Notices by Strypey (strypey@mastodon.nzoss.nz), page 111

@maiyannah I'm getting a "Your connection is not secure" error when I try to visit:
https://git.postactiv.com/

@sean maybe the solution is to come at the problem sideways and start talking to podmins about it? If a significant number of podmins were willing to move to an AP-compatible soft fork of Diaspora or install an AP plug-in, a team could be formed to do the create it. Then all podmins would have the option to connect to the #fediverse, regardless of what the #Diaspora devs themselves think about it.

@kaniini @rysiek @craigmaloney @cj @starbreaker @wakest @clacke @rigelk @mike @moggers87 @alexl

@sean I feel your pain bro, and I know it must be particularly frustrating given you history with the project. My unsolicited advice is to give it time. By the end of this year (surely!), every other federated app that's still kicking will have some kind of AP support, and they will be the only app left out a growing, thriving #fediverse. At that point, users will start jumping ship, and the Diaspora devs will have to re-revaluate their #NIH attitude to AP.

#ProTip before you start a long session online, put an album of music on. Not a playlist, just one album. Ideally one about 40-45 minutes long. When that album finishes, the sudden silence gives you a "kick" (like in #Inception) that lets you know you've been online for a long time, and it's time to take a break.

> In their writing on homelessness, social psychologist Devon Price has said that "laziness,” at least in the way most of us generally conceive of it, simply does not exist. “If a person’s behavior doesn’t make sense to you,” they write, “it is because you are missing a part of their context. It’s that simple.”
- Anne Helen Petersen
https://www.buzzfeednews.com/article/anneh

"In recent years, new scientific research has demonstrated the “massive cognitive load” on those who are financially insecure. Living in poverty is akin to losing 13 IQ points."
- Anne Helen Petersen
https://www.buzzfeednews.com/article/annehelenpetersen/millennials-burnout-generation-debt-work

@noorul TBH your threat level is about what Signal can cope with. Even if it was a honeypot and Moxie worked for the NSA that's not going to affect you much. I would use Wire instead though. It has all the same pros, plus supports more platforms, doesn't require your phone number, and is developed by a team of professionals who take both software freedom and UX seriously. Swiss-based, so bound by GDPR.

@bhaugen
> Does using a server make it not P2P to you?

Yes. Peer-to-peer is just that, not client-server-client. It's not about who runs the software, it's a description of the network topology.
@ebel

@Bobo_PK I've made my point here. Read the whole thread. Also, please untag me unless you're adding something new and unexpected to the discussion. Cheers ;-)
@dgold @kawaiipunk @gentoorebel @noorul

Forgive me, I seem to have stumbled into the wrong room. Please untag me? Thanks ;-)
@AzureKingfisher @ckeen @alxd

@ebel can you find me an example of a situation in which someone faced legal action over a warrant canary?

@ebel nope. Email requires email servers. It's not #P2P.
@bhaugen

@lnxw48a1 do you mean they're not secret messages? I think "direct message" is an accurate description of what they are. Sent to named users, not (intentionally) published. Although what would happen if a DM was sent to a user on an app that just published every post it gets? Is there some way to detect that and not deliver DMs to instances of that app (and ideally inform the user)?
@alice @lain

@alice @johnnynull @lnxw48a1 for some reason your @name was substituted for this user:
https://catgirl.science/objects/e0698eed-4f2e-489c-a219-83f41af5cca5

*hums X-Files theme tune* #TheTruthIsOutThere!

@dgold there are lots of ways to do federation. XMPP and Matrix are two open chat standards I'm aware of, there is SIP and Jingle for voice, and Muji for video. I've been researching chat tech for a while:
https://www.coactivate.org/projects/disintermedia/core-us

But let me ask you this. If you don't think federated comms are important, why are you here and not on the birdsite?
@kawaiipunk @gentoorebel @noorul

@dgold oh and if you just believe a system is encrypted securely because some argumentative celebrity tells you so, I've got a securely encrypted bridge to sell you.
@kawaiipunk @gentoorebel @noorul

@dgold you're missing a few things from that summary:
* Signal uses a rootkit (Google Play Services) in its "secure" app
* the *reasons* Moxie won't let F-Droid distribute Signal, which don't stack up, suggesting there's a reason he's not saying
* animated GIF search to a third-party server in a "secure" app. Seriously #WTF?
* the security flaws in the official APK download (and the fact it tries to scare users into using the rootkitted Play Store version) etc
@kawaiipunk @gentoorebel @noorul

@bhaugen I'm still not clear on how you're defining "platform" here, because everything you describe is a kind of platform. In my mind, platform just means anything you can build something else on top of. So almost everything except end user apps is a kind of platform.
@Antanicus

@z428
> But individual target users for apps such as Signal don't have the skills to do so,

So what, they just rely on Signal's domain fronting hacks?

> in worst case they won't even be able to recognize a federated server that has been prepared for the sole purpose of spying on them.

Hmm. You mean they won't be able to recognize if Signal has been set up for the sole purpose of spying on them?
@gentoorebel

@leip4Ier there's some stuff here:
https://www.csoonline.com/article/3273344/privacy/what-is-telegram-and-is-it-secure.html
@gentoorebel