Episode Details

Pip, Abh3po, Pete and Max join Nostr Compass Podcast #15 to walk through the biggest stories from [Newsletter #15](https://nostrcompass.org/en/newsletters/2026-03-25-newsletter/), from Primal's new Follow Packs and BigBrotr's relay-scale nsec leak analysis to nostr-vpn, peer-to-peer DOOM, and a dense week of client and protocol releases. The second half of the episode moves from weekly updates into a longer retrospective, tracing what happened in Nostr each March from 2021 through 2026. That arc runs from fiatjaf making two protocol commits in March 2021 to a March 2026 ecosystem where VPNs, games, signers, CI pipelines, and agent proposals all coexist on the same event-and-relay model. ## Full Show Notes ### News - **00:00 Intro** Opening setup for the week, the guests, and the main themes from Newsletter #15. - **00:16 Primal adds Follow Packs, zap enrichment, and deep links** Primal Android follows last week's 3.0 wallet work with Follow Packs for onboarding, zap enrichment for wallet context, and a `primalconnect://` deep-link protocol for cross-app navigation. The discussion also touches the parallel TestFlight work landing on iOS. - **03:18 BigBrotr maps exposed private keys across the relay network** BigBrotr scans 41 million events across 1,085 relays looking for exposed nsec strings, then separates bot noise from real user exposure. The segment covers the NIP-90 leak checker, npub.world profile warnings, and why the result is both a security story and a Nostr-native service story. - **09:03 Nostr VPN launches as a Tailscale alternative** Martti Malmi's nostr-vpn uses Nostr relays for signaling and WireGuard for encrypted tunnels, replacing centralized account-based coordination with Nostr keypairs. The conversation covers its rapid release cadence, LAN pairing, Windows support, and the broader idea of Nostr as infrastructure rather than only social media. - **11:14 Open-source DOOM runs peer-to-peer over Nostr** Vector's P2P DOOM uses Nostr for discovery, Marmot for encryption, and Iroh for low-latency QUIC transport. This chapter digs into why the stack matters: Nostr coordinates the session, but the actual gameplay moves onto a transport layer built for real-time performance. - **12:42 FIPS v0.2.0 ships Tor transport, reproducible builds, and sidecar examples** FIPS v0.2.0 adds Tor transport for anonymized mesh links, reproducible builds, a sidecar example that connects through a Nostr relay, and OpenWrt workflow improvements. The wire format changes, so the hosts also note that v0.1.0 nodes do not interoperate with v0.2.0 without upgrading. - **14:29 Nostrability Schemata goes multilingual** Nostrability expands from JavaScript-only packages into Rust, Go, Dart, Swift, and Python, while the interop tracker adds a What's New feed and better filtering. The broader point is that event kind validation is becoming a reusable cross-language building block instead of copy-pasted app logic. ### Releases - **15:11 Amethyst v1.06.0 and v1.06.1** Poll support lands with weighted voting based on [NIP-85](/en/topics/nip-85/) (Trusted Assertions), plus redesigned poll cards. The follow-up point release fixes concurrent modification crashes introduced along that new path. - **16:30 Amber v5.0.0 and v5.0.1** Amber promotes its recent relay-auth, Tor, permission-scoping, and encrypted PIN work into stable, then removes internet permission from the offline build flavor in v5.0.1. The hosts frame this as signer hardening reaching production maturity. - **17:13 Mostro v0.17.0 and Mostro Mobile v1.2.2** Mostro continues building out buyer and seller reputation data as Nostr events, while Mostro Mobile stays aligned with the latest protocol changes on the client side. - **17:39 Shosho v0.14.0** Shosho Shop adds storefront surfaces to profiles, browse flows, and live streams. The open question is whether the implementation maps onto [NIP-99](/en/topics/nip-99/) listings or a separate event model. - **18:13 Applesauc