• 0 Posts
  • 15 Comments
Joined 1Y ago
cake
Cake day: Jul 14, 2023

help-circle
rss

I upgraded my Steamdeck joysticks to a 3rd party with hall effect sensors, the ssd to one with double the capacity, and the fan to one that is silent. There’s people that have upgraded even more things, to the point of using a pcie flat cable to connect a full pcie GPU card.


https://www.androidpolice.com/2021/04/06/it-looks-like-signal-isnt-as-open-source-as-you-thought-it-was-anymore/

https://www.xda-developers.com/signal-updates-public-server-code/

https://tech.hindustantimes.com/mobile/news/signal-updates-its-open-source-server-code-after-nearly-a-year-71617778373810.html

Look into their MobileCoin and how they implemented it. They are just banking on people forgetting about it.

Anybody pulling these antics with a cryptography product loses my (and others) trust immediately. I’m a security soft dev, and my colleagues and I migrated to Element and Matrix network when it happened. I remember the disgust vividly.

Of course all of this is not going to be the Signal wikipedia page… It’s amazing how their fanbois work.


That argument makes absolutely no sense. These server-side code does almost nothing. The only task it really has is passing around encrypted packets between clients.

So it knows about all metadata, plus registration with phone number, etc. got it.

The Signal protocol, which is used for client-side, local, on-device end-to-end encryption has always been fully open, and it can be used by any app/platform.

you conveniently leave out how you need to use the client built by Signal, with dependencies from Google Services and the like, and you can’t use one built from the source they provide. Which at that point means they can introduce whatever they want in whichever version.

Decentralisation is the only safe way.


And before lacked this and that. It keeps improving, contrast to Signal having the server code closed source for more than a year so the Signal devs could get a headstart and insider knowledge in their Signal-included crytpo coin grief.

How one can trust Signal after them showcasing what they truly stand for is mind blowing.


Conservatism is dead. Climate change is scientifically proven to be catastrophic.

If we do nothing, change will come to us, and fuck up everything. If we elect to change our society and systems, we save ourselves but our way of living changes.

One way or another there’s change. There’s nothing to conserve. Stop yelling and kicking like an irrational kid trying to save conservatism and crony capitalism.



What do you mean by specs then? The protocol? The “protocol” is the ABI of the server binary, the logic of it. The networking protocol is super simple. You need the server code for replicating any server.


This is not enough, the code is old with vulnerabilities that will be exploited with automation nowadays. To correctly do this you need open source server code, or to have it maintained.


You dont seem to know what you are talking about, or are dissingenous.

Copyright is the tool that allows to enforce GPL. The same with other free and open source licenses.

You seem to be leaning towards “permissive” libertarian licenses like MIT and BSD. Those don’t care much about the end users (I got your code, now fuck off I can do whatever I want with the modifications, including never sharing them back and making the whole thing closed source).

But for GPL and licenses that protect the rights of developers (including the right to ask follow-up developers to keep the code open for the benefit of users and developers), copyright laws are the tool that enforces that.

The term “copyleft” is just a meme.


Because it is copyright laundering, which is ilegal. We are just too early in the tech to have it established. But see cases open against Microsoft’s Copilot.


Oh, you. I remember you from another thread the other week, saying how Chromium is not Chrome and that this would never happen. Hi. It is happening. Also, I remember telling you to stop moving goalposts, which is what you are doing here.

Microsoft would be happy to pay Firefox to set Bing as default (has happened in the past already) so even your goalpost moving is moot.

Come on, wake up.


but they did sound the alarm? Debian took Chromium out of their repos for a time because they found unreported telemetry sent encrypted back to Google. All the info is on the net. You just need to read it.


Of course I have. I’ve never found any substantiation, which is why I’m asking. I use them every day so I would certainly like to know if there is, but the concerns I constantly see only apply to Chrome, and not Chromium-based browsers.

Just run WIreshark against your Chromium then. Enjoy.

This is specifically for the Chromium browser, not Chromium-based browsers. I know, it’s confusing. Chromium is basically just the open-sourced version of Chrome.

Did you read the link I posted?

Let me copy-paste directly from the Chromium office page for you then:

Additional Information on Chromium, Google Chrome, and Privacy

Features that communicate with Google made available through the compilation of code in Chromium are subject to the Google Privacy Policy.

There, you have it. Now you can try moving more goalposts again, and provide excuses for them.

This is yet another item attributed to Chrome and it’s users. You can totally create a Chromium fork that adheres to conventional standards.

Nah it’s not. I’m talking about Google pushing and implementing IETF standards that hamstring privacy. They are open standards, but they are malicious. That a standard is open doesn’t mean is doing things that are not ethical.

To me, it’s obvious that you don’t even want to look for proof. Why so hell-bent on taking the stance of a state-level billionare corporation built by extracting privacy from users? How do you think they got there?

Or do you have something specific against the legal non-profit organization that is Mozilla?


Evidence? OF COURSE!

Have you even tried searching for it?

Google even says so for Chromium on its own official page!

https://security.stackexchange.com/questions/144289/privacy-with-chromium

You don’t need to trust us. Trust Google, they are telling you legally if you want to listen.

Also, look up the handful of open bugs on the Debian but tracker, where known people, with name and faces (I’ve met some on conferences), showcase and share how Chromium calls home and sends encrypted data. They share their Wireshark logs.

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=792580;msg=53

Look up how Debian removed Chromium for a time, until some of it got removed upstream.

And all of this doesn’t mean that Google cannot re-introduce it or add different approaches in new updates.

Plus, Google actively creates and pushes for their “standards” via Chrome(ium), which allows them to push for even more surveillance.

In addition, Chromium is not a community project. It’s developed behind closed doors, with a secret roadmap, and a code dump happens on release. That’s no way to develop the 90% of web browser market that society needs in this day and age. But, don’t think you will care about that, do you? you are happy with papa Google for the foreseeable.


do you know of any app developers that publish their signature, so one can compare it with the one in Google Play?

I would love for my banks to do this, for example…