dodgerdan

> "Most of AdGuard's staff relocated in 2022"

So a lot of your staff remain in Russia?

If you've still got most of your devs working in Russia, and it looks like that from your github projects, I'm not sure what part of the comment you responded to is not correct or misinformation.

The only downside I experienced with using Apple Lockdown Mode is that my apple watch wont vibrate or notify me of incoming phone-calls on my iPhone.

The police and famous actors occupy completely different roles in society and should be treated differently.

3. SVB’s assets. They actually have enough assets to pay, but it will take time for those bonds to mature.

Not really. If 5 or 6 more regional banks fail next week due to depositors seeking the safety of big banks there won’t be enough money to guarantee deposits for more banks.

If they didn’t guarantee the SVB depositors that outcome would have been almost guaranteed, the train wreck would have impacted de-risked companies too, because the entire regional banking system would implode.

Not acting now to stop contagion because of some idea of fairness is short sighted.

Are people going optimistic about the efforts to make Python faster?

Watching growing startups hire a junior data scientist to analyse their new mountain of data is very entertaining. One of their first findings is their revenue/growth seems to be dropping… “we need someone to focus on growth/revenue ASAP”. They hatch a plan, build a team and magically their growth starts to recover.

The issue was spotted in April/May, the building happens during the summer and is launched In September… I’ve watch this cycle happen so many times, I’ve given up trying to point out that the issue is just seasonality.

2+2=5. VC’s look super active right now because they’re fighting for a small number of solid investments. LP’s have turned off the money taps and fake investment marks no longer pay the bills. They need startups that will actually generate revenue, finding them requires a lot more work and thats what we’re seeing. Soon we’ll start to see broke B & C tier investment funds turn into zombies.

Then you can’t trust the FF code not to send a copy to their own servers also.

Trying and failing to understand the logic of this feature.

Everyone.

> The point is that if your threat model cares about interception, you have to verify the identity of users out of band - same as Signal or WhatsApp or whatever.

I’ve read your blog posts and this comment, congratulations it seems to have satisfied most people. Howerver it is NOT the same as Signal. Signal servers cannot just add a device to a group chat.

I would challenge you to get one reputable cryptographer to back what you’re claiming about these vulnerabilities and your proposed fixes.

To me Matrix isn’t secure, the organizations responses to these disclosures has been poor and the “fixes” weak.

To paraphrase another comment on this; if I have to trust the server for Matrix E2EE to work, why don’t I just use Slack? The whole point of E2EE is so you don’t have to trust the server.

And a “warning” that says something like “your group chat has been compromised by someone with access to the server or it might just be bob bought a new phone” is laughable as a status quo.

This is the issue distilled. And the retort seems to be “but we give a warning”.

Awfully weak stuff for a cypherpunk-ish protocol. The CCC crowd that rabidly hates anything centralised, thinks it’s insecure and corporate, are probably having a existential crisis. Matrix is doing a terrible job fixing the issues, worse they seem to downplaying and denying too. And the Tech press seem to dismiss the issue believing Matrixs’ claims there isn’t an issue.