• 119 Posts
  • 734 Comments
Joined 9 months ago
cake
Cake day: February 10th, 2024

help-circle




  • I think dropping loadable module support would severely limit what users can do when a driver misbehaves or doesn’t handle a particular device as well as an (in-tree) alternative.

    Also, I wonder how they expect to achieve being “The KDE operating system” or “doesn’t break” when their existing distro has been more than a little rocky so far. Who do they think will do the long-term work of raising and maintaining the quality bar?

    It would be kool to have a solid reference distro where Plasma could shine, especially for organisations and newer users who don’t know how to replace GNOME on existing distros. But this proposal gives me the impression that they underestimate the effort required, so I am skeptical.






  • The security provided by a browser is constantly changing, as the vulnerabilities, attacks, and countermeasures are constantly changing. It’s a cat-and-mouse game that never ends.

    The privacy provided by a browser would be difficult to measure, since it depends a lot on browsing habits, extensions, code changes between versions, etc.

    There’s no good way to calculate a metric for either type of protection, and even if there was, the metrics would be obsolete very quickly. For these reasons, I wouldn’t have tried what you attempted here.

    However, there is a very simple way to compare the major browsers on privacy and reach a pretty accurate conclusion: Compare the developers’ incentives.




  • What are your future plans when it comes to smartphones?

    Same as my current plans: I pick a smartphone that runs a privacy-friendly OS, and only use privacy-friendly apps.

    Right now, that’s a de-googled Android phone running LineageOS, with F-Droid as the only app store. In future, it might be something else, like a non-Android Linux phone. My current model is 6+ years old, still gets OS updates, and still works great, so I imagine the open-source options will have improved by the time I need to replace it.

    I care about things like data exfiltration, battery life, cost, and hardware longevity (important for minimising e-waste). I don’t care about AI unless it happens to impact one of those things, but since there’s nothing inherent to AI that does, the issue of whether a phone has AI capabilities is irrelevant.

    By not using these AI features, you pay a lot for features you won’t be using.

    Only if you’re an early adopter. Like all new tech, further research and production volume will make it relatively cheap.



  • Unfortunately, I don’t think D is good enough to prove your point. From your follow-up comment:

    A language that for all intents and purposes is irrelevant despite being exactly what everyone wanted,

    As someone who uses D, I can attest that it is not what everyone wanted; at least not yet. Despite all the great things in the language, the ergonomics around actually using it are mediocre at best: Several of its appealing features quickly turn it into a noisy language, error messages are often so obtuse as to be useless (especially with templates and contracts in play), and Phobos (the standard library) is practically made of paper cuts. Also, the only notable async support is a fragile mess, and garbage collection is too deeply embedded into both the stdlib and the ecosystem.

    (To be fair, D could be vastly improved with better defaults and standard library. That might happen in time, as Walter and the other maintainers have shown interest, but it’s just wishful thinking for now.)

    Also, D is an entirely different language from C++, and as such, would require code rewrites in order to bring safety to existing projects. It’s not really comparable to a C++ extension.



  • Given how long and widely C++ has been a dominant language, I don’t think anyone can reasonably expect to get rid of all the unsafe code, regardless of approach. There is a lot of it.

    However, changing the proposition from “get good at Rust and rewrite these projects from scratch” to “adopt some incremental changes using the existing tooling and skills you already have” would lower the barrier to entry considerably. I think this more practical approach would be likely to reach far more projects.




  • There is no privacy-focused PayPal alternative in the US, in part because US money transfer laws and policies (e.g. Know Your Customer) directly oppose privacy.

    However, there are a couple of new projects that might eventually lead to something less bad for privacy than PayPal is:

    • GNU Taler, if they ever get any exchanges, and they either figure out how to mitigate the high fees for wire transfers or use some other settlement method when people on different exchanges make small payments. (Their plan to use batch wire transfers won’t help until the exchanges get a lot of adoption and frequent use. Of course, high fees discourage adoption and use, so this might not ever happen.)
    • FedNow, if banks ever use it to offer appealing person-to-person payment services instead of just using it for themselves and their business customers.


  • I no longer consider any email app to be okay for privacy if I can’t build it from source code. There are just too many opportunities and incentives for someone to exploit it. That could be the developer, or the maintainer of some obscure code library, or a company that buys one of them out, or an attacker who found a vulnerability. We no longer live in a world where it’s reasonable to think we’ll get privacy from communications software that we can’t inspect.

    Thankfully, we also no longer live in a world without options. There are more than a few email apps with nothing to hide. :)