• 0 Posts
  • 218 Comments
Joined 1 year ago
cake
Cake day: December 29th, 2023

help-circle




  • Pup Biru@aussie.zonetoMemes@lemmy.mlSchrödinger’s China
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    5
    ·
    edit-2
    11 days ago

    imminent collapse is a fairly common theme among anything we’ve learned to engineer fairly well… if a bridge isn’t in imminent danger of collapse under its theoretical maximum loading, it used too much material and was thus over-built which means fewer bridges for people

    if an economy isn’t in imminent danger of collapse then it’s resources aren’t being used efficiently and that means fewer luxuries - and bridges - for people


  • it requires a very large investment to run a node, but the fact that it’s possible means it’s open by necessity, which means we can bridge to mastodon etc

    this means that it will be a lot easier for people to migrate, since they don’t have to give up their entire social network

    imo it’s a good jumping off point: people clearly have problems with the mastodon “on ramp” and are having no issues with bsky, so imo it’s a step in the right direction and we can’t let perfect be the enemy of better





  • which endpoint are you referring to?

    there are passwords exchanged when using the vault management API, but AFAIK that’s for local access (eg CLI talking to the app)

    i’m no expert on the specifics of the API; just in the description they give: https://bitwarden.com/help/what-encryption-is-used/

    Bitwarden always encrypts and/or hashes your data on your local device before anything is sent to cloud servers for storage. Bitwarden servers are only used for storing encrypted data.

    PBKDF2 SHA-256 is used to derive the encryption key from your master password

    this is exactly the way this should be done. any deviation from this formula by a password manager with a server component should be viewed with extreme scepticism


  • When you login to the Vaultwarden web application it’s going to exchange your passphrase for a private key.

    bitwarden is end to end encrypted: your decryption keys never leave your device, and the server certainly never sees them

    you must always be able to trust your network

    this would be a horrible password manager. this is also not how bitwarden works

    you do still need to trust your server if you use the web interface, because any web interface can serve malicious components to exfiltrate whatever they like but native apps, assuming they’re verified appropriately, could communicate over HTTP and still not allow anyone actively monitoring your network to see any data that would be particularly useful



  • I’m sure Fedora is full of binary blobs and not-so-free software

    fedora is staunchly opposed to non-free software in their default distro … that spat a few weeks ago with OBS was related to that AFAIK

    unsure about like signed blobs for “security” services but i imagine they’d be very limited, and optional

    rather than sticking a white label on Fedora and call it something else

    but for what benefit? no matter what’s trying to be achieved, starting with a very full-featured, robust OS that’s widely used is going to serve you very well… not just technically (less work for the same outcome), but for human reasons

    there are loads of guides out there for how to fix fedora issues, few for guix… loads of RPMs that are compatible with fedora, and i can only imagine fewer packages for guix

    and then if you’re talking about server OSes - and actually workstations too - managing them with tools like ansible etc… fedora is going to have off the shelf solutions

    just Fedora with different theme

    well, the actual software and configuration i’d argue aren’t the important part - owning the infrastructure is the important part… package mirrors, distribution methods (eg a website), being able to veto or replace certain packages, and the branding (or regulation) that draws people to it… being able to roll out a security patch to every installation without a 3rd party okaying it, for example


  • i’d say if it happens it should start with focusing on:

    • government and workstation (this is important first to have control and independence over so that government isn’t beholden to the whims of foreign companies)
    • then server (maybe - idk really if that’s worth it though; it’s a whole can of compatibility worms and adoption expense)
    • then user desktop

    though there is the argument that workstation and user desktop are close enough to each other that user desktop should be above server, but i’d imagine it’d be more of a “home user” than gamer situation. i could imagine some regulations around refurbishing old tech with this kind of OS too, and this would be more about low spec machines (that’d help workstations too)


  • alternative POV: it’s entirely FOSS so there’s little control that can be exerted from its use. it’s also entirely free, so use is extracting value without providing anything in return. by its use, you’re taking resources to maintain, host, etc and providing nothing in return

    similar reason to why i don’t use ecosia with an ad blocker: by blocking ads you’re using their resources without giving back and thus you’re taking resources away from the charity





  • Corporate bullshit and stock markets and whatnot are magnified in impact and scale in Capitalist systems

    and authoritarian tendencies are magnified in impact and scale in socialist systems because they are by definition centralised - that’s not to say it’s inevitable, just that anyone living under these systems needs to be hyper aware of those issues and respond accordingly

    nothing is perfect

    As for “trying to keep things small,” that’s been tried. Trust busting was attempted, protectionism has been attempted, but regardless of will, material processes continue.

    i think the closest we have to that is the EU with things like the DMA which is making a dent… with strong regulatory authority that’s resistant to capture, it’s not impossible to regulate these things… the same is true of socialism: you need strong regulatory authorities that are resistant to capture to stop people from abusing the system for the own personal interests

    As for Socialism being a necessity, it’s true. It will have various forms, but eventually as production gains in complexity it necessitates public ownership and planning to continue to be efficient.

    i think perhaps we should define what we actually mean - i think socialism is necessary in some part to tackle the issues we face (healthcare, housing, something akin to UBI, etc)

    but i think no single system is going to be the silver bullet to all our problems: it’s going to take a long and sustained effort over many generations to figure out the right mix of all the systems we have, and it’s absolutely not going to happen in a big bang