No. 7C0584 Thursday, September 17, 2026 24h to 10:08

The Nostr Observer

Printed from one corner of the network

Ranked as EZ 651 events through your lens 235 voices

Data & ownership

The exit button is a file

Ditto can gather a Nostr history onto a device and send it back to a different relay. The useful part is the restore. The limits matter too.

Owning an account is one thing; keeping its history is another. Ditto’s import and export tools give that distinction a practical form: a file on the reader’s own disk, and a way to put its contents back on the network.

In a guide surfaced in today’s reading, Derek Ross describes fetching signed events from the user’s relays into a local database, then downloading a JSONL archive. Notes, reactions, follows, relay lists, long-form posts and deletions all belong in it. The archive records events; it does not bundle the photographs and other media their links point to.

The other limit is what remains to be collected. As Ross puts it, If every relay pruned a post, that post is gone from the network. An export can preserve what the relays still hold. It cannot recover a history that has already disappeared from all of them.

Import is the more consequential half. The file can go back through Ditto, which checks its lines before publication. Valid signed events retain their signatures; unsigned entries become templates for the user to sign individually. Events belonging to another account are counted as warnings and are neither re-signed nor published.

There is also a route without the file transfer. Add a new write relay and Ditto can offer it the archive already on the device. A fresh server need not begin with a blank account history merely because it was added after the posts were written.

Interrupted transfers resume from remembered progress. A full network scan can search for older material again; a full network push can resend an archive to a relay that has lost its copy. The promise is modest enough to be useful: ownership includes a recoverable copy, and moving services should not require starting over.

Security release

Bisq requires v1.10.8 to keep trading

Bisq has released version 1.10.8, describing it as an important security update for vulnerabilities identified during a recent audit.

The release announcement makes the consequence explicit: Updating to this version is required to continue trading.

The note does not enumerate the vulnerabilities. Its immediate news is the requirement attached to the release: continuing to trade depends on installing this version.

Dispatches

The trusted sender

The phishing email passed its checks

Ungovernable’s account of a September 9 phishing campaign starts with an awkward detail: emails targeting customers of Trezor, BitBox and CoinTracking came from the companies’ real domains and passed SPF and DKIM authentication.

The post says attackers had gained access to accounts at Brevo, the email marketing provider, and created API keys inside them. A warning about an STM32 entropy vulnerability was the message used to press recipients into action.

The claimed vulnerability was part of the phishing pretext. The report’s point is the sending channel: The weak point was never the wallet maker. It was the vendor they trusted to send their post.

In that account, proving where an email came from did not establish that its instructions could be trusted.

Languages & access

A place to organise the translations

Frank Corva introduces Mantra, a Nostr client built by Kgothatso Ngako to manage translation work without a central platform.

Corva places it in a longer effort to make Bitcoin and its literature accessible across Africa: Exonumia for translations, followed by the 2022 launch of a service enabling bitcoin use on feature phones.

The interview accompanying the post covers a walkthrough of Mantra, software vulnerabilities and the difficulty of continuing to build through setbacks. Here, the unit of access is a text someone can read in their own language, and a place for the people translating it to work.

Who signed the app?

The signature still has a name behind it

Max explains a distinction in Zapstore: apps that developers have not signed themselves are signed with the store’s indexer key. In that case, the initial trust is placed in Zapstore.

Zapstore adds that users are prompted to verify the download URL, often a developer’s GitHub repository. The source of the download remains part of the decision.

Max’s request is for developers to sign their own apps. The distinction is small on a download screen and substantial in practice: a signature identifies a signer, so it matters whether that signer is the developer or the indexer.

In brief · On the calendar · At the counter · On air

In brief

Amethyst upload fix

Dee Kay reports that the recent Blossom upload issue is resolved, with the fix awaiting the next release. A specification issue has also been raised.

Hermitcrab

Talvasconcelos introduces a personal agent built around Nostr and local operation.

Agora on your own site

Derek Ross walks through campaign widgets for other websites. The payment versions support on-chain donations; the compact card links to the campaign. The widgets do not handle Lightning invoices.

The cost of the global feed

Fiatjaf distinguishes filtering the whole network from cleaning up mentions and replies. The latter, the post argues, can be served at a fraction of the cost.

On the calendar

COIN BASEDSep 17 · 18:00 · New YorkPubKey, 85 W Washington Place.

Brasília BitDevs #033Sep 17 · 19:00 · BrasíliaUniversity of Brasília, Faculty of Technology, room BT-52/15.

Bitcoin Hanoi #20Sep 18 · 19:00 · HanoiA gathering for Bitcoiners and beginners.

Land of 10,000 NodesSep 18 · 19:00 opening · MinneapolisThree days of talks and discussion at O’Shaughnessy Distilling.

Bitcoin in DenmarkSep 22 · 19:00 · TallinnA community-building discussion at Vabaduse Tuba.

Times are local to each venue, as listed by the organisers.

At the counter

Samsung 990 EVO Plus, 2 TB325,000 sats · BonnRobuonse lists an NVMe M.2 SSD, described as new in unopened packaging.

Adria Action 361LH21,000,000 sats · BerlinRonin’s caravan listing includes a mover, a 200 Ah battery and a Walker awning.

Prague astronomical clock€20 · VeronaAlanbimbati lists the item as new, with local collection or €5 shipping.

Prices and condition are the sellers’ listings at print time.

On air

The Kalimera showGeorge and inpc · started 10:00Music from decades of listening, collecting and making it.

NoGood RadioA continuous basement broadcastA station running on scrap parts.

Synthdragon RadioTwo separate streamsChill for synthwave and ambient sounds; Fierce for darksynth and high-energy electronics.

Listed live when the paper closed at 10:08. The show’s start time is in Vilnius time.

The listeners chose 89

Noderunners Radio counted 364 songs in its Wednesday report: 89 requested and paid for by listeners, with one paid straight to the artist.

From the picture desk

A day kept from 2013

Beaver Lake photograph from danielw’s yellow-kayak outing, dated April 22, 2013.
Danielw shares an outing on Beaver Lake in a yellow kayak. The photograph is dated April 22, 2013: an archive image returned to the day’s conversation.Picture: danielw

The first fire

The first fire Anders posted after refurbishing the chimney and connecting the fireplace.
Anders marks a milestone at home: chimney refurbished, fireplace connected, first fire lit. The post gives heat its proper place among the things a house needs.Picture: Anders

Ready for Friday

Tour equipment pictured in means’s post about finishing rehearsals in Chicago.
Means has finished rehearsals in Chicago. The tour starts Friday in Minneapolis at First Ave; the picture arrives with the work of rehearsal done and departure next.Picture: means

The Instrument

400 notes. No overlap.

The same 24-hour window, read without your lens, returned 400 notes. None appeared among the 400 ranked notes read for this edition.

The comparison is between the two note selections, not all 651 events across the desks. It shows how far this reading departed from the anonymous ranking. The choice of what made the paper remained the editor’s.