kravietz 🦇 @kravietz@social.privacytools.io

(cont.)
3. startup makes a horrible business decision or gets bought up by someone onerous; it's inevitable, it's a startup.
4. everybody's shocked, shocked™, but still go with "using it for non-sensitive stuff, too late to move on"
5. rinse, repeat.

Do you know why we don't get a proper, decentralized, easy to use software solutions? This is why. Because we keep letting shitty startups crowd out the good projects.

(cont.)

(cont.)

Security is hard. Decentralization is hard. Usability is hard.

Being first to market is *easier* if you drop some, or most, of these.

So, shitty startups get to market first, and then crowd out the decent-but-necessarily-slower projects.

Every time you recommend a tool that follows this pattern of abuse, you are enabling it. You, personally, become a part of the problem. You, personally, help a shitty startup crowd out a decent project.

(cont.)

“Can I trust app X?”

Can you trust the company/organisation/people who make it? (What have they done in the past/are doing now?)

Can you trust their business model? (How/when do they make money?)

Is it open source?

Is it decentralised?

If yes to all, yes. Otherwise no.

I made cinnamon rolls with my sister a couple of days ago. Went a bit crazy with the frosting, but they turned out really good! #foodporn

RIGHT!!! Riot has turned on End-to-End Encryption by default for all private conversations, and Cross-Signing device verification has landed and is live (and 🤞 performant!) 🎉🎉🎉 Huge amounts of work went into this: https://matrix.org/blog/2020/05/06/cross-signing-and-end-to-end-encryption-by-default-is-here has the overview.

never underestimate the inscrutable Chinese

If you didn't notice: There is a 1.6.0 release of Riot on its way to Flathub :)

Riot 1.6.0 bring the new and shiny cross-signing features. Means you get TOFU now, can cross-sign your devices and users, which allows easy to transfer trust between all your matrix sessions.

Just make sure you use RiotX on Android in order to have all devices compatible :)

#matrix #riot #crossSigning #infosec #trust #flatpak #flathub

In order to match the annual lobbying spending of Amazon, 1.6 million American citizens would have to give $10 (not to mention come to an agreement on how to spend it).

For comparison, there are 10 people on Amazon's board of directors, and many of them make their own substantial political contributions besides.