bubblethink

100 ms·

1561.
by bubblethink 10y ago
I don't have an answer to all your questions, but there will always be a fundamental conflict of interest between privacy & security (of the end user) and market forces. You can hope for more usable systems that are also secure. If
1562.
by bubblethink 10y ago
What's a provider ? Can't you arbitrarily break a provider into smaller ones to avoid triggering this rule ?
1563.
by bubblethink 10y ago
That's because HTTPS allows that. Whether it's cloudflare, or your own servers and load balancers, it's all legal. So it would be unfair to single cloudflare out. You could take some measures to identify their flexible-ssl tr
1564.
by bubblethink 10y ago
How do you check if a website uses cloudflare ? Any scripts that do that ?
1565.
by bubblethink 10y ago
>"Consider your average investigative journalist or whistleblower, with windows or a mac, that they haven't updated because then their kids favorite game doesn't run anymore or they simply don't want windows 10. ....
1566.
by bubblethink 10y ago
I mean it's deceptive to the general public to even call it flexible SSL and offer it as a product. False sense of security is worse than no security.
1567.
by bubblethink 10y ago
>The only way to seriously increase Linux desktop adoption is for availability of Linux pre-instsalled computers to significantly rise I don't know if there's a term for this, but ironically, that's like a self-destructive
1568.
by bubblethink 10y ago
I tried that briefly too, and I couldn't launch screen. It seems to trigger some old bug in screen. How far is the WSL terminal from the usual fanfare (screen, tmux, proper colors in the terminal and text editors, and other edge cases
1569.
by bubblethink 10y ago
Isn't Charles Schwab terribly insecure ? There was a post here a year ago about their password and 2fa policies.
1570.
by bubblethink 10y ago
Most of the insecurity stems from the baseband. It's a black box processor with unfettered control. Once you get rid of that, the rest of the hardware is more like a general computer. Getting PCs to work with an entirely free stack is
1571.
by bubblethink 10y ago
The Airtel story is interesting. I've experience this in India, but it's usually just DNS level blocks. Didn't expect it to manifest as an HTTPS MITM. That's a massive fail on Cloudflare's part.
1572.
by bubblethink 10y ago
yes, to the extent that you trust the OS and other firmware/drivers/blobs running on the device.
1573.
by bubblethink 10y ago
Signal only works on phones and chrome desktop right now. So other devices are anyway out of question. Their goal has always been secure messaging for the masses, and not necessarily secure messaging for everyone and everything under the su
1574.
by bubblethink 10y ago
Yes, it's the same setting for both video and voice, which uses the newer webrtc stuff. The old voice support is being phased out, which is probably what you've used in the past.
1575.
by bubblethink 10y ago
Voice is getting better. It's in beta right now. Both parties need to enable it in the settings right now. I tried it recently, and it worked quite well for the most part. They'll presumably iron out the issues before a general re
1576.
by bubblethink 10y ago
It's not a technical limitation, just a design decision. Everyone on Signal's network is known by their phone numbers. You cannot pick a username, as such. The phone number is the username.
1577.
by bubblethink 10y ago
I think it needs the phone number for verification. The phone number is the identity in Signal (and a lot of other apps these days).
1578.
by bubblethink 10y ago
This is great news. Is there sufficient interest in making a secure dumb phone ? If it's cheap enough, I think some people may be interested. The rough design for the phone can be something like this: It should not be a real phone. i.e
1579.
by bubblethink 10y ago
In the US, yes. Ubuntu, VLC and the likes are exempt from this sort of nonsense because they are not registered in the US. I don't know what happens when a US based company like Dell sells laptops with Ubuntu in the US though. They pro
1580.
by bubblethink 10y ago
Does this change mean that the server is open source too ? I remember that server for voice (redphone) wasn't open earlier.
1581.
by bubblethink 10y ago
Now all we need is 'Windows subsystem for Linux' to run on wine, and we'll rip a hole in space time continuum.
1582.
by bubblethink 10y ago
This is highly impractical, and possibly even detrimental to your privacy/security. For one, most people are simple not qualified for such an undertaking, but that's probably not the biggest problem. It's the people who may t
1583.
by bubblethink 10y ago
That's pretty bad. I thought Google was good with this sort of stuff. Is the delay caused because they were closed drivers, and had to be reverse engineered ?
1584.
by bubblethink 10y ago
I'm pretty sure that both Pixel laptops run coreboot. This page says so: https://www.chromium.org/chromium-os/developer-information-f... .I think Google is one of the major contributors to coreboot. I hope they re
1585.
by bubblethink 10y ago
Isn't the 2015 Pixel laptop a good fit except for the limited storage ? I'm guessing that it supports coreboot out of the box, probably has all drivers upstreamed, and has a great display. If there were a way to upgrade the storag