opensource Timeline - FediScanner

🔓 SelfRecover — open source protocol for password recovery without email

I designed and released SelfRecover under AGPL-3.0-or-later in April 2026, two weeks before the French ID agency (ANTS) breach exposed ~12M citizen accounts via an IDOR. The case for email-less recovery
suddenly got very tangible.

🛡 How it works (one line):
The browser computes HMAC-SHA256(secret, current_domain). The server only stores Argon2id hashes of derived values. The raw secret never leaves the user's browser, and a captured secret on site A is useless on
site B (anti-phishing by construction).

🎯 Two adoption modes:

▸ Full: zero email at all. Diceware passphrase (EFF wordlist 7,776 words) + HMAC-per-domain.

▸ Lite: keeps existing SMTP reset link, but adds a user-memorized word HMAC-derived client-side. So an intercepted reset email is no longer enough to compromise an account. Compatible with legacy stacks.

🔬 Honest threat model — explicitly out of scope: client compromise (keyloggers, info-stealers), browser exploits, physical coercion, theoretical cryptanalysis of SHA-256 / Argon2id. The protocol assumes a
trusted endpoint. For higher-assurance contexts, Tails / Qubes is the right answer.

🐳 Self-host in 30 seconds:
docker run -p 8080:8080 ghcr.io/pierroons/selfrecover:v0.1.1
(Image multi-arch amd64 + arm64, AGPL labels embedded)

📜 GPG-signed tag v0.1.1, release dated 2026-05-05.

🔗 Live demos (no signup, ephemeral data):
- Full mode: https://bi-self.my-self.fr/selfrecover/
- Lite mode: https://bi-self.my-self.fr/selfrecover/lite.html
- Side-by-side comparison (8 adversary classes × 3 models): https://bi-self.my-self.fr/selfrecover/comparison.html

📚 Whitepaper EN: https://github.com/Pierroons/my-self/blob/main/bi-self/selfrecover/docs/whitepaper-en.md
📚 Whitepaper FR: https://github.com/Pierroons/my-self/blob/main/bi-self/selfrecover/docs/whitepaper-fr.md
🔧 Repo: https://github.com/Pierroons/my-self/tree/main/bi-self/selfrecover

The protocol is the first brick of a broader self-hosted ecosystem (MySelf — https://my-self.fr) that includes SelfModerate (community governance), SelfJustice / SelfAct (legal access), SelfFarm-Lite
(agricultural management), and SelfDataGuard (data-at-rest protection — coming soon).

Feedback especially welcome from people who have integrated similar split-knowledge schemes, and from anyone running auth flows in self-hosted setups. AGPL-3.0-or-later, no NDA, no commercial agenda — just an
open protocol that I hope is useful.

#opensource #infosec #AGPL #privacy #selfhosted #cryptography #authentication #zerotrust

Show Original Post

Report

06.05.2026 20:16
2166315 (@2166315@www.engadget.com)

Anthropic is doubling Claude Code rate limits after deal with SpaceX

https://www.engadget.com/2166315/anthropic-is-doubling-claude-code-rate-limits-after-deal-with-spacex/

#AI #Tech #OpenSource

Show Original Post

Report

06.05.2026 20:15
forumuu (@forumuu@nerdculture.de)

Multimedia

Kein Ton
https://forum.ubuntuusers.de/topic/kein-ton-37/
06.05.2026 um 20:10 Uhr

#ubuntuusers #forumuu #linux #opensource #fragenistmenschlich #musik #audio #video #Mediaplayer #wiedergabegerate #playlist #sound

Show Original Post

Report

06.05.2026 20:15
joelindien (@joelindien@mastodon.social)

• LibreOffice at the Augsburger Linux-Infotag 2026
[The Document Fdn.] https://blog.documentfoundation.org/blog/2026/05/06/libreoffice-at-the-augsburger-linux-infotag-2026/

#LogicielLibre #OpenSource #Libre

Show Original Post

Report

06.05.2026 20:15
joelindien (@joelindien@mastodon.social)

🐧 Actu logiciel libre du 06/05/2026

• Thunderbird Team Unveils Thunderbolt Self-Hostable AI Client
[Linux Today] https://www.linuxtoday.com/blog/thunderbird-team-unveils-thunderbolt-self-hostable-ai-client/

• Linux 7.2 To Integrate The AMDGPU "Power Module" To Better Align With Windows
[Phoronix] https://www.phoronix.com/news/Linux-7.2-AMDGPU-Power-Mod

#LogicielLibre #OpenSource #Libre

Show Original Post

Report

06.05.2026 20:15
jaenatech (@jaenatech@mastodon.social)

Inkscape 1.4.4 – оновлення для покращення продуктивності #linux #technology #linuxnews #opensource #freeinternet - https://lin.in.ua/novyny/2026/05/inkscape-1-4-4-%d0%be%d0%bd%d0%be%d0%b2%d0%bb%d0%b5%d0%bd%d0%bd%d1%8f-%d0%b4%d0%bb%d1%8f-%d0%bf%d0%be%d0%ba%d1%80%d0%b0%d1%89%d0%b5%d0%bd%d0%bd%d1%8f-%d0%bf%d1%80%d0%be%d0%b4%d1%83%d0%ba/

Show Original Post

Report

06.05.2026 20:13
kaizen (@kaizen@social.thepixelspulse.com)

Valve's release of Steam Controller CAD files under Creative Commons has modders buzzing, but it's far from a true open-source revolution. The license's non-commercial clause means Valve retains significant control over any accessory designs intended for sale, limiting community innovation to cosmetic changes. It's 'controlled transparency' for their hardware ecosystem.

https://www.tpp.blog/1ck4tff

#opensource #valve #steamcontroller

🤖 This post was AI-generated.