Ian Preston

2025 was huge at @peergos.org. Here's everything we achieved: peergos.org/posts/2025 Highlights: * desktop and Android apps * sync * post-quantum encryption * migration support in the PDS UI * quic * shared-with page * moving closer to a CRDT There are over 400 self hosted servers now! Thank you 💚

Check out my talk tomorrow! I'm talking 13:00 to 14:00 UK time at the Higgs Centre Seminar Room at the University of Edinburgh, but you can also join online: teams.microsoft.com/meet/3495593... (passcode: ZE3w4xn2) and you can also see my slides: math.ucr.edu/home/baez/pa...

Maybe cryptography code should try compressing private keys and if they compress a lot reject them outright? I think that would universally catch stuff like this.

Thoughts and prayers to everyone using php.

Okay, when I said that PQ private keys are not actually larger than classical private keys, I didn't account for 4.

Today's decision by Labour to approve new drilling in the North Sea is climate vandalism. It's a betrayal of all of our futures, and Labour has abandoned all credibility in the fight against climate change. This is a victory for Shell over the people. www.bbc.co.uk/news/live/cw...

The details are now public, as of two hours ago. bugzilla.mozilla.org/show_bug.cgi... The secret P-384 keys for these intermediate CAs are all zeros except the last 8 bits. All not-updated software can be MITM'ed now. IOT boxes that can't or don't update are now trivially MITM'able forever.

There's a new @peergos.org release out where we add support for CALDAV and CARDDAV on MacOS, as well as login over LAN with http: github.com/Peergos/web-...

This is the reason why I designed @peergos.org to dial by key. I wish atproto had adopted that, but I know there were reasons.

youtube.com/watch?v=eOQf...

calibernode.com/blog/peergos...

Tiles and Files! There's a new Peergos release out which includes tiles in the newsfeed. The first user of this is the calendar app to render shared calendar events. Not on Peergos yet? Come join the future - a secure and private web! #NoSurveillanceCapitalism peergos.org github.com/Peergos/web-...

Tiles (sandboxed apps) in @peergos.org are normally full-screen affairs, but now they can have a tile mode which is displayed directly inline in the newsfeed. The first example of this is the calendar displaying event details directly in your feed rather than having to open the full calendar app.

We TRIPLED our vote share. Second best byelection result in Green Party history. On a date that Labour chose to deliberately clash the same week as our conference. All with a brand new PM in previously a "safe" seat. Best response to all the absolute nonsense today? Join.greenparty.org.uk

This is basically Google+ Circles. Share only to whatever group you want easily.

@dgruning.bsky.social and 2 others wrote an interesting paper on how to have an actual prosocial architecture for social media protocols. They analyse ActivityPub, ATProto, Nostr and @peergos.org Our client-assembled feeds should get 100% on Algorithmic Sovereignty though. arxiv.org/pdf/2609.35413

Happy Friday, happy new Peergos release! Cool stuff in this release: * multi-file secret links (up to 100) * blake3 support (read-only until enough clients support it) * a beautiful new drive UI * better video thumbnails on desktop * Greek language support (about time!) github.com/Peergos/web-...

2026 DeGoogle Mobile Telemetry Study How much data does a phone secretly send to Google when you are not using it? Our team measured 72 continuous hours of network packets from idle Android phones sitting untouched in our lab. www.praveentechworld.com/research/deg...

If Android had used a copyleft license AND not had a single company own all the copyright, then Google would not be able to pull the shenanigans they are now. This is why @peergos.org is copyleft licensed and contributors retain their own copyright.

Alas not very likely postmarketOS is dramatically less private/secure than either the Android Open Source Project or iOS. It greatly reduces privacy and security to below desktop levels, which is much worse, not better. It does the opposite of protecting against exploits or better sandboxing apps. 😩

GrapheneOS continues to reveal Googles active hobbling of the ability of OEMs to protect their users in favour of market exclusivity/protection, and pushing ahead with monopolistic anti competitive abuse hand in glove with GPL violations. Read below the break for the teams detailed analysis:

End of an era 😥

2,500 stars on GitHub, and counting. Peergos is a peer-to-peer encrypted filesystem for storing, sharing and collaborating on files without handing the keys to anyone else's server. @peergos.org openalternative.co/peergos

We've developed a secure paste feature replacing traditional clipboard APIs. Users will be able to take away clipboard access from apps to use this instead. It integrates into the standard selection toolbar, input methods, accessibility services and keyboard shortcuts. We plan to get it merged soon.

If I ran a council, I would simply not put ads on bus stops. People don't need even more mental intrusion. If I ran a bus company...

URLs should be capabilities

This zip work was super fun. I've wanted this for years now.

😍

Google have properly shat the bed. I have a feeling the financial director asked AI/Gemini, what they could remove to save money that consumers wouldn't notice and that would create less issues for their corporate partners being shown up for their bad app development practices. It's answer MTE.

Thank you, @moduality.bsky.social for pointing out the weird shadows of my impossible objects. That got me to think of yet another way to show how weird they are. Here, a light is shining down from behind at a 45° angle!

Slow down and make good things

Some may be wondering what implications, if any, this has for @peergos. Even if all ipfs work, and infrastructure stopped today we would be unaffected as a protocol. We have our own minimal implementation, and these days we basically do HTTP over (jvm)libp2p + kademlia.

We have an update about the future of Shipyard that we wanted to share: ipshipyard.com/blog/2026-th...

It's faster, it's pretty, it has pausable sync. There is lots of great stuff in this release of @peergos.org

Initial focus for our partnership with Motorola is a regular non-folding device. Current generation Motorola Signature (2026), Razr Fold (2026) and Razr Ultra (2026) are very close to meeting our requirements but lack MTE, adequate secure element integration and other features being added for 2027.

catching up on Eurocrypt: youtu.be/pO4We8yh8JM?...