Ron Stoner

https://ron.stoner.com

Aspiring Chief Security Officer @ Nostr

Public Key

npub1qjtnsj6hks7pq7nh3pcyv2gpha5wp6zc8vew9qt9vd2rcpvhsjjqydz44v

NIP-05 Address

Profile Code

nprofile1qqsqf9ecfdtmg0qs0fmcsuzx9yqm768qapvrkvhzs9jkx4puqktcffqpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds2h749d

Publishing to

relay.stoner.com

relay.primal.net

wot.utxo.one

Author Public Key

npub1qjtnsj6hks7pq7nh3pcyv2gpha5wp6zc8vew9qt9vd2rcpvhsjjqydz44v

Show more details

Last Notes

2024-09-09 21:55:50 UTC

Scaling Proof of Work and consensus mechanisms are the way forward. It will take some time, just as it did with finance, but that's how you stop/reduce/mitigate the attacks.
Don't trust, verify.
#pow #wot #nostr

2024-09-09 17:28:10 UTC

Not sure if this exists yet, but as the "aspiring Chief Security Officer" at Nostr, I’m starting to track known and major attacks on and from the Nostr decentralized network. Inspired by
@nprofile…vjal's Known Bitcoin Attack list. Feel free to PR and contribute as I know there are many I'm missing.
https://github.com/ronaldstoner/nostr-attacks/blob/main/README.md

2024-09-08 19:49:29 UTC

- reply

As @nprofile…k0h3 should! The world is balancing itself.

2024-09-06 16:02:42 UTC

Don't collect what you can't protect.
Use strong keys, keep out thieves.
Verify twice, avoid the price.
Don't delay, patch today.
Shield your ports, strengthen the forts.
Encrypt in flight, sleep well at night.
Back it up, don't interrupt.
Encrypt your files, avoid the trials.

2024-08-29 18:42:22 UTC

In the days of yore, when XP was great,
People installed, and sought keys to activate,
Through whispers and forums, they found their fate,
With the magic of FCKGW-RHQQ2-YXRKT-8TG6W-2B7Q8.

2024-08-27 16:54:09 UTC

OPSEC applies to the entire Electromagnetic Spectrum. Think in multiple spectrums - or die.
https://image.nostr.build/49f719c4f81144d33c54008e9c7b27e7a371bc8788becff2eeafca9c0b712730.jpg

2024-08-14 13:59:05 UTC

Woke up this morning to two data breach notifications, an extortion threat, and a phishing email from a fake exchange. Let a guy have his coffee first, jeez.

2024-05-27 01:54:25 UTC

What's the buzz? Tell me what's a-happening.

2024-05-21 16:43:01 UTC

A lot of people may not remember or were around to experience it. In order to do Web Of Trust one needed to validate another's identity before digitally signing for them. PGP key parties were had in person to perform live verifications for example. Are you willing to do this for all your Nostr friends, or would one simply and blindly sign away a trust verification? I foresee the latter.

2024-05-21 15:26:18 UTC

- reply

For followers it may, but how does that prevent me from spamming various event types? I'm looking at the bigger picture relay wise.

2024-05-21 15:24:24 UTC

- reply

How would WoT apply to other event types though? I can spam whatever data and event types I want, regardless of follower algorithms.

2024-05-21 14:44:07 UTC

- reply

I did not for this exercise. Web of trust isn't a great control by itself as others like PGP/GPG have tried it prior and it's manipulatable as well.

2024-05-21 14:31:30 UTC

Here's how I hit 1 million followers.
https://ron.stoner.com/I_Gained_1_Million_Followers_in_24_Hours/
Key takeaways:
- over half the Nostr listed relays are using some sort of spam mitigation technique(s)
- the attack was still achieveable
- socal media is easily manipulated
- follower counts and engagement are worthless
- content is the real treasure

2024-05-19 22:49:26 UTC

Who here makes the best home made lasagna, and how can I get some?

2024-05-18 00:25:16 UTC

- reply

You just have to compile the gpg binaries, add them to your user shell, generate a new public/private keypair on a Yubikey, set an admin PIN, set a user PIN, backup the admin PIN, backup the user PIN, backup the gpg private key (securely that is), reconfigure your ssh connectivity to the gpg-agent, update your local terminal config and paths, source that config, enter the decryption commands, enter your user PIN, and then tap your Yubikey. As simple as that! 😂

2024-05-18 00:20:09 UTC

- reply

When BlueSky follower bridge? I'd love to send that all over to them and see if they could handle it.

2024-05-17 20:25:00 UTC

- reply

Plus some secret sauce. I'm serious about educating relay operators and devs on how to keep a healthy Nostr ecosystem, and how a Nostr security team could function. I'm done with my exercise.

2024-05-17 19:57:55 UTC

1 Million followers.🏆
What's the Nostr security budget and how do I apply to run it? @npub1xts…kk5s @npub180c…h6w6
https://image.nostr.build/db1e4d908e729353067b69724d5faa92489a03bb4a2b0a88b9554ac1c1e9939c.jpg

2024-05-16 18:45:47 UTC

testnet4 secured
https://image.nostr.build/31eb1636bac15ee9c3da15fa3da0c246380825483a5c3a59dd5bcbf5075b0944.jpg

2024-05-05 01:33:36 UTC

Hi everyone. I'm still here but am going through a lot of life events and major changes, some my choice some not. Focus is on priorities at the moment and I still love you all.

2023-12-24 21:28:11 UTC

Bulleit in a bullet glass. Happy holidays. #pewpew
https://image.nostr.build/740753e923f769defa8134649f2b2a43f78ffb898eebba8f934e21d3e503132e.jpg#m=image%2Fjpeg&dim=1080x1920&blurhash=%5DeF%7E2CRjR-j%5Eae%7EWfRj%40j%5BofbdogoJoJbboxkBWCahWBV%5BoJWqWqj%3FVtV%5BkBkAj%5BbEbGazafafbboeafWCaysWahbFbYbH&x=767bae5d4c55d57e63e54e46c29f7fadaec777c8351f411c2e741c998bab4e1f

2023-11-13 22:28:42 UTC

I need a script that analyzes my local relay database and subscribes to other relays in order to backfill missing events based on my pubkey whitelist after I’ve completed downtime maintenance.
I’m hoping one of your GPT bots picks this up and automagically makes it happen or else I know what project I’ll be working overnight.
It’s that and/or load balancing.