Show newer

As an example of the consequences of that monumental shift in what society allows to be "normal," to make DRM work even to some rough approximation, you need a way that a device can prove to a server what software is running on that device — so-called attestation. That fundamentally breaks the idea that it's the *protocol* between a device and a server that matters, not the *implementation*, and thus fundamentally restricts what implementations are possible.

Show thread

I'm still mad that as a society, we basically let the idea of "sideloading" become normalized. Just the idea that the software you run on your device is subject to DRM is so inherently and extremely wrong, and yet it's just normal now.

So many other abuses of power in computing come back to that; to adapt Doctorow somewhat, there was a war on general-purpose computing, and we lost.

(edit: see replies below for important discussion of "lost," and why that might not be the best word.)

@emma I'm quickly coming around to the opinion that passkeys are "what if SSH keys were DRMed."

Some weirdo writing a whole thread on “NULL pointer” [sic] after seeing a screenshot of a stacktrace with a read at 0x9c in what I have to assume is kernel memory. And then I see he’s a Xoogler and claims to be a “professional C++ programmer”.

The thread, which is the worst analysis of this as is possible, ends in sexism and racism. *this is my surprised face*

I need to Kotlin harder.

Show thread

funding idea for open data projects 

A long-standing problem with open data projects is that they are not free to run, but companies tend to heavily exploit the data for their own profit without providing any funding to the project, and any technical restrictions on that would also harm the legitimate users.

So here's an idea that just occurred to me: charge specifically for CSV and Excel exports. JSON/whatever exports and feeds are free and unrestricted, but CSV/XLS requires contributing to the project. Because as far as I can tell, 'business environments' are pretty much the only place where people would *willingly* choose CSV/XLS over standard(ish) serialization formats.

Delivery options, as someone with ADHD:

⚪️ Next day (extremely convenient)
⚪️ Two weeks (you will forget and be pleasantly surprised when it arrives)
⚪️ 3-4 days (you will be stuck in waiting mode, constantly checking the tracking information, unable to do anything until it arrives)

Fuck websites that start flashing fake 'notifications' for their intrusive live chat widget in the page title

@foone
Developer: "it works on my machine"
Manager: "yes, but we can't sell your computer to every customer"
Developer: "can't we?" [[SD card cloning intensifies]]

good lord. I pulled a microSD card out of a Raspi inside an IoT product and it appears they had some developer use a raspi to develop/test some software, and then they just yanked the SD card out of that machine and duped it on to all of their deployed products.

it's got .bash_history of the development process! there's git checkouts of private repos! WHY WOULD YOU DO THIS?

The fun part of all this hooplah is that society still hasn't twigged that programmers are making $multi-million and even $multi-billion decisions on a regular basis.

Even more fun is that programmers haven't twigged, either.

@xgranade @emma whenever silicon valley tries to push one of these "the service provider tells the user how to use their computer"/"only my friends can join the treehouse" standards, I go back to the old story about Stallman's malfunctioning printer and the manufacturer who wouldn't let him fix it.

The entire POINT of open source was to prevent the manufacturer from holding such kind of power over the user. A whitelist-based compatibility is not an open standard, it's just business collussion.

Same.

Also since #passkeys are going to wind up bound to a phone, and the phones of unhoused people are frequently stolen (including by cops conducting violent sweeps of encampments) that's going to make it more difficult for them to access all the services which can now only be accessed online. (And nobody from Apple or Google, to the best of my knowledge, has addressed this, but you know, Silicon Valley doesn't give a fuck about anyone they can't extract economic rents from.)

And I use Linux for my desk and laptop computing, how the hell is that going to work if Apple or Google force me to use their toolchain instead of one I can use on all my devices such as 1Password.

This stinks of monopoly power, not security.

wandering.shop/@daviddlevine/1

“Pappa, als ik groot ben, en als jij groot bent, en als mamma groot is, dan gaan wij samen de trein rijden.”

Als ik de NS was zou ik een kleuterschool beginnen in Houten Castellum, daar zit duidelijk potentie voor het oplossen van het personeelstekort

Show thread

🎶 Twee schilderijen en een koekenpan
Zitten in mijn tassen en ik zweet er van
Roept de conducteur: dat dat kan!
Twee schilderijen en een koekenpan. 🎶

Show thread
Show older
Pixietown

Small server part of the pixie.town infrastructure. Registration is closed.