maqp

11 ms·

121.
by maqp 1y ago
Yup, I have no idea what's the point of gazillion YouTube shorts on exercises that have perfectly good tutorials by experienced people, available already. E.g., https://www.youtube.com/@RenaissancePeriodization/pla
122.
by maqp 1y ago
Jefit isn't about video tutorials, but keeping track of your progress in specific exercises, and performing correct amount of volume to progress but not over-train, a thing that becomes harder when you advance and your progress starts
123.
by maqp 1y ago
>That would be a preimage attack. My bad you're right with the terminology. >The best you could do would be to generate two different keypairs with the same fingerprint. That doesn't have any security implications. Except un
124.
by maqp 1y ago
>Fingerprints do not require collision resistance. That's what they're literally there for. To avoid situation where someone generates a key with matching fingerprint, and the person importing the key doesn't detect it&#x2
125.
by maqp 1y ago
It's the responsibility of the recipient to mute their phone when it's unpleasant/awkward for them to have their phone make noises.
126.
by maqp 1y ago
pull the apk from your phone with apktool. Compile Signal reproducibly with their instructions. Use the diff.py tool they provide and check for the message that confirms the APKs match.
127.
by maqp 1y ago
"What does making the app closed source take from you? The freedom of requiring trusting the service provider = facebook" It does change the requirement of collection. It's no longer "Well all this data is rolling in, wh
128.
by maqp 1y ago
>Sure, but for all we know it is a wholly owned subsidiary of the CIA. See Crypto AG[1]. This is such a sad propaganda tactic. Signal's client is 100% open source. The Android client has reproducible builds. You can verify yourself
129.
by maqp 1y ago
That stalking thing also happens in personal peer networks. For the messaging app to have any relevance, you're going to want most of your peers in and once there's a few hundred people in, there's power to be abused. Univers
130.
by maqp 1y ago
The thing is, if there's three users that know each other, using one server run by one of the three, then by definition there is one person with access to metadata of the 1:1 conversation between the two other users. If you are the one
131.
by maqp 1y ago
From the SimpleX doc you linked "To mitigate this problem SimpleX Messaging Protocol servers support 2-hop onion message routing when the SMP server chosen by the sender forwards the messages to the servers chosen by the recipients, th
132.
by maqp 1y ago
>Personally I just want to share shitposts with friends and speak freely without second guessing if I’m gonna be profiled by a data broker You are welcome to live your privileged life with your privileged friends using any software you f
133.
by maqp 1y ago
>How much more secure is that? It's much more secure wrt metadata. There is no third party server that's able to amass metadata about the two users conversing. SimpleX doesn't hide your IP-address from the server, and give
134.
by maqp 1y ago
Majority of new users will be. It's still a niche product. Also, I'm unsure if it's smart the client just picks a server for you at random. AFAIK this uses email as back-end so it's not like you can just swap your email
135.
by maqp 1y ago
>the only better alternative would be self hosting. Which doesn't really work in practice. The closer you move to the user, the more the threat of creepy buddy watching over metadata of people they know grows. Medium sized instituti
136.
by maqp 1y ago
Yeah but it later also supported non-E2EE SMSs and those were a security risk and they rightfully dropped the support. It was not ideal your grandma thinks any message sent in Signal is safe, when that wasn't the case.
137.
by maqp 1y ago
No that's just the default behavior of connecting to default server, which is what 99.9% of users are going to do. You want to get rid of SNIs, you run a server dedicated for DeltaChat, and then its the IP-address can be blocked.
138.
by maqp 1y ago
>telegram is the most user friendly chat out there. Telegram is a walking time bomb with 900 million users' data waiting to be leaked from the servers. >and, deltachat. That must be why I've never heard of anyone using it. &
139.
by maqp 1y ago
>messages encrypted with forward secrey can still be sent over SMTP. deltachat devs are working on that. OTR has had forward secrecy for 21 years. The effin headline stated PGP was a faulty model https://dl.acm.org/doi&#x
140.
by maqp 1y ago
>No forward secrecy and supports sending unencrypted messages as well for people who don't have pgp. JFC. There's a reason Signal dropped SMS support. What an insane design decision.
141.
by maqp 1y ago
"It's harder to shut down email than signal." It took me two minutes to figure out DeltaChat connects to the server with SNI "nine.testrun.org". Banana dictatorships can trivially write firewall rules to cut those c
142.
by maqp 1y ago
A standardized protocol without forward secrecy is worse than standardized protocol with forward secrecy. Just use Signal.
143.
by maqp 1y ago
>Is DeltaChat perfect from a security standpoint? No, but it's certainly well above the hurdle most people are at now. It's less safe compared to Signal, and Signal is the gold standard recommendations for average Joes. "B
144.
by maqp 1y ago
https://github.com/0xchat-app states it doesn't have desktop clients. Also, the direct messages have three types 1) NIP-04 DM: "Most widely used", but also, "not recommended". Reeks of Telegram that
145.
by maqp 1y ago
"No, Delta Chat doesn’t support Perfect Forward Secrecy (PFS). This means that if your Delta Chat private decryption key is leaked, and someone has collected your prior in-transit messages, they will be able to decrypt and read them us
146.
by maqp 1y ago
If your HW/OS doesn't allow verification of binaries, but your threat model requires doing that, then you need to use proper HW/OS that allows the verification. Also, iOS is proprietary so who knows what the OS is doing anywa
147.
by maqp 1y ago
>So I wonder if there are some areas in which this document is lacking or which aren't holding up as well? Ring oscillators have been embedded into Intel/AMD CPUs, and they're accessible via RDRAND/RDSEED. Blum-Blum-S
148.
by maqp 1y ago
Interesting, is the site yours?
149.
by maqp 1y ago
Paywalled article. Here's a good one https://ods.od.nih.gov/factsheets/VitaminB6-HealthProfession...
150.
by maqp 2y ago
Yeah ok I reviewed some of your post history and figured this isn't the first time you're being called out for your opinions. You've been downvoted about this topic for the past several years. It's not even the first tim

More ›