Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bluesky adds direct messages

bsky.social

Post reply on HN
Print view View original

201–208 of 208 posts

Re: Bluesky adds direct messages

#201

Post by some_furry »

evbogue wrote: post #200
some_furry wrote: post #199

Earlier quoted context omitted.

> but at the very least I think Bluesky could start with generating a private key on each client device, and then using a simple box algorithm to encrypt messages towards the user they want to talk to. Furry cryptography nerd here. No. This is inadequate. > I don't think https://tweetnacl.cr.yp.to/ is hard to mess up. Yes it is! If you're doing to encrypt some things in a constrained use-case, sure, NaCl is better th…

Well, exactly. My point is that in a constrained use-case NaCl would be sufficient. If you want to rotate keys, then simply delete your private key and since we trust Bluesky so much we can use the PDS to share new pubkeys once we rotate. In fact, this would work for signing keys too! Then the PDS wouldn't be able to write messages for you if it wanted to. For group messaging you simply encrypt the message to each re…

I literally wrote an X3DH implementation atop libsodium once

https://github.com/soatok/rawr-x3dh

I'm telling you, TweetNaCl is not enough to build a secure messenger

libsodium, maybe

Re: Bluesky adds direct messages

#202

Post by evbogue »

some_furry wrote: post #201
evbogue wrote: post #200

Earlier quoted context omitted.

Well, exactly. My point is that in a constrained use-case NaCl would be sufficient. If you want to rotate keys, then simply delete your private key and since we trust Bluesky so much we can use the PDS to share new pubkeys once we rotate. In fact, this would work for signing keys too! Then the PDS wouldn't be able to write messages for you if it wanted to. For group messaging you simply encrypt the message to each re…

I literally wrote an X3DH implementation atop libsodium once https://github.com/soatok/rawr-x3dh I'm telling you, TweetNaCl is not enough to build a secure messenger libsodium, maybe

I agree there are more layers you can add on top of TweetNaCl to improve security.

I'm going to personally add you to the list of people Bluesky should hire to get this implemented without the consent of the Bluesky employees. If they choose to hire both of us perhaps we can figure out how to implement this for them.

I will not commit to putting on a furry suit. But I've been known to try everything once. And bonus I live right next to the furry convention center and have always wondered what the heck is going on at the Hyatt while you guys are here.

Re: Bluesky adds direct messages

#203

Post by Kye »

krapp wrote: post #197
Kye wrote: post #144

Earlier quoted context omitted.

It's been on a steady downward slide for the last year, from almost 2m during The Exodus to about 900k active users now. People sign up, but most don't stick around. I also can't help but notice my own timeline has slowed to a crawl, and it's mostly the same few people. It's not vibrant and busy like it used to be.

Aggressive growth and addictive velocity are cancerous, let it reach a healthy equilibrium. Slow can be good, too. I'm following ~500 people at the moment, and getting relays from a few instances. I see a constant flow of new stuff but I can also easily leave and do other things, because Mastodon isn't designed to maximize engagement and addiction. I don't feel a constant need to post or comment or chase endorphins.…

I was on there when it was just Mastodon.social. It was more vibrant then, and it's been more vibrant in recent memory, before it rocketed to 2m users and started falling. Something is different, and it's not good. I think people who've been there are getting fed up with problems no one seems to care about years on (even people like me who kept giving it chances and pushing for change), and new people are going somewhere else instead of trying Mastodon.

You can stick your head in the sand if you want and hope the year-long freefall stops rather than consider there might be a problem. It's what I've come to expect.

Re: Bluesky adds direct messages

#204

Post by Kye »

evbogue wrote: post #202
some_furry wrote: post #201

Earlier quoted context omitted.

I literally wrote an X3DH implementation atop libsodium once https://github.com/soatok/rawr-x3dh I'm telling you, TweetNaCl is not enough to build a secure messenger libsodium, maybe

I agree there are more layers you can add on top of TweetNaCl to improve security. I'm going to personally add you to the list of people Bluesky should hire to get this implemented without the consent of the Bluesky employees. If they choose to hire both of us perhaps we can figure out how to implement this for them. I will not commit to putting on a furry suit. But I've been known to try everything once. And bonus I…

There are over 150 different furry conventions and 80 that have happened in the last couple of years. Which one are you talking about?

Re: Bluesky adds direct messages

#205

Post by evbogue »

Kye wrote: post #204
evbogue wrote: post #202

Earlier quoted context omitted.

I agree there are more layers you can add on top of TweetNaCl to improve security. I'm going to personally add you to the list of people Bluesky should hire to get this implemented without the consent of the Bluesky employees. If they choose to hire both of us perhaps we can figure out how to implement this for them. I will not commit to putting on a furry suit. But I've been known to try everything once. And bonus I…

There are over 150 different furry conventions and 80 that have happened in the last couple of years. Which one are you talking about?

I'm not prepared to admit that information to a stranger, but I'm sure from my profile you can figure it out.

Re: Bluesky adds direct messages

#206

Post by krapp »

Kye wrote: post #203
krapp wrote: post #197

Earlier quoted context omitted.

Aggressive growth and addictive velocity are cancerous, let it reach a healthy equilibrium. Slow can be good, too. I'm following ~500 people at the moment, and getting relays from a few instances. I see a constant flow of new stuff but I can also easily leave and do other things, because Mastodon isn't designed to maximize engagement and addiction. I don't feel a constant need to post or comment or chase endorphins.…

I was on there when it was just Mastodon.social. It was more vibrant then, and it's been more vibrant in recent memory, before it rocketed to 2m users and started falling. Something is different, and it's not good. I think people who've been there are getting fed up with problems no one seems to care about years on (even people like me who kept giving it chances and pushing for change), and new people are going somew…

I'm not sticking my head in the sand, I'm just not having the experience you seem to have had, and neither is anyone I actually hang around with.

If you prefer Bluesky, that's fine. Competition is good.

Re: Bluesky adds direct messages

#207

Post by Kye »

evbogue wrote: post #205
Kye wrote: post #204

Earlier quoted context omitted.

There are over 150 different furry conventions and 80 that have happened in the last couple of years. Which one are you talking about?

I'm not prepared to admit that information to a stranger, but I'm sure from my profile you can figure it out.

I won't go out of my way to find out if you don't want it known. If you decide you want to know what's going on in the hotel, there's probably lots of video on YouTube from whichever convention it is.

Re: Bluesky adds direct messages

#208

Post by jprochaz »

ziml77 wrote: post #33
DataDive wrote: post #11

Zawinski's Law: > Every program attempts to expand until it can read mail. Those programs which cannot so expand are replaced by ones which can. I think nowadays we can substitute email with chat/DM.

It's important though because it allows you to communicate things that don't really belong in the open while remaining under your identity on that platform and avoiding the need to link that identity with your identity on a different service.

It would be useful if I could send people Signal link where they could login with their Facebook/Google/Instagram account (OIDC) to chat with me over Signal. Signal no longer requires phone numbers as identifiers, so this might be feasible.
Post reply on HN