“As a final note: One of the websites in the network, known as “JVTVlive” and likely run by Neamati, openly claims to have “2,000 servers in 198 countries” (jvtvlive[.]com/faq/). Based on the data we’re tracking, these bold claims appear to be accurate.”
LOL, this is an advertisement, and not for security services either.
Yes, I know, thats why I lol’ed
Lol, yep, then do a malicious redirection attack after getting a large user base which forces a drive-by-download of a malware package alongside the requested FLAC file.
XOWS has the front end aesthetic down
https://github.com/iquercorb/xows?tab=readme-ov-file
and so does prose.org
neither have actual subchannel/spaces functions across multiple domains though. Hopefully easy enough to patch in with new spaces protocol when it becomes available?
Looks great! Do you know of any public instances running out there I could check out?
This is slick! Looks pretty polished. I’m interested to figure out how they enable channel creation and management. I’m assuming this is just listing all the channels on the server and the instance doesn’t federate?
I’m also always curious when there is an open source product like this that has a free self hosted version that they say is user capped at 20 users. How? Is that just an arbitrarily string of code inserted someone that can be easily stripped out? I see some forks so could be.
I mean, a website where you make requests to download many files are pretty ripe for a bate and switch scenario. That said, I’m looking for more cybersecuroty savvy folks than myself to chime in with the all-clear after doing some actual checks and analysis.
I’ve been digging into thos heavily regarding XMPP. Good news is there is some backend development going on that will enable this, bad news is its going to take a bit of time and then the clients will have to adopt or be developed. Maybe I will try out vibecoding it, lol.
pardon the typos
hmmmm… I doubt the government would use it, but I wonder if Scuttlebutt Protocol might meet the OP’s criterion. Asynchronous, encrypted, peer to peer, open source, multiple names can point to ine identity. Seems like a match? https://ssbc.github.io/scuttlebutt-protocol-guide/
My bigger question is how secure is it? Looks like low trust score new Russian website, what’s the chance of malware or other attacks?
No one talking about how this could completely annihilate open source .apk development? First off the lead dev has to get identity verified to get a key, which will reduce the number of devs willing to push through friction to start a project. Then when the key is issued and it is posted to the repository, what keeps anyone from grabbing it and using it for another repo? We’ll they have an official app registration of some kind, ok, what about version control? Does every new version have to be registered before it can be loaded and tested? Same for forks?
This is about to be a terrible mess, Google is assassinating FOSS with this.
Here’s a thing about LLMs, they will effectively make laws like this meaningless. Law comes in to enforce against a company building a program to block ads, extension goes off market. Someone asks their LLM “create an extension function referencing the same data set for my browser that performs the same function” boom new extension with no central point of distribution. Share the prompt on a forum, now everyone has a custom ad blocker. Or not so far down the road, LLM is directly built into the browser, no extension needed just prompt “do not display known advertisements on pages I request before loading, but perform background activity which gives feedback to the site that ads have loaded” boom done.
In a way, local LLMs are like distributed applications, they make enforcement against specific program functions pretty much impossible.
deleted by creator
So the ISP redirects the request from the primary host to the CloudFlare cache under some conditions? but wouldn’t that be ineffective at blocking the sites of the browser still attempts to pull from the primary host first? I’m assuming this must be mediated by the ISP somehow otherwise it would just be a browser setting to only pull from the primary host of the domain.
I don’t understand how CloudFlare is intermediating the traffick in this case. How can CloudFlare block the sites if they aren’t hosted on CloudFlare or using CloudFlare services? Are they acting as an ISP in the UK?
yeeeaaaah, I didn’t click the link before commenting. Some of my questions still stand. In a funny way the users/orders of this app might have equal though opposite insight into the aimbot phenomenon. If you’re dedicated to aim training, aimbots must make you feel some kind of way.
Not a bad training function. I suppose the service is to individual enjoyment of recreational activities. Also could have some benefits to creative interfaces like 3d modeling.
lol, it would be an interesting AI indeed to write that.
This is a huge reason to support open source LLM development, and training projects to specialize them to cybersecurity.
There will be an ever growing divide between those who pay for the latest automated code review services and those who don’t, unless the open source side keeps up.
Honestly this might be the most important open source AI application of all, and from what I can tell it seems to be falling behind.