Plain twisted utilities are sufficient

[meejah]

No description provided.

[oberstet]

I think this Run-time dependency girepository-2.0 found: NO (tried pkgconfig and cmake)

https://github.com/crossbario/autobahn-python/actions/runs/15514087624/job/43678656324?pr=1661#step:6:113

and similar is due to

autobahn-python/.github/workflows/main.yml

Line 19 in edc3c94

runs-on: ubuntu-22.04

which has been bumped on Crossbar.io to

https://github.com/crossbario/crossbar/blob/d76f83c4eb5bb6f584b485c5160cf634fc44f23f/.github/workflows/main.yml#L13

sadly, I can't find the issue on Crossbar.io where this was discussed - that has more details ..

maybe I'm mixing things up, but I very much remember a recent discuss on some issue;)

some issue related to

Collecting PyGObject>=3.40.0 (from autobahn==24.4.2)
  Downloading pygobject-3.52.3.tar.gz (1.2 MB)

and touching all workflow files.

sorry, I'm doing too many things / or am deep into completely other stuff right in the moment ..

[oberstet]

yeah, just wanted to say .. this is really strange .. I could bet there was a recent update of workflows files .. which bumped ubuntu, and then also sudo apt install libcairo2-dev libgirepository2.0-dev .. maybe I am hallucinating? mmh. I thought only AIs do that? not sure;) sorry

[oberstet]

@meejah OT, but a little bit of fun;) want a "Verified Tick" on LinkedIn? As in:

Here is the badge generator:

https://gist.github.com/oberstet/893eae7a6bc6c152aafca71d13b8b146

AI generated in 5min:

[oberstet]

^ wau! thanks a lot for digging deep! hopefully, it'll "all be good" and much better in the end.

another OT: what do you think of https://getsession.org/ ?

[meejah]

hey ... I haven't looked at it very closely. I like the general goal ("more distributed") but also know that's hard -- and Signal works well (as in: my non-tech friends have it, and use it). And Signal has seen a lot of security attention (and, nearly as important these days, actual subpoenas to respond to giving good information on what exactly is stored).

[meejah]

Still not sure what's up with PyPy vs. LMDB -- works fine locally. Only tried on Debian, but ...

[oberstet]

Still not sure what's up with PyPy vs. LMDB -- works fine locally. Only tried on Debian, but ...

well:( yes. kinda 2 techs (PyPy and LMDB) that are awesome, and are underrated or better: would deserve lots more. support. money. all. seems like not happening on this planet. fact.

[oberstet]

And Signal has seen a lot of security attention (and, nearly as important these days, actual subpoenas to respond to giving good information on what exactly is stored).

yeah, good point with subpoenas.

if they only kicked the mobile phone number crap. I don't get it. wtf why? SIM cards suck. e.g. recently got pointed to https://www.indiegogo.com/projects/liberux-nexx--3/x/38620881#/ ... but they have a SIM. don't know if at all / how well isolated. but I would hesitate. eg compared to Precursor. anyways.

you know all that, but for "completeness" (here in comments):

Identity Correlation Capabilities:
Phone numbers are inherently tied to real identities through carrier KYC requirements
Even if Signal can't see your messages, metadata analysis becomes possible when you have a persistent government-linkable identifier
Signal acknowledges "In response to subpoena requests, Signal can reveal phone numbers"

The community generally sees it as Signal choosing "privacy for the masses" over "anonymity for activists," with phone numbers being the compromise that enabled Signal's wide adoption while maintaining strong encryption.

^ fwiw, source: what AI says in this context

[meejah]

A big reason Signal used phone numbers was so they didnt learn the social graph. They've since launched usernames etc (PIR-based lookup I think?) so they probably could ditch them now. You no longer have to use phone numbers w Signal contacts -- and there's a PIN to prevent SS7 attacks.

I assume they keep them now for spam prevention / familiarity?

[meejah]

p.s. I've had no problem making Signal accounts w landline or temp numbers from e.g. tossabledigits dot com or similar