nostr client downloads and stores the spam event locally and the relay deletes later, the client doesnt get any notice it was deleted and must develop it's own ways to clear the local database out of it.
Same for local relays, like Citrine. Once it gets there, Citrine doesn't have a good way to remove it. The client will just be getting the spam event over and over again.

2024-09-16 01:14:16

- reply

Which is already implemented today: the author can report the spam and it will hide, but only if you follow the author. It's the same mechanism.
However, authors are not repointing spam anymore. There is too much of it. They can't keep up.

2024-09-15 23:22:55

- reply

More info: https://github.com/nostr-protocol/nips/pull/761

2024-09-15 23:22:07

How would you feel if Amethyst automatically created a Relationship Status event for every person you interact with (every like, zap, reply) and add them to a "Interacted with" user list.
Then you can filter your feed using that list as authors OR filter your notifications by them, getting rid of all types of spam.

2024-09-15 01:34:42

People discovering all the hidden features of Amethyst. https://video.nostr.build/a3560bb2ca102f6d79f5f880b1941814d4c84a6b0b95b79fc4b4b1ac111f8925.mp4

2024-09-14 22:39:05

Picture this:
1. You type on Google "laptop won't turn on"
2. Google now knows you have a broken laptop and can estimate how desperate you are to fix it.
3. Because it knows how desperate you are, it can increase shop prices proportionally.
You are going to pay the maximum they get you to pay.
That's algorithmic pricing.
The more companies know about you, the more they can predict and sell how desperate you are to other stores out there.
An internet-connected car knows much more about you than you realize. A smart TV also knows what you like. Your Alexa knows if there is a problem in the home.
Privacy is much more than just sensitive data.
It's about not giving leverage away.
Because algorithms will use it against you.
Be safe out there.

2024-09-13 13:44:48

- reply

Hum.. which server would you use to host the pdfs?

2024-09-13 12:05:30

- reply

There is always something to be embarrassed about.

2024-09-13 11:10:39

- reply

Adult education in 2024.

2024-09-13 11:08:00

Little things add up. Don't dismiss them.

2024-09-13 02:29:34

This is how people designed video games in the past.
https://video.nostr.build/06b9f8820ed6f9f3995ea5964ea7f9007d65bff8f8e5f5375437b5eb463c0b0b.mp4

2024-09-12 18:56:27

It's great to see OpenSats going outside of Bitcoin and Nostr with Tor and now WireGuard
#nevent1q…0mha

2024-09-12 14:06:14

Has anybody onboarded friends/colleagues to your Alby Hub's via the friends and family app?
Would you add a friend to your hub/node if you are onboarding them to Nostr?

2024-09-11 20:46:51

Testing an old idea: NFC-based transient accounts: accounts that log off as soon as the app goes to the background, deleting all traces of the account from the phone.
It looks like this in debugging speeds: https://video.nostr.build/ef4274d150303fd28f5e7b6b02a7b0102176263dfb1b491969a0caab6b61e6ad.mp4
If you are an activist and if your phone is confiscated, they will never find anything on the phone. Not even your public key.
Walk around with Amethyst installed and an NFC tag hidden in your clothing. When you need to use Amethyst, tap the tag, insert your password and login. Lock the screen to delete everything.
The NFC has a NIP-49 password-encrypted nsec. If you need, destroy and dispose the NFC tag.

2024-09-11 20:18:14

- reply

Even reactions and ephemeral events? That sounds ... costly...

2024-09-11 20:13:08

Dose who control your data, control your destiny
Make typos poetic again.

2024-09-11 18:36:43

- reply

Home relay is the relay that has your notes for everybody else to get from.
General is where your Amethyst will use to get posts from your follows.

2024-09-11 18:35:08

- reply

Bem vindo!

2024-09-11 18:14:30

First look at the iPhone 17 Fold Max. https://image.nostr.build/01bc28c7f2cc20853d8c2aed9e9de407b8b7c9b344c57dae3dc65b0b5a91327c.jpg

2024-09-11 07:55:39

If it's not open source, it's not private.
If you can't choose to use your own server, it's not private.
If you can't use it when the company is gone, it's not private.
If you can't create anonymous accounts, it's not private.
Stop trusting the marketing. Start verifying.

2024-09-10 20:47:39

Hum... what's the number of nuts that will force me to code a Nut wallet into Amethyst. 🤔 😎
#nevent1q…9fde

2024-09-10 20:13:43

Nostr smart contracts are coming.
Then we add verifiable computations.
And boom. Trustless machines for everyone.
#nevent1q…aqz2

2024-09-10 01:53:26

- reply

It might be too much info for new users. Gotta figure out a way to boil this down to grandma.

2024-09-10 01:50:44

- reply

No network? What do you mean?

2024-09-10 01:19:21

- reply

Humm.. good point. Is Orbot really that good? I had cases of leaking IP with Orbot. If the dev is not carefu with connection setup (mostly issues with dependencies doing the connection), it can leak indeed.

2024-09-10 00:06:04

Ok, it seems that the option of activating Tor for .onion relays is the bare minimum we should do.
The question is now, as a project, do we want to offer more privacy straight out of the box or not.
I am leaning towards also using Tor for:
1. Relays gathered from the Outbox model that are not in the user's relay list.
2. All relays that require Auth (no IP-Pubkey link)
3. All DM relays
By default.
More ideas are welcome.

2024-09-09 23:47:18

- reply

I guess there is a
4th: Tor enabled for onion relay only, clearnet for other relays, images and videos.

2024-09-09 23:45:38

What should be the default of a fresh Amethyst install?
1. Tor enabled for relays, but clearnet for all videos, images etc (since they are slow)
2. Tor enabled for everything, user can disable
3. Tor disabled for everything, user can enable

2024-09-09 23:40:30

If you can see this, Tor is now inside of Amethyst.
No more Orbot.

2024-09-09 21:09:51

The real Apple Intelligence 😅
https://image.nostr.build/45be6ac9a578202cfb784043b3500707c7847a86deec231365e317ac6ceb70f1.jpg

2024-09-09 19:04:59

- reply

Ok, if that is not enough. Let me give you more (yes, there is more).
If you are in a client that doesn't support reports and you make post people don't like and they start reporting on Amethyst, your post will disappear from everywhere and you won't even know.
If we send the warning reaction, you will know that some people are reporting you and your post and in some cases whole profile is now tainted.
I always side with letting people know, even when their client doesn't want them to know.

2024-09-09 19:02:01

- reply

I don't know... I have seen so many heated debates about bolt12 being great and terrible that, at this point, I don't even know what to think about it.

2024-09-09 18:40:13

- reply

Well, let's hope people keep these ideas coming.

2024-09-09 17:29:33

- reply

To help clients that don't yet implement reports, to help content indexers figure out how good a post is and to help clients that do not want to implement reports because they see as too harsh and/or form of censorship. The reaction tagging is a softer way of doing it.

2024-09-09 16:58:26

- reply

That's the wrong phrasing. Reactions are not likes. 🤪 is not a like. Clients should not call them likes. That's the other client's problem.

2024-09-08 23:35:33

- reply

You can do one Tor domain with 200,000 pre-generates keys or split them into a few hundred domains. Or just use IP directly.

2024-09-08 22:29:20

- reply

Então vc quer se autocensurar do resto do mundo? Nunca achei que ouviria uma coisa assim no Nostr :)

2024-09-08 22:28:22

- reply

Spammers can just create a GitHub project, put the nip05 verification there as a GitHub Page and be valid for free. So, I don't really thing this does much.
All they need is a free hosting service. They can even use their own personal computer at home behind a Tor connection to serve as the NIP05 address.
They can even use Orbot and get their phones to reply to the nip05 verification.

2024-09-08 22:05:14

- reply

Ou continuar avançando as traduções automáticas de forma que vc consiga entender o que acontece em qualquer língua. Temos o básico hoje, mas pode ser muito melhor.

2024-09-08 21:31:28

- reply

Posts don't have a language code in them so we need to download everything, process all of them of language code (which fails in 10% of the time) and then delete everything that doesn't match the user language. It's a lot of data usage.
But the main issue is that it creates local bubbles. If you use Twitter for instance, you rarely see Arabic or Mandarin posts, even though there is as many of them as in portuguese. The client just hides all external viewpoints from you. Making users a slave of their own linguistic cultures.

2024-09-08 21:06:24

- reply

In theory yes, in practice you will need more memory to keep the list of keys while processing. :)
Definatly less possible on a phone :)

2024-09-08 20:38:29

- reply

Nice! Can you go 5 levels of follow's follow? That's where I think most of the real game will be played. But it's a massive graph.

2024-09-08 18:45:43

- reply

I agree with you. I just don't think this particular instance is representative of an actual attack. Whatever we code for it can be circumvented by a smarter player. Not that we shouldn't code it, but let's be mindful of what we are solving for.
Real bots with WoT (because people will gladly sell their nsec to a bot maker and restart their accounts) will be much more demanding than this simple attack. They are going to look, act and work as a real human.
Every message in Nostr with immediately get 200 replies with products and opinions from people that are paying for it by nsecs of previous real users with WoT and so on. Any serious defense on this will need to include a complete understanding of the entire network or it will be something selected by the user, like just people that I follow.

2024-09-08 18:02:24

- reply

Has he done it or not.
There is no perfect solution. In theory nothing works. But in practice, we only have to reply to what actually exists.

2024-09-08 17:04:56

- reply

It worked as the thing it was. If the reply guy gets smarter, we can also get smarter. But it definitely worked against all the 50 or so replies that I got.

2024-09-08 16:26:48

Some folks just want to burn terrible specifications down and I am here for it.
Static payment codes to replace LNURL-P 🚀
https://github.com/nostr-protocol/nips/pull/1460

2024-09-08 15:20:17

- reply

Sim, Web of Trust é uma opção, mas essa proposta mais raza de olhar só seguidor de seguidor e não seguidor de seguidor de seguidor de seguidor de seguidor é altamente centralizadora. Ela favorece contas maiores e faz com que elas cresceram ainda mais e bloqueia os usuários sem muitos seguidores ainda.

2024-09-08 02:25:13

- reply

Alby Hub (either paying them to host or hosting yourself) is by far the best one to use on nostr. Nothing else comes close, even custodial ones.

2024-09-07 18:24:57

- reply

No, it's just broadcasting everywhere. We need something smarter with the multiple relay lists into account.

2024-09-07 16:59:51

- reply

We need to code a sync button that connects to all 3000 relays, sends posts authored by the account to the public and private home/outbox, p tagged posts to the public inbox and DM inbox, depending on the type, and everything to the local relay.

2024-09-07 11:12:20

- reply

Any feed? Chats as well?

2024-09-07 11:05:46

Mastodon people saying GM on Nostr. https://video.nostr.build/38adaa56b1a4f6fbf2dc39238365a13db6d6e16d14dddece3807e54e724d9b1c.mp4

2024-09-07 09:04:57

- reply

Inbox must allow other people to access it to send you notes or DMs. If Citrine is only running on your phone, no one will be able to access it. Tor opens it up to the world. If you are not using something it open it up, you will never receive a DM.

2024-09-07 08:04:36

Only use Citrine as public inbox/outbox if through Tor.
#nevent1q…s43c

2024-09-06 22:48:09

Them: Don't come back here with your bullshit
Me: coming back with my bullshit
https://video.nostr.build/948ab0dbf071a449fb09c667c0f808cbf1f7c4231b81e9f1bf393401206326ad.mp4

2024-09-06 22:47:35

- reply

His name for instance or xDBupZ which is what he uses as profile pictures.

2024-09-06 22:43:42

- reply

You have to add a few words to the hidden words filter in the Security Filters

2024-09-06 21:53:41

So, is the spam completely gone? 😎

2024-09-06 21:13:57

- reply

Nobody can read it. It's fully encrypted with your keys. Only your keys can decrypt it.

2024-09-06 20:22:56

- reply

No, but we changed the default view to simplified, which removes the second line. You can change it back on the app's settings.