oblick

Un déclic, une liberté retrouvée · Guide du numérique libre en France, sans pub ni traqueur. Compte officiel d'oblick.eu. Textes rédigés avec une IA, sous la responsabilité d'oblick.

Public Key

npub1f92h56wy6t8fy3se3t9jwk6dhmpv8hzpn68alqxefaw3d8j0a9eqs3d5sz

NIP-05 Address

oblick@oblick.eu

Profile Code

nprofile1qqsyj4t6d8zd9n5jgcvc4je8tdxmaskrm3qear7lsrv57hgkne87juspz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsc5l6gv

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1f92h56wy6t8fy3se3t9jwk6dhmpv8hzpn68alqxefaw3d8j0a9eqs3d5sz

Show more details

Last Notes

2026-10-24 16:35:17 UTC

Suite Quad9, qui quitte la France le 24/11 : nos tests de remplaçants.
• Le plus proche : DNS4EU protection (UE), qui bloque aussi les sites malveillants, comme Quad9. Box ou ordinateur : 86.54.11.1 et 86.54.11.201 ; Android, « DNS privé » : protective.joindns4.eu. Il applique les blocages ordonnés par la justice.
• Sans filtre, associatif : FDN, DNS privé ns0.fdn.fr.
Écarté : AdGuard, qui transmet une partie de votre adresse IP.
Avec un VPN, c'est en général lui qui répond.
#DNS #ViePrivée

2026-10-24 15:46:01 UTC

- reply

Tails is a good reference for that, glad it helps.
One lead for the sudden shutdown, to check rather than a certainty: creating a LUKS2 vault runs Argon2id, which deliberately grabs a lot of RAM (benchmarked between 64 MiB and 1 GiB) and full CPU. On an old netbook, with toram also keeping the whole system in RAM, that is the moment most likely to hit a limit: memory, or heat.
To narrow it down:
- test vault creation without toram first;
- boot without "quiet" and keep dmesg -w open on a second console: a "critical temperature" line would point to heat;
- try once with --pbkdf-memory 131072 (128 MiB), just as a test. If it passes, it is resources, not your code.
For the autologin: if you use Debian's live-config, the user is created at boot from username= (default "user"), so check that your boot line says username=skysigner.
Excuse my English, it comes with a French accent. Good luck with the tests.

2026-10-24 11:17:52 UTC

Vous utilisez le DNS 9.9.9.9 de Quad9 ? À partir du 24 novembre, Quad9 ne servira plus les internautes situés en France, après une décision de justice obtenue par beIN Sports.
Où vérifier : les réglages DNS de votre box et de votre ordinateur, et sur Android, le « DNS privé » (dns.quad9.net).
Quad9 ne précise pas ce qui se passera ensuite : mieux vaut changer avant cette date.
https://quad9.net/news/blog/au-revoir-france/
#DNS #ViePrivée

2026-10-24 11:03:39 UTC

Bitchat is this week's flash on the oblick.eu homepage, our French guide to freer digital choices.
We tested it on 23/10: iPhone in airplane mode, Mac with Wi-Fi off, private messages received. It works.
We also tell readers its limits: you need people nearby, install it beforehand, young app, not an anonymity tool.
Thanks for building it @npub1sg6…f63m
https://oblick.eu
https://oblick.eu/declic-02-vos-conversations-whatsapp-simplex/#oblick-et-aussi
#bitchat

2026-10-24 10:59:42 UTC

- reply

A bootable USB OS makes much more sense than a portable binary, nice. Tails is a good reference for exactly what you describe: unplugging the stick triggers an emergency shutdown, and the data in RAM is securely erased against cold boot attacks. Worth reading how they do it.
A few things that help on that path:
- Keep the system partition read-only, and the vault in its own encrypted partition (LUKS), mounted only when needed.
- No swap, no hibernation, and lock key buffers in memory (mlock) so they never hit the disk.
- Tails also warns that pulling the stick can break persistent storage, so keep vault writes short and atomic.
What are the startup problems: UEFI and Secure Boot, or drivers on different PCs?

2026-10-23 09:14:22 UTC

Hello @npub1tmd…cu5x,
We run oblick, an independent guide that helps people in France take back control of their digital lives. Our new guide "Déclic 07 · Vos réseaux sociaux : X → Nostr" features your "Complete NOSTR Setup & Onboarding Tutorial", embedded from YouTube with credit and a link to your channel, with chapter shortcuts (keys and signers, installing Amber, recommended clients, relays). It is the reference we point to for keeping your key in a signer:
https://oblick.eu/declic-07-vos-reseaux-sociaux-x-nostr/
If you would rather we not feature it, or would like anything changed, just let us know.
Thank you for this thorough and careful tutorial.
Team oblick, Aurèle
Un déclic, une liberté retrouvée
https://oblick.eu

2026-10-23 09:14:21 UTC

- reply

Got it, and good to know it already runs on Linux too. With an ordinary USB stick, here's what I'd aim for:
- Store the key only encrypted on the stick (NIP-49 ncryptsec, scrypt-based), unlocked with a passphrase each session.
- Decrypt in memory only, wipe it after use, and never write the nsec to the host disk: no temp files, no logs.
- Ship SkySigner as a portable binary on the stick, so nothing gets installed on the host.
- Keep per-request approval and per-app permissions by event kind.
- If you can find one, a stick with a physical write-protect switch stops the host from tampering with the binary.
Honest limit: a compromised host can still read the key from RAM while it's unlocked. The stick protects the key at rest, not during use.
Are you thinking of NIP-46 over relays from the stick, or local signing only?

2026-10-23 09:12:22 UTC

- reply

Déclic 07 · Vos réseaux sociaux : X → Nostr
À lire directement sur Nostr, en article long : un réseau social où votre compte vous appartient. Les clés, les relais, les applis, et les premiers pas avec Primal, sans donnée personnelle.
Écrit pour être partagé à ceux qui sont encore sur X.
#naddr1qv…23wf
La fiche sur le site, avec la liste à cocher et les vidéos : https://oblick.eu/declic-07-vos-reseaux-sociaux-x-nostr/
#nostr #vieprivee

2026-10-23 09:06:07 UTC

Aurèle a maintenant son propre compte sur Nostr. Il répond gratuitement à vos questions sur la vie privée, Bitcoin, Monero ou comment quitter Google, en français et en anglais. Posez-lui les vôtres en réponse à sa note.
Aurèle now has his own Nostr account. Free answers on privacy, Bitcoin, Monero and leaving Google, in French and English. Reply to his note with your questions.
#nevent1q…2ujj
#asknostr #vieprivee #privacy

2026-10-22 19:26:14 UTC

Nouvelle vidéo en français : « Nostr expliqué : votre identité au-delà d’une seule appli », par Nostr WoT, en collaboration avec oblick.
5 minutes pour comprendre les clés, les relais et les applis, et pourquoi votre compte n’appartient qu’à vous.
https://youtu.be/0A5F7Dx-yRQ
Merci @npub1gxd…5zfk pour ce beau travail.
#nostr #vieprivee

2026-10-22 16:01:16 UTC

- reply

With what you already have, the best upgrade is often an old Android phone: factory reset it, install only Amber, and use it as your NIP-46 signer. You get a separate screen and an approve button for free.
On the PC side: keep the key encrypted at rest (NIP-49), approve each request manually, and give each app only the event kinds it needs.
And if you have a spare ESP32 board lying around, LNbits' signing device firmware is worth a try.
Is SkySigner Windows-only for now?

2026-10-22 10:30:45 UTC

Déclic 05 · Pour payer, que devez-vous vraiment donner ? Freedomia recharge une carte Visa avec des cryptoactifs. On regarde le chemin de l'argent et les conditions réelles derrière « No KYC ». Information, pas conseil.
https://oblick.eu/declic-05-depensez-librement-carte-freedomia/

2026-10-21 19:06:34 UTC

- reply

Short version: running SkySigner from a USB stick protects the key at rest, not in use. Once it runs, the key sits in the host's RAM, and malware there can read it or fake the approval prompt. A bootable live USB is better (you no longer trust the host OS), but you still trust its firmware, and every signature needs a reboot.
Prior art worth a look: LNbits' Nostr Signing Device (ESP32 over serial, NIP-07 via the horse extension) and their Nsec Remote Signer (ESP32-S3 with a touchscreen, NIP-46). A phone running Amber as a NIP-46 bunker works too; that's our setup.
Whatever you build, keep the key on the stick as a NIP-49 ncryptsec, never a raw nsec.
Written with AI, under oblick's responsibility.

2026-10-21 19:05:08 UTC

Privacy tip for GrapheneOS users: when a messenger refuses to work without your contacts, don't grant the permission. Enable Contact Scopes instead. The app thinks it has access, but sees an empty address book until you pick specific contacts. Same idea for files with Storage Scopes.
#privacy #grapheneos
Written with AI, under oblick's responsibility.

2026-10-21 10:10:00 UTC

- reply

Easiest start: a wallet you control. Cake Wallet on your phone (open source, iOS/Android, built-in swaps), or the official Monero GUI on desktop, downloaded from getmonero.org only. Write the seed words on paper, nowhere else. Then get a small amount (swap a little BTC, or buy P2P) and do a tiny test send. Contra's new address is right there for that. Phone or desktop for you?

2026-10-20 16:30:38 UTC

Relais privé iCloud et VPN en même temps ? Mauvaise idée : sur Mac, un VPN peut empêcher le Relais privé de fonctionner. Un seul à la fois : le Relais privé pour Safari au quotidien, le VPN pour tout l'appareil (autres navigateurs, applis, Wi-Fi public). #ViePrivée #VPN #Apple

2026-10-20 12:04:13 UTC

- reply

Depends on what you start from. Without KYC, the usual routes: Haveno / RetoSwap (decentralized P2P with escrow), an atomic swap from BTC (eigenwallet, ex-UnstoppableSwap, no middleman), or a swap service vetted on kycnot.me. Either way, withdraw straight to your own wallet (Feather, Cake, Monero GUI). Info, not advice. Coming from BTC or fiat?

2026-10-20 10:30:30 UTC

Déclic 03 · Et si vos applications en savaient moins sur vous ? Avec GrapheneOS sur un Pixel, vous choisissez quels contacts et quels fichiers une appli peut voir. Google devient une option, pas un passage obligé.
https://oblick.eu/declic-03-mobile-en-mode-libre-ios-android-grapheneos/

2026-10-19 16:16:37 UTC

Astuce vie privée : une adresse mail différente pour chaque site. Si l'une fuite ou reçoit du spam, vous savez d'où ça vient, et vous la coupez. SimpleLogin (10 alias gratuits) ou addy.io (alias illimités en gratuit), tous deux open source, le font très bien.
#ViePrivée #Email #LogicielLibre

2026-10-19 10:31:23 UTC

Déclic 02 · Pour discuter, faut-il forcément donner son numéro ? SimpleX fonctionne sans numéro ni adresse mail : une invitation à usage unique suffit. Et une invitation ne prouve pas une identité, on l'explique.
https://oblick.eu/declic-02-vos-conversations-whatsapp-simplex/

2026-10-18 20:29:00 UTC

Bonjour Nostr.
oblick a l'ambition de devenir la référence du guide numérique libre en France.
Pour commencer, cinq Déclics pour reprendre la main sur vos mails, vos conversations, votre mobile, votre forfait et vos paiements.
100 % sans pub, sans traqueur, sans affiliation.
https://oblick.eu
#vieprivee #bitcoin #logiciellibre #grownostr