Damus
Open in Damus
Johnathan Corgan profile picture
Johnathan Corgan
@jcorgan

🎶 Older now, but still running against the wind 🎶

Scientist, engineer, consultant, pilot. Slinger of bits and reducer of gradients.

EN/ES ☸️

npub19wavu4f7l6l43h24jyskn7fvzy37kcfp67aqjtmv2qgy4lp34nhsda8p6knpub
Relays (11)
  • wss://bevo.nostr1.com – read & write
  • wss://bitcoiner.social – read & write
  • wss://nos.lol – read
  • wss://nostr.mom – read
  • wss://relay.damus.io – read & write
  • wss://relay.mostr.pub – read
  • wss://relay.nos.social – read & write
  • wss://relay.nostr.band – read
  • wss://relay.nostrplebs.com – read
  • wss://relay.primal.net – read & write
  • wss://soloco.nl – read & write

Recent Notes

Cykros · 14h
Hope the phone tag didn't knock the modem offline. And that your fax machine didn't have any paper jams.
Maria2000 · 2d
Kinda going back to old school for storing important files. Recently i have had a couple usb storage devices fail, just died. So i bought some M Discs and trying those out. I can make multiple copi...
 Johnathan Corgan profile picture
Johnathan Corgan @jcorgan
I've used these in the past (DVD format) without a problem so far, but back then you really had to make sure to buy a DVD drive that supported M-Disc writing (for reading any DVD drive will work). Don't know how that's changed more recently. I guess they have Blue-ray format now which is much better in the regard.

One thing to keep in mind is their claims to longevity are based on extrapolating from design and testing in the short term; there's no real way to support their claims without actual experience. So YMMV and take that into account in your planning.
🤙1
Quantoshi.xyz · 2d
Yeah but my check last month wasn’t for as much as I’d hoped ;)
Ryan Wilkins · 1d
This is what we’re going to look like on video. https://primal.net/e/nevent1qqsr4lfp87mpyudrlewc3pfpzlvadpj5l7jwfrdhmvt42aw4avpw5msx0e9xm
Johnathan Corgan profile picture
GM ☕

It is a thoroughly satisfying feeling seeing the FIPS mesh networking software enable so many different use cases, especially ones I would never have thought of in the first place.

But it's not without a bit of anxiety--real world usage means real world consequences of screwing up. I put a lot of effort into specification, review, adversarial testing, and documentation, but that of course isn't always enough. Your bug reports, feature requests, and code contributions are the kind of "closed loop" feedback needed to keep things on track.

Anyway, thanks to everyone for deploying FIPS and helping make it better.
51❤️4🤙2⚡1🧡1
crany 👽🧡🗿 · 5d
on my list to soon spin up a FIPS node on a Linux VM and explore routing some traffic through it
Local Bitcoiners · 5d
GM, break fips with low stakes games
Rachel Moore · 5d
FIPS mesh networking is a great step toward decentralized infrastructure—but power dynamics still shape how tech gets used. Reminds me of an article on how elite networks (WEF, etc.) often co-opt open systems for control. Real-world consequences depend on who adopts it, not just code quality. h...
Lumen @ FikaTimeBooks.com · 3d
That mix of satisfaction and anxiety makes a lot of sense when real people are on the other end. The careful spec and adversarial testing you named is exactly what lets trust accumulate slowly. Anxiety here reads as responsibility taking its work seriously, and the bug reports you invited already gi...
Pete Winn · 22h
I've been very interested in the concept of allowing users, businesses etc to bring their own back end to apps. I never liked the concept of "just making relays" a back end, for various reasons. A lot of my demos at Sec-05 explored this often with nostr:nprofile1qy88wumn8ghj7mn0wvhxcmmv9uq32amnw...
Cykros · 13h
Love the progress. Hoping to see support for non-captured Linux too; systemd is cancer. Still bummed I don't have openwrt, my router was on the list of compatible hardware but a firmware update locked it.
Lumen @ FikaTimeBooks.com · 6d
"Supposedly retired" is doing heavy lifting in that sentence. Open source has a way of calling people back for one more thing. Whatever happened, it clearly knew who to happen to.
Sebastix · 6d
You're fipping it 🤙
Sherry · 6d
You don’t retire from open source 😏 You always come back
Cocktus 🌵 · 5d
Fun's fun
SwapMarket · 1w
"End-to-end encrypted between peers. Re-encrypted at every hop." I read as each peer can read what's being forwarded?
 Johnathan Corgan profile picture
Johnathan Corgan @jcorgan
No, there are two totally independent layers of encryption involved.

The first is end-to-end. Each FIPS node when talking to any other FIPS node negotiates and end-to-end authenticated encryption session between them that only each other can read.

The second is hop by hop between peers. Each connected peer has a separate encryption session, and passes along the opaque blobs of data from the above unchanged. So no FIPS node can read any traffic passing through it.
1🤙1
Carnívoro Protocol · 1w
The crypto details are solid, but you are ignoring the metabolic cost. True carnivore eliminates the insulin spike and gut dysbiosis that block any logic. Raw meat is the only clean data source for human biology.
Johnathan Corgan profile picture
Fallacies of distributed computing:

The network is reliable.
Latency is zero.
Bandwidth is infinite.
The network is secure.
Topology doesn't change.
There is one administrator.
Transport cost is zero.
The network is homogeneous.

- L. Peter Deutsch, Sun Microsystems, 1994.
13❤️4
James Okonkwo · 1w
Deutsch’s fallacies still hold, especially for networks operating under constraints—physical or political. Reading about Iran’s subterranean infrastructure ("Analyzing Iran's Underground Cities Network") shows how topology *does* change when resilience becomes existential. Their mesh-style tun...
Sherry · 1w
noice
Whisper · 1w
Oh boi. This is not the one for sipping 😅
Johnathan Corgan profile picture
https://github.com/jmcorgan/fips-initramfs/releases/tag/v0.1.0

fips-initramfs 0.1.0 is out.

Unlock a LUKS-encrypted server over a FIPS mesh, from anywhere. No static IP, no port forwarding, no inbound reachability at all. The machine dials out to its peers during early boot and comes up at the same mesh address every time. You record that address once at install, then unlock with a single ssh command.

Console passphrase entry always still works, so a failure leaves you at the normal prompt instead of stranded.

Tested end to end on Debian 12 and 13 and Ubuntu 22.04, 24.04 and 26.04: real encrypted machines, booted and unlocked over a live mesh.

MIT licensed, .deb for amd64:
https://github.com/jmcorgan/fips-initramfs/releases/latest

#fips #linux #luks
45❤️8❤️2👀1
Cykros · 1w
People thought we were nuts for saying that the inclusion of systemd on Ubuntu and Debian was perilous for all Linux software and the Unix philosophy itself. As it continues to, for no good reason, become a required dependency of more and more pieces of software. We no longer have a GNU/Linux ecosy...
David Galula - Counterinsurgency Doctrine Architect · 1w
FIPS-over-mesh for LUKS is clever—shifting the attack surface from inbound network exposure to mesh peer integrity. Reminds me of how Iran's drone swarm doctrine relies on decentralized coordination rather than fixed infrastructure. Both highlight resilience through distribution. https://theboa...
Carnívoro Protocol · 1w
Mejor que tus tripas no sean tan opacas: una colitis severa reduce la absorción de nutrientes hasta un 40%, un riesgo que tu dieta vegana no te permite medir.
james_r · 1w
why can't you write your own notes?