_e21c
Joined 8 years ago
Joined 8 years ago
https://www.theverge.com/2019/7/12/20691957/mastodon-decentr...
ofc there is that whole discussion about whether open sourcing actually affects application security, having your security model assume that attackers already have access to the source code, etc. Not to mention it looks like they did make quite extensive modifications on top of the mastodon code. Some of the code that people have discovered lying around in the gab codebase is really embarrassing.
On the one hand, there is nothing on a technical level that Signal can do beyond what they’ve already done (linked in the twitter thread, set a flag that the installed keyboard may or may not respect). Anything beyond this is venturing into providing a general computer security 101 course and/or telling you how your mobile OS permissions work and/or region-specific opsec advice. I’m not sure they’re equipped to do that or if they are even the right people to do that. They are a small team and they most definitely do not have somebody embedded in activism of any kind in the sinosphere, which I think is what it would take for them to actually responsibly give region specific opsec advice.
On the other hand, I think it may be quite reasonable for them to say, very clearly, “use your system IME to input text”. It’s a very simple guideline with reasoning that I think can be understood easily by most people. They have a privacy/security section in the FAQ on their site; something like this could go there.
But of course if they did that, they would have to keep managing expectations around how much to delve into the security model of every platform they run on, and how many resources they can reasonably dedicate to usage scenario support. Their mission and product and user requirements are really unique; I’d love to be a fly on the wall of a signal product management meeting lol
I’m basic and use my iOS system IME to text in chinese, but also I’m a basic overseas chinese. Maybe I’ll have to survey my friends and family for what keyboard they use...
https://mobile.twitter.com/ManiacalV/status/1345870405085573...
The bean dad attention led people to discover these additional tweets which are much worse than his questionable parenting judgement in that particular thread, and that’s what drove people to stop associating with him:
https://www.thewrap.com/bean-dad-deletes-twitter-account-ant...
TBH when I first saw that he got chased off twitter for the other tweets I did think it was going to be some cringe “edgy” humour attempt à la James Gunn. But that “white homeland” and “mud people” tweet is overt and not acceptable racism.