HN user

redsolver

998 karma

Verifying my Blockstack ID is secured with the address 18LpBYDmTSWXEuSRiMmSLDNmxthAmUagjU https://explorer.blockstack.org/address/18LpBYDmTSWXEuSRiMmSLDNmxthAmUagjU

[ my public key: https://keybase.io/redsolver; my proof: https://keybase.io/redsolver/sigs/HLOUdeI8AOGkDVbWMw364xXL78PqANxX519LbOtKK2o ]

Posts15
Comments43
View on HN
Krazam OS 2 years ago

Afaik all 2-letter TLDs are ccTLDs, which means they must be a country code of some country and are managed by it. There's no country with "os" yet, so to make the TLD available one would need to found a new country first!

A Look at Bluesky 3 years ago

Well, for one you can download all data on the network (posts, likes, follows, ...) using a free public API, even in real-time. If you want to try Bluesky without an invite code, you can run your own PDS (personal data server) today and federate with the official sandbox network, there are already 100 servers doing that: https://atscan.net/pds

I am working on a very similar project (decentralized app distribution on Android) called SkyDroid (https://skydroid.app/), with the difference that it is based on Sia Skynet (a Filecoin/IPFS competitor) and uses the DNS system for global app discovery - so for example the SkyDroid app itself is available on the skydroid.app domain inside of it. I'm curious about how they will try to solve the discovery issue, because if they just have one global decentralized pool of apps, it will be very hard to ensure that no malicious apps get in. But if they keep it a central repository of apps trusted by F-Droid by default, there's not really much decentralization going on. Most developers would still publish their apps in the main repo directly.

SkyDroid can update apps without user interaction (even on non-rooted devices) using a workaround which requires a one-time ADB setup. You however still need to open SkyDroid and click a button to start the mass-update process, but this is an intentional design decision - it makes sense to check which app updates are available before blindly updating everything.

It does prove that you own the specific matrix id you are logging in with to the website. It can for example be used as an alternative everywhere where "Sign in with Google" is used, so I don't understand why it should be useless for applications.

The implementation is very simple, it just uses the Matrix SDK to create a direct chat and send a message.

With technologies like DNSSEC, the authenticity of every record down from the root-level can be verified (SkyDroid doesn't do this yet). If you want total security and don't trust the root servers, you can use a Handshake domain name which basically moves the root zone to a blockchain and prevents unauthorized modifications.

An additional concept I considered is that DNS lookups are quite cheap, so your client could just ask 10 different DoH servers for a domain and validate that they all return the same response.

I developed this little tool because I always find some great compilations available exclusively on YouTube and looked for a way to download and categorize the individual tracks. I could not find an existing tool which uses the new YT chapters feature and is focused on audio, so I built my own. Please make sure that you're using an up-to-date version of youtube-dl with chapter support if you want to try it.

It basically works like Firefox Send. You select a file, it gets encrypted locally and then uploaded to the decentralized Sia Skynet CDN. Then you get a link which can be shared and contains the decryption key.

Example file (archlinux.iso, 681 MB): https://vup.hns.siasky.net/#a-AAA9uAQczlE79wA4aeoG0asP6txYW5...

Source Code: https://github.com/redsolver/skynet-send

Disclaimer: I tried to implement the encryption properly, but I could have missed something. So please don't use this webapp for sensitive files yet.

Differences to F-Droid:

- Fully decentralized, an app is bound to a domain name (like in a web browser)

- Every app can be published on SkyDroid, not just open-source apps

- The developer can directly publish his APK with his own signing key

- New apps and updates can be published almost instantly

- Faster syncing