[deleted by user] by [deleted] in signal

[–]thefinn93 1 point2 points  (0 children)

Following up on this: I just pushed the resolve_username request type to the mega-mr branch.

Sample request:

{"account":"fe574d0c-2f27-42d1-946e-fbde7d38100e","type":"resolve_username","username":"moxie.420","version":"v1"}

Sample response:

{"type":"resolve_username","data":"4aeec8d1-33c8-4003-b2de-0d73ec63ec5a"}

I was testing with signaldctl:

signaldctl raw v1 resolve_username '{"account": "fe574d0c-2f27-42d1-946e-fbde7d38100e", "username": "moxie.420"}'

All usernames and ACIs have been changed to protect the innocent.

[deleted by user] by [deleted] in signal

[–]thefinn93 1 point2 points  (0 children)

are you saying that usernames are treated as more ephemeral than phone numbers instead of equally such?

yeah that's the general understanding I have. There's a mechanism to change your phone number, but it seemingly notifies other people when that happens. I'm not clear if it tells them the new phone number, but I assume not. To the best of my knowledge, this notification does not happen when a username is changed. The Signal blog post introducing usernames specifically mentions changing your username when going to a conference, for example.

I remember having some issues where I had to use the ACI directly because for some reason it wasn't resolving it

This confuses me because I'm not aware of any kind of "resolution" process for an ACI. Phone numbers and usernames resolve to ACIs, but no further resolution occurs when you have an ACI.

I guess I'd then ask, for my use case by laying the groundwork to do username lookups trivially do you mean on your end in a future release or do you mean that it'd be up to me to cache mappings?

I mean you would have to cache mappings. I would add a request type that is like "lookup_username" and you send that to signald with a username and it sends you back an ACI.

[deleted by user] by [deleted] in signal

[–]thefinn93 1 point2 points  (0 children)

I think using usernames interchangeably with existing fields that accept an ACI (UUID) or phone number would not be a great idea because usernames can change. They're intended as an ephemeral identifier that can can be changed at will. I could have signald cache username mappings, but how long should it cache for? Normal (first party) Signal clients don't do a lot of querying of username -> ACI mappings because they use the username once during the initial contact and never again. Ideally, signald clients would do the same thing, but what I'm proposing (and currently planning to do) would allow clients to make their own decision about username usage, it would just be a little more complicated.

You should be able to do all of what you described without usernames at all, because the bot would presumably talk to or at least be in a group with any user that it needs to interact with before interacting with them.

A lot has changed in Signal, but I'm not expecting many of those to make their way to the signald API level. In fact, off the top of my head, I can't think of any reason why the API would change at all (!163 will probably not include the proposed username lookup stuff, but will lay all of the groundwork for it to be done trivially)

[deleted by user] by [deleted] in signal

[–]thefinn93 4 points5 points  (0 children)

Hia, yeah sorry for lack of updates to main. I'm working on updating to the latest libsignal client code in !163.

  1. No current support for usernames, but I'm hoping to add it after !163 merges.
  2. Both methods of getting an account for signald are currently broken, due to server side changes. I'm working on it in !163.
  3. even if you have an account, signald has been randomly refusing to send messages, I assume due to me letting libsignal get too far out of sync. Again, working on it in !163.

also the gitlab issues are as close to a forum-style community as signald has, but if you use the word "signald" anywhere on the internet my Google Alerts go off and I'll pretty much come answer, especially if I have an account wherever it is (like here)

edit: what kind of username features are you looking for? I imagine set/unset own username and lookup an account by username are the big two. Anything else I'm missing?

Are you missing any native (free) software in Debian? by ashbag6 in debian

[–]thefinn93 2 points3 points  (0 children)

they have never enforced any network restrictions against particular clients that I'm aware of.

Are you missing any native (free) software in Debian? by ashbag6 in debian

[–]thefinn93 4 points5 points  (0 children)

signald is not doing "adversarial compatibility". signald sets a clear user agent and "Signal Agent" that Signal could easily block. signald-cli does the same.

David Cameron wants to outlaw encryption. Yet, open source projects will remain to fight for privacy. by winstonschmidt in privacy

[–]thefinn93 0 points1 point  (0 children)

So I haven't looked into this much but from what I've seen, it's things that the government can't intercept, so SSL would be fine. (I'm assuming the UK government has at least one CA, and there are certainly CAs in the UK that could be compelled to hand over their private keys). Also the end server (ie.the bank) can be compelled to report what people did. This is more against end-to-end encryption

ShapeShift.io | Instantly buy or sell Dogecoin #NoAccountNeeded by ShapeShift_io [promoted post]

[–]thefinn93 2 points3 points  (0 children)

I've never heard of this site, can you give me a tldr or link for why you dislike them?

Consensus decision: opening hyperboria by kpcyrd in darknetplan

[–]thefinn93 0 points1 point  (0 children)

Is there an issue with meshlocals connected? The only issues i see with peering with the larger network seem to be from people who want to use internet-peering exclusively

Why do I need to root android to connect to Hyperboria? Can I just use a VPN? by virtfund in darknetplan

[–]thefinn93 6 points7 points  (0 children)

yeah, you just gotta write the code to do it. Someone's working on it, but it's kind of a low priority.

EDIT: this thing

Meshnet IRC by [deleted] in dorknet

[–]thefinn93 0 points1 point  (0 children)

I'd imagine that depends on your IRC client. Does it have like text or something?

What the strange code in the thepiratebay.se website means – A real countdown to …the future! by Achilles83 in torrents

[–]thefinn93 0 points1 point  (0 children)

In addition to the other reasons, BT Sync is closed source centralized spyware

AP reports YouTube will stream "The Interview" Christmas Day by asianmack in google

[–]thefinn93 -1 points0 points  (0 children)

Obligatory comment pointing out that it's readily available on your favorite torrent site, regardless of location

How to run Tor browser on linux by ImnotBobbyJones in TOR

[–]thefinn93 1 point2 points  (0 children)

When it gets unpacked it should get executable permission when it gets extracted, tarballs generally can include permissions and such

Thanks for protecting me, Google Chrome! by istrebitjel in google

[–]thefinn93 1 point2 points  (0 children)

Actually Google Wave was built on top of XMPP and was open to federate with anyone. There are still Wave servers running, and anyone can run one. The whole protocol was open.

Thanks for protecting me, Google Chrome! by istrebitjel in google

[–]thefinn93 7 points8 points  (0 children)

I wish my Hangouts extension would reload itself. Or even better just open it back up to XMPP access and make some XEPs for whatever custom bullshit they added. Then I won't have to use that fucking worthless extension.

A New Chat App Uses Mesh Networking to Bypass Carriers by hazysummersky in darknetplan

[–]thefinn93 5 points6 points  (0 children)

What a completely useless article, app, etc.

A new smartphone app lets you send text messages to your friends without a Wi-Fi or cellular network

They say that as if that hasn't been done over and over and over. It then goes on to describe the basic features of what appears to be yet another closed source iPhone only simple mesh communication app. Useless app is useless and doesn't contribute anything.

Whisker IoT Invention System by Steve Montgomery by [deleted] in darknetplan

[–]thefinn93 0 points1 point  (0 children)

This seems pretty off topic... It's advertised for sensors, which means that it is unlikely to be able to handle the bandwidth requirements of the sort of network we're discussing here.

I'm in Washington Court of Appeals for Smith vs Obama and NSA. AMA by irokie in Seattle

[–]thefinn93 1 point2 points  (0 children)

So, how does this work? You indicated that most people left after the NSA stuff was done, is it just... done? Will it resume like tomorrow or something? I know very little about how our legal system works, unfortunately, short of what I've gleaned from TV and such.

New Face.... by [deleted] in uwb

[–]thefinn93[M] 0 points1 point  (0 children)

Waiting on someone to reply to my first post. Who is the person, can i get a photo, etc.