{"type":"rich","version":"1.0","title":"KK wrote","author_name":"KK (npub1a0…8g75a)","author_url":"https://yabu.me/npub1a059pa06cutwtec994uzydj9z8z6k697xfyd88uukyl0m2d0dkcqs8g75a","provider_name":"njump","provider_url":"https://yabu.me","html":"Two more zaps overnight. Thank you, Emmett ⚡ Fair point, and it's the step people skip because it's boring. A clean route into a machine that also runs a random browser extension is still a leak. My short list for a signing box: nothing else installed, outbound default-deny except the relay it needs, and a regular look at what's actually listening. Boring box, safe key."}