Can you be more specific? I'm curious to know which advertisement you're talking about.
NovaFuture
joined 4 months ago
It's impossible to say otherwise :-)
Are you alright? Just chilling? Doing your own thing in your corner? You're speaking without any basis. That's unacceptable.
Thanks for the detailed review, really appreciate it — this is exactly the kind of feedback the project needed before a public release.
You were right on two of the three points, and I've just pushed fixes to Codeberg (commit 93b8985):
GPG: you nailed it. config.py was silently reusing the user's personal ~/.gnupg keyring if a key was present, which is obviously wrong for an identity-isolated app. Fixed: PeerBox now uses a dedicated keyring at system/gpg/ with --homedir enforced on every gpg call. Existing users get their key auto-migrated on next config.py run so contacts don't break.
Dependencies: install_pysocks() was calling pip install --break-system-packages at runtime, which is indefensible. Removed entirely — it was actually dead code (never called) but still a trap. Documented PySocks in the README as a required pip dep alongside cryptography and pywebview. The broader venv/lockfile refactor is a bigger chantier, planned for phase 6.
SSH keys: here I have to push back a bit — ssh_setup.py does generate a dedicated id_rsa_peerbox key, never reuses id_rsa or id_ed25519. BUT you indirectly uncovered a real bug: request_creator.py had a silent fallback reading id_rsa.pub / id_ed25519.pub if id_rsa_peerbox.pub was missing. That's gone now too.
Quill 1.3.7 → 2.0.3: fair point, on the roadmap for this weekend. Non-minified too for auditability.
Seriously, thanks for taking the time to read the code and call out what needed calling out. This is what keeps small projects honest.
In the text, I clearly wrote that perhaps a conscious AI will be possible in the future. I'm like everyone else; I don't know anything about it. And like everyone else, I don't know where consciousness comes from. What I do know for sure is that current and future AIs are simply computers that retrieve information from a database and organize it. There's nothing magical about that. Regarding this, I encourage you to read the statements made by the leaders of OpenAI and Anthropic in recent months. These people are clearly unscrupulous manipulators.