Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)ON
Posts
74
Comments
2,981
Joined
2 yr. ago

  • I'm not sure if you're intentionally missing the point or not. We're not talking about encrypted group chats. We're talking about encrypted Facebook. The amount and type of data involved is very different, so is how long the data will be retained.

    But sure, if you want to ignore unsharing things, go ahead. Let's see how that'll work out for you 🤷

    Anti Commercial-AI license

  • This does make sense, and I do not understand a lot of the technical details, or how this problem would be solved. I just wish it was haha

    :D same. I think the solutions could be applied elsewhere too. They'd be very interesting.

    Can’t say I understand what happens technically when someone is kicked from a matrix room, so what what happen with the encryption keys I dunno.

    That depends on the client. Some clients will exit, some will stay in the room. Encrypted matrix rooms use "perfect forward secrecy", meaning new people can't read the past, and old people removed from the group/chain/chat cannot read new messages. So, being kicked from a room would still allow you to see all the chat history you stored. Or if you sign in with a device that didn't get the "kick" message yet, the server could still send you all the messages up until the point of the kick message.

    I'm not sure how Matrix implements it and server + client implementations can differ.

    Anti Commercial-AI license

  • Sharing != downloading forever. When you browse it, yes, technically it's in your cache, but that's why it's called a cache. Most people won't install a client that puts their browsing into long-term storage (unless Microsoft takes a screenshot for them and promises never to upload it somewhere). Regardless, it is still a security issue (as I just described with releasing the encryption key). You can choose to ignore it, until someone comes along and exploits it. Then you have a bunch of angry people screaming at you because you "didn't close an obvious security hole".

    Anti Commercial-AI license

  • I remember thinking about this long time ago and even asking some hackers about it to get blank stares back. Basically, there are multiple problems around data access.

    Take the simple scenario of a unfriending. Let's say you have 12 friends, but Susie turned out to be a real bitch and you unfriended her. You don't want Susie to have access to your photos, messages, and basically anything anymore! That means the encryption key has to change -->

    Where is all the data hosted and who is going to reencrypt all the entire history from the point Susie became your friend until you unfriended her? The most secure would be that you have all your data and that you re-encrypt it. Great, you are data-frugal and have maybe 10MB you have to re-encrypt. But Karl, your photography pal paid for gigabytes of storage and now has to rencrypt a good chunk of that if he unfriends somebody.
    \ You could of course say "fuck it, the asshole friend probably made a copy and re-encrypting is pointless", but then your ex-friend can just share the private key with the world and TADA, everybody has access to the files you shared with said friend.

    And that's just one problem I can think of right now. When you take more time to think about it, you'll run into more and more stuff.

    I'm not saying it's impossible, but it definitely isn't easy. Add to that that many people don't care and it's less likely. The closest I get to that is Signal.

    Anti Commercial-AI license

  • I'm not saying "immediately". He can take his time and make a decision or wait to see if they'll pester him further or if it'll even go to court.

    For me, I'd just not bother with being in the unknown and just change the name to something unique, so that next time someone comes along, I can tell them fuck off because I did my research.

    Anti Commercial-AI license

  • IANAL

    While unfortunate, it seems like a legit case. Especially given how similar the apps are. One character off is quite confusing for a potential customer 🤷

    I'd just rename the app and move on. Pick a different name that doesn't come straight out of the English dictionary and is unique.

    Anti Commercial-AI license

  • Defining run is definitely the quick way to do it 👍 I'd love to have a proc macro that takes a bash like syntax e.g someCommand | readsStdin | processesStdIn > someFile and builds the necessary rust to use. xonsh does it using a superset of python, but I never really got into it.

    Anti Commercial-AI license

  • I'd use clap, yeah. And env vars std::env::var("MY_VAR")? You can of course start writing your own macro crate. I wouldn't be surprised if someone already did write a proc macro crate that introduces its own syntax to make calling subprocesses easier. The shell is.. your oyster 😜

    Anti Commercial-AI license

  • I honestly don't get why people like Go. Structural typing makes it so difficult to find classes that interpret an interface. Every dumb go project has to be opened in an IDE or something with a language server to find implementors of an interface. Also, forcing every capitalised object in a module or struct to be exported is just... wat? Returning a tuple of whatever, err also feels wrong. It's like they couldn't decide between throwing exceptions or an enum and went with something in between.

    I get that the inbuilt concurrency features are nice, but the rest of the language and stdlib feel very lackluster. At least that's my impression after ~2 weeks of it. My retreat to Rust was rather quick.

    Anti Commercial-AI license

  • I hope the installer will be so easy that even non-gamers with little to no technical knowledge will be able to download it, double-click, and follow the wizard then end up with SteamOS installed. That would be the dream.

    Anti Commercial-AI license