oelmekki

I see, thanks to you and @weego for historical context.

It makes me realize that git is probably some kind of append-only database too (and used for decentralization too).

I guess I can still thank blockchain for having introduced the idea to me.

Also, the blockchain has introduced (AFAIK) the idea of using append-only databases to build decentralized applications, and this is currently used in very interesting new techs which have nothing to do with currencies or economics (like secure-scuttlebutt). The "dweb" is becoming a thing, IMO.

Oh indeed, I'm not trying to say they should not fund these programs, this is awesome and welcome. I'm just warning about a possible pitfall for them to keep an eye on :)

Do people using these oldish softwares update them, though?

Funding bug bounty programs kind of fail its objectives if they don't.

Hi Fabio,

Congratulations on Notable, it's very slick, and exactly the kind of note taking app I was after.

I'm mostly concerned about keeping my data offline these days, so Google Keep and Evernote were no fit for me. I take tons of notes every day, and ended up using the note app from Kontact (the PIM suite for KDE), mostly because I'm a heavy KDE user and it was properly integrated with Akonadi (KDE's PIM backend). But it is very raw, especially compared to Notable.

Given Notable data is just plain text, it means I can get it indexed by Baloo (KDE's desktop search), so it's perfect for me. Thanks a lot :) And nevermind Electron haters, having an app in an AppImage, released on github, so that I can subscribe to release's RSS feed and just download/drop the update if I want to is furiously awesome.

One suggestion : I would love, when I create a new note when having a Notebook selected, that this new note is automatically added with this tag (currently, manually importing data from Kontact is painfully long). Autocompletion of tags could do too.

Dweb related techs.

Initially, I started with ssb (secure scuttlebutt), but ultimately moved to dat/beaker.

I've been having a lot of fun with it, I love how this allows to publish side projects without needing to rent a server.

For next year, I'm interested in exploring the implications it has regarding interoperability of apps, given users host their own data and can give access to it to other apps.

I'll speak only for me, here, but Fallout 1 is the game that impressed me the most among these, during those times. It had to do with this idea that you could go anywhere you wanted and you weren't forced into a linear plot (somewhat a precursor of current day's openworld games).

Granted, I didn't know d&d back then, I guess if it happened now after playing d&d, Baldur's Gate would impress me more.

Btw, I wonder : I intend to use KDE on librem 5 (at least eventually, if it's not ready on phone release). Do you know if mixing GTK and QT apps on the system will be as easy as on desktop?

Because having code that behaves differently on development and production is never a solution, it's a workaround. Having bugs that can't be reproduced locally is the worst thing that can happen to a developer. So yeah, you can _just_ put environment settings if you have no other possible way, but you should really avoid it if there is any other one (like using chrome with CORS disabled, here).

At the very least, CORS should be disabled for localhost. I build interfaces using create-react-app, which launches a dev server on localhost:3000 (useful for things like live reload), making requests on a go api on localhost:5000. On production, both are on :80 and the backend serves frontend production files. This is annoying to alter the application code just to handle dev environment (although, this already happen in many other places, so it's not critical).

That was my usual extension management method for chrome, but sadly each time I tried that on firefox, it didn't fly (IIRC, you _can_ load extension from your local FS, but they only lives for the time of the session).

By the way, if someone from firefox team is reading this : I would _really_ love to be able to just load directories from my FS as extensions rather than having to trust someone on the internet that it does what it says it does. I love building extensions myself, but I just don't install extensions from the web anymore because I don't know what's in there (note that referring to a github repos is not enough : I have no guarantee the content of the extension is the same).

If you want to implement payment, that's clearly the wrong tool for the job :) (although, it could easily leverage cryptocurrency networks)

Personally, I see the dweb as internet of the early days, when we were all writing blogs and publishing tools just because we found it cool. If Dat makes it difficult for big players to launch commercial products on it, I would call that a feature (but it's too early to say if it's the case). They already have the web for that.

Note: I'll only speak for my toy app, not pretending to be an expert of Dat, obviously.

I don't try to build a consensus (if by that we mean conciliating possibly conflicting entries, like Stellar if doing, for example), I just merge feeds. For now, it's as simple as it gets : my feeds (one in each character's archive) are json array of objects each containing a timestamp and a message, I just concat them and sort by timestamp. Of course, this won't fly for long, I'll soon have to separate data sources in chunks and process them as stream to avoid loading everything in memory at once, but for now, it's good enough to explore what I can do with the protocol.

I have the feeling your questions could be sum up as : how do you implement authority if there is no central control of data? (my apologies if I got it wrong and make you say something you haven't). The answer is : you don't.

With a standard app on a server, if you don't enforce data integrity, one user can possibly break the application for all users. With an app like the one I'm building, an user only share their data with a small group of friends and can only affect them. If they corrupt their data, the app is only broken for them. "Congratulation, you broke your toy. Now what?" (edit: in my app case, removing that person from the group would be enough to fix the data).

Of course, this reduces seriously the scope of what kind of app you can build (forget banking apps, or anything where anonymous people interact with one an other at a public scale). I'm perfectly fine with that : I can build my usual small tool services without pondering if it's worth mantaining, renting a domain name and renting a server. I'm not trying to build uber or bitcoin.

Please note that I'm not saying that consensus protocol and security can't be implemented with Dat, I'm just saying that it doesn't matter for what I'm currently building (and which is my only experience with dat so far).

I totally love that feature, actually.

I'm toying currently with an app to do play by post d&d campaigns on Dat, I make one user create a Dat archive to hold game data, then each player has their own archive for their character, the game archive hold references to the public keys for each one, and then the application takes each character feed and merge them to present a seamless discussion.

This feels like contributing to the same document, and yet each user is in total control of their data (almost total control, because they cannot decide to erase it if other people are already seeding it). I also love the possibilities of scaling it implies : when each user hosts their own data, the number of users doesn't matter (provided they all interact in reasonably small groups, of course).

EDIT: oh btw, I can create archives on-the-fly because I'm using Beaker browser's api. I don't know if it's something possible with Dat by itself.

I totally get it, it's all a question of balance, I guess. An _occasional_ thanks you mail is great. On the other hand, getting pass the 100 stars on a project on github is a big moral boost too, and probably wouldn't feel so great if each one was a mail :)

But actually, I realize both can easily be reconciled : we could send a "thank you" message to projects with low amount of github stars, and just star those which have a high amount. This would both cheer solo dev starting their project and avoid annoying bigger teams on well established projects.

Regarding Spotify : I use its desktop client (an electron-like app, but using their own implementation of a browser, if I got this right), and it does properly work with Connect, as it implements the standard media player controls on desktop.

I have an android wear, this allows me to play/pause, next/previous track volume up/down spotify running on my desktop from my wrist, this is super cool (although to be fair, you can also do that with the spotify app on mobile, used to control spotify on desktop).

https://www.spotify.com/fr/download/linux/

Speaking of balls, please don't be a dick. I totally get it if you want the absolute stable experience (although, if your install of plasma is that unstable, my bet is that it's poorly configured, either by you or by your distribution defaults), but this is only an acceptable expectation for software you pay for - or on which you fix the bugs yourself.

I'm saying such comment is not OK because there's nothing as demotivating for a freesoftware developer than being blame for what they think is their gift to the world. With such comment, you're not only being dismissive of other people hard work, you're killing it for all of us as you may very well demotivate some core developers, or contribute to do so. This is basically negative contribution.

Those guys do an amazing job. Many thanks to them.

Excited to see Connect being actively developed. It's already incredibly useful for me, but I can see it reaching a whole other scale when librem5 phones will be out.

Something I wonder more and more often, lately, is if Connect should not be responsible to manage notifications.

I've seen that a rewrite of the notification system is on the table [1] to be on par with android's one, and indeed, I would love to have grouping and persistence in my notifications (I currently put the notification widget on my desktop ; it's good enough, but I need to click it to see notifications history and it quickly gets floody, without grouping).

The reason I would love to see it being part of Connect is to make it easy to handle shared notifications between several Plasma installs (currently, I spend a long time tweaking the send and receive notifications plugins in Connect, this works great with two devices, but starts getting ugly with three). I can see this being a killing feature, on Plasma mobile.

I guess users who don't use Connect wouldn't love that much to have a dependency on it for their notification system, though. But since the discussed rewrite seems mobile focus (IIUC), both systems could co-exist : the classic desktop style notification system currently implemented, and the mobile friendly one in Connect, with an option in system settings to select which one we want to use.

[1] https://community.kde.org/Plasma/Notifications#Crazy_Ideas

Just as programming languages are all (well mostly) doing the same thing.

Cryptocurrencies are tech products, various projects try various ideas. You'll have the initial blockchain idea from bitcoin, the privacy blockchain from monero, the programming contracts from ethereum, the decentralized exchange from stellar, etc.

I'm perfectly fine with that, I prefer to see people create new projects to test new ideas rather than to hear them complain bitcoin is not doing what they want.

I've been using KDE Neon since a few months after its initial release, and I'm very satisfied with it. Before that, I was for a decade on Gentoo (switching between wmii and KDE from time to time), and then on Ubuntu for a couple years (around the time I started using docker).

There are still bugs here and there (which is perfectly understandable), but it's the most polished KDE experience I ever had. I'm actually wondering if it's not the most polished linux experience I ever had - except maybe a vanilla Ubuntu using as much defaults as possible, but I just can't help moving from defaults after a short while (that's the main interest of gnu/linux, to me).

EDIT: oh btw, worth mentioning: I'm using the user edition (the LTS one). I initially used the developer edition, but I found its constant updates annoying, and things were a bit less stable than the user edition (as one could expect).

I don't know if it was intended to be tongue in the cheek from you, but this is stereotypical dropbox-like HN comment.

"- We found a way to enable simple telepathy.

"- Not impressed. I can already communicate by speaking."

If it was indeed intended, thanks a lot, it made my day :)

I can see this being seen as a turning point in the future, if Google loses influence.

Until now, every time people were saying "I won't use a new google product, I don't trust them to keep it running", they were quickly blamed by googlers who replied this team had nothing to do with that team, and that you could not blame google forever for having close greader on you. And it was reasonable to think greader was an accident and we could not hold grudge on everything from google because of it (not that google did not close other products, but they were not as popular and difficult to replace).

But now, it's not an exception anymore, and it comes in a time when firefox is gathering new strength, when duckduckgo results are getting competitively good, when purism is working on a true linux phone... Google has been so strong this start of century not only because they had outstanding products, but also because they had a loyal and passionate hardcore users base. I can't see them not losing that, in the future (time will tell, obviously).

I read once that prime numbers were a key element element on cryptography (because it's easy to multiply two prime numbers, but difficult to say if a number is a multiple of two prime numbers, if I remember correctly). Will this discovery have negative impact on it?

Good idea, thanks, I didn't think about OpenWrt.

I initially checked if there was any possibility for my spare router (a d-link dsl-3782) to connect to my phone's wifi and then allow other devices to connect to the router, but it had no such feature (plus, if I got that correctly, you would need two wifi cards for that, one which would be in access point mode and one that will connect to other access point).

My router has an usb port, so it may just be that I could use it to flash the software, install OpenWrt, and then share phone connection with router through usb. Worth the try. (and sounds like a lot of fun :P )

EDIT : sadly, that model is not supported by openwrt.

Something I'm also really interested in is the perspective that I may do advanced routing with my phone (although, I guess it could fit in the "manipulate every aspect of it" category).

4g has gotten really good those latest years, I've stopped using landline connection and just use my phone as wifi hotspot for everything. But this also means I don't have NAT and thus don't have a local network, which is super annoying when I want to transfer big files from one computer to the other (not that I don't have enough options between usb keys, bluetooth send or cloud sharing, but it's just not as convenient as scp).

Can't wait to finally be able to properly configure my phone as a router.

I see, thanks. I had the experience of having some mails ending in gmail spam box until we added SPF, but we were a young company (and thus, domain name), and it was in 2014. I wouldn't feel confident recommending not using SPF to anyone, though :)

Just to be clear, if we don't implement SPF on our domain names, our mails will be rejected by gmail, right?

If that's so, this is purely a theoretical discussion (which has its own merits, of course).

That was my first thought as well, but the blocking reason reads : "This URL has been categorized under : Criminal Skills / Hacking news".

This sounds targeted : I guess a torrent domain name wildcard would have read something like "pirate downloading".

EDIT : btw, if "hacking news" is a reason enough for blocking a website, I fear for the security skills of future generations of developers.

I'm surprised we're not discussing what seems to be the core problem from Elon Musk's point of view : financial aggressivity.

While his tweet doesn't say why he wants to go private, this article makes it pretty clear : he's harassed by shorters (people who speculate on price going down, and thus who will contribute negative and unfounded opinions just to achieve this goal).

Whether this is really his biggest burden or not, there is certainly something to be said about people who earn money because others are in trouble. In any case, seeing that people want you to have troubles certainly doesn't help.

(please guys, don't punish/downvote someone for asking a question)

Domain Squatting is border line extortion. It's not your usual business because there is no competition possible : there is only one person that can own the domain. If a squatter registers the name of a well known company on a TLD they weren't present in, then mail them saying they put some porn website on it and put money in SEO, there is little the company can do except paying absurd amount of money to get control over the domain (mind you, Handshake would not prevent that, from what I see).

In a less dark way, you may also have to change your startup name because someone is squatting a domain and you don't have any money yet to buy it, which is a real nuisance when you think that person is doing absolutely nothing with that domain.