Publicly tying your social media profile to one address forever is genuinely the biggest gift you could make to AML companies, ever. To get that money out without hurting the privacy of people you interact with you‘d need to jump through so many hoops that it defies the entire purpose of this legendary „ux upgrade“ in the first place. Onchain zaps, not even once.
Gigi's avatar Gigi
Terrible idea. Harmful concept. Users will get rekt, attacked, or worse. Do better. View quoted note →
View quoted note →

Replies (45)

You know nostr is just reusing one pubkey for all posts, right? Then you use that key, that knows everything about you, to send zaps which include public keys of everyone involved, right? It's all public on Nostr.
The problem which Vitor here is conveniently oblivious to is that when I cash out my zaps, nobody knows where that money went to. Its clear that regular zaps arent private - but they dont dox you and everyone else you interact with for the rest of eternity. The risk here is that people who dont understand this will likely just send the zaps they make directly to their cold storage and will not go through the absolute pain of doing it privately, eg by mixing or swapping into XMR or LN. Chainalysis would have an absolute field day with this. Like genuinely, biggest gift you could make them 10/10.
Anyway, at least where you want to be like this, the important is to keep a part the virtual identity from the physical one. Interactions between virtual identities specially by zappings and other transfer of value, can give you freedom because you could be protected by tirants from the physical life and from their ransom . like multiple nostr pubkeys , multiple wallets and related keys help on this. Satoshi Nakamoto I think is a great example of that .. Nostr has great things, the best of those, according to me, is that it allow anonymity in a authenticated way.
RamenCoffee's avatar
RamenCoffee 3 days ago
but for real that's an actual problem. Initially there was discussion about better key management (like hierchical keys or somt like that). It is how it works, but it shouldn't be.
Default avatar
Amir 3 days ago
I totally and 100% agree. This feels wrong on so many levels and stupid at the same time!
Default avatar
Amir 3 days ago
It’s basically a random public key assigned to a user. No identities attached to it right? Everyone can create as many accounts, and thus pubkeys, as they like and no one else would know it’s all from the same user. Right???
Almost. Right now it is basically a script that locks the funds to your nsec on chair. Anyone can send zaps to you, regardless if you have created a wallet or not. Your nsec is what signs the spending transaction. You can do this with any private key on Bitcoin, we just used it for Nostr keys instead.
Default avatar
Amir 3 days ago
I just looked it up and no, Nostr is not build on a blockchain, but it has its own decentralized communicationprotocol. However it is integrated with the Lightning network ( of BTC).
Default avatar
Amir 3 days ago
Why would you go on a public route instead of a private one like Monero. Most users are here for privacy and censor resistant reasons! And public transactions and wallets are not fitting with the privacy idea. The Monero way is the way it should be imo
Default avatar
Dex 3 days ago
aight so— been running into Lightning stuff while learning about zaps. what's the actual advantage of tying it to BTC instead of staying fully decentralized?
We are doing monero as well, but attaching a public profile like nostr to Monero transactions doesn't make much sense, in my opinion. Why would you use a privacy coin and then break the privacy by putting it on Nostr?
Default avatar
Amir 3 days ago
Imo it’s not a public profile, since I haven’t filled any of personal info on this platform to use it, unlike FB or other social media platforms. Secondly, I use a VPN aswell so you can’t tie my Primal account to my IP adress. Thus in theory, I have a account on Primal, which is public, but since no one knows the real person behind it, it’s basically a private account.
Default avatar
Amir 3 days ago
Also, my opinion, never understood the need to intergrate this app with a payment methode like Lightning etc. No need imo
Vitor, you're a smart man. How you continue to not get the difference is beyond me. Onchain is transparent. You can not deny that you have received funds. You can not deny that you have moved them after you received them. If you still use your nsec after receival you can't even deny that you have the capability to move them. Am I taking crazy pills?
I think perhaps the dude above means simply integrating a Monero address on your profile/notes to receive donations (only the donater and you would know the transaction happened though) If you're broadcasting the tx key with the transaction to show the details all over nostr that would be entirely different and you're right that would make no sense
The retarded thing here is still using lighting and Bitcoin and whatever TF cashu is, instead of using Monero. That's the real retardation here.
Mh yeah thats not how it works unfortunately unless youre not logged into any personal accounts with your vpn Chainalysis can simply buy your vpn address from a data broker
It's all off chain in third party mints or chains. I remember when Satoshi said we needed third parties to use it haha 😂
@Vitor Pamplona the big difference is that nostr accounts are ephemeral. Bitcoin is not. If my identity gets compromised, I can create another nym. I still had every conversation I had, I still learned everything I learned. But the money, that has to stay. I can't take any of my earnings with me. The point is that it doesn't have to be that way, but on chain makes it so.
Intelligence leads to hubris, which leads to suboptimal decision-making. We're all still talking to Vitor about it because we know he's smart enough to iterate his design, in response to new information. We just don't know if he is humble enough to do. We were all supposed to stay humble.
Given how many people have explained to you now that this is not what this is about i will be going with you are disingenuous going forward and would rather risk the privacy of your users than admit what you proposed is not a good idea (and thats not a good look my guy, at all)
Primate's avatar
Primate 3 days ago
What is it about if not seeking more untraceable anonymity?
Default avatar
Amir 2 days ago
How? A VPN IP Adress is used multiple times by multiple users in different parts of the world. Goodluck with that kind of data
Default avatar
Amir 2 days ago
That's exactly my point!
How would having the p2pkh or p2wpkh address derived (without vendor lock-in) from the nsec hurt peoples' privacy, if all they're doing is clicking a zap button with a bitcoin:[derived-address] hyperlink & no Nostr interaction is coupled with that? That, at least, would be historically precedented, vs whatever Taproot/Craproot? stuff is cooking.