Skip Navigation

Zak

@ Zak @lemmy.world

Posts
7
Comments
878
Joined
3 yr. ago

  • Google's plan to restrict sideloading on Android has a potential escape hatch for users

    Jump

  • It might be a reasonable trade for users to make if Google assumed liability. In fact, that would be an interesting way to implement laws to discourage practices like these.

  • Google's plan to restrict sideloading on Android has a potential escape hatch for users

    Jump

  • I'm inclined to think that's not the job of an OS vendor to prevent. Sure, put a warning label on it, but it's the user's device; once they say they know what they're doing, that should be that.

  • Google's plan to restrict sideloading on Android has a potential escape hatch for users

    Jump

  • If Google wanted to add developer verification without being evil, it could use SSL certificates connected to domain names. I think the whole concept is ill-conceived, though I'll admit to a modest bias against protecting people from themselves.

  • Nepal bans social media(Facebook, X, Reddit, Mastodon, Discord, Signal, YouTube and more) for failing to register with the government; Only 7 to be open(Viber, TikTok, Telegram and more)

    Jump

  • Is there even a desktop client for Signal?

    Yes. There's also an experimental third-party client for desktop Linux called Flare. I've used Flare on some devices that the official client doesn't support and found it adequate. With some more maturity, I'll probably prefer it to the official client. Signal officially discourages third-party clients because it cannot guarantee their security but does not attempt to block them except in cases where specific clients are known to be compromised.

    Account creation on the mobile app is recommended before using these as it relies on SMS verification. I don't like that, but it probably cuts down on spam; I've received exactly one spam on Signal in over 10 years of use.

    The mobile app isn’t on F-droid so I can’t easily install it... Does Signal require Google Play Services to get Firebase messages?

    Signal encourages installing from Google Play and uses Firebase messages by default, but does work without them. Given your set of preferences, however, you would probably prefer the third-party client Molly, which is on F-Droid and supports UnifiedPush.

    I want a zillion separate self-hosted non-federated servers... something like email addresses in it, that tell the client what server to connect to for a given person.

    That sounds like it ends up with properties similar to federation, but the client has to do all the work. The client would also need some means of identifying itself to all those random servers where there's a cost to creating new identities, or people would need to do key exchange when they exchange contact information. Without that, this proposed system would be overrun by spam as soon as it got popular.

    Server-side federation solves a lot of problems. Why wouldn't you want that?

    every computer in the world has Wikipedia on its hard drive for completely private access

    You can do that. The download with images is over 100gb compressed, and it expands to several terabytes. It's not hard to imagine why most people don't want to use it that way.

  • Nepal bans social media(Facebook, X, Reddit, Mastodon, Discord, Signal, YouTube and more) for failing to register with the government; Only 7 to be open(Viber, TikTok, Telegram and more)

    Jump

  • So why didn’t [Signal make it easy to connect to alternate servers]?

    Encouraging the use of alternate servers on which only a handful of people can communicate instead of everyone who uses Signal is probably a net loss. Having to connect to multiple servers or switch servers to communicate with everyone a user wants to talk to sounds like a pretty bad experience. That would be different if it was federated. Co-founder Moxie Marlinspike has argued that federation would make it harder to achieve Signal's goals of bringing private communication to as many people as possible. I want him to be wrong about that, but my experiences with Matrix suggest he might not be.

    they are in the eyeball monetization business or are gearing up to enter it

    I don't think so, in large part because they're structured as a nonprofit and have enough funding to last a while. I would think that about a venture-backed startup under similar circumstances.

    I don’t use Signal so I don’t understand what is supposed to be great about it

    It's just another messaging app in terms of UX. The value comes from:

    • Many of my friends and family use it
    • It's familiar enough and reliable enough that if I ask someone who doesn't already use it to move a conversation to Signal, I'm confident they won't be mad at me for complicating their life
    • It's secure by default and difficult for users to accidentally make private information not-private (e.g. by saving media to device storage where other apps can access it without user confirmation)
    • Its security and privacy have been inspected by a wider range of experts than most other options
    • The organizational structure and funding model means it's unlikely to be enshittified in the next decade

    Nextcloud Talk doesn't have end to end encryption. It's experimental on Jitsi. It's hard to justify not having that for a private messaging service in 2025.

    You just get a server URL and click on it in a browser. No app, unlike Signal as far as I know, so if anything it’s simpler.

    This is not a good way to make my phone beep promptly when someone sends me an important message or ring when someone initiates a voice/video call. Browser notifications can be significantly delayed, especially on mobile devices. It's fine for the sort of public group conversations people have on Matrix and IRC, but a dealbreaker for most people in a primary one-to-one telecommunications system.

  • Nepal bans social media(Facebook, X, Reddit, Mastodon, Discord, Signal, YouTube and more) for failing to register with the government; Only 7 to be open(Viber, TikTok, Telegram and more)

    Jump

  • The analogy between a private messaging service and a bar is not just strained; it's nonsensical.

    It might work for a chat system that's mainly public and discoverable like Matrix, IRC, or Discord. A community having too many people, or any people who don't follow certain norms can make it unpleasant. As long as it keeps out spammers, Signal having people I don't want to talk to on it won't affect me at all; I just won't give those people my phone number or username.

  • Nepal bans social media(Facebook, X, Reddit, Mastodon, Discord, Signal, YouTube and more) for failing to register with the government; Only 7 to be open(Viber, TikTok, Telegram and more)

    Jump

  • I’m bothered mostly by the default Signal app’s inability to use a self-hosted server instead of signal.com’s own server.

    I don't like the centralized nature of it either, but until someone makes a decentralized option that's polished and reliable enough that nobody will be mad at me after I talk them into using it, Signal will be my go-to for messaging.

    Ideologically, I'd like it to be Matrix. I use Matrix on occasion, at least when Element web isn't taking up 10% of my laptop's RAM, ElementX isn't crashing on load, and whatever native desktop client I tried last is actually performing key exchange so I can read my private messages. I would not try to talk someone into trying Matrix right now unless they were ideologically motivated or interested in the technology.

  • Nepal bans social media(Facebook, X, Reddit, Mastodon, Discord, Signal, YouTube and more) for failing to register with the government; Only 7 to be open(Viber, TikTok, Telegram and more)

    Jump

  • I'm not sure adding a questionable social feature to a messaging app is reasonably comparable to the very long list of insane and/or evil shit Musk has done.

    Like any messaging system, Signal's utility is proportional to its userbase. If stories get more people to use it without making it worse for people who don't care, then they're a good idea even if I think everything else about the concept is bad.

  • Nepal bans social media(Facebook, X, Reddit, Mastodon, Discord, Signal, YouTube and more) for failing to register with the government; Only 7 to be open(Viber, TikTok, Telegram and more)

    Jump

  • I think it's a silly feature for a messaging app, but it has no impact on me if I ignore the feature.

  • Your home is about to be incinerated, but you've been given enough time to evacuate everyone and fill a single container you have already with belongings to bring. What are you loading up, and what it

    Jump

  • If someone is burning your house down, it seems very likely you would have an immediate use for guns.

  • Americans who live near state borders,how do you notice you've crossed the border?

    Jump

  • California still maintains agricultural inspection stations. Based on the FAQ, I think the legal workaround they're using is that they can deny entry to a vehicle until it is inspected even though they cannot, strictly speaking deny entry to people.

  • Let Google know what you think about their proposed restrictions on sideloading Android apps. - Android developer verification requirements [Feedback Form]

    Jump

  • No doubt many "legitimate" apps, including some of Google's own are spyware. This claims to be about the sort of malware that steals your bank account login.

    I'd even speculate that most of the people involved are working in good faith; they think they're the good guys and they can be trusted with that kind of power. Nobody should have that kind of power though because it always leads to corruption.

  • Let Google know what you think about their proposed restrictions on sideloading Android apps. - Android developer verification requirements [Feedback Form]

    Jump

  • Public pushback on stuff like this does work on occasion. It even worked on Apple when they proposed upload filters for CSAM.

    Google's intent in the short term probably is just about malware, but in the long term it gives them, and governments which can pressure them the ability to ban any app from nearly all Android devices. Once deployed, there's a near 100% chance of such a mechanism being used for evil.

  • ICE Arrests US Army Veteran, Husband of Former Congressional Candidate During Citizenship Interview

    Jump

  • There should be a time limit on this sort of thing. There's a time limit on bringing most criminal charges. There's even a time limit on property ownership disputes.

  • NSFW

    [deleted]

    Jump

  • Scale is always a problem with questions like this. If these are percentiles of the general population, then I'm easily 10 and even trying to dig deep enough into Linux to break a Steam Deck puts you near the upper end of the scale.

    If on the other hand, 0 is an otherwise intelligent adult who refuses to have anything to do with anything having a screen and 10 is Lovelace, Turing, von Neumann, etc... then I might be a 7 or 8.

  • Study: Social media probably can’t be fixed

    Jump

  • I don't mean replying, but selecting from a menu of possible reasons to downrank a post. Slashdot's moderation system that I mentioned earlier has (or had - haven't looked there in a while) "troll" as one of the categories.

  • Study: Social media probably can’t be fixed

    Jump

  • After 20 years of living with it, I've decided I don't like the downvote. The upvote is fine.

    Reddit's founders, early on tried to encourage people to treat the downvote as moderation. It was meant to mean that a thing doesn't belong on reddit and people shouldn't see it. Of course that quickly became mere dislike or disagreement.

    I'd prefer an approach that requires some input about what's wrong with a post in order to reduce its prominence; a restricted list of options as in Slashdot's moderation would be sufficient, I think. I'm not sure whether this should necessarily require also making a report to a more powerful admin/moderator, but I lean toward making that optional in most communities.

  • Study: Social media probably can’t be fixed

    Jump

  • The study is based on having LLMs decide to amplify one of the top ten posts on their timeline or share a news headline. LLMs aren't people, and the authors have not convinced me that they will behave like people in this context.

    The behavioral options are restricted to posting news headlines, reposting news headlines, or being passive. There's no option to create original content, and no interventions centered on discouraging reposting. Facebook has experimented with limits to reposting and found such limits discouraged the spread of divisive content and misinformation.

    I mostly use social media to share pictures of birds. This contributes to some of the problems the source article discusses. It causes fragmentation; people who don't like bird photos won't follow me. It leads to disparity of influence; I think I have more followers than the average Mastodon account. I sometimes even amplify conflict.

  • Schools are using AI to spy on students and some are getting arrested for misinterpreted jokes and private conversations

    Jump

  • This is an ass-covering response to school shootings, because some of the shooters have expressed their intent before.

    A strip search obviously isn't necessary even if it's a credible threat; a metal detector wand and basic pat down is more than enough to ensure someone doesn't have a gun. This wasn't a credible threat though, and a chat with the school counselor would have been the right way to handle this.