Nudelstapler

3 different sarcastic anime characters in a trenchcoat

OSI-Schichtnudelauflauf

Als Kind in den RNG gefallen.

🥐

Arc-welding pasta layers since '99

Mein Sternzeichen ist die Mikrowelle

( Signal | Delta ) > ( Matrix | Threema )

Matrix: Nudelstapler (npub14xm…2m4c):tchncs.de
Threema: MESRENW6
Signal: lasagne.42
Deltachat: qnn4cogzf@mehl.cloud

Public Key

npub14xmnyqu8sw5smlq2usf8crqvzssup7nuruptl99mena9nk7m4pxs9j2m4c

NIP-05 Address

lasagne_at_chaos.social@momostr.pink

Profile Code

nprofile1qqs2ndejqwrc82gdls9wgynupsxpggwqlf7p7q4ljjaue7jem0d6sngprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmntqyt8wumn8ghj7un9d3shjtnswf5k6ctv9ehx2aqejasup

Publishing to

Author Public Key

npub14xmnyqu8sw5smlq2usf8crqvzssup7nuruptl99mena9nk7m4pxs9j2m4c

Show more details

Last Notes

2026-10-14 22:58:10 UTC

- reply

Or access to a thread mesh for things control.
Or do I misunderstand the capabilities for Bluetooth/Thread/etc access under the nearby devices umbrella?

2026-10-14 22:55:11 UTC

- reply

...
Having comms to hosts on a link local network is less assumed trust than accessing Bluetooth peripherals, which in their purpose often have way more access to data. For example headsets that receive audio i/o channels, call control, gesture intents, assistant trigger, contacts access, caller's number. They are themselves vulnerable to apps seeing f.e. airoha ble debug endpoints.

2026-10-14 22:50:33 UTC

- reply

So non globally routable ip ranges and mdns access is squashed into the same permission group as access to bluetooth peripherals.
(But according to docs not in all cases. I could interpret their wording as system modal mediated things have contextual grants like video cast intents or gateway's dns. But they are light on details there.)
From a fingerprinting perspective that makes sense.
But from an attack surface consideration its horrible.
....

2026-10-14 10:36:10 UTC

@npub1kwa…e0nj
The mental overhead of understanding and reasoning about the impact of Android 17 permissions is high.

2026-08-13 18:59:28 UTC

Yo
@npub1mtr…trt0
Your Gitlab bugtrackers don't work without giving them a phone number. Even when oidc login via GitHub.
Here is the bug that it is about:
https://github.com/ArcaneChat/android/issues/173

2026-08-02 16:04:34 UTC

- reply

So when whomever does not have inspected the machine beforehand and the situation is so urgent, that they won't have the patience to force you to write the password down and then check if it is a duress password?

2026-08-02 00:20:06 UTC

- reply

No, because it is simply not assurable.
Standard forensic procedures lead to state agents and similar capability being told to always image the machine first, and never try to unlock using the software on the machine. So as they have a copy of the luks header pre-wipe and can just use an implementation of luks that does not support duress passwords.
Most luks deployments do not employ any surefire wipable memory for cryptographic key encryption keys.

2026-07-07 16:26:16 UTC

- reply

But how much capacity do the balls have?
They growing?

2026-07-07 16:13:52 UTC

- reply

Kinda sad that it does not have a hole in the dick to easily get it out if you put too much water in.

2026-06-29 11:33:32 UTC

- reply

The opt out is a lie

2026-06-26 22:58:26 UTC

- reply

What does local network access mean combined with VPN for this thing?
How is locality decided for ipv6?
Does it restrict localhost ports?
imagine an app like vendors Bluetooth headphone control app.
I set it to no internet because usually firmware updates break stuff instead of improving. But i enabled nearby for it to have Bluetooth access. Does the app now additionally have local network access?
It could still communicate to internet via direct comms to a local resolver?

2026-06-26 09:43:39 UTC

@npub1kwa…e0nj
That is new. What exactly does it do?
No alt text, time constraint
https://assets.chaos.social/media_attachments/files/116/815/758/510/386/366/original/e3d4cd839ae870a0.png

2026-06-14 10:19:17 UTC

- reply

Next Level wenn Bestatter für sowas dann Infos in LLMs tun und die Grütze vorlesen.

2026-01-25 10:26:33 UTC

- reply

Es gibt noch mindestens das vorinstallierte Messages von Samsung,Jio und +Message, also Pfon Hersteller und Carrier.
Nix unabhängiges.

2026-01-24 18:52:19 UTC

- reply

Kein Indikator ob E2E oder nicht. Keine Möglichkeit Keys zu vergleichen.
Die Entscheidung ob E2E unterstützt wird ist phone-carrier bestimmt.
Kein Metadatenschutz.
Keine unabhängigen Clients.
Nur Google Messages und Apple Messages.

2025-12-27 18:23:14 UTC

@npub1kwa…e0nj
Did you do massive UI changes in 2025122500?
Like colour scheme and glass?

2025-12-14 16:47:53 UTC

- reply

@npub13jf…w6av @npub1m9z…whzq @npub1l92…sqd6 @npub1nqn…nfm7 @npub1tcc…4342
If it was not possible to publish on google without giving them signing power, no messenger at all would have code integrity guarantees on there.

2025-12-14 16:44:59 UTC

- reply

@npub13jf…w6av @npub1m9z…whzq @npub1l92…sqd6 @npub1nqn…nfm7 @npub1tcc…4342
I am not dronn
Its just that the usual security wankers recommend to load everything from playstore, which I think is the wrong message.

2025-12-14 16:25:24 UTC

- reply

@npub13jf…w6av @npub1m9z…whzq @npub1l92…sqd6 @npub1nqn…nfm7 @npub1tcc…4342
App-Bundles delegate apk signing to Google.
And they are now required.
Did something happen that fixed that?

2025-10-28 19:34:36 UTC

- reply

I don't quite believe that.
I thought Meredith was.
Sounds more lime search summary is lying.

2025-10-28 19:33:31 UTC

- reply

Wuat
Bryan Acton, the asshole that sold WhatsApp to Facebook is CEO of Signal Foundation?

2024-10-29 19:41:38 UTC

- reply

Whats the illegal ant the unethical ones for example?