I think people trust too much generally. That's not going to change with any paradigm put forth. However if you're running binaries from vendors you don't trust, you're playing with fire even in a regulated app store.
Most people don't change their default browser, adding third party repos would be similar. Removing the ability for the owner of a device to install software they want fixes one symptom, not the main issue of trust. Also it makes your device into a glorified feature phone. No thanks.
You trust Facebook when you log into Facebook.com. Facebook.com/fdroid would be the hypothetical trusted endpoint for Facebook apps. You should not have one gatekeeper that ensures everything is safe. They can sensor content, fail to catch something or prioritize some apps over others. Having a default repo where there are restrictions, rules and vigilance makes sense, but you should be able to opt into another circle of trust AND get notified of updates, changes, version numbers etc. If you can't trust a company enough to run their binary, then don't add their repo.
The alternative is download static apks today and maintain updates yourself(bad) or remove the freedom to install what you want on your device.
Fdroid allows you to run your own repo and up your own builds. MicroG does this, so these are built by them. More devs should do this. Fdroid building everything isn't scalable nor is it a good trust paradigm. I agree with them that they should only build from source, but others should maintain their own. Email is federated, why not app stores?
I'd be happy if they just released it DRMfree on GOG or something. It existed long before tying your game to Steam's API was ever a thing. I'd buy it again, especially if it was the original version (before they killed LAN multiplayer).
I mean, have we really learned nothing from tying our multiplayer to GameSpy?
Open source would be best, but I'm sure they want to re-release it on every DRM cloud platform to pop up for the next 20 years. Also, legal, etc.
Extensions that implement server-side XEPs are really easy to add on as well. Just git pull the community XEP repo and then add a line to the ini and you can add more superpowers. I have it on a cheap VPS. I'm using conversations with it and it has been mostly flawless. Now I just need a good linux application that understands OMEMO. There's a Gajim hack, but it's kind of messy.
This is good to see. I feel like self-hosting is no longer really a priority for a lot of people, even privacy advocates. As things get more cloudy, people end up trusting these third party services more and more. Even businesses and schools are using cloud services like crazy.
I think there should be more talk about federation, exporting and importing data. It also seems like serverless is the new hotness and getting a lot of former self-hosted advocates' eyeballs.
Self-hosting is a lot of work for the everyman, but distributed trust (family, work, neighborhood, school, etc) federation seems better than the status quo. This might not be a popular position since most startups depend on roping people into centralized clouds, but eh.
I wrote some about it and the Decentralized Web Summit here[0].
SCOTUS seems to disagree with you[0][1]. I try to read or at least skim what I agree to. Some companies have an opt-out of their binding arbitration (eg. Ting), which I try to make use of, but most don't allow you to opt out of the class action waiver.
If you don't like the terms, email them and tell the company why you won't sign up. I rarely get a response, but someone on their staff knows there's at least some push back.
IANAL, but it looks like when you agree to the Microsoft TOS you waive your right to bring a Class Action suit against Microsoft
>Class action lawsuits, class-wide arbitrations, private attorney-general actions, and any other proceeding where someone acts in a representative capacity aren’t allowed. Nor is combining individual proceedings without the consent of all parties.
I believe that's why companies are taking MS to small claims for $10,000 despite losing way more than that in downtime.
The "new" Microsoft was a change in business model, not a sudden thawing of the heart.
Windows used to be the product, now Windows users are. This is similar to Google and Facebook's offerings. Very few companies still strictly sell software anymore.
The open sourcing of tools is marketing and a consequence of prioritizing adoption over exclusivity. Like Android, Windows isn't going to be the bare foundation you build on, but the cushy, fully furnished condominium... complete with cameras and microphones.
I dual boot on my PC, Ubuntu and Windows. I'm writing this from my Arch laptop. I only drop into Windows if I want to play a Windows-only game, but thankfully that's happening less and less. I've stopped buying games for Windows entirely so I won't have this problem in the future.
When I installed Windows10, I did the hour long dance of trying to find all the places where I could turn off tracking, even temporarily. Then I ran this[0] which does a pretty good job in a magic black box kind of way. It's a patch job, I don't recommend using Windows10 as a daily driver or putting too much faith into any gui setting or external patch.
Also updates are important. Software developers know maintaining multiple old versions and backporting fixes is more art than science and even with the best intentions is prone to incompleteness. Update your software. If you find you can't because upstream is consistently invasive/lacking/gross, chose a different project or you know... fork.
I agree, they're really late to the game. It seems like a slam dunk business-wise as they can get the android and IOS market on the same app and cultivate a household name.
They would have been better doing so before the E2E craze went mainstream-ish, again from a business perspective. Now they can still leverage meta data, but it's not a juicy and lucrative as say, reading everyone's emails.
I'm still putting my money on vector.im and matrix.org. Closed source communication apps are not appealing to me, even if they come with an E2E promise.
From a business perspective this makes sense for Google. A big problem with Skype was always the lack of ubiquity. Lot of people had it, but it required another install and explicit configuration. Now that Skype is nearly bundled with W10 and WebRTC has made skype.com trivial, the gap for Google to move in is closing. If this rolls out with Google branded Android, people will use it irrespective of its merits (a la bundled Internet Explorer). Interop on iOS makes it stand out from Facetime. There's always room to change terms later when it becomes a household name.
Also, with all these services adding an E2E sticker on their communications, Google's hand was forced, they're not trend setters here and they shouldn't be applauded for being extremely late to the privacy game.
I think maintaining the LAMP Wordpress stack, extensions, admin panel auth security, whatever versionpress is etc. is more hassle than editing a text file and pushing code. To devs, this editing is second nature.
Also, I'd take my desktop editor to a contentEditable any day.
You could throw Jekyll, Middleman, Pelican or Hugo on the server and run their build command with a git hook. Then you'd get the same result, but a completely static website without the server needing flask to piece together pages when a user hits the site.
The build times wouldn't be instantaneous as it would need to regenerate all the pages, but Hugo is still really snappy for even a large site. You probably post less than users access anyway.
The site would be built on the server so it wouldn't be completely dumb like rsync-ing static pages to nginx or something, but that's the rub if you want to be able to use clients with only git as a dependency.
Yours is a good solution, I'm just throwing an idea out there for a pre-baked alternative. My original use case didn't call for mobile blogging (not a fan), I run my own gitolite server so auth is already in my camp and I have a multi-tooled build that I didn't want on the server. If something breaks, it happens on my machine instead of on my server.
Also just a tip, maybe you want to put a <noscript> tag around an expanded copy of your hamburger menu. Without javascript, your website navigation is broken because you can't expand the menu.
Edit: by client, I mean blog-editing-computer not blog-reader's-computer.
I considered doing this with my hugo blog, but decided I wanted to do the work on my client and keep my server stupid. In order to build my site, I have a lot of minification, pdf generation, syntax highlighting etc, that requires a few packages to be installed on the client.
If my server had to rebuild after a git push of a new post, I'd have to install all of the tooling on the server. I just commit my post, then run npm deploy which rsyncs all the static assets to the server after building on the client. This also makes it so I can see everything on my client easily before deploying. If I was building a blog for someone else though, this would make sense, stupid client, smart server, commit from anywhere.
On one hand, I like that Stallman is opinionated and forward about his politics and how we wants the world to work. So many people are silent or inactive about the things they care about, wishing for people at large to just change. You ruffle some feathers when you open up and say what's on your mind, but hopefully after enough rational argument, you come off better and with a better message.
On the other, I don't really like everything he says, despite being a pretty firm OSS supporter. He conflates so much with open source it's nauseating. People choose a license for all kinds of reasons and I understand he's a cheerleader, I am too, but conflating everything hurts open source as much as it hurts proprietary actors.
It's a market. Some people will want to buy your product because they see its open nature as a benefit they are willing to pay more for, others don't care and will not pay more. The same goes for privacy promises, DRM or which devices you support, the color etc. If people buy or sell things that you would rather not, that's cool. Pointing out that everyone at every level of a proprietary agreement is duped by some nefarious puppet-master and the entire machine should fail is childish. Furthermore, throwing in things like economics and employment fairness into the mix really confuses the message to the determent of OSS developers. In like kind, I may be a vegetarian, but PETA certainly doesn't speak for me.
I realize he thinks the current market is trash and slight deviations from the status quo won't bring real change, but most people just don't care enough about what many of us care about. That's the hard truth. Slinging mud and building straw-men isn't how we fix this problem. It just makes OSS proponents look out of touch.
Also, some people commented on his sometimes hypocritical impurity. eg. making phone calls on locked down phones and using closed source websites occasionally. Being OSS pure in 2016 is crazy hard and getting harder, again due to market forces. I think there's a lot to fault Stallman on, but his deviation from OSS purity is not one of them.
In the US you can't do research about a product then go out and buy quality product from a quality provider. That's really where I see a lot of the problems with all of this.
Yes there's a failure of information somewhere and people that fall through the cracks should be able to find their way out again, but the root of the problem stems from publicly vilifying people and actions that should be legal. Regulating all drugs like cigarettes, for example, would make it so they wouldn't have to get grade E stuff from some alley, we'd stop imprisoning people that may just need help and we could have discussions in the open about abuse. Privately vilify all you want, but the government should be mute on people's preferences as long as they are capable of making decisions, there's mandatory information disclosure surrounding dangerous drugs and companies can't lie about what they're selling.
Heroine for better or worse is a product that people are willing to go far out of their way to purchase and that goes for nearly all drugs. I would never do it and I believe if you made it legal, most people not doing it today wouldn't pick it up. We really need to get the idea that legal === government endorsement out of our heads.
We do things because the pros of doing them outweigh the cons of not doing them. Information around drugs, proper, honest and often, deters dangerous adoption.
Fiber will be a dumb pipe company until it serves Alphabet's interests that it not be. Right now market adoption and growth is more important than trying to capitalize on their users in creative ways. Look at Chrome for example, adoption was the name of the game for years and then suddenly your browser now has an, arguably opt-in, superpower where it can send analytics back itself on sites you visit. It's not crazy to think that could happen to fiber sometime down the line.
I feel the municipal internet infrastructure should be publicly owned, like streets, but service on those pipes is carried by competing companies. These turf wars are getting old.