He / They

  • 3 Posts
  • 443 Comments
Joined 2 years ago
cake
Cake day: June 16th, 2023

help-circle

  • Forking Firefox means it isn’t Firefox - yes, this means that the original was OSS, but you really need to be an expert to get at all the OSS code running on your machine. I mean that it is literally not Firefox, since your fork doesn’t have permission to use the trademarked name.

    This is only relevant if you are planning to redistribute it after you make changes. You can make any and all changes you want to FF on your machine to remove telemetry, and you do not have to remove the branding.

    If we think of the enabling functionality in Firefox as a virtual lock, breaking that lock is illegal under the DMCA. That seems very weird for code that is ostensibly open source.

    Extending this argument would mean that it’s potentially illegal under DMCA to remove any protection mechanism that it would be ‘hacking’ to bypass during usage (e.g. SSL, authentication, etc) from any OSS project. Thats not the case, because an OSS license gives you explicit permission to modify the application.


  • I am 100% on board with the author until they question it being open source, immediately after noting that users can take the source code and remove the telemetry function from it. They try to reconcile that contradiction by seemingly saying that since Firefox has the telemetry, a non-telemetry Firefox wouldn’t be Firefox, and that somehow makes FF not open-source?

    Is Firefox really open source if we have to submit to data collection to access features distributed under an open source license?

    Yes, ordinary end users can create a patch set to enable these features without needing to submit data to Mozilla - but that would clearly no longer be Firefox.

    Plenty of OSS licenses have rules baked into them about how you can use the code, or lay out obligations for redistribution. That does not negate their OSS-ness.

    “Is it really open source if I have to edit the source code I was given to remove a feature I don’t like?”

    I mean, yeah? What a program does is completely orthogonal to the rights granted by its source code license, which determines whether something is open-source.

    I am also not sure why they seem to think that this move either is meant to or is likely to push away technical users in favor of some supposed group of non-technical users who will go into the settings to manually enable a beta testing feature (Labs).

    Yes, (as the author notes) the purpose of a system is what it does, but the author isn’t presenting any evidence of what it’s doing vis a vis their claim of making technical users quit FF.

    Mozilla has plenty of issues, but I just don’t see “forces you to agree to telemetry if you want to participate in beta testing” as some canary in the coalmine of enshitiffication.



  • At this point, you’re better of self-hosting, or even co-lo hosting. Cloud environments are good when you need to scale faster than servers can be shipped (or plan to scale down before the costs add up), but $5k a month is literally a new, decently-beefy server every 2-3 months.

    In terms of solving the money issue, I feel like the only solution is a shared-cost/ shared-ownership model, where you get an initial pool of money together for the initial build-out, and then monthly costs are divided equally among all members. You can’t rely on donations, you need collectivism.


  • If they’re operating in the US, it doesn’t matter whether the app is intentionally pulling unnecessary information, there are still server logs showing the IP of each request being made for the real-time updates (ISPs also will have logs of the connections, even if they can’t see the SSL traffic directly). That IP + timestamp would let the government know (with the help of your ISP, who we know from the NSA leaks are all sharing info without asking for warrants) exactly who you are.

    If you are routing all your traffic through a VPN, you can make that much harder to correlate, but unless you validate on the wire or in the code that the app isn’t sending e.g. a device ID or any other kind of unique identifier, it could still end up compromising you. A webpage just intrinsically doesn’t carry the same level of risk as a local app.

    That’s why, as the article notes, many of these have been shutting down preemptively; they know they could be putting their users at risk.


  • I’m torn on this for any app-operating companies/orgs based in the US.

    The real-time maps mean at best they’re able to see at least the IPs of users, and at worst, a ton of device or personal information (depending on what perms are granted to the apps). This would be a treasure-trove of info for ICE. A lot of women stopped using period-tracker apps for a reason after Roe was overturned.

    Also, unless people are side-loading the apps, Google or Apple will also know exactly who downloaded them, since you can’t download through their app stores anonymously.

    There are websites with real-time information that don’t force you to install an app to view, and visiting a website rather than using an app makes it much easier to minimize the information you’re leaking.

    I’m glad that some of these apps are shutting down preemptively if they are certain they don’t possess the resources, or are located in a safe enough place, to ensure their users’ privacy. Ideally they would partner with a legal entity outside the US to operate the app instead, but obviously that’s a big burden.





  • Chinese hacking competitions (plural) are different

    A 2018 rule mandates participants of the Tianfu Cup (singular) to hand over their findings to the government

    This approach effectively turned hacking competitions (plural)

    So the article uses one competition doing this to assert this as “Chinese hacking competitions”. There are tens if not hundreds of hackathons in China.

    Please stop posting these heavily biased or misleading articles about China from questionable sites.

    We get it, you don’t like China. We got that after the first 50 posts about China being bad. Most of us don’t like the CCP either.

    But at least post reputable sources that don’t push agendas quite so blatantly.

    For anyone interested, this site (firstpost.com) is an english-language Indian news site owned by Network18, a news conglomerate with a right-leaning, pro-Modi bias.



  • The Overton window is anchored by a series of landmarks. The most effective way to lose one of them, like the Constitution, is to start discussing whether it has merit.

    In any kind of public, widespread platform/ venue, I agree with you 100%. Discussing whether the US is a moral entity at its root is not something you do on CNN or even Facebook, because it is going to be weaponized by the Right to paint you as anti-US to the politically-disengaged Center, and also to justify their unconstitutional actions as being less harmful via whataboutism.

    I don’t think Beehaw- a small, intentionally Leftist space- is equivalent. No one here is going to say, “hmm, maybe Trump ignoring the constitution is the same as people discussing whether a document that first enshrined slavery and then sustained it in a carceral system, is capable of reformation. Makes sense.” Nor is anyone outside this space reading or broadcasting it. And there does have to be space for free political discussion somewhere, or you’ve just abdicated free speech out of fear of politicization.

    You wait until the constitutional order is re-established and actors that routinely violate it are punished, and when the Overton window moves back … it’s not really to the left, it’s more towards democracy itself, then you discuss the flaws of the Constitution.

    This presupposes that the form of democracy it will move “back” towards will be the same as where it was before all this. There is no reason to think that will be the case, and certainly major political events of the past in the US (Civil War, Civil Rights movement, WW2, 9/11, etc) have often included large constitutional shifts either through amendment or interpretation. This is certainly a major political event.

    We could go on a tangent about whether political capital is real, and whether (if it is) we are capable of returning to where we were before even if we wanted, but suffice it to say that many people would likely disagree with the premise that we can ever perfectly revert to pre-2024 Election America. A lot of people (even in the Center) believed that our checks and balances under the Constitution would prevent a dictator. Now that we’re seeing otherwise, I highly doubt most Democrat voters will ever again fully trust the Constitution to protect them, without serious amendment.

    So discussing what those amendments might be, how that reform could work, or whether those protections are even possible to regain via the Constitution without e.g. giving congress or the judiciary enforcement abilities (or via some other means entirely), seems like a pretty important discussion for people to be having.


  • the repetitive tasks that turn any job into a grind are prime candidates

    The problem is, this varies from person to person. My team divvies (or did, I quit not too long ago) up tasks based on what different people enjoy doing more, and no executive would have any clue which repeating tasks are repetitive (in a derogatory way), and which ones are just us doing our job. I like doing network traffic analysis. My coworker likes container hardening. Both of those could be automated, but that would remove something we enjoy from each of our respective jobs.

    A big move in recent AI company rhetoric is that AI will “do analyses”, and people will “make decisions”, but how on earth are you going to keep up the technical understanding needed to make a decision, without doing the analyses?

    An AI saying, “I think this is malicious, what do you want to do?” isn’t a real decision if the person answering can’t verify or repudiate the analysis.




  • Its not an empty panic if you actually have real reasons why its harmful.

    Every panic has ‘reasons’ why something is harmful. Whether they are valid reasons, proportional reasons, or reasons that matter, is up for interpretation.

    First you’d need laws in place that determine how the social media algorithms should work, then we can talk.

    Yes, then we can talk about banning systems that remain harmful despite corporate influence being removed. You’re still just arguing (by analogy) to ban kids from places where smoking adverts are until we fix the adverts.

    companies ARE making it harmful, so it IS harmful

    No, companies didn’t make social media harmful, they made specific aspects of social media harmful. You need to actually approach this with nuance and precision if you want to fix the root cause.

    That, and there are various other reasons why its harmful

    Every reason that’s been cited in studies for social media being harmful to kids (algorithmic steering towards harmful content, influencer impact on self-image in kids, etc) is a result of companies seeking profits by targeting kids. There are other harms as well, such as astroturfing campaigns, but those are non-unique to social media, and can’t be protected against by banning it.

    Let me ask you upfront, do you believe that children ideally should not have access to the internet apart from school purposes (even if you would not mandate a ban)?


  • This is the newest ‘think of the children’ panic.

    Yes, social media is harmful because companies are making it harmful. It’s not social media that’s the root cause, and wherever kids go next those companies will follow and pollute unless stopped. Social Isolation is not “safety”, it’s damaging as well, and social media is one of the last, freely-accessible social spaces kids have.

    We didn’t solve smoking adverts for kids by banning kids from going places where the adverts were, we banned the adverts and penalized the companies doing them.







OSZAR »