eth hacker :: collectooor :: security research @nascent

How decentralized is Farcaster today?

Sign ups
- You can sign up permissionlessly with the smart contract as a developer
- You can sign up with Supercast, Herocast, Farquest (and maybe others...)

Data / APIs
- You can permissionlessly run a Hub
- There are thousands of independently run Hubs
- If you don't want to run a Hub, you can use an infra provider like Neynar or Airstack

Protocol vs. non-protocol features
- Casts, reactions, follows, profiles, verifications are all on Hubs
- Not on Hubs: channel metadata, settings and follows, direct casts, location in user profiles

If Warpcast labels me as spammy, is that censorship?
- Depends on your definition! If you have an existing audience — say 10K followers — then even if you get labeled spammy your existing your followers will see your content in feeds on Warpcast regardless of whether you use Warpcast or not..
- If you don't care about Warpcast (approximately 80% of signer activity), then your follow graph is already decentralized in the procol.

Apologies if there typos or grammatical mistakes. Written in a single 15 minute stream of conscious.

Is it possible to maybe have a little test to confirm one isn’t a bot (as a warning) similar the arkose test on X?

And maybe for people to be notified their accounts have been labeled as Spam? So they know they are in the wrong and try to fix it but stopping whatever might have led to that

We all make mistakes 😂

Did you see this tho?

We all make mistakes 😂

Did you see this tho?

https://warpcast.com/traguyeth/0x4cfeb273