I’ve never really followed X (nor Twitter), Bluesky, Instagram, TikTok, etc. so I basically live under a rock. Sometimes I ask dumb questions to try to understand people a little better. Apologies if my questions inadvertently offend anyone. I mean no harm.

  • 0 Posts
  • 18 Comments
Joined 1 year ago
cake
Cake day: May 3rd, 2025

help-circle
  • Oh… That’s not where the air holes should be. Not the only air holes, at least. There are rules for what containers can get approved for mailing chickens.

    🤔 Now that I think about it, I vaguely remember there being some specs for crush resistance too, so maybe stacking is normal practice?

    I used to ship lots of things, but never animals, so my knowledge and memory of this is pretty fuzzy. Seems like some rules were broken to end up in that situation though… which still sucks




  • percent@infosec.pubtomemes@lemmy.worldGoogle you did it again
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    4 days ago

    I’d want to know more about it and whether it’s generated in the browser or on the server.

    FWIW, most of these web-based Nostr clients are just static JS files. They’re SPAs that connect to the relay servers (via WebSocket, IIRC). You can open up your browser’s devtools, go to the “Network” tab, and see what’s happening.

    I don’t think I’d trust one that does any server-side rendering. No particular reason (though I’m sure I could think of some) other than it just wouldn’t feel right for Nostr.

    I’m also not even sure how I’d go about doing some sort of review of the javascript algorithms or where their random numbers come from

    I’d guess they just use the native WebCrypto APIs, but I have not verified. More info on native crypto APIs available in JS here:

    (FWIW, every Node.js distro I’ve ever used leveraged OpenSSL for those, under the hood. I imagine other runtimes do too.)


  • The signup

    So, there’s not really “a signup” to use Nostr. That would be similar to saying “the signup” for ActivityPub – it’s just not specific enough for me to understand where you found this signup thing.

    But also, you don’t really need to sign up anywhere. You just need a keypair. You can generate that offline, or use a trustworthy site to generate it “offline” in your web browser with JavaScript so the private key is never sent over the wire.

    No idea what the Google login thing was. If I had to take a wild guess, maybe you found some place that also offers some key management/signing features as a way to make things more user friendly?

    If it helps, the first Nostr client I ever tried was Iris.to. I think Primal might be the most popular though.

    (This might be the extent of my Nostr knowledge. I was never a frequent user, and haven’t really thought about it in months.)


  • Oh I see. Very cool :)

    There’s actually a social media network/protocol (which is even more decentralized than the Fediverse) built on this sort of thing called Nostr. Every message is cryptographically signed, so you own your identity (private key), regardless of where/how you access the network. Pretty cool tech overall, and lots of nice people, but a very disproportionately large amount of Bitcoin content over there.