perestroika

joined 2 years ago
[–] perestroika@lemm.ee 62 points 3 days ago* (last edited 3 days ago) (4 children)

It is interesting that Reddit took it upon themselves to remove it. They are government employees, those aren't their private addresses, but end with ".gov". This seems to be public data.

[–] perestroika@lemm.ee 1 points 1 week ago* (last edited 1 week ago) (1 children)

In my experience, the API has iteratively made it ever harder for applications to automatically perform previously easy jobs, and jobs which are trivial under ordinary Linux (e.g. become an access point, set the SSID, set the IP address, set the PSK, start a VPN connection, go into monitor / inject mode, access an USB device, write files to a directory of your choice, install an APK). Now there's a literal thicket of API calls and declarations to make, before you can do some of these things (and some are forever gone).

The obvious reason is that Google tries to protect a billion inexperienced people from scammers and malware.

But it kills the ability to do non-standard things, and the concept of your device being your own.

And a big problem is that so many apps rely on advertising for its income stream. Spying a little has been legitimized and turned into a business under Android. To maintain control, the operating system then has to be restrictive of apps. Which pisses off developers who have a trusting relationship with their customer and want their apps to have freedom to operate.

[–] perestroika@lemm.ee 4 points 1 week ago (3 children)

The countdown to Android's slow and painful death is already ticking for a while.

It has become over-engineered and no longer appealing from a developer's viewpoint.

I still write code for Android because my customers need it - will be needing for a while - but I've stopped writng code for Apple's i-things and I research alternatives for Android. Rolling my own environment with FOSS components on top of Raspbian looks feasible already. On robots and automation, I already use it.

[–] perestroika@lemm.ee 1 points 1 month ago* (last edited 1 month ago)

Regarding e-mail: "riseup.net" requires that a long-time user vouch for a new user and invite them. If the new user quickly turns into a complaint magnet (there's a coming-of-age period after which their actions are considered their own), both the user and the inviter will be held responsible (kicked off the service). I think (hope) they aren't so strict with VPN, but they have limited people and could not administer a mess made by a big bunch of people.

Needless to say, none of my (anarchist) comrades have ever been kicked off RiseUp, but they don't send spam or threats, they just send their cat pictures encrypted with GPG, causing the authorities endless work. :)

Just like every reasonable service, RiseUp has a few technical mechanisms to ensure they aren't compromised (disk and inbox encryption, etc) but obviously those can't help against a dedicated and well-resourced adversary.

So, whatever e-mail server you use - use PGP / GPG. :) Then the adversary must compromise your device. If you are hardcore, encrypt and sign on an offline device. Then the adversary must breach the air gap.

(I used to sign releases for some anonymity-related project years ago. Those were the times when I seriously took measures because others depended on me. Currently, not so much.)

P.S. As for the lack of resources at RiseUp: this can be alleviated by donating to them. Which reminds me, I should set up a small regular donation to their representative organization in the EU.