Last Notes
welcome to software development. There is always an easy and wrong way to do things :)
Unable to resolve this in any shell, configured blossom server isn't returning the blob.
Does it support spawn camping?
Not only build a browser in the app, but run it as a separate process from the OS, so that memory is fully separated from the app by the OS. Which means you have to create a way to render things in one program and send that image to another program to be displayed in the feed via some type of data bus. In that way, the OS can make that process offline without requiring the entire app to be offline. Similarly, the OS can manage permissions for that process regardless of the permissions granted to the app.
Why? I already implemented that as well with a separate process. Full sandboxed. I now we just added the same work to the desktop version, which doesn't have a OS-native browser (we had to add Chromium to play them)
The xdc file is just a zip file with a website. There is no sandbox at that level. The javascript can go crazy. If you just display on a webview, it has full permissions to render anything, since the view is equivalent to an iFrame, which has some protections to avoid mixing data between websites but it is not a sandbox. There is a lot that can go wrong, especially if the host app is vibecoded, which all of the ones you mentioned are these days.
@nprofile…3xq7 @nprofile…vhl6 what's going on here?
Compression works, upload fails
https://slayer.blossom.band/cc019d3e4115e81428daa645ba3296fa18e42b1c7b22e346497248920248c0d6.jpg
Not if they just open in a web view. I have seen all kinds of security issues over the years. All your DMs are visible, they can access the camera, microphone, do a key logging. There are so many forms of attacks. Of course, the default libraries are trying their best to isolate it but the surface layer is absolutely massive, especially when you allow wasm binaries.
Brilliant. Amethyst, leading the pack as usual.
#nevent1q…fsv0
Did we have doom on Nostr before this?
#nevent1q…8ncl
Oh dear god 😵💫
So the whole game is on blossom servers?!
is it possible to have a spreadsheet app inside Amethyst?
Maybe then haven't even realized the damage that running external code in your app can do. Amethyst runs the browser in a separate OS process in a way that disk, cpu and memory are fully isolated from one another. That's 50,000 lines of custom sandbox code just to do that.
Basically, the xdc game can see your nsec/wallet credentials in memory if it wants.
Yep, if you don't care about security, the browser can just share the same memory of the app in a way that they can see each other. Then it's super easy. Kotlin has this baked in. But only because it uses the default installed browser on Android.
There is nothing like that on Kotlin desktop.
Yep. It's just a zip file of html + css + js. Then people put a wasm runtime in there to run more interesting things. You still need a browser/webview somewhere.
It's very easy to do on web clients... We don't have that luxury.
IDDQD
https://blossom.primal.net/cd03fc5819c0c8fd88e5b036a7b5c86a22e1e49f69b0fcae9806d23a0f68117d.png
Amethyst is turning to a nostr hub gradually. It's amazing 👏 #Amethyst
The content of a kind-1040 (OtsEvent) is a base64-encoded binary of a detached OpenTimestamps proof. Its structure consists of: proof header + version + file hash op + target digest + sequence of timestamp ops + attestation. Prior to the fix, Timestamp.deserialize in Quartz processed nested ops recursively with no depth limit. Since an OpSHA256 can be represented in a single byte, a content payload of just a few kilobytes results in thousands of levels of recursion, triggering a StackOverflowError during verification. Because this is an Error rather than an Exception, it bypasses the verifier's catch block and kills the process; furthermore, because the event remains on the relay, the crash recurs on every restart (resulting in a crash loop).
Incrível! Nostr e BTC foram as melhores coisas já criadas!
#nevent1q…k5py
Doom as a nostr nApplet running inside of Amethyst? So be it.
https://nostr.download/bb60cd94185d7340e2cd7c56936ea1cd8f143629c9d231c3245c541740bd4aa0.mp4
Damn, that sucks. I never hit their limit, personally but have you tried asking support for an increase?
Only for small apps. We were in the opensource plan.. But we have too many words in the app.
Crowdin is free for open source bro
how are you lets talk together i like ya style
Jeah this shit right now!
https://nostr.download/14bc662c584f28c65b8f31624346217beb94652f36b4d2b6360b25079876ed31.png
It truly depends on how quickly translators can see new strings and input the translation (and hopefully test it). The only reason to use these platforms is to same people's (non devs) time when helping a project. The bigger the time saved, the better it gets.
That's what Linux is for, one line in x conf and it's gone forever.
Anyone working on a nostr replacement for Crowdin?
It's a tool for translators to quickly translate Amethyst into their language.
They want me to pay $4,300/yr to allow our translators to use the platform.
Stop trying to nobble the competition with your badly formatted posts 😂
https://i.nostr.build/Vtq0sbzfdJnIIcAA9WU474.jpg
https://cdn.satellite.earth/e08a26679acc1b82cec787fb6a3abcfdba5a806d99b238c9da0f8eba3f1b7645.gif
Is this another Clubhouse on Nostr?
#nevent1q…lhup
LOL! I think I just spotted Dorsey walking around https://npub10unfk7ljxnkqqtc5rklgrf5732crycv3lzmjza96da4aha00532qjtscra.blossom.band/2c6979f0d14c718cd66da8243d9b46f0a56d348aafc2a4bbf2bbbacd772e02dd.jpg the neighbourhood 😅
Thanks for fixing this so quickly. I verified the Quartz commits — the depth cap covers exactly the reported root cause, including the ingest-time verifyState path. Happy to test on-device once an Amethyst build shipping the fixed Quartz is out. For credit, npub only is still perfect. Thanks again!
"A vingança nunca é plena, mata a alma e envenena" - Chaves, 1978
😅
Ahh então vc é o culpado?
Velhos tempos, nesta época eu usava Eclipse pra fazer as telas do Swing nos sistemas do GOV[.]br kkkk
So nostr has second life now... Interesting
👀 somehow ancient history, but still recent
The year was 2004, I had just finished adding collision detection to my 3D game engine for J2ME-based mobile OSs. It's funny how so much has changed and also nothing at all.
https://nostr.download/02d6964ddbad48194deb0832517776ff5892d1c2e7b004637d8914e966455d5c.jpg
https://nostr.download/880cc82fa85fce468c486c043b5c042422d3ad2a94fc357473214492346c0679.jpg
So cool: https://sky.obelisk.ar/
