catholic. american. husband and father. here for the revolution. avid note taker. eternal optimist. photographer, videographer, and ux designer. self-taught fisherman and banjo player.
Public Key
npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j Profile Code
nprofile1qqszj8r4mym6ghmx5ysflr4xvywlw3yvtxe4yefqcek29nwdxlcml0spz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsq9v572
Show more details
Published at
2026-07-22T22:00:45Z Event JSON
{
"id": "8fa934e70329870342fc473e1c8bb2eb6e3cedc50364ba74da41b605c77d029d" ,
"pubkey": "291c75d937a45f66a1209f8ea6611df7448c59b3526520c66ca2cdcd37f1bfbe" ,
"created_at": 1784757645 ,
"kind": 0 ,
"tags": [
[
"client",
"Ditto",
"31990:781a1527055f74c1f70230f10384609b34548f8ab6a0a6caa74025827f9fdae5:ditto"
],
[
"published_at",
"1784757645"
]
],
"content": "{\"about\":\"catholic. american. husband and father. here for the revolution. avid note taker. eternal optimist. photographer, videographer, and ux designer. self-taught fisherman and banjo player.\",\"banner\":\"https://blossom.ditto.pub/67a8da8bb3a552a8ec1eb003f1991360bea77389e35502573909ca35bfd446ce.jpeg\",\"bot\":false,\"display_name\":\"Jared Logan\",\"lud16\":\"[email protected] \",\"name\":\"jaredlogan\",\"nip05\":\"[email protected] \",\"picture\":\"https://npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j.blossom.band/a24cf5559df563a7f3a213a25c4e076cb83178edbc7c7aea2bd2f3620a0a7dd9.jpg\",\"website\":\"https://ditto.pub/[email protected] \",\"shape\":\"🛡️\",\"fields\":[[\"nostr-station\",\"https://10vy5d0umw8izp3bcmh0btzl6k2szvsu8zestncxpsstb6l8e6nostr-station.nsite.lol/\"],[\"nostr-hub.io\",\"https://nostrhub.io/npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j\"],[\"✝️\",\"https://a.nostr.build/3FIclQEIeSzlWzn3.mp3\"]]}" ,
"sig": "7c90a627229300d5ccbc1a797f84272286b358000b2e3bec063784110ebe026d6bd63690ee5495b6818d58c1af264358c361e20087ebc88ad135a71c31fc2a8d"
}
Last Notes npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan https://gifverse.net/media/IgOeKOSQ/original.gif npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan A lot of people heard 'Don't trust, verify', and trusted without verifying. 💔 npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Thank you kid! https://gifverse.net/media/CN4A3rQz/original.gif npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Hi! I'm officially a dad now. K bye 👋 npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Hey NOSTR Been a little quiet here for me recently as we've been hard at work preparing things for some big changes. Hope you're all doing well 🙏 Wifey and I have come a long way since the days of owning no furniture and eating meals on the floor. The nursery is only lacking the finishing touches of the handmade curtains and shades from grandma and it'll be complete. I cant believe I get to meet my firstborn here in just a couple weeks at most. ❤️ Here's a little before and after refinishing the wood floors and assembling the room. And the peaks I've been getting our little one along the way. K that's it. Just thought I'd check in.. Talk soon. https://i.nostr.build/DpDT51lJPhFirR7y.jpg https://i.nostr.build/MjBrN0jjQtV4yCCU.jpg https://i.nostr.build/S7WpU2P1tLSDvF0t.jpg https://i.nostr.build/XT2N8qbOkbVHRb7Z.jpg https://i.nostr.build/IZksrT9G0EXz5Zlb.jpg npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan https://media.tenor.com/Xp27PoT1pL4AAAAC/enorym-pssh.gif npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Do you go to mass on Sunday? npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan “The Sabbath was Saturday, not Sunday. The Church altered the observance of the Sabbath to the observance of Sunday. Protestants must be rather puzzled by the keeping of Sunday when God distinctly said, ‘Keep holy the Sabbath Day.’ The word Sunday does not come anywhere in the Bible, so, without knowing it they are obeying the authority of the Catholic Church.” — Canon Cafferata, The Catechism Explained, p. 89. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan GM NOSTR A beautiful day to celebrate the mass ✝️ Enjoying this beautiful dialogue between Trent and Bryce about exploring Catholicism as a Protestant. Charitable discussions are so inspirational. https://m.youtube.com/watch?v=oNWseAsfcGM npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan No impact on GrapheneOS + @npub10r8…t2p8 as far as I know. Someone correct me if I'm wrong. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan IYKYK https://www.youtube.com/watch?v=s_qhk_sqr5w npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Dah sad day 😅 I love the happy tavern name, but honestly totally up to you and no biggie to me 😄. I'll follow to whatever it moves to. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan ~5 weeks until my firstborn son arrives. I've hit the moment of feeling a wide range of emotions, but to summarize: I've never been happier. My life has never had more clearly defined purpose and meaning. Hope and stoke have never been higher. That said, a level of engagement with everyday life continues to shift. The demand for action, direction and clarity is high. Becoming the man I want to see more of in the world is what matters most. My activity here, the projects I've been focused on are all about to take a back seat as I shift speeds. I won't stop, but life is changing for me. ---- I've been reading and praying to the lines of King David in his time: “Who am I, Lord GOD, and what is my house, that you should have brought me so far? And yet even this is too little in your sight, Lord GOD! For you have made a promise regarding your servant’s house reaching into the future, and giving guidance to the people, Lord GOD! You know your servant." "Hear my prayer, O Lord; listen to my plea!" "Show me where to walk, for I give myself to you." ---- ⚔️ ALL GLORY TO GOD & DEUS VULT ⚔️ npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Wen GameStop NFT lol npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan I just recovered a lost ngit repo and rebuilt it easily from only the deployed nsite and I think that's pretty cool. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Ashamed everyone dropped all torches. Did my best to try to ignite some action 😅 https://torchlite.shakespeare.wtf/ npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Literally Jesus: "he that hath no sword, let him sell his garment, and buy one." - Luke 22:36 npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Shot you a DM. Let me know if you got it. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Trying to build out a proper relay catalogue and network insights tool. It appears relays don't use NIP-11 enough to show supported_nips. This would go a long way I think. Can anyone correct me if I'm misunderstanding? #naddr1qv…lzmk npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Went to try this out, but can't sign in with extension or amber. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan @npub1t4l…3yza my guy. Do you have a rosary? I'd love to send you one, or zap you sats for one. Let me know brother! ⚔️ npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan btw it's pubky not pubkey 😅 can't tell if I'm missing the joke tho npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan oooof https://media.tenor.com/WhVNa2s7FcQAAAAC/tedlasso-yikes.gif npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan GM NOSTR More Jesus in the feed. K thnx. Talk to you soon. #nevent1q…2zkv npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Isn't Blocktank a service not open to US persons? Is this planned the profit funnel for Synonym? npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Thank you sir! Gonna keep tweaking it here soon npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan One Holy Catholic and Apostolic Church, the pillar and foundation of truth; with 2000+ years of fending off demons and heresy. Since Jesus. https://i.nostr.build/ogTOwSsdtAIXmho2.gif "And I tell you, you are Peter, and on this rock I will build my church, and the gates of hell shall not prevail against it." — Matthew 16:18 "The pillar and foundation of truth." — 1 Timothy 3:15 npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan do you not sin anymore? npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan I encourage everyone to find someone of confidence, at least a priest (in persona Christi) that they can confide in, to confess their sins. Not once. But regularly. The Bible tells us to confess to one another, and to Christ: "Confess your sins to one another and pray for one another, that you may be healed." — James 5:16 "If we confess our sins, he is faithful and just to forgive us our sins and to cleanse us from all unrighteousness." — 1 John 1:9 The Bible doesn't leave us without a path back. Reconciliation is built into the covenant. Christ gave His apostles the authority to forgive sins. That authority flows through the priesthood to this day. The sacrament isn't tradition for tradition's sake. It's the ordinary means of grace for sins committed after Baptism: "Whose sins you forgive are forgiven them" (John 20:23) The Bible tells us of the forgiveness of sin: "Though your sins are like scarlet, they shall be as white as snow." — Isaiah 1:18 The Bible also warns us of presumption: "If we say we have no sin, we deceive ourselves, and the truth is not in us." — 1 John 1:8 I myself am always crossing the battle of my sinful nature. I aspire to sainthood (Deus Vult), but I would hesitate to declare myself one. Until the final day, I will keep confessing. Lest we be like @npub1x45…armt, (God love him, as do I) declaring ourselves saints before the final day. Presuming the position of God Himself. #nevent1q…3jkl npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan oh yeah. 🤙 this guys politics aside, I love his work. Heck, may even love some of his politics if I do or don't agree. https://v.nostr.build/6BALHt6p7WqqKeOS.mp4 npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Hey everyone. Since on-chain zaps came out I figured this was a fun idea, and we can all dox our nodes and channels together too 😂 right? who's going first? jk though. Idk this sounded fun. highly experimental here. Someone please fork this and improve it. https://10vy5d0umw8izp3bcmh0btzl6k2szvsu8zestncxpsstb6l8e6lightning-social.nsite.lol https://beacon.shakespeare.wtf/ #nevent1q…une9 npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Steve rips! npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Sruggs imo. I'm a traditional guy. But bella is a wizard too, you can't doubt that. But I'm more of a claw hammer Doc Watson extremist. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan people like my wife all the time IRL and online. not much I can do but be proud that she's mine. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan tbf she has like 5 posts. at least that I see. wasn't a long scroll. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan true could've just been a media feed. Who cares. lol npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan is a like = to stalking? what's happening now lol npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan New /insights page added to Amon Din to score the relay list you've built, and see how the wider Nostr network actually uses relays, all sampled live from published NIP-65 lists. #naddr1qv…lzmk npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan I'm on the board.... right? npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan "Lord Jesus Christ, Son, Word, and Lamb of God, have mercy on me a sinner." npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan https://i.nostr.build/oUBTUXh8XJ5J2ipM.jpg npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Opinions are allowed. And appreciated. But I do think it's sketchy personally. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan You could, sure. But nobody is, nobody has, nobody plans to from what I can tell. I'd genuinely love to see one. Double plus if it ditches the default configs all pointing at Synonym's Nexus entirely and stands on it's own with no hidden configs or backends. A working, clean and simple architecture exists within the very protocol you're reading this message on. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Anyone can run a discovery or algo service as a DVM. clients request feeds from them, you pick which to use. You can make your own client. Your own DVM. Your own relay. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan I've been asking for one and nobody seems to have an answer. The best alternative is already and always has been nostr. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan what do you think we are doing here? lol npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan also already exists on nostr lol npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Possible ≠ exists. Where is the credible alternative to Nexus? npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan So you can discover friends of friends by their follow lists you already have access to. That is not organic discovery. Again, the 99% using Synonym Nexus precisely because personal crawling is a pipe dream. > Nostr exists inside an airlock and uses authorities to relay data this is backwards. Nostr relays are not "authorities." Nostr also does direct known-key fetching via NIP-65, the same property you're crediting PKARR with. anyone can host a relay and it's trivial to run. Many of us do it already. Synonym Nexus looks a lot more like an authority than thousands of independent relays do, especially when the software is set to phone home to it by default and requires changing an opaque config file. I've yet to see a UI that allows for confirming this is easily changeable. May need proof of life to end my suspicion of you being a bot. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan I think you've proven the point. Exchanging keys on a bike forum first or chess club means discovery is happening on external forums, not on Pubky. That's outsourcing the difficult part of the problem a social network has. Nostr discovery is plural and interchangeable from day 1. And it's honest about it. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan 1) wut npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan the 1% aware of the issues, knows how to change, and actually does change configs npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan please document the journey npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan we already do lol. no central indexer on nostr. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Even if everything else is fixed in the future, I don't see how they get around a need for dependency on their own 'Nexus'. This is where their "credible exit" promise breaks from what I can tell. You can take your home server and your key and leave, but you can't take your audience, because discovery flows through Synonym's Nexus for 99% of users. This isn't covered in their documentation or positioning. Decentralized storage is meaningless if discovery is centralized, anyone can run a relay already, or heck even a Nextcloud instance. Synonym sits at both the storage layer (with a sus g00g cloud service) and the discovery layer by default. I can't find anything public about their GCS backend either. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan when people find reasonable questions about your open-source code you seem to disparage them instead of address anything. Also, why is Synonym's production GCS bucket configuration not public? Is it? Point me to it? npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan I was trying to understand the vision of your protocol. It's very tough to do so, which is why I went to AI. You guys do the same for articles, copy etc. So I don't get the reason for throwing insults. The code is code, open source and public. If these are not concerns, then they should be easily addressable. Every finding links to file paths with line numbers. The concern is gaps in how the product is pitched and how it actually appears to work today. If self-sovereign is an option, just say that. Explain the defaults, the reasoning, and the way to opt out. Yes AI found these, but neither of you seem able to address them humbly or professionally: - Session secrets in unencrypted MMKV storage? Why? that's a security decision that affects every pubky-ring user regardless of how they sign up, and it clearly contradicts the article pitching it. - Cloudflare binary downloaded at runtime with no checksum? Why? That's a supply chain risk for every Umbrel self-hoster. - Neo4j shipping with hardcoded password? Why? The comment in the code shows the team knew the default. The comment also warns that changing it post-deploy is non-trivial. Self-hosters who don't know to change it have their entire social graph exposed. Is this also wrong? - GCS backend with no auditable configuration surface? Wrong again? Is there a configuration surface? Should be easy to just say so and show it. Synonym's production bucket configuration is not public, which helps explain the need for the ToS in the first place. - you said users have a choice where their data is hosted. True for the homeserver. But is there a credible alternative to Synonym's Nexus for discoverability? Without it, content exists but nobody can find it. Self-hosting a homeserver without an accessible Nexus isn't a real credible exit for most users. These aren't philosophical objections to the vision of 'your' protocol. They're specific, sourced findings that the "users have a choice" framing doesn't address or hold up against. I'd be happy to turn any of them into proper GitHub issues if that's more useful than a Nostr thread. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Do you run a personal nostr relay? Trying to see something. #asknostr npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan npub1jxjzmmfxafzanf2kvnggrwqnd7jw8x6xrp7kggvpqdmkw0ldmv4suztxhc maybe you can help clarify since the CEO can't help but crashout npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Still waiting for you to point out which part is wrong lol. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Who hurt you bro npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Should be a pretty simple response to clarify then. Calling people retards isn't really helping you. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan I think I'm the opposite of a nihilist. I believe everything has objective meaning. Yes even suffering, randomness, the stuff we can't explain. Not meaning we invented, but meaning that's actually there, whether we see it or not. We may not understand anything fully. I believe God gave us a purpose. That's not a comfort I talk myself into. It's something I keep coming back to as true. That's enough to keep going. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Pubky checklist. but nostr is dying I guess. 🤷♂️ 😂 ✅ ToS content license identical to Meta/Facebook ✅ Retained deleted content clause ✅ Right to edit your posts ✅ Phone number to Prelude third party on signup. ✅ Decentralization used as liability cover ✅ G00gle Cloud backend with zero auditable configuration surface ✅ Hardcoded Synonym relay nodes in default configs ✅ Default admin password "admin" in Docker deployment ✅ Nexus hardcoded moderation key a.k.a censorship resistant with a built-in censor ✅ Cloudflare binary downloaded at runtime with no checksum on Umbrel ✅ Neo4j social graph hardcoded password "12345678" ✅ Session secrets stored unencrypted ✅ cocky CEO with an ego Probably missed a few from this cutting edge 'Freedom Tech'. Also claude did this audit while I pooped. #nevent1q…we9e npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan John Carvalho's own manifesto states: "Master keys are kept in cold storage, and access is delegated through revokable homeserver sessions, minimizing exposure and maximizing security." https://medium.com/pubky/pubky-the-next-web-3287b35408f1 Let's look at what the code actually does. The master key (secretKey + mnemonic) correctly goes to the OS Keychain. That part is true. But session tokens (the credentials that grant active access to your homeserver) tell a different story. https://github.com/pubky/pubky-ring/blob/main/src/store/mmkv-storage.ts line 4: const storage = createMMKV(); No encryption key. Unencrypted storage. https://github.com/pubky/pubky-ring/blob/main/src/store/index.ts line 45: whitelist: ['pubky', 'settings'], The pubky slice (which contains your sessions) is persisted to that unencrypted MMKV store. https://github.com/pubky/pubky-ring/blob/main/src/store/slices/pubkysSlice.ts lines 73-84: addSession: (state, action) => { state.pubkys[pubky].sessions.push({ ...session, created_at: Date.now() }); } session_secret pushed directly into the unencrypted Redux store. Your master key is safe. Your session tokens (the active credentials that authenticate you to your homeserver) sit in plain unencrypted storage on your device. The migration file makes it explicit — this isn't an oversight. Migration version 6 deliberately migrates session_secret into persisted storage: https://github.com/pubky/pubky-ring/blob/main/src/store/migrations/index.ts lines 81-90: // Add session_secret to all existing sessions sessions: pubky.sessions.map((session) => ({ ...session, session_secret: '', })) "Master keys are kept in cold storage, and access is delegated through revokable homeserver sessions, minimizing exposure and maximizing security." Right. Sure @npub13nd…0svh https://media.tenor.com/BHyTSZGUEBAAAAAC/cowboy-gun.gif Nostr doesn't have a session token layer to compromise. Your key signs events directly, via NIP-07 extensions or NIP-46 bunkers (how you *should be* using nostr) that never expose it to apps at all. Pubky adds a session delegation layer to protect the master key (a reasonable idea) but then stored those session tokens unencrypted. The mitigation introduces the vulnerability. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan https://media.tenor.com/Bsoc_9uidGgAAAAC/but-wait-theres-more.gif nevent1qgszj8r4mym6ghmx5ysflr4xvywlw3yvtxe4yefqcek29nwdxlcml0sqyr2r8lnz0v27kx84hx4ljvej6tq6u5xngltgeza97y8z99n2w8xwyfxclwu nevent1qgszj8r4mym6ghmx5ysflr4xvywlw3yvtxe4yefqcek29nwdxlcml0sqyq9tkmxqexy2gxhjeqe5uh8ad64kzqudnrh9nay0aw3kn7ksu40t6prs0vh nevent1qgszj8r4mym6ghmx5ysflr4xvywlw3yvtxe4yefqcek29nwdxlcml0sqyztz62qn6p053jwy6j5694tjvfm3x8nu42alw5kxl9kzwpazxpf9c8lv5y8 npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan But wait there's more... Pubky Nexus is what makes content discoverable. Feeds, search, profiles — all run through it. Without Nexus, your content exists but nobody can find it. https://github.com/pubky/pubky-nexus/blob/main/nexus-common/src/config/watcher.rs line 23: pub const DEFAULT_MODERATION_ID: &str = "uo7jgkykft4885n8cruizwy6khw71mnu5pq3ay9i8pw1ymcn85ko"; Whoever holds this key can tag any post, profile, or file and the Nexus watcher silently removes it from the index. https://github.com/pubky/pubky-nexus/blob/main/nexus-watcher/src/events/moderation.rs lines 40-54 posts, user profiles, files, tags. All erasable from discovery. Your data survives on the homeserver. But if Synonym's Nexus can't find you, nobody else can either. pubky.app users are on Synonym's Nexus, with Synonym's moderation key, with no way to opt out. Self-hosters can override it, again, if they know to. "Censorship resistant." npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Looking forward to tomorrows rage posts over my coffee then I guess. 😅 npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Waiting for a response from @npub13nd…0svh https://media.tenor.com/PqHhPnghgusAAAAC/mr-bean-esperando-mr-bean-waiting.gif #nevent1q…vpre npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan The codebase has a Google Cloud Storage backend? Synonym's production configuration (which backend they're actually running) is not public from what I can tell. The entire storage configuration in google_bucket_config.rs (the file that controls where your data lives) is this: rustlet builder = opendal::services::Gcs::default() .bucket(&self.bucket_name) .credential(&credential); Bucket name. Credential. That's it. So user data goes to a Google Cloud Storage bucket that Synonym owns and controls? https://github.com/pubky/pubky-core/blob/main/pubky-homeserver/src/data_directory/storage_config/google_bucket_config.rs A sovereignty protocol that stores your data on Google Cloud is kind of hilarious at first glance. npub13ndpm2hm9hud4azsq5euhf5mv3d05r90wymwxsd7rdn29609hhvqp60svh am I wrong here? Just looking for clarity. #nevent1q…e7g7 npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan you missed the point. Nostr runs without any business entity required. Build without permission. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Pubky is a Web2 platform with a decentralized protocol underneath it. The protocol may be open. The flagship application, the one they're actually pushing, the one with the invite codes and the landing page, is as legally encumbered as any big tech platform we all left behind. The tagline says "your keys, your content, your rules." The ToS says Synonym can modify, sublicense, and create derivatives of your content, retain it after deletion, edit it without notice, and make you arbitrate any complaint in London. One is marketing, the other is law. No, nostr isn't dying. There is no Terms of Service or Privacy Policy. That's the point. It's a truly open protocol, without permission. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan The ToS footer and the Pubky landing page both say it plainly: **Synonym, a Tether company.** Tether. The most opaque, trust-us centralized entity in the entire crypto space. The one that for years refused audits. The one that prints the most widely used stablecoin with the least transparency about what backs it. That's the parent company of the platform that wants to replace Nostr in the name of user sovereignty. The ToS is governed by the laws of England and Wales. The entity is incorporated in El Salvador. Tether is registered in the British Virgin Islands. You are wherever you are. Good luck. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan This one was a head spinner. > "Synonym has the absolute right (but not the obligation) to prohibit, refuse, delete, move and edit Content for any reason, in any manner, at any time, without notice to you" Keyword 'edit'... They reserved the right to edit your content. Every post on Nostr is signed by your private key. If anyone, a relay operator, app developer, man-in-the-middle, changes even a single character, the signature breaks and the note is invalid. Editing is cryptographically impossible without your key. No policy. Just math. Pubky's 'protection' against content manipulation is a Terms of Service clause while nostr's is cryptography. These are not equivalent. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan "Your Keys, Your Content, Your Rules" That's the pubky tagline. Now here's what the ToS actually says: > "you hereby grant to us a non-exclusive, royalty-free, transferable, sublicensable, worldwide license to host, use, distribute, modify, run, copy, publicly perform or display, translate and create derivative works of your Content" Sounds word-for-word the same content license Facebook, YouTube, and TikTok use. Here is Meta/Facebook's: > "you grant us a non-exclusive, transferable, sub-licensable, royalty-free, and worldwide license to host, use, distribute, modify, run, copy, publicly perform or display, translate, and create derivative works of your content" npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Anyone else read the Pubky ToS and Privacy Policy? I almost spit out my coffee 🤣 https://media.tenor.com/Z1Z-mCUxt8UAAAAC/johnny-laugh-four.gif #nevent1q…k2uy npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Was gonna sat brave can be aggressive, but has settings to configure. Your brave shields up? npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan shhhh too many questions my guy. The ones they don't want us asking. 😂 npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Sounds like a bitchat type of scenario 😅 npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan What level of the dream am I in lol https://i.nostr.build/3cn5atj9Sx2iObRS.png nostrVM web client running shakespeare within an nsite browser, working on nostrVM, which is running shakespeare within it's preview pane. 😵💫 https://media.tenor.com/fJa0sbnDFCQAAAAC/leonardo-leonardo-dicaprio.gif https://10vy5d0umw8izp3bcmh0btzl6k2szvsu8zestncxpsstb6l8e6nostr-vm.nsite.lol/ npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan NIP-44? Or something else? npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan https://10vy5d0umw8izp3bcmh0btzl6k2szvsu8zestncxpsstb6l8e6nostr-vm.nsite.lol/ npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Try it out! Just a client that mimics a desktop environment. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Brb running another absolute nostr inception client. https://i.nostr.build/17nfKp3VWo6wGXwx.png #naddr1qv…eyj0 npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Nothing on my end yet. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Congratulations brother ⚔️ npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Soon I my try developing :Nori:nostr-station on :Nori:nostr-station. https://media.tenor.com/3eIvVsG3yPYAAAAC/the-universe-tim-and-eric-mind-blown.gif npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Stepping away from the Anthropic subscription fully. -> Umbrel running OpenwebUI for one seamless chat UI across all models (below) -> Mac mini running MapleAI Proxy (for Private TEE) + RoutsrD + Local Ollama (failsafe local model) -> Macbook Air & Mini running Claude Code CLI + OpenCode Go + Zen + PPQ + Routstr All connected via NostrVPN has been pretty seamless. Even Obsidian Copilot can talk to all of these. Should be keeping the same full workflows going without losing any model access, but dropping to ~$30/month + PAYG for larger models instead of a flat $100-$200 subscription to big tech. ⚔️ Gotta save that diaper and daycare money @npub130m…l29s @npub1g53…drvk npub16g4umvwj2pduqc8kt2rv6heq2vhvtulyrsr2a20d4suldwnkl4hquekv4h npub1aghreq2dpz3h3799hrawev5gf5zc2kt4ch9ykhp9utt0jd3gdu2qtlmhct @npub10hp…dxkr npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan 🔥 keep it up! npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan referral code is the important part lol npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Still true. Use the referral below and we both get extra credits. Great value for $5. https://opencode.ai/go?ref=SW82YZKKA4 #nevent1q…57hj npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan So the privacy is still only downstream? It reads ironic to me, but this whole thing may be going over my head so apologies if it is. The address tying inputs to you is public. The outputs being private only changes the payment graph after the point. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan https://media.tenor.com/daxNnlh9q3AAAAAC/king-king-baldwin.gif https://www.vatican.va/content/leo-xiv/en/encyclicals/documents/20260515-magnifica-humanitas.html npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan But even sp address being derived from the npub; isn't it still deterministic and computable from the npub by anyone, which is the whole part of doxxcoin we are trying to avoid in the first place? npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan If anyone can derive the SP address from your npub, then anyone can derive your scan key from your npub? Am I missing something? npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Same thing pretty much. Many brands and storefronts offer this one. It's a WWI battle rosary replica. Same style handed to soldiers on the front. npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Sounds awesome! You usually have success finding TLMs when you're out of town? npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan Daily wins. https://i.nostr.build/JgUPVNn3foILl7Aw.jpg #nevent1q…rexa npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan GM NOSTR! Beautiful morning to attend Mass ✝️ Pentecost Sunday. Today's plans; Mass. Fishing. Reading. Dinner on the smoker. 🙏 npub19yw8tkfh530kdgfqn782vcga7azgckdn2fjjp3nv5txu6dl3h7lqhv322j jaredlogan I was trying something wild (paired with nostr VPN) to provide private networks and relays for communities (thinking friends and families). It almost worked, with some minor kinks to work out. I can keep you posted into any issues I hit or problem I run into.