281–290 of 410 posts
Earlier quoted context omitted.
A replacement for blur could just be black boxes. Seems easy and safe enough.
Make sure they are 100% opacity. A lot of people mess this up and use 90% opacity or similar and the original image can be revealed by messing with the color levels.
Really weird that nobody in the thread is pointing out that this is basically a website that says "give me your photos, specifically from protests, which have details that you want to keep private". It doesn't matter that it theoretically all happen in the browser. You can serve different versions to different IPs etc. Every heuristic in me would be screaming don't use that if I would have a need for such tool.
It's a static site running on GitHub pages, over HTTPS, directly out of a linked repo so you can examine the source code. I literally could not imagine a more transparent way to serve this application. The only way an attack vector is possible here is if you think GitHub themselves would maliciously inject an altered version of the code in the repo, and even then you'd be able to see the code and network requests in…
Just distribute the code for local execution? Sure, it's less accessable for the target audience, but it is more transparent.
But what else is new? Most users are willing to sacrifice privacy and security for convenience. That's how we got into this whole mess.
Really weird that nobody in the thread is pointing out that this is basically a website that says "give me your photos, specifically from protests, which have details that you want to keep private". It doesn't matter that it theoretically all happen in the browser. You can serve different versions to different IPs etc. Every heuristic in me would be screaming don't use that if I would have a need for such tool.
It's a simple static site with no server involved. Everything happens client side. You could turn off your internet while you're using it if you wanted to make sure no data is exposed.
Earlier quoted context omitted.
It's a static site running on GitHub pages, over HTTPS, directly out of a linked repo so you can examine the source code. I literally could not imagine a more transparent way to serve this application. The only way an attack vector is possible here is if you think GitHub themselves would maliciously inject an altered version of the code in the repo, and even then you'd be able to see the code and network requests in…
> I literally could not imagine a more transparent way to serve this application. Just distribute the code for local execution? Sure, it's less accessable for the target audience, but it is more transparent. But what else is new? Most users are willing to sacrifice privacy and security for convenience. That's how we got into this whole mess.
Really weird that nobody in the thread is pointing out that this is basically a website that says "give me your photos, specifically from protests, which have details that you want to keep private". It doesn't matter that it theoretically all happen in the browser. You can serve different versions to different IPs etc. Every heuristic in me would be screaming don't use that if I would have a need for such tool.
Can you imagine yourself being convinced somehow that this is safe to use? I've had similar ideas before that I ended up not pursuing precisely because I knew I couldn't find a way to convince people like you. See also https://haveibeenpwned.com/Passwords .
Really weird that nobody in the thread is pointing out that this is basically a website that says "give me your photos, specifically from protests, which have details that you want to keep private". It doesn't matter that it theoretically all happen in the browser. You can serve different versions to different IPs etc. Every heuristic in me would be screaming don't use that if I would have a need for such tool.
Earlier quoted context omitted.
Can you imagine yourself being convinced somehow that this is safe to use? I've had similar ideas before that I ended up not pursuing precisely because I knew I couldn't find a way to convince people like you. See also https://haveibeenpwned.com/Passwords .
haveibeenpwned is explicit about not entering passwords you use . If you want to check a password that you intend to use then download the database and check for yourself.
Earlier quoted context omitted.
The topic of the week is an extrajudicial murder committed by a team of four cops; where was our restraint in deciding the fate of George Floyd? Do these officers deserve nicer treatment than this system gave Floyd? Did Floyd deserve this treatment, too? If so, why didn't he get it?
George Floyd absolutely deserved the right treatment. He didn’t get it, and the perps should be brought to justice. Getting revenge for George’s injustice is not justice. It’s not what civilized society is built on. In the end, we were a society that protects even the murders and rapists and the worst of the worst offenders from extra-judicial revenge for their actions.
Earlier quoted context omitted.
What if you stop an EMT from checking the pulse of somebody who your co-worker has been choking to death for minutes? Does that make you an accomplice, too? If your city charged these cops justly then nobody would be burning it down; cure your disease and the symptoms will go away.
Yup, I'd love if we were able to be a unified front and collectively say the mayhem will not stop until all four involved are charged. And if they're not convicted... 1992 will look like a joke.
If they don't get convicted, will you be terrorizing only the jury, or do you plan on victimizing other innocent people too?
I sure hope you don't, but if you do get your wish please remember to have everyone print and sign their names on the petition/ransom note/demand letter. When choosing targets for arson just be aware it will take longer to comply if you burn down the courthouse(s).
Earlier quoted context omitted.
It's a simple static site with no server involved. Everything happens client side. You could turn off your internet while you're using it if you wanted to make sure no data is exposed.
For linux users you can "turn off" internet for a single program: https://news.ycombinator.com/item?id=21146655
https://chiselapp.com/user/rkeene/repository/bash-drop-netwo...