I fear moving away from GPL that moving to Rust seems to bring, but Rust does fix real memory issues.

Take the recent rsync vulnerabilities for example.

https://www.cyberciti.biz/linux-news/cve-2024-12084-rsyn-security-urgent-update-needed-on-unix-bsd-systems/#more-2215

At least this one in a Rust implementation of rsync would have very likely been avoided:

CVE-2024-12085 – A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time. Info Leak via uninitialized Stack contents defeats ASLR.

I would love this news if it didn’t move away from the GPL.

Mass move to MIT is just empowering enshittification by greedy companies.

GrapheneOS reboots often for updates and security against cold boot storage attacks.

Sadly I found out yesterday:

Matrix is not a community-based software, it was born [00] in Amdocs [01], a multinational corporation founded in Israel.

https://hackea.org/notas/matrix.html

Many were claiming its impossible to get contributions merged as well.

I would be happy to find out this information is wrong or outdated.

You are thinking far to linearly. Think of this as a guerilla tactics to take advantage of media focus and what would happen if Musk crashed out.

Why not avoid amazon completely or as much as possible?

Nah, fuck brave.

You can self host firefox sync.

Lets just Thanos snap everyone to class consciousness.

If you cant get people to do it for a day, you surely cant get them to do the planning necessary for a month.

If Mozilla wants to limit their use of my input, why the do I need to give them a full, non-exclusive license?

You can’t export your MFA? Aegis for example allows this.

A response to apologists in your sphere:

If Mozilla wants to limit their use of my input, why the do I need to give them a full, non-exclusive license?

If Mozilla wants to limit their use of my input, why the do I need to give them a full, non-exclusive license?

If Mozilla wants to limit their use of my input, why the do I need to give them a full, non-exclusive license?

Just another nail in the coffin that hopefully convinces those who thought Proton was maybe still okay after CEO licking Trumps toes.

You shouldn’t trust TurboTax so much.

https://www.washingtonpost.com/technology/2024/03/01/turbotax-privacy-tax-return-2024/

They also keep trying to trick you into giving consent:

https://www.moneytalksnews.com/are-turbotax-and-hr-block-sharing-your-personal-info/

They also lobby to keep taxes complex.

https://www.propublica.org/article/inside-turbotax-20-year-fight-to-stop-americans-from-filing-their-taxes-for-free

Yeah, no. The people who thought Trump was a fluke the first time around are the problem and need to adjust accordingly.

Threema bad:

https://www.schneier.com/blog/archives/2023/01/security-analysis-of-threema.html

I wouldn’t be surprised to find out its true.

The problem is it shouldn’t be a blight because its impossible to prevent bad actors from using an actually private and secure messaging app.

So the act of reporting on it is a smear because most don’t understand or acknowledge the impossibility of preventing those bad actors.