[-] Ward@lemmy.nz 13 points 5 months ago

Waterfox is a neat project, but is often slow to implement security patches from Firefox upstream.

30
submitted 6 months ago by Ward@lemmy.nz to c/privacy@lemmy.ml

Materialious now can be used as a Desktop or Android application. Allowing it to be used for any Invidious instance!

https://github.com/Materialious/Materialious/tree/main?tab=readme-ov-file

21
submitted 6 months ago by Ward@lemmy.nz to c/privacyguides@lemmy.one

Hello, I'm the developer behind Materialious. Perhaps you came across my post a few weeks back regarding the launch of my Material design frontend for Invidious.

I'm reaching out to gauge interest in expanding Materialious to serve as a unified interface for TikTok (Via Proxitok), Twitch (Via SafeTwitch), YouTube (Via Invidious), and potentially even search (Via SearxNG).

I'd love to hear your ideas and thoughts on this!

[-] Ward@lemmy.nz 10 points 7 months ago

Maybe with the Materialious frontend

https://github.com/WardPearce/Materialious

Cough cough might be a plug

[-] Ward@lemmy.nz 10 points 7 months ago

Yea the slider was the default component vidstack uses, I do agree it would be a good idea to use a drop down instead.

[-] Ward@lemmy.nz 14 points 7 months ago* (last edited 7 months ago)

Materialious uses ReturnYouTubeDislikes for dislikes and likes, this option can be disabled in settings.

[-] Ward@lemmy.nz 17 points 7 months ago

This interface uses the Invidious API. So if YouTube breaks Invidious & Materialious, once Invidious is fixed, Materialious is also fixed.

[-] Ward@lemmy.nz 26 points 7 months ago

fair enough! Materialious very much meant for people who use Invidious and are comfortable with JS.

251
submitted 7 months ago by Ward@lemmy.nz to c/piracy@lemmy.dbzer0.com

For the last month I've been working on a modern, material you interface for Invidious.

Github (Leave a star if you want)

Hosted instance

Features

  • Sponsorblock built-in.
  • Return YouTube dislikes built-in.
  • Video progress tracking & resuming.
  • No ads.
  • No tracking.
  • Light/Dark themes.
  • Custom colour themes.
  • Integrates with Invidious subscriptions, watch history & more.
  • Live stream support.
  • Dash support.
  • Chapters.
  • Audio only mode.
  • Playlists.
  • PWA support.

35
submitted 7 months ago by Ward@lemmy.nz to c/selfhost@lemmy.ml

For the last month I've been working on a modern, material you interface for Invidious.

Github (Leave a star if you want)

Hosted instance

Features

  • Sponsorblock built-in.
  • Return YouTube dislikes built-in.
  • Video progress tracking & resuming.
  • No ads.
  • No tracking.
  • Light/Dark themes.
  • Custom colour themes.
  • Integrates with Invidious subscriptions, watch history & more.
  • Live stream support.
  • Dash support.
  • Chapters.
  • Audio only mode.
  • Playlists.
  • PWA support.

91
submitted 7 months ago by Ward@lemmy.nz to c/foss@beehaw.org

For the last month I've been working on a modern, material you interface for Invidious.

Github (Leave a star if you want)

Hosted instance

Features

  • Sponsorblock built-in.
  • Return YouTube dislikes built-in.
  • Video progress tracking & resuming.
  • No ads.
  • No tracking.
  • Light/Dark themes.
  • Custom colour themes.
  • Integrates with Invidious subscriptions, watch history & more.
  • Live stream support.
  • Dash support.
  • Chapters.
  • Audio only mode.
  • Playlists.
  • PWA support.

128
submitted 7 months ago by Ward@lemmy.nz to c/privacyguides@lemmy.one

For the last month I've been working on a modern, material you interface for Invidious.

Github (Leave a star if you want)

Hosted instance

Features

  • Sponsorblock built-in.
  • Return YouTube dislikes built-in.
  • Video progress tracking & resuming.
  • No ads.
  • No tracking.
  • Light/Dark themes.
  • Custom colour themes.
  • Integrates with Invidious subscriptions, watch history & more.
  • Live stream support.
  • Dash support.
  • Chapters.
  • Audio only mode.
  • Playlists.
  • PWA support.

225
submitted 7 months ago* (last edited 7 months ago) by Ward@lemmy.nz to c/privacy@lemmy.ml

For the last month I've been working on a modern, material you interface for Invidious.

Github (Leave a star if you want)

Hosted instance

Features

  • Sponsorblock built-in.
  • Return YouTube dislikes built-in.
  • Video progress tracking & resuming.
  • No ads.
  • No tracking.
  • Light/Dark themes.
  • Custom colour themes.
  • Integrates with Invidious subscriptions, watch history & more.
  • Live stream support.
  • Dash support.
  • Chapters.
  • Audio only mode.
  • Playlists.
  • PWA support.

85
submitted 11 months ago by Ward@lemmy.nz to c/privacyguides@lemmy.one

With simple messager selling out & qksms no longer being actively worked on. What's our options for open source sms messagers?

Should I dedicate time to learning flutter and building my own or does anyone know any cool foss projects working on this issue?

46
submitted 1 year ago by Ward@lemmy.nz to c/privacyguides@lemmy.one

Thought I'd share a little side project I've been working on.

Omitme is a open-source, free CLI tool (& work-in-progress GUI) for managing your data on platforms like Discord & Reddit. It's built to be expandable & generic making it easy for Omitme to work on any platform.

Learn more on our Github

[-] Ward@lemmy.nz 11 points 1 year ago

Agreed, should have an alart for missed canaries. Each canary has "statements" you publish new statements to update ur canary. This provides a signed record of passed canaries.

Browser extension or even mobile app could be another aspect of further securing validation. Currently we do store a offline backup for each public key in idb storage & a signed copy if you have a account for further validation if the URL hash has been tampered with.

Thank you for your kind words ❤️❤️

86
submitted 1 year ago* (last edited 1 year ago) by Ward@lemmy.nz to c/privacyguides@lemmy.one

Github: https://github.com/WardPearce/Purplix.io

View our canary: https://purplix.io/c/purplix.io/3ZjhTlZRWv8iqa6sn9yJ3TRiIkVbwITOOlwLjJD36jQ

What is Purplix Canary?

Purplix Canary is a free & open source warrant canary tool what helps you to build trust with your users.

It allows you to inform users cryptographically if your site has been compromised, seized or raided by anyone.

How does it work?

Site verification

Purplix uses DNS records to verify the domain the canary is for, giving your users confidence they are trusting the right people.

Canary signatures

Each domain is associated with a unique key pair. The private key is generated locally and securely stored within the owner's keychain. When a user visits a canary from a specific domain for the first time, their private key is used to sign the public key. This signed version of the public key is then automatically employed for subsequent visits, effectively mitigating man-in-the-middle attacks and ensuring the trustworthiness of canary statements from the respective domain.

Files

Canaries can include signed documents to help users further understand a situation.

Notifications

Users are automatically notified on the event of a new statement being published.

155
submitted 1 year ago by Ward@lemmy.nz to c/privacy@lemmy.ml

Visit our site: https://purplix.io

Support us on Github: https://github.com/WardPearce/Purplix.io

What is Purplix Survey?

Purplix Survey is a free & open source survey tool what can't read your questions & answers.

With traditional surveys you are one data breach, one rouge employee or one government warrant away from all your user's data being exposed. Purplix uses modern encryption techniques to keep your user's data away from any actors.

How does it work?

Questions, Descriptions & Title encryption

When you create a survey, we encrypt your title, descriptions & questions with a secret key. This key is then stored encrypted in your keychain. When you share your survey with others using a link, the key is stored in the link for your participants. This ensures that your survey questions can only be read by your participants.

Answers encryption

Every survey has its own unique key pair. The private key is securely stored in your keychain, while the public key is used by users to encrypt their answers. Only you have the means to decrypt the answers once they are submitted. When you share a survey, we include a hash of the public key in the URL to prevent main-in-the-middle attacks.

Preventing spam & multiple submissions

Survey creators can opt-in to use VPN blocking, requiring a Purplix account or IP blocking. IP blocking works by storing a hash of the IP salted with a key not stored by Purplix, minimizing the attack surface of tracking submission locations, these IP hashes are only stored for 7 days or until the survey closes. Users will always be informed when any of these features are enabled.

Fill out a survey!

https://purplix.io/s/651e32f0ab4897a99d28ea0e/CCpu5Nd8guMbuEw-jIEv10l6ICSvdCr84AtRYf9fPWk#905wt-r_OcvYfhQKhdS2Cjc1HXm7Vw6W_sm--9GkaOw

----

[-] Ward@lemmy.nz 12 points 1 year ago

has been a old and off project for a few months. Would call it niche in terms of people who care about e2ee tools, but in general how insecure surveys are shouldn't be as common place as it is.

156
submitted 1 year ago by Ward@lemmy.nz to c/privacyguides@lemmy.one

Visit our site: https://purplix.io

Support us on Github: https://github.com/WardPearce/Purplix.io

What is Purplix Survey?

Purplix Survey is a free & open source survey tool what can't read your questions & answers.

With traditional surveys you are one data breach, one rouge employee or one government warrant away from all your user's data being exposed. Purplix uses modern encryption techniques to keep your user's data away from any actors.

How does it work?

Questions, Descriptions & Title encryption

When you create a survey, we encrypt your title, descriptions & questions with a secret key. This key is then stored encrypted in your keychain. When you share your survey with others using a link, the key is stored in the link for your participants. This ensures that your survey questions can only be read by your participants.

Answers encryption

Every survey has its own unique key pair. The private key is securely stored in your keychain, while the public key is used by users to encrypt their answers. Only you have the means to decrypt the answers once they are submitted. When you share a survey, we include a hash of the public key in the URL to prevent main-in-the-middle attacks.

Preventing spam & multiple submissions

Survey creators can opt-in to use VPN blocking, requiring a Purplix account or IP blocking. IP blocking works by storing a hash of the IP salted with a key not stored by Purplix, minimizing the attack surface of tracking submission locations, these IP hashes are only stored for 7 days or until the survey closes. Users will always be informed when any of these features are enabled.

Fill out a survey!

https://purplix.io/s/651e32f0ab4897a99d28ea0e/CCpu5Nd8guMbuEw-jIEv10l6ICSvdCr84AtRYf9fPWk#905wt-r_OcvYfhQKhdS2Cjc1HXm7Vw6W_sm--9GkaOw

----

[-] Ward@lemmy.nz 26 points 1 year ago

Certbot is great when using Nginx (or Apache2), but if you can use a different engine. Its worthwhile checking out Caddy!

[-] Ward@lemmy.nz 9 points 1 year ago* (last edited 1 year ago)

Thought this comment he made was odd about Proton mail.

The site is filled by beautiful black screen without JavaScript enabled.

Like yes, its a bit difficult implementing local encryption or decryption without js enabled.

Has some good messaging, I'd say most of his comments are pretty widely known concerns or limitations.

Like obviously web apps still rely on trust from the host, but it minimizes the attack surface massively.

[-] Ward@lemmy.nz 7 points 1 year ago* (last edited 1 year ago)

E2EE meaning survey questions and answers are encrypted locally & decrypted locally. The server or any other actors can't view survey questions aside from users its shared with and survey answers are only readable by the owner of such survey.

This means on a data leak, nothing is readable.

Yea Purplix.io is still in development, so it isn't live yet. Hense the fail DNS lookup you show.

[-] Ward@lemmy.nz 22 points 1 year ago

Just your average nothing conversion.

"System messed up once, trans people shouldn't exist"

view more: next ›

Ward

joined 1 year ago