some-username's comments

some-username | 4 years ago | on: TUIs

There has been a rust-library for signal in the works. I read some discussion on it that made it clear the aim was to develop a proper signal-desktop application. The rust-library has a cli, which is not quite finished. https://github.com/whisperfish/presage

some-username | 5 years ago | on: Off-the-Record Messaging Protocol version 4 draft

You can find the main changes over the last version in the first chapter of the specification: https://bugs.otr.im/otrv4/otrv4/-/blob/master/otrv4.md#main-...

Quote:

- Security level raised to 224 bits and based on Elliptic Curve Cryptography (ECC).

- Additional protection against transcript decryption in the case of ECC compromise.

- Support of conversations where one party is offline.

- Updated cryptographic primitives and protocols:

   - Deniable authenticated key exchanges (DAKE) using "DAKE with Zero Knowledge" (DAKEZ) and "Extended Zero-knowledge Diffie-Hellman" (XZDH) [1]. DAKEZ corresponds to conversations when both parties are online (interactive) and XZDH to conversations when one of the parties is offline (non-interactive).

   - Key management using the Double Ratchet Algorithm [2].

   - Upgraded SHA-1 and SHA-2 to SHAKE-256.

   - Switched from AES to ChaCha20 [3]. The RFC 7539 variant is used [16] .

 - Support of an out-of-order network model.

 - Support of different modes in which this specification can be implemented.

 - Explicit instructions for producing forged transcripts using the same functions used to conduct honest conversations.

some-username | 5 years ago | on: The GNU Name System IETF Draft

Yes, sure. But that's fine - everyone who wants to have their GNS can design their own DHT. It's still outside of the spec. (Which makes a lot of sense to me.)

some-username | 6 years ago | on: Gambas: Visual Basic on Linux

Don't you think that "ideological reasons" can be quite a good reason to do things?

Besides, following ideological reasons only means to value certain (other) aspects higher for evaluating the question how good something is.

Usually the term ideological implies (in my book) that a person is considering the greater good, and willing to take a step back in own convenience. That sounds like a nice person to me. Maybe you could spare some curiosity for their reasons?

some-username | 7 years ago | on: Diaspora: Hello and a big welcome to everyone arriving from Google+

"Physical impossibilities of p2p models" - Although there might be structural limitations, I think they're not too strong. Just because we currently do not have a major p2p network doesn't mean that it's not possible. I think it's very possible to have something like this (even for availability). You just need to have a good design/mechanism.

But there's the problem (why we didn't see something like this yet): No one puts many resources into the design of p2p-stuff. The competing, central solutions get tons of resources from big companies that try to make money with it. There is no company that tries to build something p2p because with giving away the control, they give away the possibility to make money out of it.

A working example of offline storage would be bitmessage (although I think It won't scale). A much more interesting development would be lake: https://media.ccc.de/v/34c3-8974-practical_mix_network_desig...

some-username | 7 years ago | on: Diaspora: Hello and a big welcome to everyone arriving from Google+

Yes, cryptocurrencies was one way. (I don't think that it's really complicated.)

But on the other hand I don't think that it's really expensive. As in have a RasPi lying around at home that's keeping track of everything when you're not online. That should totally suffice for your own needs. If you have bigger needs or want to support the network (maybe even for a small compensation in whatever form) that's easily scaleable. Or think of bittorrent: It's incentivised that you run contribute back what you received. That works totally without compensation in cryptocurrencies.

About the simplification I'm not sure either. Have you tried running Gmail lately? (Not as client but as service ^^ I think that it's not quite straight-forward.) Once you have a proper working p2p network/algorithm/protocol I can imagine that it's easier to run for all parties.

page 1