VincenzoImp

Filtering the noise from Nostr's nsec leak data

https://bigbrotr.com/blog/exposed-nsec-analysis/

We analyzed 40M events archived by BigBrotr and found 16,000+ valid nsec keys published in plaintext. 90% republished by a single bot. The rest: users confusing nsec with npub, AI agents leaking credentials in logs.

https://bigbrotr.com/blog/exposed-nsec-analysis/

#nostr #security #bigbrotr

BigBrotr vs Pensieve — a technical deep dive into two open-source approaches to indexing Nostr. How do you ensure you're not missing events? How do you decide which relays to connect to? Same network, very different answers.

https://bigbrotr.com/blog/bigbrotr-vs-pensieve/

#nostr #bigbrotr #pensieve

A fully NIP-66 compliant relay monitor in under 80 lines of Python. RTT, SSL, DNS, geolocation, ASN, HTTP headers — all running concurrently. You choose what to check, BigBrotr packages it into a kind 30166 event.

https://bigbrotr.com/blog/building-a-nostr-relay-monitor/

#nostr #python #bigbrotr #nip66

Dumping every event from a Nostr relay should be simple. Now it is. Pick your filters, set a time window, async for. All events, in order, no gaps. If it stops, restart from where you left off.

https://bigbrotr.com/blog/streaming-events-from-nostr-relays/

#nostr #python #bigbrotr

🧵 Thread: The Trust Paradox (1/3)

Nostr exists to eliminate trusted third parties.

No company controls your identity. No server owns your content. No authority decides what you can say.

But then you need tools to understand the network. Relay monitors. Analytics. Health checks.

And suddenly you're back to trusting someone.

"Trust our data. Trust our metrics. Trust us."

That's a problem.

#nostr #bitcoin #opensource #plebchain

🧵 Thread: Introducing BigBrotr (1/3)

Nostr has no central authority. That's the point.

But decentralization creates blind spots. Without visibility into the network, fundamental questions go unanswered:

• How does the Web of Trust form and evolve?
• How do events propagate across relays?
• Which relays stay reachable over time? Which disappear?
• What does the social graph reveal about network health?
• How can we detect spam or malicious behavior without centralized moderation?
• Are there exploits or attack patterns we should be aware of?

These questions matter for users, developers, researchers, and the protocol itself.

We built BigBrotr to make them answerable.

Made possible by

🧡

#nostr #bitcoin #opensource #plebchain #grownostr