pona-a

7 ms·

91.
by pona-a 7mo ago
In my home country, there exists a law banning the use of encryption without a special government license issued to businesses. Did Chromium instantly add a popup asking if you possessed said license when you first connected to any SSL site
92.
by pona-a 7mo ago
Is it because do I feel about 'i think my comment' that you came to me?
93.
by pona-a 8mo ago
It is a common tactic among abusive parents to convince their child without them, they'd be unable to survive in the wider world. Any mistakes will become irrefutable proof thereof, and any attempts to break this control and do things
94.
by pona-a 8mo ago
So a torrent tracker isn't in-scope because it doesn't distribute and only facilitates peer discovery?
95.
by pona-a 8mo ago
The difference is a bartender has a handy thing called a human brain that can integrate every evidence and prior without explicit handling. Which a computer program can not. Now we have another "legitimate interest", potentially
96.
by pona-a 8mo ago
Agreed. And if the same legislation was designed under the supervision of domain experts, it would be an HTTP header or envvar to indicate one of specified brackets, with recommended integration with applicable parental control system. Inst
97.
by pona-a 8mo ago
Yeah, that's usually what happens. But many of those errors are TLS protocol errors, not expired certs.
98.
by pona-a 8mo ago
My pet (conspiracy) theory is ISP middle boxes toying with degrading/MITMing SSL.
99.
by pona-a 8mo ago
Tried that in 2022 before the war broke out. Didn't take long for reality to catch up with me, sitting in a neighbor's cellar hearing missile whooshing past up above. Ignorance is a very costly commodity.
100.
by pona-a 8mo ago
Next time you can just tell us you didn't write it.
101.
by pona-a 8mo ago
It's the denigration of any and all intellectual pursuits that gets me. It's the myopic lead the blind, in a race to empty their brain fastest before the singularity can rupture them into the mainframe heaven. Their irl counterpar
102.
by pona-a 8mo ago
Yes, F-Droid has some security issues with PKI/outdated dependencies. But never malware. The first is a technical problem that can be fixed with one or two NL-Net projects, the second is a fundamental misalignment of incentives.
103.
by pona-a 8mo ago
I'm thinking of migrating to ExcaliDraw or Xournal++ next time I need a whiteboard. The performative closing of public contributions citing the slop scare felt disingenuous from the start. You couldn't be bothered to implement _an
104.
by pona-a 8mo ago
I have some questions about the "Last-Mile encryption" and "Encrypted Voicemail". Does Cape receive cleartext and resend it encrypted? What does this achieve? Integrity? Does the service drop unencrypted messages?
105.
by pona-a 8mo ago
[delayed]
106.
by pona-a 8mo ago
Or at point me to a git repo.
107.
by pona-a 8mo ago
F-Droid does not contain malware. There were cases of maintainers going rogue, such as Simple apps being bought by an adware firm, which resulted in a timely takedown, directing users to a maintained fork Fossify. Like a distro repository,
108.
by pona-a 9mo ago
> We're fortunate to live in a democratic, capitalistic country where we can fight through the courts. Translation: we're fortunate enough we can buy the courts, brainwash the populous, and crush all legalistic opposition; but
109.
by pona-a 9mo ago
I don't have think this is sustainable. There can physically be only so many satellites before we reach Kessler syndrome. The costs will rise as the quality of service falls, and there market for alternative land-based ISPs will not ha
110.
by pona-a 9mo ago
Look up YaCy. This might be close to what you imagine
111.
by pona-a 9mo ago
Because then at least one entity in the universe has developed a theory for this codebase, tested it before sharing, and could meaningfully contribute beyond 5-sentence prompts.
112.
by pona-a 9mo ago
Wasn't BLAKE2s recommended on the Noise mailing list, being faster for low volume messages, even on 64-bit?
113.
by pona-a 9mo ago
Yggdrasil is a more generic overlay. It can run over unconfigured Ethernet links, auto-discover other nodes on your local network, or punch through firewalls if you configure any public peers. You can setup a private network by only declari
114.
by pona-a 9mo ago
Surprised to see nobody mentioned Yggdrasil [0]. It's a routing protocol with cryptographic, non-topologic addresses, which could be used on top of TCP/IP or any alternative stack, like LoRA. I've been using it as a Tailscale
115.
by pona-a 9mo ago
Yes! I've been thinking about a similar idea in October, using a "keyed hash" of the challenge computed with playing cards. I have no idea how secure this is, but the concept itself is exciting: the mental labor might functio
116.
by pona-a 9mo ago
Technologies cannot be normatively evaluated without considering the power structures they facilitate. Consider secure boot; assuming it's properly implemented, could defend against an entire class of attacks—evil maid: if a third part
117.
by pona-a 9mo ago
Standard memory disclosure: the apple when eaten would be freed, but it would still be read, leaking its contents. Luckily its volume was low, so they couldn't exfiltrate all of it. But still, the heavens are closed for maintenance, pe
118.
by pona-a 9mo ago
I see how this would be useful once we take binary signing for granted. It would probably even be quite unobjectionable if it were simply a domain binding. However, the very act of trying to make this system less impractical is a concession
119.
by pona-a 9mo ago
Collecting the email doesn't inspire much confidence. An account-number model like Mullvad's would seem preferable, or you could go all-in on syncable passkeys as the only user identifier. The web app itself feels poorly made—almo
120.
by pona-a 9mo ago
In KeePassXC: > Your authenticator doesn't support encryption keys. Please try again using 1Password — some password managers like Bitwarden don't work yet.

More ›