Well, there's the rub...unless you go in and review the code yourself, you must end up trusting others...
And when someone like @ hodlbod posts "hey, we have an issue" I automatically trust that developer even more.
What I *really* worry about is dishonest projects / developers, and you see it all the time. Someone releases an app on the Play Store that does something nefarious...happens more often that most realize.
And look at all the data breaches out there--those are code mistakes that ARE audited (heavily) and still they happen...
Login to reply
Replies (1)
I hear you. What do you see as the solution?
I don’t have one, though I do see it is probably a good idea to let new users know that this issue has not been solved, and that they need to be aware that there is a chance their nsec could be compromised.
Of course, that would cause friction too, but my approach with onboarding people to both #bitcoin and #nostr is to remind them that this is all a big experiment, and we are part of it, part of creating the potential for freedom, even as we move into a digital age.