Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)T

theherk

@ theherk @lemmy.world

Posts
8
Comments
927
Joined
3 yr. ago

  • Deleted

    Permanently Deleted

    Jump

  • Depends on what you consider a fight and how long you’re together. In the first few months? Definitely normal not to fight. After 20 years, you’ll have had a few brawls. It’s how you know resolve them that makes or breaks you.

  • What do you think is the worst human invention?

    Jump

  • Property ownership

  • GOP senator says she went from ‘I don’t care’ to ‘I see what the big deal is’ after reviewing unredacted Epstein files

    Jump

  • Well, not the Goranthian Underwater Book Club Crusades. They were pretty mild though. That timeline was still better.

  • 'What a great way to kill your community': Discord users are furious about its new age verification checks — and are now hunting for alternatives

    Jump

  • Maybe I came off as dismissive or just stupid, but I really did mean to be helpful. Of course you don’t want users experience bad interactions. I meant if those interactions were for an actual intended reason. So yeah, never mind.

    Bummer you’ve had a hard time. I think they and the free software community are trying to put together a good solution.

  • 'What a great way to kill your community': Discord users are furious about its new age verification checks — and are now hunting for alternatives

    Jump

  • What server are you using and with which client most recently? It sounds like your device is unverified so untrusted or the key isn’t present.

    To expand, “unable to decrypt” would affect a lot of users. That’s a good thing and exactly what you want it to do when not correctly trusted.

  • 'What a great way to kill your community': Discord users are furious about its new age verification checks — and are now hunting for alternatives

    Jump

  • I use it all the time. There are many mature clients, and matrix is a protocol, so I don’t know what you mean. Since the sliding sync implementations, I have found it really nice to use.

  • What are some of the best films that do not yet have a sequel or remake

    Jump

  • Was superb too.

  • Best apps for private messaging

    Jump

  • Yes, subpoena was poorly worded. NSL is more likely. But still it is a time-forward threat, which means there is value while the server is or was accepting sealed sender.

    And I wasn’t suggesting timing attack is required to defeat sealed sender. I was, on the contrary, pointing out that was a threat even with sealed sender. Though that is non-trivial, especially with CGNAT.

    So in summary. You’re right. Sealed sender is not a great solution. But it is a mitigation for the period where those messages are being accepted. A better solution is probably out there. I hope somebody implements it. In the meantime, for somebody who needs that level of metadata privacy, Signal isn’t the solution; maybe cwtch or briar.

  • Best apps for private messaging

    Jump

  • Sure. If a state serves a subpoena to gather logs for metadata analysis, sealed sender will prevent associating senders to receivers, making this task very difficult.

    On the other hand, what it doesn’t address is if the host itself is compromised where sealed sender can be disabled allowing such analysis (not posthoc though). This is also probably sensitive to strong actors with sufficient resources via a timing attack.

    But still, as long as the server is accepting sealed sender messages the mitigation is useful.

  • Best apps for private messaging

    Jump

  • Don’t mistake me for saying you’re wrong. I agree with you, mostly. But sealed sender isn’t theater, in my view. It is a best effort attempt to mitigate one potential threat. I think everybody would like that solved but actually solving it isn’t easy as I understand it. Maybe not intractable, but if you have a solution, you can implement it. That is one of the things I like about free software.

    In any case, I’m only saying Signal is good for a subset of privacy concerns. Certainly not that it is the best solution in all cases.

  • Best apps for private messaging

    Jump

  • It isn’t a meme. It is a fact of modern cryptography in many settings. For example TLS, which is a huge bulk of the traffic, guarantees again privacy not anonymity. I’m not saying one shouldn’t care about metadata privacy. Every communication one engages in requires risk benefit analysis. If your threat modeling shows that for a given message, anonymity is required, then signal, and nearly every single other protocol out there is insufficient.

    That doesn’t mean TLS or lib signal, or any other cryptographic tool is not useful, especially in conjunction with other tools.

    There are many cases where I want my messages to be private and the cost of entry for the message receiver to be low. Signal is great for that. But I’m not saying no other tools should be considered, just that signal is good at what it does.

  • Best apps for private messaging

    Jump

  • You’re the one making insults and I'm smug? Care to actually dispute anything said with reason?

  • Best apps for private messaging

    Jump

  • Cool strawmen; I didn’t say any of that. Signal protocol is awesome for privacy, not anonymity. Maybe I don’t have half a brain, but I happen to think the double ratchet implementation is an impressive piece of tech. Maybe I’m as dumb as your fever dream, but compromised exits doesn’t make tor any less of an achievement. Though i2p is also superb. I guess my brain is too weak to understand why those statements are mutually exclusive.

  • Best apps for private messaging

    Jump

  • It isn’t. But I see this same post over and over. Really feels like there is a campaign against signal. Also tor developed by US Naval Research, so I guess it’s bad too.

  • What additional concepts should I learn before starting to learn rust?

    Jump

  • Learning C first is great, just because C is a great language. But learning to avoid shooting yourself in the foot is not a good reason. You could do that with rust, where you can also shoot yourself in the foot, or assembly where it’s even easier.

    The list you put together is great and Core Dumped is an awesome resource.

    Number one suggestion from me as always and as many others… write something. If there is anything about which you have domain specific knowledge, write something related to that, so you can focus on growing your expertise in programming, not in another primary field at the same time.

  • NSFW Removed

    Can I use logos from Perchance commercially?

    Jump

  • How is this nsfw?

  • Removed

    We need more Luigi's to save us from these monsters.

    Jump

  • I ran out of hope any of this was missing context long ago. This is some twisted shit.

  • Alarm bells sound over Trump’s ‘take over the voting’ call

    Jump

  • Mitchell. This is not gonna be good.

  • What Happened To WebAssembly

    Jump

  • The sandboxes are different. The embeddable Java plugin sandbox was a bit different and susceptible to confused deputy and other attacks. So yeah, I guess you can say it is iterative but they’re kind of worlds apart. You can run thousands of wasm modules in a single process and have them all be completely isolated. Its performance and security gains, portability, and usability are all superb.

    I guess I can’t really defend it well, but I think it is interesting and important.

  • Ask Lemmy @lemmy.world
    theherk @lemmy.world

    Happy Thanksgiving! What are you thankful for?

  • News @lemmy.world
    theherk @lemmy.world

    Jane Goodall, Eminent Primatologist Who Chronicled the Lives of Chimps, Dies at 91

    www.nytimes.com /2025/10/01/obituaries/jane-goodall-dead.html
  • Programmer Humor @lemmy.ml
    theherk @lemmy.world

    Available Domain - Seems right up Lemmy's alley

  • Videos @lemmy.world
    theherk @lemmy.world

    Framing Logic - The Insane Influencer Logic That Tricked Millions of People

  • Neovim @programming.dev
    theherk @lemmy.world

    NeovideProject - A macOS application that manages Neovide instances per Git repository, providing a seamless project-based editing experience.

    github.com /theherk/NeovideProject
  • Technology @lemmy.world
    theherk @lemmy.world

    Zen Browser - A very nice, Firefox-based, clean UI browser

    zen-browser.app
  • Programming @programming.dev
    theherk @lemmy.world

    OpenTofu is going GA | OpenTofu

    opentofu.org /blog/opentofu-is-going-ga/
  • Technology @lemmy.world
    theherk @lemmy.world

    Dear YouTube; About that Chapter Skipping Feature