Nostr notes by Hendrik Weimer

This is a great question because this relationship isn't ...

2026-10-27T22:55:43Z

In reply to nevent1q…js4q
_________________________

This is a great question because this relationship isn't natural at all. If you have charges in a vacuum and apply a voltage, you won't get charges traveling with a constant velocity (i.e., a current), but the charges will get *accelerated*.

But things change once you have a mechanism to lose energy. Then, you have a competition between a force that accelerates the charges and the equivalent of a friction force that slows them down. In electrical systems, this friction is called resistance.

At sufficiently low speeds, you get a linear relationship between the velocity of the charges (again, this is the current) and the voltage you apply. This means that the linear relationship is not a universal law but merely arises when the conditions are right. There are important nonlinear electric devices like diodes or transistors where the linear relationship breaks down.

It's easy when you know that the speed of light is ...

2026-09-25T15:10:04Z

In reply to nevent1q…6wgu
_________________________

It's easy when you know that the speed of light is approximately 3 times10^something meters per second. Then, you multiply the leading digits to get the number of seconds in a day. 6(0) seconds times 6(0) minutes gives 3.6 times 10^whatever, and you round this to 4 before the next multiplication, which is by 2(4) for the number of hours. So, there are about 8 times 10^whoknowswhat seconds in a day. Multiply this with the speed of light and you get 2.4 times 10^icouldntcareless for the final result. There's only one answer that's reasonably close.

Physicists are very lazy people.

That's not the same. I can make lots of changes to my car ...

2026-09-17T19:34:10Z

In reply to nevent1q…z0zz
_________________________

That's not the same. I can make lots of changes to my car without requiring recertification, like changing the tyres. With app attestation, any modification is forbidden, even if I take the original source code and compile it myself without making any changes.

I'm referring to the most commonly used definition of open ...

2026-09-17T16:56:39Z

In reply to nevent1q…923w
_________________________

I'm referring to the most commonly used definition of open source and explained that the incompatibility of the age verification spec with said definition is a great cause of concern for many people.

If you restrict such uses, that's incompatible with Article 6 ...

2026-09-17T16:25:04Z

In reply to nevent1q…q0zv
_________________________

If you restrict such uses, that's incompatible with Article 6 of the Open Source Definition: https://opensource.org/osd

For your driver's license, it's also completely unnecessary. A digital driver's license is a bunch of data signed by a government key. If I modify the data, the signature will no longer match. But I can modify an app using the driver's license in any way without compromising the security of the system. There's no reason why such a driver's license app must be attested to be unmodified.

In the open-source definition, there are no consumers, only ...

2026-09-17T15:36:47Z

In reply to nevent1q…ren3
_________________________

In the open-source definition, there are no consumers, only recipients of the code, who possess certain rights, including the right to modification. If you don't want this, the attestation must be proprietary because otherwise you could modify the attestation to match your changes to the app.

You cannot have an open-source implementation that is compliant with the spec.

"AVS Unit Attestation (AVSUA): A data object, issued by the ...

2026-09-17T14:52:09Z

In reply to nevent1q…lxxp
_________________________

"AVS Unit Attestation (AVSUA): A data object, issued by the provider of an Age Verification solution, that describes an Age Verification App Instance and the device on which it is installed, enabling an Attestation Provider to verify that the App Instance is a genuine and untampered instance of a compliant Age Verification solution."

https://docs.ageverification.dev/av-doc-technical-specification/docs/architecture-and-technical-specifications/

You will not be allowed to modify the app. This is obviously incompatible with the core principles of open-source software.

The backlash would be much less severe if there was a credible ...

2026-09-17T14:18:10Z

In reply to nevent1q…08h4
_________________________

The backlash would be much less severe if there was a credible path to run an open-source implementation that doesn't require handing over highly sensitive data to a third party. The currently discussed solution requires apps to be secured against modification, which obviously violates a core principle of open-source software.

If you want a positive example for a government-sponsored app, look at Germany's CovPass for covid vaccinations, which had independent builds for F-Droid: https://riqq.gitlab.io/fdroid-website/en/packages/de.rki.covpass.app/

Very interesting preprint by @npub1ly9…edww comparing the ...

2026-07-13T12:15:14Z

Very interesting preprint by Petter Törnberg (npub1ly9…edww) comparing the language indicators for content sharing on different social media platforms. On Mastodon (not sure how much content from the wider Fediverse was included), reasoning and nuance were most strongly associated with boosting. On X, insult, identity attack, and toxicity are rewarded instead. Bluesky doesn't seem to have particularly strong language indicators for sharing content.

https://arxiv.org/abs/2607.04220

#fediverse #mastodon

Very interesting analysis by @npub1pf6…45j3 about Mastodon and ...

2026-05-26T19:48:30Z

Very interesting analysis by netzbegrünung (npub1pf6…45j3) about Mastodon and Bluesky in Germany. For high-profile accounts active on both platforms, the Mastodon accounts saw on average a 193% higher increase in followers over the last six months.

https://netzbegruenung.de/blog/das-ende-der-dominanz-microblogging-wandel-in-deutschland-in-zahlen/

#fediverse #mastodon #bluesky #germany

LLM dependence is a form of debt and now the interest payments ...

2026-05-17T11:59:57Z

In reply to nevent1q…ap7u
_________________________

LLM dependence is a form of debt and now the interest payments are due.

https://fediscience.org/@hweimer/115428806838046734

It's great to see that the @npub1yz9…xjs4 has joined the ...

2026-05-04T07:10:43Z

It's great to see that the VolkswagenStiftung (npub1yz9…xjs4) has joined the Fediverse!

It's hard to underestimate the impact they had on my career, allowing me to start my own research group under a Freigeist Fellowship grant. After almost 10 years, my Freigeist project has come to an end just in the last week. I'm happy to see that we will be able to continue our interaction here.

(FWIW, the Volkswagen Foundation is independent of the carmaker with the same name.)

#academicchatter

Having a presence in the Fediverse isn't about reach, ...

2026-04-14T14:04:26Z

Having a presence in the Fediverse isn't about reach, engagement metrics, or cost per conversion.

It's a civic duty of every organization believing in democratic values.

#fediverse #mastodon

If you don't want to use the common workarounds, you can find ...

2026-04-13T15:23:13Z

In reply to nevent1q…c2x6
_________________________

If you don't want to use the common workarounds, you can find a recycled version here: https://quantus.substack.com/p/the-leftward-shift-in-the-democratic

There has definitely been a stretch on the left as well, and it's not limited to party activists.

There is considerable evidence that the Democratic party has ...

2026-04-13T14:58:42Z

In reply to nevent1q…xazv
_________________________

There is considerable evidence that the Democratic party has shifted significantly to the left of the median voter on social issues: https://www.ft.com/content/73a1836d-0faa-4c84-b973-554e2ca3a227

And concerning birthright citizenship, the situation also seems to be a bit more complex: https://www.nytimes.com/2026/03/31/us/politics/birthright-citizenship-support.html

Wobei ich es schon als sehr frustrierend empfinde, dass die DNB ...

2026-03-13T09:55:24Z

In reply to nevent1q…3wl3
_________________________

Wobei ich es schon als sehr frustrierend empfinde, dass die DNB ihrem gesetzlichen Auftrag bei der Archivierung digitaler Medienwerke praktisch überhaupt nicht nachkommt. Wir sollten eigentlich schon längst eine deutsche Variante des Internet Archive haben.

(NIcht verwandt oder verschwägert.)

I wrote a small game simulating the transition to a solar-powered ...

2026-02-16T12:34:18Z

I wrote a small game simulating the transition to a solar-powered economy. You can build solar panels, batteries, hydrogen storage and sell your generated electricity at market prices. Electricity demand, pricing, and weather conditions are based on realistic models for Germany.

https://sonnenwende.codeberg.page/

#gaming #games #simulation #solar #solarpunk #renewables #godot #opensource #germany

Fediverse starter pack for physics with a focus on DE/AT/CH: ...

2026-01-29T08:12:30Z

Fediverse starter pack for physics with a focus on DE/AT/CH: https://fedidevs.com/s/ODg2/

(h/t schuh (npub157l…nzus))

#physics #science #academicchatter #germany #austria #switzerland #fediverse

The Academic Cloud instance is only available to members of ...

2026-01-29T07:23:11Z

In reply to nevent1q…kszu
_________________________

The Academic Cloud instance is only available to members of universities in Lower Saxony, Max Planck institutes, and possibly some more. We decided to focus on instances that are accessible to at least a large part of the readers of the Physik Journal.

Together with Mario Birkholz of @npub19tf…ahrh fame, I have ...

2026-01-27T14:08:36Z

Together with Mario Birkholz of Aktionsb. neue soziale Medien (npub19tf…ahrh) fame, I have written an article about Mastodon and the Fediverse in the journal of the German Physical Society: https://pro-physik.de/zeitschriften/download/23119

It's free to read but in German. Let's hope that DPG e. V. (npub199m…c34y)'s move to the Fediverse will inspire other scientific societies and universities to follow!

#physics #mastodon #fediverse #academicchatter #wisskomm #physik

Most boosted Fediverse posts of 2025: 1. @npub1388…sxrr: ...

2026-01-25T18:49:46Z

Most boosted Fediverse posts of 2025:

1. Max Leibman (npub1388…sxrr): https://beige.party/@maxleibman/114441790730464541 (3815 boosts)

2. stux⚡️ (npub1s20…twmm): https://mstdn.social/@stux/113974665364673502 (3720 boosts)

3. pixelfed (npub1gq5…qcul): https://mastodon.social/@pixelfed/113849098386232034 (3153 boosts)

4. Signal (npub1rkw…5q62): https://mastodon.world/@signalapp/115311121329278998 (3128 boosts)

5. JA Westenberg (npub1wkr…yvj6): https://mastodon.social/@Daojoan/114587431688413845 (3045 boosts)

Terms & Conditions apply, see thread.

#fediverse #fedistats

Weil Smartphone-Apps unter Verwendung der ...

2026-01-24T18:52:24Z

In reply to nevent1q…5jyv
_________________________

Weil Smartphone-Apps unter Verwendung der Hardware-Schlüsselspeicher als sichere Endgeräte unter PSD2 gelten und Browser nicht. Du müsstest also analog zum Bezahlen bei Online-Händlern die Transaktion wiederum per Smartphone-App oder FIDO2-Token freischalten.

Es gibt zwar Diskussionen, solche Hardware-Speicher im Browser zugänglich zu machen: https://github.com/w3c/webcrypto/issues/263 Ich bin aber skeptisch, ob sich damit eine PSD2-konforme Lösung bauen lässt, weil die Webanwendung im Browser nicht unter einem separaten Benutzer läuft.

"Providers should remain free to offer services using ...

2025-11-11T15:25:01Z

In reply to nevent1q…54n0
_________________________

"Providers should remain free to offer services using end-to-end encryption and should not be obliged by this Regulation to decrypt data or create access to end-to-end encrypted data."

Das klingt für mich danach, als würde das Aushebeln von Ende-zu-Ende-Verschlüsselung nicht mehr als angemessene Risikominderungsmaßnahme gelten.

Altersverifikation schließt nicht notwendigerweise anonyme Nutzung aus, Zero-Knowledge-Protokolle hierfür existieren. GNU Taler (npub1fus…tvjp) hat etwas hierzu: https://docs.taler.net/design-documents/024-age-restriction.html

Nostr event nevent1qqs8d5uuvc78wr6f6lm2yerdey0wfe5qmla0fwfnd8fzykpkhr7pnxgzyzknt0zpe5xvgn5n5zfs7a7ctrza0qw6fkuyh3hqjcsq4knnjq2e2zmt058

2025-11-02T09:24:41Z

In reply to nevent1q…6g75
_________________________

https://blog.arxiv.org/2025/10/31/attention-authors-updated-practice-for-review-articles-and-position-papers-in-arxiv-cs-category/

Centrailzed publishers won't go away for a long time since they hold exclusive rights to groundbreaking works for at least 70 years after the deaths of all authors. That's a different story.

But for (new) preprints, that's not the case. In the past, a centralized system was somewhat useful for content discovery. But with standards like ActivityPub, that's no longer necessary.

Given the drama surrounding the arXiv for its dependence on ...

2025-11-02T07:29:51Z

Given the drama surrounding the arXiv for its dependence on Google and its recent ban on review articles in computer science, I have a question:

Do we still need the arXiv?

Wouldn't a federated network of institutional repositories be a much better option?

#arXiv #academicchatter #physics #math #cs #ActivityPub

Das ist ja schön, wenn Herr Macron endlich erkannt haben will, ...

2025-10-04T07:54:46Z

In reply to nevent1q…smpq
_________________________

Das ist ja schön, wenn Herr Macron endlich erkannt haben will, dass wir amerikanischen und chinesischen Tech-Konzernen zu viel Macht gegeben haben.

Dann sollte er als erstes die französische Position zur #Chatkontrolle ändern. Deren Einführung würde diese Konzerne noch weiter stärken, weil datenschutzfreundlichere Alternativen kaputtreguliert würden.

As far as I know, using a separate profile under @npub1kwa…e0nj ...

2025-09-25T12:53:14Z

In reply to nevent1q…4ssa
_________________________

As far as I know, using a separate profile under GrapheneOS (npub1kwa…e0nj) is the way to go.

The Ising model in a transverse field is one of the most ...

2025-06-18T08:46:21Z

The Ising model in a transverse field is one of the most fundamental models in quantum many-body physics. Despite being around for more than 60 years, we still make new discoveries in it. In our latest work, we show the existence of a dynamical phase transition (a concept pioneered by Markus Heyl (npub1nss…pn0r)) where the quantum entanglement between the constituents becomes extremely large: https://arxiv.org/abs/2506.13898

Such a transition is not only fun to play with, but it can also lead to building better quantum sensors, as it is precisely this type of entanglement that allows quantum sensors to outperform their classical counterparts.

#quantum #physics

Great news! While Trump is busy dismantling the Library of ...

2025-05-13T14:40:48Z

Great news! While Trump is busy dismantling the Library of Congress, the German National Library of Science and Technology (TIB (npub1268…u2k4)) is preparing for more to come: they've downloaded the entire 10 TB of the arXiv preprint server and safeguarded more than 2.6 million scientific articles. Thank you so much! This was especially needed since, last year, the arXiv decided to shut down its mirror network.

https://blog.tib.eu/2025/05/13/die-wissenschaft-schuetzen-tib-baut-dark-archive-fuer-arxiv-auf/

#arxiv #physics #math #unplugtrump

Also, jetzt wird es langsam ein bisschen albern. Natürlich ...

2024-09-30T14:28:03Z

In reply to nevent1q…03us
_________________________

Also, jetzt wird es langsam ein bisschen albern. Natürlich unterstützt die Javascript-Engine von Chrome die Fetch API, mit der es möglich ist, Daten an einen externen Server zu übermitteln. Es mag sein, dass da bei Chrome noch ein weiterer Prozess zwischengeschaltet ist, aber wenn der kompromittierte Prozess diesem sagt, er solle bitte etwas an einen externen Server schicken, dann wird er dies ohne Murren tun, das ist schließlich sein Job. Geht ja gar nicht anders.

Wirklich überzeugend ist das nicht. Sandboxing gegen remote code ...

2024-09-30T13:49:30Z

In reply to nevent1q…8vys
_________________________

Wirklich überzeugend ist das nicht. Sandboxing gegen remote code execution hat noch nie richtig funktioniert. Ein Renderer muss z.B. in der Lage sein, auf lokale Dateien zuzugreifen (Up-/Downloads) und Netzwerkkommunikation zu betreiben (Fetch API und Co.). Das kann der kompromittierte Prozess dann auch. Wenig überraschend steht auch in der Chromium-Dokumentation an der Stelle "TODO: need to research".

Wird Zeit, dass aus Servo (npub1nvf…cpws) was wird: https://servo.org/

Wenn die externen Unternehmen den Request gar nicht zu Gesicht ...

2024-09-30T11:11:11Z

In reply to nevent1q…aqxw
_________________________

Wenn die externen Unternehmen den Request gar nicht zu Gesicht bekommen, dann können sie auch kein Fingerprinting machen. Das ist also ein weiterer Grund, nicht von überall Javascript-Code auszuführen. Adblocker erwischen vielleicht gerade einmal die Hälfte der externen Inhalte.

Bei Brave ist zudem indiskutabel, dass es außerhalb des Play Stores keine automatischen Updates gibt.

Brave unter Android unterstützt auch keine Extensions, es ist ...

2024-09-30T10:20:56Z

In reply to nevent1q…79tf
_________________________

Brave unter Android unterstützt auch keine Extensions, es ist exakt dasselbe Problem wie bei Chrome.

Praktisch alle Browser-Bugs für remote code execution betreffen ...

2024-09-30T10:17:33Z

In reply to nevent1q…226v
_________________________

Praktisch alle Browser-Bugs für remote code execution betreffen Javascript-Code (z.B. CVE-2023-37450, CVE-2023-3420, CVE-2024-3833). Selten ist wie in CVE-2023-4863 sowas wie eine Bildbibliothek betroffen.

Wenn du eine typische Webseite gehst (z.B. Zeit), dann werden da 10-20 Javascript-Elemente von externen Unternehmen nachgeladen, und das ist nur die erste Ebene. Das erhöht massiv die Angriffsoberfläche und Chrome unter Android bietet keine Möglichkeit, sich dagegen zu wehren.

Brave unterstützt wie praktisch alle Chrome-Derivate unter ...

2024-09-30T09:31:47Z

In reply to nevent1q…mha0
_________________________

Brave unterstützt wie praktisch alle Chrome-Derivate unter Android keine Externsions. Wer gerne Javascript-Code von überall ausführt, mag das verschmerzen, aber Sicherheit und Chrome unter Android schließen sich aus.