lightdot

What metric did Microsoft use to assess that VS Code users "expect" their commits to have unsolicited messages added to them?

> Obviously, it should not be on when disableAIFeatures is on and it should not be reporting changes that were not done by AI.

Did you discuss adding these messages with your legal department?

What is Microsoft's position on adding such authorship statements to the code Microsoft did not author?

Or is Microsoft stating that using LLM assistants makes Microsoft a co-author of the code?

Does Microsoft have copyright claims on the code if LLM assistants are used at any time during its creation?

"Tor Browser is based on Mozilla Firefox ESR (Extended Support Release) but has been heavily modified for use with the Tor network."

Those are direct quotes from their respective web pages. Neither of them has anything to do with Chromium.

Even if we skip a step ahead and consider that this script then installs a binary blob... the situation doesn't get any better, does it?

If you find any of this as something normal and acceptable, I can only strongly disagree. Such bad practices should be discouraged.

On the other hand, using a distro's package manager and a set of community approved packages is a far better choice when installing software, security vise. I really don't see how you could compare the two without plainly seeing the difference, from a security perspective.

As an alternative, if the software is not available through a distro's package manager, one should inspect and compile the code. This project provides the instructions to do so, they are just not promoted as a first choice.

I can't help coming to a conclusion, that you've largely made my point about bad practices and having a wrong mindset when it comes to software security.

Perhaps the reason it gets mentioned often is simply because it's a good piece of software. Then again, perhaps not!

In any case, I'd be careful about using 3rd party DNS (and other) services, but that's for the user to decide, depending on the situation one is in.

Using one's own resolver is always a good practice, even in countries where ISPs are not selling customer's private data to anyone that comes along and where governments don't monitor and repress their citizens on every step...

We live in strange times where even EU countries misuse resolvers to censor certain web pages, while, for example, independent Balkan countries do not. Go figure...

Yes, GNU/Linux distributions provide exactly that.

In this case, its painfully obvious.

Then assumptions such as "it's Signal's mission to provide private messaging in the face of government overreach" suddenly become very dubious.

"I was up at two this morning" has several implied meanings. One of them equals to "I was up until two last night", others do not.

If you were up until two last night, you might legitimately express that with "I was up at two this morning". But if you were up at two this morning, saying "I was up until two last night" might or might not convey the truth. For example, you might have just gotten up.

Many if not all languages have nuances like this. I don't find them particularly odd at all, or specific to English, for that matter...

Is there a credible source for this statement?