• 5 Posts
  • 305 Comments
Joined 8 months ago
cake
Cake day: November 3rd, 2023

help-circle

  • Having read the actual description of the protocol, such as it is, I should add in the interest of fairness that those "30 generated porn credits” do get you 30 new key pairs each month. They are issued directly by the central authority which knows exactly who they’re issuing them to, and the public key is presented directly to web sites you visit. But they promise not to track how you use them.

    That it’s so absurd and poorly designed is reassuring in a way. It’s difficult to imagine anyone using this.



  • If I’m not mistaken you were talking about how things work “on my phone” but I suppose you had in mind that the principle would apply to desktop as well.

    In practice it does somewhat come down to how well containerized and locked-down the environment is, so I think the difference does matter. Android for instance sucks in very many ways, but it’s somewhat reliable in usually keeping apps from interfering with each other. There are a few desktops that try to do that, but they’re still not too popular I think. Desktop users are used to having full control of everything. Seems to me the pervasive compartmentalization of everything (it wouldn’t be sufficient for the purposes we’re talking about to put only Signal in a secure container) is accepted as necessary on mobile devices mostly because so many of the apps are terrible.





  • Huh. I would’ve thought most desktop users just leave it running all day long like I do. Obviously there is the disk encryption passphrase at boot, adding another one for signal would in my case be redundant.

    But the point is not only how easy it is to enter a passphrase, but also how much security that actually gains you. I don’t think it does much on the typical desktop, be it windows or linux, where there are so many ways to escalate or persist privilege for anyone that has user-level access.




  • Is that normal now? The ones pictured in the article and all of those I’ve personally seen are more closely spaced. But guess they’ve been getting bigger over time and it would be on-brand for Hydro Québec to go for extra large ones with a few kilometers between them.

    … just looking at numbers from around the web it seems like even the largest turbines around don’t normally require that much area. 5000km² seems like roughly an order of magnitude more space than might be expected. I imagine it’s probably the total area of the region they’ll be built somewhere inside of.




  • Spain is officially hoping that their system will serve as a model for the rest of Europe, and then the rest of the world, so that everyone can work together to enforce the rules. Otherwise their citizens might just evade it by, for example, going to web sites that are not in Spain.

    That is why they give it such a grand name as “digital wallet.” It’s meant to become the basis for that European digital id you refer to, and used for much more than is happening with this initial trial balloon.


  • This ensures traceability through the public key as content providers will consistently receive the same public key when the credential is presented

    What a ridiculous system. For some reason I expected that their efforts to offer an illusion of privacy would be better than the obfuscatory bullshit they’ve leaned on here in order to enable “traceability.”

    I hope it goes down so badly in Spain that the rest of Europe is once and for all convinced that such schemes to restrict and monitor the web browsing habits of every citizen are ineffective for their stated purpose, needlessly invasive of privacy and freedom, destructive of democracy, and can serve only as a prelude to totalitarianism.


  • Site is down right now but I imagine it is yet another contribution in the genre of leaping to the worst possible conclusions about matrix from very shaky ground. I don’t know what motivates that sort of thing, but there sure seems to be a lot of it around.