51 sats \ 3 replies \ @Crizzo 22 Dec 2022 \ on: Consent | Nostr Privacy nostr
How terrible of an idea is it to be running nostr on the same computer that I manage my LN node on?
You mean a relay?
The more stuff is running on your computer, the more attack surface it has.
I would try to run BTC+LN on a separate machine
reply
No, not a relay. I guess I'm not technically "running nostr", just using a client and sending/receiving messages and I use the same computer to access my Umbrel node which runs on a separate Raspberry Pi. I don't think I could compromise my node unless I did something really stupid like running a shady executable. I like to think I'm pretty smart about avoiding stuff like that, but maybe there's something I'm not thinking of.
reply
If you don't want to trust any client, you can write your own, it's quite simple! or audit one that's open source, I think they basically all are .
Other than that you should be fine, i think there is more risky stuff running on your machine.
As far as umbrel goes, i heard that it's communication is unencrypted, and basically relies on your network not being compromised ( if it's on the same network as your public Wi-Fi, that's probably not great). So maybe running it in a separate network and using vpn to Access it might be a good idea. I don't know enough about that though, so please don't take my word for it.
reply