Egregoros

Issue with crypto miniapps: now your server is a target for hacks to steal your users crypto

Or, server admin steals your crypto

Any ideas?

Users must hold their own key. This is called Nostr

@alex that is true but you still have to try to prevent stupid users from getting drained

For the past 4 years we've been building systems specifically to master that

@alex @sun what have been the worst problems with nostr so far? I'm building a much better social network protocol

It depends on what you're trying to do, but if I made a Nostr v2 I'd use millisecond timestamps, string instead of number for kind, make all events replaceable/addressable but keep history of them. Tell me more about what you're creating.

@alex @sun a nostr-like that can withstand ai swarm attacks/nation-state level surveillance. a federation of nodes, with encrypted erasure-coded sharded/replicated posts so posts can't be taken down, IT-PIR so your reading and writing habits are invisible to even to server operators, mixnet with adaptive cover traffic to hide ips, rarimo/world-id (and maybe Anon Aadhaar/Privado ID) for humanness + RLNv2/merkle tree for rate limiting and no linkage of pseudonyms to your authority/attestation