Pup Biru

and now you’ve robbed her of her chance to sell john oliver her collection of valuable rat erotica

did they ever clear up that random unexplained binaries issue?

gimme an advanced advanced mode that mimicks the uMatrix UI and i’d donate monthly for sure - uMatrix is one of my most used tools! i’d switch to uBO if the UI were as powerful

i’ve tried using dynamic filtering before, but honestly the UI for it is horrible… their example they give for allowing youtube embeds shows my issue with it pretty well:

their solution is either to allow everything from google.com and youtube.com, or to allow all 3rd party frames

uMatrix allows me to, for example, allow 3rd party frames only from youtube.com, and block cookies for those same frames

you’re welcome! you too!

it should be noted though that it hasn’t been updated since 2021, and its repo has been archived (i’m not sure of the reasons). it still works great, but it’s not going to get any updates

i use uMatrix (by the same author as uBlock Origin), which essentially allows very granular control over what dynamic content to allow:

per domain and subdomain you can allow script, xhr, media, frames, cookies, images, css, and other things

so you can say, for example, on lemm.ee deny any scripts from google.com from loading and deny any xhr (so analytics can’t work even if the script is hosted on the sites own domain)

this stops a lot of fingerprinting in its tracks (except when you need to allow eg reCAPTCHA), but it does break pretty much every website until you go and allow only known good things (like scripts and xhr to the sites own domain)

there’s also server-side fingerprinting, which is harder again

us-american arrogance is very present on lemmy literally everywhere.

ftfy

must be nice to find it funny rather than be scared for your friends lives like the LGBT community is

wow equating Nazis with communists - now there’s a false equivalence

I think we would do well to turn down the temperature a bit and try to understand each other rather than throw around these big insulting words that clearly we don’t really understand.

what a great way to turn down the temperature! being condescending… good work bud

perhaps take a look at the comment votes once in a while and do some self-reflection on your communication style, if not the correctness of your statements and either say: sorry, i’m clearly miscommunicating, or sorry you’re right

email is not secure. proton is among the most reasonably secure compromises; there’s very little they could do to become more secure

essentially rather than generating a reply meant for a human, they generate a special reply that the software interprets as “call this tool”. in th same way as the system prompt where the model operator tells the system how to behave, you tell the model what tools and parameters are available to it (for example, load page is a common one)… when the software receives a call for the tool, it calls real code to perform an action, which then responds to the model with the result so that it can continue to process. in this way, the model may kind of request access to limited external resources

that’s all not necessarily true

for starters: https://signal.org/blog/sealed-sender/

but also perhaps more academically because signal (i believe) doesn’t do this, so it’s more a comment on the information that the server “must know”

signal uses the double ratchet protocol to derive shared keys between users already. if we extend this a little further to exchange a separate shared identifier for use in retrieving conversaiton data, and a place to store that data the the only information that the server gets is a couple of initialisation messages, and the rest is entirely opaque - there’s no way to know (other than tracing e2e messages based on IP address, and there are mitigations for that too) who is communicating with who, at what rate, etc

there are other ways to validate things like rate limits, etc that don’t involve identity directly, or at least don’t trust any single party with all data

okay, but reproducible builds solve the rest of that problem

https://signal.org/blog/reproducible-android/

DNS will only leak domains (and subdomains); not paths

i went to the mozilla donation page and sent a contact request about wanting to financially support firefox but not giving a damn about the rest of the AI and adtech slop that mozilla is doing

here’s the response, for anyone that’s interested

Thank you for taking the time to share your feedback with us. We genuinely value hearing from our supporters, as your insights help us understand what matters most to the Mozilla community.

It’s important to note that the Mozilla Foundation and Mozilla Corporation are two separate entities within the Mozilla umbrella - Mozilla Corporation is responsible for developing and maintaining Firefox and other software products, and they are continuously working on improving the user experience, including addressing compatibility issues and promoting the browser to a wider audience.

The Mozilla Foundation, on the other hand, focuses on broader internet health and advocacy work. Our mission is to ensure the internet remains open and accessible for everyone, and this includes issues related to privacy, digital rights, and equity. To confirm, the survey that you had received was from the Mozilla Foundation.

With that being said, Firefox is funded by revenue generated through the product rather than donations. At the moment, there is no way for supporters to make a donation that will be designated to the development of Firefox. Have no fear, things are looking good for Firefox’s future and they plan to be around a long time, supporting folks with the most secure browser experience! Continuing to use Firefox, and recommending it to others, is the best way to support this project.

We truly appreciate your concerns about Firefox and their top priorities - We on the Mozilla Foundation strongly believe that issues such as privacy, online safety, and data security are connected to the products and services we all use every day. The work we do in these areas complements Mozilla Corporation’s focus on building better, more secure software like Firefox, and w encourage you to participate in our survey!

If you would like to input some of your thoughts and ideas into our Ideas discussion forum regarding Firefox and other Mozilla products, please visit: https://connect.mozilla.org/t5/ideas/idb-p/ideas

We thank you again for reaching out to our Mozilla Foundation Donor Care team, and please let us know if we can support your further!

this is the slippery slope fallacy… “where does it stop” is not a valid argument to not start

if a govt seizes a device and discovers channel IDs to be taken down, i’m sure than signal would do so - there have been no arrest warrants, after all… however, the problem is also significantly smaller for signal because signal can’t have enormous broadcast groups

it’s kinda irrelevant what it is - you have to comply with police orders to moderate your platform… if this were musk and x lemmy would be cheering on the arrest! no matter who you are, you don’t shouldn’t get to just break the law

and you’re right CSAM is frequently used as an excuse, and no i don’t have evidence - that would require actually looking for said content, which i have no inclination to do. the only information i have is that multiple independent news outlets have referenced telegram for years - not proof, but a more convincing argument than simply denial - because let’s not kid ourselves, unless you’ve gone looking for that content, you’ve got no proof against it either (and even if you didn’t find it, that’s no guarantee either - it’s unlikely easy to find)

breakable for the NSA doesn’t mean the police have access

also the current issue is with moderation: telegram is refusing to take down CSAM channels etc

and this is called the slippery slope fallacy and is either a flaw in your logic or a way of arguing in bad faith. either way, it’s just fearmongering. if that’s all you’ve got then i have nothing more to say

https://en.wikipedia.org/wiki/Slippery_slope

if metas monolopoloy is literally the only thing you care about, but replacing a terrible platform with another platform that lacks privacy protections is not much of an upgrade