Seirdy

20 ms·

151.
CII' FOSS best practices criteria(bestpractices.coreinfrastructure.org)
2 points by Seirdy 5y ago|1 comments
152.
by Seirdy 5y ago
I'm not saying that they go out of their way to make it inconvenient; I'm saying that making it more convenient is probably not going to give them an ROI of any sort .
153.
by Seirdy 5y ago
I'd imagine that the inconvenience of handling takeout data is beneficial for Google's business interests, so there isn't a big incentive to improve the situation.
154.
The AEGIS family of authenticated encryption algorithms(jedisct1.github.io)
3 points by Seirdy 5y ago|0 comments
155.
by Seirdy 5y ago
There is choice: people can use Webkit instead. Webkit and Blink have diverged significantly since Blink forked Webkit: Blink is as old now as Webkit was when the fork happened.
156.
Frugal Computing (2021)(wimvanderbauwhede.github.io)
4 points by Seirdy 5y ago|0 comments
157.
by Seirdy 5y ago
Like I said, companies are free to use a more sustainable model that doesn't require artificial scarcity: they can provide services to reflect the fact that copies of software are not a scarce resource, while labor is. It's not ou
158.
by Seirdy 5y ago
The point of copyleft licenses is to make it hard to make proprietary software and easy to make free software. It sounds like they're working as intended. My understanding is that this suit is partly on the grounds of Visio not releasi
159.
by Seirdy 5y ago
The CII Best Practices initiative sets a good set of requirements to qualify. Mission-critical software needs to have a good bus factor, keep its deps up to date, have guards in place for the OWASP Top 10 vulns and others (where appropriate
160.
by Seirdy 5y ago
Almost all distros ship at least openjdk-11, and many including Debian have openjdk-17 now.
161.
by Seirdy 5y ago
non-JS nitter link: https://n.0x0.st/alecmuffett/status/1444364285145239560
162.
by Seirdy 5y ago
I listed 25 alternative indexing search engines, including Neeva: https://seirdy.one/2021/03/10/search-engines-with-own-indexe... I'd forgotten about Kagi, thanks; someone mentioned it to me on IRC but i
163.
by Seirdy 5y ago
Might wanna disable JIT, MathML, SVG, Graphite font rendering, asm.js, webgl, webgpu, hyperlink auditing, and native regexp while you're at it. Here's what torbutton disables, for reference: https://gitweb.torproject.or
164.
by Seirdy 5y ago
The author also wrote about Linux's lack of exploit mitigations and sandboxing: https://madaidans-insecurities.github.io/linux.html Android's surveillance is mostly in stock android and other derivatives, but not
165.
by Seirdy 5y ago
I love obsd and agree with all your points...except security. A Whonix developer and GrapheneOS contributor wrote this up better than I can: https://madaidans-insecurities.github.io/openbsd.html
166.
by Seirdy 5y ago
Oi, don't break the prime directive, or k** is gonna deploy the #cat-v platoon on us.
167.
by Seirdy 5y ago
Are you aware of a federated, decentralized approach to e2ee messaging that doesn't require trusting the servers? i.e., without the metadata leakage of email, xmpp, Matrix, etc.? The only options I know of have poor support for offline
168.
by Seirdy 5y ago
I generally agree with this article, with three exceptions: 1. It's helpful to distribute a statically-linked binary for users of distros that don't yet have packages. 2. It's also useful for situations in which distro packag
169.
by Seirdy 5y ago
The purpose of a permissive license is to encourage proprietary derivatives that come with intellectual property restrictions, EULAs, SaaS with vendor lock-in, etc. The purpose of a copyleft license is to encourage derivatives that don&#x27
170.
by Seirdy 5y ago
It is far easier for a bad actor to compromise or start a commercial VPN provider than it is to do the same for an ISP. If you want online anonymity, use Tor. And torrent with a seedbox.
171.
by Seirdy 5y ago
You don't need a browser to sandbox a program. I personally sandbox Zoom (which I'm required to use for classes) in a Bubblewrap sandbox and seccomp filter. This offers sandboxing capabilities unavailable in the browser, such as W
172.
by Seirdy 5y ago
Great tool. Some feedback: - The section on FLOC is a bit inaccurate; I wrote about what the interest-cohort permis. policy does and doesn't do: https://seirdy.one/2021/04/16/permissions-policy-floc-misin
173.
by Seirdy 5y ago
Lots of people have been spreading misinfo that Gemini doesn't support inline images. Gemini doesn't support auto-downloading of inline linked content. You click an image to load, and the image can be displayed inline if you choos
174.
by Seirdy 5y ago
If I see an http(s) URL, I have no idea whether I'll have to play whack-a-mole with selective attack-surface expansion (enabling JS, media, SVG, third-party JS, or JIT) for a rich text document to load. If I see a gemini:// l
175.
by Seirdy 5y ago
Another option would be something similar to Go's sum database, but with something like a DHT instead of a hosted centralized service. Or perhaps instead of a DHT, users could export all their certs to a file and combine/compare e
176.
by Seirdy 5y ago
I think there's another difference between the two that isn't there by definition but manifests in practice: If we were to imagine a simplified landscape in which all tests fall on a one-dimensional axis, from "quick unit tes
177.
CII's Floss Best Practices Criteria(bestpractices.coreinfrastructure.org)
2 points by Seirdy 5y ago|0 comments
178.
by Seirdy 5y ago
We already have tons of vtubers who make no secret of using voice changers. Some, like Zentreya, use speech-to-text-to-speech for an artificial voice. If that sounds odd to you, I encourage you to check out her channel and compare with simi
179.
by Seirdy 5y ago
You can help change that situation by joining the million or so Fediverse users or improving the platform instead of publicly dismissing it because it doesn't have a billion dollars in funding. It's quite easy to put together a fe
180.
by Seirdy 5y ago
Giving into the status quo is not going to change it. Free software projects aren't really free they make people sign up for nonfree platforms to collaborate. The biggest projects are typically on IRC, mailing lists, and online forums.

More ›