f0rest8
Our latest blog post about how our Unlock Session feature works, similar in experience to a password manager:
What I was encountering before this feature was that the remember me cookie would still be valid but the person’s session_key would no longer exist, causing a poor experience when someone is routed to an authenticated page but is unable to unlock anything from their account.
One solution was to simply redirect to a full login again, but that felt tedious and not “authentic” since the remember me cookie was still valid → making it seem like the “Remember me for 60 days” feature simply didn’t do anything.
It took far too long for me to become aware of this situation, but I eventually did, and our solution was to simply require a password-only reentry similar to your favorite password manager.
This blog also, finally, marks a turning point where I have begun to add/update the open-graph images for each blog post making it more sharing friendly. Cheers and happy holidays to everyone, hope you’re able to spend time with your loved ones. ![]()
![]()
I thought I’d make this topic for sharing any “tech” related blog posts from us (rather than in the very big topic where I share general updates) ![]()
Trending in Blog Posts
Other Trending Topics
Categories:
Sub Categories:
Forums
Popular Tags
- #ecto
- #liveview
- #troubleshooting
- #learning-elixir
- #deployment
- #library
- #erlang
- #testing
- #genserver
- #mix
- #absinthe
- #remote-other
- #otp
- #plug
- #how-to-question
- #macros
- #postgres
- #elixirconf
- #channels
- #exunit
- #discussion
- #code-sync
- #javascript
- #podcasts
- #onsite
- #dialyzer
- #docker
- #authentication
- #umbrella
- #full-time-contract
- #podcasts-by-brainlid
- #ecto-query
- #elixir-ls
- #blog-post
- #ai
- #phoenix_html
- #iex
- #elixirconf-us
- #graphql
- #genstage
- #websockets
- #supervisor
- #advent-of-code
- #distillery
- #processes
- #api
- #forms
- #hex
- #security
- #metaprogramming










Showing Posts 1 to 4- Show Best Posts
- Show All (oldest first)
- Show All (newest first)
f0rest8
f0rest8
Introducing Journal: Your Private Space for Reflection

We’re using req_llm under the hood for the AI-related features.
Background
Something that I’m often confronted with is the all-encompassing "network effects” effect . So, I have been thinking for a while on how people can get value out of MOSSLET without having to rely on the social network aspect.
And as a writer per-say… I’ve always been interested in journals but doubted the privacy of anything digital (not to mention the whole pen and paper thing).
So I think there’s always been a part of me that has wanted to make a version of a digital journal that I would want to use, and now I have:
Features
AI Features
Privacy-first AI
A space for you
My vision for MOSSLET was always more about protecting and preserving people’s wellbeing online than anything else. And a big part of that was protecting people’s privacy, as our privacy serves as an entryway to our humanity.
And I saw how everyone was using social platforms (including this one) that were constantly and egregiously violating their privacy and taking the invisible bits that make up our humanity and commoditizing it—ultimately repurposing it until it’s gone.
So I chose to make a privacy-first social network in order for myself and others to have a space to simply exist online. But what if you can’t get out of the trap of these platforms? What if your friends can’t? I’ve learned this is related to something often called a “cold start”.
And it does feel cold, it feels lonely too.
So it made sense to me to bring some warmth to MOSSLET by applying our privacy-first design to a journaling feature. Journaling is a private process that preserves and protects, even enhances, our wellbeing. It does all of this because of the privacy of it. So, it is a natural fit for us.
And here we are, an exciting new privacy-first Journal on MOSSLET.
Thank you for following along
If you’ve been following along, thank you. It’s been quite a journey to get here and feels like still just getting started. I’m working on native apps right now and will be so excited when that’s ready to announce (been a long time coming).
f0rest8
“true" in reference to us. Our asymmetric encryption architecture for Posts relies on trusting our servers, which you can, but now our Conversations (DMs/messages) utilizes our same asymmetric encryption (with symmetric encryption on top for post quantum resistance at rest) in the browser to be zero knowledge for our servers
f0rest8
Following up from the Conversations note back in March — we just finished migrating the majority of Mosslet to be zero-knowledge post-quantum encrypted like Metamorphic (except Mosslet uses Cat-5).
Posts, replies, groups, journals, profile fields, registration — all of it is now zero-knowledge browser-side, with hybrid ML-KEM-1024 + X25519 sealing. Four phases, four audits, ~230 server-side decrypt sites reviewed. I wrote the whole story up on dev.to including the honest edges (~102 server-side decrypts that remain, what they are, and why):
Building the World’s First Post-Quantum Zero-Knowledge Social Network: A Phased Migration Story
AFAIK it’s the world’s first running in production with customers so I have been running with that headline for now
. Happy to answer Elixir/Phoenix-specific questions here if anyone’s curious about anything 