User avatar
🪨 @Varpie@peculiar.florist
Moderator
Ergonaute ex-béopète archer des montagnes exilé au Danemark.
L'informatique, c'est pas mathémagique.

I mostly post things in French, so hopefully you have a translator baked into your Fedi software.
Previous account @Varpie@calckey.world
Previous Mastodon @Varpie@mastodon.online
Previous Twitter https://twitter.com/V4rp1e
User avatar
🪨 @Varpie@peculiar.florist
8mo
@tournesol Tu peux pas l'utiliser pour faire de l'authentification passwordless aux services nationaux ?
Ici on a MitID utilisé à peu près partout, genre banque, services gouvernementaux, etc. où on a une appli sur le téléphone qui sert de 2FA, sans mot de passe du coup (on entre le nom d'utilisateur sur le site, ça active l'authentificateur sur le tel)
0
0
0
0
User avatar
🪨 @Varpie@peculiar.florist
8mo
@tournesol Tu peux juste utiliser France Identité non ?
1
0
0
0
User avatar
🪨 @Varpie@peculiar.florist
8mo
@grifdail Pareil : Rust, on garde le borrow checker mais on enlève les macros et les lifetimes, et on remplace la concurrence avec async/await par un modèle acteur genre Erlang/OTP
0
0
0
0
User avatar
🪨 @Varpie@peculiar.florist
8mo
@grifdail Le problème du modulo sur des non-entiers, c'est que la définition n'est pas universelle : que vaut -1.5 mod 2 ? Au moins, en arithmétique modulaire (sur les entiers) il y a une définition claire. Et c'est pas comme si le modulo est compliqué à implémenter, en assembleur il y a une instruction qui marche pour les entiers donc mieux optimisé donc c'est probablement pour ça que ça ne supporte que les entiers.
Pour le reste franchement c'est juste de la syntaxe, c'est une question d'habitude.

Au moins Godot marche aussi avec C# donc t'as pas besoin d'apprendre GDScript si t'aimes pas.
⭐1
0
0
0
1
User avatar
🪨 @Varpie@peculiar.florist
8mo
@arstechnica I bet that's gonna be another Salesforce story, the only question is whether it will take more or less than 3 months
⭐4
0
0
0
4
User avatar
🪨 @Varpie@peculiar.florist
8mo
RCS Google et pub @adrian J'ai eu un truc similaire il y a quelques semaines, j'ai dû aller sur le site pour faire une demande d'effacement RGPD...
⭐1
0
0
0
1
User avatar
🪨 @Varpie@peculiar.florist
8mo
@adzetko youtube.com/watch?v=-xqEABqaEuo
⭐1
0
0
0
1
User avatar
🪨 @Varpie@peculiar.florist
8mo
@adzetko Ce qui est bien c'est que t'as pas à rajouter les petits drapeaux, t'as déjà Céleste qui indique ton identité
⭐1
0
0
0
1
User avatar
🪨 @Varpie@peculiar.florist
8mo
@tournesol En même temps bon tu paies la marque quoi, c'est pas pour rien que c'est marqué en gros dessus
1
0
0
0
User avatar
🪨 @Varpie@peculiar.florist
8mo
@box464 It is the same principle, I saw that comparison as a diagram in a documentation website and I can't find it back, but I remember thinking that it was a neat comparison... I should use bookmarks for this kind of situation.
⭐1
0
0
0
1
User avatar
🪨 @Varpie@peculiar.florist
8mo
@box464 I saw the other day a picture that summed it up pretty well: it was a comparison of centralized, federated and decentralized architectures. Unfortunately I can't remember where it was...
In the centralized one, there is one big circle in the middle (the server) and plenty of links pointing to small dots (the users).
In the federated one, there are "islands" of servers linked together, of different sizes. They aren't all connected to each other, so there can be single ones, smaller groups or a big land, so it kind of makes an archipelago. Local community instances could be like the smaller islands here.
In the decentralized one, each server is connected to everything else, so it is just one big mesh.
⭐1
1
0
0
1
User avatar
🪨 @Varpie@peculiar.florist
8mo
@tournesol feur > coubeh, confirmé
⭐1
1
0
0
1
User avatar
🪨 @Varpie@peculiar.florist
8mo
@tournesol Attends c'est un symptôme de l'ADHD ça ? Peut-être qu'il faudrait que je me fasse diagnostiquer...
1
0
0
0
User avatar
🪨 @Varpie@peculiar.florist
8mo
@tournesol Ah, je pensais que t'allais dire "mais maintenant il y a du bazar au sol à droite de mon bureau" ​:blob_nervous2:​
⭐2
1
0
0
2
User avatar
🪨 @Varpie@peculiar.florist
8mo
@scottjenson This is great but it assumes a single device (private key) per account. What if I want to have a phone and a desktop? Whatsapp and Signal both "solve" this by having one main device (the phone) and connected devices that make use of this main device's private key, but in the context of having different applications connected to a fedi account, I'm not sure it would work too well.
⭐1
1
0
0
1
User avatar
🪨 @Varpie@peculiar.florist
8mo
@tournesol @MoritzBrouhaha It's a limitation that makes sense though, imagine if following an account fetched all of their previous posts... Here we go potentially hundreds of thousands of posts at once, every time someone from a new instance follows someone shitposting for years ​:meow_melt_sob:​
1
0
0
0
User avatar
🪨 @Varpie@peculiar.florist
8mo
@scottjenson True, handling the messages in a standardized way is one thing, but managing keys across multiple clients is the hard part here. The way I see it, there are 2 options:
- each client creates its own key, encrypted messages now need to be encrypted with multiple keys and the new clients don't have chat history (this could be mitigated by having existing clients with the decrypted messages send them to the server with the new key)
- there is some sort of handshake when registering a new client, that passes the private key from a registered client to the new one

The first option allows to handle each client separately, so we don't need the other device to be available and if we want to stop using a specific app, we can deregister it, but it requires senders to encrypt their messages n times, and as mentioned it makes it difficult to handle chat history.
The second option makes chat history trivial, but it puts a lot of trust on new clients, if we want to stop using it the rotation of keys is more complex. Also, each client needs to be able to handle the same type of keys, which isn't a given when using different apps.

I think for user experience, having each client generate its own key and asking older clients to re-encrypt messages with the new key can be better: there is no requirement to have the other clients active at the same time, but we can have the same handshake that would be required for passing PKs, to recover chat history. It also allows to give more granular control over which clients are active, kind of like seeing the active sessions for an account and being able to log off on other devices.
1
0
0
0
User avatar
🪨 @Varpie@peculiar.florist
8mo
@tournesol Why not both?
1
0
0
0
User avatar
🪨 @Varpie@peculiar.florist
8mo
@scottjenson Private mentions aren't really private if they're not end-to-end encrypted. On a federated platform, you put a lot of trust on the servers, and it's not just the one you're on but also the one receiving the messages. What if I want to message a friend on Threads for instance? I don't know about you, but I don't trust Meta to just deliver the messages without using them to build a profile on me or improve their AI models, which are things I can't really opt out of since it's not my platform. The only way to avoid these things (to some extent) is to make it impossible for them to read my messages.

The good thing is you don't have to reinvent the wheel here, there are already a few attempts at standardizing encryted messages for ActivityPub: Evan put together the MLS over AP, Hollos also did something similar. Make sure to talk to them so we don't end up with yet another standard.
1
0
0
0
User avatar
🪨 @Varpie@peculiar.florist
8mo
@jwcph That just validates my opinion on LLMs: they are just a tool, and if you can't code without them you shouldn't depend on them in the first place.
In a way, they are a multiplier: they can make a good coder more efficient, but for someone that doesn't know what they're doing they will just result in a lot more bad output. Just like an efficient saw can help a good woodworker, but also result in a lot more wood scraps if used by an unskilled one.

I do agree that the reliance on a handfull of companies is bad though. Since it takes so much resources, it's not like anyone can build a decent LLM, so the competition just isn't there, unlike other tools where there are usually many good options (including more ethical ones...)
0
0
0
0