CHEFKOCH

CHEFKOCH, 2 years ago

Nonsense video, underlying problem is monopolies and private companies who develop the standards, not what browser you use.

If the standards are fully open, transparent and not concerning then it would make no difference if you use chrome and firefox because everyone would use same basis.

Also chromium team is not purchased or owned by Google, most volunteers are normal people, developers or security researchers that code on it in their free time. You can fork, modify the source as you please but that does not change the argumentation about web standards and how build or control them.

CHEFKOCH, 2 years ago

Huge leak, not mention in the press.

CHEFKOCH, 2 years ago

Are there plans to support BAT for donations, I already asked in chat but got no answer. I would like to use BAT because the system is trusted, and I can contribute monthly very easily trough my Browser.

Right now the domain is not verified, so I am asking in the hope to see more people auto-contributing.

https://lemmy.ml/pictrs/image/fcfa3234-8f68-4199-b2ce-3e9443e643d1.png

THX for your answer.

CHEFKOCH, 2 years ago

Please give…

• Nazis
• People who spread right-winged ideology
• Conspiracy people
• Pedos

… never a voice on Lemmy.

Such people and groups abuse platforms to win new people for their purposes or to confuse, lie and deceive others.

Thanks for reaction so fast in this case btw.

CHEFKOCH, 2 years ago

We have already systems to notify users.

• Most IT Professionals are aware that Kerberos, SMB and Co. is a hole for issues, it is nothing new to them.
• We have social media, Reddit or your linked HN Website, what makes you think people are faster submitting new stuff to GitHub, well there is no difference, if you post it on Twitter, GitHub or what, people need to find that first.
• We already have CVE databases you can look up for years.
• On huge events, even TV news will do.
• People exploit the moment the ghost is out of the bottle, it is all about preventation as well as management. News alone is not enough.
• Notify users about each new attack and leak will result that people care less because they feel helpless and think ... oh okay, just another daily attack.
• Log4j was over-hyped, like most things, most software that normal people use like Browser were never affected, using a hyped problem as example how slow something is, is seriously no real argument because IT-Professionals need time to review the findings before coming to conclusions.
• High reputation software such as Thunderbird are less to be affected, because they patch things first, they have huge user-base. You see this in every changelog when they fix security issues.
• Saying that SMS or what is maybe expensive is weird, if you target professionals, no professional will reg via SMS or in other words his phone number. Typical use case is RSS which is cheap.
• There are 0-days sold on the black market that are being used for months, you never hear from them and they have much bigger impact, usually because people who code them keep their source closed or even if they sell them, people have no interest to pay a lot of money and then leak it for free to the public, in most scenarios, there are white-hats of course, they abuse it. The argumentation that just because something is out for hours is unprofessional. Google, MS etc. have disclose time between 60 and 90 DAYS before they do something.

I like that you try to do something, but it would be better joining existent solutions instead of creating another services that might vanish into the void like half of the rest who tried. GitHub is also pretty unchill regarding malware, if you post something that can directly used to exploit GitHub or others, they will close your repo without any warning in advance.

If your target are admins then consider making this more clear, otherwise people will use this information and use it to exploit others.

Bugalert does not look so hot ...

https://lemmy.ml/pictrs/image/2ee456b2-92ef-472d-a61e-120769d3814d.png

CHEFKOCH, 2 years ago

• Title is clickbait.
• People only upvote it because admin posted it, that is all.
• Web is not controlled by larger companies only, they might be the ones with most impact, true but they do not dictate what you should do. Face it, most people believe everything Microsoft, Google telling them no matter if it is right or wrong because they think big Corps have more credibility.
• We have dozens of articles like this already, why write another one … What have you done to make things better… Why not list organizations like EFF who fight for us or help them to get more attention.
• Saying things like - we cannot do much about it - without even trying to provide some solution is seriously the wrong way to motivate readers.
• Even domain name is based and redpilled.
• Echo chambering the same over and over again helps how … People will give up an feel helpless.

Here is what people could do

• Support small platforms like Lemmy, Fediverse in general.
• Support actual organization that fight for you, such as EFF.
• Instead of whining that web is miserable, I read this nonsense since 20+ years now, each year new clickbait … oh adblock destroys the web, oh Microsoft destroys the web, web is broken … Blah blah blah. Provide some serious solutions, because this is what will consume Brain power here. Some people actually did, created crypto and other systems that are not controlled by the big Corpos or the government.

My opinion on the submission and Tech + Web, not meant to offend but my little review on this.