Yes, today in France, the price of houses is relatively high in the countryside and difficult to access for a modest family. I bought this house with my wife thirty years ago for a very low price but with a lot of work to do. It took me 20 years to finish everything with little means… it was not always easy, but I would never have returned to the city for anything in the world.. I hope my English is not too bad…
[47°09′52″S, 126°43′20″W] Taking samples
@andros@twtxt.andros.dev Here is everything written down I know to this stuff: https://github.com/upputter/testing-twtxt-dm/blob/main/README.md
Meta claims torrenting pirated books isn’t illegal without proof of seeding
Article URL: https://arstechnica.com/tech-policy/2025/02/meta-defends-its-vast-book-torrenting-were-just-a-leech-no-proof-of-seeding/
Comments URL: https://news.ycombinator.com/item?id=43125840
Points: … ⌘ Read more
@arne@uplegger.eu Amazing!!! 😋
@eapl.me@eapl.me @andros@twtxt.andros.dev Eureka! It works! https://github.com/upputter/testing-twtxt-dm
PBKDF2_KEY_SIZE = 48
was the turning point! My dirty little crypt.class.php
can en- and decrypt, accoridng to the OpenSSL standard and options used in https://twtxt.dev/exts/direct-message.html
Good article: NGINX, try_files is evil too
https://www.getpagespeed.com/server-setup/nginx-try_files-is-evil-too
I really like the concept of “twt”. It’s the perfect blend of txt and twtxt. An abbreviated form. Even though it’s the name given to posts, I personally find it very nice.
#twtxt
[ ↳ Reply to twt ]
button?
I don’t think so, at least the tests I did passed. If you’re pretty sure it’s a bug, please create an issue in the repository with the specific case and I’ll investigate it.
There are 2 buttons to make replicas, one makes a replica in the thread where the twt is located (this is the one that should be used the most, as it serves a thread), the other creates a replica to a specific twt.
I’ll let you know a bit about the status: I’m just now implementing the thread screen. There you can be sure where you are. It’s a bit confusing right now, sorry. I think the client is still in alpha. When I’ve finished what I’m doing, and the direct message system, I’ll freeze development and focus on creating more tests, looking for bugs and making small visual adjustments.
@eapl_en@eapl.me Your notes are amazing! I’m going to save them for when I do my implementation. Great job!
[47°09′10″S, 126°43′17″W] Storm recedes – back to normal work
@andros@twtxt.andros.dev is it me or twtxt-el generates a wrong twt hash when I use the [ ↳ Reply to twt ]
button?
Test Test… is this Borked too!? 🤔
[47°09′51″S, 126°43′34″W] Automatic systems disengaged due to heavy rain
👋 Hello @prologic@twtxt.net, you were web mentioned on https://txt.sour.is/twt/kg4e3pq
@prologic@twtxt.net huh.. i added sour.is and img.sour.is to my whitelist but its not showing inline for me
@prologic@twtxt.net Those aren’t actually serving anything public-facing. I’ve thought about it, but for now I’m sticking with VPSs, partly because I don’t relish the risk of weeks of downtime if something goes wrong while I’m travelling.
Okay, I won’t park there.
If you’re “late to the game” regarding the #OSAID #OpenSource #AI definition from @osi@osi and what is the criticism to it all about, this blog post from @sj@sj, while specifically directed to @mozillaofficial@mozillaofficial, has a good enough amount of linkdump to be clarifying:
Edit #issuecomment-18968
@eapl.me@eapl.me @andros@twtxt.andros.dev here’s another variant as per eapl’s suggestion (#issuecomment-18968)[https://git.mills.io/yarnsocial/twtxt.dev/issues/9#issuecomment-18968]
On my blog: Real Life in Star Trek, Face of the Enemy https://john.colagioia.net/blog/2025/02/20/face-enemy.html #scifi #startrek #closereading
Show HN: Immersive Gaussian Splat experience of Sutro Tower, San Francisco
Article URL: https://vincentwoo.com/3d/sutro_tower/
Comments URL: https://news.ycombinator.com/item?id=43120582
Points: 559
# Comments: 145 ⌘ Read more
I’m happy to note that tomorrow is already Friday. However, looking back on the week, I can’t think of anything terribly useful I’ve accomplished. Hard to distinguish it from a plain zero. Again. Hmm. Anyway, looking forward to the weekend.
@bender@twtxt.net Hmmm, does that mean it’s not that popular in the US? 🤔
I hope not, @bender@twtxt.net! I haven’t checked, but I’d reckon it to be at most a single digit MiB number. How wrong am I?
The Americans are spreading links to sites with European alternatives for popular services, yet here I am, scheduling appointments with the construction workers over WhatsApp.
@nff@www.noizhardware.com Nice! Yeah, it’s all about having fun. :-) The simplicity got me hooked. Happy hacking!
@off_grid_living@twtxt.net No right click thing, but in the terminal:
convert -strip -quality 70 -resize 300x original.jpg resized.jpg
“original.jpg” being the filename of the input file and “resized.jpg” the filename of the output. You can play around with the width, “300x” means 300 pixels wide and the height is determined automatically to still remain in the same ratio. The quality is how much to compress it. The closer to 0 the value gets, the worse the result, but also smaller in file size. More towards 100 and the quality improves together with a larger file size.
You have to install the package “imagemagick” for this to work, I believe.
@off_grid_living@twtxt.net Oh, I’m ready for my retirement, too. :-D Still have some decades to go, unfortunately.
I always wanted to go and live in the country side, it seems I can’t manage to for financial reasons
@off_grid_living@twtxt.net You could try starting it in the terminal in order to spot errors. Just open the GNOME Terminal or something like that and then type in “kolourpaint” and hit Enter.
@eapl.me@eapl.me Nope, I switched to the openssl library in PHP. But our rubberducking 🦆 seems to be working. Your find https://crypto.stackexchange.com/a/79855 for the IV generation may be the breakthrough …
@bender@twtxt.net Lol! :-D
[47°09′10″S, 126°43′54″W] Automatic systems disengaged due to blizzard
here is my progress so far: https://github.com/eapl-gemugami/twtxt-direct-message-php
The encryption part seems to work, if I decrypt it the message with OpenSSL.
I think it can help you for some key parts not well explained in OpenSSL documentation.
@andros@twtxt.andros.dev reading your spec I wrote a few notes here: https://github.com/eapl-gemugami/twtxt-direct-message-php/blob/main/direct_message_spec.md
@arne@uplegger.eu I haven’t check your repo yet, although you are using sodium, right?
! U2FsdGVkX187WpPAJXCusqEoTb3/tD62xN+TxudcTsPI+LqOJLPkl9aNE9MLg8lYRLfd9mSE33N6JeA0okLJ6Q==
@arne@uplegger.eu Here are the results of the german jury:
Known salt (B64): Tb9oj07UhwU= (8)
Known key (B64): MII0yj+MC0mHNx254Voar80bi9P7jmocs0+x+inaxBE=
Known iv (B64): l/PvkDjOKMFZe73KptrvWw== (16)
Shared Key (B64): ql8zvN03p6kroSwNrcKbxk4zSBQFkgQZEumvqVIDMAE=
** DECRYPT **
Encrypted Message: ...
Decoded Salt (B64): Tb9oj07UhwU= (8)
PBKDF2 KEY (B64): MII0yj+MC0mHNx254Voar80bi9P7jmocs0+x+inaxBE=
iv (B64): JanbU1jI30lb6yfjq/adjA== (16)
Decrypted Message:
😭
@eapl.me@eapl.me Here is what I’ve got so far: https://github.com/upputter/testing-twtxt-dm
There is a “00_well_known_message.enc” file, which I have the encryption paremters for (https://github.com/upputter/testing-twtxt-dm/blob/9fdf3be6aa8fe810a4cb275375dbb3d4a2a958ee/wellknown_test.php#L28).
According to my finding, I assume, that the saltsize
in openssl is “8” and the PBKDF2
algo is “sha256”.
Open Web Conversations ⌘ https://notiz.blog/b/DUX
I thought hCaptcha was getting off the rails. Try making an X account using a VPN service!
Those are some impressive wigs: https://imgur.com/gallery/life-imitates-video-game-5KlJBhj I wonder how it feels to wear such a thing for a day – especially in summer. 😅🥵
[47°09′29″S, 126°43′41″W] Wind speed: 91kph – batteries low
@andros@twtxt.andros.dev Could you share (perhaps in the extension document) the private key for alice?
I want to compare that I can read the encrypted message both from OpenSSL CLI and from the PHP OpenSSL library, following the spec.
! JmgrTxTqbGBtzGFh30wL0cozfVOZiFSTuZ5c+k+5t9TtGkw4foOA80V2che2f3pXPVzBEZsuXg7y+7G5fD/5Qw==
echo "Lorem ipsum" | openssl enc -aes-256-cbc -pbkdf2 -iter 100000 -out message.enc -pass file:shared_key.bin
will take the input string from echo
to openssl
. It then will
trying to implement it quickly, I get the same questions than you
# https://www.php.net/manual/en/function.openssl-pbkdf2.php
$password = $sharedKey;
$salt = openssl_random_pseudo_bytes(16); # What's the salt length ?
$keyLength = 20; # What's the key length here ?
$iterations = 100000;
$generatedKey = openssl_pbkdf2($password, $salt, $keyLength, $iterations, 'sha256');
echo bin2hex($generatedKey)."\n";
echo base64_encode($generatedKey)."\n";
$iv = openssl_random_pseudo_bytes(16); // AES-256-CBC requires 16-byte IV
$cipherText = openssl_encrypt($message, 'aes-256-cbc', $generatedKey, OPENSSL_RAW_DATA, $iv);
return base64_encode($iv . $cipherText);
I haven’t taken a look into that extension, although I think you could use the OpenSSL library: https://www.php.net/manual/en/function.openssl-encrypt.php
echo "Lorem ipsum" | openssl enc -aes-256-cbc -pbkdf2 -iter 100000 -out message.enc -pass file:shared_key.bin
will take the input string from echo
to openssl
. It then will
@arne@uplegger.eu With the OpenSSL option -p
one can get an output of salt
, key
and iv
. My stupid PHP-code can get everything right from the encrypted data (from OpenSSL) - except the iv
! Damn “evpKDF” 😔
@prologic@twtxt.net I’ve been there yesterday w/o success.
@arne@uplegger.eu Hi! I love that you’re implementing it! Maybe, when we’re both done, we could test the clients by communicating both.
I don’t think I’m going to be able to help you much, my knowledge of OpenSSL and PHP is not as high as I’d like it to be.
Maybe the OpenSSL version uses SHA-1 by default in PHP. Or that the IV is derived together with the key (not generated separately). But I’m not able to answer your questions, sorry.
I’m invoking the commands directly, without any libraries in between. Maybe that would help you?
Had some fun with my old Mandelbrot renderer: https://movq.de/v/83110057f5/
#musiquinta sobre “cachorro”, a música que tinha em mente acho que já aqui a divulguei numa outra musiquinta, e em vez disso deixo-vos aqui uma música para chorar:
Ashram - Lucky’s Song (My Dog)
https://youtu.be/oJ37mmym_LA
hello @c8e00 ! All the best to you too, despite a very disrupted world… I live in France, lost in the countryside.
@arne@uplegger.eu Well, just for my understanding. The command:
echo "Lorem ipsum" | openssl enc -aes-256-cbc -pbkdf2 -iter 100000 -out message.enc -pass file:shared_key.bin
will take the input string from echo
to openssl
. It then will
- use the content of
shared_key.bin
as password
- use
PBKDF2
with an iteration of 100000 to generate a encryption key from the given password (shared_key.bin
)
- use the
PBKDF2
generated key for anaes-256-cbc
encryption
The final result is encrypted data with the prepended salt (which was generated by runtime), e.g.: Salted__q�;��-�T���"h%��5�� ...
.
With a dummy script I now can generate a valide shared key within PHP ‘openssl_pkey_derive()’ - identical to OpenSSL.
I also can en-/decrypt salted data within my script, but not with OpenSSL. There are several parameters of PBKDF2
unknown to me.
Question:
- Is the salt, used by
aes-256-cbc
andPBKDF2
the same, prepended in the encrypted data?
- Witch algorithm/cipher is used within
PBKDF2
: sha1, sha256, …?
- What is the desired key length of
PBKDF2
(https://www.php.net/manual/en/function.openssl-pbkdf2.php)?
To be continued …
[47°09′34″S, 126°43′04″W] Wind speed: N/A – Cannot comunicate
oh cool @lyse@lyse.isobeef.org !! and thanks, got rid of that empty line. ATM I’m using twtxt very much in an experimental way, only manual editing or writing my tools. curious to see how it will evolve. #meta #twtxt
DOGE has ‘god mode’ access to government data
Article URL: https://www.theatlantic.com/technology/archive/2025/02/doge-god-mode-access/681719/
Comments URL: https://news.ycombinator.com/item?id=43112084
Points: 533
# Comments: 1021 ⌘ Read more
[47°09′14″S, 126°43′07″W] Wind speed: 62kph – batteries low
[47°09′55″S, 126°43′40″W] Weather forecast alert – storm from SE
Does anybody know a right mouse click save and reduce a screen saver image to a smaller file, say 50KB?
My usual method is slow, place in image program and re-save it smaller.
I used to have a Window’s way to reduce file images from 1MB to 50 KB with right mouse click.
These pictures are expensive, 130 KB as a png file. how come? Can they get smaller to under 50Kb?
Some chooks not up this morning ?
my faviourite tree under wire netting, an apple, got fruit fly this year. bother
might need netting over it
Especially love my new pre loved roller doors !!
Love my new shed, getting ready to retire
A view of the deck, overlooking the new gardens.
Like the writing it does.
I finally got “Drawing” as an APP to work. Happy with it so far.
(Updated) SolidRun HummingBoard i.MX8M IIOT SBC with NVMe, RS232, RS485, and LTE Support
SolidRun HummingBoard i.MX8M IIOT SBC with NVMe, RS232, RS485, and LTE Support ⌘ Read more
SpacemiT X60 RISC V Processor Enables AI and High Speed Storage in Bit Brick K1 Embedded Board
The Bit-Brick K1 is a single-board computer designed for industrial and edge computing applications. It features the SpacemiT Key Stone K1, an ultra-low-power octa-core RISC-V system-on-chip with SpacemiT Daoyi AI acceleration. Built on the RISC-V 64GCVB architecture and RVA22 standard, the processor delivers 2.0TOPS of AI computing power using customized … ⌘ Read more
Like like Kolourpaint for its simplicity why has it stopped working?
Seems I am not the only one to find the APP stops working?
I finally got Ubuntu Software to find Kolourpaint and it installed, now when I run the APP nothing happens.
Dead, zip narda.
Stupid program , what is wrong?
Shutdown OK this time
In Unbunti software, explore KolourPaint is says the “No application found”
Why can’t the APP find the software on the WWW?
Unbuntu in a bad mood. KolourPaint will not run, unstalled and reinstalled in, shut down the machine and fired it up again, installed just keeps the wheel icon wheeling????
I get nothing. The stupid Kolour Paint will not run.
The wheeling wheel keeps on wheeling, yet everything else is fine.
Why can’t you get you computer back when you shutdown Ubuntu?
@nff@www.noizhardware.com I do! :-) Btw. line 65 in your feed is broken.
We are all we have.
anyway, all the best!ð
no body to say hello?
happy to be here!
But that is not how it should work. 😒
@andros@twtxt.andros.dev I have really tried to get behind it. For an implementation for my TwtxtReader (PHP) I simply lack the knowledge of the standard-openssl parameters.
All my solution approaches require “nonce” or “initialization vector” on one or the other side. In addition, the “magic numbers” (“Salted__”) were not consistent in my tests.
[47°09′15″S, 126°43′42″W] Transponder fixed
@prologic@twtxt.net I wish getting a static IP and a (more) stable internet connection wasn’t so hard over here. Then I could do proper self-hosting as well. But as it stands, I need some rented VPS.
I could go ahead and just use the VPS for the IP, i.e. forward all traffic through Wireguard to a box here at home. Big downside is that the network connection would be even slower than it already is and my ISP breaks down all the time for a few minutes … it’s just bad overall and much easier/better to rent a VPS. 🫤
hey @lyse@lyse.isobeef.org I’ve seen your mention from uhhmmm 4months ago just now using my crawler -__-’ / curious to know, do you see my mention now? #meta #twtxt
hey @lyse@lyse.isobeef.org I’ve seen your mention from uhhmmm 4months ago just now using my crawler -__-’ / curious to know, do you see my mention now? #meta #twtxt
Thanks, @falsifian@www.falsifian.org! I’ll definitely start with the latter one then. Let’s see how far I make it. :-)
@falsifian@www.falsifian.org Phew, okay. So, it took a few months to grow that big. I feared that it could have been just a week or so. Yeah, insulation always is a good idea.
[47°09′49″S, 126°43′44″W] Reading: 1.07 Sv
Multiple Russia-aligned threat actors actively targeting Signal Messenger
Article URL: https://cloud.google.com/blog/topics/threat-intelligence/russia-targeting-signal-messenger
Comments URL: https://news.ycombinator.com/item?id=43102284
Points: 504
# Comments: 196 ⌘ Read more
[47°09′22″S, 126°43′39″W] –white noise–
[47°09′40″S, 126°43′36″W] Reading: 1.24000 PPM
[47°09′24″S, 126°43′24″W] Non-significative results – sampling finished