cultural reviewer and dabbler in stylistic premonitions

  • 34 Posts
  • 47 Comments
Joined 5 years ago
cake
Cake day: January 17th, 2022

help-circle



  • i would be surprised if it is true that “If you don’t remove that it shows your personal account to anyone who receives it so that they can chat directly with you”, and a search just now didn’t find anything to substantiate that.

    It’s a very recent change

    is it though? if so, how do you actually find out the profile name from the si parameter?

    obviously tracking parameters from URLs should be removed in any case, but afaict only google can use this to find which user generated the link.

    after some more reading i found conflicting reports but i think this might actually be happening; apparently it is only visible in the app?


  • But why rewrite programs that existed for decades and have proven their stability and safety? Rewriting them to Rust won’t make them safer, it will just introduce the kind of issues original versions have got fixed long ago.

    Of course rewriting them will introduce some new issues, but it will also eliminate classes of bugs from which there are definitely still a great many in old “stable” C code (bugs which are now being discovered and will presumably continue to be discovered at a much faster pace due to LLMs).

    The whole project is about abolishing GPL. And Rust is just an excuse.

    I don’t think it is just an excuse; I believe that improving security is also a goal… but removing GPL code is clearly also part of their motivation :(








  • This is offtopic here, but here is an answer 🙄 (click to expand)

    why do you stand against Telegram as a secure and optimal solution for the majority

    Because it isn’t secure. It is marketed as being secure, and it is not. It is snake oil.

    Just to clarify, are you aware Telegram is blocked in Russia by the government

    yes, i am aware that they are (again) currently blocked. i’m curious your theory for why they were unblocked after the previous blocks? (note: please don’t actually reply to this question here; see end of this comment first)

    mostly because the former does not want to share data with the government standing for the privacy, if I am not mistaken?

    yes, you are mistaken.

    Russia has strengthened and later weakened their restrictions on Telegram various times over the years for reasons which are probably unknowable without insider information. What is clear is that Telegram is absolutely sharing data (which they’ve chosen to design their service such that they can have access to) with various governments at various times; assuming that they never would share any with Russia is nonsensical. The extent to which they willingly share which data with which governments, versus which governments access data without their cooperation (by compromising their servers or coercing their engineers, which gives access to message contents due to their lack of e2ee) is not particularly interesting.

    Beyond that, I recommend that you post on [email protected] or somewhere similar if you need people to explain why telegram is offtopic in communities about privacy technology. (This discussion is very offtopic in this thread so I won’t reply further here. If you really feel the need to argue about the above I recommend you do it in a new thread somewhere it isn’t offtopic; if you tag me maybe i’ll reply there.)









  • Arthur Besse@lemmy.mltoPrivacy@lemmy.ml"Trusted" eMail Providers?
    link
    fedilink
    English
    arrow-up
    4
    ·
    edit-2
    2 months ago

    Mailbox.org lets you keep your own private key.

    Every email provider lets you keep your own private key if you do encryption using the interoperable OpenPGP standard using software running on your own computer. Many email providers will recommend that you do exactly that, and will helpfully instruct you about how to do so (eg, the more reputable options in this thread such as migadu.com, mailbox.org, posteo.de, and even fastmail.com all have instructions for how to use some implementation of pgp to encrypt your email).

    Meanwhile any company selling non-standard “email encryption” (eg, proton and tuta) which is not compatible with pgp (or, in the corporate world, s/mime, which is also a standard…) is firmly in the snake oil business and should be distrusted and boycotted regardless of which shitty youtubers they’re sponsoring this week.


  • Companies now block older browser versions

    Now? This has been happening since the dawn of the web. At least the screenshot you pasted represents all of the big three rendering engines - it used to be common to see “Internet Explorer version XYZ required”, sometimes with javascript to prevent you from using the site with any other browser (even if in some cases it would actually work fine if you simply spoofed your user agent string).

    I have used kinda retro devices to surf the web at times

    Most websites became HTTPS-only sometime after the snowden disclosures in 2013.

    Over time old versions of TLS have been deprecated and eventually support for them is dropped from browsers and web servers alike. So, a browser from even 15 years ago literally cannot connect to most webservers today.

    Planned obsolescence is terrible but it’s a minor factor here: it’s actually dangerous to use even (especially?) a slightly-out-of-date web browser because every new release fixes vulnerabilities which can be exploited to run malicious code on your computer. The planned obsolescence which prevents people from being able to have an up-to-date browser comes mostly from proprietary operating system vendors; to have up-to-date software while continuing to use somewhat older computers you need to use free/libre software.