Replies (68)

Juls's avatar
Juls 10 months ago
Yeap. Come join the very many that speak to the void until someone else appears! Not giving up ๐Ÿ˜‚
Garth Algar's avatar
Garth Algar 10 months ago
Excellent! Will the BTC offline payment function be added some time soon?
Juls's avatar
Juls 10 months ago
โœŠ๐Ÿฝ
Ross Savage's avatar
Ross Savage 10 months ago
Are geohash channels available on android (play store) also?
Garth Algar's avatar
Garth Algar 10 months ago
Wooow โ€ฆ look at the spam here tooโ€ฆ nostr is getting more mainstream i guess :)
kate's avatar
kate 10 months ago
When you initially released bitchat on the App Store and I downloaded it, I was immediately able to find the <slap with a large trout> command. Now I canโ€™t find it anymore. I guess Iโ€™ve lost my bitchat intuition. Is it because Iโ€™m alone (slapping myself silly)? Pls help. Also, could we possibly slap others with other types of fishes such as snapper or tuna? Maybe salmon. Thanks.
Russo's avatar
Russo 10 months ago
When will you stop pushing unsafe tech? New Vulnerabilities: In 2025, several new vulnerabilities have been reported, including: CVE-2025-32875: Insufficient authentication during Bluetooth binding, allowing unauthorized devices to connect during initial setup. CVE-2025-32876: Weakness in the encryption process during Bluetooth handshakes, particularly in certain Android environments. CVE-2025-44559: A Denial of Service (DoS) vulnerability in the Bluetooth Low Energy (BLE) stack, allowing attackers to disrupt services by sending crafted packets.
I asked 5 Thinking (rarely use) bout spam optimal solution, itโ€™s funny cause it goes through your GitHub stuff when reasoning that is way over my head. Cute that it does that. This is what it said: Today(no code) -use password channels for real conversations (interesting but like Iโ€™m sure spam will keep getting access to unless changed daily, maybe tire it out :) -Use built-in/block @name for obvious spam and keep local blocklists. Building tomorrow -layer 1: simple flood & duplicate control with token-bucket rate limits and as mesh already uses TTL routing, in busy venues, reduce hop TTL to shrink the attack surface. Layer 2: -Require tiny POW per public message. Layer3: -Per-key trust scores, new keys start in probation(slow rate) and include relay policy where nodes deprioritise or refuse to forward from low-reputation keys (oof hope thatโ€™s not my key) Layer 4 -First-time posters must complete in-room handshake ๐Ÿค like your QR idea or get a trust reaction from non-newbie before normal rates apply. -Invite links for channels with password + short-lived QR code for events. Layer 5 -ship a tiny Core ML text model to score spammy patterns which works for offline damping of bots (be interesting if you can get this embedded into iOS bitchat app) How to geohash without doxxing: -Channel geofence where rooms require senders to be inside target geohash cell (e.g., precision 6 โ‰ˆ ~1km, 7 โ‰ˆ ~150-200 m) -witness attestations from nearby devices with truncated geohash, not raw coordinates. -pop-up room with rotating QR or 6 digit code as proximity ticket, first time posters scan or enter, afterward post for grace period 24hr. Ok, well thatโ€™s it from me, hope it helps. P.S. I swear I am not spam. Cc @calle
the only decentralized anti-spam measure that is long term workable: 1 make identity costly (no the per message cost is retarded) 2 get blocked before full propagation if you spam this is very hard to implement well, especially point 2
โ†‘