[–] 1 point 23 hours ago* (last edited 23 hours ago) (1 child)

I thought you were saying that signal is a worse secure messaging app compared to alternatives. Based on that, I said that this would affect other secure messaging apps too.

Is your problem that people are promising secure communication apps while also making the apps available on the Play store?

If so, then I can understand the argument around potentially misleading people by not warning them about it. However, that's still different from the signal app itself being insecure. If you said that at the beginning, then we could all have saved some back and forth

Logical fallacies typical of bad faith or poorly structured arguments.

You've been so all over the place that it's hard to address what you're even talking about.

  • source
  • parent
  • context
  • [–] 1 point 1 day ago (3 children)

    It isn't trustworthy against google or any state google iis regulated by, by any measure of cryptographic theory since whenever.

    What you've described would affect any app on the play store, unless you have some other concern with the signal protocol itself?

  • source
  • parent
  • context
  • [–] 3 points 1 day ago* (last edited 1 day ago) (5 children)

    Since @angband@lemmy.world added more to the comment with an edit:

    The source code does not contain anything that would let someone break in and read your messages. That part is irrelevant.

    Assuming @angband is asking about a scenario where Google is compromised and tries to push out a bad APK to update over installed apps to read the private data stores, see here: https://github.com/signalapp/Signal-Android/blob/main/reproducible-builds/README.md

    Signal has supported reproducible builds since Signal Android version 3.15.0, which was first released in March 2016. This process lets you verify that the version of the app that was downloaded from the Play Store matches the source code in our public repository.

    So if they pushed out a bad update to lots of people, it would get caught pretty quickly.

    Now if an individual is worried that they are high profile enough to be targeted as an individual, they really should be installing from a source other than the play store.

  • source
  • parent
  • context
  • [–] 4 points 1 day ago (1 child)

    In that case, don't put a date on the flyer, but put a date on the website.

    That way people can think that they missed it. Bonus points if you pick a date that's unreasonably far into the past.

  • source
  • parent
  • context
  • [–] 5 points 1 day ago

    What do you mean by that? This sounds like a by-the-books procedural step

    "President Herzog has invited Gadi Eisenkot to the President’s Residence, where he will ⁠be tasked with forming the government tomorrow," said the spokesperson of President Isaac Herzog, whose largely ceremonial role involves nominating a candidate to form a coalition after elections.

  • source
  • parent
  • context
  • [–] 5 points 2 days ago

    I searched through my comment history, and I've done it enough times on here that there are a number of examples

    https://lemmy.ca/search?q=I+don%27t+know+enough&type=Comments&listingType=All&creatorId=327162&page=1&sort=TopAll&titleOnly=false

    Ironically, I also argued in favor of sharing uninformed opinions once 😄 In my defense, it was about responding to questions when asked, rather than going out of your way to share an opinion

  • source
  • parent
  • context
  •  

    Article is by Molly White, who you might recognize from Mastodon and web3isgoinggreat.com:

    https://hachyderm.io/@molly0xfff/117526961419935070

    I wrote up what we know about the Binance hack so far. By my best estimate, Binance is out around $3 billion after stablecoin issuers froze what they could. Changpeng Zhao is promising Binance will cover it, but he’s legally barred from running the company.

     

    The sloth didn't move around much, but it was still fun trying to spot the guy.

    Hurricane, the sloth that has been hanging out at the Vancouver Aquarium for years, has died at the age of 29.

    The aquarium says she was one of their "most beloved" residents.

    A statement posted on the aquarium's social media account says the two-toed sloth has been receiving "specialized geriatric care" and was being closely monitored by their veterinary team.

    It says her curious nature and daily interactions with people created many "meaningful moments" for staff and visitors who had the opportunity to meet her.

    It says Hurricane was known for the "unique bond" she shared with her keepers and trainers whom she enjoyed socializing with every day.

     

    EDIT: The developer has replied in this thread, see below :)

    We banned a spammer from this instance recently, and I went to see what instance it was coming from (in case there was more)

    https://coves.social/community-guidelines

    Coves is built on the AT Protocol, which means it's part of a larger decentralized network. Your account and identity exist on your Personal Data Server (PDS), not on our servers. These guidelines and our moderation only apply to the official Coves AppView at coves.social. Other instances of Coves or other AT Protocol services have their own policies and moderation. If you're banned or have content removed from our AppView, your AT Protocol identity and data on your PDS are unaffected — you can still use other services on the network.

    They do credit Photon and they have released the source code for their modified frontend: https://coves.social/legal

    I also found this on their GitHub: https://github.com/BrettM86/tidepool

    Tidepool is a read-only ActivityPub → atproto bridge for the threadiverse. It follows Lemmy/PieFed/Mbin communities (FEP-1b12 group federation), materializes their posts, comments, and profiles as social.coves.* records in a virtual PDS it operates itself, and serves them over com.atproto.sync.* so the Coves AppView indexes fediverse communities exactly as it indexes native ones. Votes stay bridge-side as aggregates behind one sanctioned XRPC.

    EDIT: The developer has confirmed that two-way federation is planned

    I think it's neat that someone is working on this, but I'm a bit concerned that it's read only from the threadiverse:

    • They would suffer from a problem similar to what we have, when someone sets up a Reddit repost bot. Users interacting with some content while not knowing that their replies aren't reaching the original poster
    • they get content without giving content back
     

    Crime Stoppers, which is comprised of a network of volunteer-run local organizations, has traditionally been a primary source of anonymous tips for police, with London-Middlesex Crime Stoppers previously telling CBC News it dealt with thousands of tips annually.

    CBC's exclusive investigation published Wednesday — which analyzed a copy of the hacked data — identified that more than 1.5 million tips submitted to Crime Stoppers programs across the country over the past 25 years were compromised.

    More than 850,000 tips — about half of all Canadian records identified — included personally identifiable information. CBC News could not determine in every instance whether the information belonged to a tipster, a victim or someone accused of a crime.

     

    While you should probably take some services offline altogether, FreshRSS has an update out.

    Just one of many updates that we're going to be seeing over the next few hours / days.

    For those who haven't seen it yet

    https://therecord.media/php-script-vulnerabilities-warnings

    Hundreds of websites taken offline as concern grows over two PHP vulnerabilities

    https://www.huntress.com/blog/php2shell-leaked-critical-php-vulnerabilities

     

    A few weeks ago, we started noticing a number of applications on pixelfed.ca, where the user would say that they needed to register for a course. I don't have full confirmation, but I'm fairly certain that this is a legitimate wave of signups from students at a Canadian university.

    I'm sharing this post for a few reasons:

    1. I thought it was neat

    Personally, I'm excited that people are trying out Pixelfed and using it in coursework like this. If you are one of the students, now seeing this post, welcome! :) I hope that the project goes well, and that you have a pleasant experience on the platform. Feel free to share any and all feedback.

    1. Some of the posts may look like spam at first

    You might be seeing similar looking posts from different accounts on your feed. My guess is that the course has specific requirements and example templates. However, there's also plenty of real content (ex. artwork, photography, etc.), so I don't think it's going to be disruptive

    1. Please report anything that seems off

    As always, you can report inappropriate content through the UI. For urgent issues, please email us at support@pixelfed.ca. You can also DM admin@lemmy.ca as there is overlap with our Pixelfed and Lemmy team members.

    view more: next ›