• 0 Posts
  • 85 Comments
Joined 2Y ago
cake
Cake day: Jul 07, 2023

help-circle
rss

If your baking app has a biometrics lock, it doesn’t mean the bank has your biometric data. That’s not how this works.


yeah, it’s stored locally. This is just FUD cause “big corpo bad”.


yeah, I do use Bitwarden, which has these things. But I store my TOTP codes on the phone to be separate from the passwords and… well, actually serve as multi-factor I suppose.


I loathe every time my work IAM forces me to sign in again, as it always asks for MFA. They use Okta and promote password managers, idk why we can’t enable passkeys to remove this hassle already.


Just pasting more info for those that were concerned, like me:

Issue. This was rolled back and only seemed to affect Windows.

(I don’t use Brave as a daily driver, but it’s my Chromium browser of choice when I need assess if a website is really broken, or if it’s just misbehaving on Firefox.)


until you need to collaborate with the average person who uses google docs and gmail



Same, that’s why I stopped using rethink a while ago, even though I loved it.




ah my skip is 30s and I’ve only seen 2 ads in a row, max


IME ad times are pretty consistent by podcast feed when they’re artificially inserted like that.

When we’re talking product promotions during the podcast recording, they’re only consistent for a given episode, but that’s what sponsorblock is for.


damn, 8 times? Are your ads too long or is your skip too short?


video controls change when an ad is playing on YT, which would be a pretty reliable indicator for an extension running at the client side. But that’s more a UBO issue than sponsorblock when it comes to YouTube, as I’m not sure sponsorblock could do anything if the controls are frozen.


yeah, a few weeks ago I first heard a random US insurance ad or some crap like that, in English, when listening to a podcast from a different country. It took me a few seconds to realize what was going on.

We need Sponsorblock for podcasts


“oh no, anyway…”

GTA online was fun from 2015 until a couple years later before flying bikes and sky races. R* kept pushing updates that appeal to teenagers and absolutely ruined it.


valid question, idk why would people downvote it

broken websites on desktop are rare and not nearly enough to drive a browser change, but they usually fall into two categories:

  1. websites that “break” on purpose for no good reason when they detect it’s not chromium. Either avoid the site or change the user agent.

  2. websites that degrade some functionalities because they rely on newer features or on how things appear on chromium. They’re usually CSS breakages and do not affect browsing that much.

Support for manifest v2 greatly outweighs these potential issues imo.


unless you make sure to very closely check the URL.

or you use random passwords + password manager, which auto-fill won’t work in the fake domain.




yeah, that was funny. Creating a group without OP wasn’t enough, they had to change apps lol


I bought one in november to only use the HDMI to my Linux desktop. I’m never connecting it to the internet.




which doesn’t make sense as a requirement, as the passwords themselves are not even (supposed to be) stored

limits of 128+ characters? Sure.

Limits of 30, 20, 18, or 16 as I’ve seen in many places? I suddenly don’t trust your website.





it’s like a drizzle is a dryer alternative to a thunderstorm

surely I’d prefer none, but if I had to choose…


I see this as them giving companies a more privacy-preserving alternative to tracking. And just another privacy setting to opt out for us.

Instead of a reactive social media post, here’s how it works.

The only real alternative to this conflict of interest between companies and customers is an independent browser.


unless you’re reading ciphertext yourself, this doesn’t make sense


E2EE would be nice, but what’s your idea of open standard for collaboration as opposed to simply open source?

If we had multiple software solutions implementing the same ways of collaborating what would be gained / in what ways would they differentiate and still remain compatible?


As open components, we have the OpenDocument standard + signal protocol for E2EE + CRDTs for conflict resolution. No idea whether they’re compatible though.

As a product, Collabora Online is open and collaborative.


Exactly. At this point idk why anyone bothers migrating to things that are not backed by open standards. The price of vendor lock-in always comes.


It turns out that startup funding for Signal was from a US Government tied entity. Some people won’t like that. Here’s an interesting article: Signal Facing Collapse After CIA Cuts Funding

Someone already commented on the “nothing-burger” this article and line of reasoning actually is, so I won’t repeat it here.

$19m / 50 = $380,000 per year per employee!!!

This $19M figure includes more things. That’s why a blog post shouldn’t be read as an accounting report. Report summaries with salary figures are available btw, one search away.

The infrastructure was not designed to minimize the cost of operations, it was designed for another purpose, data collection by third parties:

The quoted text is not evidence for this. Quite the opposite, in fact.

Elon Musk also promotes Signal:

He promotes Linux too. Also, I bet he drinks water.

I see some valid concerns / questions, but it’s immersed in a muddy water of arguments that is hard to disentangle.



tl;dr “Signal might be untrustworthy because the tech came from a State-sponsored project and the current chairman acknowledges that Wikipedia has a white and Western bias.”

just wait until they find out pretty much all tech we have can be traced back to government-funded research.


Telegram is the only massively popular messaging service that allows everyone to make sure that all of its apps indeed use the same open source code that is published on Github.

Not true. Signal has a very similar client verification process to Telegram’s, described here. The lack of an iOS reproducible build is an Apple limitation / nuisance.

It’s very complicated, the 2nd jailbroken device is necessary because there’s no other way to download the .ipa, but even if you manage to do that and bit-for-bit reproduce the .ipa you downloaded from source, there’s no way to know if the App Store is sending every user the same .ipa or if your other, non-jailbroken iPhone downloaded a backdoored one.

Telegram docs even acknowledge these limitations.

Ultimately, this client verification is not the selling point Telegram’s founder makes it sound like, since most messages are not E2EE and the server code is closed.


exactly, they (Telegram) don’t need to put sketchy code in the clients when most messages are not E2E encrypted and they control the servers lol