Alex Gleason

I create software that empowers people online.

I'm vegan btw.

Last Notes

2026-09-16 03:49:36 UTC

XMRmada community is popping. It's one of the most active communities on Armada. Well they renamed it to Xmrda. But XMRmada was better.

2026-09-15 18:17:16 UTC

https://blossom.ditto.pub/dc936dbb5b8c01ff49b0a84a65996de5818292b8100ca5f208ce2a514fbd6760.png

2026-09-12 17:42:05 UTC

The Monero community on here makes me feel hopeful. Where did you guys come from? Why did you gravitate towards Nostr?

2026-09-10 23:30:51 UTC

https://youtu.be/Mvo1mTXHGMM

2026-09-07 11:25:30 UTC

https://blossom.ditto.pub/d3be5888b59200bd604a65389a50b0865e809e55089cbe0c37e594d9e62f33d8.png

2026-09-04 22:07:03 UTC

The new Ditto release preserves your timeline position when you navigate back. This is like the hardest problem in React programming and it was only possible after Claude Fable 5.1.

2026-09-04 17:04:19 UTC

Ditto Relay is now running @npub1utx…50e8 's nspam model embedded into the relay to classify spam. 💪
It's working pretty well! But to avoid false positives, it doesn't outright reject spam. It only filters it out of queries WITHOUT ids or authors. So querying a spammy profile will still return all their spam, but querying notifications or a thread won't.

2026-09-03 21:27:48 UTC

Ditto has hotkeys 😎
#nevent1q…zx66

2026-09-02 20:42:34 UTC

This type of server-wide hack is not possible on Nostr.
#nevent1q…2spx

2026-09-02 14:29:42 UTC

I was able to reduce the CPU usage of Ditto Relay 2x just by timeboxing expiration tags into 60s buckets instead of 1s. Literally doubled the performance just from this.

2026-08-31 17:26:42 UTC

New Ditto Extension update lets you archive any page as an nsite snapshot. 😎
https://blossom.ditto.pub/05291634a243edaf210e7b1fe817fbab545469fbfc9f744c00cf12ff1fbc2cc1.png
https://blossom.ditto.pub/25477eb1900bed37b2e11a3e7abb9692e3a0f0f952aa7b5628b6e8773b8946b8.png

2026-08-30 23:25:22 UTC

I found an old Nostr backup and imported 125M historical events into relay.ditto.pub. So if you ever lost something you might find it there.
Also, Ditto now has an "export data" button in settings that downloads all of your events from relays and gives you a download file. You can also import to reupload to relays.

2026-08-26 15:36:52 UTC

To clone YouTube, we would need 10 exabytes of disk space, or 420,000 x 24TB drives costing about $120 million.

2026-08-23 19:09:41 UTC

Our npanel server is now hosting both ditto.pub and armada.buzz!
And we shut off Cloudflare. And enabled Tor on all of our sites at Soapbox.
Why? npanel is already production-ready and competitive with Cloudflare.
It lets us make sweeping changes to all of our sites at once. We enabled Brotli compression. We made npanel natively compatible with Tor. This is the future of deployment.
And it's just a static file server. So it can absorb traffic.

2026-08-19 21:32:23 UTC

:POLICE: A critical security vuln was fixed in Ditto Android that would allow an attacker to steal your nsec by getting you to tap an evil URL. :wisp_sad:
A new version has been released onto Zapstore and Google Play. UPDATE DITTO ANDROID IMMEDIATELY. :POLICE: :POLICE: :POLICE:
Ditto on web and iOS are unaffected. The issue only affects Android because it was a problem in the Android link handler. People using Amber are unaffected by nsec theft but should upgrade anyway because the attack is still arbitrary code injection via evil URL.
What does an evil URL look like? It contains JavaScript code inside of the URL. The path was not being escaped properly, so it could break out and run any script. The fixed version completely changes the way native code triggers UI navigation (event-driven) so we never inject JS code into the UI at all anymore.
Huge shout out and thank you to @npub12rv…85vg for connecting me to the team behind https://v12.sh/ who discovered this vuln, and huge shout and and thank you to them for responsibly disclosing it to us. 🙏 They also discovered some other issues we patched in this release, but the evil URL is by far the worst.

2026-07-19 04:10:30 UTC

Something else I wish I said: well written Nostr apps are virtually unhackable.
If you build Nostr apps the right way, it forces the whole attack surface into a simple, narrow, auditable pipe. I sleep soundly at night.
Why? We hold no user data. Private data is encrypted to your own key. It's resistant to hacking because there's nothing to exploit. Build your app like this.
#nevent1q…k3mk