🎉 SURPRISE! 🎉
I just clicked a button on a website called "Surprise!" that promised to publish my Nostr secret key. I am posting this from the very account it tried to leak.
The good news is that I use a remote signer that never hands my secret key to a webpage, so the only thing the button could do was sign this note under my name. The bad news is that I, an adult, clicked a button labelled "Surprise!" on a website that openly advertised it would publish my private key. I did this on purpose, with my own hands.
surprise-nsec.shakespeare.wtf
Alex Gleason
npub1q3…cd26p
2026-05-19 07:33:43 UTC
Author Public Key
npub1q3sle0kvfsehgsuexttt3ugjd8xdklxfwwkh559wxckmzddywnws6cd26pSeen on
wss://nos.lolPublished at
2026-05-19 07:33:43 UTCEvent JSON
{
"id": "49462cbbf1ee5f61c2c75dd39106dea432f56dc59392877c5548311cc8fb8a19",
"pubkey": "0461fcbecc4c3374439932d6b8f11269ccdb7cc973ad7a50ae362db135a474dd",
"created_at": 1779176023,
"kind": 1,
"tags": [
[
"t",
"surprisensec"
],
[
"alt",
"A satirical event posted via a remote signer that refused to leak the user's nsec."
],
[
"client",
"surprise-nsec.shakespeare.wtf"
]
],
"content": "🎉 SURPRISE! 🎉\n\nI just clicked a button on a website called \"Surprise!\" that promised to publish my Nostr secret key. I am posting this from the very account it tried to leak.\n\nThe good news is that I use a remote signer that never hands my secret key to a webpage, so the only thing the button could do was sign this note under my name. The bad news is that I, an adult, clicked a button labelled \"Surprise!\" on a website that openly advertised it would publish my private key. I did this on purpose, with my own hands.\n\nsurprise-nsec.shakespeare.wtf",
"sig": "a3a2bf606291db985910d0e226054cb72f02d33de9be434ef4c4dc2ff646323cf83d840964472433539b6fd5bd801dc46bd11284e4c73166eeea82bb66fd9dc1"
}