Peergos

Peergos

@peergos.org

A protocol for a humane, privacy-focused, self-authenticated social web. Recipient of NGIPointer grant, graduate of Oxford Foundry, audited by Cure53 and Radically Open Security https://peergos.org https://github.com/peergos/peergos

352 followers75 following125 posts

Peergos reposted

This is the reason why I designed @peergos.org to dial by key. I wish atproto had adopted that, but I know there were reasons.

Filippo Valsorda@filippo.abyssdomain.expert

🚨 Six WebPKI Intermediate CAs are compromised. This is bigger than Heartbleed, but a client-side issue. Anything that verifies certificates against public roots, like most TLS clients, is/was affected. Details, live test, patched versions and workarounds at emudhra.we-have-a-problem.com Act now.

Tiles and Files! There's a new Peergos release out which includes tiles in the newsfeed. The first user of this is the calendar app to render shared calendar events. Not on Peergos yet? Come join the future - a secure and private web! #NoSurveillanceCapitalism peergos.org github.com/Peergos/web-...

github.comRelease Tiles in the newsfeed and Vue 3 · Peergos/web-uiApps can now show small tiles in the newsfeed. These use the same sandbox as the app themselves, but with only read access to the shared file. The first example of this is the calendar app showing ...

Peergos reposted

Tiles (sandboxed apps) in @peergos.org are normally full-screen affairs, but now they can have a tile mode which is displayed directly inline in the newsfeed. The first example of this is the calendar displaying event details directly in your feed rather than having to open the full calendar app.

Peergos reposted

G'day folks! There is a new @peergos.org release out with 2 cool new features. Now you can set a space limit on any file/dir you share writable, including secret links. So we've finally removed the warning that anyone you share write capability to could fill your space! github.com/Peergos/web-...

github.comRelease Writer quotas and custom groups · Peergos/web-uiYou can now set a space limit when sharing a file or file writable, including direct shares and secret links. You can also create custom groups for fast sharing with larger groups of people. The me...

Happy Friday, happy new Peergos release! Cool stuff in this release: * multi-file secret links (up to 100) * blake3 support (read-only until enough clients support it) * a beautiful new drive UI * better video thumbnails on desktop * Greek language support (about time!) github.com/Peergos/web-...

github.comRelease Fix sync DB backwards compatibility · Peergos/web-uiA patch release to fix sync db backwards compatibility. Flatpak is the recommended installation method for Linux: https://flatpak.peergos.org Mirrored at https://peergos.net/public/peergos/releases...

Until now we've been using a custom tree hash based on sha256 because JS blake3 wasn't fast enough in the browser. Now, thanks to the awesome Firefox devs speeding it up massively, and Safari 27 speeding it up from 20 MB/s to 500 MB/s we can start migrating to blake3.

There a new release out. Get it while it's hot! github.com/Peergos/web-... You can browse directly into zip files now. It downloads the zip entries lazily on demand. You can download or view individual files in the zip. You can delete, rename or upload new files or folders to the zip.

github.comRelease Browsable zips, CALDAV+CARDDAV and SRI · Peergos/web-uiThis release includes browsable and modifiable zip files, including via the CLI. We also add support for caldav and carddav in the webdav bridge, and native calendar and contact sync on android. We...

You can even download a folder in the zip as a new zip file, and copy files to and from the rest of your Peergos drive. It works in the browser, and the CLI and the apps.

Wonderful feedback! 😍 "Beyond being a happy customer, I genuinely think Peergos is what software should look like. Decentralised, open-source, and independent from Big Tech and VC money. The architecture and philosophy behind it basically tick every box for me.

It’s rare to find a project that stays true to these principles instead of chasing scale or a payout. That’s what drew me in and why I’ve stuck with it. Huge thanks again to the team for building something that aligns with these values rather than compromising on them."

Peergos reposted

Now you can browse into zip files on @peergos.org You can download individual files or view them directly in the app registered for them. You can even open websites or markdown wikis directly inside the zip. Links and images to relative files in the zip work. We also support adding new files, ...

Some may be wondering what implications, if any, this has for @peergos. Even if all ipfs work, and infrastructure stopped today we would be unaffected as a protocol. We have our own minimal implementation, and these days we basically do HTTP over (jvm)libp2p + kademlia.

We are stable where we are, but we might consider switching to @iroh.computer + pkarr in the future, especially with a pure java implementation. The main thing we rely on is routing requests to a server by a public key, which, happily, Iroh also implements.

Peergos is a personal data layer for the internet. Free yourself from servers holding your identity hostage. Free yourself from apps holding your data hostage. Free yourself from surveillance capitalism. Free yourself.

Lovely customer feedback, "I recently got a Pioneer membership with Peergos and am impressed with how versatile the feature set is compared with Proton Drive and Tresorit. Well done!"

This was super fun, and found a bunch of rough UX edges in Peergos which are all fixed now.

Yorgos@yorgos.net.gr

Great fun this morning at the #JCrete hack day with @ianopolous.bsky.social, getting @radicle.dev + @peergos.org running side by side on #solar - powered hardware! Blog post and peergos-backed release artifacts on Radicle, coming soon Goal: #peer2peer #decentralised software, packaged sustainably!

Peergos reposted

It is possible to have federation that keeps end users in control and doesn't allow 3rd party copying of your data without your consent. That's exactly what @peergos.org protocol does. There are of course tradeoffs but it is the right choice for user agency and democracy.

Laurens@laurenshof.online

the eYou people, a closed european twitterclone that is now using didplc for identity, seem to be reading my posts and have figured out the fairly horrifying implications of it

Peergos reposted

Hooray! Our first government contract for @peergos.org! EU governments are starting to realise what real digital sovereignty means. It means portable identity, portable data, and end-to-end encryption. Mass surveillance is not compatible with democracy.

Peergos reposted

Dialing keys is definitely the right approach. We've been doing that in @peergos.org since 2019: peergos.org/posts/dev-up...

peergos.orgDevelopment update
Iroh@iroh.computer

We just released the first stable version of iroh, v1.0! Read about it: www.iroh.computer/blog/v1 We're super proud of where we landed with iroh's 1.0. Since version 0.35 it feels like we've entirely replaced the "engine underneath". Are you a fellow key-dialer? Come tell us how you use iroh!

Peergos reposted

I'm super excited about the upcoming drive mount for @peergos.org which lets you lazily mount your entire Peergos drive, with partial sync and offline writes. It also improves the webdav bridge so that uploads of files automatically skip identical chunks, and it supports Range based GETs and PUTs.

Peergos reposted

I don't have much time for bluesky these days, but here's 3 big releases of @peergos.org. The first adds cross platform thumbnail generation for images and videos in our sync client. Also 5x fewer syscalls in the sync local enumeration. github.com/Peergos/web-...

github.comRelease Thumbnails and no hangs! · Peergos/web-uiThis release fixes a lot of hangs present in sync and uploads in the desktop apps. It also brings thumbnail generation to all desktop apps sync clients for images and videos. Server operators: We n...

Peergos reposted

Replying to @newsmastfoundation.org

This is a good start, but is missing a critical part: private data and sharing. Without privacy there can be no democracy. The obvious solution there is @peergos.org and we'd love to be included.

Peergos reposted

Apple and Google are gradually expanding their use of hardware-based attestation. They're convincing a growing number of services to adopt it. Google's Play Integrity API and Apple's App Attest API are very similar. Apple brought it to the web via Privacy Pass, which Google intends on doing too.

Peergos reposted

Fix the incentives, fix the system. Don't be part of surveillance capitalism.

Ian Preston@ianopolous.bsky.social

Yep! That's been our core principle working on @peergos.org since 2013 - it has to be easy for everyone to use. If people have to manage their keys then you've already failed. E2EE needs to be part of the foundation of the internet. Servers and hosts should be dump pipes, or they accumulate power.

Peergos reposted

There's a new Peergos release out with 1000x resumption of large uploads and 10x faster deletes! Come and join the growing user agency revolution! If it is not E2EE, you don't own or control it. Control your data, control your destiny! github.com/Peergos/web-...

github.comRelease 1000x Faster upload resumption and deletion · Peergos/web-uiWe make resuming uploads of large directories 1000x faster, and resuming uploads of large files 5000x faster. Starting new uploads is also much faster. Deleting a large folder is 10x faster. Flatpa...

Peergos reposted

It's a good day when I make resuming uploads of large directories 1000x faster in @peergos.org Next up, an even bigger speedup for resuming huge file uploads, simply by switching from a linear chunk scan to a batched binary search (should be ~5000x for resuming a 600GB file halfway).

Peergos reposted

We've been planning and working on this for over a decade in @peergos.org We already use hybrid PQ key exchange, so your data is already safe from exposure by a CRQC. We plan to use SLH-DSA for identity and am ML-DSA hybrid for writing spaces. We are already part way through the latter.

Filippo Valsorda@filippo.abyssdomain.expert

Two papers came out last week that suggest classical asymmetric cryptography might indeed be broken by quantum computers in just a few years. That means we need to ship post-quantum crypto now, with the tools we have: ML-KEM and ML-DSA. I didn't think PQ auth was so urgent until recently.

Peergos reposted

There's a new release of @peergos.org out! This one includes a bunch of optimisations and fixes, like skipping identical remote files during folder uploads, and fixes for the MacOS webview which I broke. Also a Korean translation and support for LibreOffice WASM build. github.com/Peergos/web-...

github.comRelease Optimisations and MacOS fixes · Peergos/web-uiThis release includes lots of optimisations, including skipping identical files during folder upload. We also add support for the experimental weboffice app - a wasm build of Libre Office. We fix d...

Peergos reposted

Replying to @bumblefudge.com

My hesitation with ucan is the amount of asymmetric crypto limits its scalability. There is a reason why S3 only had symmetric auth algorithms for many years. There are better solutions.

Peergos reposted

A great post on the evolution of power in apps as formats became proprietary and then cloud based. www.orionreed.com/posts/app-fi... This is why the data model in @peergos.org is so powerful - you own your data, and neither apps nor even your PDS can circumvent this, guaranteed by E2EE.

orionreed.comDigital Topology & Economic PowerThe autonomous file, once the basic unit of user agency in personal computing, was first hollowed out through proprietary formats and data internalization, then abolished entirely by cloud platforms, ...

Peergos reposted

One cool thing is that @peergos.org supports client-side verified streaming and range requests in browsers today without needing blake3. All you need is a known merkle tree structure, a fixed hash function and a chunk size. Blake3 is cool, but it's not magic. Every app in Peergos gets this for free

Robin Berjon@robin.berjon.com

Big Update to the Big DASL: it now supports streaming verification with range retrieval. Many thanks to @b5.bsky.social for bringing that in! dasl.ing/bdasl.html

Peergos reposted

Peergos is starting to get quite awesome. It's the only protocol I'm aware of that has 1) portable identity and data 2) portable social graphs 3) private data 4) private social graph 5) private metadata 6) E2EE (private data, even from your PDS) 7) Tamper proof data (even with compromised PDS)

Peergos@peergos.org

There's a new release out folks! We've switched to Snap for Linux installs, enabled quic transport, and made a bunch of ui improvements. github.com/Peergos/web-...