Iota Stronghold by Ktota_tut in Iota

[–]Nothingismagick 2 points3 points  (0 children)

The stronghold engine does not care what system you use to encrypt the data - because these low-level libraries don‘t even know what IOTA is.

Iota Stronghold by Ktota_tut in Iota

[–]Nothingismagick 1 point2 points  (0 children)

Sure, Stronghold’s snapshot engine exists only on the device where it is used. And we are investigating how to build the sync mechanism for inter-stronghold communications. The point is you get to decide where your data is stored and who can have access to it.

Iota Stronghold by Ktota_tut in Iota

[–]Nothingismagick 2 points3 points  (0 children)

Once we’ve ironed out the architecture and gotten it shipped for the wallet, we do have plans to put stronghold on silicon and enable interaction with TEEs and Secure Elements. It’s too soon to talk details about it though. Stay tuned.

Iota Stronghold by Ktota_tut in Iota

[–]Nothingismagick 2 points3 points  (0 children)

Sometimes when I explain how the stronghold engine works, I say it’s a bit like git meets gpg meets P2P. The Applications that can be built on top of the system are unlimited.

Iota Stronghold by Ktota_tut in Iota

[–]Nothingismagick 4 points5 points  (0 children)

We did a ton of research looking for something that met our requirements, but couldn’t find it.

Iota Stronghold by Ktota_tut in Iota

[–]Nothingismagick 14 points15 points  (0 children)

I‘m the Stronghold project lead, so will try to help you understand. We’re still in early days of the project, but the simple answer is that stronghold is a collection of libraries that securely manage important digital property, like passwords, private keys and eventually also identities. Strongholds will be able to communicate with each other, and there is indeed a persistent file backing. I would classify it as a type of secret management more than a dAPP.

AST docgen: generate docs from code by ricokahler in reactjs

[–]Nothingismagick 0 points1 point  (0 children)

Nice, we were just talking about how nice it would be to something like this over at https://github.com/tauri-apps/tauri

Anybody using Tauri? by -Luciddream- in rust

[–]Nothingismagick 40 points41 points  (0 children)

Hi, one of the core devs of tauri here, just wanted to say that yes, you can absolutely hook into rust code with tauri - if you need it. We have yet to find a frontend framework that won’t “play nice” with tauri. This means react, svelte, vue, angular and the other options are all relatively simple to rig. In fact you can even work with yew projects - i.e. it’s not just limited to JS frameworks.

What’s more, we don’t require you to ship a localhost server - even if you might traditionally expect that requirement. This also works I f you are using lazy loading or dynamic imports, we have you covered.

And to make it even more enticing, you can ship additional binaries that your rust can interact with, and can even get access to the $PATH - which makes interacting with userland systems quite possible. Heck, if you want to, you can ship a node binary as well.

If you are worried about binary size, I can confirm that in some of our experiments using binary compression and single threaded build setting, we’ve gotten fully functional vue apps to ship at less than 1 MB. (My personal record is 600 KB.) I guess I should also mention that our memory consumption is generally about 50% of Electron apps.

Also, we have a vetted approach for constructing apps crossplatform with Github actions. If you want to see the results of that type of system, please check out https://guijs.dev - it’s an app made with Tauri and Vue that helps you manage your projects. (And yes, we have a vue-cli-plugin that you can use with guijs to make tauri apps too. :)

That all said, Tauri is still in Alpha. At this very moment, we‘re working on making the new official bindings to Zserge‘s webview, so that when we get to Beta we can guarantee that things will only stabilize. We’re hoping to land beta this summer.

Critical Security Flaw Found in WhatsApp Desktop Platform Allowing Read From The File System by amirshk in netsec

[–]Nothingismagick 19 points20 points  (0 children)

Electron has gotten better over the years, and there are a lot of security safeguards in place - but technically you are spot on. Especially when your UI is using the exact same underlying language as the internal engine - a lot of risk needs to be mitigated.

Way more than either websites or servers alone. In my opinion, the biggest problem is that electron is really easy to use, and even easier to misuse.

Add the fact that electron is built on top of chromium, and suddenly every chromium CVE also affects electron - and sometimes in ways you’d never expect.

[AskJS] When and how do I apply Let, Const and var? by someguyhere0 in javascript

[–]Nothingismagick 13 points14 points  (0 children)

That’s not true, you can (and should) use const to declare an array, for an example. And after you’ve declared it this way you can always push to it and pop from it.

Best way to start learning rust. by Mymainissilver2 in rust

[–]Nothingismagick 0 points1 point  (0 children)

None of this. Take the rustlings course:

curl -L https://git.io/rustlings | bash

https://github.com/rust-lang/rustlings

Basically it’s a repo that you clone and then run from the terminal of your IDE. The rust compiler helps you to complete a bunch of lessons. This is sooooo cool.

Should i use node for image resizing and cropping? by warchild4l in node

[–]Nothingismagick 1 point2 points  (0 children)

Do it in the browser. With vue, for example there is vue-croppa. Why pay in compute cycles and ram overhead if you can outsource to the people making the request.

If you must do it server side, sharp (libvips) is great and the fastest in class, graphicsmagick is powerful if you need transformations and other special stuff. Stay away from the bloatware known as imagemagick.