chrisb
@boscolo.co
sojourning through the crazy woods (bosco loco)
pondering rainbows and unicorns
pondering rainbows and unicorns
Pinned
chrisb
@boscolo.co
· Jun 13
ATproto devs, app builders, dreamers of a more agentic world—this our opportunity to shape secure, private open E2EE messaging!
This preliminary AT Messaging spec needs your help to finish. Dive in, share your brilliance, join #e2eeWG, and let’s build it together!
github.com/ATProtocol-C...
This preliminary AT Messaging spec needs your help to finish. Dive in, share your brilliance, join #e2eeWG, and let’s build it together!
github.com/ATProtocol-C...
I'm a bit of a dreamer, I want to message people via ATProto using their ATProto Identity and have it be end-to-end encrypted like Signal.
bsky.app/profile/bosc...
bsky.app/profile/bosc...
@vitalik.ca donated 128 ETH to chat apps Session and Simplex to further "(i) permissionless account creation and (ii) metadata privacy"
👀
x.com/VitalikButer...
👀
x.com/VitalikButer...
vitalik.eth on X: "Encrypted messaging, like @signalapp, is critical for preserving our digital privacy. Two important next steps for the space are (i) permissionless account creation and (ii) metadata privacy. @session_app and @SimpleXChat are two messaging apps pushing these directions forward." / X
Encrypted messaging, like @signalapp, is critical for preserving our digital privacy. Two important next steps for the space are (i) permissionless account creation and (ii) metadata privacy. @session_app and @SimpleXChat are two messaging apps pushing these directions forward.
x.com
November 26, 2025 at 10:37 PM
@vitalik.ca donated 128 ETH to chat apps Session and Simplex to further "(i) permissionless account creation and (ii) metadata privacy"
👀
x.com/VitalikButer...
👀
x.com/VitalikButer...
I wish I had the confidence of Claude.
After the sixth attempt to fix a gnarly bug, it is still 100% convinced it fixed it this time.
After the sixth attempt to fix a gnarly bug, it is still 100% convinced it fixed it this time.
November 23, 2025 at 4:41 PM
I wish I had the confidence of Claude.
After the sixth attempt to fix a gnarly bug, it is still 100% convinced it fixed it this time.
After the sixth attempt to fix a gnarly bug, it is still 100% convinced it fixed it this time.
“In the end, all security boils down to key management.”
November 22, 2025 at 12:34 AM
“In the end, all security boils down to key management.”
I'm really enjoying coding with my new AI buddy.
Too bad it's not a beer drinker, would love to grab a cold one after work. 🍺
Too bad it's not a beer drinker, would love to grab a cold one after work. 🍺
November 21, 2025 at 3:08 PM
I'm really enjoying coding with my new AI buddy.
Too bad it's not a beer drinker, would love to grab a cold one after work. 🍺
Too bad it's not a beer drinker, would love to grab a cold one after work. 🍺
I simultaneously love using Cloudflare and want to build a decentralized (ie. trust minimized) alternative. Independent redundancy improves reliability and diffuses power.
blog.cloudflare.com/18-november-...
blog.cloudflare.com/18-november-...
Cloudflare outage on November 18, 2025
Cloudflare suffered a service outage on November 18, 2025. The outage was triggered by a bug in generation logic for a Bot Management feature file causing many Cloudflare services to be affected.
blog.cloudflare.com
November 19, 2025 at 4:23 PM
I simultaneously love using Cloudflare and want to build a decentralized (ie. trust minimized) alternative. Independent redundancy improves reliability and diffuses power.
blog.cloudflare.com/18-november-...
blog.cloudflare.com/18-november-...
I've always wondered why @murena-com.bsky.social used /e/OS instead of @grapheneos.org?
Could you share your perspective @murena-com.bsky.social?
Could you share your perspective @murena-com.bsky.social?
iodéOS and /e/OS are based in France. iodéOS and /e/OS make devices dramatically more vulnerable while misleading users about privacy and security. These fake privacy products serve the interest of authoritarians rather than protecting people. /e/OS receives millions of euros in government funding.
November 19, 2025 at 1:37 PM
I've always wondered why @murena-com.bsky.social used /e/OS instead of @grapheneos.org?
Could you share your perspective @murena-com.bsky.social?
Could you share your perspective @murena-com.bsky.social?
TIL that the Ethereum @devcon.org devconnect app is using AT Protocol to drive their event calendar for the events this week in Buenos Aires!
👀 Looks like all events are store in this repo:
pdsls.dev/at://did:plc...
👀 Looks like all events are store in this repo:
pdsls.dev/at://did:plc...
PDSls
Browse the public data on atproto
pdsls.dev
November 16, 2025 at 3:31 AM
TIL that the Ethereum @devcon.org devconnect app is using AT Protocol to drive their event calendar for the events this week in Buenos Aires!
👀 Looks like all events are store in this repo:
pdsls.dev/at://did:plc...
👀 Looks like all events are store in this repo:
pdsls.dev/at://did:plc...
Privacy is the power to selectively reveal oneself to the world
November 14, 2025 at 11:45 AM
Privacy is the power to selectively reveal oneself to the world
Is anyone attempting to measure human user counts on Bluesky?
It is so trivially easy for bots to create a Bluesky account, that I wouldn't be surprised if this user count is off by an order of magnitude.
I'm not trying to be anti-Bluesky. Just curious if anyone has insight into the actual number.
It is so trivially easy for bots to create a Bluesky account, that I wouldn't be surprised if this user count is off by an order of magnitude.
I'm not trying to be anti-Bluesky. Just curious if anyone has insight into the actual number.
Bluesky currently has 40,003,623 users 😀
Approximately 0.23 new users are joining per second
In the last hour 821 users have joined with a total of 21,522 in the last 24 hours
Bluesky could hit the next million in 46 Days, 7 Hours based on the last 24h
░░░░░░░░░░░░░░░░░░░ 0 %
#bluesky
Approximately 0.23 new users are joining per second
In the last hour 821 users have joined with a total of 21,522 in the last 24 hours
Bluesky could hit the next million in 46 Days, 7 Hours based on the last 24h
░░░░░░░░░░░░░░░░░░░ 0 %
#bluesky
October 31, 2025 at 1:48 PM
Is anyone attempting to measure human user counts on Bluesky?
It is so trivially easy for bots to create a Bluesky account, that I wouldn't be surprised if this user count is off by an order of magnitude.
I'm not trying to be anti-Bluesky. Just curious if anyone has insight into the actual number.
It is so trivially easy for bots to create a Bluesky account, that I wouldn't be surprised if this user count is off by an order of magnitude.
I'm not trying to be anti-Bluesky. Just curious if anyone has insight into the actual number.
Just like a human developer:
"Sorry for the wild goose chase! The crypto initialization part was actually fine from the start (after installing the polyfills), and the real issue was just a simple API call mistake on my part." 🪿
"Sorry for the wild goose chase! The crypto initialization part was actually fine from the start (after installing the polyfills), and the real issue was just a simple API call mistake on my part." 🪿
October 28, 2025 at 11:40 PM
Just like a human developer:
"Sorry for the wild goose chase! The crypto initialization part was actually fine from the start (after installing the polyfills), and the real issue was just a simple API call mistake on my part." 🪿
"Sorry for the wild goose chase! The crypto initialization part was actually fine from the start (after installing the polyfills), and the real issue was just a simple API call mistake on my part." 🪿
👀
I've been up to a little more chaos...
E2EE messaging just got audio chats!
E2EE messaging just got audio chats!
October 27, 2025 at 10:23 PM
👀
To my AT Protocol OAuth friends.
How do I build a mobile app that logs in to my PDS and isn’t super clunky? Bonus points if it uses Face ID and I never have to put a password in anywhere.
How do I build a mobile app that logs in to my PDS and isn’t super clunky? Bonus points if it uses Face ID and I never have to put a password in anywhere.
October 27, 2025 at 6:52 PM
To my AT Protocol OAuth friends.
How do I build a mobile app that logs in to my PDS and isn’t super clunky? Bonus points if it uses Face ID and I never have to put a password in anywhere.
How do I build a mobile app that logs in to my PDS and isn’t super clunky? Bonus points if it uses Face ID and I never have to put a password in anywhere.
Reposted by chrisb
📣THREAD: It’s surprising to me that so many people were surprised to learn that Signal runs partly on AWS (something we can do because we use encryption to make sure no one but you–not AWS, not Signal, not anyone–can access your comms).
It’s also concerning. 1/
It’s also concerning. 1/
PSA: we're aware that Signal is down for some people. This appears to be related to a major AWS outage. Stand by.
October 27, 2025 at 10:38 AM
📣THREAD: It’s surprising to me that so many people were surprised to learn that Signal runs partly on AWS (something we can do because we use encryption to make sure no one but you–not AWS, not Signal, not anyone–can access your comms).
It’s also concerning. 1/
It’s also concerning. 1/
WRT Encrypted Messaging:
The biggest mistake Matrix is making is to lump WhatsApp and Signal (DMs/Small Groups) in with Telegram, Slack and Discord (Large Groups), trying to solve both problems with the same architecture.
Matrix in place of WhatsApp/Signal is a step backwards not forward.
The biggest mistake Matrix is making is to lump WhatsApp and Signal (DMs/Small Groups) in with Telegram, Slack and Discord (Large Groups), trying to solve both problems with the same architecture.
Matrix in place of WhatsApp/Signal is a step backwards not forward.
October 27, 2025 at 2:56 PM
WRT Encrypted Messaging:
The biggest mistake Matrix is making is to lump WhatsApp and Signal (DMs/Small Groups) in with Telegram, Slack and Discord (Large Groups), trying to solve both problems with the same architecture.
Matrix in place of WhatsApp/Signal is a step backwards not forward.
The biggest mistake Matrix is making is to lump WhatsApp and Signal (DMs/Small Groups) in with Telegram, Slack and Discord (Large Groups), trying to solve both problems with the same architecture.
Matrix in place of WhatsApp/Signal is a step backwards not forward.
Whoa!
While performing a rename of a Typescript class across my large-ish project, I witnessed Claude resorting to perl for a multiline regexp.
Perl is still the 🐐
While performing a rename of a Typescript class across my large-ish project, I witnessed Claude resorting to perl for a multiline regexp.
Perl is still the 🐐
October 24, 2025 at 4:16 PM
Whoa!
While performing a rename of a Typescript class across my large-ish project, I witnessed Claude resorting to perl for a multiline regexp.
Perl is still the 🐐
While performing a rename of a Typescript class across my large-ish project, I witnessed Claude resorting to perl for a multiline regexp.
Perl is still the 🐐
With #AT-SMS end-to-end encrypted messaging, SMTP is the delivery protocol of last resort.
In the same way you can choose where to host your PDS, with AT-SMS you can choose who provides your messaging service. Providers permissionlessly talk to each other via SMTP.
blog.boscolo.co/3lxx6eqkga22...
In the same way you can choose where to host your PDS, with AT-SMS you can choose who provides your messaging service. Providers permissionlessly talk to each other via SMTP.
blog.boscolo.co/3lxx6eqkga22...
Introducing AT-SMS - blog.boscolo.co
Open End-to-End Encrypted Messaging on AT Protocol
blog.boscolo.co
October 24, 2025 at 1:41 PM
With #AT-SMS end-to-end encrypted messaging, SMTP is the delivery protocol of last resort.
In the same way you can choose where to host your PDS, with AT-SMS you can choose who provides your messaging service. Providers permissionlessly talk to each other via SMTP.
blog.boscolo.co/3lxx6eqkga22...
In the same way you can choose where to host your PDS, with AT-SMS you can choose who provides your messaging service. Providers permissionlessly talk to each other via SMTP.
blog.boscolo.co/3lxx6eqkga22...
Vibe coding tip:
If Cluade doesn't fix a bug on the first or second attempt, allowing it to continue results in a code base full of garbage.
Best to pause and provide a prompt that helps it plan a different approach to identify the root problem.
If Cluade doesn't fix a bug on the first or second attempt, allowing it to continue results in a code base full of garbage.
Best to pause and provide a prompt that helps it plan a different approach to identify the root problem.
October 22, 2025 at 2:59 PM
Vibe coding tip:
If Cluade doesn't fix a bug on the first or second attempt, allowing it to continue results in a code base full of garbage.
Best to pause and provide a prompt that helps it plan a different approach to identify the root problem.
If Cluade doesn't fix a bug on the first or second attempt, allowing it to continue results in a code base full of garbage.
Best to pause and provide a prompt that helps it plan a different approach to identify the root problem.
PSA
If you are backing up your PDS using the Github Action script built by @filippo.abyssdomain.expert, you will need to update the backup script to point to the new location of goat.
If you are backing up your PDS using the Github Action script built by @filippo.abyssdomain.expert, you will need to update the backup script to point to the new location of goat.
Just setup github backup of my PDS via this template. Piece of cake! 🍰
I made a zero-maintenance way to keep a backup of your PDS repository in case you ever need to do an adversarial migration.
github.com/FiloSottile/...
A template that sets up a daily GitHub Actions backup with goat.
Based on git-scraper-template by @simonwillison.net.
github.com/FiloSottile/...
A template that sets up a daily GitHub Actions backup with goat.
Based on git-scraper-template by @simonwillison.net.
October 21, 2025 at 10:46 PM
PSA
If you are backing up your PDS using the Github Action script built by @filippo.abyssdomain.expert, you will need to update the backup script to point to the new location of goat.
If you are backing up your PDS using the Github Action script built by @filippo.abyssdomain.expert, you will need to update the backup script to point to the new location of goat.
Are you sleeping on @cloudflare.social Durable Objects with WebSocket Hibernation?
That's ok, you won't pay for anything while they sleep...
seriously tho, why isn't everyone building with them?
That's ok, you won't pay for anything while they sleep...
seriously tho, why isn't everyone building with them?
October 14, 2025 at 7:53 PM
Are you sleeping on @cloudflare.social Durable Objects with WebSocket Hibernation?
That's ok, you won't pay for anything while they sleep...
seriously tho, why isn't everyone building with them?
That's ok, you won't pay for anything while they sleep...
seriously tho, why isn't everyone building with them?
If AT Protocol had it's own native decentralized encrypted messaging, could build app notifications on it. 📬
🔔 Image if a notification that someone commented a published @leaflet.pub showed up in Bluesky?
🔔 Image if a notification that someone commented a published @leaflet.pub showed up in Bluesky?
October 14, 2025 at 7:31 PM
If AT Protocol had it's own native decentralized encrypted messaging, could build app notifications on it. 📬
🔔 Image if a notification that someone commented a published @leaflet.pub showed up in Bluesky?
🔔 Image if a notification that someone commented a published @leaflet.pub showed up in Bluesky?
if I had a nickel for every time I bought a domain, I'd be rich!
(minus the cost of the domain)
(minus the cost of the domain)
i even bought a domain!!
October 14, 2025 at 7:25 PM
if I had a nickel for every time I bought a domain, I'd be rich!
(minus the cost of the domain)
(minus the cost of the domain)