Tcf362fT131417 LIGHT FIGHTER CHAT T969389~/chat

T969389Mirrors #general from Matrix (one-way) - mesh replies stay on the mesh

T969389Join the Matrix side: Ta6a49e#lfm:matrix.lightfightermanifesto.net Tcf362fhow

Tcf362frefresh Tcf362fwho's here Tcf362fhelp Tcf362fhome

T969389Not identified (anonymous) - see Tcf362fhelp

Name:

Message:

Tcf362fSEND T969389500 chars max

T969389355 messages | Page 4/15 (newest first) Tcf362flive view

T96938917.07.2026 01:51 Ta6a49eFox - Taste Tester™ Ta6a49e[matrix]: Yeah, you're 100% over my head there. Clients, talon, redirect, all words I don't know yet.

T96938916.07.2026 18:31 Ta6a49ecudanet Ta6a49e[matrix]: In the even t an operator will need to be somewhere where they may not have server connectivity, the server can authorize a cold unlock key for up to 7 days.

T96938916.07.2026 18:30 Ta6a49ecudanet Ta6a49e[matrix]: What I want it to do is not allow database unlock until the server verifies that the client has not been revoked. If a revoked client attempts to unlock it's database, the server will send a signal to the client to rotate it's passphrase to a random one, and rekey the databases. All connected clients will then be alerted, and per client key rotation implemented.

T96938916.07.2026 18:29 Ta6a49ecudanet Ta6a49e[matrix]: Right now, even if the server revokes access and tears down the RNS link to a compromised client, if the passphrase for the client is known, the database can still be unlocked. Just like your phone.

T96938916.07.2026 18:28 Ta6a49ecudanet Ta6a49e[matrix]: My next security update in Talon is a feature that prevents unauthorized cold unlock of the database.

T96938916.07.2026 18:28 Ta6a49ecudanet Ta6a49e[matrix]: however, if both you and oatmeal think that I am acting out of an unnecessary abundance of caution, and think that being able to view nomadnet within talon has a benefit, i will keep that and continue to polish it

T96938916.07.2026 18:27 Ta6a49ecudanet Ta6a49e[matrix]: They wanted something secure that they could work with, but since the setup is a bit more than signal there was too much friction. Ultimatly they went back to discord -_-

T96938916.07.2026 18:21 Ta6a49ecudanet Ta6a49e[matrix]: One of the reasons I couldn't get people to use Talon was that the setup was too complex...like...even the install

T96938916.07.2026 18:21 Ta6a49ecudanet Ta6a49e[matrix]: you probably know lots of people that are into computers. Where I live, most everyone I know can barely use windows.

T96938916.07.2026 18:20 Ta6a49ecudanet Ta6a49e[matrix]: no. i'm concerned that jabroneA -a talon user is browsing nomadnet via talon. Nomadnet operatorB wants to have fun, and carries a link on their page which redirects to a clearnet page running a script that then forces the JabroneA's machine to run a script or exhaust it's resources.

T96938916.07.2026 17:19 Ta6a49eFox - Taste Tester™ Ta6a49e[matrix]: (I assure you, I am not tech savvy enough to do that yet, but just trying to understand/clarify what your concern is)

T96938916.07.2026 17:18 Ta6a49eFox - Taste Tester™ Ta6a49e[matrix]: So are you concerned that I, as a viewer of the nomadnet page, can edit the page?

T96938916.07.2026 17:02 Ta6a49ecudanet Ta6a49e[matrix]: absolutely

T96938916.07.2026 16:16 Ta6a49ecudanet Ta6a49e[matrix]: I think also you take my meaning that nomad net itself, as a standalone thing is a security issue. That is not what I am saying

T96938916.07.2026 16:14 Ta6a49ecudanet Ta6a49e[matrix]: Yes, so if that pages is showing something, like a malformed link and a talon user accesses the link, there is a vulnerability exposure. I see now. Dynamic page are hosted on the remote node, and the viewing browser is served thr micron output. So scripting isn't as big a security issue as I was worried about.

T96938916.07.2026 15:55 Ta6a49ePerpetual Motion Ta6a49e[matrix]: If it's showing other data then it's because that page is intentionally showing it?

T96938916.07.2026 15:55 Ta6a49ePerpetual Motion Ta6a49e[matrix]: Nomadnet literally only shows the single mu file

T96938916.07.2026 15:55 Ta6a49ePerpetual Motion Ta6a49e[matrix]: How tho

T96938916.07.2026 15:49 Ta6a49ecudanet Ta6a49e[matrix]: Or the other argument is that since I'm not overly familiar with it, having all talon clients be able to access it is an undefined risk

T96938916.07.2026 15:48 Ta6a49ecudanet Ta6a49e[matrix]: There are dynamic element though? Like I see active elements in pages, like cpu utilization on client machines, solar generations, real time data

T96938916.07.2026 15:43 Ta6a49ethe milk formerly known as oat (got drinked) Ta6a49e[matrix]: it's all static webpages

T96938916.07.2026 15:43 Ta6a49ethe milk formerly known as oat (got drinked) Ta6a49e[matrix]: nomadnet doesn't have a scripting language

T96938916.07.2026 15:42 Ta6a49ecudanet Ta6a49e[matrix]: I realize that what I typed could very easily be read as "the UI that nomadnet uses is trash"

T96938916.07.2026 15:41 Ta6a49ecudanet Ta6a49e[matrix]: Like, nomadnet's UI isn't trash. The UI within TALON for serving nomad net is trash

T96938916.07.2026 15:40 Ta6a49ecudanet Ta6a49e[matrix]: With each client being able to access nomad net, the risk for an executable page injecting a script goes up, or at least I think it does. Thats why I want to create a proxy that scrubs pages first, then serves them to clients. I could be off base, but it seems like a bad idea for each client to have it's own nomad net opening

T969389Page 4/15 Tcf362f<< Newest Tcf362f< Newer Tcf362fOlder > Tcf362fOldest >>

Tcf362fHome Tcf362fWiki Tcf362fPrivacy Tcf362fTG Series Tcf362fChat Tcf362fArticles Tcf362fContact