Avatar
Chris Liss
6ad3e2a34818b153c81f48c58f44e5199e7b4fc8dbe37810a000dce3c90b7740
posting without conscience things in which most people are not interested | www.chrisliss.com
Replying to Russ Miller

Late response... I couldn't find an old textbook on PC architecture that was written for a business MIS class (still relevant but not as network oriented as you're probably looking for, anyway). I also have a tab open to MIT OpenCourseware (because I'm looking to dig in deeper on discrete math) which may have some more or less practical info. How Stuff Works books seem fairly useful, FWIW. But for this specific topic, websockets and web security, here's how I, a 25 year web professional, understood it:

- Huh never heard of websockets (reminds me of winsock, that's something else)

- Oh I see it's a new protocol, either a replacement of http(s) or it runs over it?

- Seems to emphasize two-way traffic (server can push data) so maybe it's faster

- Chris said it's more secure, but my search response titles seem to lean the other way.

Underlaying those, here's the "intranet infrastructure" knowledge I bring to the game:

- Computers network communications are layered, from wire signals up to app protocols. I don't have all those memorized AT ALL, order or boundaries, but I can tell you about a handful of major protocol types users know from browsers or other clients, I have seen some in packet sniffers that give you a feel for how the data gets represented, I've configured firewalls to all traffic through which helps me understand TCP/UDP streams and initiating (client) versus receiving (server) traffic and how computers map services/communication to ports, I've configured some protocols on servers (mostly HTTP(S) such that I know how to set versions and cipher suites for encryption). I suppose I've seen physical reresentations of electric sugnals and made my own ethernet wires so principles of interference and cuz I'm old I've seen network cards that get installed to change voltage to data... and I've seen DIFFERNT network cards (e.g. token ring) and learned enough without using them to know that there are different ways to control and coordinate communications over the wires.

- I know from reading about HTTP/2, the newer version of HTTP which I had to update (via minor configuration change in a file, no big whoop) in some places that there are SMART PEOPLE(tm) continually thinking about these protocols all the time tweaking handshakes and prefetches and many other things to make them faster and more secure. I just use them, and can do so without knowing any of this, or I can look up RFCs or other details to find out more.

- TLS (Transport Layer Security) provides the S in HTTPS, and it is sort of a wrapper around the HTTP data that gets streamed. It has versions, it can get updated, it can use specific encryptions. I don't know any of those maths but I know there are eyes on these things and newer almost always better.

- Seems like the security of websockets vs https isn't a clear thing from a preliminary search, they both use TLS which seems like a tie... and if it results lean one way it isn't to the new one. This is one of those things that you have to nose around, hear some arguments, put the discussion in the context it was offered, etc.

So, if the root of your question was to sort out if a statement on that security topic was correct, I can tell you as someone who has worked in and near it all -- I would be doing similar things to verify. I might have an edge on verifying some statements but who knows. Let me know if you get any good book/site recomendations.

Thanks Russ — appreciate the detailed response.

I have the extension and an account, but when I try to log into Iris.to via the extension on Brave, nothing happens.

Similar with Habla too.

I’m the type of tech retard that once I understand something, I understand it well. But it takes me a long time to figure it out initially. I can’t figure out how to use Habla either.

And I want to avoid putting my private key everywhere, so I thought maybe with Alby I could just use it to log in everywhere, but I’m obviously doing something wrong.

Trying to use Alby to log into NOSTR via iris.to through my browser, and I”m too retarded to figure it out. I have the Alby extension, but when I click on “nostr extension login” nothing happens.

If you kill a bunch of crows, did you murder some crows, or did you murder a murder of crows?

Not the downfall, the shrinkage to its appropriate size and role.

Asleep: The State is looking out for me.

Half-Awake: The State is out to get me, I’m afraid.

Fully-Awake: The State fears me, I will bully it down to its appropriate size.

Wife got back from the states.

Asked her if she was JLAF.

What’s JLAF?

Jetlagged as fuck.

She is.

And I coined a new acronym.

I think a good chunk has definitely been lost, but that cuts the other way — that increases the value of the existing coins. The entropy isn’t number of coins, it’s in value. The fiat system is bleeding value via inflation. But while bitcoin has tightly scheduled (very slow) inflation until 2140, (a) inflation provides a service (securing the network); and (b) lost coins are deflationary, making the existing holdings even more valuable.

While I hope that’s wrong, we should definitely not underestimate the lengths to which they’ll go to avoid accountability.

People commit suicide individually when circumstances are dire for them, and I could imagine the people who got us here doing it collectively too.

I could also see them getting rugged if say BTC went to 1M, and suddenly they found themselves without the power they once had.

If you siphoned off much of the world’s wealth and replaced it with bits in online accounts which can never collectively purchase what they purport per today’s exchange rates, locked people in their homes, coerced them into taking poison the effects of which are becoming known and you and/or your cohorts were caught participating in or availing yourself of an underage sex trafficking ring, the truth of which you know will come out, you too might start to think WWIII, whatever form that might take, is viable option.

IOW, it’s not just that BTC dilutes you less as supply expansion is controlled and slow, but that even that small dilution serves the network itself, rather than being siphoned off. Because even a slow bleed like gold (the supply of which increases 1-2%/year) is catastrophic over the long haul if it’s not recycled.

The miners aren’t cantillionaires, but service providers to the network, so the reward doesn’t on net impoverish the ecosystem. It’s almost a perpetual motion machine, except that it requires real-world physical energy from outside itself to work. But even then it incentivizes discovery of new energy and efficiency of energy use, so again, it’s probably net positive on that front.

The other reason it’s not a PPM is that it needs some energy from somewhere, but essentially it’s a super intelligent AI scouring the universe for that.

Just realized a key difference between fiat inflation and bitcoin inflation: the former is uncompensated, but the latter secures the network via proof of work.

In other words, BTC supply inflation is paid back to the network. Fiat inflation is removed from the network.

That’s why BTC is low entropy — over time everything it loses by (slowly) expanding supply is recycled back via the miners as a more secure network.

Fiat is high entropy — over time, insiders pull all the value out of the network and destroy it.