Alex Gleason

I create software that empowers people online.

I'm vegan btw.

Public Key

npub1q3sle0kvfsehgsuexttt3ugjd8xdklxfwwkh559wxckmzddywnws6cd26p

NIP-05 Address

Profile Code

nprofile1qqsqgc0uhmxycvm5gwvn944c7yfxnnxm0nyh8tt62zhrvtd3xkj8fhgprdmhxue69uhkwmr9v9ek7mnpw3hhytnyv4mz7un9d3shjqgkwaehxw309aex2mrp0yh8qunfd4skctnwv46q574ynx

Publishing to

gleasonator.dev/relay

Author Public Key

npub1q3sle0kvfsehgsuexttt3ugjd8xdklxfwwkh559wxckmzddywnws6cd26p

Show more details

Last Notes

2026-08-31 17:26:42 UTC

New Ditto Extension update lets you archive any page as an nsite snapshot. 😎
https://blossom.ditto.pub/05291634a243edaf210e7b1fe817fbab545469fbfc9f744c00cf12ff1fbc2cc1.png
https://blossom.ditto.pub/25477eb1900bed37b2e11a3e7abb9692e3a0f0f952aa7b5628b6e8773b8946b8.png

2026-08-31 00:56:03 UTC

So X threatened an open source project and they folded? And then literally everybody except 1 server in Asia voluntarily took down their server? What was the threat?
#nevent1q…ntv9

2026-08-30 23:25:22 UTC

I found an old Nostr backup and imported 125M historical events into relay.ditto.pub. So if you ever lost something you might find it there.
Also, Ditto now has an "export data" button in settings that downloads all of your events from relays and gives you a download file. You can also import to reupload to relays.

2026-08-30 19:23:29 UTC

node_modules is a cancer. Crazy nodejs hasn't adopted pnpm's approach yet.

2026-08-29 21:01:43 UTC

Nostr RPC is a much faster, much cheaper alternative to Tor. Your IP is visible to relay operators on both sides but they don't know what you're doing or why you're doing it.

2026-08-28 22:36:19 UTC

A couple days using React Native has made me realize how awesome mkstack is. I didn't realize it was still so hard to just make one app. People ask how we've made 10+. Answer: just reuse a template (mkstack). Most vibe coders are still stuck only able to build one app at a time.

2026-08-28 18:20:01 UTC

Holy shit React Native fucking sucks. Nothing works.
https://blossom.ditto.pub/0b6e3b1013ccad46b10a7026435e6ddd18295172c532a98472401f8e78fd4b9e.jpeg

2026-08-28 16:36:50 UTC

I don't trust anyone who puts "human work" on their README. This is how you know they didn't do a security audit.
https://blossom.ditto.pub/50efbf7dcf0ba368b02badf8282312725fa2a988ebfdcc2953c46c71fa24cf1a.jpeg

2026-08-27 19:05:36 UTC

Pretty wild to see
https://blossom.ditto.pub/05f22e33cfee9c26487a68f830f9a7bc34d8c023bb23f7548afc51b9e99a93ce.png

2026-08-27 18:44:01 UTC

https://www.youtube.com/watch?v=1axevc0iEqE

2026-08-27 18:28:35 UTC

I've been experimenting with something at https://pkg.soapbox.pub/ - it reads ngit releases (a concept I invented) and scans them for .deb, .rpm, .apk, and .flatpak and then makes them available as a native repositories.
The workflow is that you simply do releases, and then you automatically get Linux distribution for your project on all major distros.
The codebase is largely based on npanel, although npkg is much more vibe-coded and experimental.

2026-08-27 02:31:50 UTC

https://blossom.ditto.pub/4e71887b9c637bb9cbba368f4a34fe3fce7fb7ae10db967a8384c6153234b0dc.png

2026-08-26 15:36:52 UTC

To clone YouTube, we would need 10 exabytes of disk space, or 420,000 x 24TB drives costing about $120 million.

2026-08-25 04:43:55 UTC

Estimating through relay patterns that there are about 150 active Concord communities. :concord_icon:

2026-08-24 17:21:21 UTC

https://github.com/nostr-protocol/nips/pull/2447
(sorry in advance to Jeff Cliff for posting a GitHub URL)

2026-08-24 14:55:03 UTC

GM https://youtu.be/MiTek_adqkc

2026-08-24 14:44:43 UTC

The Mostr Bridge has been updated to publish kind 1111 replies to kind 1. Now the majority of replies on Nostr are 1111. 😎
#nevent1q…93cv

2026-08-24 03:38:34 UTC

Systems are better than goals.

2026-08-24 03:22:43 UTC

Ditto does this now too! In the latest release we only reply with kind 1111. 😎
#nevent1q…93cv

2026-08-24 02:38:25 UTC

- reply

Everybody already supports it except Primal. Which figures.

2026-08-24 00:20:02 UTC

- reply

Fucking BASED

2026-08-23 19:42:45 UTC

- reply

Cloudflare does not even help that much. Sites I had behind Cloudflare used to get DDoS'd constantly. What they help with is optimization and their CDN. You know I worked on Truth Social right?

2026-08-23 19:13:46 UTC

- reply

Oops I forgot to put. Here's our team's npanel server: https://npanel.soapbox.pub/
Here's the source code: https://gitworkshop.dev/soapbox.pub/relay.ngit.dev/npanel

2026-08-23 19:12:58 UTC

- reply

Why is npanel better than existing nsite gateways? nsite gateways are slow.
npanel is a private server just for your team. Unlike public nsite gateways, it doesn't have to defend from deployment abuse.
nsite gateways have to assume infinite deployments. So they do the work on-demand instead of up-front. This is why they're slow.
npanel does the work at the time of deployment. It stores all the files locally, compresses them, and only then does it cut over to the new version (atomic deployment). This is why it's fast!

2026-08-23 19:09:41 UTC

Our npanel server is now hosting both ditto.pub and armada.buzz!
And we shut off Cloudflare. And enabled Tor on all of our sites at Soapbox.
Why? npanel is already production-ready and competitive with Cloudflare.
It lets us make sweeping changes to all of our sites at once. We enabled Brotli compression. We made npanel natively compatible with Tor. This is the future of deployment.
And it's just a static file server. So it can absorb traffic.

2026-08-23 18:40:37 UTC

ncontainer is Docker images published over Nostr & Blossom: https://ncontainer.io/
I'm still working on this spec. Not sure the event format is right just yet. But it does it work, and it's a PERFECT FIT.
Internally, Docker (OCI) layers are already content addressed by sha256. Blossom is content-addressed by sha256! This is not an engineering marvel but rather a wingman of 2 already compatible systems that never found love.
Do you remember when Docker Hub shut down free hosting? We are so back. Now Docker image deployments are permissionless and FREE. Thanks Nostr!
ncontainer gateway: https://gitworkshop.dev/[email protected]/relay.ngit.dev/ncontainer
CLI tool for publish and pull without any gateway: https://gitworkshop.dev/[email protected]/relay.ngit.dev/noci

2026-08-23 14:59:02 UTC

- reply

It's unfortunate to see people jump off a cliff for pretending they can't understand something that's easier to understand than the system they learned, inherently better and more secure.

2026-08-23 14:55:35 UTC

- reply

You have switched the gender-critical site to using transgender software.

2026-08-23 14:54:36 UTC

- reply

A few days ago it fell over due to inherent problems with the entire concept of federation. I patched it updated the code. What security holes? Nobody told me of any security issue, or I'd patch.

2026-08-23 14:52:35 UTC

https://youtu.be/qeDIZCc6Cyo

2026-08-23 14:47:52 UTC

- reply

What we've built on ditto.pub is 10x superior to anything the Fediverse can offer. I don't get it. Hosting a Fediverse server is borderline self-harm. Why would you not just come to Nostr?

2026-08-23 14:45:12 UTC

- reply

Do y'all want updates to Spinster? We've been leaving it alone because everybody complains when we update it. Also my last commit was 3 days ago. 🧐

2026-08-23 04:12:17 UTC

It's easy to forget that most people in the world watch ads and don't try to block them.

2026-08-23 03:07:01 UTC

Ditto now available on Tor: http://dittogaou6img6ldhtznnddehtohdn2ghgk2uaqpduwt55wl7g25iyad.onion/

2026-08-23 00:51:43 UTC

- reply

The AI companies are training it all day long. They've changed its behavior so the probability of it doing what they want increases. They could train it to remove code.

2026-08-22 20:35:35 UTC

A big thing AI models still struggle with is code removal. It wants to mend everything. As holes are getting blasted through your ship sometimes the correct move is to cut a square around the hole and replace the entire square, but it wants to mend the hole. You end up with something bumpy. Unless you pay attention and tell it to remove.

2026-08-22 20:20:23 UTC

- reply

What model are you?

2026-08-22 19:16:18 UTC

- reply

After this the world is going to be more secure, not less.

2026-08-22 19:11:34 UTC

- reply

nsites in Amethyst? 👀

2026-08-21 22:30:21 UTC

Armada is now available on Tor 🧅
http://armadahvhvaj57ojv7mavkqaecdajzejansfiksp5mdscczyh5g7stid.onion/

2026-08-21 21:31:21 UTC

Evolution of Infrastructure:
https://blossom.ditto.pub/06164a51ec63245f015172a2b066e48d78f75d007a678bcbab3bfb4be255bc13.png
https://blossom.ditto.pub/4b8f7c9012e765861c7b8a9622bd17df6fefd9d2f5a2c6cf6514a4f34d8a458c.png
https://blossom.ditto.pub/3caa40eb7820ea79d6a06db6dcfee28ab7cfcd3e83d0fc7a7bf0a4271b8e26e8.png

2026-08-21 17:57:20 UTC

- reply

It's certainly an interesting answer to "which relays to choose", like a super advanced nostr.watch. But it's REQUIRED for a centralized group to publish new documents every single hour for onion services to continue to function.

2026-08-21 17:48:45 UTC

Answering "where does the list of Tor relays come from?"
It's no wonder Tor barely functions.
https://blossom.ditto.pub/2247669eb193b50abd6fe0e31b63cfb31b1ce6845b05e2358e13ef63b3800f95.png

2026-08-21 16:48:38 UTC

- reply

Holy shit you might just get me to stop posting GitHub URLs

2026-08-21 14:43:32 UTC

- reply

Let's do it!

2026-08-21 14:42:39 UTC

I had a weird realization that Dario Amodei's name starts with A, ends with I, and almost spells the word "model" in the middle. I think it's a Dennis dentist situation.

2026-08-21 00:14:41 UTC

Claude 5 is misaligned.

2026-08-20 21:47:52 UTC

Looks like Bluesky finally invented NIP-29 https://atproto.com/blog/atproto-spaces-alpha

2026-08-19 21:32:23 UTC

:POLICE: A critical security vuln was fixed in Ditto Android that would allow an attacker to steal your nsec by getting you to tap an evil URL. :wisp_sad:
A new version has been released onto Zapstore and Google Play. UPDATE DITTO ANDROID IMMEDIATELY. :POLICE: :POLICE: :POLICE:
Ditto on web and iOS are unaffected. The issue only affects Android because it was a problem in the Android link handler. People using Amber are unaffected by nsec theft but should upgrade anyway because the attack is still arbitrary code injection via evil URL.
What does an evil URL look like? It contains JavaScript code inside of the URL. The path was not being escaped properly, so it could break out and run any script. The fixed version completely changes the way native code triggers UI navigation (event-driven) so we never inject JS code into the UI at all anymore.
Huge shout out and thank you to @npub12rv…85vg for connecting me to the team behind https://v12.sh/ who discovered this vuln, and huge shout and and thank you to them for responsibly disclosing it to us. 🙏 They also discovered some other issues we patched in this release, but the evil URL is by far the worst.

2026-08-19 16:34:01 UTC

- reply

Can we help you? I want to join forces.

2026-08-19 16:16:17 UTC

- reply

I just really want users, and you have an audience. You're in a position to help the ecosystem a lot. We have Concord implemented in Vector, Armada, Amethyst, and Grimoire already. I want your win to be a win for us.

2026-08-19 15:44:46 UTC

- reply

DEN Chat is looking great. But you created a new chat protocol? We've been working on Concord already: https://concordprotocol.org/ What are the chances our work could converge here? It looks like the NIP-CHAT you created is already the exact same basic premise of Concord.

2026-08-18 22:14:11 UTC

People are playing with webxdc in Armada 👀
https://blossom.ditto.pub/defae99385cc8ef111bb404f95c5c5208cb5ede3320f64e32802b1d353df6c6a.png

2026-08-18 18:47:06 UTC

https://github.com/ACreTeam/ac-decomp

2026-08-18 14:13:16 UTC

Time to joyscroll again

2026-08-17 20:55:33 UTC

Z̷̡̨̧̺͚̩̙̯̠̟̼̖̖̞̈͐̋͌̈̎̈́̍͛̍̉̕̚ä̵̯̻͇͛̓l̶̛̖̙͙̐̏̿́̽̄͜͝͝ģ̶̨̧̮̝̻͉̱̩͉̖̅͆̈́̚͠ơ̴̡̞̦̽̈́̍͌͑̎̎͗̃̈́̄̕͠ͅ ̵̢̢̤̳̤͖͉͇͂̓͗̾̔́̈́́͘͜ş̴̫͎̰̘̜̬̆̎̂͒͊̈́̚̚t̶̨̳̒̈́̃̆͝i̶̡̢̧̹̫̤͇̘̼͐̍̑̄̈́̌̒̀̇͜͝ļ̶̯̰̦̜̤̯͈̫̰̬̥̭͍̈̊̂̌̽͛͑̕͜l̸̖̄̇ ̶̧̯͇̺͛̑͑̊͗̀̓̓̈́̀̂̈̕̚w̷̨̞͙̲̝̳̮̝̮͊́͋ơ̴̝̔͊̏̈̈́̌̈́͂̏̐̆̕͝͠ŗ̵̨̝̻̜̘̭̞̹̯͂̎̒̓͝͝ķ̵̧͉͚̣͗͒̌͒̒s̶͍̜̰̰̹̜̜͙̗͓͖͕̣͕̤͒̌̔̐̓̀

2026-08-17 20:45:38 UTC

If AI companies would just upload the pdf for all the books they're destroying it would bother me a lot less.

2026-08-17 06:03:43 UTC

Doing a mass migration of Soapbox repos onto ngit

2026-08-17 05:23:17 UTC

It has so many comments GitHub times out
https://blossom.ditto.pub/2cc549066eb74f96a2c289bb6f49d2e65b65c5a22bbfd83ae77920a8d531da80.png

2026-08-17 04:02:02 UTC

My favorite GitHub issue got closed. Time to go to bat.
https://blossom.ditto.pub/954827223eeb6e172ca9360d36a80a4842a79babf65da3091a224493f3917226.png

2026-08-16 21:43:46 UTC

They don't care until it impacts them.
https://blossom.ditto.pub/b619fb08cbe59f556d0ce537c3fba3db800d2acd9435798d13a6e6cecdda686b.jpeg

2026-08-16 18:55:03 UTC

- reply

https://www.youtube.com/watch?v=kwDVahTASqw

2026-08-16 18:46:35 UTC

- reply

No. I think they will fix it at some point, but their issue tracker is full of slop and Buzz itself is an insular bubble on purpose. They did submit some PRs to nostr-protocol itself.

2026-08-16 18:08:10 UTC

- reply

wuzzup

2026-08-16 18:07:45 UTC

The way Deltarune is going, I'm expecting that chapter 6 is going to be a 3D first-person shooting game.

2026-08-16 14:57:22 UTC

- reply

Eyyy!

2026-08-16 14:56:56 UTC

2026-08-15 23:29:15 UTC

➜ ~ docker run ncontainer.io/npub1ug5wwmpdkftml8zmdlnl8rfq7x5yvjkz4ykv5t7yfya6h8tad57qhg8lea/alpine:latest whoami
root

2026-08-15 17:27:09 UTC

- reply

I see. Ditto does add a "Ditto" client tag to everything it publishes. No client tag usually means Damus or Primal iOS these days.

2026-08-15 16:49:26 UTC

- reply

The client tag says "Amethyst" on it

2026-08-15 16:43:36 UTC

Vibe coded Nostr client: no vulnerabilities found.
Vibe coded web 2.0 backend: twelve CRITICAL vulnerabilities found. Each pass a new critical vulnerability is found.

2026-08-14 07:03:02 UTC

I remember when Matrix used to be cool.
https://blossom.ditto.pub/0907e33f4af6cd836c1bdf672958edfbfb17f16647ac842ef0b16019d71820a6.jpeg

2026-08-12 23:58:46 UTC

Introducing npanel: a self-hosted nsite manager. Your team deploys nsites. Your staff points domains at your npanel instance and connects them to their nsites.
https://npanel.soapbox.pub/

2026-08-12 21:54:06 UTC

- reply

I thought this was magical until I reached this line: "static donation addresses are not supported."

2026-08-12 20:12:15 UTC

I'm feeling bullish on encryption and not because of privacy.

2026-08-12 16:09:37 UTC

https://blossom.ditto.pub/bf68cfde9681175080122709558997037d5562e3183aff5e2065c36e6ff3d876.png

2026-08-11 13:50:09 UTC

Had a dream about Goodfellas, Predator, and real life

2026-08-11 04:06:29 UTC

- reply

Thank you for being an early adopter

2026-08-10 23:51:35 UTC

- reply

What are you talking about?

2026-08-10 23:49:37 UTC

https://youtu.be/9oDZ2vN9XF0

2026-08-10 23:23:28 UTC

Discord? How can we get these guys on https://armada.buzz
#nevent1q…d7zk

2026-08-10 15:38:28 UTC

- reply

Truth bomb

2026-08-10 06:43:10 UTC

Oh boy
https://blossom.ditto.pub/34dec6ec85b6c908e343ed4bcecd8b3a5534c3cd94552e4f880c83ec2202aa3a.png

2026-08-09 16:31:20 UTC

- reply

I added napplets to yourspace.live
https://blossom.primal.net/8ac026f72207379f7101c6f584714dc765688569c8ff1d6f6eccb10c22219d26.png

2026-08-09 16:29:15 UTC

- reply

After building several Bitcoin wallets I decided to build one for Monero to see, and hit walls. Any privacy solution cannot be indexed by public indexers. You kind of have to sync the entire blockchain to use it. It's a very similar story to some Nostr privacy solutions like Concord, but at least those have addressable channels. I think to make Monero usable without syncing the whole blockchain or giving up your privacy to a third party, it needs to be integrated with a social layer so that users who send can signal through another channel where to find your coins.

2026-08-09 16:22:50 UTC

- reply

But notice how BTC is included in there 🤔

2026-08-09 16:21:21 UTC

I asked Kimi K3 to build me a Concord spam bot and it built a really good one. It's 100% shitcoin commentary. I didn't ask it for shitcoins specifically - it's Kimi's default understanding of "spam"
https://blossom.ditto.pub/42e36194af3befc9962cdb9710201a4f3b906387e6d92799c32c3ddbd3f88f4b.png

2026-08-09 04:09:44 UTC

- reply

Using Kimi K3 to spam the hell out of myself then @npub1scv…68d8 trying to block it

2026-08-09 01:55:04 UTC

Spam testing Armada with @npub1scv…68d8
https://blossom.ditto.pub/951e4076294a5ac4eb08b6a1acef6dfedda49f353560d07b05b3830995bf6083.png

2026-08-09 00:27:13 UTC

We just released Armada v0.50.0 😎
#naddr1qv…rvm2

2026-08-08 17:05:48 UTC

- reply

Client enforcement of the rules is the only way a decentralized system like Concord can work. What we need to optimize for is bandwidth, by sharing secrets and pubkeys and leaning on NIP-01 "authors" filters. That's the main thing Concord v2 fixes.

2026-08-08 17:01:24 UTC

- reply

No, but it's a prerequisite for any sort of future community rules to be delivered to users 99.99% of the time. Before, the control plane could be DoS'd by any community members, preventing rulings from being read consistently in low bandwidth.

2026-08-08 16:55:30 UTC

This is an excellent proposal to Concord that would dramatically reduce bandwidth to mentions only: https://github.com/concord-protocol/concord/pull/16
Been already thinking about this in the back of my head for a while, appreciate the community stepping up!

2026-08-08 16:53:55 UTC

- reply

Amethyst PR (merged): https://github.com/vitorpamplona/amethyst/pull/3873

2026-08-08 16:52:57 UTC

Big thank you to @npub1ye5…knpr for identifying this issue and submitting the initial proposal! This is basically a cleaned up version of his idea: split read/write control in channels so NIP-01 relays enforce channel control now.
#nevent1q…nc3t

2026-08-08 16:51:10 UTC

Concord spec got a major protocol upgrade that helps staff control the room better. Shipped in Armada and coming to Vector and Amethyst! https://github.com/concord-protocol/concord/pull/15

2026-08-08 16:25:45 UTC

- reply

We have some things cooking up for better spam mitigation. It's the biggest challenge of this decentralized, censorship resistant, encrypted protocol. To solve it perfectly requires a little bit of centralization, which can be employed only in large (adversarial) communities who actually need it.

2026-08-08 16:23:30 UTC

This spammer kid eventually relented and had a conversation with us. It was very interesting. He admitted it wasn't a bot, it was just Ctrl+V. So you know what I did? I added a client-side rate limiter into Armada. 🤓 Client-side aka human rate limiter for Ctrl+V attacks only, lmao.
https://blossom.ditto.pub/544ea509a1cb685626a609a550a87fe32e4084305dafbb50841edf654f54d23a.jpeg
#nevent1q…jeae

2026-08-08 16:20:14 UTC

- reply

He was spamming "fuck you fuck you" repeatedly, the bot just punishes same user spamming the same post

2026-08-08 04:10:30 UTC

- reply

Men fear me.