• 2 Posts
  • 86 Comments
Joined 2 years ago
cake
Cake day: June 11th, 2023

help-circle


  • every cafe that only distributes its menu solely via Instagram will not be visited by me

    There’s a good chance I’d walk out over that too. I’ve never encountered it in the USA or Germany, but the author made it sound common in Australia.

    you can write an SMS or call me

    The author specifically mentioned people telling her “Oh I don’t text, do you have Insta or WhatsApp?” This is also true in Europe; WhatsApp is essentially universal, and some people have to pay per SMS sent. Some people also have another messaging app (Signal is reasonably common among my social group), but that won’t cover everyone, and group chats with more than three or four participants just aren’t going to happen.

    If you are not willing to do that much, you do not really understand what meta is doing.

    The average person does not really understand what Meta is doing. I do, and I think the author does, but neither of us is in a position to change the behavior of a majority of people in our regions.


  • The author goes into detail about the problems she experienced as a result of not having access to Meta products. She seems to recognize that it’s bad that there’s no way to read a cafe menu without an Instagram account or that the only messaging services some of her contacts use belong to Meta.

    These are not problems the author can fix. She would be negatively impacted in the real world by not having access to Meta products.







  • It’s on a VPS. Whether that’s really self-hosted may depend on how much of a purist you are, but it’s fully self-managed, not SAAS.

    It’s recommended to have a PTR record mapping your IP address to your domain, which you wouldn’t be able to do with a residential connection from a typical ISP. I do send mail from multiple domains though and I haven’t had issues with deliverability. What I do not send is any kind of high-volume mail, which would likely attract a different kind of scrutiny.



  • Sort of. This is apparently done on-protocol so anyone can issue verifications, but they’re only shown in the official client if they’re from BlueSky or someone approved by BlueSky.

    A better way to do this would be to let users subscribe to verifiers the way they can labelers. Better still would be for the label to indicate what the verifier has verified about the account, like “nytimes.com says this person is an employee of the New York Times”, which is something labelers can already do.

    So I really think they should have just leaned into labelers.





  • Terms like “safe” and “private” are not binary.

    Are the contents of your Signal conversations on an iPhone private with regard to mass surveillance conducted by governments and ISPs? Probably. Apple uses security and privacy as marketing points, and there are a whole lot of people looking for vulnerabilities in its products who are incentivized to disclose them (possibly with a delay for patches). Signal itself takes steps to prevent data leaks to less secure parts of the OS and other apps.

    Would your conversations remain private in the face of a targeted attack against your device by a nation state willing to spend a significant amount of time and money when you’re using Signal on an iPhone that’s presumably used for purposes other than secure conversations with a small set of people you know? Almost certainly not.




  • TOR is designed to resist surveillance and censorship by ISPs or national governments. Communications are encrypted in transit, and there’s no way for a node to tell whether it’s talking to another relay node or the end user.

    It’s fairly easy for a website to detect that a user is accessing it via TOR; there are lists of exit nodes like this one which a firewall or intrusion detection system can update programmatically. Many websites block or limit access via TOR using such lists, making it unsuitable for use cases such as the one I’m discussing.