Hans-Christoph Steiner @eighthave@librem.one

If you want to see a real world attempt at adding a #SQL #injection #vulnerability to an #Android app via merge request, take a look at https://gitlab.com/fdroid/fdroidclient/-/merge_requests/889#note_506478642 1/2

I just remembered a wonderful feature in #Android that has been broken by #security features: it used to be possible to do a parallel install of GNU/Linux on Android devices. #SecureBoot features are of course important, but they do come at a cost. Android's #VerifiedBoot does have some nice properties that make the devices pretty resilient. It is equally important to recognize that security is not the goal, but part of the process. A brick will always be more secure than any computing device.

@Coffee my family of four keeps the temp around 17C, and for the most part, we're just used to it and use no additional heating. Our office in our apartment has a lot of windows, so it is often around 15C and that can be hard to work at a computer. In there, I actually use IR to heat my feet because I hate having cold feet. Any colder and it is hard to type. Otherwise, we're fine.

#BillGates biggest legacy will perhaps be that he built a #monopoly that delivered crappy #software for so long, that a bunch of idealists, volunteers,and kids were able to create the #FreeSoftware movement which the vast majority of companies have now signed on to. Using #OpenSource is the default now in software development, there is almost no major software that is purely proprietary. Converting open source to free software is the next struggle, freedom is an essential aspect for the future

#Debian and #FDroid require signature verification, and #FDroid is built on top of #Android's APK signing. This improves things a lot but does not mean they are immune. Debian and F-Droid repos can still override packages lower priority repos. It could make sense to have a "no overrides allowed" setting, but that would restrict useful features. Maybe F-Droid could implement "no new signing keys when overriding" rule by default, I wonder how much that would break what people are doing now? 2/2

#Decentralized #software repository systems like #npm #maven #rubygems #pypi etc have key issues that make them hard to decentralize properly: solid verification is optional, one repo can override packages from another, and the tooling makes it hard to see which repo was actually used. #MavenCentral has additional measures which make it more trustworthy, but if devs add repos, those can still override it. #Gradle verification helps a lot when using Maven repos but does not solve everything 1/2

@PublicLewdness yeah definitely. In so many places, it is really hard to escape the large "real estate tax", where landlords and real estate investors extract ever more immense profits out of all of us, most of the time without actually doing anything productive. There is a good reason why in economics, non-productive income is called "rent". The big real estate investors now have found a way to extract lots of "rent" from people buying homes.

Since I was an adult, I've had big swings in income, my lowest year was about 1/8 of my highest. This is by choice mostly, so I'm very lucky. It gives me perspective, and actually I was usually happier when I had less money and more time, though the insecurity of the lean years was tough. A small, steady income and housing would be the ideal. I also consumed much less in the lean years, and this article about going off grid reminded me of the benefits of a simpler life https://arstechnica.com/science/2023/01/i-disconnected-from-the-electric-grid-for-8-months-in-manhattan/

And in case it was not clear, #NonViolence is an essential aspect of #CivilDisobedience. Violent civil disobedience cannot be justified, especially when you consider that non-violent movements are twice as likely to succeed https://www.bbc.com/future/article/20190513-it-only-takes-35-of-people-to-change-the-world

For me, #MLK gave the clearest ethical explanation of #CivilDisobedience, starting with "I don't think any society can call an individual irresponsible who breaks the law and willingly accepts the penalty if conscience tells him that that law is unjust." Listen to the whole thing: https://youtu.be/fAtsAwGreyE?t=798

#ExtinctionRebellion #climatejustice #klima #LobauBleibt #Luetzerathbleibt #FridaysForFuture #FFF_Austria #LetzteGeneration #BlackLivesMatter #RomaLivesMatter are demonstrating this right now.

@rbreich And on top of that, when Black Americans did build up prosperous communities, they were often attacked and destroyed. Remember #Tulsa #Greenwood in 1921, #PalmSprings Section 14 in 1959, Bruce's Beach in 1927, and so many other cases.

There is a certain "warrior culture" of coding, where young devs spend long hours deeply focused on creating "epic" software, and coders age out rapidly. This has upsides and downsides. There are other cultures of coding too, but this warrior culture created large swathes of computing as we know it, and the culture is still embedded. #Java and #Windows are examples. Bill Gates hasn't contributed code to Windows since 1985. #Python shows a different culture, the old are still contributing code

@Werhaus Yeah I think that is a great idea for regulation that can really provide a lot of benefits.