mleku on Nostr: depends on how the relay handles the data the main vulnerability of nostr DMs is ...
depends on how the relay handles the data
the main vulnerability of nostr DMs is actually from relays giving out DMs to non-involved npubs
this is the prime reason why i have been banging on about auth since over a year ago
Published at
2025-02-21 16:10:35Event JSON
{
"id": "e18905b3858817bf16c039a57db4d495dcdd23429de2c617bf91ee3a17d4ab5b",
"pubkey": "4c800257a588a82849d049817c2bdaad984b25a45ad9f6dad66e47d3b47e3b2f",
"created_at": 1740154235,
"kind": 1,
"tags": [
[
"p",
"c7fe92f80c516c0c54b15e8d256ac07281036d934ea1ff39fb0cd8a0fd677736"
],
[
"e",
"3d678b64ae52e4039cd6d13ccb375e9daddbb36e0eebcdfa914dd8dfebc212f2",
"wss://theforest.nostr1.com/",
"root"
],
[
"client",
"jumble"
]
],
"content": "depends on how the relay handles the data\n\nthe main vulnerability of nostr DMs is actually from relays giving out DMs to non-involved npubs\n\nthis is the prime reason why i have been banging on about auth since over a year ago",
"sig": "5e0f8a9b46728a2f6b209a599213820f302c78e6de2ba6ceebe9c4f9ac5d366ec7fb03564798a87e18a7361219cae4ebb02f829e2aed14ad9eb311af531f829c"
}