31–40 of 68 posts
What stops attackers from poisoning the DHT? Could one publish false name IP address associations?
Edit: You could also get the IPs of all the people trying to contact the target.
> respects freedoms and privacy of its users
It downloads the binary over http on http://ring.cx, makes it susceptible to tampering. Is serving binaries over HTTP a GNU thing because the expectation is that you would check the signature?
* Lack of full forward secrecy means logged network logs can be decrypted in the future if an endpoint key is ever compromised.
* e2e encryption is optional, due to legacy SIP support. This is extremely dangerous as it will no doubt lead to false sense of security, with users assuming they're safe just because Ring is the program they're talking through.
Due to these two I cannot actually recommend it to anyone.
Note that Tox got these two right, and is a pretty active project which gets commits semi-daily, regardless of the nonsense about it being dead that some party seems to be spreading.
What's the advantage of being a GNU project these days? It seems like it ties you very strongly to the FSF's political opinions and in particular Richard Stallman's political opinions (e.g., eugenics) and restricts your technical decision-making options (e.g., limited plugin architecture, limited support for non-free OSes, mandatory support for things like GNUTLS), while not giving you very much in return - with the…
Earlier quoted context omitted.
> What's the advantage of being a GNU project these days? I can't think of anything. > and in particular Richard Stallman's political opinions (e.g., eugenics) Utter nonsense. Being part of GNU doesn't imply agreeing with every word Stallman utters on any topic. > restricts your technical decision-making options Very real (see gcc and frontend/backend separation) and a very good reason to stay away.
Over half an hour before you posted, a project maintainer directly contradicted your post under this thread. The technical decision-making are made by the maintainers, not by the GNU project. Did you just miss davexunit post?
What good is reading his post when you can see how core GNU projects are actually run?
Little bit off-topic but: > respects freedoms and privacy of its users It downloads the binary over http on http://ring.cx , makes it susceptible to tampering. Is serving binaries over HTTP a GNU thing because the expectation is that you would check the signature?
Earlier quoted context omitted.
Over half an hour before you posted, a project maintainer directly contradicted your post under this thread. The technical decision-making are made by the maintainers, not by the GNU project. Did you just miss davexunit post?
I know he said things, but I also know the gcc frontend/backend hard wall is very real, entirely political, and is very frustrating. What good is reading his post when you can see how core GNU projects are actually run?
This is not news to me, but its the maintainer of a project that decide over their project. Its like how the CEO of Microsoft do not control what Apple do, nor vice verse. Two projects with different people in charge, makes different decision, and has different priorities.
The good thing about reading other posts is that you might realize that not every project is run the same way. If you have an axe to grind with GCC over their priorities, maybe you should try convince them that your priorities are more important than theirs, rather than complain in a HN thread that has nothing to do with having proprietary compiler modifications to GCC.
What's the advantage of being a GNU project these days? It seems like it ties you very strongly to the FSF's political opinions and in particular Richard Stallman's political opinions (e.g., eugenics) and restricts your technical decision-making options (e.g., limited plugin architecture, limited support for non-free OSes, mandatory support for things like GNUTLS), while not giving you very much in return - with the…
>> limited support for non-free OSes Some believe that's not necessary a bad thing.