Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)IR
Posts
0
Comments
213
Joined
6 mo. ago

  • If the Apple security decision in the UK is anything to go by as well as the Trump administration in the US pushing hard for government backdoors in cloud storage and messaging apps, which has been asked for for a long time but didn't have much chance of getting past court oversight in the US until the Supreme Court was so corrupted, then likely this is going to be a way that governments can enforce the idea of having encrypted data transmissions to keep data out of the hands of foreign hackers, but still have corporate backdoors that allow governments to access the unencrypted data. That's exactly what the UK said the Apple thing was supposed to help with. Of course data is only as secure as the weakest link and corporations are often much easier targets than individual users anyway. So it has the same result, but it appeases the majority who don't get it.

  • This is what I use.

    And this is the latest sync server that doesn't rely on discontinued versions of Python: https://github.com/mozilla-services/syncstorage-rs/. It's not a full, plug and play solution, and it doesn't support PostgreSql so I haven't set it up in my self hosted environment yet, but plan to eventually.

  • Yes IronFox is a fork of Mull, and though it does have a couple of differences in opinion on the balance of privacy and usability, it's very similar. I've been using it since shortly after we lost Mull.

  • Problem is most of us are under personal attack, so we don't have the ability or energy to fight for others. And since the personal attacks are of a potentially violent or otherwise life threatening nature rather than simply a political one, it means many of us can't afford to stand up.

  • I really would love something like Amie Street before Amazon bought it to kill it. I got so much great music on there for pennies which then led me to buy more and more from those artists. My problem is I need to hear a song a few times before it digs into my soul. And preferably not when I'm paying too close attention to the technical aspects so it can hit me more emotionally. So just having a 10-30 second preview or just hearing it one time is never going to be enough to hook me on an artist. Also, cheaper b-sides since it was demand based meant I was much more likely to hear more of their music and get more invested in the artist.

  • Is the app designed to prevent screenshots, and if so, is there an option to disable it? I've noticed a lot of apps that implement that in nonstandard ways don't work with Bitwarden or often with other accessibility tools.

  • Yeah, I just meant people are used to decades of using meaningful usernames. Having to use a cryptographic key has traditionally made it very difficult to get enough people to adopt to make it worth adopting yourself as a technologically savvy person. I never would have used Facebook in a million years if it wasn't for the fact that it was the only place I could get in touch with many people. Having to build your networks in-person is tedious for many people and sharing the codes securely through other means is cumbersome if you don't have an existing method for sharing.

    Just like HTTPS needs several layers to make it work and still relies on an untrustworthy and corruptible thing like DNS to verify the destination and it's keys are the thing you're expecting to connect to. There's no secure way to share the route to your device electronically in a user-accountless system with no secure, trusted middleman translating names to addresses unless you do it in-person.

  • DNS over TLS handles that. No need for DoH really. Unless DNS ports are blocked or captured by NAT or something and you need to use port 443 with DoH. At least not with a DNS server.

    DoH is useful for individual applications to do their own DNS lookups bypassing the OS or network level DNS. Otherwise DoH and DoT provide the same basic protection. DoT is just at a lower network layer and thus more easily applies more broadly across the network or OS rather than being application or resolver specific. There's never been a real need for a DNS server to use DoH instead of DoT unless DoT is blocked upstream.

  • Use VPN or DDNS connected to your domain registrar. Of course DDNS might not update immediately, especially if your domain host is not the same as your DNS provider, so you might have outages for short periods when your IP changes. So, depends on if you're OK with that or what kind of connection you have and whether it changes your IP a lot.

    Also, might be able to get an IPv6 address for free depending on your ISP or at least you can set up your router to request that your address block is retained for you. I know Comcast does this. Unfortunately, my ISP does not.

  • Unbound supports DoH if compiled with the support and given TLS certificates. I don't use it internally on my home network because I have a pihole that I want to capture the traffic. I do use DNS over TLS for upstream communication, though.

  • I mean it's kind of like the "humans evolved from monkeys" or whatever primate you want to substitute for monkey. No, they branched off from a common ancestor though.

    I mean lots of people get mixed up between BSD, Linux, UNIX, and all the variations over the years. Is MacOS a version of Linux? No. Is a human a type of ape? No. Are MacOS and Linux way, way closer than either are to Windows, hell yes. Just like people are way closer to being monkeys than swallows. There's a lot of mixed breeding in both examples and a lot of total incompatibilities as well.

  • But it's a difficult concept for the average person to not have an account, but everything is device oriented. Same problem with people not using gpg for email. Having to maintain a thing similar to a private key that's not memorizable like a username and password and back that up in case your device is lost. Is a big hurdle for many. And then additionally having to share a qr code or link through some external means for someone to connect with you rather than just telling them to download an app and enter your username HSS always been difficult.

    So, IMHO, Signal has the best implementation possible with the level of usability that many nontechnical people expect in a chat application, even if it's not the most secure. I am interested to see how SimpleX solves these issues in the future, though.

  • I think it's similar to the idea of clicking on the unsubscribe links on spam email. It lets the spammer know it's a real, active address, so, often, it just ends up giving you more spam since they share that info. Only unsubscribe from things you actually subscribed to in the first place.