Thread

Zero-JS Hypermedia Browser

Relays: 5
Replies: 83
Generated: 18:45:52
Login to reply

Replies (83)

Bitchat might not work as intended though, and here is why. Bluetooth communication can be captured using specialized hardware and software tools designed for packet sniffing and man-in-the-middle (MITM) attacks. nRF Sniffer for Bluetooth LE, Ubertooth, or Gattacker can be used to monitor and capture traffic between devices. It's definitely more secure and depends on the Bluetooth version and encryption, but it's not immune. So as the app and its code have not undergone external security review, and the project's own developers explicitly warn against using it for production or high-risk communications, its security is still under review. A major flaw allows attackers to impersonate trusted contacts by exploiting the "Favorites" function, and a potential buffer overflow bug has been reported. For here and there, itโ€™s awesome to use. But for the world that needs it (I.e Iranโ€™s authoritarianist regime shutting off internet), these vulnerabilities make a huge impact. PS- would appreciate a reply back in the DMs lol
2025-08-22 07:44:00 from 1 relay(s) โ†‘ Parent Reply
Join us at the deep sea "21m". nostr:nprofile1qqsgydql3q4ka27d9wnlrmus4tvkrnc8ftc4h8h5fgyln54gl0a7dgspxdmhxue69uhkuamr9ec8y6tdv9kzumn9wshkz7tkdfkx26tvd4urqctvxa4ryur3wsergut9vsch5dmp8pesz9nhwden5te0wfjkccte9ehx7uewwdhkx6tpdswfvru5 nostr:npub1luh5e4uxus45xgm5njg4zlk8htezmlgrtdapqxl2swmw9096e52sgjlqgz image nostr:nevent1qqsdtpytt3y5am2gd0zgt54k73exdas2vyawkg6uwrvkdahs3fv0jygpzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhg7mhdpt
2025-08-22 08:14:17 from 1 relay(s) โ†‘ Parent 8 replies โ†“ Reply
2025-08-22 08:55:46 from 1 relay(s) โ†‘ Parent Reply
2025-08-22 08:56:09 from 1 relay(s) โ†‘ Parent 1 replies โ†“ Reply
2025-08-22 08:56:28 from 1 relay(s) โ†‘ Parent 1 replies โ†“ Reply
2025-08-22 08:57:01 from 1 relay(s) โ†‘ Parent 1 replies โ†“ Reply
2025-08-22 08:57:31 from 1 relay(s) โ†‘ Parent 1 replies โ†“ Reply
2025-08-22 08:58:02 from 1 relay(s) โ†‘ Parent Reply
2025-08-22 08:59:08 from 1 relay(s) โ†‘ Parent Reply
2025-08-22 08:59:37 from 1 relay(s) โ†‘ Parent Reply
When you initially released bitchat on the App Store and I downloaded it, I was immediately able to find the <slap with a large trout> command. Now I canโ€™t find it anymore. I guess Iโ€™ve lost my bitchat intuition. Is it because Iโ€™m alone (slapping myself silly)? Pls help. Also, could we possibly slap others with other types of fishes such as snapper or tuna? Maybe salmon. Thanks.
2025-08-22 11:57:15 from 1 relay(s) โ†‘ Parent Reply
When will you stop pushing unsafe tech? New Vulnerabilities: In 2025, several new vulnerabilities have been reported, including: CVE-2025-32875: Insufficient authentication during Bluetooth binding, allowing unauthorized devices to connect during initial setup. CVE-2025-32876: Weakness in the encryption process during Bluetooth handshakes, particularly in certain Android environments. CVE-2025-44559: A Denial of Service (DoS) vulnerability in the Bluetooth Low Energy (BLE) stack, allowing attackers to disrupt services by sending crafted packets.
2025-08-22 12:16:58 from 1 relay(s) โ†‘ Parent Reply
I come here for this thing , just uninstalled bitchat since 0.9.0 DOES NOT MISMATCH IDS and zapstore install a new app, very bad practices , you can clarify what's going on? nostr:nprofile1qqs9pk20ctv9srrg9vr354p03v0rrgsqkpggh2u45va77zz4mu5p6ccpzemhxue69uhk2er9dchxummnw3ezumrpdejz7qgkwaehxw309a5xjum59ehx7um5wghxcctwvshszrnhwden5te0dehhxtnvdakz7qrxnfk nostr:nprofile1qqsgydql3q4ka27d9wnlrmus4tvkrnc8ftc4h8h5fgyln54gl0a7dgsppemhxue69uhkummn9ekx7mp0qythwumn8ghj7un9d3shjtnswf5k6ctv9ehx2ap0qyt8wumn8ghj7un9d3shjtnddaehgu3wwp6kytc79p4zh
2025-08-22 14:56:11 from 1 relay(s) โ†‘ Parent Reply
I think .android was the original one, but nostr:nprofile1qqs9pk20ctv9srrg9vr354p03v0rrgsqkpggh2u45va77zz4mu5p6ccpzemhxue69uhk2er9dchxummnw3ezumrpdejz7qgkwaehxw309a5xjum59ehx7um5wghxcctwvshszrnhwden5te0dehhxtnvdakz7qrxnfk had to change the App ID to .droid due to some 'ptoblems' publishing the app on the Play Store. ๐Ÿซ‚
2025-08-22 15:13:14 from 1 relay(s) โ†‘ Parent 1 replies โ†“ Reply
It would be super cool if you had the balls to say something about what is going on with girls and cameras and bcis and how I can never have anything in my life for Arielle to have fun with my body and life at my own expense around the country and above the law in constant isolation because sheโ€™s psychotic psychotically obsessed with women and trying to start a mass shooting and ditch town nostr:npub1sg6plzptd64u62a878hep2kev88swjh3tw00gjsfl8f237lmu63q0uf63m
2025-08-24 19:05:09 from 1 relay(s) โ†‘ Parent Reply
I asked 5 Thinking (rarely use) bout spam optimal solution, itโ€™s funny cause it goes through your GitHub stuff when reasoning that is way over my head. Cute that it does that. This is what it said: Today(no code) -use password channels for real conversations (interesting but like Iโ€™m sure spam will keep getting access to unless changed daily, maybe tire it out :) -Use built-in/block @name for obvious spam and keep local blocklists. Building tomorrow -layer 1: simple flood & duplicate control with token-bucket rate limits and as mesh already uses TTL routing, in busy venues, reduce hop TTL to shrink the attack surface. Layer 2: -Require tiny POW per public message. Layer3: -Per-key trust scores, new keys start in probation(slow rate) and include relay policy where nodes deprioritise or refuse to forward from low-reputation keys (oof hope thatโ€™s not my key) Layer 4 -First-time posters must complete in-room handshake ๐Ÿค like your QR idea or get a trust reaction from non-newbie before normal rates apply. -Invite links for channels with password + short-lived QR code for events. Layer 5 -ship a tiny Core ML text model to score spammy patterns which works for offline damping of bots (be interesting if you can get this embedded into iOS bitchat app) How to geohash without doxxing: -Channel geofence where rooms require senders to be inside target geohash cell (e.g., precision 6 โ‰ˆ ~1km, 7 โ‰ˆ ~150-200 m) -witness attestations from nearby devices with truncated geohash, not raw coordinates. -pop-up room with rotating QR or 6 digit code as proximity ticket, first time posters scan or enter, afterward post for grace period 24hr. Ok, well thatโ€™s it from me, hope it helps. P.S. I swear I am not spam. Cc nostr:npub12rv5lskctqxxs2c8rf2zlzc7xx3qpvzs3w4etgemauy9thegr43sf485vg
2025-08-26 02:36:10 from 1 relay(s) โ†‘ Parent 1 replies โ†“ Reply