• 0 Posts
  • 31 Comments
Joined 10 months ago
cake
Cake day: March 10th, 2024

help-circle




  • The security of these certificates only guarantees that you’re talking to the right server and that your communication is encrypted. For other concerns like of the server was hacked, you’ll need something else. No individual piece of security tech can secure everything. You as the site admin can only use it as one piece of a comprehensive security package that defends against what you perceive as the most credible threats.

    Asking where’s the security is like asking where’s the protection with a bullet proof vest if you can still get shot in the head. A vest offers one type of protection, but a comprehensive security package is going to include other pieces like helmets.


  • I don’t know what the process is like to become a certificate authority. I imagine the answer is technically yes but realistically no, at least not as an individual. You’d be providing a critical piece of internet infrastructure, so you’d need the world to consider you capable of providing the service reliably while also capable of securing the keys used to sign certificates so they can’t be forged. It’s a big responsibility that involves putting a LOT of trust in the authority, so I don’t think it’s taken very lightly.






  • You’re never going to get meaningful change voting third party under the American voting system. A first past the post voting system will ALWAYS result in a two party system. If we hurt the current parties by voting third party enough to kill one, we’ll just replace the dead party. It might be an improvement at first, but eventually, all the same forces push us back into the same end result after a while.

    The US needs major reform to the electoral system. Switch from first past the post to something like ranked choice or approval voting. Abolish the fucking electoral college, which some states are attempting with a law to automatically grant all electoral college votes to the popular vote winner if enough states agree to make it guarantee the winner. Expand and guarantee access to mail in voting. And indirectly, reinvest in the fucking education system.

    Of course, with full control of the federal government going to Republicans who benefit from all these problems, there’s no way any of it gets addressed now.







  • I haven’t seen reports of significant collateral damage. I’m sure there was at least some, but that’s different from large amounts of collateral damage. To be considered indiscriminate, I think it would need to have either used larger charges with a bigger blast radius or distribute the pagers more widely in the hopes that Hezbollah agents got them along with the public. From my understanding, which may be flawed, neither of those conditions are true, so while there almost certainly was collateral damage, I don’t currently think it was widespread enough to consider the attack indiscriminate. If you have a source to contradict me, I’m open to reading it.

    Fuck Israel’s rampant genocidal war crimes, but I don’t think this counts as one.


  • Running a server is very doable. There are packages to deploy and configure almost everything for you and removing a ton of headache.

    Getting your email recognized as not spam by the major providers is pretty much impossible. You need all sorts of stuff to help verify integrity including special DNS records and public identity keys, but even if you do everything right, your mail can very easily get black holed before it even reaches a user’s inbox because of stupid shit like someone abused your rented server’s IP years ago, and you can’t seem to get it off everyone’s lists.

    Email as a decentralized tool has effectively been ruined by spam and anti-spam measures. You’re effectively forced to use a provider because it’s near impossible to make your outgoing mail work as an individual. I think some of those anti-spam measures are anticompetitive, but I do think some are just desperate attempts to reduce the massive flow of spam.