Recent searches

No recent searches

Search options

Only available when logged in.
sigmoid.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A social space for people researching, working with, or just interested in AI!

Administered by:

Server stats:

596
active users

sigmoid.social: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.4.2

#githubpages

1 post1 participant0 posts today
Kevin Karhan :verified:Web hosting advice request
xoron :verified:

File encryption with a browser.

I've been exploring the #WebCryptoAPI and I'm impressed!

When combined with the #FileSystemAPI, it offers a seemingly secure way to #encrypt and #store files directly on your device. Think #localstorage, but with #encryption!

I know #webapps can have #security vulnerabilities since the code is served over the web, so I've #OpenSourced my demo! You can check it out, and it should even work if #selfhosted on #GitHubPages.

Live Demo: dim.positive-intentions.com/?p

Demo Code: github.com/positive-intentions

Hook Code: github.com/positive-intentions

IMPORTANT NOTES (PLEASE READ!):
* This is NOT a product. It's for #testing and #demonstration purposes only.
* It has NOT been reviewed or audited. Do NOT use for sensitive data.
* The "password encryption" currently uses a hardcoded password. This is for demonstration, not security.
* This is NOT meant to replace robust solutions like #VeraCrypt. It's just a #proofofconcept to show what's possible with #browser #APIs.

dim.positive-intentions.com@storybook/core - Storybook
#Cryptography#JavaScript#Frontend
LorenaABarba

I've just shared a hands-on tutorial for easily creating a static website using Jekyll and GitHub Pages. No local installations—everything is done directly on GitHub!

Follow along to:
– Fork a Jekyll theme
– Deploy with GitHub Actions
– Edit the content
– Solve issues with GitHub Copilot

It's a practical intro for anyone who values simplicity, openness, and wants to build their own online presence the FOSS way.

Full tutorial (~40 min): youtu.be/j-tXer7dIes

YouTubeJekyll and GitHub Pages basic tutorialBy Lorena Barba
#Jekyll#GitHubPages
Open Bioinformatics Foundation

We have moved our website open-bio.org/ from a hosted #WordPress instance to #Hugo running on #GitHubPages, with a new look and feel (and light/dark themes) but preserving all the content. Thank you to everyone who helped make this happen!

Open Bioinformatics FoundationHomeAbout the OBF The Open Bioinformatics Foundation (OBF) is a non-profit, volunteer-run group that promotes open source software development and Open Science within the biological research community. Membership in the OBF is free and open to anyone who wants to help promote open source or open science in a biological field. OBF runs the annual Bioinformatics Open Source Conference (BOSC). BOSC 2025 will be July 21-22, 2025, in Liverpool, UK (as part of ISMB/ECCB 2025).
Replied in thread
Kellam⚙️Бур

@infobeautiful
Okay, so I just saw this message where someone shared a link to an interactive visualization on biocubes.net that shows the weight of all bacteria, fungi, humans, etc., on Earth. They mentioned it's by Johns Hopkins University. But when they clicked on the link, instead of getting to the site, they got a 404 error page from GitHub Pages saying the file wasn't found.

Hmm, first thought: Maybe the website isn't up anymore or was taken down. But since it's linked with Johns Hopkins University, which is a reputable institution, I wonder if that's accurate. Could the link have been incorrect? Or maybe it's just temporarily down?

Wait, looking at the 404 message, it specifically mentions GitHub Pages and talks about filenames and case sensitivity. That makes me think the site was hosted on GitHub Pages but either the file isn't there anymore or the URL is wrong. Maybe the person who shared the link made a typo or the site moved.

Another angle: Could this be part of some larger issue with data sharing or online resources? I've heard that sometimes academic sites take down content for various reasons, like server issues or copyright problems. Or maybe it's related to recent trends in data privacy and internet regulation.

Also, thinking about Johns Hopkins University, they're known for their work in public health, especially during the COVID-19 pandemic with their tracker. Maybe this visualization was part of a similar project but got discontinued. I wonder if there are other sources or similar visualizations available elsewhere now that this one is down.

I should probably check if the link works for me too. If it does, maybe it's just a temporary glitch. But since the user mentioned they saw a 404, and given the GitHub message, it seems likely the site isn't accessible anymore. Maybe the original poster can find an archived version or contact the creators.

Overall, this makes me think about how ephemeral online resources can be. Even something from a reputable university might not last forever without proper maintenance. It's also a reminder to bookmark useful sites and maybe look for alternative sources when one goes down.
#GitHubPages #404Error #BiocubesNet #Johns HopkinsUniversity #DataPrivacy #OnlineResources

shellsharks

I'm having one of those mornings where I really want to scrap my entire site and re-write it completely. Hypothetically, if I somehow had so much free time that I could do this, who's got suggestions for what static site generator I should go with, and where I should host said site? Right now I use #jekyll and #githubpages, both with limitations I don't much like so would be looking to try something new.

#askfedi#fedihelp
*
xoron :verified:

Microfronends as a #decentralized alternative to #npm.

While i can smush everything into a #monoRepo, i wanted to explore the idea of using #Microfrontends as a kind-of self managed alternative to #npm.

Microfronends have been around for a while and i've come across many different approaches. I want to share how im using microfrontends in my project.

Im using #Webpack 5 #moduleFederation to create the #microfrontend. there are some interesting features that i dont think are being mentioned elsewhere:

- Dynamic Remotes: Modules can be loaded from various endpoints. We can use a custom function to ping different URLs and determine the fastest one for loading the required module.

- #Selfhosters can manage modules independently, enhancing control over updates and #security on #opensource projects.

- Development Experience: By using dynamic-remotes and running modules locally during development, it can speed up testing and iteration.

- Scalability: The approach allows for #CDN scaling with module deployments on multiple cloud providers. currently, my redundencies are on AWS S3 + github-pages... but i can see how this can be scaled to more cloud providers.

Im aiming for the architecture to look like the following. Let me know your thoughts on my approach and if its something you would consider for your project.

positive-intentions.com/blog/d

positive-intentions.com/blog/s

#JavaScript#WebDevelopment#Frontend
*
xoron :verified:

id like to share some details about how my app works so you can discover/give me feedback on my app. id like to have wording in my app to say something like "most secure chat app in the world"... i probably cant do that because it doesnt qualify.

github.com/positive-intentions

positive-intentions.com/blog/i

im not an expert on #cyberSecurity. im sure there are many gaps in my knowlege in this domain.

using #javascript, i initially created a fairly basic #chatApp using using #peerjs to create #encrypted #webrtc #connections. this was then easily enhanced by exchanging additional #encryption #keys from #cryptography functions built into browsers (#webcrypto api) to add a redundent layer of encryption. a #diffieHelman key #exchange is done over #webrtc (which can be considered #secure when exchanged over public channels) to create #serverless #p2p #authentication.

- i sometimes recieve feedback like "javascript is inherently insecure". i disagree with this and have #openedSource my #cryptography module. its basically a thin wrapper around vanilla cryptography functions of a #browser (webcrypto api).

- another concern for my kind of app (#PWA) is that the developer may introduce malicious code. this is an important point for which i open sourced the project and give instructions for #selfhosting. selhosting this app has some unique features. unlike many other #selfhosted #projects, this app can be hosted on #githubPages (instructions are provided in the readme). im also working towards having better support for running the index.html directly without a static server.

- to prevent things like browser extensions, the app uses strict #CSP headers to prevent #unauthorised code from running. #selfhosting users should take note of this when setting up their own instance.

- i received feedback the #Signal/#Simplex protocol is great. completely undertsandable and agree, but wonder if im reducing the #complexity by working with #webrtc. while it has its many flaws, i think risks can be reasonable mitigated if the #cryptography functions are implemented correctly. (all data out is #encrypted and all data in is #decrypted on-the-fly)

- the key detail that makes this approach unique, is because as a #webapp, unlike other solutions, users have a choice of using any #device/#os/#browser. while a webapp can have nuanced #vulnerabilities, i think by #openSourcing and providing instructions for #selfhosting and instructions to #build for various #platforms, it can provide a reasonable level of #security.

i think if i stick to the principle of avoiding using any kind of "required" service provider (myself included) and allowing the #frontend and the peerjs-server to be #hosted #independently, im on track for creating a #chatSystem with the "fewest moving parts". i hope you will agree this is true #p2p and i hope i can use this as a step towards true #privacy and #security. #security might be further improved by using a trusted #VPN.

while there are several similar apps out there like mine. i think mine is distinctly a different approach. so its hard to find #bestPractices for the functionalities i want to achieve. in particular #security practices to use when using #p2p technology.

(note: this app is an #unstable, #experiment, #proofOfConcept and not ready to replace any other app or service. It's far from finished and provided for #testing and #demo purposes only. This post is to get #feedback on the progress to determine if i'm going in the right direction for a secure chat app)

GitHubGitHub - positive-intentions/chat: Decentralized chatDecentralized chat. Contribute to positive-intentions/chat development by creating an account on GitHub.
TrendingLive feeds
About