graynk

then what is the point of it existing, if it can’t be used seriously? why should people spend their time on it, when there isn’t a solid base to build on? if you want to do something useful - contribute to an existing project. if you just wanna hack away at something - sure, do that, just don’t be surprised if other people happen to hate it when you try to present it as a serious project. nobody would bat an eye if you presented it as “I wanted a to try and implement Signal protocol, this is what I’ve learned and how far I’ve gotten”.

of course they asked for a professional one… but those that ask, must know that they are all prohibitively expensive. especially for a solo vibecoding dev like myself

then… vibe-code something else?.. why do you think that you should be making something you are not an expert in, that can potentially put your users into danger and make you liable for it? if it’s a learning project - great, go wild. but if it’s intended to be used, then sorry - this is just an irresponsible approach that should not be entertained by anyone. I get that you have “positive intentions” but pick some other venue that you can get right. or contribute to an existing project (being mindful of contribution guidelines).

Cryptography is notoriously easy to get wrong. If you don’t know enough about it - you should not offload it to the hallucination machine, because you will not be able to verify it properly, and those who can - will not bother to.

This is not what a real audit looks like and it should not be presented as such. This “audit” is, in fact, slop.

Auditor: Security Analysis (Automated + Manual Review)

Do you not see the problem in this line?

The implementation uses real cryptographic primitives

Or this?

Buying the product gives people the right to use it

It’s implied, but it’s not clear - which is why whenever you “buy” software you actually buy a license to use it which clearly states how, where and by whom it may be used, on how many devices, under which conditions, etc etc etc.

I play a ton of mouse driven games that don’t have gamepad support and it works great there. I would not even consider emulating the mouse with regular sticks, but with touchpad it’s very comfortable

Since there’s no license file, it defaults to all rights reserved, which means full files can’t be redistributed.

I’m not a lawyer, but I would argue this actually means that even people who get it from Gumroad can’t use it “legally”. There should be a license which expresses your intent.

The project is closed‑source

It’s not though. It may not be FOSS, and by omitting a license you do keep the copyright by default, but it’s definitely not closed source either, it’s “source available”. Unless I’m missing the joke?

If there’s anything to learn here it’s that you absolutely can follow in Ross’s footsteps and organize a movement that will fight for what you deem important. He said multiple times “I’m doing this only because nobody else does, not because I’m a good fit for this”.

“let’s not do this because it’s not as important as X” is a bad argument, because the alternative is not that Ross suddenly picks some other topic and starts to drive it, the alternative is that nothing happens at all.