gravitywell

joined 1 year ago
[โ€“] gravitywell 3 points 8 months ago* (last edited 8 months ago) (2 children)

Isn't that literally what the GPL3 exists to prevent? So called "tivoization"?

You know what would really make stallman smile is if you licensed it under something that requires sharing the source and all modifications.

Also solves the cost problem since you no longer have to support the infrastructure for all users just a small subset. I already host searxng and it's not great but I host it because I support projects that encourage self hosting and we need more free and open source search options

Also how is your product getting used by another company "going to waste" all your work? Maybe you mean take advantage of without paying? But if that's the case and money is such a big deal how is advertising off the table? Unless you're trying to compete with kagi, but you're facing a huge uphill struggle if you plan to monitize and not be open source/self hostable..

If on the other hand you change your mind about it, I'll be one of many self hosting fans who will happily deploy and contribute to improve the project in any way possible. (Currently self hosting searxng here)

That said, even if it's not fully open, really looking forward to seeing the project grow, it sounds like you have your hearts in the right place and we sure do need something better.

[โ€“] gravitywell 25 points 8 months ago (3 children)

According to the researchers, "A charger can be manipulated to control voice assistants via inaudible voice commands, damage devices being charged through overcharging or overheating, and bypass Qi-standard specified foreign-object-detection mechanism to damage valuable items exposed to intense magnetic fields."

So if someone swaps your Qi charger for a malicious one they can ruin your phone (or some other device it's supposed to detect as not a phone ?) and maybe execute arbitrary voice commands... ๐Ÿฅฑ

[โ€“] gravitywell 92 points 8 months ago (3 children)

DMCA applies to all ISPs in the US, Google will forward notices just like any other isp. In theory they could ban you per terms of service, in practice they probably won't bother.

A VPN is $5 a month, and you'll never have to worry about even getting the notices, but I'm sure you already knew that.

[โ€“] gravitywell 4 points 8 months ago (2 children)

Depends on the timing but Pokedex is clearly itself derivative of rolodex so im not sure that would actually work in Nintendo's favor

[โ€“] gravitywell 36 points 8 months ago (5 children)

PDA was probably the most common during the 90s and I think until iPhones and android, black berry phones were considered PDAs.

A lot of stuff in the 80s/90s used the suffix "dex" (after rolodex) so I could also picture something like "mobidex" or "pocket dex". Or there was netbooks so we might just call them netdex...

[โ€“] gravitywell 1 points 8 months ago

That's actually a really good point I hadn't thought of. I still think other data would be more useful, but your example is the first one I'm hearing that maybe could have work if they had no other data to work with

[โ€“] gravitywell 1 points 8 months ago

For automatic stuff I use synching to keep my home an documents in sync.

I don't normally use samba remotely but I have a wire guard VPN that I connect to if I'm not at home and that gives me access to samba or any other "local" services I might need when away

[โ€“] gravitywell 2 points 8 months ago (2 children)

I use samba for normal usage and rsync for backups.

[โ€“] gravitywell 3 points 9 months ago

They can't get a phone number from someone if only a username was shared with that person. maybe the people who lectured you about it not also being for anonymity where not aware of plans to ad usernames or that a projects aims and use cases can change over time but signal can and has already been useful to a good number of journalists, not requiring a phone number to share your contact with someone is what id consider a major game changer in terms of what use cases are now open and threat models that can be accounted for.

[โ€“] gravitywell 2 points 9 months ago

Well yeah can't protect against stupidity I suppose

[โ€“] gravitywell 4 points 9 months ago

If we're talking about these agencies subpoenaing in order to get the data, that kinda sounds like privacy protections are in place for it. I think whats really happening here is that push data is now one of a hundred or so other things (like emails, google/app maps data, web search history), that's now being included when agencies make requests for a users data... they arent specifically going after push notifications any more then they're going after how many steps your fitbit is counting, they just want all the information they can get, and by voluntarily giving it to these companies we put ourselves at risk, its a very distopian trade off.

[โ€“] gravitywell 1 points 9 months ago* (last edited 9 months ago) (2 children)

So assuming the app isnt E2EE then there would be many ways to read message contents, for example if the subpoena your email provider, or SMS provider. Google play store and apple store again also already have all the details of what apps you use, how often you update them or when you removed them.... There is just no benefit to using push for this kind of data gathering, there is always one or more much better ways of obtaining any of this data... wanna know when a woman left the state to go to health clinic? Cell towers. Husband suspected of murdering wife and you want to know what dating apps he used? Google play store has logs of every dating app they joined, and all those dating apps will gladly hand over chat logs and other data to proper authorites when asked nicely... And its not like the pushnotifications themselves are just open air unencrypted broadcasts anyone can monitor, Law enforcment at the very least has to submit the requests to google and apple anyway, so why would they care about push notifications when they can get access to a suspects entire cloud storage and emails?

I'll bet whats really happening here isnt even that cops are "super interested" in push data, but rather they realized that its one of many forms of data that they include when make a request. I'd bet tey also grab any kind of "fitness" related data , and things like your advertising preferences too, because why not? Investegators don't usually go around asking for just the bare minimum they need to incriminate someone or prove an allegation, they just fill out the data request form and check "all of the above".

Go look at how many different options google takeout has, and imagine they probably have a few bonus ones just for law encforcment, Push notifications is just a drop in the bucket in terms of the data that we're all giving away freely by depending on the duopoly of google/apple for all our mobile communications.

view more: โ€น prev next โ€บ