Nostr Compass Podcast #5
9d2784d6c3dcc0fa
Nostr Compass
Nostr Compass is a technical resource for the Nostr protocol, helping developers, relay operators, and builders stay current on protocol evolution. We publish weekly newsletters covering NIP proposals, client updates, relay developments, and notable code changes. Our podcast features conversations with the developers building Nostr. The topic index documents key concepts with links to primary sources. Podcast: https://podcast.nostrcompass.org
2 min read
This week we cover Bitchat's security audit by Cure53, which found 12+ security issues including uncleared Diffie-Hellman secrets and signature verification gaps. The team responded with 17+ pull requests fixing forward secrecy, thread safety, and memory exhaustion vulnerabilities. NIP-71 merges bringing addressable video events with update-in-place metadata. A post-quantum cryptography NIP proposes ML-DSA-44 and Falcon-512 signatures with ML-KEM key agreement to protect against future quantum attacks. We also discuss the BOLT12 offers debate and the Audio Track NIP for standardizing music and podcast events. Our NIP deep dive covers NIP-51 bookmark lists and NIP-65 relay metadata, explaining how both use replaceable events for organizing content and connections. Amethyst v1.05.0 ships bookmark support, voice notes, Web of Trust scores, Quartz database migration, and an early desktop release. Nostur v1.25.3 improves NIP-17 DMs with reactions, replies, and NIP-46 remote signer support.
00:00 - Introduction to Nostr Compass Episode 5 01:01 - BitChat Security Audit Insights: Cure53 findings and 17+ PRs fixing DH secret clearing, signature verification, and thread safety 04:42 - NIP-71 Addressable Video Event: kinds 34235/34236 with updateable metadata via d tags 06:12 - Open PRs: Post-Quantum Cryptography proposal with ML-DSA-44, Falcon-512, and ML-KEM for quantum-resistant signing 18:25 - NIP-51 and NIP-65: Enhancing Usability through bookmark lists and relay metadata for organizing content and connections 22:30 - How to Handle Bolt 12 Offers for NIP-47 Nostr Wallet Connect: Community decision to create dedicated NIP for BOLT12 offers 26:03 - Audio Track NIP: Standardizing music (32100) and podcast (32101) events for interoperability across Wavlake, Zapstr, and Stemstr 42:16 - Amethyst Version 1.05 Release Highlights: Bookmarks, voice notes, Web of Trust scores, Quartz migration, desktop release 44:13 - Nostur v1.25.3: NIP-17 DM improvements with reactions and replies 45:11 - NIP-46 Remote Signer Support: Nostur and Primal iOS add bunker support for off-device key management 46:52 - Code and Documentation Changes: Citrine SQL injection fix, rust-nostr NIP-62 expansion, NDK subscription tracking, Damus iOS 17 crash fix 53:04 - Conclusion and Future Developments
Help keep these ideas circulating
This is an independent project. If you'd like to help support it, you can make a contribution. But there's no obligation at all. Reading, sharing, and coming back is already a form of support.
Read also
1
rust-nostr API redesign, Nostria 3.0, Vector SIMD acceleration, Frostr iOS threshold signing, NIP-47 hold invoices, Pod2…
2
Read the Newsletter: Nostr Compass #3 --- Timestamps 00:00 Intro to Episode 3 00:48 HODL Invoice Escrows in Shopstr 03:5…
3
Builders break down Nostr Compass #1: NIP-BE, Marmot Protocol, Blossom, Shopster, plus client updates from Amethyst, Dam…
Want to publish here too? No sign-up, and the text stays yours. Learn how to start
Replies (0)
Loading…