@risottobias @yawnbox xeiaso.net

@risottobias @yawnbox Xe?

@yawnbox YES GOOD

I was reminded of this

@risottobias Imagine you build a Dropbox-like service atop ezcrypt, and I compromise your service.

All I need to do is push a new ciphertext, study how long it takes to fail, and repeat like 2²⁸ times to recover your AES key.

Oops! I did it again

> Without any third party dependencies (not even openssl or similar). In your pu... | Hacker News

(news.ycombinator.com)

(I'm shitposting, in case it wasn't obvious. If I was serious, I would've included an actual rate.)

What can be found in a few minutes of lazily glancing at code?

https://soatok.blog/2024/08/14/security-issues-in-matrixs-olm-library/

Service offering:

For a flat rate, I will take a quick glance at your code and tell you how fucked it is, and how much you should budget for a deeper code review from a professional team of security consultants.

I keep doing this for free, and it's starting to be exhausting.

Is there a GPLv3 / AGPL variant that excludes GenAI use cases from the scope of its public license?

So, I've pretty much gotten to the tedious part of the Public Key Directory specification: The actual HTTP API, what the responses will look like, etc.

After all that's done, I plan to copy-edit the hell out of it, and then tag v0.1.0.

Then, I'll start building a reference implementation for the PKD server software :3

If you find yourself with downtime over the next couple of months, give it a read and let me know if you have any suggestions or feedback.

(Yes, there are some grammar issues in the current HEAD, but I'm fixing them soon.)

https://github.com/fedi-e2ee/public-key-directory-specification

Voting is mostly useless.

Not voting is completely useless.

They say, if you're doing well, build a bigger table, not a bigger fence.

Unfortunately, someone said this to your DBA.

@dm

I wish I had the foresight in 2022 to make this, but an idea occured to me today.

A website tentatively called X-odus.

How it works:

1. Create an account
2. Log in with at least one Twitter (or X as jerk-offs call it) to prove Twitter account ownership
3. Create a dedicated page with your old Twitter username, so folks could find your new posting platforms (Fedi, BlueSky, your personal website).

X-odus accounts would have a 1:many relationship with old Twitter accounts.

When someone wants to find someone they once knew on Twitter, they would just go to $domain/$oldUsername and be presented with the new places to find them.

I dunno if the horses are already out of the barn, or if it'd be worth building now?

I love that the IACR's URLs are in the format year/number, because if @durumcrustulum posts an IACR link preceded with $current_year, I know it's probably something exciting, but if it's from like 2003, it's probably catastrophic to whatever's being discussed at the moment.

What his fanboys believe:

Daddy Musk is gonna take us to Mars!

Reality:

Incelladus

Session be like

"We're metadata-resistant. Also, we recently passed the 1 million user milestone. Don't ask how we distinguish unique users!"

Encrypted Chat App ‘Session’ Leaves Australia After Visit From Police

After federal police came to an employee’s house to ask questions, encrypted messaging company Session has decided to leave Australia and switch to a foundation model based in Switzerland.

404 Media (www.404media.co)

@glyph Sharing your link on Slack doesn't embed anything. I would recommend some sort of card meta tags on the homepage.

https://www.youtube.com/watch?v=6bTpbDL5dcg #uspol #uspolitics #politics #usa #election #election2024

If you miss what Twitter used to be, BlueSky is mostly that.

(It still needs locked accounts to be 1:1.)

If your experience with Twitter consisted a lot of Wishing Things Were Different, the Fediverse is a better fit for you.

That's how I've interpreted people's opinioms so far.