Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)V
Posts
7
Comments
127
Joined
3 yr. ago

  • Specifically, everyone who's not using Chrome and its derivates did it. Use Firefox, people.

  • By that, I know it’s not behind closed doors or undisclosed, nor requiring compromised certificates.

    I don't know how you reached that second conclusion from the fact that there's a government website, but as https://last-chance-for-eidas.org/ mentions, it was hidden in plain sight, in that eIDAS wasn't hidden, but the specific consequences were:

    Although the deal itself was publicly announced in late June, the announcement doesn’t even mention website certificates, let alone these new provisions. This has made it extremely difficult for civil society, academics and the general public to scrutinize or even be aware of the laws their representatives have signed off on in private meetings.

  • It sounds like you made up your mind in advance to support this. Mozilla (and I believe Google too) have a public and rigorous process to determine which certificates to include in their browser, and, importantly, which not too. This new regulation would enable governments to circumvent that process and force browsers to include their certificates, even if those are used to spy on citizens, or are insecure - like the government of Kazakhstan tried to do before. All this using a process without checks and balances.

    Also note that parties like Google aren't trusted "exclusively" - you can always switch browsers if you don't trust them. That will no longer be possible with this regulation.

  • eIDAS has been through the trilogues unfortunately, so the Commission, Council and Parliament have reached agreement about it, pending final approval.

  • This is so rude. You've done nothing for the guy (neither have I), and have probably used and benefited from his work (that we did not pay for) in some way - and then to single him out and ridicule him? There's an actual human on the other side there...

  • It’s not dangerous at all, superheating is rarely a thing and you can avoid it in a multitude of ways including slapping a spoon in your cup

    Ah, so I should just put my metal teaspoon in my cup and I'll be fine?

    (Don't put metal in the microwave.)

  • It’s not dangerous at all, superheating is rarely a thing and you can avoid it in a multitude of ways including slapping a spoon in your cup

    Ah, so I should just put my metal teaspoon in my cup and I'll be fine?

    (Don't put metal in the microwave.)

  • Jump
  • Ah yes, RDM is a clever workaround for that - I should remember that.

  • Jump
  • You don't even need to open Responsive Design Mode - when you select Take Screenshot, there are two buttons "Save visible" and "Save full page" in the top right-hand corner.

  • Jump
  • Legit one of the most underrated Firefox features that I use all the time: right-click -> Take Screenshot (or Ctrl+Shift+S). No need to look up the relevant node, just hover the relevant part with your cursor.

  • I mean, yes, it could've been differently, and as I understand it they're going to. But as a user, how is your life worse with this than without this? What's the impact of something being installed but not running?

  • Well, there's a way to frame this as malicious. I'm not a fan of Brave, but it also installs, say, a spell checker without consent, or a Tor client. Sure, the code is there even if you don't use it, but... What's the actual harm?

  • I have no idea, unfortunately :/

  • I wouldn't call it a mistake, more like being caught between a rock and a hard place, where Android basically forced them to give up on SMS support even though they'd have liked to keep it: https://community.signalusers.org/t/signal-blog-removing-sms-support-from-signal-android-very-soon/47954/57

    But yes, it was really nice when I could use it as my SMS app. Then again, very few people in my country use SMS in the first place - it's all WhatsApp, and it was never able to have support for that. Luckily, most of my friends have adopted Signal by now.

  • Btw, the main thing to realise, is that Signal is trying to tread the delicate balance of being accessible and private. If you have the perfect private messenger but nobody uses it, that doesn't help democracy one bit. So starting out with an easier-to-implement mechanism that also helps adoption (because people can get notified when people they already have in their contact list join), that still protects against indiscriminate mass surveillance, makes sense to me, even if it means your contacts can still know who you are.

  • They've repeatedly stated that they're working on removing the need to share your phone number with your contacts, but that's taking some time, because they want to implement it in a way that does not involve storing your entire social graph on their servers.

    You'll still have to sign up with your phone number, but the only thing that can be traced back is that your phone number is registered on Signal - and only by subpoenaing Signal, I believe.

  • It's linked to your account. If you view YouTube without logging in, you should have no issues. You can use the Multi-Account Containers extension to log in selectively per tab, if you need to.

  • That would be nice, but most likely that would also mean that getting every service to make changes at around the same time pretty much impossible - which would be essential when e.g. the protocol needs to be updated to deal with new threats.

    But who knows; I believe the Digital Markets Act intended to achieve something like this?

  • Sorry you're right, I meant end-to-end encryption of course. (Gmail, Office 365, and most HTTPS websites are only encrypted in-transit though, not on the server side.)

    Which is, of course, the kind of encryption that matters for this proposal. (And which I believe you don't have the option of using in group chats on Telegram, but don't quote me on that.) Non-end-to-end encrypted messages can already be obtained by law enforcement by coercing the service provider.