VitorPamplona
Vitor Pamplona

Nostr's Chief Android Officer - Amethyst Social

Public Key

npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z

NIP-05 Address

Profile Code

nprofile1qqsyvrp9u6p0mfur9dfdru3d853tx9mdjuhkphxuxgfwmryja7zsvhqpzpmhxue69uhkummnw3ezuamfdejszrmhwden5te0dehhxarj9ekk7mgpz4mhxue69uhkg6t5w3hjuur4vghhyetvv9uszrthwden5te0dehhxtnvdakqz9nhwden5te0we5hgmmj9ehx7um5wgcjucm0d5q32amnwvaz7tmjv4kxz7fwdehhxarj9ehx2aquw2xf3

Publishing to

Author Public Key

npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z

Show more details

Last Notes

2026-03-10 03:37:19 CET

I have a new idea for a business
https://image.nostr.build/1849d5110cd63ed745a94fc904619a63ac2b9d37533a688dd158e0d2f785aa75.jpg

2026-03-10 03:30:48 CET

- reply

I just got a PR that allows users to follow the entire follow list of another person (likely the friend that onboarded them) after the key creation. Do you think people want that?

2026-03-10 03:28:53 CET

https://image.nostr.build/30105a3e3f75fd57e4bfab3b778c10c0128a9971438a1ed2d31c6cab90fa517d.jpg

2026-03-10 01:09:23 CET

Hey @nprofile…am06 @nprofile…rj0e, there is a bug on relay.fountain.fm where the relay returns 500-1000 random events every time the filter has a `q` tag, like this.
["REQ","test", { "kinds":[1], "#q":["123412341234"] } ]
We do this all the time when searching for quotes of the events the user is seeing at the moment. Which means, as the user scrolls, a new note shows up, fountain gets a query and returns 500 unrelated events. Huge data usage for nothing.

2026-03-09 04:07:13 CET

You can't afford the costs of motivating someone. The secret is to double down on people whose motivations roughly align with yours even if they are flawed.

2026-03-03 22:42:11 CET

- reply

yep

2026-03-02 23:23:16 CET

Testing another thing...
#nevent1q…mz6l

2026-03-01 05:06:31 CET

- reply

Cool, will try later.

2026-03-01 05:04:14 CET

- reply

Does it work over Tor?

2026-02-27 23:25:45 CET

In 2025, 250 people caught Salmonella from eggs in the US. Sounds like a lot.
But 109 billion eggs were sold in the US alone in that year.
That's 1 in 436 million, double your lottery winning chances.
You are 400 times more likely to get hit by lightning.

2026-02-27 12:53:03 CET

If you are an Amethyst user, and want a feature/fix, you can pretty much ask Claude Code on their webpage (no need for any local coding setup) to make the feature for you.
Let it work and approve everything.
In the end, the interface will have a button to "Create a PR". Just click that button and it will send it to me. I will most likely merge it.
You need the $17/mo "Pro" plan, but it works really well. The code is good.

2026-02-27 00:54:31 CET

Folks, we need you now. Claude is offering 6 months of Max x20 to open source projects that have 5,000+ stars on GitHub.
Go to GitHub and star your preferred Nostr projects. Let's see if at least one of us makes it.
https://github.com/vitorpamplona/amethyst
More info: https://claude.com/contact-sales/claude-for-oss

2026-02-26 21:05:17 CET

We need the inverse of NIP-56 Reports: An event kind to say that I vouch for this key with some categories, like meeting in person to prove to be a real human or completely trusting this individual.
Ideas of other categories?
Current thoughts:
- "Proof of Humanity": I have met the person in real life and can confirm it is not an impersonator.
- "Blind Faith": this is an account I generally trust and or pay attention to, like a close friend or colleague, regardless of what anyone else says.
- "Backer": I support this person either financially or in other ways and want he/she to succeed in their cause.
- "Competent": I think this person is competent in what they do, professionally or personally, similar to a testimonial.
- "Benevolent": I believe this person does way more good than bad in the world.
- "Moral": I believe this person has high moral compass, honesty, and alignment with shared values or beliefs.

2026-02-24 19:20:40 CET

- reply

@nprofile…xcpk should I upload to the local app and then mirror for everyone else?

2026-02-24 17:46:07 CET

All the cool things are happening on Android:
Morganite, a Blossom client-side caching
https://github.com/greenart7c3/Morganite
Keep: FROST threshold signer for Android
https://github.com/privkeyio/keep-android
Prism: Share Anything to Nostr from Android
https://github.com/hardran3/Prism

2026-02-24 17:19:26 CET

This is so cool! A full test suite for all things Nostr Wallet Connect. Thank you @nprofile…x4vu
https://sandbox.albylabs.com/

2026-02-23 15:27:54 CET

- reply

I realized a while ago that I am happier when I presume everything is a mess and I just need to work through the mess as opposed to having to fix it.

2026-02-23 15:19:49 CET

Nostr keys are not identities. They are personas.
Identity is your internal, relatively constant self, whereas a persona is external, fluid, and situational (e.g., work vs. home). A persona is a conscious "mask" over your identity. Identity provides a sense of self-continuity. A persona is for adapting to environmental demands. It is constructed to navigate specific social situations.

2026-02-23 04:12:17 CET

Gotta applaud the commitment to the game
https://image.nostr.build/0dc188c68a1d439e5bd2bd1516d7b862d18e2f321fb115d25745cca67dc6cff4.jpg

2026-02-23 03:05:51 CET

- reply

It could be a client thing, we just don't store anything locally yet. The 1000 people list is not fully loaded until you go through all of them. That's why search doesn't work without the relay providing the data..
We will add it in the future though

2026-02-23 02:53:30 CET

- reply

Which search relays are you using? You can add wss://antiprimal.net if you were using nostr.band before.

2026-02-23 00:30:06 CET

- reply

We will have more interesting WoT providers that can more accurately point to the real ones than nip 05 can.

2026-02-23 00:26:57 CET

- reply

Every day, all day... Msg is life.

2026-02-23 00:22:22 CET

- reply

We don't even show nip05 in the out of the box UI anymore. :(

2026-02-22 23:35:15 CET

- reply

Too bad browsers don't just open the file inside of them...

2026-02-22 22:58:18 CET

- reply

Flutter is older and basic multiplatform works.
KMP is the future (google has stopped funding flutter) but the iOS part is still VERY new. It works, and it goes native in iOS too, but not everything is perfectly the same as a native UI in iOS.
KMP works better for the backend of the apps. I saw a lot of people doing native swift with a Kotlin backend than using Compose for iOS, for instance. Just because the feeling is closer to what iOS users want.

2026-02-22 21:27:26 CET

- reply

Yes, but does it block the web by default and only open the permission when the app requests it and the user approves?

2026-02-22 17:39:46 CET

- reply

Apple probably does. But I deal with them in a different way that I deal with a random dev out there.

2026-02-22 17:08:02 CET

- reply

To me as a user. I can test the shit out of dangerous apps without worrying too much about the data I have in the same machine. It's not perfect, but it does help a lot.

2026-02-22 17:07:02 CET

- reply

That is the interesting part. Android is falling behind in that integration for games. There are no mappings to Kotlin for them yet (as best as I know). So, it is hard to integrate them with the rest of the ecosystem. But it will get there...

2026-02-22 16:50:11 CET

- reply

Yep. It's closed but it is more secure. Apps cannot fuck around. Lots of devs tried :)

2026-02-22 16:42:53 CET

- reply

MacOS has app sandboxing. It's just linux and windows (and freebsd) that suck at it.

2026-02-22 16:40:46 CET

- reply

Nah, SELinux, the thing that isolates Android apps, was developed by the NSA since 87 and merged into the kernel in 2003, way before any notion of mobile apps existed. Basically 40 years of work for the defaults to still not use it.

2026-02-22 16:12:21 CET

- reply

That's why we use Graphene. But yes, manufacturers make everything worse.

2026-02-22 16:09:45 CET

- reply

Even if people are more careful, it is still crazy that the default behavior is to access the entire filesystem and access and modify everything in the user's folder.

2026-02-22 16:09:00 CET

- reply

Does Snap have permission requests to access the web (sockets)?

2026-02-22 16:04:33 CET

- reply

last time I checked Flatpacks have access to the user's home folder by default and save everything there too. I know they made stricter permissions but the defaults are still quite wide.

2026-02-22 15:43:11 CET

- reply

So the "linux" solution to the problem is having an entire OS for each app? :)

2026-02-22 15:27:50 CET

I have been doing Android development for so long that Linux feels extremely insecure by comparison. The idea that one App can mess around with the user data from another app by default is absolutely crazy to me.
On modern Android, I can't even request access to all your photos at the same time. I need to request them ONE BY ONE.

2026-02-22 12:43:42 CET

- reply

Sure, it's not mine anyway :)

2026-02-22 04:33:04 CET

https://image.nostr.build/7875c3cc4314abac06d5aeb9d60be3ab02d87a56b55db60dfdb7e5ef07885c51.jpg

2026-02-22 04:11:39 CET

Let me introduce you to farm metal https://video.nostr.build/677365f232d324bae119a3acec04eca867c9e734adc4b2b2768b86faf15a090d.mp4

2026-02-22 04:08:50 CET

- reply

Yep, otherwise it wouldnt make any sense, right? Nobody would know what the lie was about.

2026-02-22 03:01:38 CET

- reply

You reposted Luke's Liar. Wasn't this what you wanted?

2026-02-22 03:00:08 CET

- reply

Which one did you repost?

2026-02-22 01:32:35 CET

- reply

I think I am going to start a new NIP32 usage for content labeling for slop. Though I will also add a human slop just to give AI a chance :)

2026-02-21 14:21:33 CET

Modern life is mostly about waiting for others to build or fix the thing you want to use.

2026-02-21 14:17:55 CET

- reply

Yep, it has been fixed... I am just trying to fix the video playback to ship a new version

2026-02-21 13:06:47 CET

Epstein never lost access to the banking system, all with KYC.

2026-02-21 12:22:03 CET

- reply

Yes, but the signer doesn't store chat data, just the key state. Clients then download and decrypt chat data when they need. Similar interface as any nostr signer.
Nostr clients are used to keep decrypted data that cannot be verified if leaked safe. So that should be a problem.
Then users wouldn't need to ask themselves if each MLS chat app is safe or not. They just trust the signer or verify that the signer is safe once. And go crazy testing chat app interfaces.
MLS apps are way too bloated already because the interface requires them too. Lots of dependencies that can be points of attack to steal the keys. That bloat is a massive rusk.
Putting keys in a separate, protected OS process that maybe doesn't even have access to the network is key.

2026-02-21 02:01:18 CET

- reply

Sorry, I DO think it is a good idea to create kind 0s.

2026-02-21 01:25:27 CET

- reply

Fiatjaf did merge that kind 0 PR for nip 85. It was too fast, but I don't think it is generally a good idea to create kind 0s for every key, even if we end up not using for the providers main address.

2026-02-21 01:24:01 CET

- reply

It wouldn't be another app. It's just the same signer lots of people already use, but upgraded to support MLS.

2026-02-21 01:22:11 CET

👀
#nevent1q…a8s2

2026-02-21 00:12:39 CET

I am starting to think MLS/Marmot needs to be a Signer app, not a Nostr client.
Clients just talk to the signer to encrypt/decrypt without ever having view or control of the inner secrets and ratchet states of MLS.
Which means poorly implemented Clients can't leak your MLS state while consistently sharing chat rooms among them in an interoperable fashion. Users can start a conversation in Amethyst and reply on Primal or WhiteNoise because they are all being signed, encrypted and decrypted by the same ratchet-holding app.
The MLS signer then can be super lean and take absolute control over the privacy of that data while clients can go crazy in chat designs and other nostr features.
Would it be feasible, @nprofile…kd6s ?

2026-02-20 13:00:25 CET

GM https://image.nostr.build/199a927f3c597d1d247f2e18f87a4b191e8e0fe9fcee273d24d0b08e1f490ff2.jpg

2026-02-20 04:34:05 CET

- reply

Peak UI/UX design. https://image.nostr.build/c7b0b636543969e6a9292fec1fbe8829e455289071d7e461f6553e99a9765f4c.jpg

2026-02-20 04:27:53 CET

It was very slow and broke easily, but this is how early tech looks like 25 years before their prime time.
https://video.nostr.build/909d8888a44ee3f39029c2b71a77866179dc097f1e67f2e8e20d2461543228c1.mp4

2026-02-20 04:15:21 CET

GN
https://image.nostr.build/04b21bb1d29f709d02bbe56c6725ca140b213752cae97f24450d33da7a422cde.jpg

2026-02-19 23:26:12 CET

- reply

Yep

2026-02-19 22:42:58 CET

- reply

Lack of well written Skills.md

2026-02-19 21:38:49 CET

- reply

There is no "decision" with outbox. Each client implements things in the way they want to implement. Relay-based approach is just way more centralizing that outbox.

2026-02-19 21:22:21 CET

User lock-in is a dev disease that must die.
Can't wait for AI to just blow these companies out of the water.

2026-02-19 21:19:24 CET

- reply

Sure. But I would develop to get new users instead of developing to replace Amethyst.

2026-02-19 21:13:51 CET

- reply

In Nostr, clients are supposed to figure out which relays to access based on need. If you are follow people, the app is supposed to calculate where those people are posting and connect there to download what you need. Amethyst, for instance, connects to up to 1000 relays at the same time to find your content.
In that way, you just need to follow people and you don't need to remember which relays to access.

2026-02-19 21:11:51 CET

- reply

True, but we don't have signers for desktop and iOS apps ..

2026-02-19 21:09:29 CET

- reply

You think you should control what users see in your own relay, with whatever algos you, not the user, see fit.
I think users should be the ones deciding which algos they want to apply to see or hide things in their own apps.
They should control which relays they trust and apps should NEVER recommend anything that is not dynamically computed through the users own network.
Like you saw with Amethyst's search when nostr.band went down, hard coded relays don't work.
Yes, my way is more complicated because nobody has ever designed this like that. Every app dev LOVES to control their user. It's hard to say no to that. But it is way better in the long run.
I have been rug pulled by so many relays that tried to "protect users" in the name of usability or convinience that I don't find this approach realistic anymore. It's just a matter of time until the next rug pull happens. ZapStore won't be different.

2026-02-19 13:13:59 CET

GM https://image.nostr.build/21ca843e1c7882abdcb761887b3887627687810bfe54cf8c1a891727ee75aab2.jpg

2026-02-19 05:36:16 CET

Cool onboarding tool
https://www.joinnostr.com/

2026-02-19 05:31:04 CET

- reply

Correct. A more complicated Mastodon

2026-02-19 05:14:16 CET

- reply

There are many. nostr.wine for instance requires one time payment.

2026-02-19 05:10:43 CET

- reply

They are either full of crap or actively moderated by the operation with whatever rules that operator wants to apply.

2026-02-19 05:01:15 CET

- reply

Yeah. DB is almost ready for that. Unfortunately citrine was too slow for the number of events needed to store.
Though I would argue that the DB would only mask the situation. In the end we need good nip 50 relays out there for first time users.

2026-02-19 04:59:13 CET

Nostr is an eternal dispute between people who trust relay policies and talk to whatever keys are there, and those who only trust follows and use whatever relays those keys are using.
Do you trust relays to pick whom you can talk to, or do you trust your follows directly?

2026-02-19 04:49:56 CET

- reply

Also your Nip05 is broken

2026-02-19 04:43:25 CET

- reply

Sure, but our job is to educate them to be decentralized, independent from even ourselves.
Otherwise we are just building another vendor lock-in platform, similar to how Google and Microsoft control who gets to use emails. All they are doing is managing the backend options automatically for users and, with that, blocking everyone they don't like.

2026-02-18 22:20:00 CET

- reply

It's the typical VC play... They want to control you. If they cannot control you, they will control you produce.

2026-02-18 22:04:52 CET

This is irrelevant if your project fails. But if it happens to succeed and make a lot of money, I am sure this will be painful. They are not going to bankrupt you, but they are going to legally control you like a puppet.
#nevent1q…es46

2026-02-18 22:02:30 CET

- reply

Speaking about that.. are we doing Bolt 12 zaps? :)

2026-02-18 21:21:16 CET

- reply

What AI are you using that is that dumb?
https://gemini.google.com/share/9afe8035595a

2026-02-18 21:15:47 CET

- reply

There is always the exception, but most of the time is pretty good. At least on my experience, the way AI writes code that is a LOT easier to review/understand than how a human writes. To me it is not even a question of who is better. AI has already won that a couple months ago. Now its about making sure the AI is doing what the dev wants it to do in the way he/she wants it to behave.

2026-02-18 20:03:30 CET

- reply

added

2026-02-18 19:30:48 CET

- reply

@nprofile…an8r is cdn.satellite.earth still satellite's blossom url?

2026-02-18 19:29:45 CET

I am reviewing Amethyst's recommendations of Blossom servers (paid and free), which ones are you using?

2026-02-18 18:45:46 CET

- reply

You don't have an option. You just haven't been under attack yet.
Add Mute words as well. Most attacks are smart enough to go around keys, but not smart to avoid some common word in them.

2026-02-18 17:17:31 CET

- reply

Yeah, I hate that back and forth of correcting things.

2026-02-18 17:08:29 CET

- reply

Let me know if it still doesn't work.

2026-02-18 17:08:08 CET

- reply

Yeah, we need to add a little Your Relays Suck kind a popup... :)
But I have seen people using Amethyst will all the warning popups (like empty search relays) and still not do anything about it. So, I am looking for alternatives in testing if relays are working, making users aware, and "forcing" them to fix their stuff.

2026-02-18 17:05:41 CET

- reply

That just means that your Skills.MD, Agents.MD, etc file is not good enough. What I noticed is that in large codebases, AI needs a "summary" of what exists in the repo because it cannot send the entire codebase in the context window and searching for things all the time is extremely slow/costly.

2026-02-18 16:59:59 CET

- reply

Its your Search relays. Nostr.band went away and which is included in the defaults.
These ones seem to work:
wss://nostr.wine
wss://relay.noswhere.com
wss://relay.ditto.pub
wss://antiprimal.net
wss://search.nos.today

2026-02-18 13:56:17 CET

- reply

AI writes better than any human right now. Humans asking AI to make better quality code is laughable. There might be bugs or the code is not doing what the dev thought it should do, but code quality itself is undeniably better.

2026-02-18 03:15:24 CET

- reply

Let's see how well nip88 does first

2026-02-18 03:15:03 CET

- reply

No, lots of people tried but they all failed one after another. The best effort is still Frostr, but I am not sure how long it will take to finish.

2026-02-18 01:39:01 CET

- reply

Coming too :)

2026-02-18 01:36:34 CET

It will be a shame if we end up finishing the implementation of all the NIPs just in time for AI to implement everything in... 2 days...

2026-02-18 01:34:15 CET

- reply

Wen NIP? :)

2026-02-17 23:39:42 CET

- reply

69 is still there btw. But I do think it is way too complicated. Let's hope this improves it.

2026-02-17 22:59:33 CET

- reply

We have not implemented yet the warning for when your search relays suck. So, no, it's not good UX.
But it is way better than Amethyst forcing you to use our relay with lots of moderation baked in.

2026-02-17 21:50:54 CET

- reply

@nprofile…6trc 🚀

2026-02-17 21:33:24 CET

- reply

The proof is that if I don't add that line my code crashes. With it, it works perfectly 😅