He / They

  • 8 Posts
  • 716 Comments
Joined 2 years ago
cake
Cake day: June 16th, 2023

help-circle
  • It will make it extremely risky from a liability standpoint to operate any platform that allows user content.

    The EFF has a bunch of writeups on these types of laws. This is the last of a 4-part series on them: Link

    Fediverse operators would for example be extremely vulnerable to lawsuits, because almost none of them can afford teams of lawyers to deal with claims, true or not, that they failed to enforce content policies.

    Depending on how the laws are written, anyone who could find a piece of objectionable content (which will vary by jurisdiction) could sue the platforms. This makes it very appealing as a route to shut down platforms you dislike, especially if they’re niche.

    It consolidates power under large corporations like Meta and Xitter, who can afford to handle legal threats.




  • Forking Firefox means it isn’t Firefox - yes, this means that the original was OSS, but you really need to be an expert to get at all the OSS code running on your machine. I mean that it is literally not Firefox, since your fork doesn’t have permission to use the trademarked name.

    This is only relevant if you are planning to redistribute it after you make changes. You can make any and all changes you want to FF on your machine to remove telemetry, and you do not have to remove the branding.

    If we think of the enabling functionality in Firefox as a virtual lock, breaking that lock is illegal under the DMCA. That seems very weird for code that is ostensibly open source.

    Extending this argument would mean that it’s potentially illegal under DMCA to remove any protection mechanism that it would be ‘hacking’ to bypass during usage (e.g. SSL, authentication, etc) from any OSS project. Thats not the case, because an OSS license gives you explicit permission to modify the application.


  • I am 100% on board with the author until they question it being open source, immediately after noting that users can take the source code and remove the telemetry function from it. They try to reconcile that contradiction by seemingly saying that since Firefox has the telemetry, a non-telemetry Firefox wouldn’t be Firefox, and that somehow makes FF not open-source?

    Is Firefox really open source if we have to submit to data collection to access features distributed under an open source license?

    Yes, ordinary end users can create a patch set to enable these features without needing to submit data to Mozilla - but that would clearly no longer be Firefox.

    Plenty of OSS licenses have rules baked into them about how you can use the code, or lay out obligations for redistribution. That does not negate their OSS-ness.

    “Is it really open source if I have to edit the source code I was given to remove a feature I don’t like?”

    I mean, yeah? What a program does is completely orthogonal to the rights granted by its source code license, which determines whether something is open-source.

    I am also not sure why they seem to think that this move either is meant to or is likely to push away technical users in favor of some supposed group of non-technical users who will go into the settings to manually enable a beta testing feature (Labs).

    Yes, (as the author notes) the purpose of a system is what it does, but the author isn’t presenting any evidence of what it’s doing vis a vis their claim of making technical users quit FF.

    Mozilla has plenty of issues, but I just don’t see “forces you to agree to telemetry if you want to participate in beta testing” as some canary in the coalmine of enshitiffication.



  • At this point, you’re better of self-hosting, or even co-lo hosting. Cloud environments are good when you need to scale faster than servers can be shipped (or plan to scale down before the costs add up), but $5k a month is literally a new, decently-beefy server every 2-3 months.

    In terms of solving the money issue, I feel like the only solution is a shared-cost/ shared-ownership model, where you get an initial pool of money together for the initial build-out, and then monthly costs are divided equally among all members. You can’t rely on donations, you need collectivism.


  • If they’re operating in the US, it doesn’t matter whether the app is intentionally pulling unnecessary information, there are still server logs showing the IP of each request being made for the real-time updates (ISPs also will have logs of the connections, even if they can’t see the SSL traffic directly). That IP + timestamp would let the government know (with the help of your ISP, who we know from the NSA leaks are all sharing info without asking for warrants) exactly who you are.

    If you are routing all your traffic through a VPN, you can make that much harder to correlate, but unless you validate on the wire or in the code that the app isn’t sending e.g. a device ID or any other kind of unique identifier, it could still end up compromising you. A webpage just intrinsically doesn’t carry the same level of risk as a local app.

    That’s why, as the article notes, many of these have been shutting down preemptively; they know they could be putting their users at risk.


  • I’m torn on this for any app-operating companies/orgs based in the US.

    The real-time maps mean at best they’re able to see at least the IPs of users, and at worst, a ton of device or personal information (depending on what perms are granted to the apps). This would be a treasure-trove of info for ICE. A lot of women stopped using period-tracker apps for a reason after Roe was overturned.

    Also, unless people are side-loading the apps, Google or Apple will also know exactly who downloaded them, since you can’t download through their app stores anonymously.

    There are websites with real-time information that don’t force you to install an app to view, and visiting a website rather than using an app makes it much easier to minimize the information you’re leaking.

    I’m glad that some of these apps are shutting down preemptively if they are certain they don’t possess the resources, or are located in a safe enough place, to ensure their users’ privacy. Ideally they would partner with a legal entity outside the US to operate the app instead, but obviously that’s a big burden.



  • Yes, but by definition all of them are also playing the game, and given that this is mostly a novelty feature (and also based on how shockingly little use the user-facing chatbots I’ve seen in professional settings are utilized), I personally doubt that the chatbot energy usage will top the game’s.

    My guess is there will be 90% of people who use the feature once or twice before ignoring it forever, 9% who will use it occasionally for e.g. video creation purposes, and 1% or less who will actually sit there and use it a bunch just to talk to. That would about match up with ChatGPT’s general usage trends.







  • I’m a huge open world and/or sandbox nut. Non-linearity is my jam. Kenshi, Rimworld, AssOdyssey/Shadows, Project Zomboid, Witcher 3, X4…

    Don’t get me wrong, I love a good story, but story takes many shapes, and not all stories are pre-written; plenty are emergent. I grew up playing with Legos (and still do), and me making whatever story I wanted (or that emerged along the way) was part of the appeal.

    Honestly, apart from FF8 and TW3, and now Expedition 33, I haven’t found many games with written stories that grabbed me. I read books when I want that fulfillingly-crafted linearity.




  • Chinese hacking competitions (plural) are different

    A 2018 rule mandates participants of the Tianfu Cup (singular) to hand over their findings to the government

    This approach effectively turned hacking competitions (plural)

    So the article uses one competition doing this to assert this as “Chinese hacking competitions”. There are tens if not hundreds of hackathons in China.

    Please stop posting these heavily biased or misleading articles about China from questionable sites.

    We get it, you don’t like China. We got that after the first 50 posts about China being bad. Most of us don’t like the CCP either.

    But at least post reputable sources that don’t push agendas quite so blatantly.

    For anyone interested, this site (firstpost.com) is an english-language Indian news site owned by Network18, a news conglomerate with a right-leaning, pro-Modi bias.