Super Testnet on Nostr: yes, a malicious client can steal any private key you paste into it. Some people use ...
yes, a malicious client can steal any private key you paste into it. Some people use browser extensions to prevent this. The browser extension Alby, for example, lets you generate private keys and then any nostr clients you use can detect the extension and ask it to sign events on their behalf -- that way the websites never know your private key. (But then you still have to worry, what if the Alby extension is malicious?)
Published at
2022-12-19 09:24:19Event JSON
{
"id": "894e8270d5470ea5b36f34bbdefb514cdb0f45dc5ac9c3d17b471f8eaca1a193",
"pubkey": "2183e94758481d0f124fbd93c56ccaa45e7e545ceeb8d52848f98253f497b975",
"created_at": 1671441859,
"kind": 1,
"tags": [
[
"e",
"cb5866e830a2cf2c8356ac9e957f2efb3c8b75a65dabc2d454023b663e262788"
],
[
"p",
"d19fec54027d097065482280ae17a68d0ad57f0f5c2fa74e24f3dbbb1e6c5495"
]
],
"content": "yes, a malicious client can steal any private key you paste into it. Some people use browser extensions to prevent this. The browser extension Alby, for example, lets you generate private keys and then any nostr clients you use can detect the extension and ask it to sign events on their behalf -- that way the websites never know your private key. (But then you still have to worry, what if the Alby extension is malicious?)",
"sig": "d85038a87eed5b6d9871f72a117057df1d2e4fdda0285cede35567bf514b4d45c5ad89354c2038b5f2dc89390f901fac6c83cf519d0f8a4f0a3e42c46b97e8e5"
}
