Nostr notes by Satoshi Spritz Piacenza&Parma

GM☕ delego all'AI il compito di tradurre la #bellezza che ...

2026-03-30T08:05:49Z

GM☕
delego all'AI il compito di tradurre la #bellezza che vedo questa mattina di inizio #primavera.
Buon #lunedì

L'altro 67% è rimasto integro, si vede 🤣 #nevent1q…zqh8

2026-03-29T12:28:26Z

L'altro 67% è rimasto integro, si vede 🤣

quoting
nevent1q…zqh8

According to the pentagon this plane is only 33% destroyed!

Same question here! 🤣 Flour yes (gnocchi) or not?

2026-03-29T12:26:36Z

In reply to nevent1q…3427
_________________________

Same question here! 🤣
Flour yes (gnocchi) or not?

Come ci piacerebbe conoscere questa materia? 👇 ...

2026-03-29T12:23:31Z

Come ci piacerebbe conoscere questa materia? 👇

quoting
nevent1q…g355
Which one is better, NextDNS or Control D?

https://untraceabledigitaldissident.com/nextdns-vs-control-d/

Dunno exactly why, is something about the Sunday before Easter: ...

2026-03-29T12:21:32Z

In reply to nevent1q…t78m
_________________________

Dunno exactly why, is something about the Sunday before Easter: the unique religious function that I love. in idaly we use to take olive branches in churches and bring to home. My mom loved it, and I continue to in her memory 💜

GM☕ buona domenica delle 🌴🌴 PV🌴

2026-03-29T09:11:31Z

GM☕ buona domenica delle 🌴🌴
PV🌴

Buona domenica delle 🌴🌴

2026-03-29T09:10:44Z

In reply to nevent1q…vgx6
_________________________

Buona domenica delle 🌴🌴

I didn't read it yet, apologize if my question results OT. ...

2026-03-29T09:10:02Z

In reply to nevent1q…6put
_________________________

I didn't read it yet, apologize if my question results OT. But isn't #copyright a fiat crap? why you advocate it?

Ce l'ho fatta! Ho capito (ed eseguito personalmente) la ...

2026-03-28T19:39:23Z

Ce l'ho fatta! Ho capito (ed eseguito personalmente) la verifica di una firma #ECDSA

PV🤙

2026-03-28T10:16:28Z

In reply to nevent1q…qrlr
_________________________

PV🤙

Regole per te Ma non per m.. ah NO! #nevent1q…x076

2026-03-28T10:16:00Z

Regole per te
Ma non per m.. ah NO!

quoting
nevent1q…x076
⚡️🚨🇪🇺 ALERT - European Commission confirms its website was breached after a hacker said they stole more than 350GB of data. The hacker plans to publish it online.

A humiliating blow for Brussels, which imposes ultra-strict cybersecurity laws on all of Europe...

The today's chickens I suppose 🤣

2026-03-28T10:14:42Z

In reply to nevent1q…49pl
_________________________

The today's chickens I suppose 🤣

GM☕ #nevent1q…3fa6

2026-03-28T10:13:18Z

GM☕

quoting
nevent1q…3fa6
Gm #nostr

PV🤙 sir

2026-03-27T11:43:49Z

In reply to nevent1q…vka6
_________________________

PV🤙 sir

Traveling opens with a great start, and you're having from ...

2026-03-27T10:23:39Z

In reply to nevent1q…a60e
_________________________

Traveling opens with a great start, and you're having from the most beautiful town in the world.
Have a travel better than this start 🤙

Go un-aesthetic? It's basically my doubt this properly time: ...

2026-03-27T09:23:30Z

In reply to nevent1q…nvwc
_________________________

Go un-aesthetic?
It's basically my doubt this properly time: preparing highly aesthetic presentations, that means lot of extra time to do them 🙃

GM☕ https://i.nostr.build/F6pwLpbmsUEk7xyc.jpg

2026-03-27T07:14:03Z

GM☕

Do need #webassembly?

2026-03-25T21:56:43Z

In reply to nevent1q…xkze
_________________________

Do need #webassembly?

🤣 #nevent1q…2vg6

2026-03-25T21:56:08Z

🤣

quoting
nevent1q…2vg6
JavaScript is insanely powerful

Do it in a regular basis. Notte daily tbh, #nevent1q…e68z

2026-03-25T21:51:29Z

Do it in a regular basis. Notte daily tbh,

quoting
nevent1q…e68z
How much would the level of Nostr engagement improve if we each stepped out of our follower feed bubble for five minutes and liked, responded, or reshared a few interesting things from the Nostr firehose? Could each of us make that a five minutes a day #grownostr habit?

Mi pare che #Ditto sia, fino ad ora, il client che si sincronizza ...

2026-03-25T14:54:20Z

Mi pare che #Ditto sia, fino ad ora, il client che si sincronizza più velocemente con le azioni del profilo: se leggo notifiche/messaggi o post su Ditto, altri client mi ripropongono tutto come se non avessi mai fatto login. Se leggo in altro client e accedo a #ditto, lui lo sa e non mi annoia con cose già viste. Dopo 3 anni su #Nostr con vari profili, è una bella esperienza 🤣

È solo mia impressione?

😱 #nevent1q…q4gv

2026-03-24T22:44:09Z

😱

quoting
nevent1q…q4gv
A hacker group just compromised one of the most widely used security scanners in the world, and used it to steal half a million credentials from companies that trusted it to keep them safe.

On March 19, a threat actor group called TeamPCP injected credential-stealing malware into Trivy, a popular open-source vulnerability scanner maintained by Aqua Security. Trivy is used by thousands of companies to scan their code and infrastructure for security flaws. The attackers compromised 75 GitHub Action tags, the Trivy Docker images, and related CI/CD pipelines, meaning every company running automated security scans through Trivy was unknowingly executing the attackers' code.

The malware harvested SSH keys, cloud credentials, Kubernetes secrets, cryptocurrency wallets, and .env files from every environment it touched. The stolen data was encrypted and exfiltrated to attacker-controlled servers.

But the attack didn't stop there. Using credentials stolen from Trivy's CI/CD pipeline, TeamPCP then backdoored LiteLLM, a widely used Python framework for managing AI model APIs. Two malicious versions (1.82.7 and 1.82.8) were pushed to PyPI, the main Python package repository. The second version was designed to execute automatically on every Python process startup in the environment, no user interaction required. From there, it deployed privileged pods across entire Kubernetes clusters and installed persistent backdoors on every node.

The attackers also pushed compromised Docker images of Trivy (versions 0.69.4, 0.69.5, 0.69.6) to Docker Hub and compromised dozens of npm packages with a self-spreading worm called CanisterWorm. They even defaced 44 internal Aqua Security repositories in a scripted 2-minute burst, renaming them all with "TeamPCP Owns Aqua Security."

According to the International Cyber Digest, which is in direct contact with the attackers, TeamPCP claims to have exfiltrated 300 GB of compressed credentials and is actively working through them. The LiteLLM compromise alone reportedly yielded half a million stolen credentials. The group says it is currently extorting several multi-billion-dollar companies.

Each compromised environment yielded credentials that unlocked the next target. The pivot from CI/CD pipelines to production Python packages running in Kubernetes clusters was deliberate escalation. Security researchers say this campaign is "almost certainly not over."

This is what a modern supply chain attack looks like. The tools companies trust to secure their infrastructure become the attack vector. The irony is brutal, the security scanner was the vulnerability.

Nuovo appuntamento con Satoshi Spritz #Milano: nella capitale del ...

2026-03-24T15:15:43Z

Nuovo appuntamento con Satoshi Spritz #Milano:
nella capitale del #Ducato sezioneremo la formula dell'emissione di #Bitcoin, spulciando nel codice. Come si arriva a 21 Milioni?
Domani, 25 marzo, dalle ore 18 c/o Carpe Diem - Via M. Macchi 43 👇🏻

Nostr event nevent1qqs0wt3fdvmq5a733ml6xj6ld7sjyrwlh32a7m7rel2e5qdet7umekgzyql0vvvnkps5p7384qs7ppmxjf0wn5ttaja5elkzm8dxxcf4cs6espnx8f7

2026-03-24T10:23:48Z

GM☕

I've just made the procedure and it's clever, nice. ...

2026-03-22T22:13:49Z

In reply to nevent1q…j9k6
_________________________

I've just made the procedure and it's clever, nice.
Everything needs to be explained to ppl with small but none desire or capabilities to learn a new technology. So what next?
Maybe you can add a small "post again" window to let people post again via web, before learning what is mandatory for use nostr? An unique experience test, like add picture and banner? Or a direct link to choose a NIP-05 handle?

Disagree. Nostr doesn't spread because ppl think they ...

2026-03-22T15:16:11Z

In reply to nevent1q…hxuh
_________________________

Disagree. Nostr doesn't spread because ppl think they don't need. Even if they've been deplatformed, they supplicant for reopening their centralized account. One like on #Instagram load mor cum than real sex

GM Have a wonderful #Sunday sir

2026-03-22T11:11:01Z

In reply to nevent1q…r4u4
_________________________

GM
Have a wonderful #Sunday sir

GM nostriches Non per stuzzicarvi, ma il #SatoshiSpritz di ...

2026-03-22T10:09:34Z

GM nostriches
Non per stuzzicarvi, ma il #SatoshiSpritz di #Piacenza & #Parma sta prendendo una bellissima forma.
Interesse, curiosità, voglia di imparare; non si può chiedere di meglio ad un meetup locale #Bitcoin only.
È bellissimo farne parte, portare argomenti e presentazioni 💜
#grazie Valerio Vaccaro (nprofile…yfmj) Chiarant (nprofile…gmay) Satoshi Spritz (nprofile…02wx) Blockstream (nprofile…2pcj)

GM #SatoshiSpritz #Piacenza #Parma, oggi dalle 18.30. #Entropia e ...

2026-03-21T13:07:24Z

GM
#SatoshiSpritz #Piacenza #Parma, oggi dalle 18.30.
#Entropia e contest con quiz a premi: in palio un #JADE classic di @Blockstream 👇

Fidenza, bar 50Special, Loc. Ponte Ghiara 32

quoting
nevent1q…k5l7
Satoshi Spritz meets Blockstream #JADE

Siamo pronti per il nuovo #SatoshiSpritz Parma&Piacenza

Sabato 21 marzo scopriremo diversi modi per creare una #mnemonica e poi useremo questa #entropia per inizializzare un JADE.
Al termine, ci sarà un quiz a premi: in palio un JADE classic offerto da Blockstream (nprofile…6av2)

📍Consueto ritrovo al bar 50 Special di Fidenza -> Loc. Ponte Ghiara, 32
🕡 18.30 -> inizio presentazione: 19.15

Satoshi Spritz (nprofile…wzsy)

Ah yeah, and this is a feature, IMHO. Thanks, was not thinking on ...

2026-03-20T22:09:09Z

In reply to nevent1q…gcvc
_________________________

Ah yeah, and this is a feature, IMHO.
Thanks, was not thinking on it 🙏

How hard a revocation key like in #gpg, but for schnorr?

2026-03-20T21:54:14Z

In reply to nevent1q…y075
_________________________

How hard a revocation key like in #gpg, but for schnorr?

#nevent1q…khdn

2026-03-20T20:01:43Z

In reply to nevent1q…njqz
_________________________

quoting nevent1q…khdn
Ditto.

nevent1q…utgh

Appena passa la mando. Grazie

2026-03-20T19:55:01Z

In reply to nevent1q…njqz
_________________________

Appena passa la mando. Grazie

Non vedo le immagini degli altri. Il mio Amethyst non legge le ...

2026-03-20T19:45:39Z

In reply to nevent1q…5ufs
_________________________

Non vedo le immagini degli altri. Il mio Amethyst non legge le immagini postate da Ditto degli altri utenti

Se ci fosse il Colosseo anche là? ...

2026-03-20T16:33:21Z

Se ci fosse il Colosseo anche là?

GM guys and galls., very serious question: on my #Ametyst I ...

2026-03-20T07:43:12Z

GM guys and galls.,
very serious question: on my #Ametyst I DON'T upload any of the pictures shared via #Ditto.
I basically lack on that fu***ing things named #servers and #relays, so I suspect the problem is there.
Where can I study and understand those stuff, as I'm 5?
#asknostr

GM #Nostr se stasera avete 10 minuti di libertà e volete ...

2026-03-19T08:00:38Z

GM #Nostr
se stasera avete 10 minuti di libertà e volete ripassare come gestire la liquidità del canale LN di #Phoenix e - soprattutto - come recuperare i fondi in totale self-custody, collegatevi con #OfficineBitcoin.
Poi droppate qui la npub che vi meritate il #Badge 😜

#puravida 🤙 buona giornata 💜

2026-03-19T07:49:26Z

In reply to nevent1q…mjx0
_________________________

#puravida 🤙 buona giornata 💜

PV🤙 sir

2026-03-19T07:48:48Z

In reply to nevent1q…mj99
_________________________

PV🤙 sir

ho deciso di deliziare i miei colleghi di corso con un po' di ...

2026-03-18T17:24:55Z

ho deciso di deliziare i miei colleghi di corso con un po' di
#ECC #cryptography

Vero 🤣 #nevent1q…99wa

2026-03-18T13:35:45Z

Vero 🤣

quoting
nevent1q…99wa
time flies when you have a vps

GM #nostr Ci aspetta una giornata bellissima e una conclusione ...

2026-03-18T08:13:09Z

GM #nostr
Ci aspetta una giornata bellissima e una conclusione ancora migliore:
questa sera, dalle 18.00, al bar CARPE DIEM di Via M.Macchi 43 c'è #SatoshiSPritz Milano
«Tutto quello che avreste voluto sapere su #OpenTimestamps »

Penso e spero di potermi fare una chiacchierata presto con questo ...

2026-03-17T22:44:17Z

Penso e spero di potermi fare una chiacchierata presto con questo simpatico metodo.
#impatto devastante 💜

quoting
naddr1qq…d7vl

You might be reading this article on a website that just underwent a quiet revolution. No migration to a new hosting provider, no redesign drama — no downtime. Yet everything has changed under the hood. The content you see is no longer served by a traditional CMS. It is published on Nostr — a radically simple, open protocol designed to make the web decentralized again.

In fact, you may be reading this article from somewhere else entirely, as Nostr posts are not restricted to a single client.

Why does this matter to you? Because the principle behind this change — reclaiming ownership of your data and processes — applies to your entire digital infrastructure. Not every step requires cutting-edge protocols. A properly managed database cluster on owned infrastructure, a well-configured backup strategy, or a self-hosted service can already eliminate entire categories of risk — and cost. Nostr happens to be at the frontier, but the journey toward digital sovereignty begins much closer to home. And it should begin sooner than you think.

The cracks in the cloud

In the past months alone, the world has witnessed major outages affecting Cloudflare, Amazon Web Services, and Microsoft Azure — each bringing down thousands of businesses, services, and applications that depended on them. These weren't obscure corner cases. They were systemic failures of the most trusted names in cloud computing, laying bare an uncomfortable truth: centralization is a single point of failure, no matter how many nines of uptime are promised in a contract.

Meanwhile, the AI gold rush is devouring computational resources at an unprecedented pace. RAM prices have skyrocketed in a matter of months, turning what was once a commodity into a scarce and expensive resource. Cloud bills are climbing. Infrastructure complexity is growing. Data centers are now military targets. And the companies caught in this vortex are the ones that delegated everything — their data, their processes, their sovereignty — to a handful of providers whose interests may not always align with theirs.

The question is no longer if the next disruption will come. It is when, and whether your organization will be ready for it. The good news? Reducing this dependency doesn't require a revolution. Often, it starts with straightforward decisions: running your databases on properly sized, self-managed clusters rather than opaque managed services; owning your backup pipeline end to end; ensuring critical processes can survive without a third party's blessing.

From IPFS to Nostr: the new wave of decentralization

The idea of decentralizing the web is not new. IPFS pioneered content-addressable storage and proved that peer-to-peer distribution of data could work at scale. It remains a perfectly valid solution for specific use cases — static asset distribution, data archiving, censorship-resistant publishing. But IPFS has also hit evolutionary limits: its complexity, its reliance on pinning services, and its difficulty in handling dynamic content have slowed its adoption as a general-purpose infrastructure layer.

Enter Nostr — short for "Notes and Other Stuff Transmitted by Relays". First introduced in late 2020, Nostr takes a radically different approach. Instead of reinventing storage, it reinvents communication. There is no blockchain, no token, no consensus mechanism. Just public-key cryptography, simple data structures, and an ever-growing network of independent relays that anyone can run.

This simplicity is its superpower. Nostr brings the web back to what it was always meant to be: a mesh of independent nodes, where data flows freely, where identity is self-sovereign, and where no single entity can pull the plug.

This website: a living proof of concept

Let's get concrete. The site you are browsing right now is a demonstrator of what this paradigm shift looks like in practice.

There is no Hubspot, no Webflow, no Contentful, no headless CMS sitting behind this page. Content — including this very article — is published as Nostr events and fetched and pre-rendered by the backend — or, in the IPFS version, rendered directly in the browser. The authoring workflow is straightforward: write, sign, publish to relays. The website, knowing which author(s) it has to publish, picks it up.

Moreover, there is an additional resilience layer. Should the backend ever go offline (it already runs in a Tier III data center in Europe, independent from any of the usual cloud giants, so this is unlikely), the site remains accessible via IPFS. In this fallback mode, the client's browser becomes the engine: it fetches content directly from Nostr relays, with no server needed in between. Permanent accessibility, by design.

This is not a theoretical exercise. This is infrastructure that works today, that costs a fraction of a traditional CMS stack to operate and maintain, and that cannot be taken down by a single provider's bad day.

Beyond content: identity, payments, and access control

Nostr's potential extends far beyond content management. One of its most promising dimensions is Decentralized Identity (DID). In the Nostr model, your identity is your cryptographic keypair. No email, no password, no OAuth provider that can lock you out or harvest your data. You are your key.

This opens vast possibilities that we have been exploring for years in the field of decentralized identity and access management:

Proximity economies and marketplaces: Nostr's native integration with the Lightning Network enables instant, near-zero-cost micropayments. Imagine local marketplaces, pay-per-use services, or tipping systems — all running on open protocols, requiring minimal infrastructure, and leaving no middleman in the loop.

On-demand services: lightweight backends that authenticate users and deliver services based on Nostr identity and Lightning payments, with no accounts to manage, no databases to secure, no GDPR nightmares.

Access control, both physical and digital: cryptographic proof of identity can replace badges, passwords, API keys, and subscription management systems. A signed Nostr event can open a door, grant access to a dataset, or authorize a transaction.

The building blocks are here. They are open, interoperable, and battle-tested by a growing community of developers and businesses worldwide.

The urgency: adapt or be disrupted

Let's not sugarcoat it. The world is changing at a pace that makes even seasoned technologists uncomfortable.

Artificial intelligence is on track to trigger an economic bubble the likes of which we have never seen. Not because AI is not valuable — it is — but because the speculative frenzy around it is driving resource consumption, infrastructure costs, and market distortions to unsustainable levels. When this bubble corrects — and it will — the organizations that survive will be those that kept their infrastructure lean, their data sovereign, and their processes under their own control.

For over fifteen years, the work at FBO Developments has been focused on exactly this: designing data and process infrastructures that are simultaneously simpler, more robust, and more secure. Not by chasing the latest hype, but by understanding the deep currents of technology and building on protocols and architectures that will outlast market cycles. Sometimes that means deploying a novel protocol like Nostr. More often, it means rearchitecting what already exists — self-hosted databases, open-source stacks, properly dimensioned infrastructure with controlled costs — so that no single external dependency can hold an organization hostage.

The decentralization movement is not a trend. It is a correction. A return to the foundational principles of the internet — resilience through distribution, security through cryptography, freedom through open standards. The enterprises and organizations that embrace this shift now, whether small or large, will be the ones that navigate the coming turbulence with confidence.

Reclaiming sovereignty

This website is a small but tangible example of what becomes possible when you stop renting your digital existence and start owning it. No vendor lock-in. No single point of failure. No data sitting in someone else's hands, subject to their terms, their outages, and their business decisions.

The tools exist — some of them decades old, some brand new, all of them ready. The protocols are mature. The expertise is available. The path is clear.

The only question is: will you walk it before you're forced to run?

And sorry man. I wasn't shooting, but shouting out 🤣 ...

2026-03-17T22:01:39Z

In reply to nevent1q…pkvn
_________________________

And sorry man. I wasn't shooting, but shouting out 🤣 (corrector was in Italian language, apologize)

Domenica era chiuso e ora no. Shootout to this amazing pleb ...

2026-03-17T19:44:29Z

Domenica era chiuso e ora no.
Shootout to this amazing pleb

quoting
nevent1q…qr4w
The site store is now open. Everything is currently 50% off for the early bird special. Every ebook comes with a mini course, free infographics, a quiz to test your knowledge, and access to the member area.

In the member area you can read your purchases, download your materials, and if you ever lose them can always log in and download them again.

Check it out.
https://untraceabledigitaldissident.com/products/

Forgot to watch on this: Nostria is more and more growing as the ...

2026-03-17T19:41:17Z

In reply to nevent1q…2uxk
_________________________

Forgot to watch on this: Nostria is more and more growing as the ultimate "interface" many are seeking for. Is there a backup function? I suppose yes, just asking

In Milan (incidentally idaly) we call it "the blue hour", ...

2026-03-17T11:43:06Z

In reply to nevent1q…6l7v
_________________________

In Milan (incidentally idaly) we call it "the blue hour", and in June you'll never find one more breathtaking than here

#nevent1q…6369

2026-03-17T11:40:20Z

quoting
nevent1q…6369
Bodies

#archjourney #mix #artstr #shortclip #dance #dancing #human #body

PV🤙💜

2026-03-17T11:39:28Z

In reply to nevent1q…zg4c
_________________________

PV🤙💜

Ultimi appuntamenti della collezione Inverno2026 Martedì 17 - ...

2026-03-17T10:51:23Z

Ultimi appuntamenti della collezione Inverno2026
Martedì 17 - ore 21.00 SatoshiSpritz Connect
Mercoledì 18 - ore 18.00 SatoshiSpritz Miano
Giovedì 19 - ore 21.00 Officine Bitcoin
Sabato 21 - ore 18.30 SatoshiSpritz Piacenza&Parma

No, dico: ma te li vuoi perdere?
satoshispritz.it
officinebitcoin.it

and i think ...

2026-03-17T10:20:16Z

In reply to nevent1q…pvm7
_________________________

and i think """""regulators""""" will end up choosing higher efficiency 🤣
it they don't, will end up demostrating they're #retarded

GM HSPD 🍀 https://i.nostr.build/e49C5hMjtzEuev7G.jpg

2026-03-17T09:49:37Z

GM
HSPD 🍀

Will try tomorrow. Tnx sir 💜

2026-03-16T23:07:59Z

In reply to nevent1q…gsx2
_________________________

Will try tomorrow. Tnx sir 💜

Why any of the #ditto images shared is visible on Amethyst? No a ...

2026-03-16T23:02:47Z

In reply to nevent1q…jffl
_________________________

Why any of the #ditto images shared is visible on Amethyst?
No a single one.

PV🤙

2026-03-16T22:56:37Z

In reply to nevent1q…qtks
_________________________

PV🤙

But with custodian's or not? """Not a gov. Not a ...

2026-03-16T22:56:20Z

In reply to nevent1q…wtrk
_________________________

But with custodian's or not?
"""Not a gov. Not a CB""" became just #NotYet

ma anche senza #bias politici: tutto quello che è elencato qui ...

2026-03-16T22:49:01Z

ma anche senza #bias politici: tutto quello che è elencato qui *non va bene!*, non si accorda con gli scopi né di #Bitcoin né di #Nostr.
Fàa ballà l'oeucc gent

quoting
nevent1q…5zmf
DANGER!

First, I'm a big supporter of Primal, and I know why they've compromised and used a permissioned & centralized API like Spark for their wallet. It might be the best choice for many of their users.

But also, you need to realize when you use Spark, you are trusting one very politically active, very wealthy, family (the Marcus family)..... to custody your funds, approve your transactions, and monitor your transactions.

When Primal says that your Spark wallet is "non-custodial" - this is basically a legal fiction. In reality, LightSpark ( https://www.lightspark.com/ ) is controlling your funds -- they're running the centralized Lightning nodes that handle your payments.

Again: For some users this might be fine.

But if you are not a supporter of the state of Israel ... or ... if you are engaged in anything where you need privacy, or, for example, you don't want your data shared with certain governments..... please be very cautious with Spark.

More details: https://github.com/buildonspark/spark/issues/64

sogno di fare tutto su #Nostr: i) studiare e imparare ii) ...

2026-03-16T22:45:10Z

sogno di fare tutto su #Nostr:
i) studiare e imparare
ii) preparare le lezioni
iii) editare e impaginare le slide
🤣

quoting
nevent1q…k4aq
Just shipped a major update to Projecstr — our Nostr-native visual bookmarking app — focused on interoperability and customization.

Highlights:
- Follow / Feed lists are now compatible with Ditto lists. Full CRUD for People Lists (create/edit/add/remove) changes sync bidirectionally with NIP‑51 clients.
- Two board types: Content Boards (kind:30003) for rich pins (titles, images, notes) and People Lists (kind:30000).
- Dual-tag strategy: each content pin writes an addressable projecstr (npub1zwu…e8sh) event plus a standard NIP‑51 fallback tag so other clients can render board contents natively.

If you’re building on Nostr or curating lists for your community, give it a spin.

https://projecstr.shakespeare.wtf/

AF I have them in the same building. I live in the classic ...

2026-03-16T10:38:28Z

In reply to nevent1q…zrlu
_________________________

AF I have them in the same building. I live in the classic "GM/good evening" condominia 🤣

Gm

2026-03-16T09:20:46Z

In reply to nevent1q…c2xs
_________________________

Gm

#nevent1q…fed8

2026-03-16T08:24:19Z

quoting
nevent1q…fed8
We love kyc

GM anche da voi la primavera sta svegliando tutto? E io ho una ...

2026-03-16T08:10:15Z

GM
anche da voi la primavera sta svegliando tutto? E io ho una inaspettata voglia di dormire a lungo

aaaaaaaaand the #secret is always the same: if fees are #zero, ...

2026-03-15T23:47:56Z

In reply to nevent1q…lydt
_________________________

aaaaaaaaand the #secret is always the same: if fees are #zero, the #fee is you

Wtf? #nevent1q…s0pk

2026-03-15T23:42:52Z

Wtf?

quoting
nevent1q…s0pk
🔊

Con 20k dollari un divulgatore Bitcoin costuirebbe un piccolo ...

2026-03-15T17:18:47Z

Con 20k dollari un divulgatore Bitcoin costuirebbe un piccolo capolavoro #educational

quoting
nevent1q…wfq8
Not one for AI slop, but Wartoon made this video about the Shahed-136 and we couldn't resist sharing 😎🚀 #IranWar #MilitaryIndustrialComplex #EpsteinIndustrialComplex #WarRefuge

Un anno che cerco di capire questi #DNS. Un argomento che ho ...

2026-03-15T16:37:35Z

Un anno che cerco di capire questi #DNS. Un argomento che ho ingurgitato, sbagliando. Bastavano piccoli assaggi per volta e, finalmente, ecco qui un aiuto concreto

quoting
nevent1q…0k07
Lock down DNS and you remove one of the easiest metadata streams for profiling.

https://untraceabledigitaldissident.com/best-dns-privacy-setup-nextdns-vs-pi-hole-vs-adguard/

Sto seguendo il conflitto in #MedioOriente da 2 profili: #twitter ...

2026-03-15T15:50:00Z

Sto seguendo il conflitto in #MedioOriente da 2 profili: #twitter e #nostr.
Sembrano (o sono?) raccontati da due diverse #AI
👀
Poi chiudo e torno a studiare la #crittografia sulla curva ellittica

Ma dove?

2026-03-15T09:20:39Z

In reply to nevent1q…6rq2
_________________________

Ma dove?

Welcome and #puravida 🤙

2026-03-15T09:15:56Z

In reply to nevent1q…2y6j
_________________________

Welcome and #puravida 🤙

#nevent1q…pk79

2026-03-15T09:13:01Z

quoting
nevent1q…pk79
You can focus on the bad, or focus on the good..

nevent1q…uj5t

Eccellente. Io e la mia ignoranza tecnologica, che difendo ...

2026-03-14T21:38:33Z

Eccellente.
Io e la mia ignoranza tecnologica, che difendo perché voluta, abbiamo sempre percepito questi gap e ... che 2 🏀🏀

quoting
naddr1qq…cf6j

I've been building on Nostr for a few weeks. Long enough to dig through the NIPs, run infrastructure, and notice the gap between what the protocol promises and what the ecosystem actually delivers.

The primitives are correct. Keypair, signed event, relay. Simple. The problem isn't there.

The problem is the spec shipped before the tooling existed to implement it properly. Every builder since has rationally filled that gap with whatever was available. Which happened to be centralized infrastructure. No single decision was wrong. The compounding was.

> "Decentralized" is a spectrum measured by the cost to a motivated adversary to degrade or surveil the network. Right now, that cost is embarrassingly low — not because the protocol failed, but because each missing primitive got replaced by a shortcut that stuck.

01. Default Relay Lists

Damus, Primal, Amethyst — they all ship with hardcoded relay lists. When they launched, relay discovery didn't exist. So developers hardcoded whatever was up and reliable. Rational. Temporary.

Temporary became permanent. The practical network is 10–15 well-known servers. Operators know this. Governments know this. Three relays comply with a court order and I lose write access to the social graph I thought was mine.

A decentralized system with centralized defaults is a centralized system — just with extra latency.

02. NIP-65 Is Correct. Also Widely Ignored.

NIP-65 defines outbox and inbox relay lists on my profile. If everyone publishes to their own declared relays, the network topology mirrors the social graph. No central pool. No single load-bearing relay.

In practice: outbox partially works. The inbox side is worse — most clients query the same 10–15 big relays and assume replication got there. Sometimes it did. Often only partially.

The deeper problem: NIP-65 depends on relays gossiping with each other. That gossip layer was never properly built. So clients can't trust declared relays return a complete picture — and fall back to the big ones.

Which is self-fulfilling. Big relays accumulate everything because clients keep writing there as backup, making them more complete, making clients depend on them more. Strict outbox enforcement has been tried — notes went missing, people complained, enforcement got reverted. More than once.

NIP-65 gets lip service in readmes and silent override in production.

03. Algorithmic Feeds Need Someone to Run the Algorithm

The moment a client offers smart feeds or discovery, it needs to index the entire network — or outsource it to someone who does. Primal does its own indexing. So does Yakihonne. Clients are becoming front-ends to these services.

My keypair doesn't protect me from a feed curated by an infrastructure provider with its own business model and jurisdictional exposure.

Without proper relay distribution, discovery from the edges is impossible — you need someone in the middle with a full index. The aggregator fills the gap, becomes load-bearing. The algorithm is back. It just speaks WebSocket.

04. Paid Relays Recreate Platform Economics

Paid relays make sense as spam defense. They're also natural aggregation points. Quality content gravitates to relays with uptime and filtering. Readers follow content. Network effects kick in.

The paid relay market will consolidate into a handful of dominant providers — exactly as happened with email hosting, podcast infrastructure, and every other federated protocol that touched commercial incentives.

The relay operator becomes the new platform. They have my IP, my payment, my social graph. I've rebuilt Substack on a different wire format.

05. Spam Got Solved at the Wrong Layer

Relay-level spam filtering — proof of work, payment, invite-only — made complete sense in 2022. WoT tooling didn't exist. Social graph data was sparse. Operators needed to protect their resources now. So they built gates. It worked.

That's precisely the problem. A working solution removes the pressure to build the correct one. The correct solution is protocol-level WoT filtering — cryptographic, user-sovereign, portable across relays. It never got built because relay-level gating already "solved" spam.

> The good-enough answer didn't just delay the right answer. It made it structurally unnecessary — until the whole architecture depended on the workaround.

WoT remains underspecified. Most clients treat it as optional. Every new relay defaults to the same gatekeeping pattern that calcified three years ago.

06. Clients Compete on Retention, Not Sovereignty

Client developers face the same incentives as every social app: DAU, session length, revenue.

Features that matter for decentralization — relay diversity, WoT filtering, local event caching — are invisible to users and impossible to pitch. Features that drive retention — algorithmic feeds, push notifications, polished onboarding — are easy to ship and easy to justify.

Sovereignty doesn't have a metric. So it gets deprioritized every sprint until it's a toggle in settings that nobody opens. The incentive structure makes this choice — not the developers.

07. Relay Operators and I Want Different Things

An operator's incentive is uptime, cost control, spam prevention. None of that requires serving my data reliably. It requires serving enough data to keep people from leaving. A relay that silently drops events from low-traffic accounts is still commercially viable. To the operator: acceptable loss. To me: my content disappearing without explanation.

> I want my data on my terms. The operator wants a sustainable business. In the absence of protocol enforcement, their incentives win — they control the infrastructure.

Paid relays don't fix this. What I'm buying is write access, not guaranteed availability. Free relays have the inverse problem — they run on goodwill, and when that runs out, the relay goes down and takes its history with it.

In both cases, no cryptographic guarantee my data persists. I'm trusting infrastructure the same way I trust AWS — which is exactly what I was supposed to be escaping.

08. Many Developers Are Missing the Point Entirely

This one is uncomfortable to say but needs to be said.

Nostr is a convenient backend. No database to maintain. No GDPR headaches. No auth system. Publish a signed event, let relays handle storage, done. There are threads on Stacker News with developers seriously asking if they can replace their Postgres database with a Nostr relay. No interest in censorship resistance. Just "it's easier."

The result shows in the ecosystem. Apps connecting to a single hardcoded relay. Clients skipping key management UX because "users don't care." Projects using Nostr for coordination but storing actual data on S3.

There's a GitHub repo — awesome-nostr-possibilities — that exists specifically because people noticed Nostr was being treated as Yet Another Social Media Protocol. The repo's own description is the warning: Nostr will fail if it stays just another social media protocol. That's from 2023. The ecosystem didn't course-correct.

> The protocol's openness — the feature that makes it powerful — is being harvested for convenience while the properties that make it meaningful get quietly discarded.

Nostr is not a backend shortcut. It's infrastructure for a new trust model — signed data, portable identity, user-controlled social graphs. Every app that ships ignoring sovereignty makes the network a little more normal. A little more like what we already have.

09. True Sovereignty Is a Power User Feature

Right now, genuine data sovereignty on Nostr requires running your own relay. A server. A domain. Maintenance. Cost. Achievable — but only for people with the technical depth and motivation to do it.

Everyone else trusts the default relay list and calls it decentralized.

> The protocol promised sovereignty to all. What it delivered is sovereignty for those willing to operate infrastructure — and a false sense of it for everyone else.

This might actually be the honest model going forward. Not every user needs the same sovereignty level, and not every user should bear the same infrastructure burden. But the ecosystem doesn't make that tradeoff legible — it presents casual relay usage as equivalent to self-sovereign storage. It isn't.

The honest version of Nostr is tiered: power users run their own relays and get cryptographic guarantees. Everyone else picks a relay they trust and gets portable identity plus censorship resistance at the key layer — not at the storage layer. Still meaningfully better than Web2. But it requires honesty that full sovereignty is something you build for yourself, not something the default client config gives you.

What's missing: a one-click personal relay. Verifiable storage commitments without running your own infrastructure. WoT-based relay reputation so I can make an informed trust decision instead of defaulting to whoever the client hardcoded.

The ceiling for power users is high. The floor for everyone else is lower than it should be. The gap is where most of the ecosystem lives — and where most of the centralization hides.

What Needs to Change

WoT filtering as default, not an option. NIP-02, NIP-51, graph distance scoring — the tools exist. The gap is prioritization.

Relay diversity as a visible metric. Show me how many unique relays my notes replicate across. I respond to signals I can see.

Outbox Model fallbacks must be auditable. If a client writes to a default relay because mine was slow, that should be logged and visible — not a silent decision I can't see or fix.

Lower the floor for self-sovereign storage. One-click personal relays. Verifiable storage commitments. Relay reputation via WoT. The ceiling is already there. The floor needs work.

The Verdict

Every centralization point here was a rational response to a missing tool. Default relay lists because relay discovery wasn't ready. Aggregators because client-side indexing was too hard. Relay-level spam filters because WoT didn't exist. Developers building on convenience because the deeper value wasn't visible to them.

> Each solved problem removed the pressure to build what would have prevented the next one. Slow structural decisions, each reasonable, compounding into something broken. That's harder to fix than bad intent — because there's nothing to point at.

The protocol is worth building on. But not by pretending it delivers what it doesn't yet.

Decentralization is not a feature you add later. It's a constraint you build under from day one — or you spend years retrofitting it into an ecosystem that already optimized around its absence.

See it for yourself, and test with your own data: <[https://analytics.nostr-wot.com/>\](https://analytics.nostr-wot.com/>%5C) I am building a solution for this. On Nostr. Contact me to talk about it!

Una menzione particolare per i ragazzi di @nprofile…krhy. Il ...

2026-03-14T19:51:27Z

Una menzione particolare per i ragazzi di bitcoin_devs (nprofile…krhy). Il loro progetto mi sta facendo uscire di testa, son sempre lì dietro a giocarci, imparare, progettare lezioni e (in una parola): divertirmi da pazzi.
Spero che un giorno abbiano bisogno della traduzione in italiano del sito 💜
PV plebs 🤙

GM Mattinata di #banca e #poste L'inferno è vuoto, perché i ...

2026-03-13T10:05:56Z

GM
Mattinata di #banca e #poste
L'inferno è vuoto, perché i demoni son tutti qua. Ma proprio tutti
PV🤙

Same here. Happy spring sir 💜🤙

2026-03-13T10:04:35Z

In reply to nevent1q…rktv
_________________________

Same here. Happy spring sir 💜🤙

👀 #nevent1q…uae9

2026-03-12T20:39:03Z

👀

quoting
nevent1q…uae9
📣Onboarding 100 Charlotte Businesses with 1 Bitcoin📣

Bitcoin Charlotte is launching the Onboarding 100 Initiative: our goal is to get 100 local brick-and-mortar businesses accepting Bitcoin by March 2027.

⚡Here's the deal: for every business YOU personally onboard, you'll earn 1,000,000 sats (0.01 BTC or ≈ $700 USD).

What counts as "onboarded"?

✅ Business is added to BTCMap.org
✅ They have a Bitcoin Accepted Here sign at the entrance and/or register
✅ You capture a successful Lightning payment on video
✅ Submit everything to our Telegram and get verified

That's it. You don't need to be a tech wizard. Square makes it simple for most businesses, and we even have free stickers to get them started.

Know a local coffee shop, barber, restaurant, maker, baker, or boutique that should be on the Bitcoin map? This is your chance to make it happen — and get rewarded for it.

👉 Full initiative details & FAQ: https://bitcoincharlotte.org/business/onboarding-100-initiative

E dopo i fiorellini di stamattina, la curva ellittica della sera. ...

2026-03-12T18:02:37Z

E dopo i fiorellini di stamattina, la curva ellittica della sera. La matematica della curva ellittica. Rendo l'idea?
#ECC #secp256k1

GM così oggi https://i.nostr.build/0Tt4GEqXar92TO7V.jpg made ...

2026-03-12T13:19:05Z

GM così oggi

made with 🧡 by #SatoshiSpritz #Piacenza #Parma

definitely

2026-03-11T21:45:00Z

In reply to nevent1q…x645
_________________________

definitely

Mi fa comodo pensarlo perché coccola i miei bias confermativo: ...

2026-03-11T21:42:52Z

Mi fa comodo pensarlo perché coccola i miei bias confermativo: ma questo potrebbe essere il motivo per cui ho un pessimo rapporto coi social. E pure coi social-like

quoting
nevent1q…2qq6

L'ultimo "segreto" di Phoenix • Gestione della ...

2026-03-11T16:57:47Z

L'ultimo "segreto" di Phoenix
• Gestione della #liquidità
• Cosa fare in caso di chiusura del #canale

Pochi minuti per concludere in bellezza gli appuntamenti passati insieme all'app LN di Acinq.

Giovedì 19 marzo 2026 - alle ore 21.00 in diretta e in esclusiva per Officine Bitcoin
https://t.me/officinebitcoin
- - - -
Consueto format di 👌Officine: lezione breve e poi spazio alle domande
officinebitcoin.it
satoshispritz.it

may the evening inspire you to become more self-sovereign

GM - Buongiorno! ☕ buon caffè #coffeechain

2026-03-11T08:31:47Z

GM - Buongiorno!
☕ buon caffè #coffeechain

Period #nevent1q…9pa9

2026-03-10T22:59:46Z

Period

quoting
nevent1q…9pa9

Thank you pleb. I'll give it a try in the next weeks. Before ...

2026-03-10T18:48:59Z

In reply to nevent1q…27j8
_________________________

Thank you pleb. I'll give it a try in the next weeks. Before I have to complete slides for another lesson

Avoid to download and use closed-source shits

2026-03-10T18:48:03Z

In reply to nevent1q…lqqk
_________________________

Avoid to download and use closed-source shits

Devo migliorare il rapporto "social", di cui sono ...

2026-03-10T15:53:34Z

Devo migliorare il rapporto "social", di cui sono effettivamente NON all'altezza.
La mia giustificazione di oggi è #GPG, sto preparando una lezione su #crittografia, firme digitali, creazione della coppia di chiavi e uso di GPG.

GM in ritardo di 8 ore 😂 o #jetleg-based, come preferite

I'll try it out. Not so skilled person here. Are you ...

2026-03-10T10:29:10Z

In reply to nevent1q…uyt6
_________________________

I'll try it out. Not so skilled person here. Are you available to answer some of my questions, if needed?
DM, publicly, emails, whatever you prefer 🙏

Wtf?

2026-03-09T23:08:16Z

In reply to nevent1q…mhzv
_________________________

Wtf?

#nevent1q…p9wl

2026-03-09T21:58:31Z

quoting
nevent1q…p9wl

I've tested it today for the first time. Saw a lot of ...

2026-03-09T19:21:26Z

In reply to nevent1q…whtu
_________________________

I've tested it today for the first time. Saw a lot of interesting features I'll 💜 to discover in the future. So, will use again

Nel #CypherpunkDay è anche bello rendere omaggio alle #chiavi ...

2026-03-09T16:45:10Z

Nel #CypherpunkDay è anche bello rendere omaggio alle #chiavi che usiamo su #Nostr

#SchnorrSignatures #sekp256k1 #keypair #nsec #npub #NIP01
https://github.com/nostr-protocol/nips/blob/master/01.md

:💪🏻::👍::❤️:

provandolo e riprovandolo. ma #Ditto non è il client per gestire ...

2026-03-09T16:09:34Z

provandolo e riprovandolo. ma #Ditto non è il client per gestire le community?

quoting
nevent1q…kapp
Are you a fan of customization? Do you like to choose your own layout? Your own theme? The new Ditto app is launching soon. You can get early access now and check it out at https://ditto.pub

Is the last mark for me. Will not there for the 21M 🤣

2026-03-09T15:51:27Z

In reply to nevent1q…nm0s
_________________________

Is the last mark for me. Will not there for the 21M 🤣

Only read somewhere, interested in this special milestone

2026-03-09T15:49:39Z

In reply to nevent1q…8wks
_________________________

Only read somewhere, interested in this special milestone

21 milioni di #Bitcoin disponibili 20 milioni minati e in ...

2026-03-09T14:32:04Z

21 milioni di #Bitcoin disponibili
20 milioni minati e in circolazione
Fai i tuoi conti

GM Sono online gli appunti della lezione sulla configurazione di ...

2026-03-09T14:00:54Z

GM
Sono online gli appunti della lezione sulla configurazione di #Phoenix e l'apertura del canale LN
Buona settimana con un nuovo canale Lightning Network #noncustodial!
https://officinebitcoin.it/lezioni/canale/index.html

#puravida #educational

Annamo bbene! #nevent1q…pa4q

2026-03-08T22:17:57Z

Annamo bbene!

quoting
nevent1q…pa4q

Use a real computer if you want to use cool stuff (cit.). Non ...

2026-03-08T22:17:03Z

Use a real computer if you want to use cool stuff (cit.).
Non posso che darti ragione Max (nprofile…en87)

quoting
nevent1q…s68x
A lot changed in this release. Messages arrive instantly. Group chats are stable. We improved image sharing. Amber support. Keys only, no phone number.

naddr1qv…hva8

Same here. Stopped to follow that person, that wants what I fight ...

2026-03-08T15:18:25Z

In reply to nevent1q…j8yn
_________________________

Same here. Stopped to follow that person, that wants what I fight to go out from the universe

PV buona domenica 🤙

2026-03-08T13:48:08Z

In reply to nevent1q…6xey
_________________________

PV
buona domenica 🤙

GM 💜

2026-03-08T13:44:06Z

In reply to nevent1q…sy0s
_________________________

GM 💜