comicscamp.club is part of the decentralized social network powered by Mastodon.
A friendly home in the Fediverse for creators and lovers of comics and narrative art of all sorts.

Server stats:

27
active users

Learn more

#webapp

0 posts0 participants0 posts today
@FediTips Interessant war der Hinweis auf Web App. #Friendica lässt sich als #WebApp ohne die zusätzliche Last des Browser auf dem Desktop als Icon speichern. Wer nicht auf eine dedizierte App warten möchte und mit der Webseite zurecht kommt, für den ist das eine tolle Lösung. Ich schreibe den Kommentar gerade in der Web App und bin völlig zufrieden.

Danke auch an diejenigen Administratoren die dies möglich gemacht haben
friendica-leipzig.deFriendica Social Network (Leipzig) | Search

id like to share some details about how my app works so you can discover/give me feedback on my app. id like to have wording in my app to say something like "most secure chat app in the world"... i probably cant do that because it doesnt qualify.

github.com/positive-intentions

positive-intentions.com/blog/i

im not an expert on #cyberSecurity. im sure there are many gaps in my knowlege in this domain.

using #javascript, i initially created a fairly basic #chatApp using using #peerjs to create #encrypted #webrtc #connections. this was then easily enhanced by exchanging additional #encryption #keys from #cryptography functions built into browsers (#webcrypto api) to add a redundent layer of encryption. a #diffieHelman key #exchange is done over #webrtc (which can be considered #secure when exchanged over public channels) to create #serverless #p2p #authentication.

- i sometimes recieve feedback like "javascript is inherently insecure". i disagree with this and have #openedSource my #cryptography module. its basically a thin wrapper around vanilla cryptography functions of a #browser (webcrypto api).

- another concern for my kind of app (#PWA) is that the developer may introduce malicious code. this is an important point for which i open sourced the project and give instructions for #selfhosting. selhosting this app has some unique features. unlike many other #selfhosted #projects, this app can be hosted on #githubPages (instructions are provided in the readme). im also working towards having better support for running the index.html directly without a static server.

- to prevent things like browser extensions, the app uses strict #CSP headers to prevent #unauthorised code from running. #selfhosting users should take note of this when setting up their own instance.

- i received feedback the #Signal/#Simplex protocol is great. completely undertsandable and agree, but wonder if im reducing the #complexity by working with #webrtc. while it has its many flaws, i think risks can be reasonable mitigated if the #cryptography functions are implemented correctly. (all data out is #encrypted and all data in is #decrypted on-the-fly)

- the key detail that makes this approach unique, is because as a #webapp, unlike other solutions, users have a choice of using any #device/#os/#browser. while a webapp can have nuanced #vulnerabilities, i think by #openSourcing and providing instructions for #selfhosting and instructions to #build for various #platforms, it can provide a reasonable level of #security.

i think if i stick to the principle of avoiding using any kind of "required" service provider (myself included) and allowing the #frontend and the peerjs-server to be #hosted #independently, im on track for creating a #chatSystem with the "fewest moving parts". i hope you will agree this is true #p2p and i hope i can use this as a step towards true #privacy and #security. #security might be further improved by using a trusted #VPN.

while there are several similar apps out there like mine. i think mine is distinctly a different approach. so its hard to find #bestPractices for the functionalities i want to achieve. in particular #security practices to use when using #p2p technology.

(note: this app is an #unstable, #experiment, #proofOfConcept and not ready to replace any other app or service. It's far from finished and provided for #testing and #demo purposes only. This post is to get #feedback on the progress to determine if i'm going in the right direction for a secure chat app)

Decentralized chat. Contribute to positive-intentions/chat development by creating an account on GitHub.
GitHubGitHub - positive-intentions/chat: Decentralized chatDecentralized chat. Contribute to positive-intentions/chat development by creating an account on GitHub.

So... I left Evernote months ago when they hiked their pro plan subscription (like 163% !) It was bloated, and their *free* plan was crippled; that + the company had been struggling for years to find a CEO who could bring *some* kind of vision back to the app. It all flopped and they were sold to Bending Spoons.

Over the ensuing months, I was fortunate to find a replacement! An Open Source, fully encrypted, Evernote killer. And what a note taking app it has become.

A major release (v3.0) was launched officially today. 8 months of non-stop development and testing by a two-man Dev team has really brought this app center stage. These guys are hands-on with listening to user feedback on their NN Discord server; when they find time to sleep beats me (the plight of the developer).
Read about this latest journey AND all of the great new features of v3.0 that are note-taking game changers, on their blog post:

blog.notesnook.com/introducing

You're going to hear more about Notesnook in the weeks and months to come and it won't be coming from me. It will be from a growing userbase that can't help but share the awesomeness that Notesnook brings to notetaking.

@notesnook #notesnook #notetaking #opensource #encryption #productivity #evernote #android #windows #ios #webapp #webclipper

From August 2023 to April 2024, after 8 months, 1000+ commits, and countless sleepless nights v3 is finally here — the biggest, most feature packed release in the history of Notesnook.
Notesnook Blog by Streetwriters LLCIntroducing Notesnook v3From August 2023 to April 2024, after 8 months, 1000+ commits, and countless sleepless nights v3 is finally here — the biggest, most feature packed release in the history of Notesnook.

@jensimmons Unfortunately #Safari's quirks regarding to basic #webapp features (icon, theme color, ...) requires hundreds of tests to determine what works and what doesn't 😥

atnbueno.com/experiments/ios-p

This has caused me IE6 flashbacks 😬

It was so disappointing to see that the only things that work are the ones shown in the example of the "What’s new in web apps" session. Nothing more, nothing less.

www.atnbueno.comiOS PWA tests

Um Dateien über das #Internet von Gerät zu Gerät sicher zu übermitenl ist #MagicWormhole sicher eine Lösung. Ein cool gestaltetes #WebApp um es zu nutzen gibt es ebenfalls, das #Wormhole. Wenn die #Daten nicht zufälligerweise öffentlich aufliegen sollten, dann ist dies eine Lösung bei der #E2EE funzt ohne zusätzliche Datensammlung.

☄️ wormhole.app

P.S. Ich hatte dies schon mal vor langer Zeit hier geteilt.

WormholeWormhole - Simple, private file sharingWormhole lets you share files with end-to-end encryption and a link that automatically expires.

Apple has already decided to disable Progressive Web Apps (PWAs) in the EU, but PWA developers in the EU should have an option to run and test their PWA apps on an real iPhone for users outside the EU.

A developer mode or Safari feature flag to enable PWAs would suffice.

#iOS#PWA#WebApp

OMG this is a great #Mastodon #webapp: Phanpy (#phanpysocial / #phanpy): phanpy.social

I’m kind of digging web apps again. Not surprising really since I’m #selfhosting my own web ‘apps’ of sorts (e.g. #docker apps with web GUIs, so technically web apps?) Like web apps feel so much more liberating than OS-based apps.

Here's another great [self-hosted] ‘web app’: Flatnotes (github.com/dullage/flatnotes) for #notetaking.

phanpy.socialPhanpyMinimalistic opinionated Mastodon web client