Avatar
espn ✔️
21b1b8c0e8f7647e4a668b87d42c0d044b6ca85f8e752bad1fb68479be4ac929
'If you're lonely when you're alone, you're in bad company.' - Jean-Paul Sartre -

This #asknostr won’t be for everyone.

It’s targted to the super geeks out there!

In particular any #Cybersecurity #cypherpunk #Cryptography experts.

(For context I’m a former IT Director so I’m not completely ignorant, just I excelled at leading at people and teams while being able to get my hands dirty enough to implement vision coming down from the C-Suite at 30k feet.)

#asknostr

I recall reading research on Quantum Computing almost 20 years ago. And if I was reading it then, we know it was in development prior to that.

Recently I saw a brief documentary on IBM’s Quantum 2 computer (R&D Lab).

One of the things mentioned is it’s potential (not yet realized but expected by 2035) ability to decrypt in seconds due to the super position state of Qubits.

As such, this has a real conflict with #privacy and even potential impacts for #bitcoin #btc and other #proofofwork (for example $KAS #KAS #KASPA comes to mind with its algo prepped for Optical Computing… and perhaps Monero and another #pow )

But even #nostr can be impacted.

My question:

1. Is there any future proof, Quantum Computing resistant encryption out there or in development?

2. If in the #future Qubits can hold a super position long enough to decrypt, how might we combat that?

(I guess that’s the same question as Q1…but in my mind we have to re-envision the #math …the approach to #encryption once optical computing is mainstream and especially controlled by nation states which is what it is at this point as most “world leaders” view it as a strategic national #security imperative which is why they are heavily researching it)

—-

My point being, I’m interested in this conversation and perhaps some of you experts in this field can point me to where that convo is occurring.

Quick query using LMs

Q1:

Several post-quantum cryptography schemes and algorithms are being developed and implemented to resist potential attacks from future quantum computers. Some notable examples include:

1. Open Quantum Safe (OQS) project: Aims to integrate current post-quantum schemes in one library, including algorithms like Ring Learning with Errors (LWE) key exchange (BCNS15 and NewHope) and Module Learning With Error (ML-KEM) (CRYSTALS-Kyber).

2. Frodo: A learning-with-errors (LWE) based key exchange algorithm.

NTRU Encrypt: A lattice-based encryption algorithm with a relatively small public key size (766.25 B) and private key size (842.875 B).

3. Random Linear Code based encryption (RLCE): A scheme with a larger public key size (115 kB) and smaller private key size (3 kB).

>Note

Additionally, the National Institute of Standards and Technology (NIST) has announced its first quantum-resistant algorithms, based on structured lattices and hash functions, which could resist quantum computer attacks.

That is cool, for some reason when creating the eCash token the QR code would not show, it will give an error stating the string was too long, pity didnt took a snap shot

For some reason I can't comprehended, without restarting the app, without stopping and cleaning the cache, the eCash token QR code now shows perfectly, every time 🤔... Have been coding for ages and every time something similar to this happens in my apps is so disconcerting,

BTE, We need a way to backup the tokens to an encrypted file...

Thanks for answering, you guys rock! Keep up with the awesome job!

Just bear in mind that the sats are lost if your mobile is lost, you may recover your LN Address which is cool using your 12 backed up words, but the sats are not so straight forward yet.

Always run recovery drills with any new wallet you test, I have done extensive test with Minibits, they keep working on it, last update broke the QR codes BTW... nostr:nprofile1qqstxwlea9ah3u6kjjszu6a7lrnhqkfh8eptp2z6v0e9558tlkkl2rgpzemhxue69uhk2er9dchxummnw3ezumrpdejz7qgwwaehxw309ahx7uewd3hkctcpremhxue69uhkummnw3ez6ur4vgh8wetvd3hhyer9wghxuet59u4kl3vp

Replying to Avatar espn ✔️

Yes, the app is FLOSS yet, despite the extensive scrutiny done by coders there are many that feel they many be a honey pot as you do. SimpleX Chat fixes that, problem is, most people uses messengers openly known as government tools as WhatsApp Viber, Meta Messenger ,etc...

Signal has done some major progress on becoming more private, the latest was removing the mobile number need to use the app.

***What we need to know is, How is it funded:***

(pay attention to the OTF, this, IMO is the reason some feel uneasy):

Signal Messenger operates as a non-profit organization, relying on donations and grants to fund its development and maintenance. Here are some key funding sources:

1. Initial Funding: Brian Acton, co-founder of WhatsApp, donated $50 million to the Signal Foundation in 2017.

2. Donations: Signal relies on public donations from individuals and organizations to sustain its operations. As of 2020, Signal ran entirely on donations.

3. Grants: Signal has received grants from organizations such as the Knight Foundation, the Shuttleworth Foundation, and the Open Technology Fund (OTF), a US government-sponsored initiative.

4. Subsidies: Signal's parent organization, the Signal Technology Foundation, receives subsidies from the Signal Foundation, which is funded by donations and grants.

Signal's non-profit status and open-source nature ensure that the app remains free and accessible to users worldwide, without the need for advertising or data monetization. The organization's commitment to user privacy and security is reflected in its mission to "protect free expression and enable secure global communication through open source privacy technology."

But the OTF funds projects well known in the CyberSecurity world, even Tails, so I wouldn't worry much, if privacy maxi, use SimpleX Chat, or Session App, IMO hands down best

privacy and adoption is growing, even non tech savvy individuals can be on boarded easily

**#What is known of OTF?**#

Open Technology Fund (OTF) funds a variety of projects focused on internet freedom, digital security, and privacy. Some examples of projects funded by OTF include:

Technology development and implementation projects, such as:

+ Secure operating systems (e.g., Qubes and Tails)

+ Anonymizing browsers (e.g., Tor)

+ Encrypted message services (e.g., Signal)

+ VPN and circumvention solutions for users in highly restrictive censorship environments

Research projects, including:

+ Analysis of novel online censorship and surveillance techniques

+ Exploration of solutions to address these threats

Digital security projects, such as:

+ Security audits for open-source projects (e.g., Cryptocat, Commotion Wireless, TextSecure, GlobaLeaks, MediaWiki, OpenPGP.js, Nitrokey, Ricochet, and Signal)

+ Bug bounty programs (e.g., for The Tor Project)

Convenings and community learning initiatives

Support for user costs for open-source projects and communities

Emergency support for journalists, human rights defenders, and civil society organizations facing digital threats and attacks

OTF also provides ongoing project support for activities such as security audits, usability and user safety, translations, and community learning. Additionally, the fund offers matching donations for auditing non-OTF-supported projects that are in use by individuals and organizations under threat of censorship/surveillance.

Replying to 1e53e40e...

Are the APK files of #Signal messenger provided by https://signal.org/android/apk/ deterministically reproducible builds? If not, why do people trust that they aren't compromised builds? #privacy #security #asknostr #question

Yes, the app is FLOSS yet, despite the extensive scrutiny done by coders there are many that feel they many be a honey pot as you do. SimpleX Chat fixes that, problem is, most people uses messengers openly known as government tools as WhatsApp Viber, Meta Messenger ,etc...

Signal has done some major progress on becoming more private, the latest was removing the mobile number need to use the app.

***What we need to know is, How is it funded:***

(pay attention to the OTF, this, IMO is the reason some feel uneasy):

Signal Messenger operates as a non-profit organization, relying on donations and grants to fund its development and maintenance. Here are some key funding sources:

1. Initial Funding: Brian Acton, co-founder of WhatsApp, donated $50 million to the Signal Foundation in 2017.

2. Donations: Signal relies on public donations from individuals and organizations to sustain its operations. As of 2020, Signal ran entirely on donations.

3. Grants: Signal has received grants from organizations such as the Knight Foundation, the Shuttleworth Foundation, and the Open Technology Fund (OTF), a US government-sponsored initiative.

4. Subsidies: Signal's parent organization, the Signal Technology Foundation, receives subsidies from the Signal Foundation, which is funded by donations and grants.

Signal's non-profit status and open-source nature ensure that the app remains free and accessible to users worldwide, without the need for advertising or data monetization. The organization's commitment to user privacy and security is reflected in its mission to "protect free expression and enable secure global communication through open source privacy technology."

Yep, working too, you are all set, best wishes Diyana

nice, your profile looks perfect, well done!

you did already, don't need to go back, if needed it should pop again, unless.... you added your private key to Amethyst directly instead of using amber to feed it

Yes, this service I shared is free, and paid is awesome too, you are supporting the ecosystem, those servers are not free

diyana@nostrplebs.com is what you will fill in NIP05, the second one will be like you web profile page, you did better, you added in the URL your Alby link to receive payment

Replying to Avatar espn ✔️

Go here

https://app.nip05.social/s/home

Register with your npub (the public one) and get an email with the conformation. You will have a readable "npub" address verifying you ( kind of, better than nothing ) as a human ,but the real importance is that any person can fake your profile picture and page, but they will not be able to fake your pub... Being so long ,no one will go check, but with the nip05 you got an easy unique identifier like diyana@nostrid.com for example... Adding that to the search box will find you in Nostr...

Regarding amber, in settings, add your NSEC (private key, the one you don't share with no one), add a name to the profile and when a site or app ask you to sign, if they have amber you click on it and the app will open prompting you to approve (sign) the action with your private key

Hope this helps

Ahh, edit your Nostr profile to include the NIP05

Go here

https://app.nip05.social/s/home

Register with your npub (the public one) and get an email with the conformation. You will have a readable "npub" address verifying you ( kind of, better than nothing ) as a human ,but the real importance is that any person can fake your profile picture and page, but they will not be able to fake your pub... Being so long ,no one will go check, but with the nip05 you got an easy unique identifier like diyana@nostrid.com for example... Adding that to the search box will find you in Nostr...

Regarding amber, in settings, add your NSEC (private key, the one you don't share with no one), add a name to the profile and when a site or app ask you to sign, if they have amber you click on it and the app will open prompting you to approve (sign) the action with your private key

Hope this helps

Have you tried recently? Won't let you create an account, at least that was my recent experience on both services