pixelschubsi

Public Key

npub19sn9l5cuchr6mx2jea3j2wtqg5vg0cvqarpuguf9urtlt56wcv9q0hpxpa

NIP-05 Address

pixelschubsi@troet-cafe.mostr.pub

Profile Code

nprofile1qqszcfjl6vwvt3adn9fv7ce989sy2xy8uxqw3s7ywyj7p4l46d8vxzspz4mhxue69uhhyetvv9ujuerfw36x7tnsw43qzyrhwden5te0dehhxarj9emkjmn9m8an4u

Publishing to

relay.ditto.pub

nostr.wine

relay.damus.io

Author Public Key

npub19sn9l5cuchr6mx2jea3j2wtqg5vg0cvqarpuguf9urtlt56wcv9q0hpxpa

Show more details

Last Notes

2026-04-13 08:43:24 UTC

- reply

@nprofile…5lsr I mean for example the post I was originally replying to. Or your reply to my reply literally having "protocols" as the second word.
My post was about protocols, because it was a reply to one that was about protocols. When you noticed how the advertising based on protocols gets debunked, you quickly shift to something else.
I'm not saying DeltaChat is bad. Just get your marketing sorted and focus on UX rather than standards, protocols or encryption.

2026-04-13 08:31:10 UTC

- reply

@nprofile…5lsr @nprofile…vcgd Yes DeltaChat is a messenger and XMPP is a protocol.
Why is the advertising towards DeltaChat so obsessed with protocols? Just say "DeltaChat is better than Conversations, because it provides a consistent UX across platforms including iOS." This would render your point much easier to understand for everyone and wouldn't require you to badmouth protocols you're relying on yourself.

2026-04-12 22:00:59 UTC

- reply

@nprofile…vcgd It's easy to say that one doesn't need better protocols after those better protocols have become so ubiquitous that you don't even realize how you're using them yourself.
Apple APNS and Google FCM use #XMPP technology to deliver push messages instantly. All the other messengers listed (#Signal, #Element, #DeltaChat) thus use XMPP technology. Everyone uses XMPP, but when it is about marketing, suddenly XMPP is not necessary.

2026-04-09 08:23:43 UTC

- reply

@nprofile…uj37 Die Frage ist was "taktische Gründe" sind. Du sagst, Die Linke sei für dich die richtige Partei, aber dabei spielen ja eine Menge Aspekte mit rein, nicht nur die Programmatik, sondern zum Beispiel auch Personen, finanzielle Mittel, die Größe, die Möglichkeiten, usw.
Wenn aber eine Partei unter anderem deshalb die richtige ist, weil sie etwas erreichen kann, dann macht es eventuell Sinn, eine andere Partei zu wählen, wenn das der Wunschpartei mehr hilft als sie selbst zu wählen.

2026-03-26 23:24:52 UTC

- reply

@nprofile…8d0p Are you talking about https://uattest.net/? I had a glimpse at it, and they talk about multiple backends and federation of backends. As I understood it, everyone can create a backend and create tokens for devices/OS that they like, it's then subject for the app developers to accept those tokens, either directly or indirectly through federation. Which means it does allow for competitor OS to also be accepted for as long as the app developer or their selected backends support it.

2026-02-22 07:38:11 UTC

- reply

@nprofile…hr78 @nprofile…dv93 Man kann mit der Girocard kontaktlos zahlen, unabhängig von VISA, MasterCard und PayPal.
Mit den Apps "Mobiles Bezahlen" der S-Payment für Sparkassen, "Pay - Die Bezahl-App" der Atruvia für Volksbanken und "Digitales Bezahlen" der Atruvia für Sparda, PSD und einige andere Banken ist das auch mit NFC-fähigen Android-Smartphone möglich, ohne das man Zahlungsdaten und Transaktionsgebühren an Google abdrücken muss.
Hauptsächlich wollen die Leute halt nicht.

2025-12-23 11:03:54 UTC

- reply

@nprofile…qu7r @nprofile…3m83 I'm also genuinely surprised that people believe that ActivityPub, a protocol even named after its purpose, to publish activities, is a good protocol to pursue private instant messaging. The goals of those two couldn't be more detrimental.
I do see a purpose of being able to reuse your "ActivityPub identities", which actually are just WebFinger identities. Maybe someone should specify how to discover XMPP accounts via WebFinger and push that as a solution for AP messaging?

2025-11-25 19:07:34 UTC

- reply

@nprofile…f9sr @nprofile…uymw It's a single story from law enforcement that is then picked up by multiple media. This is literally how media publishing works. One press release leads to multiple newspapers writing about it. That doesn't make it a coordinated effort. Nobody is coordinating anything, law enforcement shares information and news outlets report what they claim. No news outlet claimed that this is their own research, analysis or anything like that.

2025-11-25 14:44:02 UTC

- reply

@nprofile…uymw @nprofile…f9sr what does "being threatened" mean? They sent an email and asked friendly? Coordinated media attacks also sounds weird for a single story (that as usual appears in various outlets). Almost as if the GrapheneOS marketing person (as usual) puts things out of proportion for publicity...

2025-10-25 09:47:56 UTC

- reply

@nprofile…f9sr I'm now wondering if we can make use of this to run microG...
EDIT: No, not really. The signature spoofing will only happen if no com.google.android.gms is installed. This introduces a race condition (requiring microG to be installed between signature check and an app's usage of it). So we have the same security impact of microG compatible signature spoofing without the benefit of being able to use microG in practice.

2025-10-25 09:41:05 UTC

- reply

@nprofile…f9sr Isn't this essentially adding some sort of signature spoofing, a feature GrapheneOS was always very much opposed to adding? What's the rationale to now consider it acceptable to fake to third-party apps that a package com.google.android.gms signed by Google is installed on the system when it actually isn't?
Reference: https://github.com/GrapheneOS/platform_packages_apps_GmsCompat/blob/219b4c2895d30ebb4d0cdea2a57f25d0df269362/lib/src/app/grapheneos/gmscompat/lib/sysservice/client/GclPackageManager.java#L37-L43

2025-10-15 07:39:37 UTC

- reply

@nprofile…w47d @nprofile…q95s @nprofile…cx5s Here's an excerpt from Facebook's DMA documentation about their *current* protocol. Sure, they stopped using XML, but that's only an encoding/compression thing. If you've ever seen an XMPP message, it's impossible to not see how it is based on XMPP.
https://media.troet.cafe/troet.cafe/media_attachments/files/115/377/031/469/111/330/original/55851579ba1ab6dd.png

2025-10-15 07:26:39 UTC

- reply

@nprofile…7jd5 Da müsstest du schon etwas konkreter werden, wo in Frankreich du hinwillst. Frankfurt-Paris sehe ich hier jetzt im Januar 2 EW + 2 K für unter 200€ return. Das kommt mir nicht gigantisch teuer vor.

2025-07-12 15:37:49 UTC

Apparently, the #matrix.org home server costs the foundation $240k a year in server hosting costs. And that is to host 370k monthly active users. In other words 65ct/user/year (excl. IT people and moderation, which seems to be an additional $1/user/year). I wonder if similar data exists for public #xmpp servers, that is number of monthly active users and yearly hosting fees. I often hear that XMPP is more efficient for small servers, but would also be nice to know for big ones.

2025-06-07 17:03:31 UTC

- reply

@nprofile…vklh @nprofile…8nvu @nprofile…vuy2 @nprofile…j2ky
Can you provide proof that nobody can extract the information from the secure enclave, even if manufacturer and cloud hoster are forced by the US government?
Also, even with Signal, to start a conversation a user A needs to fetch the key package of a user B. Revealing the social connection of A and B and thus effectively a full social graph.

2025-05-17 08:34:13 UTC

- reply

@nprofile…0h8q @nprofile…xtys @nprofile…yqwg
There still is. Both @nprofile…5chr and Libervia @nprofile…afqj support microblogging and social networking using XMPP PubSub. Libervia even has an experimental ActivityPub bridge.

2025-01-27 14:04:27 UTC

- reply

@nprofile…m8mr @nprofile…mjc8 @nprofile…rsu8
I know all this. But again: In practice ad blockers work reasonably well. Yes, some ads manage to pass through, but most get blocked. It effectively improves the user's experience.
The absolute stance would be to say that either you have to accept the websites render ton of ads, because there is no guaranteed way of blocking them, or you stop using the web. But some people prefer the non-absolutist way, that is to use an ad blocker.

2025-01-27 13:51:37 UTC

- reply

@nprofile…m8mr @nprofile…mjc8 @nprofile…rsu8
I'm not saying that FOSS has better privacy just because it's FOSS, but also we know that in practice, this is the case. The average FOSS app is more privacy friendly. If you install 10 random apps from F-Droid, you're likely to end up with 10 somewhat privacy-friendly apps (especially if you have the filter for anti-features enabled). If you install 10 random apps from Play Store, about half of them probably perform tracking that is illegal in the EU.

2025-01-27 13:44:30 UTC

- reply

@nprofile…m8mr @nprofile…mjc8 @nprofile…rsu8
> Privacy/security features need to hold up to an adversary aware of it and which can actively adapt to it in order to be a serious approach.
See, this is what I mean. I totally agree with you on the one hand, but on the other hand, I understand people consider, for example, an ad blocker a useful tool, because it works reasonably well in practice even if technically, it can be bypassed easily.

2025-01-27 13:37:09 UTC

- reply

@nprofile…mjc8 @nprofile…rsu8 @nprofile…m8mr
Auf der anderen Seite ist es deutlich differenzierter: Bei FOSS Apps guckt man einfach was sie machen und die Berechtigungen sind quasi nebensächlich, bei proprietären Apps gilt zwar die Annahme, dass sie womöglich die Daten "falsch" verwenden, aber ein Nachweis dazu macht es eben doch noch schlimmer. Dazu kommt, dass man einem kleinen, lokalen Unternehmen anders Daten zugesteht als etwa Apple oder Google (wo Missbrauch stärker vermutet wird).

2025-01-27 13:35:02 UTC

- reply

@nprofile…mjc8 @nprofile…rsu8 @nprofile…m8mr
Ich denke der Hintergrund ist ein grundsätzlich unterschiedliches Verständnis von Datenschutz in verschiedenen Bubbles der Privacy-Community.
Auf der einen Seite ist es mehr absolut: Was eine App kann, das müssen wir auch annehmen, dass sie das auch tut. Ob es faktisch Tracking gibt oder nicht, ist dabei fast egal, genauso wer die Daten bekommt (weil er ja weitergeben könnte). Der einzige wirksame Schutz ist, die zugreifbaren Daten zu reduzieren.

2025-01-11 07:21:56 UTC

- reply

@nprofile…p3lv @nprofile…hdfr @nprofile…d22q
> but at least in that case the tech media will likely be all over it
That's wishful thinking. I recently reported both here on Mastodon and on Signal's public issue tracker that Signal servers can remotely disable privacy features in the client leading to revealing metadata to their servers. Reply by Signal was, that they want it like this. Reply from tech media was, that if Signal wants it like this, it must be good this way.
https://github.com/signalapp/Signal-Android/issues/13842