xoron

joined 11 months ago
[–] [email protected] 1 points 6 days ago* (last edited 6 days ago)

Thanks!

https://www.reddit.com/r/cryptography/comments/1cint8h/what_are_your_thoughts_on_subtlecrypto_vs_wasm/

Tldr; I had that question before myself. It doesn't seem to introduce any improvement over WebCrypto API which itself should have gone through peer-review and auditing. ("Choose your browser wisely" could be considered the advice here.)

I'd like to still look into wasm for several other details of the project, but it seems the built-in browser cryptography functions are performant and generally pretty good if used correctly.

 

https://positive-intentions.com/blog/decentralised-architecture

Creating webapps is easy enough, but in my app, im kinda going against the "best-practices".

For example, im using browser-based cryptography exclusively. while it can be easy advice to suggest to consider using a server to generate keys, i want to contrast it against a webapp that would be sandboxed within the browser.

I'd appriciate if you would be interested to share your thoughts on the approach. I'm aiming for this project to be the foundation towards the most frickin' secure messaging app in the universe. It might be too ambitious, but I'd like to set the bar high.

 

https://positive-intentions.com/blog/decentralised-architecture

Creating webapps is easy enough, but in my app, im kinda going against the "best-practices".

For example, im using browser-based cryptography exclusively. while it can be easy advice to suggest to consider using a server to generate keys, i want to contrast it against a webapp that would be sandboxed within the browser.

I'd appriciate if you would be interested to share your thoughts on the approach. I'm aiming for this project to be the foundation towards the most frickin' secure messaging app in the universe. It might be too ambitious, but I'd like to set the bar high.

 

im using peerJS and its configurable as described here: https://peerjs.com/docs/#peer-options-config

in my app, the peerjs-server used as the connection-broker is configurable (on the landing page). id also like to introduce configurable ice-servers.

i often notice difficulties connecting when not on the same wifi. i think introducing things like turn/stun servers would help.

which of the options makes sense:

  1. a text input to specify your own turn server url

  2. same as option 1 along with some default set of turn servers as a default redundency (because most users wont care about this)

  3. same as option 2 with all the servers togglable.

  4. ???

i understand there are a few free public ones available out there, but i dont know the privacy and security implications of using those. id like to think there is a set of trustable turn/stun servers i can use for option 2. this way, the app connection could be more stable and resiliant. but i'd need to investigate more about any set of servers i introduce into my project.

[–] [email protected] 1 points 3 weeks ago

By feature, do you mean "foss"? (Wondering if you're replying to the correct thread)

If so, then it's unfortunate I'm investigating this direction, it seems nessesary.

Otherwise feel free to let me know of a critical feature missing (if "foss" is not the feature you meant.)

[–] [email protected] 1 points 4 weeks ago

No. When I type with "correct capitals", it's because I'm doing it from my phone. I otherwise generally might sound like chatgpt.

[–] [email protected] 1 points 1 month ago (2 children)

thanks!

im a developer im not much of an expert on licences of any kind. i created code and decided to open source it here: https://github.com/positive-intentions/chat . when i say the close source app is "based on" the open source code, i hope it doesnt undermine that it itself is a fully functional p2p messaging system (im of the opinion that all projects will always need refinement). anyone with issues about close-source code should take a look at the open-srouce version. its basically more functional but it seems too complex to maintain as open source andd thus this new project.

id like to offer the statics as a zipped folder. this is in the roadmap, but the code will be minified and obfuscated. about as opaque as possible for "source available". i dont know much on the matter, but id like to learn more about if this can be made into libre software. its hardly modifyable or studyable.

while i dont want you to "trust me bro", i am actively developing it and improving the functionality. so that static bundle will have to be build by the CI/CD and it will update along with the app. it goes without saying, the project is not mature enough to have things like security audits.

thanks! for your feedback there! ahh the connection bugs. unfortunately this is is one of the trickier bugs. im working towards fixing that asap. i have an idea of a fix, but im trying to avoid rewriting a core piece. have you tried closing the app on both devices and trying again (sorry, i know its a bit cliche).

if its not a secret, can you maybe tell me more about your LAN setup for me to set something up and try? i certainly aim for it to "just work".

[–] [email protected] -1 points 1 month ago

I'm no expert on the matter of licences either. I made the open source code some bsd licence because some of the dependencies called for it.

I created some code and made some open source. I don't have to apply that to all my projects.

[–] [email protected] 1 points 1 month ago

I mean to draw attention to the open source code in such a case.

[–] [email protected] 2 points 1 month ago (2 children)

If interested in how it works and to see code examples, this project is based on my beefier open-source code seen here: https://github.com/positive-intentions/chat

[–] [email protected] 1 points 1 month ago

Thanks. I hope to get to a point where I can make the experience as seamless as workhole.

To compare solutions, a key details around providing my app as a webapp, is to avoid the requirement of a client. this opens up the set of compatible platforms.

(Note: it's a common request for me, so by popular demand, i will aim to provide binaries for the major platforms.)

[–] [email protected] 1 points 1 month ago

For me, it's an achievement for it to be comparable to those tools. I aim to get to a similar feature set and make the user experience intuitive.

[–] [email protected] 6 points 1 month ago (6 children)

Just to be clear, my own open source code. Yes.

[–] [email protected] -2 points 1 month ago (9 children)

Strong title needed for strong claims.

Its based on open source code. https://github.com/positive-intentions/chat . I'd be happy for feedback on that too.

Webrtc would be able to outperform all other methods for transfer speed (useful for when sending larger files)

I'm sure there is a market for eople who want to transfer files. With a zero-installation, zero-registration, it should make it easy for people to get started.

146
submitted 1 month ago* (last edited 1 month ago) by [email protected] to c/[email protected]
 

glitr.io

im working on a p2p file transfer app. at the moment its a close-source webapp, but i hope to work towards some selfhosted options as seen on my other projects.

the storage is local-only from your browser/device. so like "the cloud", but the cloud storage capacity is made up of your devices.

ive recently updated the landing page and i hope ive got it as simple as possible to transfer a file from one device to another.

im looking for feedback on the experience.

(Note 1: its still a work in progress. if there is an issue, you can usually refresh the browser and try again)

(Note 2: it seems important to mention: this app is not libre software. This needs more consideration to see if I can align to this. For information and open-source examples of the code in action, take a look at the docs and github for decentralized chat)

 

I made something to try out for "funtional webcomponents" with vanillaJs. I'm working towards a UI framework for my personal projects. It's far from finished but i thought it might be an interesting concept to share.

 

I made something to try out for "funtional webcomponents" with vanillaJs. I'm working towards a UI framework for my personal projects. It's far from finished but i thought it might be an interesting concept to share.

 

i created a blog and website to help get traction on my project.

its called positive-intentions.com i originally got it because it was a cheap domain and was/is a placeholder for my poject before i make time to do something like branding.

when i previously searched "positive intentions", my site was listed on something like page 4 of google. most of the results were things related to mental health, meditation, etc. i took a look the other day and i notice it now on the first-ish page of search-engines. i guess this is a result of my talking about my app mainly on reddit but a few other platforms.

id like to know how i can take advantage of this. i previously had google ads on the website, but i disabled it because i think it deterred users when they saw tracking scripts in the website. i now have a reasonable approach where i can provide the app with/without external scripts. so id like to reconsider re-enabling ads.

however i dont think google ads is good to use. it took me ages (several months) to get £2.30 and google cashes out at £60... at the current rate, i guess i wont see anything for several years.

ive read around, and i hope im interpreting something correct when it seems blogs really start have a kickback when they sell something. with my open source project, ive branched out to create something i can sell in the play-store. it still isnt on the play store yet, but that is one approach im trying.

another aproach im considering is adding something like mediavine because it seems bettter regarded compared to google ads.

i can make more time to update content throughout for clarity. i previsouly stopped doing that because it didnt seem worth the effort when adsense was generating about 1p per day.

note: i dont know much about blogging, seo, analytics, etc; so any and all advice is appriciated.

 

App: https://chat.positive-intentions.com/

A p2p encrypted file transfer and messaging app. Here are some features below:

  • Open Source
  • Cross platform
    • PWA
    • iOS, Android, Desktop (self compile)
    • App store, Play store (coming soon)
    • Desktop
      • Windows, Macos, Linux (self compile)
      • run index.html on any modern browser
    • Decentralized
  • Secure
    • No cookies
    • P2P encrypted
    • No registration
    • No installing
  • Messaging
    • Group Messaging (coming soon)
    • Text Messaging
    • Multimedia Messaging
    • Screensharing (on desktop browsers)
    • Offline Messaging (in research phase)
    • File Transfer
    • Video Calls
  • Data Ownership
    • Self Hosting
    • GitHub pages Hosting
    • Local-Only storage

Check it out!

 

App: https://chat.positive-intentions.com/

A p2p encrypted file transfer and messaging app. Here are some features below:

  • Open Source
  • Cross platform
    • PWA
    • iOS, Android, Desktop (self compile)
    • App store, Play store (coming soon)
    • Desktop
      • Windows, Macos, Linux (self compile)
      • run index.html on any modern browser
    • Decentralized
  • Secure
    • No cookies
    • P2P encrypted
    • No registration
    • No installing
  • Messaging
    • Group Messaging (coming soon)
    • Text Messaging
    • Multimedia Messaging
    • Screensharing (on desktop browsers)
    • Offline Messaging (in research phase)
    • File Transfer
    • Video Calls
  • Data Ownership
    • Self Hosting
    • GitHub pages Hosting
    • Local-Only storage

Check it out!

9
submitted 4 months ago* (last edited 4 months ago) by [email protected] to c/[email protected]
 

App: https://chat.positive-intentions.com/

A p2p encrypted file transfer and messaging app. Here are some features below:

  • Open Source
  • Cross platform
    • PWA
    • iOS, Android, Desktop (self compile)
    • App store, Play store (coming soon)
    • Desktop
      • Windows, Macos, Linux (self compile)
      • run index.html on any modern browser
    • Decentralized
  • Secure
    • No cookies
    • P2P encrypted
    • No registration
    • No installing
  • Messaging
    • Group Messaging (coming soon)
    • Text Messaging
    • Multimedia Messaging
    • Screensharing (on desktop browsers)
    • Offline Messaging (in research phase)
    • File Transfer
    • Video Calls
  • Data Ownership
    • Self Hosting
    • GitHub pages Hosting
    • Local-Only storage

Check it out!

 

id like to ask if there is some guideline/advice for asking for open source contributions.

initially i thought i could just have open source code, documentation and communicate about it, but that doesnt seem to work for gaining contributors.

maybe there is something else im overlooking?

contributors would be using their own valuable time and effort so it could just be that my projects are not interesting enough. it might be worth concluding that i should proceed on this solo.

32
Functional Webcomponents (positive-intentions.com)
submitted 5 months ago* (last edited 5 months ago) by [email protected] to c/[email protected]
 

I'm creating a JavaScript UI framework for my own projects. It's a learning journey and I'd like to share my progress.

I've written some blog posts about my progress so far:

  1. Functional Web Components - https://positive-intentions.com/blog/dim-functional-webcomponents
  2. Functional Todo App - https://positive-intentions.com/blog/dim-todo-list
  3. Async State Management - https://positive-intentions.com/blog/async-state-management
  4. Bottom-up Browser Storage - https://positive-intentions.com/blog/bottom-up-storage

Note: The UI framework is far from finished. I want to share progress to see if there are any outstanding issues I'm overlooking.

view more: next ›