Nostr developers race to build decentralized identity before mandatory biometric IDs lock surveillance

Nostr (4)

• Nathan Day argues bots are first-class citizens on Nostr, with as much right as humans. This is a feature, not a bug, but necessitates trust signals for when human verification is required.
• David Strayhorn suggests proof of authenticity is as important as proof of personhood. The goal is for accounts to be who they claim to be, not a binary human vs. bot check.
• Nathan Day identifies a core Nostr problem: newcomers start with zero web of trust. Proof of personhood does not solve this; reputation must be built through network interaction and actions.
• Nathan Day states the person NIP and required attestation NIP updates are nearly ready for release, aiming for a draft on NostrHub within a week of the recording.

AI & Tech (6)

• David Strayhorn states the proof of personhood problem existed before AI, with impersonators and bots causing issues. AI agents now make the problem far more severe and difficult to detect.
• David Strayhorn explains that follows alone are insufficient to prove humanity. He proposes a tagging or attestation system where users publish a signed note stating they met someone in real life and verified their public key.
• David Strayhorn contrasts Nostr's approach with the failed PGP web of trust, arguing Nostr's contextual attestations are more sophisticated and likely to succeed.
• David Strayhorn describes decentralized lists as a method for community curation. Anyone can add items, and curation is done via social proof, ignoring low-trust actors, with the NIP suggesting NIP 7 reactions for voting.
• Nathan Day envisions combining decentralized lists with attestations, where lists of humans are weighted by attestations from a user's web of trust and supported by out-of-band verification.
• Avi stresses the major challenge is abstracting complex web-of-trust mechanics into an intuitive user experience that doesn't overwhelm users with jargon or options.

Culture (1)

• David Strayhorn analogizes the desired user experience to early Google: users don't need to understand PageRank, they just need it to work. He suggests default options and layered detail for tags or attestations on a profile.

Digital Sovereignty (5)

• Gerald Glickman argues the US digital identity model is fundamentally broken because it uses compromised public identifiers like Social Security numbers as secret authenticators, equivalent to using your home address as your front door key.
• Glickman advocates for a credential system where states issue verifiable credentials bound to a user's DIDs. This allows credential revocation (e.g., a driver's license) without destroying the user's foundational identity, giving control back to the individual.
• Marty Bent notes age verification laws, like the Senate Judiciary Committee's 22-0 vote on the GUARD Act, are a common Trojan horse for imposing centralized digital identity systems under the framing of protecting children.
• Glickman rejects Worldcoin's model of using biometrics as identifiers, though he approves of local device authentication like iPhone's Secure Enclave. The fight is for open systems against closed-garden solutions pushed by big tech lobbying.
• The call to action is to engage now: examine your state's mobile driver's license implementation, support open standards work at W3C or Trust over IP, and advocate for policies like Utah's SETI that embed privacy and individual control.

AI & Tech (1)

• The rise of AI and LLMs has drastically accelerated identity fraud, collapsing the half-life of new security controls. Glickman notes at least 3000 Americans become victims of identity theft every hour, a rate he calls unacceptable.

China (1)

• Glickman warns against using biometrics like face or fingerprints as identifiers, as they are irrevocable and will be compromised. He points to China's social credit system as a real-world example of authoritarian control enabled by such systems.

Coding (1)

• The proposed solution is using cryptography and open standards for decentralized identifiers (DIDs). This allows for cryptographic proof of authorship via digital signatures, shifting from probabilistic inference to mathematical certainty.

AI & Tech (2)

• The Lean Startup's 'minimum viable product' and hypothesis-driven development principles are now the standard operating model for leading AI companies like Anthropic, which launch research previews to gauge interest before full commitment.
• The simplest structural defense is filing as a Public Benefit Corporation (PBC), which legally codifies a specific company purpose beyond shareholder returns. All major AI labs, including Anthropic, are PBCs.

Business (10)

• A pervasive 'force' drags successful organizations toward mediocrity, where their very success becomes a liability as the temptation to extract value grows with their financial worth. Eric Ries calls this 'financial gravity'.
• Ries argues standard corporate governance is fundamentally flawed. Harvard Law School data shows only 20% of venture-backed founders remain CEO three years after a company's IPO, making founder ousting a statistical likelihood, not an anomaly.
• Ries cites Philip Morris's 2021 acquisition of the inhaler company Vectura as a real-world case of 'fiduciary duty' forcing a board to accept a value-destroying bid that outraged the public and medical community.
• The principle 'harder is easier' states that upfront commitment to principles like quality or safety builds trust, which lowers long-term costs like customer acquisition and increases organizational velocity, despite creating short-term difficulty.
• In contrast, Groupon eroded trust by incrementally increasing email frequency from one to eight per day based on ROI data, which destroyed its core value proposition and contributed to its decline.
• Ries claims traditional 'shareholder primacy' governance is a recent, 40-year-old dogma. For most of corporate history, companies were required to have a specific beneficial public purpose, and deviating from it could result in a corporate death penalty.
• For durable protection, companies need a 'mission guardian' like a Perpetual Purpose Trust or nonprofit foundation. Novo Nordisk, created in 1923, is governed by a nonprofit foundation that has protected its scientific integrity for over 100 years.
• Academic research shows companies with fortified governance structures like Novo Nordisk's are six times more likely to survive to their 50th anniversary and deliver superior returns on invested capital compared to conventionally governed peers.
• Anthropic's Long-Term Benefit Trust appoints AI safety experts without equity in the company to its for-profit board. This structure allows it to refuse releasing models or lucrative contracts, like a $200M Pentagon deal, on safety grounds.
• The 'Todd Park rule' for culture is to only make deposits (sacrifices for values) and never intentionally make withdrawals (acting against values for short-term gain), as withdrawals happen accidentally enough.

Enterprise (1)

• Cloudflare embodied 'harder is easier' when it made SSL encryption free for all users, sacrificing short-term revenue to fulfill its 'make a better internet' mission. This built massive trust and contributed to its $70 billion market cap.

Startups (1)

• Eric Ries was consulted by Anthropic's founders early on, advising on governance structures to protect its AI safety mission before the generative AI boom and ChatGPT's release.