tyiu on Nostr: Thanks for the response and putting the open source program together. For ...
Thanks for the response and putting the open source program together. For verification, it seems to be prone to impersonation if that’s all that is being checked as anyone can enter a qualifying GitHub commit and username belonging to somebody else. Also, if address is not necessary, then it would be great to remove that requirement from the form — otherwise a fake address will need to be entered.
(By the way, I noticed that there’s still mentions of “Bitcoin 2024” in a few of the tags and title on that page)
Published at
2025-03-21 01:19:03Event JSON
{
"id": "6ace71af7859b03688e5ddc48ac6b2c0bc5edcedb9c59295f491ef727b49fee0",
"pubkey": "2779f3d9f42c7dee17f0e6bcdcf89a8f9d592d19e3b1bbd27ef1cffd1a7f98d1",
"created_at": 1742519943,
"kind": 1,
"tags": [
[
"e",
"23293018c45f49aedef2896bd9f97450fa845573ed78c00a44a54bc4b12a72a3",
"",
"root"
],
[
"e",
"cd4f39f6cd1aa83fe646d75a99ca30d7f03c577ceec246444f3fc0639ccc23f1",
"",
"reply"
],
[
"p",
"1baf18ae863cfd815a775c28943d8f4efe7ddbfe9e7bd1da1cddac93b75e2806"
],
[
"p",
"8cd2d0f8310f7009e94f50231870756cb39ba68f37506044910e2f71482b1788"
]
],
"content": "Thanks for the response and putting the open source program together. For verification, it seems to be prone to impersonation if that’s all that is being checked as anyone can enter a qualifying GitHub commit and username belonging to somebody else. Also, if address is not necessary, then it would be great to remove that requirement from the form — otherwise a fake address will need to be entered.\n\n(By the way, I noticed that there’s still mentions of “Bitcoin 2024” in a few of the tags and title on that page)",
"sig": "85abac86f2e31e6cce87e08031f8bd9f174930c7e3b1a20ea9c74603fed6caf57dbd919aa635a7f1004fb60a5b55c4505d4c366100d0a5011a4457f0662d9849"
}