Yeah, I've got a proposal that's being worked on: https://github.com/soatok/mastodon-e2ee-specification
There are two mental models for designing a cryptosystem that offers end-to-end encryption to all of its users. The first is the Signal model. Predicated on Moxie’s notion that the ecosystem …
I don’t consider myself exceptional in any regard, but I stumbled upon a few cryptography vulnerabilities in Matrix’s Olm library with so little effort that it was nearly accidental. It…
XMPP is a messaging protocol (among other things) that needs no introduction to any technical audience. Its various implementations have proliferated through technical communities for decades. Many…
If they actually read the whole thing, including the addendum, there should no longer be any confusion.
As a rule, I never change titles after pressing Publish.
Anyone incapable of reading past the title is not worth listening to
The framing is as follows:
Matrix, OMEMO, whatever.
If it doesn't have all these properties, it's not a Signal competitor. It's disqualified and everyone should shut the fuck up about it when I'm talking about Signal.
That's the entire point of this post. That's the entire framing of this post.
If that's not personally useful, move on to other things.
This is a very technology focused view. In any user system, the users themselves have to be a consideration too.
As I wrote here: https://furry.engineer/@soatok/112883040405408545
My whole thing is applied cryptography! When I'm discussing what the bar is to qualify as a real competitor to a private messaging app renowned for its security, I'm ONLY TALKING ABOUT CRYPTOGRAPHIC SECURITY.
This isn't a more broad discussion. This isn't about product or UX decisions, or the Network Effect.
Those are valid discussions to have, but NOT in reply to this specific post, which was very narrowly scoped to outlining the specific minimum technical requirements other products need to have to even deserve a seat at the table.
A lot of recent (and upcoming) blog posts I’ve written, and Fediverse discussions I’ve participated in, have been about the security of communication products. My criticism of these pro…
I choose not to make perfect the enemy of good.
If you make the cost of bypassing Nightshade higher than the cost of convincing people to opt in to their data being used in LLM training, then the outcome is obvious. "If you show me the incentives, I'll show you the outcome."
No? That's not what NightShade is. NightShade isn't DRM.
Yep. That's why the two things I say Automattic MUST do to make things right are about proper consent controls for Automattic's use of data and sale to AI vendors, but the third thing is a proposed proactive defense against scrapers.
Thanks to Samantha Cole at 404 Media, we are now aware that Automattic plans to sell user data from Tumblr and WordPress.com (which is the host for my blog) for “AI” products. In respon…
Dhole Moments is not a music blog. I will not pretend to be an expert on music, music theory, or music appreciation. But it goes even further than that: I am so untalented at music that I exert a v…
Dhole Moments is not a music blog. I will not pretend to be an expert on music, music theory, or music appreciation. But it goes even further than that: I am so untalented at music that I exert a v…
That's a personal matter that I don't really feel like commenting on, but I'm not naive about politics and how it affects people.
I quit my job towards the end of last month. When I started this blog, I told myself, “Don’t talk about work.” Since my employment is in the rear view mirror, I’m going to b…
I greatly appreciate that this is an opt-in change, and that users have to choose to enable it.
Some of you may be surprised to learn that my fursona is not a fox, nor a wolf; nor is it a fictitious fox-wolf hybrid popular within the furry fandom (which is usually called a “folf”)…
https://hard-drive.net/hd/technology/elon-musk-renames-twitter-after-relationship-with-his-wife
I like their take on this
We'll get our top scientists on this, posthaste.
Our bottom and vers scientists remain on standby for new assignments. UwU
Absolutely. I just haven't figured out how to do that yet.
EDIT: Wow, that's a bad UI. https://github.com/LemmyNet/lemmy-ui/issues/314
Hi,
My name is Soatok and I'm a silly sod who didn't realize creating a community would automatically make the the moderator of said community, so I've been asleep at the wheel this whole time due to personal reasons.
Anyway, I'm going to correct this oversight immediately. Sorry for the inconvenience.
This is pretty cool. I should suggest Lemmy to the cryptography nerds I hang out with :3
