2025-08-10 16:49 UTC
Replies (5)
-
@nullagent@partyon.xyz 2025-08-10 16:50
Please consider donating, I'm housing insecure and going through a ton of costly bullshit right now. Wish I could make more tools and content. Anything helps. https://ko-fi.com/nullagent
-
@adam@windbag.org 2025-08-10 17:30
@nullagent@partyon.xyz do you feel better about MeshCore's security model?
-
@jianmin@defcon.social 2025-08-11 02:24
@nullagent@partyon.xyz Who is encouraging activists to use meshtastic or any lorawan devices? Probably they are the ones most at fault here. I think the security docs from meshtastic are fairly transparent about what they offer and don't offer. Correct me if I'm wrong, but your tool primarily abuses the Trust On First Use model for establishing trust. Also without digging into code, I suspect you can combine this with the limited space for nodes in the nodedb to easily spoof arbitrary users that aren't saved/favorited. It's not as much of a bug as it is an artifact of how the designers decided to handle the limited bandwidth in terms of which features to prioritize. They don't claim to provide security or privacy and seem to prioritize lower bandwidth and operability.
-
@kc2g@mastodon.radio 2025-08-11 04:35
@nullagent@partyon.xyz I'd prefer if they didn't pretend. I'd be happy enough with it as an entirely unencrypted and unauthenticated protocol, but when they go putting little padlock icons on everything (and a ⚠️ on public chats!) it sets false expectations.
-
@openbuddha@megalonyx.social 2026-02-12 16:44
@nullagent@partyon.xyz how is meshcore doing?