Readit News logoReadit News
effisfor commented on Nostr (“Notes and Other Stuff Transmitted by Relays”) – An Introduction   wiki.wellorder.net/post/n... · Posted by u/Logans_Run
themagician · 2 years ago
I have played with this a bit lately and my conclusion thus far is: The idea of trying to bind everything to a single private key is such a bad idea for the average person. In order to truly secure a private key you have to go to pretty extraordinary lengths. It is not easy. It is not, "common sense."

Like most of crypto, the basic immutable nature of things is simply bad for humans. Here, your private key is eventually going to get stolen because you have to type in your private key for every login. It creates a phishing/key-logging jackpot. And once the attacker gets you private key there is no recourse. No password reset. No way to regain access. Your accounts are forever compromised. This is the problem with "decentralization" in general. All of the benefits it brings are completely washed away by the mundane daily activities of being human.

effisfor · 2 years ago
I've tinkered with nostr and there's plenty to agree with here, but it's not specific to nostr. Nostr is in its very early days where people who tinker now are also pretty good at protecting that private key (dorks like us). For mass adoption we're probably going to see WebAuthn develop and solve the problems you're mentioning for most non-technical people. The early dorks will flinch at Apple/Google syncing people's e2ee keys, but techies will always be able to just dial in their private key to the client of their choosing. So it will be a bit messy, but hopefully the best of both worlds. And a giant improvement from current paradigm.

I don't use it, but Minds is an example of an app that is using delegated keys to sign people's messages using nostr protocol, allowing a user's data a route out of Minds' infrastructure in the future. Again, seems a healthy improvement.

effisfor commented on Ask HN: Why is WebAuthn so slow to take off?    · Posted by u/minipark
effisfor · 2 years ago
One possibility for WebAuthn over email/password is the easy retrieval of local, strong and domain-unique encryption key material via the prf extension. Support for this is currently limited to Chrome Canary + hardware key, but MasterKale thinks it will be coming to other browsers, and biometric:

https://blog.millerti.me/2023/01/22/encrypting-data-in-the-b...

effisfor commented on JSX Mail: Ending All Your Problems When Creating Email Templates   jsx-mail.org... · Posted by u/Theryston
halostatue · 3 years ago
Just use MJML (https://github.com/mjmlio/mjml) or mrml (https://github.com/jdrouet/mrml). It solves the real problems with building emails without introducing useless abstractions like JSX.
effisfor · 3 years ago
I'm currently integrating MJML into a React/JSX context. From my vantage point, MJML is the abstraction.

I once worked with a guy who kept looking over my shoulder and saying 'just use binary'. Nice guy, but they had to let him go.

effisfor commented on Show HN: PubKey – Communicate Privately in Anonymous Public Spaces   pubkey.pm... · Posted by u/popcalc
ryukafalz · 3 years ago
IMO the recent announcement of synced WebAuthn platform authenticators that’ll be supported by major platforms is probably the closest thing, at this point.
effisfor · 3 years ago
Thanks for this, I looked up recent Google I/O announcement, it had passed me by. iOS/MacOS has it in beta too, so you're right, we're getting close to half the problem improved.
effisfor commented on Show HN: PubKey – Communicate Privately in Anonymous Public Spaces   pubkey.pm... · Posted by u/popcalc
effisfor · 3 years ago
Thanks for this. Related to it, does anybody have any resources showing the state of the art for non-tech audience to remember client generated private keys?

What are options? Password manager (most people I know don't use one), Browser keychain (no guarantee of sync between user devices), WebAuthn (same problem), IndexedDB or localstorage, (both can be purged, again, no sync).

Unless I'm missing something, I feel this is problem worthwhile solving as a community, it would unlock a lot of utility/privacy for the average web user.

Would love to hear any more qualified takes on this.

effisfor commented on Web 3 is Flawed   ravivyas.com/2022/06/19/w... · Posted by u/ravivyas
finfinfin · 3 years ago
Both 1 and 2 are nonsense. I am very curious about blockchains (Etherium primarily), but so far have not seen any web3 projects that are more “beautiful” than Electric Counterpoint by Reich or more “dastardly” than the holocaust.

If you mean that both of these are achievable on an individual level, then I fail to see how coding an idea has any more potential to achieve these extremes than using a paintbrush.

Look at the kids: they get far more excited by video games than DeFi.

effisfor · 3 years ago
You aren't the Third, or the Steve, Reich.
effisfor commented on Web 3 is Flawed   ravivyas.com/2022/06/19/w... · Posted by u/ravivyas
effisfor · 3 years ago
Some useful rules around Web3:

1. The most beautiful and innovative things being done in the Web3 space are much more beautiful and innovative than anything you will do in your life.

2. The most dastardly things being done in the Web3 space are much more dastardly than anything you will do in your life.

Now for the two broad camps of people I see here:

a. People who think 2. is not relevant to pursuing 1.

b. People who think 2. can never justify pursuing 1. – or even finding out about it.

Look at the kids: the day is better spent curious.

effisfor commented on Photos of chickens, taken by chickens   chicken.photos/... · Posted by u/kapsteur
jjice · 3 years ago
Why is that?
effisfor · 3 years ago
Depth of field, quite literally here! Here are some rules of thumb: If you increase depth of scene, you can use depth of field in two ways. In portraits, you can create greater subject separation because the closer focal point of chicken will be in focus, but the horizon line will be very blurred. Taken at human eye-level, most of the background of a chicken will be grass that's close-by, and therefore a similar blurriness (or 'bokeh'). That makes it harder to discern subject.

Secondly, if you open up the depth of field with a very deep scene, you create more possibilities for composition, framing or storytelling. Again, all you have at human eye level is chicken/grass. At chicken eye level, with a very deep focal range, you might also be able to tell the story of the chicken in 'the great outdoors', you may see mountains and forests on the horizon etc.

Hope that helps.

effisfor commented on Saying Good Bye to Hey.com   vishnugopal.com/2021/05/2... · Posted by u/tachyons
effisfor · 4 years ago
For mental health, I've found it a great relief from Gmail. If you feel your mental health is affected not only by noise, but also privacy violations, supporting monopolies etc.

From a designers/UX perspective, there are some thoughtful touches. "The feed" is not just a bucket/folder, but the UI changes for all those newsletters, and I've found that calming. I actually read the curated list of newsletters I've signed up to now, once a week or so in a magazine-like stream without the dozen buttons required for a letter-like email.

The 'reply later' feature allows me to put aside a few emails over a couple of days, then click the 'focus and reply' button and those emails come up in a clean list with a stripped-back interface which moves on to the next email in the stack.

Despite the on-trend aesthetics, this is a thoughtful piece of design, which I moved to for the above reasons and is delivering on.

The support has also been excellent. I submitted a feature request, they got back personally quickly, and then a couple of months followed a personable (possibly automated) email saying the feature I'd requested was now live. (Notion is also in the habit of attending to its users like this).

All email clients are garbage-out if we keep putting garbage in, but as a person looking for a more calming space to manage the deluge, I would say the above review is limited in scope in understanding what Hey is designed for. Why build another email client if it doesn't make some opinionated moves contrary to the state of the art?

effisfor commented on Beaker – An experimental P2P browser   beakerbrowser.com/... · Posted by u/pfraze
effisfor · 9 years ago
This looks lovely. I'm new to P2P applications beyond file sharing and would like to raise awareness about the new resilient web being built. Not just in terms of protocols and applications, but also energy resilience and air-gapped encrypted inputs. Would love to have a chat about Beaker and its place in a wider movement.

I guess this is science communication stuff, rather than talking through the technicals, my background is design.

pfraze, is there a recommended resource for communicating the players and ideas on the resilient web, placing Beaker in its respective place and laying out the benefits in a friendly way for laypeople?

u/effisfor

KarmaCake day6December 20, 2016View Original