I get that coding cryptography is fun. I did it in university for the relevant classes where we had been given specific exercises, test vectors, in the second one even automatic testing with thousands of test cases, and speed mattered too. For education, that’s pretty amazing, but if you do your own Crypto and put it in production you’re just asking for trouble.

This really is just an AES GCM case. And don’t understate the beauty of using a well formalized and thought out crypto primitive for actual applications. Cryptography is fucking cool.

:(

What do you mean, the XOR Algorithm?? For this case, an AES-256 GCM AEAD (Authenticated Encryption, possibly with Associated Data) seems like the perfect use case. AES GCM is usually the most secure mode.

I hope you didn’t literally use XOR, so like you have some key stream the length of your data, XOR the key stream with the data to get some output. This is what some modes do internally, like AES CBC, but for an application you should just use something from a stable crypto library.

If anything, keep to Rule Number 1: Never do your own Crypto.

The sad thing about forgejo servers is that our stuff might be popular if the projects were not so isolated. I want federation so bad but I feel like I was waiting for years now

Yeah, but that is gone if you literally forget it.

Problem is you need a way to decrypt that shit with memory loss and a burned down house.

I recently started a “backup ring” with my buddies who have their own servers too. It’s just folders synced over sync thing, each has their own folder, and we put stuff there that we want to access even in case everything I own burns out. Works pretty well so far.

If you want DNS only in your LAN, you need to self host a DNS server and register this domain locally (by putting it in some config file of yours)

Audiobookshelf is insanely good. It’s almost a perfect application. Seemingly it does ebooks too, but I haven’t used that yet.

This thread alone would likely prove enough already.

The backend is so janky that you are embarrassed to release it? I’m all for free knowledge but that is concerning.

The interesting thing about EVE is that the economy is completely player driven. That means you can even sell PLEX (Im pretty sure I got my name before eve named their money that, and I definitely didn’t know EVE back then!) and therefore even buy PLEX with in-game resources you ‘worked’ for.

Because of that, I agree that EVE is a special case. If that PLEX currency did not exist to be bought with real money, that means that the in-game items are no longer able to be traded for essentially real money. Though perhaps there is some smart way to do it better and with less real world capitalism

Just use the god damn browser

TeamSpeak exists too

For rust at least, those are packaged in Debian and other distros too. I think rustup is in Debian Trixie too.

It’s 8

If the governments would get their shit together, we could have something like age assertion with the eid chips in our IDs. Imagine that. The important thing is that website.com just asks the government “is this user an adult?” And the government replies “yes”. No information besides the relevant one is provided, and it’s through a trusted authority.

Yeah, not gonna happen, just like using the keys in my Personalausweis to send encrypted mail.

Unacceptable! Go get the SIGKILL

No? Why?

• paradigm shift
• military grade encryption
• cyber kill chain