- cross-posted to:
- selfhosted@lemmy.world
- opensource@programming.dev
- cross-posted to:
- selfhosted@lemmy.world
- opensource@programming.dev
cross-posted from: https://programming.dev/post/28204065
You must log in or # to comment.
The Free Software projects in question: Tor, Let’s Encrypt, and F-Droid
Let’s Encrypt
God damn they literally just want to watch everything burn.
Cut off .gov domains
.gov is using let’s encrypt? That’s pathetic.
Theyre more likely paying godaddy thousands a year for each cert on domains that go back decades.
I did not knew that Tor was getting funded by the american state. Thats giving me some spooky vibes.
It was invented by the US Navy.
Well color me stupid color me gone.
… Except not using it would be less secure, so I’m not sure I’m following…
Don’t confuse TOR with security, you can get exposed to use the Onion without an additional encrytion layer or VPN. TOR cannot encrypt the traffic between an exit relay and the destination server.
Sure, like any security it operates in layers
Totally disagree that Tor does not address security. The loophole you mention is indeed well known, but again it’s an exploit like anything
And like any security thing, you stack a few layers to get the real world security
The TOR network is certainly pretty secure, but it’s always advisible to use it in the Onion not without an additional layer, at least with a good VPN. Anyway I think that the future is in a descentralized web (I2P, Hyphanet, Snowflake, Shadowsocks and similar), the normal Internet is to heavy controlled by big companies and govs.
More exactly by Defense and secret services
One theory is that Tor was opened to the public by the United States Naval Research Laboratory only to create a crowd of users for their agents to hide in. You need a large enough anonymity set for these sorts of technologies to work.
F me
Well, at least the one he used for thruth is safe (mastodon IIRC?)
Elections have consequences. I am no longer on speaking terms w/ trump voters.
I’m no longer on speaking terms with any voters
the enemy is both weak and strong
The appropriate sequence of events would be:
Trump starts tariffs > People switch to FOSS > Trump cuts funding to FOSS
This really isn’t double-speak and, if anything, clearly shows the hostility of the admin. They are just incompetent, short-sighted, and overall an enemy of the people.
Well it looks lime most of us are going to have to step up our donations foe the next few years
You will never approach the amount they receive from government funding. That is the point.
We’re going to have to try or potentially lose the project
Let me spell it out for you. Trump has removed our cyber defenses and now he’s defunding FOSS projects like Tor and Let’s Encrypt!…
Now Trump wouldn’t know a FOSS project from a hole in the ground but do you know who does? What world leader who has an entire cyber attack force on his payroll and wants to remove any barriers in finding dissidents who are probably using Tor to coordinate and hide from them?
Do the math. If the government funding of these projects is allowed to be removed it’s gonna be a whole new ballgame on the internet and the only ones to reap the benefits are the dictators.
Wait you guys were getting paid to work on open source?
the guy is literally a political front for techbros, it’s not like he would do something else.
Those mf build their empires on the back of open source.
Tech bros are only interested in getting the results from open source. They want the free software from their slaves, they aren’t interested in paying anything.
Tech companies, for a while, added a bit to open source as it was in their own self interest, but they still shut out everything that wasn’t them, they still make the internet in the horrible stonewalled garden that it is today. No account? Half the internet isn’t accessible to you anymore
Fuck all the big tech and social media companies
As far as Let’s Encrypt goes, the easy way to solve that is self-signed SSL certificates and Tofu. Just make it stupid obvious if an SSL certificate changes on a site that you go to. Like, turn your browser into a giant red screen that says that the security of the website has changed and may be broken obvious. Maybe you could have search engines also index SSL certificates so you could see if Google and Bing and DuckDuckGo and whoever else all say that this website has the same SSL certificate that it has had for X amount of time and if the search engines start showing different results you get suspicious.
Edit: Using self-signed certificates and tofu fits better with the decentralized ethos of the original web anyway since you’re not relying on some third-party authority to tell you what’s safe and what’s not.
i don’t think this is a good idea. govs could just set up a big reverse proxy for lots of sites to serve them with their own certs, and you wouldn’t know
Seems like no change from right now, because currently the certificate authorities are centralized entities, which could be pressured by governments to add their own certificates.
How about a Blockchain or Directed Acyclic Graph (DAG) out of SSL certs 🤔
I think that would finally be a use case for that tech, lol
A blockchain to verify ssl cert keys and changes may work. Though idk how consensus would be secured.
If you issue a certificate, you proof ownership via * challenge–response test that is validated by each node. If x% (like eg. 70%) of nodes agree that the test is passed, the block counts as validated and can be placed onto the chain. (Each node places the block on their chain and the hash must be same as hash of chain of majority of nodes)
Delta Chat was one of the FOSS projects affected: https://chaos.social/@delta/114211300446944585
This is terrible news, anyone know of alternatives to let’s encrypt?
they have more sponsors and won’t go broke because of this
HTTP works pretty well, if you don’t mind various governments spying on the traffic.
http://longeepsiteaddress.i2p. Bonus points for having an option for a human-readable domain as well.
But i2p doesnt have PoW DDOS protection. Trust me, that shit helps a fuckton for limiting ddos. I witnessed firsthand nine onion services that upgraded from not having DDOS protection to having DDOS protection while under attack and the attack completely stopped.
Edit: RetoSwap, a decentralized Monero exchange, has 9 onion seed nodes and they were being DDOSed to oblivion. As soon as they added PoW the attacks stopped and havent happened since. That was about 9 months ago now.
Edit: …a decentralized Monero exchange
There’s the Monero shilling I expect in every comment
Your welcome
Yeah, fair.
Make America great again
Trump needs that money for his big boy parade.
The solution to this is simple. A change to the MIT license to bar .gov projects to use the open source projects.
Why would making government more proprietary help?
These are FOSS projects, not open source. They’d no longer be FOSS and that would be bad. Freedom 0 is important.
Its possible to add free for all except US govt and that does not stop it from being free for the rest of the world.
That stops it from being Free, which is freedom 0. From GNU.org:
A program is free software if the program’s users have the four essential freedoms:
- The freedom to run the program as you wish, for any purpose (freedom 0).
- The freedom to study how the program works, and change it so it does your computing as you wish (freedom 1). Access to the source code is a precondition for this.
- The freedom to redistribute copies so you can help others (freedom 2).
- The freedom to distribute copies of your modified versions to others (freedom 3). By doing this you can give the whole community a chance to benefit from your changes. Access to the source code is a precondition for this.
A program is free software if it gives users adequately all of these freedoms. Otherwise, it is nonfree. While we can distinguish various nonfree distribution schemes in terms of how far they fall short of being free, we consider them all equally unethical.
What you’re talking about is changing Free software to be non-Free. No thanks.
Well, tbh. If its my last time being president, I would also burn everything to show how the country sucks an is irrepairable.
