IronFox

IronFox is a fork of Divested Computing Group’s Mull Browser, based on Mozilla Firefox. Our goal is to continue the legacy of Mull by providing a free and open source, privacy and security-oriented web browser for daily use.

You’re literally the one nitpicking the analogy lmao.

you literally started it ¯_(ツ)_/¯ - apologies for not phrasing it properly, English is not my first language.

Enjoy your cost of living crisis

que miedo 😱

Burgerland

🤣

apologies for not exactly spelling it out for you - is the US actively bombing innocent cubans? I get it, there’s a torture camp- wish it didn’t exist. analogies don’t have to be perfect.

in this scenario, does florida invade cuba first?

not guy you’re replying to, but found the following sources below.

Ukrainian troops have for the first time engaged with North Korean units

Source: https://apnews.com/article/russia-ukraine-war-north-korea-troops-c8cf9599591e50caf1c48a98b6841fe4

North Korean troops have already engaged in combat with Ukrainian soldiers

Source: https://www.bbc.com/news/articles/cm2796pdm1lo

… up to 12,000 North Korean troops are training in Russia’s Far East in preparation to fight alongside Moscow.

Source: https://www.aljazeera.com/news/2024/10/24/reports-of-north-korea-training-in-russia-to-fight-in-ukraine-serious-us

North Korean soldiers were being disguised as Russians and were acting under the Kremlin’s command instead of their own, South Korean Defense Minister Kim Yong-hyun reported to lawmakers Thursday, his office told NBC News.

Source: https://www.nbcnews.com/news/world/north-korean-troops-russia-ukraine-fair-game-us-putin-rcna176989

Here’s what Google’s Gemini had to say about it when I asked:

🗣

What does this say?

VVu7 d0 y00 4ll th1nk 4b0ut 1337$p34k? 1 h4v3nt 8u$t3d 1t 0ut 51nc3 m1ddl3 5ch00l, 8ut m4y83 th3r3’5 p0t3nti4l #3r3.

🤖

This is written in l33tsp34k (leetspeak), an internet language that replaces letters with similar-looking numbers and symbols.

Here’s what it says when translated:

“What do you all think about leetspeak? I haven’t busted it out since middle school, but maybe there’s potential here.”

Scrubs! [0] [1] [2].

It had a great 8 season run (the 9th season doesn’t exist, ignore those who incorrectly say it does). The show was funny, insightful, great dialogue, characters, serious moments and a great cast. Additionally the music choices in each episode were always top-notch. Note that “a handful of songs were replaced in the versions released to streaming services such as Netflix and Hulu due to licensing issues.” [3].

Lastly, “IGN gave the first season a perfect score of 10. The seven following seasons were rated, respectively, 9, 9, 9, 8, 7.5, 8.3 and 7.5” [4].

[0] https://www.rottentomatoes.com/tv/scrubs

[1] https://www.imdb.com/title/tt0285403/

[2] https://en.wikipedia.org/wiki/Scrubs_(TV_series)

[3] https://en.wikipedia.org/wiki/Scrubs_(TV_series)#Music

[4] https://en.wikipedia.org/wiki/Scrubs_(TV_series)#Reception

You may be deleting your comments in the hopes that it will pull some value away from Reddit. That’s not true, in fact, the opposite is more likely.

I would disagree.

If reddit was only about linking websites you would be correct, but that’s not where all the value comes from. Some of the value comes from the comments. Comments provide insights, provide celebrity interaction (snoop, arnold, bill gates, etc), a sense of community, technical knowledge, stories, warnings, context as well as many other things that end-users find valuable.

Remove the comments, ipso facto, you remove value.

For anyone who knows more about this, how does it compare to Servo? https://servo.org/

DM me if you need a Signal proxy.

If you’ve already read through this and understand what it means and are still worried about your privacy, I would recommend you switch to LibreWolf - it takes all the best practices of hardening Firefox for security and works out of the box. Unfortunately, this means you can’t play certain videos, it doesn’t auto-update, and some - likely many - websites will break/not work. This is the price to pay for true privacy. If you don’t want that, just keep using Firefox.

Serious question, because I get a similar “TIL” on my mastodon thread and saw this and had a similar thought - would you prefer to see no “TIL” content posted by bots? I don’t have any stake, but they do provide 3 benefits that I personally enjoy, as much as I’d prefer it was “organically” generated content:

1. Some posts are insightful, others I can just ignore/move on.
2. It provides a way to interact with the broader “fediverse” community about certain topics.
3. Helps avoid visiting sites like Reddit by virtue of having less content here and looking elsewhere.

More on topic - here’s a pic of the couple, for anyone interested:

Unlike Telegram, Signal doesn’t allow researchers to make sure that their GitHub code is the same code that is used in the Signal app run on users’ iPhones.

A few things to keep in mind:

1. Apple’s build process makes reproducible builds near-impossible.
   • All the effort Telegram went through and it doesn’t completely validate the entire build - there are components that are not fully reproducible [0] and as we saw with the recent XZ backdoor, these could potentially be leveraged to hide a backdoor while claiming to be secure - so was anything gained other than “these things are validated but this black box, which could contain malware, was not validated because we can’t check them”?
2. Developing Signal is difficult.
   • Signal is developed by a small team and has to prioritize and coordinate efforts to deliver results - look at how long usernames took or even private contact discovery [1] - nearly 3 years (as a preview) after Signal was created.
   • Signal has no built-in telemetry, any issues are not automatically logged and reported. The end user has to manually submit debug logs and provide an adequate description of the issue for the devs to even attempt to understand what the issue is and how to fix it. Telegram may also have this issue in their very limited private chats, but as most chats aren’t E2EE, they can already see all your traffic anyways, making things significantly easier in terms of development speed.

Considering the two points above, it’s not irrational to come to state the following:

1. Signal has been prioritizing a fully end-to-end encrypted (E2EE) platform that shares zero data with anyone but the intended recipient and this decision has slowed down their development speed. Non-E2EE chat solutions have existed for decades and can iterate and progress significantly faster as they don’t have to work on difficult privacy/security/encryption related issues.
2. Telegram has not been prioritizing a fully E2EE platform and by default do collect most of their user’s data. This makes it much easier to develop Telegram and is why E2EE group messages don’t even exist on the platform - the Telegram devs have spent more time talking about privacy and security than actually implementing it

Given the two statements above, assuming both projects need to balance resource constraints, it’s safe to conclude, :

• Signal has spent zero effort working on reproducible builds on iOS because its impossible to completely reproduce a build and would take development resources working on enhancing the platform for minimal gains, as Telegram has proven [0]. Signal has instead placed their efforts on reproducible builds on a platform where it is possible [2].
• Telegram, instead of working towards implementing security and privacy by default, have decided to work on security theater by working on reproducible builds for iOS that are not even completely reproducible.

Signal refused to add reproducible builds for iOS, closing a GitHub request from the community.

It was closed because they use Github for bug reports, not feature requests [4]. The dev even pointed them to the right place. That said, I do agree it would be great if there was some progress made on this front for Signal, but realize its a huge effort and may be best avoided for now as the iOS client still needs some “catching up” to do, compared to the Android version.

And WhatsApp doesn’t even publish the code of its apps, so all their talk about “privacy” is an even more obvious circus trick 💤

Agreed.

Telegram is the only massively popular messaging service that allows everyone to make sure that all of its apps indeed use the same open source code that is published on Github. For the past ten years, Telegram Secret Chats have remained the only popular method of communication that is verifiably private 💪

Telegram collects all your data by default in a way that’s accessible to anyone with enough privileges to their infrastructure.

[0] https://core.telegram.org/reproducible-builds#step-6-comparing-the-appstore-build-and-the-version-built-in-the

[1] https://signal.org/blog/private-contact-discovery/

[2] https://github.com/signalapp/Signal-Android/tree/main/reproducible-builds

[3] https://github.com/ali-fareed/darwin-containers/commits/main/

[4] https://github.com/signalapp/Signal-iOS/issues/641#issuecomment-1276308990

For anyone considering Session messenger:

The Session developers dropped Perfect Forward Secrecy because it would be hard to work around it.

First things first, let’s talk about what we’re leaving behind: Perfect Forward Secrecy (PFS) and deniability.

Source: https://getsession.org/session-protocol-explained

In plain English, they dropped a security feature for their convenience to the detriment of their users’ security.

For anyone unsure what PFS provides:

The value of forward secrecy is that it protects past communication.

Source: https://en.wikipedia.org/wiki/Forward_secrecy

The Session devs also claim:

Session provides protections against these types of threats in other ways — through fully anonymous account creation, onion routing, and metadata minimisation, for example.

Reading between the lines, we can interpret that as introducing security through obscurity, which is generally considered bad practice - https://cwe.mitre.org/data/definitions/656.html

What’s wrong with Briar? https://briarproject.org/

Censorship-resistant peer-to-peer messaging that bypasses centralized servers. Connect via Bluetooth, Wi-Fi or Tor, with privacy built-in.

I think the reason these apps don’t take off is the compromises they make in order to work the way they do. When you do need them, you best hope you’re able to get them and get others to use them as well.

Is it just Democrats or was it a bipartisan deal? do you have any links to support the claim?

I’m able to play the Italian plumber game, can’t remember the name, on my spare six year old OnePlus 6T Android phone with a Bluetooth 8BitDo controller. my new Google Pixel crashes when I hit the jump button. it really depeyon the hardware. Also runs great on my desktop.

Significantly overblown. Most of the opened github issues were by the same person. Seems someone doesn’t like it and is trying to spam the issue and frame it as a bigger deal than it really is.

check out ecosia.org! plant trees while you search! 🌳