chrisb
@boscolo.co
sojourning through the crazy woods (bosco loco)
pondering rainbows and unicorns
pondering rainbows and unicorns
Pinned
chrisb
@boscolo.co
· Jun 13
ATproto devs, app builders, dreamers of a more agentic world—this our opportunity to shape secure, private open E2EE messaging!
This preliminary AT Messaging spec needs your help to finish. Dive in, share your brilliance, join #e2eeWG, and let’s build it together!
github.com/ATProtocol-C...
This preliminary AT Messaging spec needs your help to finish. Dive in, share your brilliance, join #e2eeWG, and let’s build it together!
github.com/ATProtocol-C...
I'm a bit of a dreamer, I want to message people via ATProto using their ATProto Identity and have it be end-to-end encrypted like Signal.
bsky.app/profile/bosc...
bsky.app/profile/bosc...
Is anyone attempting to measure human user counts on Bluesky?
It is so trivially easy for bots to create a Bluesky account, that I wouldn't be surprised if this user count is off by an order of magnitude.
I'm not trying to be anti-Bluesky. Just curious if anyone has insight into the actual number.
It is so trivially easy for bots to create a Bluesky account, that I wouldn't be surprised if this user count is off by an order of magnitude.
I'm not trying to be anti-Bluesky. Just curious if anyone has insight into the actual number.
Bluesky currently has 40,003,623 users 😀
Approximately 0.23 new users are joining per second
In the last hour 821 users have joined with a total of 21,522 in the last 24 hours
Bluesky could hit the next million in 46 Days, 7 Hours based on the last 24h
░░░░░░░░░░░░░░░░░░░ 0 %
#bluesky
Approximately 0.23 new users are joining per second
In the last hour 821 users have joined with a total of 21,522 in the last 24 hours
Bluesky could hit the next million in 46 Days, 7 Hours based on the last 24h
░░░░░░░░░░░░░░░░░░░ 0 %
#bluesky
October 31, 2025 at 1:48 PM
Is anyone attempting to measure human user counts on Bluesky?
It is so trivially easy for bots to create a Bluesky account, that I wouldn't be surprised if this user count is off by an order of magnitude.
I'm not trying to be anti-Bluesky. Just curious if anyone has insight into the actual number.
It is so trivially easy for bots to create a Bluesky account, that I wouldn't be surprised if this user count is off by an order of magnitude.
I'm not trying to be anti-Bluesky. Just curious if anyone has insight into the actual number.
Just like a human developer:
"Sorry for the wild goose chase! The crypto initialization part was actually fine from the start (after installing the polyfills), and the real issue was just a simple API call mistake on my part." 🪿
"Sorry for the wild goose chase! The crypto initialization part was actually fine from the start (after installing the polyfills), and the real issue was just a simple API call mistake on my part." 🪿
October 28, 2025 at 11:40 PM
Just like a human developer:
"Sorry for the wild goose chase! The crypto initialization part was actually fine from the start (after installing the polyfills), and the real issue was just a simple API call mistake on my part." 🪿
"Sorry for the wild goose chase! The crypto initialization part was actually fine from the start (after installing the polyfills), and the real issue was just a simple API call mistake on my part." 🪿
👀
I've been up to a little more chaos...
E2EE messaging just got audio chats!
E2EE messaging just got audio chats!
October 27, 2025 at 10:23 PM
👀
To my AT Protocol OAuth friends.
How do I build a mobile app that logs in to my PDS and isn’t super clunky? Bonus points if it uses Face ID and I never have to put a password in anywhere.
How do I build a mobile app that logs in to my PDS and isn’t super clunky? Bonus points if it uses Face ID and I never have to put a password in anywhere.
October 27, 2025 at 6:52 PM
To my AT Protocol OAuth friends.
How do I build a mobile app that logs in to my PDS and isn’t super clunky? Bonus points if it uses Face ID and I never have to put a password in anywhere.
How do I build a mobile app that logs in to my PDS and isn’t super clunky? Bonus points if it uses Face ID and I never have to put a password in anywhere.
Reposted by chrisb
📣THREAD: It’s surprising to me that so many people were surprised to learn that Signal runs partly on AWS (something we can do because we use encryption to make sure no one but you–not AWS, not Signal, not anyone–can access your comms).
It’s also concerning. 1/
It’s also concerning. 1/
PSA: we're aware that Signal is down for some people. This appears to be related to a major AWS outage. Stand by.
October 27, 2025 at 10:38 AM
📣THREAD: It’s surprising to me that so many people were surprised to learn that Signal runs partly on AWS (something we can do because we use encryption to make sure no one but you–not AWS, not Signal, not anyone–can access your comms).
It’s also concerning. 1/
It’s also concerning. 1/
WRT Encrypted Messaging:
The biggest mistake Matrix is making is to lump WhatsApp and Signal (DMs/Small Groups) in with Telegram, Slack and Discord (Large Groups), trying to solve both problems with the same architecture.
Matrix in place of WhatsApp/Signal is a step backwards not forward.
The biggest mistake Matrix is making is to lump WhatsApp and Signal (DMs/Small Groups) in with Telegram, Slack and Discord (Large Groups), trying to solve both problems with the same architecture.
Matrix in place of WhatsApp/Signal is a step backwards not forward.
October 27, 2025 at 2:56 PM
WRT Encrypted Messaging:
The biggest mistake Matrix is making is to lump WhatsApp and Signal (DMs/Small Groups) in with Telegram, Slack and Discord (Large Groups), trying to solve both problems with the same architecture.
Matrix in place of WhatsApp/Signal is a step backwards not forward.
The biggest mistake Matrix is making is to lump WhatsApp and Signal (DMs/Small Groups) in with Telegram, Slack and Discord (Large Groups), trying to solve both problems with the same architecture.
Matrix in place of WhatsApp/Signal is a step backwards not forward.
Whoa!
While performing a rename of a Typescript class across my large-ish project, I witnessed Claude resorting to perl for a multiline regexp.
Perl is still the 🐐
While performing a rename of a Typescript class across my large-ish project, I witnessed Claude resorting to perl for a multiline regexp.
Perl is still the 🐐
October 24, 2025 at 4:16 PM
Whoa!
While performing a rename of a Typescript class across my large-ish project, I witnessed Claude resorting to perl for a multiline regexp.
Perl is still the 🐐
While performing a rename of a Typescript class across my large-ish project, I witnessed Claude resorting to perl for a multiline regexp.
Perl is still the 🐐
With #AT-SMS end-to-end encrypted messaging, SMTP is the delivery protocol of last resort.
In the same way you can choose where to host your PDS, with AT-SMS you can choose who provides your messaging service. Providers permissionlessly talk to each other via SMTP.
blog.boscolo.co/3lxx6eqkga22...
In the same way you can choose where to host your PDS, with AT-SMS you can choose who provides your messaging service. Providers permissionlessly talk to each other via SMTP.
blog.boscolo.co/3lxx6eqkga22...
Introducing AT-SMS - blog.boscolo.co
Open End-to-End Encrypted Messaging on AT Protocol
blog.boscolo.co
October 24, 2025 at 1:41 PM
With #AT-SMS end-to-end encrypted messaging, SMTP is the delivery protocol of last resort.
In the same way you can choose where to host your PDS, with AT-SMS you can choose who provides your messaging service. Providers permissionlessly talk to each other via SMTP.
blog.boscolo.co/3lxx6eqkga22...
In the same way you can choose where to host your PDS, with AT-SMS you can choose who provides your messaging service. Providers permissionlessly talk to each other via SMTP.
blog.boscolo.co/3lxx6eqkga22...
Vibe coding tip:
If Cluade doesn't fix a bug on the first or second attempt, allowing it to continue results in a code base full of garbage.
Best to pause and provide a prompt that helps it plan a different approach to identify the root problem.
If Cluade doesn't fix a bug on the first or second attempt, allowing it to continue results in a code base full of garbage.
Best to pause and provide a prompt that helps it plan a different approach to identify the root problem.
October 22, 2025 at 2:59 PM
Vibe coding tip:
If Cluade doesn't fix a bug on the first or second attempt, allowing it to continue results in a code base full of garbage.
Best to pause and provide a prompt that helps it plan a different approach to identify the root problem.
If Cluade doesn't fix a bug on the first or second attempt, allowing it to continue results in a code base full of garbage.
Best to pause and provide a prompt that helps it plan a different approach to identify the root problem.
PSA
If you are backing up your PDS using the Github Action script built by @filippo.abyssdomain.expert, you will need to update the backup script to point to the new location of goat.
If you are backing up your PDS using the Github Action script built by @filippo.abyssdomain.expert, you will need to update the backup script to point to the new location of goat.
Just setup github backup of my PDS via this template. Piece of cake! 🍰
I made a zero-maintenance way to keep a backup of your PDS repository in case you ever need to do an adversarial migration.
github.com/FiloSottile/...
A template that sets up a daily GitHub Actions backup with goat.
Based on git-scraper-template by @simonwillison.net.
github.com/FiloSottile/...
A template that sets up a daily GitHub Actions backup with goat.
Based on git-scraper-template by @simonwillison.net.
October 21, 2025 at 10:46 PM
PSA
If you are backing up your PDS using the Github Action script built by @filippo.abyssdomain.expert, you will need to update the backup script to point to the new location of goat.
If you are backing up your PDS using the Github Action script built by @filippo.abyssdomain.expert, you will need to update the backup script to point to the new location of goat.
Are you sleeping on @cloudflare.social Durable Objects with WebSocket Hibernation?
That's ok, you won't pay for anything while they sleep...
seriously tho, why isn't everyone building with them?
That's ok, you won't pay for anything while they sleep...
seriously tho, why isn't everyone building with them?
October 14, 2025 at 7:53 PM
Are you sleeping on @cloudflare.social Durable Objects with WebSocket Hibernation?
That's ok, you won't pay for anything while they sleep...
seriously tho, why isn't everyone building with them?
That's ok, you won't pay for anything while they sleep...
seriously tho, why isn't everyone building with them?
If AT Protocol had it's own native decentralized encrypted messaging, could build app notifications on it. 📬
🔔 Image if a notification that someone commented a published @leaflet.pub showed up in Bluesky?
🔔 Image if a notification that someone commented a published @leaflet.pub showed up in Bluesky?
October 14, 2025 at 7:31 PM
If AT Protocol had it's own native decentralized encrypted messaging, could build app notifications on it. 📬
🔔 Image if a notification that someone commented a published @leaflet.pub showed up in Bluesky?
🔔 Image if a notification that someone commented a published @leaflet.pub showed up in Bluesky?
if I had a nickel for every time I bought a domain, I'd be rich!
(minus the cost of the domain)
(minus the cost of the domain)
i even bought a domain!!
October 14, 2025 at 7:25 PM
if I had a nickel for every time I bought a domain, I'd be rich!
(minus the cost of the domain)
(minus the cost of the domain)
Reposted by chrisb
We are alarmed by reports that Germany is on the verge of a catastrophic about-face, reversing its longstanding and principled opposition to the EU’s Chat Control proposal which, if passed, could spell the end of the right to privacy in Europe. signal.org/blog/pdfs/ge...
signal.org
October 3, 2025 at 4:14 PM
We are alarmed by reports that Germany is on the verge of a catastrophic about-face, reversing its longstanding and principled opposition to the EU’s Chat Control proposal which, if passed, could spell the end of the right to privacy in Europe. signal.org/blog/pdfs/ge...
A full moon is nature’s shelling point for clock synchronization 🌕
September 28, 2025 at 8:10 PM
A full moon is nature’s shelling point for clock synchronization 🌕
In less than one month @leaflet.pub has completely spoiled me.
The ability to copy text on a web page, and turn it into a link with an OG preview that makes it totally obvious which text I am referring to is a game changer.
Note the difference in:
bsky.app/profile/bosc...
bsky.app/profile/bosc...
The ability to copy text on a web page, and turn it into a link with an OG preview that makes it totally obvious which text I am referring to is a game changer.
Note the difference in:
bsky.app/profile/bosc...
bsky.app/profile/bosc...
slightly tangential, but a PDS API for generic signing of content would be a huge unlock for a bunch of applications!
pfrazee.leaflet.pub/3lzhui2zbxk2...
pfrazee.leaflet.pub/3lzhui2zbxk2...
Three schemes for shared-private storage - Paul's Leaflets
pfrazee.leaflet.pub
September 26, 2025 at 1:41 PM
In less than one month @leaflet.pub has completely spoiled me.
The ability to copy text on a web page, and turn it into a link with an OG preview that makes it totally obvious which text I am referring to is a game changer.
Note the difference in:
bsky.app/profile/bosc...
bsky.app/profile/bosc...
The ability to copy text on a web page, and turn it into a link with an OG preview that makes it totally obvious which text I am referring to is a game changer.
Note the difference in:
bsky.app/profile/bosc...
bsky.app/profile/bosc...
In @pfrazee.com latest leaflet about "arenas":
The description of apps sending personal private data to other apps matches how we have designed AT-SMS, tho AT-SMS treats the inbox task as a service much like the PDS so users can choose their inbox provider. ☯️
pfrazee.leaflet.pub/3lzhui2zbxk2...
The description of apps sending personal private data to other apps matches how we have designed AT-SMS, tho AT-SMS treats the inbox task as a service much like the PDS so users can choose their inbox provider. ☯️
pfrazee.leaflet.pub/3lzhui2zbxk2...
Three schemes for shared-private storage - Paul's Leaflets
pfrazee.leaflet.pub
September 25, 2025 at 5:25 PM
In @pfrazee.com latest leaflet about "arenas":
The description of apps sending personal private data to other apps matches how we have designed AT-SMS, tho AT-SMS treats the inbox task as a service much like the PDS so users can choose their inbox provider. ☯️
pfrazee.leaflet.pub/3lzhui2zbxk2...
The description of apps sending personal private data to other apps matches how we have designed AT-SMS, tho AT-SMS treats the inbox task as a service much like the PDS so users can choose their inbox provider. ☯️
pfrazee.leaflet.pub/3lzhui2zbxk2...
This is pretty huge! I don't think people realize how soon payments are going to happen over HTTP.
Cloudflare introduces NET Dollar, a new U.S. dollar-backed stablecoin that will enable instant, secure transactions for the agentic web. https://cfl.re/4msrZWd
Cloudflare Introduces NET Dollar to Support a New Business Model for the AI-Driven Internet | Cloudflare
Cloudflare, Inc. (NYSE: NET), the leading connectivity cloud company, today announced plans to introduce NET Dollar, a new U.S. dollar-backed stablecoin that will enable instant, secure transactions f...
cfl.re
September 25, 2025 at 2:20 PM
This is pretty huge! I don't think people realize how soon payments are going to happen over HTTP.
Do you want to fund an open source alternative to WhatsApp built on AT Protocol?
It requires no viral algorithms to win, just a great user experience and a commitment to build an open protocol.
#AT-SMS
It requires no viral algorithms to win, just a great user experience and a commitment to build an open protocol.
#AT-SMS
The richest man on earth owns X.
The second richest man on earth is about to be a major owner of TikTok.
The third richest man owns Facebook, Instagram, and WhatsApp.
The fourth richest man owns The Washington Post.
See the problem here?
The second richest man on earth is about to be a major owner of TikTok.
The third richest man owns Facebook, Instagram, and WhatsApp.
The fourth richest man owns The Washington Post.
See the problem here?
September 24, 2025 at 10:39 PM
Do you want to fund an open source alternative to WhatsApp built on AT Protocol?
It requires no viral algorithms to win, just a great user experience and a commitment to build an open protocol.
#AT-SMS
It requires no viral algorithms to win, just a great user experience and a commitment to build an open protocol.
#AT-SMS
Reposted by chrisb
I feel like it's feasible to put *permissioned* data on atproto, but not *private* data. "private" colloquially means only accessible to those you intend to show it to, which is things like Signal/iMessage chats or an encrypted file system on your laptop. "permissioned" just means some people have-
September 24, 2025 at 6:42 PM
I feel like it's feasible to put *permissioned* data on atproto, but not *private* data. "private" colloquially means only accessible to those you intend to show it to, which is things like Signal/iMessage chats or an encrypted file system on your laptop. "permissioned" just means some people have-
Payments coming to an HTTP response code near you! 💵
Who will be the first to stand up a PDS with 402 support?
#x402 @cloudflare.social
www.coinbase.com/blog/coinbas...
Who will be the first to stand up a PDS with 402 support?
#x402 @cloudflare.social
www.coinbase.com/blog/coinbas...
Coinbase and Cloudflare Will Launch the x402 Foundation: Building the Future of Agentic Commerce
Tl;dr: Coinbase is announcing our intent to launch the x402 Foundation, in collaboration with Cloudflare. This new initiative is designed to establish x402 as the universal standard for AI-driven paym...
www.coinbase.com
September 23, 2025 at 7:48 PM
Payments coming to an HTTP response code near you! 💵
Who will be the first to stand up a PDS with 402 support?
#x402 @cloudflare.social
www.coinbase.com/blog/coinbas...
Who will be the first to stand up a PDS with 402 support?
#x402 @cloudflare.social
www.coinbase.com/blog/coinbas...
Los Angeles Rams boost fandom with RCS for Business
YouTube video by Android
www.youtube.com
September 23, 2025 at 7:18 PM
New Eclosion 🕯️
Anisota-only posts are here! They're identical to Bluesky posts but use a custom lexicon so they don't appear on Bluesky at all.
Narrowcast to just the world of Anisota for a cozier, more intimate audience.
🦋 "app.bsky.feed.post"
🖤 "net.anisota.feed.post"
Join: anisota.net
Anisota-only posts are here! They're identical to Bluesky posts but use a custom lexicon so they don't appear on Bluesky at all.
Narrowcast to just the world of Anisota for a cozier, more intimate audience.
🦋 "app.bsky.feed.post"
🖤 "net.anisota.feed.post"
Join: anisota.net
September 19, 2025 at 4:53 PM
This is awesome! 🎉
I'm looking forward to did:plc becoming more neutral AND
I'd still love to see the adoption of a third DID not tied to a specific legal jurisdiction.
I'd like to think me proposing one three days before this announcement was just a coincident. 😬
blog.boscolo.co/3lyxzeejguk2h
I'm looking forward to did:plc becoming more neutral AND
I'd still love to see the adoption of a third DID not tied to a specific legal jurisdiction.
I'd like to think me proposing one three days before this announcement was just a coincident. 😬
blog.boscolo.co/3lyxzeejguk2h
excited to share that we are following through on our earlier commitments and putting together an independent+neutral organization to house the DID PLC system, includes the directory service
Creating an Independent Public Ledger of Credentials (PLC) Directory Organization | Bluesky
The Bluesky Social app is built on an open network protocol that refers to each user by a unique Decentralized Identifier, or DID (a W3C standard). The most popular supported DID method was developed ...
docs.bsky.app
September 19, 2025 at 3:59 PM
This is awesome! 🎉
I'm looking forward to did:plc becoming more neutral AND
I'd still love to see the adoption of a third DID not tied to a specific legal jurisdiction.
I'd like to think me proposing one three days before this announcement was just a coincident. 😬
blog.boscolo.co/3lyxzeejguk2h
I'm looking forward to did:plc becoming more neutral AND
I'd still love to see the adoption of a third DID not tied to a specific legal jurisdiction.
I'd like to think me proposing one three days before this announcement was just a coincident. 😬
blog.boscolo.co/3lyxzeejguk2h