This is why we need Firefox.
And Firefox needs to be a market that can't be ignored.
This is why we need Firefox.
And Firefox needs to be a market that can't be ignored.
@TheYang Exactly! Came here to say this. Everybody actively using chromium based browsers is a part of the problem.
Stop with this excuse and stop Insulting people. I've been on Firefox for nearly 20 years, but Mozilla has ruined it for me little by little. The last straw has been the horrible UI redesign. So I switched to a Chromium browser. Tell Mozilla to make a better browser and to listen to their community, instead of blaming people for using what serves them best.
What does your UI gripe have to do with this biased tabloid piece you shared?
Firefox is fine and works even better than it ever has. If you cared about the UI so much you'd have tried any of its forks that use different and older designs.
Ugh. DRM. I freaking hate DRM. I "buy" a book from Amazon and it's all DRMed. I like the Kindle app so I keep buying there. But when I can I buy physical books at a LBS
Currently, attestation and "trusted computing" are already a thing, the main "sources of trust" are:
This is already going on, you need a Microsoft signed stub to boot anything other than Windows on a PC, you need Apple's blessing to boot anything on a Mac, your smartphone manufacturer decides whether you can unlock it and lose attestation, all of Microsoft, Apple and Google run app attestation through their app stores, several governments and companies run attestation software on their company hardware, and so on.
This is the next logical step, to add "web app" attestation, since the previous ones had barely any pushback, and even fanboys of walled gardens cheering them up.
PS: Somewhat ironically, Google's Play Store attestation is one of the weaker ones, just look at Apple's and the list of stuff they collect from the user's device to "attest" it for any app.
I started looking at Mac's for my next computer. Due to this amazing project. https://asahilinux.org/
you need a Microsoft signed stub to boot anything other than Windows on a PC
False. Every PC I've had has allowed Secure Boot to be turned off, and some of them allow me to add another trusted certificate as well.
you need Apple’s blessing to boot anything on a Mac
False. The Mac boot process is completely unlocked, at least on Intel Macs.
your smartphone manufacturer decides whether you can unlock it and lose attestation
My Pixel 6 allows me to unlock the boot loader at any time.
Attestation exists, unfortunately, but it's not nearly as pervasive as you seem to think.
This is the next logical step, to add “web app” attestation, since the previous ones had barely any pushback
Uh, there was huge pushback. That's why even a Microsoft Surface won't stop you from installing Linux.
My Pixel 6 allows me to unlock the boot loader at any time.
By doing that, you no longer pass SafetyNet, and some apps refuse to work without it. If unlocking your device removes features, then you aren't really allowed to do so.
The Mac boot process is completely unlocked, at least on Intel Macs.
On Modern Macs, the process is somewhat convoluted, but you are able to boot into a custom compiled boot loader / operating system while secure boot is enabled. It just needs a few minor hoops to sign the boot loader - steps that would be difficult to social engineer around but perfectly reasonable to do them intentionally if installing an alternate operating system is your thing.
iPhone is, of course, a different story. Hopefully that changes some day. The CPU and boot process is the same as a Mac, so there's no reason it couldn't be unlocked. Might require government intervention though.
It just needs a few minor hoops to sign the boot loader - steps that would be difficult to social engineer around but perfectly reasonable to do them intentionally if installing an alternate operating system is your thing.
Does that not create a barrier for entry for non-technical people looking to use an alternative operating system?
non-technical people looking to use an alternative operating system
Umm, you don't see the oxymoron there?
you need a Microsoft signed stub to boot anything other than Windows on a PC
Not necessarily, most motherboards and laptops (at least every single one I've ever owned) allow users to enroll their own Secure Boot keys and maintain an entirely non-Microsoft chain of trust. You can also disable secure boot entirely.
Major distros like Ubuntu and Fedora started shipping with Microsoft-signed boot shims as a matter of convenience, not necessity.
Secure Boot itself is not some nefarious mechanism, it is a component of the open UEFI standard. Where Microsoft comes in to play is the fact that most PC vendors are going to pre-enroll Microsoft keys because they are all shipping computers with Windows, and Microsoft wants Secure Boot enabled by default on machines shipping with with their operating system.
It's time for Alphabet to be broken up into separate letters.
Note of amusement: The GitHub issues tracker for that proposal got swamped with tickets either mocking this crap or denouncing it for what it is, this morning the person who seems to be the head of the project closed all those tickets and published this blog post, in essence saying "Shut up with your ethical considerations, give us a hand in putting up this electric fence around the web". Of course that didn't stop it.
Also somebody pointed out this gem in the proposal, quoted here:
6.2. Privacy considerations
Todo
Quick edit: This comment on one of the closed tickets points out the contact information of the Antitrust authorities of both US and EU, i think i'm gonna drop the EU folks a note
Edit: And they disabled commenting on the issues tracker
My favorite part is when they ask you to give them the benefit of the doubt, but also anyone who disagrees with them in a way that doesn't fit their expectations is "noise."
And if you have issues with the "use case" itself, you're shit out of luck, shut it, shithead!
If you raise legal issues with the 'use case' of their 'web platform' thing, ppl will just not respond to you!
Meaning: we don't care if the shot we plan might be illegal, and we won't be stopped by you fucks telling us if it is or not "
We developers should stop just looking at the technical side of our work only. There's social, economic and values to be taken into account when we put our minds to solve a problem. We tend to go blindly into it, without thinking what it can cause when it is released into the world.
It's like if we put a bunch of developers into a secret project to develop an Internet World Wide Nuclear Bomb a là Project Manhattan... the leaders shouldn't really have to hide what they were about to do, just throw the developers and engineers troubles to solve and they wouldn't mind what it will be used for. It's just tech, right?
At least this guy seems to fit the type: I want to do this technology I've been tasked for, I'm trying to solve a technological problem. The rest of the world is telling him «Man, this is a bad idea to implement.» and he whines saying «I want solutions to this technology, not what is wrong with it!»
(And if you aren't one of those developers, congratulations, we need more of you!)
[Don't assume consensus nor finished state]
Often a proposal is just that - someone trying to solve a problem by proposing technical means to address it. Having a proposal sent out to public forums doesn't necessarily imply that the sender's employer is determined on pushing that proposal as is.
It also doesn't mean that the proposal is "done" and the proposal authors won't appreciate constructive suggestions for improvement.
[Be the signal, not the noise]
In cases where controversial browser proposals (or lack of adoption for features folks want, which is a related, but different, subject), it's not uncommon to see issues with dozens or even hundreds of comments from presumably well-intentioned folks, trying to influence the team working on the feature to change their minds.
In the many years I've been working on the web platform, I've yet to see this work. Not even once.
.....?
What is this, "Good vibes only?"
Never seen it work? These faang people are totally delusional. Google keeps putting off their third party cookie retirement exactly because of outcries like this.
"Good vibes only" seems to be embedded in the culture of web development today. Influential devs' Twitter accounts have strong Instagram vibes: constantly promoting and congratulating each other, never sharing substantive criticisms. Hustle hustle.
People with deep, valid criticisms of popular frameworks like React seem to be ostracized as cranks.
It's all very vapid and depressing.
Do you have an article about react? I'd love to read it. And yes tech is chock full of egos and fakers.
Alex Russell is a good read on React. His position gives him a broad view of its impacts and has kept him from being sidelined. This Changelog podcast is a decent distillation of his criticisms – it was recorded earlier this year, a few days after his Market For Lemons blog post.
(Sorry for the late reply! I've been a bit swamped lately and away from kbin.)
Wow, that blog post is truly nauseating and infuriating to read, knowing the context.
Fuck Google. They're the Nestlé of tech.
I don't think Google has recently insisted that child slavery is just a thing we all have to be OK with if we want chocolate, or starved millions of babies by convincing their mothers that their breast milk is dangerous. But I also wouldn't be shocked to learn that they had...
No, but they accepted to publish political fake news ads for one of the running parties (the fascistoid one, of course) in the last elections here in Brazil.
That party has lost, but it was too close. In the 4 last years, during their mandate, hunger, violence, discrimination rape, and other problems rose to the highest levels in the century.
Google and other big tech companies have been influencing elections in a lot of places, and the consequences are enormous.
Can someone explain to me how this is different to the trust system used by SSL Certificates?
I think that the main difference is that with SSL you only encrypt the data, and then you can modify at will(as in making changes to every page your browser renders - ad block, grease monkey like extensions etc. With DRM, you won't be able to modify the pages at all
Yep, that sounds like a very Mega-Corp thing to do.
I'm working on essentially removing Google from my life.
Like everyone else, I was an avid google user and used google for all its services. Then I started to learn about privacy and switched to chrome to firefox with duckduckgo. Until yesterday I was also often using an adblocker for advertising, I then realized that this does harm to companies and sites that I am interested in. Advertising is fine, I enjoy it if it's on the site, but I want to be given a choice to behave. That's it. Tradotto con DeepL https://www.deepl.com/app/?utm_source=android&utm_medium=app&utm_campaign=share-translation
A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.
Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.
Subcommunities on Beehaw:
This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.