Peergos
@peergos.org
A humane, privacy-focused, self-authenticated social web. Recipient of NGIPointer grant, graduate of Oxford Foundry, audited by Cure53 and Radically Open Security
https://peergos.org
https://github.com/peergos/peergos
https://peergos.org
https://github.com/peergos/peergos
We found two subtle bugs that were making p2p http requests flaky. So here's a release with reliable p2p requests! We now also generate thumbnails for video in android sync. This also strips out the last remaining use of the bitswap client. Upgrade now!
github.com/Peergos/web-...
github.com/Peergos/web-...
Release Reliable P2P HTTP requests · Peergos/web-ui
This release make p2p http requests much more reliable. It also removes all remaining client side usage of bitswap, but still enables receiver-side bitswap (the server side will be removed in a fut...
github.com
November 14, 2025 at 4:09 PM
We found two subtle bugs that were making p2p http requests flaky. So here's a release with reliable p2p requests! We now also generate thumbnails for video in android sync. This also strips out the last remaining use of the bitswap client. Upgrade now!
github.com/Peergos/web-...
github.com/Peergos/web-...
Reposted by Peergos
This us why we started with fine-grained access control and exfiltration proof apps in @peergos.org Combined with E2E encryption this is very safe, and you can get surprisingly far with that plus a permissioned client side api.
The same thing happens in the fediverse too, for instance, a recent security vulnerability I fixed in Mastodon was that the streaming server allowed access to public statuses even though the access token didn't allow API access to them.
We regularly see read scope being asked for from apps too.
We regularly see read scope being asked for from apps too.
November 8, 2025 at 8:22 PM
This us why we started with fine-grained access control and exfiltration proof apps in @peergos.org Combined with E2E encryption this is very safe, and you can get surprisingly far with that plus a permissioned client side api.
Reposted by Peergos
Our 16th release this year - double the number of releases we had last year, which itself was a record. We are also on track for tripling our paying customers this year too. Come join the future of the web! Private, self-authenticated, self-sovereign. Control your data, control your destiny!
We've got a new release out folks! This features a universal deb build compatible with all versions of Debian, Ubuntu, Mint etc. Lots of server side improvements, we switch from bitswap to p2p http requests to retrieve blocks. Some sync fixes, and UX improvements. github.com/Peergos/web-...
Release Adios bitswap · Peergos/web-ui
This release stops using bitswap to retrieve blocks, instead using p2p http requests. We still serve blocks over bitswap for now. We also have a universal debian build. This means we don't need sep...
github.com
November 6, 2025 at 9:09 AM
Our 16th release this year - double the number of releases we had last year, which itself was a record. We are also on track for tripling our paying customers this year too. Come join the future of the web! Private, self-authenticated, self-sovereign. Control your data, control your destiny!
We've got a new release out folks! This features a universal deb build compatible with all versions of Debian, Ubuntu, Mint etc. Lots of server side improvements, we switch from bitswap to p2p http requests to retrieve blocks. Some sync fixes, and UX improvements. github.com/Peergos/web-...
Release Adios bitswap · Peergos/web-ui
This release stops using bitswap to retrieve blocks, instead using p2p http requests. We still serve blocks over bitswap for now. We also have a universal debian build. This means we don't need sep...
github.com
November 6, 2025 at 9:04 AM
We've got a new release out folks! This features a universal deb build compatible with all versions of Debian, Ubuntu, Mint etc. Lots of server side improvements, we switch from bitswap to p2p http requests to retrieve blocks. Some sync fixes, and UX improvements. github.com/Peergos/web-...
We've got a new release out! This includes a timezone fix for sync, and 1000x faster host dir listing when creating a sync.
github.com/Peergos/web-...
github.com/Peergos/web-...
Release Sync improvements · Peergos/web-ui
This release makes updates on Windows easier by using a fixed app UUID. It also makes listing host directories when creating a new sync on desktop 1000x faster by lazily loading to a smaller depth....
github.com
October 16, 2025 at 10:12 AM
We've got a new release out! This includes a timezone fix for sync, and 1000x faster host dir listing when creating a sync.
github.com/Peergos/web-...
github.com/Peergos/web-...
We've got a new release out folks! github.com/Peergos/web-...
This let you easily migrate servers with a single click! This of course keeps all your data, friends, and identity intact. There is also a way to request/pay for another server to live mirror your data.
This let you easily migrate servers with a single click! This of course keeps all your data, friends, and identity intact. There is also a way to request/pay for another server to live mirror your data.
Release Easy migration + mirror · Peergos/web-ui
This release includes UI support for easy migration between servers. You can now request or pay for storage on another server and have it live mirror your data. Once a server is mirroring your data...
github.com
October 8, 2025 at 4:05 PM
We've got a new release out folks! github.com/Peergos/web-...
This let you easily migrate servers with a single click! This of course keeps all your data, friends, and identity intact. There is also a way to request/pay for another server to live mirror your data.
This let you easily migrate servers with a single click! This of course keeps all your data, friends, and identity intact. There is also a way to request/pay for another server to live mirror your data.
Reposted by Peergos
"Bad news: The proposal is going forward to be voted on on October 14th, and there's still no blocking minority achieved, as Germany reverted its position to undecided.
Good news: There is still time to fight back!"
Shut this monstrosity down NOW
Good news: There is still time to fight back!"
Shut this monstrosity down NOW
The battle to stop Chat Control continues, act now!
Unfortunately, the battle against Chat Control continues this month. For human rights, for civil liberties, for safety, and for democracy, this privacy-wrecking proposal must be stopped. We need your ...
www.privacyguides.org
September 23, 2025 at 7:23 PM
"Bad news: The proposal is going forward to be voted on on October 14th, and there's still no blocking minority achieved, as Germany reverted its position to undecided.
Good news: There is still time to fight back!"
Shut this monstrosity down NOW
Good news: There is still time to fight back!"
Shut this monstrosity down NOW
There;s a new version of peergos out folks! HTTP proxy support, lots of fixes and some optimisations.
github.com/Peergos/web-...
github.com/Peergos/web-...
Release Proxy and http2 · Peergos/web-ui
This release includes support for using a http proxy with the shell, proxy or sync commands, and adds support for http2 to all sync, shell and proxy requests. It also add support for passkeys from ...
github.com
September 12, 2025 at 8:34 PM
There;s a new version of peergos out folks! HTTP proxy support, lots of fixes and some optimisations.
github.com/Peergos/web-...
github.com/Peergos/web-...
Reposted by Peergos
We've already solved these problems in Peergos. Apps can be given permission to store app private data, read private user data, or write private user data, on a per file/dir granularity. Everything is stored E2EE on your PDS in Peergos. We treat your PDS *and* apps as current adversaries.
September 12, 2025 at 8:24 PM
We've already solved these problems in Peergos. Apps can be given permission to store app private data, read private user data, or write private user data, on a per file/dir granularity. Everything is stored E2EE on your PDS in Peergos. We treat your PDS *and* apps as current adversaries.
The defences we have against this kind of attack include:
1) We don't use npm (we manually review the few JS dependencies we have when updating)
2) We only have a handful of JS deps
3) We vendor our dependencies in git
4) We use strong CSP that blocks any external communication to other domains
1) We don't use npm (we manually review the few JS dependencies we have when updating)
2) We only have a handful of JS deps
3) We vendor our dependencies in git
4) We use strong CSP that blocks any external communication to other domains
JavaScript packages with billions of downloads were injected with malicious code in world's largest supply chain hack, geared to steal crypto — a phishing email is all it took to undermine npm packages
www.tomshardware.com/tech-industr...
www.tomshardware.com/tech-industr...
JavaScript packages with billions of downloads were injected with malicious code in world's largest supply chain hack, geared to steal crypto — a phishing email is all it took to undermine npm package...
Yet all the attacker did was attempt to steal cryptocurrency
www.tomshardware.com
September 9, 2025 at 4:04 PM
The defences we have against this kind of attack include:
1) We don't use npm (we manually review the few JS dependencies we have when updating)
2) We only have a handful of JS deps
3) We vendor our dependencies in git
4) We use strong CSP that blocks any external communication to other domains
1) We don't use npm (we manually review the few JS dependencies we have when updating)
2) We only have a handful of JS deps
3) We vendor our dependencies in git
4) We use strong CSP that blocks any external communication to other domains
Don't outsource your sovereignty. Use end-to-end encryption.
Microsoft to French Senate:
- If US makes a "correct" requests, Microsoft must share EU data
- EU clients may not be informed of the disclosure, data sharing
=> Any US company under Patriot Act and Cloud Act, must cooperate
www.frandroid.com/culture-tech...
- If US makes a "correct" requests, Microsoft must share EU data
- EU clients may not be informed of the disclosure, data sharing
=> Any US company under Patriot Act and Cloud Act, must cooperate
www.frandroid.com/culture-tech...
Microsoft avoue enfin : « Non, je ne peux pas garantir » la protection des données européennes
Microsoft France vient de reconnaître devant le Sénat qu'il ne peut pas protéger les données européennes du gouvernement américain. Cette déclaration sous
www.frandroid.com
September 2, 2025 at 4:30 PM
Don't outsource your sovereignty. Use end-to-end encryption.
Reposted by Peergos
www.youtube.com/watch?v=yDU4... Peergos seems pretty interesting
Peergos: The Architecture of Privacy - Ian Preston
YouTube video by libp2p
www.youtube.com
August 25, 2025 at 2:50 PM
www.youtube.com/watch?v=yDU4... Peergos seems pretty interesting
@igalia.com Great post! Some small corrections for blogs.igalia.com/jfernandez/2...
1. Peergos doesn't depend on js-libp2p at all (we don't do p2p stuff in the browser for privacy and security reasons).
2. We've used webcrypto Ed25519 when present for over a year: github.com/Peergos/web-...
1. Peergos doesn't depend on js-libp2p at all (we don't do p2p stuff in the browser for privacy and security reasons).
2. We've used webcrypto Ed25519 when present for over a year: github.com/Peergos/web-...
Ed25519 Support Lands in Chrome: What It Means for Developers and the Web. – make everything intensely
blogs.igalia.com
August 26, 2025 at 5:10 PM
@igalia.com Great post! Some small corrections for blogs.igalia.com/jfernandez/2...
1. Peergos doesn't depend on js-libp2p at all (we don't do p2p stuff in the browser for privacy and security reasons).
2. We've used webcrypto Ed25519 when present for over a year: github.com/Peergos/web-...
1. Peergos doesn't depend on js-libp2p at all (we don't do p2p stuff in the browser for privacy and security reasons).
2. We've used webcrypto Ed25519 when present for over a year: github.com/Peergos/web-...
Reposted by Peergos
i think part of the reason this hasn't been done yet on atproto is because there's no means for private data yet so anything someone in a group would post would be public
August 14, 2025 at 4:07 PM
i think part of the reason this hasn't been done yet on atproto is because there's no means for private data yet so anything someone in a group would post would be public
Apparently it was "non-profit day" a few days ago. We are proud to be a non-profit and not have any investors. We think the future of the web is too important to leave to venture capitalists. We were reading this the other day - wedontagree.net/technically-... - and this section jumped out at us:
Technically Radical
Over 2024, we saw major tech investors and company owners overtly turn toward the right, overtly backing Donald Trump in his electoral campaign. This group of individuals, which commentators have take...
wedontagree.net
August 19, 2025 at 9:25 AM
Apparently it was "non-profit day" a few days ago. We are proud to be a non-profit and not have any investors. We think the future of the web is too important to leave to venture capitalists. We were reading this the other day - wedontagree.net/technically-... - and this section jumped out at us:
We've got a new release out folks! This enables sync from any drive in Windows and Linux, and includes a 3X faster GC on large blockstores.
github.com/Peergos/web-...
github.com/Peergos/web-...
Release 3X faster GC + Sync fixes · Peergos/web-ui
This release includes a lot of sync fixes for desktop and Android. It makes GC 3X faster on a 10 TiB blockstore by caching the block graph and block list between GC runs, and using an infini-filter...
github.com
August 19, 2025 at 9:05 AM
We've got a new release out folks! This enables sync from any drive in Windows and Linux, and includes a 3X faster GC on large blockstores.
github.com/Peergos/web-...
github.com/Peergos/web-...
We've been using Ed25519 in browsers for over 10 years now (every identity and writer is an Ed25519 pair in Peergos), so we really appreciate this and how much work it has been. The size of nacl.js is 30KB so not a significant benefit, but the web-crypto version is 10x faster!
Oh yeah — Ed25519 is now available in Chrome!
Read what the ineffable @bumblefudge.com has to say about this wonderful piece of news.
ipfsfoundation.org/ed25519-supp...
Read what the ineffable @bumblefudge.com has to say about this wonderful piece of news.
ipfsfoundation.org/ed25519-supp...
Ed25519 Support in Chrome: Making the Web Faster and Safer
We're happy to share that Ed25519 is now supported in Chrome (version). Following Ed25519 support in Firefox 129 in August 2024 and Safari 17.0, Chrome finally following suit in 137 in May of this yea...
ipfsfoundation.org
August 14, 2025 at 8:57 PM
We've been using Ed25519 in browsers for over 10 years now (every identity and writer is an Ed25519 pair in Peergos), so we really appreciate this and how much work it has been. The size of nacl.js is 30KB so not a significant benefit, but the web-crypto version is 10x faster!
Reposted by Peergos
The GC (garbage collector) in @peergos.org has been taking > 3 hours to run on a 10 TiB remote block store, and during this time it was maxing out the metadata DB cpu (during the mark phase), so I've been trying to optimise it. The metadata db is used by live queries so this wasn't great.
August 12, 2025 at 2:25 PM
The GC (garbage collector) in @peergos.org has been taking > 3 hours to run on a 10 TiB remote block store, and during this time it was maxing out the metadata DB cpu (during the mark phase), so I've been trying to optimise it. The metadata db is used by live queries so this wasn't great.
Decentralization is a necessary but not sufficient ingredient for democracy. You also need privacy. If the digital world is the Panopticon with everything public, then no resistance will be able to organise to fight against dictators.
Tried to pull together a bunch of threads of things I've been talking/thinking about lately, about how decentralized tech & democracy go hand in hand, and are necessary for fighting fascism.
Take Back Our Digital Infrastructure To Save Democracy
Watch the tech oligarchs who lined up behind Donald Trump at his inauguration, and you'll see the most important story of our time: the fascists are winning because they've built a direct pipeline from concentrated technological power to…
Watch the tech oligarchs who lined up behind Donald Trump at his inauguration, and you'll see the most important story of our time: the fascists are winning because they've built a direct pipeline from concentrated technological power to…
August 6, 2025 at 8:44 AM
Decentralization is a necessary but not sufficient ingredient for democracy. You also need privacy. If the digital world is the Panopticon with everything public, then no resistance will be able to organise to fight against dictators.
Reposted by Peergos
Thanks for asking @jackvalinsky.com I've been meaning to do a long thread on bluesky, but I'll try and give a broad overview here.
August 5, 2025 at 3:59 PM
Thanks for asking @jackvalinsky.com I've been meaning to do a long thread on bluesky, but I'll try and give a broad overview here.
We have a new release with lots of sync improvements and optimisations, especially on Windows and Android.
github.com/Peergos/web-...
github.com/Peergos/web-...
Release More Polished Sync · Peergos/web-ui
This release fixes a lot of bugs with the sync client, mainly on Windows and Android. Treehash calculations are parallelised on desktop and Android now, making handling multi gigabyte files much fa...
github.com
July 29, 2025 at 12:53 PM
We have a new release with lots of sync improvements and optimisations, especially on Windows and Android.
github.com/Peergos/web-...
github.com/Peergos/web-...
It's fun seeing all the lists we are on:
awesome-privacy
awesome-selfhosted
awesome-ipfs
awesome-european-tech
awesome-ipfs
awesome-privacy
awesome-selfhosted
awesome-ipfs
awesome-european-tech
awesome-ipfs
July 22, 2025 at 7:28 PM
It's fun seeing all the lists we are on:
awesome-privacy
awesome-selfhosted
awesome-ipfs
awesome-european-tech
awesome-ipfs
awesome-privacy
awesome-selfhosted
awesome-ipfs
awesome-european-tech
awesome-ipfs
Reposted by Peergos
These excellent principles are exactly the guidelines we've been using to build the @peergos.org social web protocol since 2013. We've refused to take any investment, especially VC investment, and are set up as a non profit so we can make the right decisions to empower people and protect democracy.
We deserve better & we can build it!
Using social media we should demand these basic rights!
Don't use systems that don't uphold these rights.
Don't build systems that go against our interests and users.
Why we need a social media bill of rights!
www.techdirt.com/2025/07/17/w...
Using social media we should demand these basic rights!
Don't use systems that don't uphold these rights.
Don't build systems that go against our interests and users.
Why we need a social media bill of rights!
www.techdirt.com/2025/07/17/w...
We Deserve Better: A New Social Media Bill of Rights
Earlier this year, I was a part of a CNN documentary, Twitter: Breaking the Bird, which gave me much pause for reflection about the state of social media and how we got here. This year alone weR…
www.techdirt.com
July 19, 2025 at 1:59 PM
These excellent principles are exactly the guidelines we've been using to build the @peergos.org social web protocol since 2013. We've refused to take any investment, especially VC investment, and are set up as a non profit so we can make the right decisions to empower people and protect democracy.
Why is decentralization important for your future?
peergos.org/posts/decent...
peergos.org/posts/decent...
Decentralization Matters
peergos.org
July 14, 2025 at 2:33 PM
Why is decentralization important for your future?
peergos.org/posts/decent...
peergos.org/posts/decent...
Reposted by Peergos
Thank you @carissaveliz.bsky.social @moonalice.com @carolecadwalla.bsky.social That was an excellent discussion.
We've been trying to stop surveillance capitalism by fixing the underlying structure of the web from which it emerged. Making all new apps private by default. @peergos.org
We've been trying to stop surveillance capitalism by fixing the underlying structure of the web from which it emerged. Making all new apps private by default. @peergos.org
Join us for an unmissable discussion on why 'Privacy is Power'
@carissaveliz.bsky.social, Roger McNamee & @carolecadwalla.bsky.social will be Live on Citizens Reunited this Wed, July 9
5-6pm BST / 9-10am PST
Subscribe to be notified when we go Live!
citizensreunited.substack.com/p/join-us-fo...
@carissaveliz.bsky.social, Roger McNamee & @carolecadwalla.bsky.social will be Live on Citizens Reunited this Wed, July 9
5-6pm BST / 9-10am PST
Subscribe to be notified when we go Live!
citizensreunited.substack.com/p/join-us-fo...
Join us for an unmissable discussion on why 'Privacy is Power'
Carissa Véliz, Roger McNamee & Carole Cadwalladr will be Live on Citizens Reunited this Wednesday, July 9
citizensreunited.substack.com
July 9, 2025 at 5:13 PM
Thank you @carissaveliz.bsky.social @moonalice.com @carolecadwalla.bsky.social That was an excellent discussion.
We've been trying to stop surveillance capitalism by fixing the underlying structure of the web from which it emerged. Making all new apps private by default. @peergos.org
We've been trying to stop surveillance capitalism by fixing the underlying structure of the web from which it emerged. Making all new apps private by default. @peergos.org