2026-01-30T07:15:29Z https://yabu.me https://yabu.me/npub1jxjzmmfxafzanf2kvnggrwqnd7jw8x6xrp7kggvpqdmkw0ldmv4suztxhc https://blossom.primal.net/a2996bffcf9c44d082bb3fee3c85446b83869283aa5b99111e8aedb15ee888ad.png https://blossom.primal.net/a2996bffcf9c44d082bb3fee3c85446b83869283aa5b99111e8aedb15ee888ad.png https://yabu.me/nevent1qqszcr8n8k6836dwqt2kkskzp89czqsay655quwa5tqnzk3vu9fd3cqzyzg6gt0dym4ytkd92ejdpqdczdh6fcumgcv86eppsyphweelahdjkdqmapr In reply to <a href='/nevent1qqsxes8uuhwf3gn9n0m7de5culyr84fwg4p8qax6arj8kukjc6gxtmqu49qj8'>nevent1q…9qj8</a><br/>_________________________<br/><br/>As for the neo4j password, would you share with me in which project you found that config please?<br/><br/>I assume it came from pubky-docker, which is intedended to be used as dev tooling only, so that hardcoded password makes sense.<br/><br/>Neither you nor your LLM understood that this is just dev tooling it seems, so I&#39;m making it more explicit to avoid future confusion: <a href="https://github.com/pubky/pubky-docker/pull/27">https://github.com/pubky/pubky-docker/pull/27</a><br/><br/>Thank you for moving Pubky forward with us. 2026-06-03T06:49:27Z https://yabu.me/nevent1qqsd3jqyx0mjwtj44x00mn4a7qt6alad6rt4zeg0pljfcz62fvyefggzyzg6gt0dym4ytkd92ejdpqdczdh6fcumgcv86eppsyphweelahdjkgg2t88 In reply to <a href='/nevent1qqsxes8uuhwf3gn9n0m7de5culyr84fwg4p8qax6arj8kukjc6gxtmqu49qj8'>nevent1q…9qj8</a><br/>_________________________<br/><br/>As for the neo4j password, would you share with me in which project you found that config please?<br/><br/>I assume it came from pubky-docker, which is intedended to be used as dev tooling only, so that hardcoded password makes sense.<br/><br/>Neither you nor your LLM understood that this is just dev tooling it seems, so I&#39;m making it more explicit to avoid future confusion: <a href="https://github.com/pubky/pubky-docker/pull/27">https://github.com/pubky/pubky-docker/pull/27</a><br/><br/>Thank you for moving Pubky forward with us. 2026-06-03T06:47:49Z https://yabu.me/nevent1qqsxes8uuhwf3gn9n0m7de5culyr84fwg4p8qax6arj8kukjc6gxtmqzyzg6gt0dym4ytkd92ejdpqdczdh6fcumgcv86eppsyphweelahdjk54qx6l In reply to <a href='/nevent1qqsz9gmdl7hxnmfcj50fqllwmf67ewgt622kz0xard33xx7p5ffq9fsqhkjye'>nevent1q…kjye</a><br/>_________________________<br/><br/>&gt; secrets in unencrypted MMKV storage<br/>This could probably be improved. We&#39;re taking it up, thanks for the report.<br/><br/>&gt; - Cloudflare binary downloaded at runtime with no checksum? Why? That&#39;s a supply chain risk for every Umbrel self-hoster. <br/>Very much work in progress, we haven&#39;t announced the Umbrel integration anywhere yet and are still in development. For now we recommend not to use that project yet until we release our first Alpha version.<br/><br/>&gt; Neo4j shipping with hardcoded password<br/>User is encouraged to configure his setup when self-hosting. Don&#39;t open up your machine to the internet without understanding what your doing. No big difference to many other systems. A password change could be enforced, there is room for improvement, yes.<br/><br/>&gt; - GCS backend with no auditable configuration surface? <br/>GCS is an implementation detail of one hosted deployment (Synonym), not a requirement of self-hosting. Our vision is to have many independent operators to run instances on infrastructure they control, using whatever platform fits their needs. We can provide deployment guidance, but operators ultimately control their own configuration. Real self-sovereignty comes from the ability to self-host or choose a host you trust, not from visibility into any particular operator’s production config. We may explore additional transparency and deployment documentation in the future.<br/><br/>&gt; - you said users have a choice where their data is hosted. True for the homeserver. But is there a credible alternative to Synonym&#39;s Nexus for discoverability? Without it, content exists but nobody can find it. Self-hosting a homeserver without an accessible Nexus isn&#39;t a real credible exit for most users. <br/>Discoverability does require indexing. A homeserver can host your data, but an app still needs some way to aggregate and process the data. Simple apps can often do that on the fly; For more complex apps it&#39;s a good idea to externalize that work into an asynchronous indexer, otherwise the user experience becomes slow or incomplete. That aggregator / indexer can be run anywhere. It could be self-hosted (even though that&#39;s not yet as trivial as we&#39;d like it to be). For pubky.app that aggregator/indexer is called Nexus. any users may choose a managed Nexus because it is convenient, while others may prefer to run or use an alternative operator’s Nexus.<br/>Many people run their own Bitcoin node, but for indexing they still rely on 3rd-party-hosted block explorers, even though they have all the raw data locally, but they don&#39;t want to run the indexer themselves. Offering indexing for self-hosting as well as providing a well-run default seems like a fair deal to users. Do you think it should be done differently?<br/><br/>&gt; These aren&#39;t philosophical objections to the vision of &#39;your&#39; protocol. <br/>Exactly, you pointed out implementation details in young projects that are still under active development, so perfect stability is not expected. What is your view on the broader picture, the fundamental protocol and vision?<br/> 2026-06-03T06:04:19Z https://yabu.me/nevent1qqstc8p0jw4wr8x6q99du5w6upeh65mgf0k6r2vekd0lcyqr540lfsszyzg6gt0dym4ytkd92ejdpqdczdh6fcumgcv86eppsyphweelahdjk3zvdr6 In reply to <a href='/nevent1qqsfk7u0r82mp8knsam6v7g875z58y6rcxafkmxlwm622sldmh37kzc3tmk4r'>nevent1q…mk4r</a><br/>_________________________<br/><br/>If I did, would you try to understand our vision and our protocol, or would you just desperately try to find ways to discredit our efforts to built user-sovereign tech?<br/><br/>We believe that users have a CHOICE where their data is hosted, we don&#39;t believe that we need to FORCE users into maximum self-sovereign solutions. But giving an option and Credible Exit at all times is key.<br/><br/>So yeah, once you find real flaws, I&#39;d appreciate a well-meant issue report or PR, which is not just AI slop, but actual useful work.<br/><br/>I&#39;m not gonna waste any time fighting anybody that has the same mission as I have but follows different means to achieve that goal.<br/><br/>That said, the fact that all of you are so passionate about this topic is also a good sign, so let&#39;s use that energy and focus to building better protocols and tooling <br/><br/> 2026-06-02T06:56:05Z https://yabu.me/nevent1qqsy6k9xu0cnaeaazykc5ajkukn7r2fk3dn2056zm2nghrh74mae92qzyzg6gt0dym4ytkd92ejdpqdczdh6fcumgcv86eppsyphweelahdjk5wsl6j In reply to <a href='/nevent1qqs2ryctzxpgtxfvkmafz9wsvwnpdt5mae3s6ymsw8jcvg0zva6u8wcpyfmhxue69uhkummnw3ezuervv4ezucm0d5hk6ctjvfkx2ttpde3ksmmjgul5ve'>nevent1q…l5ve</a><br/>_________________________<br/><br/>Pubky is Slashtags, evolved <br/><br/> 2026-06-02T06:37:15Z https://yabu.me/nevent1qqsvjjuegzkguz949hzqr9tzejd3036s4cra9yz0zct26wuqh405a6czyzg6gt0dym4ytkd92ejdpqdczdh6fcumgcv86eppsyphweelahdjk44s88x Pubky in a nutshell <br/><blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/nevent1qqs8mgklvrdrgtyat4qk9jrsvh8632p89xmyxh23flxtpnhhas4msfqzyzg6gt0dym4ytkd92ejdpqdczdh6fcumgcv86eppsyphweelahdjkqcyqqqqqqg4l5zzf" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">nevent1q…5zzf</a></span> </div> - Asymmetric cryptography for identity and auth<br/>- All data is stored on Homeservers, *not* on the servers of the app / website your using<br/>- Decentralized discovery (I know your key, how can I communicate with you?): Homeservers are found through a decentralized network (Mainline DHT). The 'DNS' records for this discovery can be updated at all times, which means migrating to other homeservers is always possible without breaking the system, which was a fundamental design decision for Pubky (Credible Exit)<br/>- The fact that data is not siloed on proprietary servers but accessible to all Pubky apps, allows for interesting interoperability between different apps, requiring only permission from the user, *not* from any app / system .<br/><br/>Pubky choses different tradeoffs than nostr, but I'd argue that discoverability is better approached on Pubky than on nostr (maybe that's why it takes a bit more to explain), and that using servers instead of relays improves reliability in many cases.<br/><br/> <br/><br/> </blockquote> 2026-06-01T11:26:40Z https://yabu.me/nevent1qqs8mgklvrdrgtyat4qk9jrsvh8632p89xmyxh23flxtpnhhas4msfqzyzg6gt0dym4ytkd92ejdpqdczdh6fcumgcv86eppsyphweelahdjk5u5c7w In reply to <a href='/nevent1qqswpu24fd74007fsu9hug9gmhzlkpm7gjvnm64mswfds4p40u5h5dgpr3mhxue69uhhyetvv9ujuar0v9ehgu3wdejhgtmzwfshvmc4j25rr'>nevent1q…25rr</a><br/>_________________________<br/><br/>- Asymmetric cryptography for identity and auth<br/>- All data is stored on Homeservers, *not* on the servers of the app / website your using<br/>- Decentralized discovery (I know your key, how can I communicate with you?): Homeservers are found through a decentralized network (Mainline DHT). The &#39;DNS&#39; records for this discovery can be updated at all times, which means migrating to other homeservers is always possible without breaking the system, which was a fundamental design decision for Pubky (Credible Exit)<br/>- The fact that data is not siloed on proprietary servers but accessible to all Pubky apps, allows for interesting interoperability between different apps, requiring only permission from the user, *not* from any app / system .<br/><br/>Pubky choses different tradeoffs than nostr, but I&#39;d argue that discoverability is better approached on Pubky than on nostr (maybe that&#39;s why it takes a bit more to explain), and that using servers instead of relays improves reliability in many cases.<br/><br/> <br/><br/> 2026-06-01T11:25:24Z https://yabu.me/nevent1qqst3cefskhtd8y3djmczlg8h3s44mgxmwl8s0uz4ds22czs4yaxjqqzyzg6gt0dym4ytkd92ejdpqdczdh6fcumgcv86eppsyphweelahdjkuc2wen In reply to <a href='/nevent1qqsy58yugja3yrhpv04mextjg24j8aedx63vqyyrfdkpq9frhsfrm4ceh4lr2'>nevent1q…4lr2</a><br/>_________________________<br/><br/>Glad to help 👋 <br/><br/> 2026-06-01T10:55:25Z https://yabu.me/nevent1qqs2fgxjhy2v2swmegvscjqts7xypata2wvsl5k4teak7prtg7vsazqzyzg6gt0dym4ytkd92ejdpqdczdh6fcumgcv86eppsyphweelahdjkvm66td In reply to <a href='/nevent1qqszhuta9csdzmphy9akzhdvwyehzzjhs82m2hu2wytfwkj8ekcjqdsups78n'>nevent1q…s78n</a><br/>_________________________<br/><br/>Let me know if you have any questions <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/nprofile1qqsyvmz580ru95pxqjf3rt8nuvsdn54320g2ddku86mf056vxnm3azspp4mhxue69uhkummn9ekx7mqpz3mhxue69uhhyetvv9ujuerpd46hxtnfduucjhr3" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>its_Johnny</span> (<span class="italic">nprofile…jhr3</span>)</a></span> <br/><br/> 2026-06-01T10:53:05Z https://yabu.me/nevent1qqsyp733mrlll023j74yl7gkj459gf6ym8yua6dfxe3u5dgjlhkzjyczyzg6gt0dym4ytkd92ejdpqdczdh6fcumgcv86eppsyphweelahdjkjvvcpa Nostr vs Pubky <br/><blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/nevent1qqszfax8u0eg9smmxvx3jj8e4qqjrlqzglk02m9qw7ewhx3jx7essdgzyzg6gt0dym4ytkd92ejdpqdczdh6fcumgcv86eppsyphweelahdjkqcyqqqqqqgf3u2qv" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">nevent1q…u2qv</a></span> </div> Public-key-identity like nostr, but with improved discoverability. --> If I know your identity (public key), how do I know how to communicate with your device/app? On nostr there is no clean solution for this, so it's a mess that causes centralization and unreliability/inconsistency. On Pubky there's PKARR, look it up.<br/><br/>What about the data, where do your nostr posts live? Well a relay relays, but what does it do after that? It's called relay, not server, right? What if the data we're talking about is not a social media post but data on a street map for example. Kind of important that that data is served reliably, and completely (as in "learn all data from all users", but also as in 'old data doesn't vanish from the network'). Pubky uses 'Homeservers' as a reliable data layer in a decentralized world.<br/><br/>So am I saying Pubky is better than nostr? No, I'm saying use the right tool for the right job. Different trade-offs. Different designs. You may have a hammer, but not everything is a nail.<br/><br/>There's more to the story. Credible Exit. Separation of functionality (app) and data. Payment abstraction (Paykit). Decentralizing DNS. Check out these links: <a href="https://pubky.app">https://pubky.app</a>, <a href="https://pubky.org">https://pubky.org</a>, <a href="https://pubky.tech">https://pubky.tech</a> for more. <br/><br/> </blockquote> 2026-05-28T09:03:03Z https://yabu.me/nevent1qqszfax8u0eg9smmxvx3jj8e4qqjrlqzglk02m9qw7ewhx3jx7essdgzyzg6gt0dym4ytkd92ejdpqdczdh6fcumgcv86eppsyphweelahdjky8qwzy In reply to <a href='/nevent1qqsxw328eghxey6df6c0hw7clhcexp9weqsgpca6xd8dlv8vt4fl5acq4zleg'>nevent1q…zleg</a><br/>_________________________<br/><br/>Public-key-identity like nostr, but with improved discoverability. --&gt; If I know your identity (public key), how do I know how to communicate with your device/app? On nostr there is no clean solution for this, so it&#39;s a mess that causes centralization and unreliability/inconsistency. On Pubky there&#39;s PKARR, look it up.<br/><br/>What about the data, where do your nostr posts live? Well a relay relays, but what does it do after that? It&#39;s called relay, not server, right? What if the data we&#39;re talking about is not a social media post but data on a street map for example. Kind of important that that data is served reliably, and completely (as in &#34;learn all data from all users&#34;, but also as in &#39;old data doesn&#39;t vanish from the network&#39;). Pubky uses &#39;Homeservers&#39; as a reliable data layer in a decentralized world.<br/><br/>So am I saying Pubky is better than nostr? No, I&#39;m saying use the right tool for the right job. Different trade-offs. Different designs. You may have a hammer, but not everything is a nail.<br/><br/>There&#39;s more to the story. Credible Exit. Separation of functionality (app) and data. Payment abstraction (Paykit). Decentralizing DNS. Check out these links: <a href="https://pubky.app">https://pubky.app</a>, <a href="https://pubky.org">https://pubky.org</a>, <a href="https://pubky.tech">https://pubky.tech</a> for more. <br/><br/> 2026-05-28T08:54:21Z