Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)UW
Posts
41
Comments
748
Joined
2 yr. ago

  • The way I see it is that we don't know the content of Apache 3.0, nor have a vote to chose what license they adapt in the end. Does Apache have a good track record? Yes, but it is getting diffcult to put trust in sonething today. It's still a rug under, or fail safe as you name it, which is used by corprates today. I would rather have a framework/procedure in place preventing it from happening from the get go.

    ADDITION: I haven't read Apache's CLA yet so it might or might not contains copyright grant clause.

  • I just found out some softwares around infrastructures also uses CLA, including:

    • Kubernetes (hosted by CNCF)
    • Istio (hosted by CNCF)
    • Grafana
    • All projects under Apache Software Foundation (e.g. HTTP server)
    • OpenStack (hosted by OpenInfra)

    To my surprise, even Golang core uses CLA too.

    EDIT: Add more to the list

    EDIT 2: Envoy Proxy also hosted by CNCF uses DCO instead of CLA. Interesting.


    It looks like very difficult to bulid an infra without some components uses CLA.

  • When normal people look at the title with "chips", they are most likely think of "computer chips". However, that's what not the article is about.

    The use of the term is correct, and indeed chips are used in more places that most people doesn't think of. Still, it is misleading as it doesn't consider what most people think what "chip" is, bleeding edge or not.

  • The title is misleading.

    First, it is about old gen chips. Maybe 45nm+.

    Second, the definition of IC/chip is quite broad. It can be very (relatively) simple one like a 555 timer IC to extra complicated MCU IC.

  • This is something I'm unsure of. While I agree that there should be less obstacles to third party app stores, and sideloading, I'm not sure about taking warnings away is a wise choice. Especially when people are comfort and used to no warnings when using Google Play and other equivalents. Most just doesn't do basic digital hygine. A better route is to bring down Google Play from its system app status and become a normal one, and warnings for everyone.

  • Instead of fiddling with the limitation on Android set by Google, I think a custom crypto DAC/ADC would be far eaiser, though you need both hard and software knowledge to accomplish this. It also came with the added benefit of not processing cryptographic operations on a black box.

    Still, I don't know what goal you want to achieve and threat model is. If you are just curious if this possible, the answer will be ye with tons of hops amd hacks. If you really want security, I will advise you go another route.

  • Does that require my friends install & configure Tailscale/WG/OpenVPN? I tried that route like 2~3 yrs ago with OpenVPN and it doesn't works well.

    I would like to keep it as simple and easy as it can be. Aka no need extra software and config. Just fireup the game, connect, and play, as if the server is hosted on some VPS.

  • I don't know what "privacy" you know but I can you a reference of what cybersecurity I know. I had a Cybersecurity course and it's more focused on compliances to standards like ISO 27001/PCI-DSS, regulations like CCPA/GDPR, risk assessment/management, BC/DR, and more. Cybersecurity have a broader meaning to me and essentially a safety net to make sure plans are in place and not let the business down from normal operation.