Nostr notes by Henryk Plötz

How ChatControl passed in the EU parliament. ...

2026-07-10T06:37:17Z

How ChatControl passed in the EU parliament.

I'll note that this happened on a modern mobile phone, the ...

2026-07-04T12:37:53Z

In reply to nevent1q…jv00
_________________________

I'll note that this happened on a modern mobile phone, the most secure computing platform currently available. Logins simply should not "expire". There's nothing that makes a high-entropy token in secure storage suddenly go bad.

If you're confused enough to also then treat the same device as very trusted, that's just icing on the cake.

Even more: the token flow didn't work and I had to instead get an OTP by email. One of the, ahem, less secure transports. So the entire theater just collapsed.

The absolute brain damage that developers have sustained when ...

2026-07-04T12:34:31Z

The absolute brain damage that developers have sustained when being subjected to "login expired" messages at a formative age without anyone telling them that this is not normal and should not be emulated.

Just now: "Your login session has expired, please log in again" … "another device is logged in to the account, please enter the token code shown on the other device".

So… the device is logged out because it might be untrusted, but is also the root of trust for new logins?

Cool.

The correct[tm] Currywurst is Curry 36 at Zoo. Take the FEX ...

2026-07-03T20:38:33Z

In reply to nevent1q…lkdg
_________________________

The correct[tm] Currywurst is Curry 36 at Zoo. Take the FEX Airport Express from BER to Hauptbahnhof, then any westerly S train to Zoologischer Garten.
(Alternatively S9 goes direct from BER to Zoo.)

One of the phrases from Dollhouse (2009) that will forever live ...

2026-05-15T01:26:07Z

In reply to nevent1q…ttfn
_________________________

One of the phrases from Dollhouse (2009) that will forever live rent-free in my head is "drawer of inappropriate starches" (https://www.imdb.com/title/tt1216527/quotes/?item=qt0530408).

I have since striven to maintain one at work at all times.

Well, either that, or a bronze age Nanoraptor having a bit of fun ...

2026-05-14T10:19:07Z

In reply to nevent1q…rmh4
_________________________

Well, either that, or a bronze age Nanoraptor having a bit of fun with a T-shaped bison that only has left legs.

Weil wir Menschen wirklich schlecht sowohl in großen Zahlen als ...

2026-05-05T08:51:55Z

In reply to nevent1q…nvdg
_________________________

Weil wir Menschen wirklich schlecht sowohl in großen Zahlen als auch in logarithmischen Maßen sind, muss das immer mal wieder laut gesagt werden:

Der Unterschied zwischen einer Million und einer Milliarde ist ungefähr: eine Milliarde.

Ok, fellow hackers, I propose a pact: That new EU age ...

2026-04-17T18:04:42Z

Ok, fellow hackers, I propose a pact: That new EU age verification app thingy ... do NOT help improve it.

Don't publish findings. Don't responsibly disclose insecurities. Don't facilitate them making it bulletproof.

If personal data is directly at risk, by all means, slam their asses into the ground. GDPR them into oblivion.

But on its core functionality this needs to be, to become, and to stay, the most insecure, the most easily circumventable piece of shit code on the planet.

Fun tidbit: The opposite is true now. In order to prevent ...

2026-03-03T13:29:36Z

In reply to nevent1q…rlug
_________________________

Fun tidbit: The opposite is true now.

In order to prevent cross-domain tracking by observing cache hits, Browsers will not use a cached Google font across multiple domains. You gain nothing from using Google Fonts.

But, because it's an extra host, the browser will need to do the whole DNS/TCP/TLS dance to fetch the file, small as it may be, so you're getting additional latency compared to just downloading the file from the server it's already connected to.

They also removed this paragraph from their official blog post: ...

2026-01-28T09:03:36Z

In reply to nevent1q…zstr
_________________________

They also removed this paragraph from their official blog post:

> Matrix on Workers runs in production today, handling real encrypted communications for our team. It is fast, it is cheap, and it is arguably one of the most secure ways to deploy a homeserver today.

So, next time Cloudflare wants to tell us something about what they do "in production today", we'll have a frame of reference for how credible that is.

Na sind sie doch, aber Tag 0 hatte halt noch kein ...

2025-12-29T17:54:36Z

In reply to nevent1q…932c
_________________________

Na sind sie doch, aber Tag 0 hatte halt noch kein Hauptbühnenprogramm.

Personally, I'm very partial to this one. (The Sovereign Tech ...

2025-11-18T12:49:39Z

In reply to nevent1q…ttej
_________________________

Personally, I'm very partial to this one.

(The Sovereign Tech Fund is a German government funded initiative to improve resilience of our tech stack.)

It spent 10 minutes on this?! Now, while in principle I have ...

2025-10-01T19:33:33Z

In reply to nevent1q…xys4
_________________________

It spent 10 minutes on this?!

Now, while in principle I have nothing against sub-second, one-shot inferences, I must say that blasting a couple hundred watts for 10 minutes does not appear entirely appropriate if all you get is this kind of output.

I'd object even before that: Bitcoin does not exist in a ...

2025-08-30T15:49:58Z

In reply to nevent1q…9scf
_________________________

I'd object even before that: Bitcoin does not exist in a vacuum. It needs a substrate. Who's going to run the miners and how are they going to pay their utility companies?

Wir müssen bitte was schaffen? ...

2025-05-16T07:56:36Z

Wir müssen *bitte was* schaffen?

https://social.bund.de/@Cyberagentur/114511939436500746

There's a totally hypothetical extended version of this ...

2025-03-25T07:32:29Z

In reply to nevent1q…x9fj
_________________________

There's a totally hypothetical extended version of this diagram.

Five and a bit. Spent a lot of time in Kidspace, but also ...

2024-12-31T13:29:16Z

In reply to nevent1q…v7vh
_________________________

Five and a bit. Spent *a lot* of time in Kidspace, but also enjoyed walking everywhere with us.

Ok, kid is now part of chaos. First thing she did at home is set ...

2024-12-31T11:36:57Z

Ok, kid is now part of chaos. First thing she did at home is set up a sticker table for us. #38c3

I have the Pebblebee, and one Motorola. The Motorola UWB ...

2024-12-14T12:31:58Z

In reply to nevent1q…t6e4
_________________________

I have the Pebblebee, and one Motorola. The Motorola UWB isn't actually active yet (scheduled for a future software update). I bought a couple more pebblebees and they work well so far (also the audio to help you find it is *much* louder than Motorola).
My biggest gripe is that it's *only* in the Find My Device app, and I can't, for example, integrate into Home Assistant.
Working on it though ;)

Check dmesg, there should be a more verbose kernel error. (Most ...

2024-11-22T12:45:35Z

In reply to nevent1q…cff5
_________________________

Check dmesg, there should be a more verbose kernel error. (Most likely: Your distribution did not install the module by default.)

Yes, Wireshark can sniff USB both on your Linux host and (I ...

2024-11-22T12:40:25Z

In reply to nevent1q…jtxs
_________________________

Yes, Wireshark can sniff USB both on your Linux host and (I believe) the Windows guest.
On Linux you could also use the "usbmon" kernel module directly (which is what Wireshark's using).
https://wiki.wireshark.org/CaptureSetup/USB
https://docs.kernel.org/usb/usbmon.html

Tough choice. ...

2024-08-24T07:42:51Z

In reply to nevent1q…gq0n
_________________________

Tough choice.

Nostr event nevent1qqsw57htlqqjx5mlvvq5p2huptcqw9s4gnksmv2gf4vfd43ze07ac8qzypl2ht4ttq8h2dxydd4l5t3q3h6x5tztv7sne82wr97v5h3a4a2nccymyxj

2024-05-26T21:06:36Z

https://blog.ploetzli.ch/2024/should-i-use-jwt-for-authentication/