Skip Navigation

Pup Biru

@ pupbiru @aussie.zone

帖子
0
评论
1381
加入于
2 yr. ago

  • France will replace Microsoft Teams, Google Meet, Zoom, Webex and others with its own sovereign video conferencing application "Visio" for public officials

    跳过

  • that’s correct. they want modern business video conferencing, which is a very different prospect than 1:1 messaging, or even personal group messaging. i’d argue that there are more of these available than there are business conferencing!

    please don’t lump signal in with whatsapp 🤮 that kinda talk makes people think they’re largely the same (especially with the bullshit muddy water of whatsapp using signals encryption), and we have enough trouble trying to convince people to use secure alternatives already… between the open client, reproducible builds, and local key integrity they are truly not even remotely in the same league

  • France will replace Microsoft Teams, Google Meet, Zoom, Webex and others with its own sovereign video conferencing application "Visio" for public officials

    跳过

  • these are different problems now though… sure you can make calls to existing VOIP endpoints and PSTN devices, but that’s not what they’re trying to implement: they’re trying to implement group video conferencing, which WebRTC was built for

  • What would be the best way to host a SimpleX smp and xftp server?

    跳过

  • i’ve already linked the docs that state that native windows containers exist. whether or not specific images exist is not relevant

  • What would be the best way to host a SimpleX smp and xftp server?

    跳过

  • WSL, Hyper-V and Windows Containers are all options

    they have to be built specifically for windows (of course the kernels are different, so the binaries are going to be different) but you can run Windows native applications on Windows kernel with a different implementation of containers using the standard Docker CLI and interfaces

    Cgroups are just 1 (by far the most common) implementation of the container backend

  • France will replace Microsoft Teams, Google Meet, Zoom, Webex and others with its own sovereign video conferencing application "Visio" for public officials

    跳过

  • to use SIP, in a web browser, you need to use wrapper of some kind (probably WebRTC-based)… you can not directly use SIP in a web browser. given that web browsers are likely a hard requirement, it makes no sense to use 2 separate standards

    SIP is the wrong choice for this project, and any greenfield project wishing to integrate web browsers with no hard requirement to support SIP devices

  • What happens to the human body in 49C heat? Australians are finding out

    跳过

  • thankfully our southern states aren’t particularly humid: equator to our north, antarctic to our south

  • European propaganda DESTROYED

    跳过

  • also 50C is roughly as hot as it gets on earth, and 0 is when things freeze (icy roads, snow, many things change) so even “round human temperature range” is a bullshit argument… 0C is much more useful for human temperature than 0F

  • France will replace Microsoft Teams, Google Meet, Zoom, Webex and others with its own sovereign video conferencing application "Visio" for public officials

    跳过

  • yes but you need a server in the middle which is just a huge waste of resources when you could just use webrtc with basically no down side

  • Lawsuit Alleges That WhatsApp Has No End-to-End Encryption

    跳过

  • it is not. meta controls the keys. that’s how they’re accessing the messages

    the article says they can access any message, from any user, from any time period, even deleted, instantly

    to make this a client-side exploit would mean that messages would need to be constantly sent in the clear (not targeted per user) for years now… and someone would have noticed that

    we know meta holds the encryption keys: that’s a known fact… it’s much much easier for them to simply decrypt everything they store

  • Lawsuit Alleges That WhatsApp Has No End-to-End Encryption

    跳过

  • simpler than that in most likelihood… meta is the key holder so login and password recovery is simpler (or at least that’s the excuse they give): you login, they send you your key, which they can also access (and decrypt your messages) whenever they like

  • Lawsuit Alleges That WhatsApp Has No End-to-End Encryption

    跳过

  • this isn’t a client-side exploit. this is the fact that meta controls the encryption keys. the mention “widget”, but that’s not a widget on your device; they say it’s a widget on their workstation - whatever that means. i’m thinking it’s something akin to raising a ticket which triggers a workflow to remote install an app on a work device (a process common at large enterprises)

    worker need only send a 'task' (i.e., request via Meta's internal system) to a Meta engineer … the worker's workstation will then have a new window or widget available that can pull up any WhatsApp user's messages based on the user's User ID number … Once the Meta worker has this access, they can read users' messages by opening the widget; no separate decryption step is required

  • Lawsuit Alleges That WhatsApp Has No End-to-End Encryption

    跳过

  • that’s incorrect. with whatsapp, your keys are stored on meta servers (the same as things like imessage). they can simply decrypt them whenever they like, just like being signed in as you. it’s completely invisible to your client

  • Lawsuit Alleges That WhatsApp Has No End-to-End Encryption

    跳过

  • it’s not even that: they just hold the keys so can simply decrypt your messages with out your clients intervention any time they like

  • Amsterdam prepares to ‘ban the fatbikes’ amid rise in serious accidents [The Netherlands]

    跳过

  • people probably said the same about seat belts once upon a time

    helmets should be mandatory, just like seat belts

    (and they are in australia)

  • France will replace Microsoft Teams, Google Meet, Zoom, Webex and others with its own sovereign video conferencing application "Visio" for public officials

    跳过

  • SIP uses different signalling protocols amongst other things than WebRTC, and i imagine browser support is a hard requirement

  • Microsoft Gave FBI Keys to Unlock Encrypted Data, Exposing Major Privacy Flaw

    跳过

  • plain text is probably the wrong phrasing, but apple does control all your keys

    no matter who it is, the key holder can always read your data

  • Microsoft Gave FBI Keys to Unlock Encrypted Data, Exposing Major Privacy Flaw

    跳过

  • sentiment yes but there are FOSS tools to store things in google/microsoft/apple drives or the various object stores (s3, backblaze, etc) that work just like the various drives, but with end to end encryption where you control the keys

    in general just don’t let anyone else control your encryption keys… where you store things is almost beside the point

    bonus: encryption means they can’t dedupe/compress so you get to waste their money

  • Telly has only delivered 35,000 of its free televisions with always-on ads

    跳过

  • there’s likely very little experimentation needed… ripping the panel out and attaching an HDMI controller from aliexpress to it would likely be extremely straight forward

    apple is one of the most proprietary companies in existence and you can do this easily with ipad screens and generic controllers… the same goes for most panels: there’s really not that much difference in the actual “expensive” part, and afaik very little you can do to protect it from this kind of thing

  • Gov. Newsom denied entry in USA House due to pressure from White House

    跳过

  • what do trade controls and taxation have to do with global economics…? is that what you’re asking?