feanaro

40 ms·

451.
by feanaro 5y ago
What you're describing is exactly what Matrix is aiming to be.
452.
by feanaro 5y ago
If you made this a Matrix client, I think you'd really have something. Using the matrix-rust-sdk, you could even get E2EE that people are requesting for free.
453.
by feanaro 5y ago
> but the onus is on the user to lock down their equipment. Not the manufacturers. Huh? Why? I mean the user needs to have responsibility for the equipment they use, but it is absolutely also the manufacturers responsibility to produce r
454.
by feanaro 5y ago
How is it meaningless? Your program's integrity is compromised, but the host is not. That's a meaningful difference.
455.
by feanaro 5y ago
Those are not sandbox escapes, those are missing intra-program defences which make it easier for a e.g. buffer overflow to be used for program manipulation. That still doesn't allow you to escape the sandbox in itself.
456.
by feanaro 5y ago
> Virtually everyone knows a Beatles song. So much so that their general impact on the 60s and the world onwards is an actual field of study. While I see your point, this excerpt also feels a bit comically overstated. How are the Beatles
457.
by feanaro 5y ago
> I’ve seen some interesting projects in the past that were browser based and made the entire Internet be equipped with comments sections, including YouTube. Hypothesis is such a tool: https://web.hypothes.is/
458.
by feanaro 5y ago
The part you missed is "always". The unsafe part is being able to do this from any function, instead of only from functions explicitly marked as being able to perform effects.
459.
by feanaro 5y ago
Furthermore, are we now banning decentralized chat networks, where everyone can host their own node, like Matrix?
460.
by feanaro 5y ago
Who is this government that is not you and I and why should we cede any kind of goal to them in that case? I simply disagree with the notion that I should be controlled and monitored by a third party just because someone else might do somet
461.
by feanaro 5y ago
> In formulating your statement that examining criminal behavior is a problem [...] Who exactly said this? It's rather the other way around: flagrantly examining and being able to examine non-criminal behaviour at a whim is a proble
462.
by feanaro 5y ago
The problem is Signal is not a standard unless they open up their ecosystem, so we're not actually increasing the number of standards here. I've been through the pain of convincing people to Signal due to lack of better alternativ
463.
by feanaro 5y ago
> jazzed about the democratization of technology that, in terms of message _security_, is a step backwards. Well, you can always switch to Matrix and have democratized and secure native messaging which uses a cryptographic protocol com
464.
by feanaro 5y ago
> This is only true now that Element have introduced this compromised way to access signal. It's never not been true since Signal is just a protocol which you can use programatically. It's certainly not been true at least since
465.
by feanaro 5y ago
Not sterilising, but they do reduce viral load and hence also the probability of spreading.
466.
by feanaro 5y ago
Just ask your conversation partner? An Element bridge is just a Signal client hosted on Element's infrastructure. Them using an Element bridge is no different than them using an extra device you didn't know about. That device coul
467.
by feanaro 5y ago
> Not even close. I can evaluate the likelyhood of my partner being compromised. I can’t evaluate the likelyhood of a gateway I may not even know about being compromised. Why? It is your partner that is deciding to use what is essentiall
468.
by feanaro 5y ago
What's wrong with this? How is it opposed to federation?
469.
by feanaro 5y ago
> are becoming comfortable Ugh, comparable, not comfortable.
470.
by feanaro 5y ago
Free market is still a good idea, it's just not enough. What's missing is that we somehow need to ensure all market actors are at most 2-3 orders of magnitude in size/power of each other. Google (and other FAANG type companie
471.
by feanaro 5y ago
> Which employers are the “nice company making nice things and you’ll be able to sleep at night” tech companies nowadays? The smaller ones.
472.
by feanaro 5y ago
Sounds to me like the problem lies in the existence of non-technical "management".
473.
by feanaro 5y ago
> Side by side, my iPhone 12 takes several seconds less to open Firefox than pixel 4. It takes seconds for your phones to open Firefox?! My Xiaomi Mi A3 opens it without a noticeable delay.
474.
by feanaro 5y ago
Because the masses are now large enough that you don't need to have an actually useful application. You just need to make it kind-of work and for it to become popular.
475.
by feanaro 5y ago
A minority is anything that is not a majority (this is the definition I'm using). So a < 50% group can hopefully still be viewed as non-negligible, even though it is not the majority.
476.
by feanaro 5y ago
I'm not even saying you're wrong, I'm saying your argument for not including it for (at the very least) a sizeable minority is weak and somewhat silly.
477.
by feanaro 5y ago
I must say your dismissal of this is rather annoying. Multiple users are telling you they are facing a real -- and completely obvious and predictable -- problem due to the feature not being available. In a comment section regarding research
478.
by feanaro 5y ago
The same way it worked before it had the ability to take pictures.
479.
by feanaro 5y ago
You're missing a crucial point, which is that an XSS or SQL injection requests are different requests from those made during regular use. The intent of sending such a request is also different. In this case, we are dealing with the
480.
by feanaro 5y ago
And this is in no way transgressing their terms of service since it's doing the exact same thing any HTTP agent would do. They don't get to choose which agent I use. In other words, either the action is disallowed completely or

More ›