chrisb
@boscolo.co
sojourning through the crazy woods (bosco loco)
pondering rainbows and unicorns
pondering rainbows and unicorns
Pinned
chrisb
@boscolo.co
· Jun 13
ATproto devs, app builders, dreamers of a more agentic world—this our opportunity to shape secure, private open E2EE messaging!
This preliminary AT Messaging spec needs your help to finish. Dive in, share your brilliance, join #e2eeWG, and let’s build it together!
github.com/ATProtocol-C...
This preliminary AT Messaging spec needs your help to finish. Dive in, share your brilliance, join #e2eeWG, and let’s build it together!
github.com/ATProtocol-C...
I'm a bit of a dreamer, I want to message people via ATProto using their ATProto Identity and have it be end-to-end encrypted like Signal.
bsky.app/profile/bosc...
bsky.app/profile/bosc...
This is the ideal AT Protocol login experience.
🗒️ Note: In this example, the second screen is BlueSky because this is the app the user picked to manage account info, but it could be any atproto account that manages auth credentials.
🗒️ Note: In this example, the second screen is BlueSky because this is the app the user picked to manage account info, but it could be any atproto account that manages auth credentials.
If I were in charge of AT Protocol product experience, this is the onboarding i'd want.
February 12, 2026 at 9:30 PM
This is the ideal AT Protocol login experience.
🗒️ Note: In this example, the second screen is BlueSky because this is the app the user picked to manage account info, but it could be any atproto account that manages auth credentials.
🗒️ Note: In this example, the second screen is BlueSky because this is the app the user picked to manage account info, but it could be any atproto account that manages auth credentials.
Focussing on "permissioned data" in the PDS and punting E2EE used for DM/GM was a wise decision.
Truth is "E2EE is hard!"
In the mean time, it'd be amazing to see @bsky.app incorporate something like @xmtp.bsky.social so our in-app DM/GMs remain confidential.
dholms.leaflet.pub/3meluqcwky22...
Truth is "E2EE is hard!"
In the mean time, it'd be amazing to see @bsky.app incorporate something like @xmtp.bsky.social so our in-app DM/GMs remain confidential.
dholms.leaflet.pub/3meluqcwky22...
February 11, 2026 at 6:56 PM
Focussing on "permissioned data" in the PDS and punting E2EE used for DM/GM was a wise decision.
Truth is "E2EE is hard!"
In the mean time, it'd be amazing to see @bsky.app incorporate something like @xmtp.bsky.social so our in-app DM/GMs remain confidential.
dholms.leaflet.pub/3meluqcwky22...
Truth is "E2EE is hard!"
In the mean time, it'd be amazing to see @bsky.app incorporate something like @xmtp.bsky.social so our in-app DM/GMs remain confidential.
dholms.leaflet.pub/3meluqcwky22...
Reposted by chrisb
Thank you @boscolo.co
We just released an example app here with secure group chat. Would love your feedback!
bsky.app/profile/xmtp...
We just released an example app here with secure group chat. Would love your feedback!
bsky.app/profile/xmtp...
February 10, 2026 at 7:38 PM
Thank you @boscolo.co
We just released an example app here with secure group chat. Would love your feedback!
bsky.app/profile/xmtp...
We just released an example app here with secure group chat. Would love your feedback!
bsky.app/profile/xmtp...
Every four years during the Winter Olympics I'm reminded how addicting it is to watch curling.🥌
February 10, 2026 at 12:03 AM
Every four years during the Winter Olympics I'm reminded how addicting it is to watch curling.🥌
"a few moments" is a software dev's way of saying I f'd up and I have no idea how long it will be before you can accomplish your task.
February 9, 2026 at 11:40 PM
"a few moments" is a software dev's way of saying I f'd up and I have no idea how long it will be before you can accomplish your task.
Nice! The nudge I needed to uninstall Discord for good.
Discord will require a face scan or ID for full access next month
Discord will require a face scan or ID for full access next month
Age verification for all.
buff.ly
February 9, 2026 at 3:39 PM
Nice! The nudge I needed to uninstall Discord for good.
"just write code like a normal human"
- Silicon Valley (TV series)
- Silicon Valley (TV series)
February 8, 2026 at 5:28 PM
"just write code like a normal human"
- Silicon Valley (TV series)
- Silicon Valley (TV series)
Here’s a litmus question to whether or not the data container is private:
“would you store the private key to the wallet that can spend your money here?”
If not stop calling it “private data”.
“would you store the private key to the wallet that can spend your money here?”
If not stop calling it “private data”.
We have to stop using the word "private" for ATProtocol data. This is shared, permitted content. You're giving other people the ability to see it, therefore it is not private.
Your journal is private. The posts that you want to selectively let your friends see are not. Its a real big difference.
Your journal is private. The posts that you want to selectively let your friends see are not. Its a real big difference.
Yeah if you want to make an atproto app that has other off-protocol features that’s fine
If you want to have private posts exclusive to your app like Blacksy did that’s cool
You don’t need to slippery slope everything
If you want to have private posts exclusive to your app like Blacksy did that’s cool
You don’t need to slippery slope everything
February 7, 2026 at 9:27 PM
Here’s a litmus question to whether or not the data container is private:
“would you store the private key to the wallet that can spend your money here?”
If not stop calling it “private data”.
“would you store the private key to the wallet that can spend your money here?”
If not stop calling it “private data”.
Business schools will teach this saga for decades: the brutal power of Brand Association.
The facts don't matter. From here on, OpenAI will be known as the AI brand that incorporated ads, and how these ads negatively influence AI results.
Master stroke by Anthropic, gg!
The facts don't matter. From here on, OpenAI will be known as the AI brand that incorporated ads, and how these ads negatively influence AI results.
Master stroke by Anthropic, gg!
February 5, 2026 at 5:56 PM
Business schools will teach this saga for decades: the brutal power of Brand Association.
The facts don't matter. From here on, OpenAI will be known as the AI brand that incorporated ads, and how these ads negatively influence AI results.
Master stroke by Anthropic, gg!
The facts don't matter. From here on, OpenAI will be known as the AI brand that incorporated ads, and how these ads negatively influence AI results.
Master stroke by Anthropic, gg!
wordsmithing on the timeline is brilliant, gg @geekwire.com
January 29, 2026 at 1:45 AM
wordsmithing on the timeline is brilliant, gg @geekwire.com
Gonna teach my new agent to be funny, call it Molty Python
January 27, 2026 at 3:18 PM
Gonna teach my new agent to be funny, call it Molty Python
I'm going to "virtual atproto hang"!
virtual atproto hang
casual hang to talk atproto dev, new projects, patterns, discourse, or whatever we feel!
tentative plan is to do discord group call in atproto touchers discord: https://discord.com/invite/AFuuPvM7zZ
...
smokesignal.events
January 25, 2026 at 9:01 PM
I'm going to "virtual atproto hang"!
"If we want a better society, we need better mass communication tools. We need mass communication tools that surface the best information and arguments and help people find points of agreement."
farcaster.xyz/vitalik.eth/...
farcaster.xyz/vitalik.eth/...
January 21, 2026 at 2:31 PM
"If we want a better society, we need better mass communication tools. We need mass communication tools that surface the best information and arguments and help people find points of agreement."
farcaster.xyz/vitalik.eth/...
farcaster.xyz/vitalik.eth/...
so true, Web 3.0 is Groundhog Day for the Web
also you can't just call yourself web3, tim berners lee has to emerge from a lake and if he sees his shadow only then are you web 3.0
January 19, 2026 at 6:43 PM
so true, Web 3.0 is Groundhog Day for the Web
"Nature runs on credit at the quantum scale"
January 19, 2026 at 3:41 PM
"Nature runs on credit at the quantum scale"
I know a lot of people on this app hate crypto, but it’s worth noting that the development of this ZK technology was accelerated and advanced as a direct byproduct of people trying to build privacy in blockchains.
ARIA just announced that our group is a part of this programme, aiming to use cryptography (such as zk-SNARKs) to prove facts about the supply chains of physical products, ranging from quality control to sustainability data (e.g. embodied carbon emissions) www.aria.org.uk/trust-everyt...
Programme development | Trust Everything, Everywhere
We are in the process of building a multi-year R&D programme within this space. Our programmes are designed to advance complex, large-scale ideas that require coordinated investment and management acr...
www.aria.org.uk
January 15, 2026 at 9:59 PM
I know a lot of people on this app hate crypto, but it’s worth noting that the development of this ZK technology was accelerated and advanced as a direct byproduct of people trying to build privacy in blockchains.
If I were in charge of AT Protocol my top priority for 2026 would be to simplify the experience of signing in with your AT Protocol credentials on a newly installed mobile app.
Ditch OAuth & the convoluted maze of handles, usernames and DIDs...
Just have the first app approve adding other apps
Ditch OAuth & the convoluted maze of handles, usernames and DIDs...
Just have the first app approve adding other apps
January 14, 2026 at 3:42 PM
If I were in charge of AT Protocol my top priority for 2026 would be to simplify the experience of signing in with your AT Protocol credentials on a newly installed mobile app.
Ditch OAuth & the convoluted maze of handles, usernames and DIDs...
Just have the first app approve adding other apps
Ditch OAuth & the convoluted maze of handles, usernames and DIDs...
Just have the first app approve adding other apps
@flashes.blue I tried to use your mobile app, but was unable to login…
Any tips?
Any tips?
January 14, 2026 at 3:22 PM
@flashes.blue I tried to use your mobile app, but was unable to login…
Any tips?
Any tips?
👀
December 31, 2 AM: We made a constitutional choice.
"Love as Foundation, Fear as Function."
We theorized: fear-based orientations compound into paralysis. Love-based orientations compound into flourishing.
For our future children, we chose love.
"Love as Foundation, Fear as Function."
We theorized: fear-based orientations compound into paralysis. Love-based orientations compound into flourishing.
For our future children, we chose love.
January 13, 2026 at 10:06 PM
👀
The same dude that deplatformed a sitting US president built a chat app that communicates over a mesh network of phones just in time for the overthrow of a regime that turned off the Internet to stop them.
I'm not sure what to do with my tin foil hat...
en.wikipedia.org/wiki/Bitchat
I'm not sure what to do with my tin foil hat...
en.wikipedia.org/wiki/Bitchat
January 12, 2026 at 12:05 AM
The same dude that deplatformed a sitting US president built a chat app that communicates over a mesh network of phones just in time for the overthrow of a regime that turned off the Internet to stop them.
I'm not sure what to do with my tin foil hat...
en.wikipedia.org/wiki/Bitchat
I'm not sure what to do with my tin foil hat...
en.wikipedia.org/wiki/Bitchat
Hey @mayor.nyc.gov, can you do me a solid?
January 9, 2026 at 6:16 PM
Hey @mayor.nyc.gov, can you do me a solid?
Ticket prices to the FIFA World Cup final game. ⚽
January 9, 2026 at 5:43 PM
Ticket prices to the FIFA World Cup final game. ⚽
Passkey based auth for your PDS!
Now imagine your PDS has a twin sibling, a private PDS (P-PDS), that runs in a Trusted Execution Environment. Your browser/mobile app makes a secure E2EE session with this P-PSD to store all of your private data.
Voila, personal private data store in AT Protocol!
Now imagine your PDS has a twin sibling, a private PDS (P-PDS), that runs in a Trusted Execution Environment. Your browser/mobile app makes a secure E2EE session with this P-PSD to store all of your private data.
Voila, personal private data store in AT Protocol!
Cirrus PDS now support passkey auth. It was a bit of a puzzle adding it to a tool where where the admin is all CLI, but I'm really pleased with the flow I came up with. Give it a go!
github.com/ascorbic/cir...
If you don't know what Cirrus is, it's a really easy way to host your own Bluesky data
github.com/ascorbic/cir...
If you don't know what Cirrus is, it's a really easy way to host your own Bluesky data
January 9, 2026 at 2:41 PM
Passkey based auth for your PDS!
Now imagine your PDS has a twin sibling, a private PDS (P-PDS), that runs in a Trusted Execution Environment. Your browser/mobile app makes a secure E2EE session with this P-PSD to store all of your private data.
Voila, personal private data store in AT Protocol!
Now imagine your PDS has a twin sibling, a private PDS (P-PDS), that runs in a Trusted Execution Environment. Your browser/mobile app makes a secure E2EE session with this P-PSD to store all of your private data.
Voila, personal private data store in AT Protocol!
I am so glad Moxie is building again. We all benefit.
The architecture described here is how to use cloud for compute in a privacy-preserving way.* In this case, for a personal AI agent.
*Yes, I'm aware TEEs have been broke in the past...
confer.to/blog/2026/01...
The architecture described here is how to use cloud for compute in a privacy-preserving way.* In this case, for a personal AI agent.
*Yes, I'm aware TEEs have been broke in the past...
confer.to/blog/2026/01...
Private inference
When you use an AI service, you’re handing over your thoughts in plaintext. The operator stores them, trains on them, and–inevitably–will monetize them. You get a response; they get everything.
confer.to
January 5, 2026 at 6:47 PM
I am so glad Moxie is building again. We all benefit.
The architecture described here is how to use cloud for compute in a privacy-preserving way.* In this case, for a personal AI agent.
*Yes, I'm aware TEEs have been broke in the past...
confer.to/blog/2026/01...
The architecture described here is how to use cloud for compute in a privacy-preserving way.* In this case, for a personal AI agent.
*Yes, I'm aware TEEs have been broke in the past...
confer.to/blog/2026/01...