wiktor-k

For servers that enabled web sockets that's possible and XMPP JavaScript libraries support that.

I guess it depends on your definition of privacy but if you're thinking about end-to-end encryption then there's nothing like that in ActivityPub. Admins of the receiver and the sender can see all messages including direct messages. They are not visible to the broader public though.

Wow, that's great! Thanks for the link.

I wonder if Frigate runs on Arm SBCs such as https://www.hardkernel.com/shop/odroid-m1s-with-8gbyte-ram/ ?

I had the same problem and ended up buying Certum Open Source set for 69 EUR: https://shop.certum.eu/open-source-code-signing.html

The set does include hardware token for storing the private key as well as a certificate valid for one year. Renewal is 25 EUR.

It does require verifying identity with government issued ID though. I haven't seen anything cheaper on the market (happy to hear suggestions).

Conversations.im shows a login failure in this case. See: https://gultsch.social/@daniel/111285494250772742

I'd also recommend PyO3 and Maturin. The amount of help these crates give is mind boggling (automatic type marshaling and even github CI jobs for creating cross platform precompiled wheels).

I've created a library using this crate (https://github.com/wiktor-k/pysequoia/) and most of the time I could just focus on the problem domain instead of technical details of the bindings.

There are just a couple of smaller issues (eg. Python to Rust async is not built in) but overall it's really nice.

Yep, likewise. I'm using emacsclient as $EDITOR too and it works well.

I guess for sending parches using git tooling instead of an email client works best. At least according to https://git-send-email.io/

Also OpenTofu (Terraform).

Wow, that's really disturbing.

> Because of this I mostly share encrypted files over chat, using OpenPGP, but the user experience is terrible for most :(

Agreed. Even with builtin OpenPGP support in Thunderbird the UX is still bad for regular users (well, for technical ones too).

For lazy people like me I think the "kerfuffle" is https://world.hey.com/dhh/turbo-8-is-dropping-typescript-701...

Ah, I see. Thanks for the explanation!

Very nice write-up!

I wonder if it's possible to combine the custom ISO with cloud init [0] to automate the initial node installation?

[0]: https://github.com/tech-otaku/hetzner-cloud-init

Twitter is benefiting from network effects by now. I'm not even sure when have I encountered a tweet in search results last time.

PCRs being problematic was actually one of the issues policy mechanism in TPM 2.0 was meant to resolve (see "Non-Brittle PCRs (New in 2.0)" in [0]).

Tldr version is that you'd authorize OS manufacturer's kernel signing key to use the TPM key so that each time your OS vendor signs the kernel it's OK for the TPM.

Sadly I don't think I've seen this deployed in the wild.

[0]: https://ebrary.net/24725/computer_science/quick_loading

> but those have a downside of the TPM needing to be updated with every new kernel.

This depends on the configuration. If you don't bind the key to PCRs at key creation time kernel updates don't affect the workflow and you still will take advantage of other TPM features such as locking the key after several unsuccessful attempts.

Take a look at the systemd configuration: https://www.freedesktop.org/software/systemd/man/systemd-cry...

I'm using it on my laptop and it works well.

This is correct, for details this is specified as point 15.1.2.1 in ES spec:

> (...) any invocation of eval that is not a direct call uses the global environment as its variable environment rather than the caller’s variable environment.

Source: https://ecma-international.org/ecma-262/5.1/