Nostr notes by ck0

Va falloir se dépêcher de télécharger les vidéos ...

2025-08-04T07:04:27Z

In reply to nevent1q…8s5q
_________________________

Va falloir se dépêcher de télécharger les vidéos intéressantes dans ce cas !

De toute facon Youtube c'est devenu pénible : les bloqueurs de pubs y sont bannis, les frontends alternatifs marchent à peine (et les api sont coupées pour éviter le harcèlement des boites de LLM qui font banir les intances de invidious), avec un VPN il faut obligatoirement un compte, etc.

Les régies publicitaires sur le web ne regardent pas les ...

2025-02-26T09:26:21Z

In reply to nevent1q…nzzg
_________________________

Les régies publicitaires sur le web ne regardent pas les campagnes pour lesquelles on paie leurs services. Ce n'est pas un "hache" mais juste un business tout ce qu'il y a de plus habituel pour une régie publicitaire. Une vraie solution c'est juste de mettre un bon adblocker comme ublock origin pour ne plus voir ces arnaques supportées par les régies publicitaires.

Yeah no, can't do that in every countries. Here local ...

2025-02-17T08:35:04Z

In reply to nevent1q…ry38
_________________________

Yeah no, can't do that in every countries. Here local legislation doesn't allow to prevent users to use their IM apps during work, and some IM apps have some work interrests (FB and Twitter DM for marketing for example).
Also, from my experience, blocking app categories isn't that simple, there are too much false positives/negatives and exceptions.

Have done this, over luks for the encryption and uefi boot. About ...

2025-01-07T10:24:49Z

In reply to nevent1q…dn5l
_________________________

Have done this, over luks for the encryption and uefi boot.
About dropbear, there are few config, like yhe ssh keys and the ip address to configure.

Also what's your bootloader ?

There is everything under linux. I would recommend pipewire over ...

2024-10-31T23:23:01Z

In reply to nevent1q…43nt
_________________________

There is everything under linux. I would recommend pipewire over jack for the stability. And for making filters, I've used Ardour, which is quite complete.

If you want to make a complete voicemod, you could take a look to rcv, it's popular with vtubers.

I'm late to this, but if you look for a a pipewire UI for ...

2024-10-31T23:03:18Z

In reply to nevent1q…930z
_________________________

I'm late to this, but if you look for a a pipewire UI for routing sound, there is qpwgraph (similar to qjackctl) or helvum (the same but also with the webcam flows).

Oh this impostor syndrome, I feel it's very hard to deal with ...

2024-10-21T10:40:40Z

In reply to nevent1q…u30f
_________________________

Oh this impostor syndrome, I feel it's very hard to deal with it :x
Because I'm gfluid, half of the time I'm like "yeahee, that's me" and the other half "hu, isn't this just a face ?", it took me more than a decade to get that's it' not just something I made up.
But on an other side, I too lazy for faking stuff for a long time, and a trans streamer that I follow said something like "If you are questionning your gender id for some time, you are definitely not completely cis ; cis people don't question it, and definitely don't take any steps into exploring their gender.". This helped me very much into processing that my gender id is not maked up, and the rest is just exploring it, like others could explore trends to find something comfortable to them :3

Shouldn't FortiManager the typical kind of software which ...

2024-10-13T11:23:05Z

In reply to nevent1q…we3s
_________________________

Shouldn't FortiManager the typical kind of software which should be reachable only for an internal administrative vlan, and in peticular never be exposed on internet in first place ?

Stolen from a friend, very relatable :D ...

2024-09-26T12:04:11Z

Stolen from a friend, very relatable :D

Without any reserve, yes ! But for IM stuff, you also need to ...

2024-09-18T21:59:45Z

In reply to nevent1q…3sz9
_________________________

Without any reserve, yes ! But for IM stuff, you also need to have people on the same plateform, good luck with that :p

"If you must go server-centric, go with anonymizing overlay networks."
Not sure about that, if you host services which need to be reached by the rest of internet, like email, it's not that easy :/

@npub1jsp…s2rm re: ...

2024-09-18T20:33:24Z

nebby :blobbee_neurodiverse: :v_plu: :blobbee_flag_nb: (npub1jsp…s2rm) re: https://digitalcourage.social/@echo_pbreyer/113159694289399799
Tbh, this is one of my main motivations for having my own part of internet. :akko_shrug:
If my infra looks to be outside of EU, I'll be outside of this laws.

Tbh, the p2p column bothers me very much, because p2p by itself ...

2024-09-05T21:08:51Z

In reply to nevent1q…2nce
_________________________

Tbh, the p2p column bothers me very much, because p2p by itself doesn't really mean anything, one can find counter examples for each lines, and Simplex seems to be a p2p app, from what I get from your mainpage.

This are very good points, thanks for having taken the time to ...

2024-09-05T20:54:58Z

In reply to nevent1q…99ar
_________________________

This are very good points, thanks for having taken the time to display them to me.

When I saw the note no 5, I wasn't thinking of the kex part. Maybe this could this be clarified in the note no 5 of the comparaison array ?

It's indeed not achieved by protocols only but by ...

2024-09-05T20:26:57Z

In reply to nevent1q…ky6a
_________________________

It's indeed not achieved by protocols only but by mathematics, protocol standards and verified implementations. That's the purpose of kex (key exchange) algo/protocols.

From your blogpost it mostly looks you exploit the Signal e2ee kex, how Simplex would be better than Signal if you rely on the same protocols/algo ?

I believe the difference between a central helper and a central ...

2024-09-05T20:00:17Z

In reply to nevent1q…63f6
_________________________

I believe the difference between a central helper and a central authority is especially relevant because of this on your mainpage. Let's be realistic, your goal isn't to target only technical users but everyone in need of a private IM plateform. Not technical people will use in the very large majority your servers. We have the same phenomena with Matrix and Mastodon.

Btw, it looks very similar to some alternate protocols.

Are there known vulnerabilities or a document pointing issues ...

2024-09-05T19:42:39Z

In reply to nevent1q…uqap
_________________________

Are there known vulnerabilities or a document pointing issues about the e2ee protocol used by Matrix ? If no, how can it be categorized as vulnerable to MITM attacks ?

Edit : Just to be clear, I will be happy to be proved wrong and to be corrected. Maybe it's already in the link you sent me, I should have read them before answering this.

Edit 2 : yup, no issues about the Signal e2ee or MITM attacks in your links :
- https://x.com/kaepora/status/1810611336675565934 isn't about e2ee but endpoint security
- https://x.com/kaepora/status/1828466690897703359 is a bunch of opinions with nothing technical and where we don't even know half of the real story, why do you link this ?
- https://simplex.chat/blog/20240314-simplex-chat-v5-6-quantum-resistance-signal-double-ratchet-algorithm.html is about a not near futur issue which is also under work by the Signal team, and which is not about a current e2ee issue.

> the "central helper" is the same, strictly speaking, ...

2024-09-05T19:34:51Z

In reply to nevent1q…a4yd
_________________________

> the "central helper" is the same, strictly speaking, as "central authority"

Not at all : in a torrent network, you can have an helper, but the network can still be functional without it. That's the case with private torrent trackers, you can manage to work with them when the tracker is down, or with Syncthing for example and the relays can help but you can also work without them.

The way you talk of the central authority in your comparison, it's like it's mandatory to have it for having a functional network. But that's not necessary the case.

Last part : 8 -> the definition of P2P is to not have a ...

2024-09-03T01:37:16Z

In reply to nevent1q…m6yy
_________________________

Last part :

8 -> the definition of P2P is to not have a central autority. They can have a central helper, but that's not mandatory, and if it's down, the network will still continue to work.
For the ones having none, you state that you can attack the network as whole. That's a very big oversimplification, and this can also being stated about Simplex in this case, because you don't define limits.
Also, in a P2P network, you don't need all the nodes for having it working, you only need 2 interconnected nodes as said previously.

Actually, from your whole comparaison, I'm getting that your app works as a P2P network, built with a custom protocol made for IM.
This by itself would make your app interesting, but this flawed comparaison raises multiple questions.
Also, usually, teams selling their products by comparing them in a missleading maner to their concurrent aren't as good as the teams claim.

Let's continue : 7 -> it's false. P2P networks ...

2024-09-03T01:32:00Z

In reply to nevent1q…jc94
_________________________

Let's continue :

7 -> it's false. P2P networks aren't centralized and neither decentralized networks, they are acentral ones. If you remove half of the nodes selected in a random manner, they will still work. You can have a multitude of them under the same protocol, once again take a look at syncthing. If your syncthing nodes are down, they will change nothing on mines because yours and mines aren't interconnected. And no, my nodes don't need to rely on a central authority for talking together.

2 bis, on the last line -> So in first, as said in the previous post, DNS is one of the 3 core protocols making Internet working. If DNS are down, your app can't work, because Internet will be broken. About lying DNS, we have invented one or 2 things against it preventing the possibilities of impersonations and MITM.
But as you are concerned of being dependant of what makes internet, what about NTP (directly) or BGP (indirectly) issues in this case ?

After reading the home page of your website, I've no ...

2024-09-03T01:02:47Z

In reply to nevent1q…n99k
_________________________

After reading the home page of your website, I've no interrest anymore in your software. Providing missleading information isn't a good way to advertise your software.

Just, so you know :
3 -> doesn't need to be permanent, it can be changed
5 -> Signal has developped the most secure e2ee im protocol.
5 bis : about Matrix, XMPP the servers can't decypher messages when e2ee is enabled
5 ter : "p2p" by itself doesn't define any kind of encryption, I don't understand how you can compare carottes with potatoes, and thinking that's a fair one. But if you insist, take a look at syncthing and its possibility to not trust a node.
"Dependence on DNS" : about p2p, please learn how they work before writting this. I mean, I don't know, take a look at torrents, you don't need the hostname for reaching a node. Trackers aren't mandatory, there are other ways to discover nodes.
Also, just so you know, DNS is one of the most central part of internet with BGP and NTP, being dependant of them isn't a bad point.

But whyy ? The joystick is much more comfortable than the cross ...

2024-08-02T13:33:28Z

In reply to nevent1q…x05t
_________________________

But whyy ? The joystick is much more comfortable than the cross :o