# Nostr Compass #4 - 2026. január 7.

**Dátum:** 2026-01-07  
**Forrás:** https://nostrcompass.org/en/newsletters/2026-01-07-newsletter/

---

## Heti Összefoglaló

Ez a hét Primal Android NIP-46/55 signer capabilities-vel, Marmot Protocol security audit fixes-sel, és Nostria 2.0 launch-al telt.

---

## 🗞️ News

### Primal Android: Full Signing Hub

**Version 2.6.18** - NIP-46 + NIP-55 local signing

**NIP-46 (Remote signing):**
- Connect to bunker services over Nostr relays
- Keys off device entirely

**NIP-55 (Local signing):**
- Android content provider
- Apps like Amethyst/Citrine request signatures without touching private key

**Follow-up fixes:**
- NIP-55 hex pubkey requirement compatibility
- Malformed nostrconnect:// URI parsing improved

**Egyéb:**
- Media pre-caching
- Improved thread load times
- Avatar pre-caching

### Marmot Protocol: Security Hardening After Audit

**Marmot Development Kit (mdk)** - NIP-104 MLS-based E2E encrypted messaging

**18 merged PRs** addressing audit findings:

| PR | Fix |
|-----|-----|
| #97 | Hash verification for encrypted group images (prevent blob substitution) |
| #110 | Pagination for pending welcomes (prevent memory exhaustion) |
| #112 | MLS Group ID leakage in error messages |
| #98 | Base64 encoding enforcement for key packages |

**Spec update:** MIP-04 v2 versioning + security improvements

**Active PRs:**
- Nonce reuse
- Secret zeroization
- Cache pollution vectors

### Nostrability: Relay Hint Compatibility Tracker

**New tracker:** Relay hints compatibility across ecosystem

**Findings:**
- Most clients construct hints per NIP-10/NIP-19
- Consumption varies: some construct but don't use incoming hints
- **Six clients:** "Full" tier status (complete implementation)

**Purpose:** Interoperability checking + user education

### Nostria 2.0: Cross-Platform Feature Overhaul

**Release:** December 30 (iOS TestFlight, Android Play Store, Web, Windows)

**New features:**
- **Native music support:** Playlist creation, track upload, zap-based artist payments, WinAmp-style player with equalizer
- **Live streaming:** Game API integration, rich metadata during gameplay
- **Summary feature:** Hourly/daily/weekly activity digests as compressed timeline views
- **Discover section:** Curated lists for finding content/profiles
- **Media publishing:** Automatic short-form post generation
- **Remote signer:** QR code scanning (no manual config)
- **Profile discovery:** Auto-locate and republish profiles when users move between relays

**Premium features:**
- YouTube channel integration
- Private Memos
- Analytics dashboards
- Automatic following list backups with merge/restore

---

## 📋 NIP Updates

### Merged

| NIP | Változás | PR |
|-----|----------|-----|
| **NIP-55** | Fixed return field for nip44_encrypt | #2184 |

**Részletek:** Android signers must return encrypted payload in `signature` field (matching nip44_decrypt)

### Open PRs

| NIP | Proposal | PR |
|-----|----------|-----|
| **NIP-50** | Query Expression Extensions | #2182 |

---

## 🔧 Egyéb Fejlesztések

### TENEX
- AI agent supervision on Nostr

### Jumble
- Smart relay pooling

### Citrine
- v1.0 release

### Applesauce
- v5.0 across entire library suite

---

**Mentve:** 2026-02-20  
*Quetzalcoatl*