• 19 Posts
  • 29 Comments
Joined 1 year ago
cake
Cake day: June 13th, 2023

help-circle




  • Smart fridges are one thing but there are many innocent folk relying on internet services to do normal and important things involving sensitive data - talk to family and friends, access healthcare, attend work, do their banking, school and childcare enrolments, even insurance. Should these things be replaced by rooms full of filing cabinets? Maybe, I dunno, that’s a big call. Short of substantial collapse that renders the internet unavailable, these sort of things will continue to be online and ordinary people deserve all the security they can get. If you’re working in cybersecurity to help people like this, then that is totally ethical in my view.

    If you’re lucky maybe you can land a role with some direct permacomputing aspects - reduce hardware requirements, simplification of systems, maintaining old hardware to maximise lifespan. But just avoiding roles where you or your organisation is encouraging people to view more ads or buy more stuff would be a good start.




  • Honestly I’m glad they highlighted the telemetry. I went through the local report about what’s included and while it’s not an upsetting level of detail, it’s more comprehensive than I would have opted in to if asked.

    Still, as sibling points out it’s in a completely different league from slurping up your IMAP creds, something which has always been local-only data. This is the second time I know of recently where MS has trampled on this kind of local-only expectation - the other was Edge defaulting to sending the contents of textboxes you’re filling out on webpages to the MS cloud for spelling and grammar checks. Thunderbird is still a sound recommendation, and unlike Microsoft, I trust that if I uncheck the telemetry box they’re not going to try to get me some other way.







  • You’re putting yourself in a tough position by asking for both E2EE and the ability to use from a browser. You have to trust the web app each time you open the page, and hope that they haven’t altered the deal to simply grab your data after it’s been decrypted by your password. I have no idea how likely it is that Standard Notes would do that but I’d reconsider the browser requirement specifically if E2EE is non-negotiable for you - an offline open source client program would be a much stronger position.

    For my money, I use local text files and SyncThing but it’s probably not spiffy enough for many people/purposes.



  • Agreed. Why overcomplicate things? I can understand the desire not to pick favourites in a rapidly-evolving space which was clearly the approach of /r/rust mods early on, but enough time has now passed that the project could save everyone some headaches by just picking one Lemmy community that they’re confident will be held to the Rust community standards. Nobody’s expecting a permanent decision with young software. We can change the way we operate again in a year or two if we have to.


  • IME something like Signal is an easy sell since it’s simple and works well. For all the fair criticism about relying on phone numbers it makes the onboarding easy. For other things compartmentalising helps, e.g., “okay we’ll collaborate using this cloud file storage but I personally will be accessing it through the browser while keeping most of my files in a SyncThing over here”. While I self-host certain things I don’t volunteer to do that for family/friends because it will be too frustrating for everyone if/when I let them down.

    In this kind of situation there’s a fine line between someone who maximises their privacy through tech decisions and someone who makes their “correct” tech choices their self identity. If you drift into the latter, being asked to compromise can feel like an attack, leading to overreacting and coming across as insecure and annoying. Not to psychoanalyse anyone in particular but sometimes I think people need a reminder.