Valmond

V3:

A sharing node stores the public RSA from a node it shares data from. If a bad state actor could get the hands of lots of nodes, they could figure out that two shared data originated from the same node.

It cannot know who shared it.

Solution:

Store every shared file in its own folder. So instead of storing in it folder /3/ because it is the node "3" (from this nodes perspective) store it in a unique folder /785/ because it is the shared data number 785

This will, as V2, be published when V1 is published.

A second vulnerability have been found:

V2: A bad state actor can know that you shared a specific link file, even if you do not publish your IP:PORT address in that specific link file, if

1. The bad state actor has the link file as the link file contains your public RSA key.
2. One day gets access to any other of your shared links, as they contains the same RSA key.

Solution: Use one specific key pair per file

This has been implemented, but not yes published. It will be published when V1 has been patched.

Thank you lime@feddi.nu for detecting this vulnerability.

A vulnerability was found:

A malevolent node can spoof data if:

It is sharing the specific data
It has access to the link file

Note: both conditions must be met.

Because it has now access to the AES key pair in the link file and can encode bad data and serve it to an eventual client.

Solution:

Add a payload to each data which is generated like this:

SHA256 the data
Encrypt the SHA with the private RSA key

Check it with the public RSA that is already in the link file when downloading data by:

When the data is fully downloaded:

Remove the SHA256 from the data
Decrypt it with the public RSA key in the link file
SHA256 the data (the data without the SHA256)
Compare the two SHA, if not identical then there has been errors or tampering.

A better structured doc for downloading and installing Tenfingers.

Hello all!

I'm looking for a simple to use GUI for my FOSS python project.

I have tried tkinter which is, uh, usable but seriously oldish? Good point seems to be it's basically inbuilt in python so not hard to distribute.

PyQt is on the heavy end, I just need windows, scrollbars and buttons (basically, see below), also I wonder about the license of Qt (it's always a PITA when trying to do C++ Qt) and also what you must package when you distribute the soft.

Must haves:

• Frames (I need two independent lists of files and another with global info)
• Text, buttons & colors, an "open file" dialog. Editable text field.
• Scrollable lists, with clickable icons (ex. "Filename [Delete icon] [Update icon]")
• Async behaviour (so that a thread can update one part when it sees fit)
• Works on most popular Linux
• FOSS (I don't want to change everything when the soft dies, or be on the enshittification ride)

Nice to have :

• Possibility to make pop out windows (like a settings manager)
• Mac & Win support

Cheers and thank you!

I heard the news on the grapevine and digged just the slightest so this is the first link I found.

Maybe true or just another stalling technique?

Slava Ukraine!

Hello all !

I have a docker image that you can run with:

docker compose -f compose_10f.yml up

The compose_10f.yml looks like this:

services:
  setup:
    image: tenfingers_10f:v1
    volumes:
      - ./:/data
    working_dir: /data/

Which makes the image believe it runs in ./ so if it saves "./hello" it will be saved in the folder where it's launched (it works).

The thing is, it's a command line program (named 10f.py), not a server or such, so I'd like to run it like this:

docker run -v ./:/data -w /data/ tenfingers_10f:v1 10f.py

And it works with the exception it doesn't get to run in the mounted ./ folder.

It confuses the "mount" (or I'm just lucky the compose file works?) and it believes it lives in /data/, not in ./

python3: can't open file '/data/10f.py': [Errno 2] No such file or directory

I did struggle to set this up in the compose file, but I'd like to make the images run in a specific directory thinking they are in ./

Any ideas how I can figure this out?

Cheers and thank you so much!

Valmond

Hello everyone!

I switched to 100% Linux not long time ago (Serenity + 5) but I'm struggling with the replacement of the last but seemingly simple workflow, that I have used an overpowered photoshop for when on windows.

I'm an 'ol game dev and I love firing up some compiler or IDE or game engine and have fun, today its Godot 😊😅. Long live FOSS!

I'm doing about everything in 2D pixel graphics, mostly because I have a stock of unused and also because I like it the most I guess.

So to the workflow!

Modifying pixel graphics:

The pipette must take only one value, not some mix of say 2x2 pixels

The pen writes 100 percent to pixels, or zero (so no smoothing stuff).

Possibility so make selections with 100% hard edges, and the possibility to erase (so creating transparency).

Saves with transparency to .png.

Bonus:

Resize without smoothing

Changing the hue in a selection

Aand that's it!

Is there a such simple soft out there?

BRW. Tried Gimp, it's just not working out for me.

Thank you so much 💖

Hello all,

I'm playing Knights of pen and paper for the second time, it's a nice time waster IMO (free part is better than the paid one, again IMO).

Last cRPG I really liked was Neverwinter Nights, but it has sure aged a little bit.

Would love a lazy rpg on android or a slightly more story rpg on linux (no graphic card 😅).

Any recommendations?

Thank you all 💖 !

Hello everyone, I hope I'm not in the wrong place here.

My fiber connection went down thursday, and after some debacle (team 1 changed the broken hardware but didn't plug in my FTTH :-/) I'm back in business.

Thing is, my lemmy.mindoki.com, where I probably live all alone, is now no longer updating. All posts are about 5-6 days old...

I don't even know if I'll see your answer to this post (so please leave at least one answer, even if it's an empty one 💖 if there are no answers).

Any information greatly appreciated.

Valmond

Edit: at least I can see this post, the next after a 7d old one :-)

Edit2: the instance was running all the time, with a network connection but without access to the internet. Maybe it decided everyone was like stale?

Hello!

I love making games, have even had the privilege to do it "for real". I'm looking for some game engine that I can use to make a 2D turnbased rpg game, that would compile for pc and android.

I have tried out lots of engines since a long time, and whats bothering me the most is that windows changes breaking stuff, the engine going paid or cease to exist, or it uses like javascript. So I'm wondering if there would be, today, something you could recommend that is FOSS, 2D, has sound&music maybe a menu interface, effects..., isn't an obscure, old or too new language (like Lua or Rust, sorry!) and works out of the box for PC and Android.

I'm willing to ponder web instead of PC but I'm not willing to go the javascript route :-).

Thank you for your time!

Cheers

Valmond

Hello all!

Have there been some discussions about tagging posts, like [Drawing], [Painting], [Digital] etc?

Maybe there are not enough content to care yet, but what do you think?