• 169 Posts
  • 1.4K Comments
Joined 3 years ago
cake
Cake day: June 12th, 2023

help-circle
  • Haha, don’t worry, I get that perspective. I was actually trying to do the opposite - I feel like the perspective you outline is the default one people will usually take, so I wanted to change that :P I think this article does a good job of that too: just because they’re not perfect, doesn’t mean someone actively doing some good deserves negative attention, when we don’t give that same treatment to others who do less good.

    That said, I’m not arguing that we should “be treating FUTO as a beacon of OSS support”. I do actually agree with all of this:

    What we should be doing is acknowledging that they did give a small one time donation to various projects, but also recognising that it was for self-serving reasons. I’m sure theres individuals who have given more than 1000 in single payments to these projects, or less but more consistently (monthly, every 6 months, every year, etc). What makes FUTO more of a supporter than those individuals?

    If it wasn’t for this article, I wouldn’t actually be talking about FUTO. (Except in the context of Immich, where they actually are the main reason the project’s doing well.) So I don’t feel like we need to start negatively discussing them just because they’re not perfect.

    And don’t worry about the downvotes, I don’t actually care about them.



  • Yeah I read the article. Still, musl libc received $1000, the advertising didn’t sell anything, and it got corrected after it got pointed out. One of the founders maybe did associate themselves with someone whose views I might not like, but I feel like if their main goal was to promote that person, there would’ve been more efficient ways to use that money to do so that would not resolve in musl libc receiving $1000, or in a project like Immich being viable.


  • I don’t think that comparison is entirely fair, but I do think that homeless person having 1 euro is still better than that person not having 1 euro. Especially if instead of 1 euro, they actually gave the homeless donation equivalent of keeping a project like Immich viable.

    I’d also keep in mind that there are other rich person not giving 1 euro to a homeless person, and so while I have my reservations about rich people in general, I wouldn’t necessarily single out the one that gave the euro.







  • How? The clients can only notice if the API works as specified. The server can constantly be replaced without anybody noticing.

    See the link I posted before about the secure enclave. (Note that I could’ve been clearer before: it’s not specifically the Signal client app that needs to detect server tampering; any software could.)

    So you know the problems of the servers.

    So what are you saying? Don’t use anything that has a server? (To be fair, I think it’s a good idea to have pure peer-to-peer apps installed as well, but for most situations that would still just come down to “do not communicate digitally at all”.)









  • What could a client detect? Signal is a US company and will comply with the government. The server can’t be trusted.

    As mentioned before, it could detect that the server is not running the published source code. So long as it’s untampered with, and the published source code is trusted, the server can be trusted. And again, for message encryption that is only an additional layer of protection; the messages are encrypted before reaching the server, so even if the server was malicious, it still couldn’t see the contents. That’s the whole point.

    They can detect if a different app was installed from the store on their phone

    I think you’re conflating points here - the detection was about detecting whether the server had been tampered with.

    I’m not sure what specifically you’re arguing for, here. It would’ve been nice for Signal to not have been in the US, and it can be coerced to stop working altogether, but your communication is at least as safe as any other app, at least the ones of comparable usability. Or are you’re just saying we’re all lost anyway and we might just as well give up and communicate via public Twitter posts?