• 0 Posts
  • 17 Comments
Joined 4 years ago
cake
Cake day: February 15th, 2021

help-circle
  • It’s true that they say both things out of comfort.

    Though to be completely honest, both statements are not contradictory. They are not necessarily accepting that they do have something worth hiding, but just stating that hiding is too difficult these days anyway. That does not mean (sadly) that they would start doing it were it easier, just that they have even less of a motive to care about it now that hiding is so much harder (to the point of almost being “a myth”).

    I’m not saying they are right, I’m saying that lack of consistency is not the problem with that attitude. It’s not a “shift”, just a consistent continuation of a lazy attitude towards comfort.


  • Stock Android does not have tools to do that verification. Just verify it from the desktop and then send it to your Android device.

    But I don’t see how verifying the apk signature would help if your concern is that “you have bare to none knowledge how it works”. The only thing that would fix that would be if you actually learn how it works.

    Luckily, unlike other stores that are closed source and actively and purposefully hide from you what they do, F-Droid is open source, so anyone can go to the repo holding their source code and learn how it works, or build their own themselves, as long as they wanna spend that much effort.


  • I expect it would be technically possible to have lemmy-like or peertube-like services built on top of the AT protocol Bluesky uses, like with ActivityPub. And I expect if/when that happens the communication across services would probably work too.

    In fact, accounts being “portable” in the AT protocol can potentially make the integration more seamless across different services, not only might the posts be seen from different services, but you might be able to directly access those different services with the same account. Imagine if you could login in lemmy with a mastodon account or vice-versa.

    Bluesky is just one of the possible services. But as long as the invites are private and you can’t host your own instance, I wouldn’t even consider it an alternative. I think it’s a bit early to judge, both its positives and its negatives.


  • Ferk@lemmy.mltoLinux@lemmy.ml*Permanently Deleted*
    link
    fedilink
    arrow-up
    4
    ·
    edit-2
    1 year ago

    It’s changing by having a library like wlroots do most of the work.

    When you consider the overall picture, “wlroots + compositor” is actually less complex than “X11 + window manager” because you no longer need to consider the insanely high requirements of having to have a team maintaining the spaghetti mess of X11 code.

    Wayland-based dwl has roughly the same line count as X11-based dwm (about 2.2k), without having to depend on a whole separate service as big as X11.

    But of course, it being a completely different approach, it’s likely that for most smaller projects (ie. not Gnome or KDE) it’s easier to start a new project than creating a layer to maintain two different parallel implementations.

    If you want something that’s more or less compatible with openbox, there seems to be this project, labwc, which claims to be inspired by openbox and compatible with its config/themes… though I haven’t personally tried it.

    Also keep in mind that openbox (and I expect labwc too) doesn’t include any “panels” / “taskbars” or anything like that… and it’s likely your X11 panels might not work well if they do not explicitly support Wayland (but I believe that, for example, xfce-panel now supports both).



  • Wouldn’t it be easier and more direct to simply impose a tax to those external big tech services?

    I don’t understand why using protection against “bad actors” as an excuse is necessary at all if getting money from big tech were the ultimate goal. A lot of people within the EU would happily support such a tax targeting big US companies, it’s the privacy problems what we are pushing against, not the fees. So I’d expect a more direct and honest fee for external companies making business within the EU would be easier to pass if that were what they actually wanted, wouldn’t it?



  • I don’t think EVERYONE needs to understand / know about it. I mean, I remember when I was young most people had no idea how to use the internet (hell, they didn’t even know how to program a VHS), yet I was perfectly happy using that technology.

    I only need a specific set of people and specific communities to be there for it to be worth it. Like I said: I no longer use reddit, even though the fediverse has only a small fraction of the content existing in reddit… I would have expected people in the fediverse would be more receptive to unpopular but technologically/ethically superior alternatives.


  • Yes, but the question is: what does matrix need to establish itself as a solid alternative?

    You can’t answer that by saying “people don’t use it, change that” because that’s something only people can change, not matrix, that’d lead to a cyclic problem.

    Specially when that’s given as a counterpoint to justify not wanting to do the change for “this community”. It’s contradictory to want its popularity to be changed but accept the lack of change alone as a valid reason to justify your communities not changing.


  • like how not being able to sign up for something with tor and monero is a privacy violation, it’s not.

    Note that “secrecy” and “privacy” are often understood in Security lingo as different things. One protects confidentiality, the other one protects anonymity.

    It’s possible to have one and not the other…

    You can have a very private system through onion routing but have the contents of the messages exchanged be in plaintext, open to the public. Nobody will be able to know the one who wrote the message was you. But they can see the message. (then there is privacy, but not secrecy).

    Or you can have very strongly encrypted communications (say HTTPS) but have the DNS exchanges (or the TLS handshake, or the IP addresses) be in the clear, so people in the middle (eg. your ISP… or your workplace tech guys) can know exactly that the packages are sent by you and where you sent them, even if their content is encrypted. They can know which service you tried to access to, for how long and how many times (so you have secrecy, but not privacy).


  • But that’s cyclic reasoning. Nothing that you need/want will be on matrix if you (and everyone else) does not think it’s worth to make what you need/want be in matrix…

    I don’t need EVERYTHING to be in Matrix, just the things I’m interested in. So I’m happy when I see a push to have those specific things there. This is the same argument as to why I don’t use Reddit anymore, despite Lemmy/Kbin having only a fraction of the content.

    It also helps the fact that Matrix is very flexible when it comes to mirroring/proxying other protocols. I can easily access IRC communities from Matrix, for example. The integration in that direction is nicer than requiring discord channels to add bots that parrot an IRC chat.




  • I think part of the reason why the long extension is often preferred is because it’s much clearer and it’s guaranteed to be supported and decompressed by the respective tools. Even when they don’t suppot tar archives, they’ll just give you the uncompressed tar in that case.

    It’s also very common to do that with other extensions (not just .tar) when compressing big files. For example, when archiving logs they’ll often be stored as .log.gz, which makes it automatically clear that it’s a log file directly compressed with gzip and meant to be examined with tools like zcat and zless to view it.

    And in cases like that you really need it to be clear on what data does the gzip stores, since it does not keep metadata about the file so you might not be able to get back the original name/extension of the file if you rename the gz file.


  • In fact, it’s not unlikely that the behavioural data of people who pay to opt out of being spammed with ads will be more valuable to data brokers.

    True. This is why the AdNauseam extension doesn’t simply “hide” ads, but it goes out of its way to actually simulate clicks for ALL ads, causing algorithms to be unable to more accurately profile you and making the pay-per-click model fall on its face. If everyone did that, advertisers would have to pay for completely meaningless clicks making it no longer worth it to advertise this way.

    Though it’s still not a solution to privacy, since it still gives some insight on your tastes by allowing them to know what websites do you frequently visit.




  • You can grow potatoes for political reasons too. Everything a human being does might be politically motivated, but that doesn’t mean potatoes are political.

    Anyone can take that same software, that was created as a particular political statement, and use it for the completelly opposite political reasons to make a completelly different political statement. Just the same way as many have used songs in contexts that are completelly politically opposite to what the original author of the song intended.

    In the end, the only thing that’s political is the goal/purpose/motivation of an action, not the result of the action. No piece of software/hardware/thing is political when you dettach the artist from the art and just see it for what it is, regardless of what the author might have wanted you to see it as.