For those that want more security:

https://simplex.chat/

That’s not the flex you think it is.

Your preoccupation with image here hurts you more than it helps you.

I recommend https://simplex.chat/

I agree, but I have concerns about accessibility.

I wouldn’t trust windows to follow their don’t screenshot API, whether out of ignorance or malice.

There is an argument for that to an extent.

Microsoft’s support of Israel’s genocide is an exception and has been a long time.

At least… for anyone with a modicum of ethics.

Or https://simplex.chat/ where there are no identifiers like phone numbers or any other identifier.

Security review was done by trail of bits.

If the goal is more publicity rather than the aid that had a low chance of making it through, it is very smart to have a world famous influencer aboard.

Why do you assume she endangered the others rather than they chose to take a calculated risk?

Sounds like endorsement to me.

You are so right. We should just leave it be and make no noise.

The Rust code isn’t closed source, but I’d strongly prefer a coreutils replacement to use GPL over MIT as well.

Already fixed, in software that’s existed for years and is used by millions. But Oh no, memory issues, let’s rewrite that in ! will surely result in a better outcome.

Rsync is great software, but the C language fates it to keep having memory issues in spite of its skilled developers.

Preventing a bug from being possible > fixing a bug.

I fear moving away from GPL that moving to Rust seems to bring, but Rust does fix real memory issues.

Take the recent rsync vulnerabilities for example.

https://www.cyberciti.biz/linux-news/cve-2024-12084-rsyn-security-urgent-update-needed-on-unix-bsd-systems/#more-2215

At least this one in a Rust implementation of rsync would have very likely been avoided:

CVE-2024-12085 – A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time. Info Leak via uninitialized Stack contents defeats ASLR.

I would love this news if it didn’t move away from the GPL.

Mass move to MIT is just empowering enshittification by greedy companies.

Sadly I found out yesterday:

Matrix is not a community-based software, it was born [00] in Amdocs [01], a multinational corporation founded in Israel.

https://hackea.org/notas/matrix.html

Many were claiming its impossible to get contributions merged as well.

I would be happy to find out this information is wrong or outdated.

Why not avoid amazon completely or as much as possible?

You can’t export your MFA? Aegis for example allows this.

You shouldn’t trust TurboTax so much.

https://www.washingtonpost.com/technology/2024/03/01/turbotax-privacy-tax-return-2024/

They also keep trying to trick you into giving consent:

https://www.moneytalksnews.com/are-turbotax-and-hr-block-sharing-your-personal-info/

They also lobby to keep taxes complex.

https://www.propublica.org/article/inside-turbotax-20-year-fight-to-stop-americans-from-filing-their-taxes-for-free

You use Simplex over Signal for improved privacy and no identifiers, not Matrix.

Signal is still very good though.

https://devenv.sh/

Note this also builds oci compatible containers you can run with podman, kubernetes, etc.

It lets you develop on bare metal in an environment the same as the docker container and is reproducible rather than just repeatable.