#indieweb 2025-02-18

2025-02-18 UTC
alfiee, ren-, bterry, pka, grufwub, [Murray], nightliife, leflame, tavare, CRISPR, xgpt, jak2k, cedric, GuestZero, rvalue, streety, ttybitnik, karjala, ren, [jeremycherfas], Bitweasil and user23 joined the channel
#
Loqi capjamesg[d] has 82 karma in this channel over the last year (218 in all channels)
#
[Joe_Crawford] capjamesg[d]++ follow up. https://social.anoxinon.de/@philipp/114024003797522812
#
Loqi [preview] [Philipp] @artlung oh nice! thanks for sharing the link. 😍 @cdevroe already found out it was Manuel Moreale https://manuelmoreale.com/i-ll-read-it And by the way: That friend I talked about just started his personal website and I already love it: https:...
#
[Murray] This is cool, fun idea and some neat layout concepts too: https://weeks.ginatrapani.org/
#
capjamesg[d] Yay!
#
Loqi yay!
bterry, alfiee, Pixi and [manton] joined the channel
#
[snarfed] fun new graph visualizer for rel-me etc: https://glider.mythik.co.uk/
GuestZero_ and GuestZero joined the channel
#
[tantek] 👀
alfiee, jak2k, alesr, gRegor, MyNetAz and btrem joined the channel
#
btrem ios has a new(ish?) security feature for imessage. There are verification codes. Does anyone here use them? I looked through my phone, and none of my contacts have it turned on (including, FWIW, a tech worker who has worked on password security software).
#
btrem There's a public verification code that one can publish, Seems to resemble public keys in e.g. encryption. I could put it on my home page, or somewhere on my site. But I wonder if there's any take up in the general public.
#
btrem Along comes Loqi...
#
btrem ...even though this is to my mind not #dev, but rather general indieweb.
ttybitnik, alfiee, nemonical and ren joined the channel
#
btrem Wait. It makes no sense to publish an iMessage verification code when I don't post my phone number, does it?! Hahaha.
#
Loqi haha
MyNetAz joined the channel
#
carrvo Would it be like those verification apps that replace SMS codes? (By the way SMS has no security...)
bterry joined the channel
#
aaronpk i hadn't heard about that yet, trying to find it now in my phone
#
aaronpk it's called "Contact Key Verification"?
alfiee and Pixi joined the channel
#
btrem Yes.
#
btrem And I guess it really is new given that folks here don't know about it. ;-)
#
btrem <carrvo> SMS (i.e. simple texting) has no security. imessage is apparently end-to-end encrypted, but I suppose since most people imessage (and text) via a phone number, still not very secure.
#
btrem I don't know much about it, but I suppose a thief/scam artist might get a new sim card registered with my phone number, and then impersonate me. But they presumably can't log into my apple account, and therefore can't provide a verification code.
#
btrem Hmm. Now that I write that out (but NB I'm guessing at its purpose), that seems like it could be quite useful.
#
btrem It would require banks, credit card companies, et. al. to adopt it, though, for it to be really useful. And I can't imagine banks doing any such thing.
#
aaronpk they do mention sharing the "public verification code" on social media, so I assume people have done this https://support.apple.com/en-us/118246
#
aaronpk this sounds the same as signal's "safety number"
#
btrem Don't know. I don't have social media.
#
btrem I've never heard of signal's safety number.
#
aaronpk https://support.signal.org/hc/en-us/articles/360007060632-What-is-a-safety-number-and-why-do-I-see-that-it-changed
#
aaronpk well as soon as i update the one device on my account that's running too old macos, I will set up contact key verification and add the public number to my website :)
#
btrem Yes, looks the same. I only have one device signed in to imessage, my iphone. I could add it to my site now. But I wonder if there's been any adoption. As I said earlier, no one in my contacts appears to have turned it on. :-/
#
btrem aaronpk: is your phone number on your website?
#
aaronpk my imessage email address is
#
btrem Hmm, never thought to do that. I could put an imessage email address on my site.
alfiee joined the channel
#
gRegor I recently linked my Signal username so I don't have to give out the number
#
btrem gRegor: what is your Signal username? I could maybe publish that. Apple accounts can have email addresses added to it. So I just added an email that will be dedicated to imessage. I'm going to have someone test it for me, and if it works ok, I might publish that to my site, along with the verification code.
#
btrem Sorry, what I meant was not what specifically is your Signal username, but what is it generally. I.e., how would I determine mine?
#
[snarfed] also publishing your verification code (for any E2EE messaging app) can be useful even without publishing your address/phone #
#
gRegor https://signal.org/blog/phone-number-privacy-usernames/
#
gRegor It's on my https://gregorlove.com/follow/ page, which is sort of a hybrid follow/contact page. I need to sort that out, heh
#
[snarfed] if you know someone's web site, and it serves over HTTPS, you can trust it as a way to get their verification code outside of the messaging app itself, which is what you need
#
btrem gRegor++ thanks. I actually just found it on the Signal app. (After a bit of poking around.)
#
Loqi gRegor has 11 karma in this channel over the last year (114 in all channels)
#
btrem gRegor: I set up a username in Signal. But it's warning me "Only share your username with people you trust." Do you simply ignore the warning?
#
gRegor Personally I'm not concerned. I think it's a (reasonable) warning that "hey, anyone with signal can send you a message request with this", which could be undesired.
#
gRegor iirc it is only one initial request message until the recipient accepts it, so I don't think one account can spam you
#
gRegor This might be better for dev or random chat, realizing. Only tangentially related in that I link it on my site, haha
#
btrem Well, maybe related to indieweb. https://indieweb.org/communication
#
gRegor You can also change or delete the username, so it doesn't have to be permanent
#
btrem Ok, I'll think on it a bit, but probably will post it on a new contact page.
alfiee, sebbu2, aelaraji6, jmjl, aelaraji2 and lanodan joined the channel