Ajedi32

38 ms·

511.
by Ajedi32 1y ago
My point is "completely different than the other government" is only true to an extent. Even with significant customization, there's still a lot shared which benefits immensely from economies of scale. As you said, nobody&#x2
512.
by Ajedi32 1y ago
Onion websites also don't need TLS (they have their own built-in encryption) so that solves the previous commenter's complaint too. Add in decentralized mesh networking and it might actually be possible to eliminate the dependency
513.
by Ajedi32 1y ago
Do you depend on a DNS root server to map your website name to your IP address? That's a third party. There are ways to remove that dependency, but it's going to involve a decentralized DNS replacement like Namecoin or Handshake,
514.
by Ajedi32 1y ago
On time and under budget is relative to what you set the budget and deadlines to in the first place. If these companies had to rewrite Excel from scratch for every client I guarantee you the budgeted cost would be a lot higher (and they&#x2
515.
by Ajedi32 1y ago
I think from an efficiency standpoint it makes sense to contract out to bigger players. Economies of scale are huge in software and IT since once it's written copying and running code is basically free. The problem of course is that us
516.
by Ajedi32 1y ago
> Say I send a copy of a free-as-in-freedom game that I may or may not have modified in some way to a friend or on a forum, should I pay its author(s) for this? Your friend would have to buy a copy of the original game from the author (o
517.
by Ajedi32 1y ago
I think what GP means by "user freedom" is that the software acts in the interests of its users rather than the interests of its developers. Some proprietary software does do that, but there's an inherent conflict of intere
518.
by Ajedi32 1y ago
The main reason Netflix is more convenient than piracy is that piracy is illegal. If The Pirate Bay was allowed to offer a $2/month unlimited movie streaming service with no legal repercussions, Netflix would be out of business.
519.
by Ajedi32 1y ago
As I said that's just another way of soliciting donations; it relies entirely on consumer goodwill (or ignorance/poor accessibility of the free option). There are limits to how big you can get with that (or how much you can charge
520.
by Ajedi32 1y ago
This is the one big flaw I've seen in Stallman's philosophy on software. He's been thoroughly proven right I think about the dangers of closed-source (unmodifiable) software to user freedom. But I think his insistence that Fr
521.
by Ajedi32 1y ago
You wouldn't necessarily know whether the certificates were obtained by the US government or another random attacker. They have the CA's name on them and the website name, not the attacker's name. I'm not saying there&#x
522.
by Ajedi32 1y ago
MPIC is good but not foolproof if the website itself is being MITMd. DNSSEC validation is better but not required, as you said, and even if it were HTTP-01 would just immediately become the new weak point. I think you're wrong about DA
523.
by Ajedi32 1y ago
Yes, CT makes any sort of certificate issuance attack relatively "loud", but as you seem to be aware that doesn't actually stop the attack from happening in the first place unless the attacker cares about keeping it a secret.
524.
by Ajedi32 1y ago
AFAIK that's not a required feature of the DV process, and even if it were it wouldn't help if the MITM was happening between the website and the wider internet. That said, I don't think there's a way to stop a nation st
525.
by Ajedi32 1y ago
Certainly a MITM between a website and LE is less likely than a MITM between a user on a random public Wi-Fi network and the website, but I've often wondered why more attention hasn't been given to securing the domain validation p
526.
by Ajedi32 1y ago
Probably this is mainly for Android on laptops. They're replacing ChromeOS.
527.
by Ajedi32 1y ago
Even open weights models would be a problem, right? In order to be sure there's nothing hidden in the weights you'd have to have the full source, including all training data, and even then you'd need to re-run the training yo
528.
by Ajedi32 1y ago
That's a good idea in spirit but seems a little over complicated to me. I think it might be simpler to just categorically ban any and all technical measures designed to prevent users from controlling or modifying software on devices th
529.
by Ajedi32 1y ago
If the only thing standing in the way of closed platforms is that they have to be marketed as closed, you're just going to get everyone marketing their software like Apple does and nothing else will change.
530.
by Ajedi32 1y ago
Predicting the future is indeed famously difficult, which is why even markets have a hard time with forecasting and responding to demand years into the future. I don't think such over corrections are a market failure, just a lack of om
531.
by Ajedi32 1y ago
That's what a shortage is, a short-term undersupply. Market forces will eventually correct the problem if allowed to operate normally (e.g. prices spike, incentivizing more supply), but like you said that takes time. If it's a sho
532.
by Ajedi32 1y ago
My mental image looks kinda like this: https://media.istockphoto.com/id/588356620/vector/cute-carto... Except facing left and with a curlier tail. Maybe like this but more redish? https://easydrawi
533.
by Ajedi32 1y ago
Disappearing messages were never a real thing in the first place. You can have a gentleman's agreement that the person you send your message to will delete it after reading it, there's no way to guarantee anything beyond that. (Fa
534.
by Ajedi32 1y ago
> So I conjecture that this is the crux of the issue with AI-risk. People who truly accept that AI with an IQ of 300 and all human capabilities may appear are almost always at least somewhat worried about AI-risk. And people who are not
535.
by Ajedi32 1y ago
I've long wondered why there's not a more incremental transition path from spreadsheets to a full blown database with a custom UI. It just seems like spreadsheets are right on the cusp of being able to fill that that role but lack
536.
by Ajedi32 1y ago
Was it legally mandated? I think that's the main idea GP is proposing. Obviously without any incentive to actually implement it there's no point.
537.
by Ajedi32 1y ago
I have no problem with personal responsibility, I do have a problem with mass government surveillance. (Or depending on implementation, merely government control of private communications. Either way it's not a good thing.) "You m
538.
by Ajedi32 1y ago
Not necessarily. The age verification proof doesn't need to be site-specific. But again, that reduces the incentive "for the citizen to make sure their authentication isn't shared" because there's nothing tying it t
539.
by Ajedi32 1y ago
> So what is the problem? [...] It’s not a win for adults But isn't that exactly the problem? What are you confused about? You think there's no issue with violating the privacy of all adults as long as children are unaffected?
540.
by Ajedi32 1y ago
If you share your CC number, someone could steal your money. If you share your anonymous age verification token... someone could pretend to be 18? And by design that token is anonymous and there's no way to prove you were the one they

More ›