memes

23135 readers

1847 users here now

Community rules

1. Be civil

No trolling, bigotry or other insulting / annoying behaviour

2. No politics

This is non-politics community. For political memes please go to !politicalmemes@lemmy.world

3. No recent reposts

Check for reposts when posting a meme, you can only repost after 1 month

4. No bots

No bots without the express approval of the mods or the admins

5. No Spam/Ads/AI Slop

No advertisements or spam. This is an instance rule and the only way to live. We also consider AI slop to be spam in this community and is subject to removal.

A collection of some classic Lemmy memes for your enjoyment

Sister communities

!tenforward@lemmy.world : Star Trek memes, chat and shitposts
!lemmyshitpost@lemmy.world : Lemmy Shitposts, anything and everything goes.
!linuxmemes@lemmy.world : Linux themed memes
!comicstrips@lemmy.world : for those who love comic stories.

founded 3 years ago

MODERATORS

Tenthrow@lemmy.world

The_Picard_Maneuver@lemmy.world

The_Picard_Maneuver@startrek.website

626

Google you did it again (lemmy.world)

submitted 1 month ago by time2lose@lemmy.world to c/memes@lemmy.world

43 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] percent@infosec.pub 2 points 1 month ago* (last edited 1 month ago) (1 children)

I’d want to know more about it and whether it’s generated in the browser or on the server.

FWIW, most of these web-based Nostr clients are just static JS files. They're SPAs that connect to the relay servers (via WebSocket, IIRC). You can open up your browser's devtools, go to the "Network" tab, and see what's happening.

I don't think I'd trust one that does any server-side rendering. No particular reason (though I'm sure I could think of some) other than it just wouldn't feel right for Nostr.

I’m also not even sure how I’d go about doing some sort of review of the javascript algorithms or where their random numbers come from

I'd guess they just use the native WebCrypto APIs, but I have not verified. More info on native crypto APIs available in JS here:

(FWIW, every Node.js distro I've ever used leveraged OpenSSL for those, under the hood. I imagine other runtimes do too.)

[–] historicaldocuments@lemmy.world 1 points 1 month ago

FWIW, every Node.js distro I’ve ever used leveraged OpenSSL for those, under the hood. I imagine other runtimes do too.

I hope so. Crypto is a weirder beast than some things because numbers can look random and not be without much, much deeper inspection: https://www.openbsd.org/papers/bsdcan14-libressl/mgp00001.html