321–330 of 486 posts
The latest, tone-deaf response from a Google engineer: https://github.com/RupertBenWiser/Web-Environment-Integrity/...
> I’m giving everyone a heads up that I’m limiting comments to contributors over the weekend so that I can try to take a breath away from GitHub. I will reopen them after the weekend
After the weekend - leaves long comment but doesn't reopen comments as promised.
Do you know what puzzles me most? How can software engineers work on something like this? Don't those paid engineers or involved ones have the balls or dignity to walk away? I'm just wondering how they would feel about this (if they feel anything at all). I mean, if I'd be in such a position and asked to push something like this I'd have walked away on the spot, no matter what you offer me. No one at Google is standi…
Earlier quoted context omitted.
But surely those folks can walk away and put in their CV that they quit because they were in charge of implementing one of the worst ideas the history of internet has seen so far. Wouldn't you hire someone that puts that in their resume?
those will walk away, others will come and to them money would be absolute motivator. If there's a thing humans can invent/implement, without any regulation, it'll be implemented (and often even with regulation it may be implemented)
Earlier quoted context omitted.
iirc remote attestation is reliant on hardware attestation, which means these websites will only run on authorized DRM-enforcing hardware and architectures. Only Intel, AMD, Qualcomm and the like. No open-source firmwares, architectures or hardware.
What attestation the website accepts entirely depends on the configuration. There's nothing in the spec that will prevent attestations for Linux computers. Linux already works perfectly fine with secure boot and such, I don't see why a signed bootloader starting a signed attestation engine wouldn't be trusted by third party websites. It'll kill open platforms like the rare open source RISC-V implementations, but for…
Earlier quoted context omitted.
those will walk away, others will come and to them money would be absolute motivator. If there's a thing humans can invent/implement, without any regulation, it'll be implemented (and often even with regulation it may be implemented)
If only there was some form of labor organizing that could allow workers to keep their job while collectively opposing building horrific things like this.
Do you know what puzzles me most? How can software engineers work on something like this? Don't those paid engineers or involved ones have the balls or dignity to walk away? I'm just wondering how they would feel about this (if they feel anything at all). I mean, if I'd be in such a position and asked to push something like this I'd have walked away on the spot, no matter what you offer me. No one at Google is standi…
Earlier quoted context omitted.
Mozilla should really double down on Mozilla VPN. Judging by all the NordVPN ads on every major youtuber's video, the profit margins must be astronomical (or their business model must be suspicious). It should provide a good income stream for Mozilla. The entire space is shady and filled with dubious actors. It is just begging to be disrupted by a trustworthy organization. I can't think of a single candidate other th…
Don't Mozilla just resell Mulvad?
This is very simple, really: Any browser that implements this, I will not use. So any webpage that requires that API to be present, I will not be able to use. If your webpage requires this, I will not be a user of your website. It is really that simple.
No doubt Wix is doing this for my own protection.
I can definitely see the majority of the web going in a similar direction.
I hate to say it, but if you used Chrome to read this, then you're part of the problem. Awful stuff like this wouldn't stand a chance if Google didn't have such a near-monopoly position. For the sake of the open internet, please switch to a different browser. IMO, Firefox is best*, but even something chromium based is probably fine. Just not Google Chrome. * On desktop - Firefox is a bit weaker on Android, with an ex…
This is very simple, really: Any browser that implements this, I will not use. So any webpage that requires that API to be present, I will not be able to use. If your webpage requires this, I will not be a user of your website. It is really that simple.