mastodon.xyz is one of the many independent Mastodon servers you can use to participate in the fediverse.
A Mastodon instance, open to everyone, but mainly English and French speaking.

Administered by:

Server stats:

812
active users

#LookingForHelp

0 posts0 participants0 posts today

Trying my luck again.. 🙃

I’m the dev behind @buttercup, the open source password manager available for all major platforms. For some time it’s been a one person show, but I’d really like it not to be.

We get the odd contribution from the community but Buttercup would really benefit from having another founding member or two that want to help push the project forward into its next phase.

It’s all #OSS right now, with mixed licenses of MIT and GPL. We want to put out some SaaS so there’ll be some closed source in the future, which will hopefully support a small business, but the #FOSS side is one we want front and centre at all times. It’s what made us and we’re passionate about it.

It’s all #javascript and #typescript, with #react, #reactnative, #electron, #browserextensions etc. that make up the majority of the software.

We have some few thousand users, many hundreds of which are daily active.

We’re interested in adding a lot of new functionality: #webauthn, #Passkeys, #fido #fido2, #yubikey, #selfhosted and sharing.

If any of this sounds interesting to you, please give me a shout! We’re looking for someone that’d be interested in sharing ownership.

I’ve got some busy days ahead of me so if I don’t respond immediately I will as soon as I can. Here’s some places to react me:

- here 😎
- Keybase: keybase.io/perrymitchell
- @buttercup

Good day #privacy folks. I'm #lookingforhelp.

One of the excellent employee resource groups at my place is trying to setup a secure anonymous reporting option for vulnerable populations among our employees around the world.

While I'm comfortable making general privacy recommendations, I'm not coming up with a good option for anonymous reporting where both I and the person's local government wouldn't be able to tell who it is.

I've considered a web service with logging disabled that can only be reached from TOR exit nodes to avoid people accidently connecting when not using TOR. This is to solve for the "I <company security> don't know who the sender is" requirement.

Doesn't solve for privacy on their end or VPN restrictions in certain countries.

Welcoming any and all thoughts.

Thanks,
-Chris