I like to code, garden and tinker

  • 0 Posts
  • 21 Comments
Joined 1 year ago
cake
Cake day: February 9th, 2024

help-circle



  • I do agree that human nature is a huge problem. For a utopian government, I do think that is fairly impossible at the moment. As you have said we will need some novel idea or technology, or human nature will have to evolve in some way (that could take a very long time though).

    As for citizens advocating for themselves, you seem to be thinking of peaceful ways to have a government that avoids becoming corrupt. While ideal, as we know humans are far from that and why eventually corruption turns to revolt if the needs of citizens are not met. I am not saying this will solve the issue either. As far as I can tell it just renews the cycle at best, or continues the corruption under a new group at worst. I only say this as technically this is a way citizens will eventually advocate for their rights if the government becomes too corrupt.

    As for the desires of laws for each individual citizen, this is essentially impossible as only very small groups will have ideals and values that are homogeneous. In a populace large enough, human nature will lead to conflicting ideas on which laws should exist and how governments should run. In democracies, this plays into the hands of people or organizations with nefarious political goals. These groups can exploit human nature to get citizens to focus emotionally on a small subset of policies and laws. This tactic can be very powerful in places that don’t regulate this kind of propaganda, such as the United States.

    I would argue this form of political propaganda being pushed by powerful groups that don’t represent the majority of citizens, towards citizens in other groups is one of the main cause of citizens being politically inactive. This creates biases and causes a lot of people to make decisions based on issues whose prevalence is artificially amplified. While that issue may be very important and should be advocated for, this should not be left to powerful groups or organizations that are not representative of the citizens. This also creates a ton of noise, making other issues that may directly affect or be advocated for by a large portion of the population to be obscured. All of this leads to information overload, fatigue, and complacency which leads to ignoring politics and possibly being politically inactive. I say possibly because people will still vote because it’s their civic duty but will be uninformed which can be even more dangerous than not participating in politics. This also turns politics into a sport based on what the current political “hot topic” is, which a lot of people don’t want to participate in and turns them away from being active politically.

    In my opinion, the best solution to get citizens politically active is the need to make politics less biased and present legislation and policies in a fairer fashion. This will not get every citizen involved, but it will encourage more unbiased and informed decisions which will further fight corruption. Politically active citizens can look at legislation and policy proposals and make the sometimes difficult decision of which is the best choice in the present moment. This should also help with “political fatigue” which can cause citizens to not participate. Of course some people will never vote (unless forced to by law), but the best we can do is try to make the process simpler and use less of peoples time and resources.

    All this being said, it will still be an uphill battle for democracies such as the United States to undo the influence of powerful groups in politics, and make their democracies fairer and more representative of the people. I wouldn’t say it’s impossible, but to do so peacefully will take a ton of perseverance, hard work, and most likely a bit of luck.


  • I would argue this is more an issue of when citizens get complacent and stop holding those who govern them accountable. This is when any form of government will eventually start turning to the corruption. Those in power can change the rules while citizens are going about their lives. It works even better if the citizens are too busy and stressed out to worry about “silly things like politics”.


  • The quotation marks did most of the lifting there, and it’s more of an anecdote of their own projections against themselves. They assume these “welfare queens” are driving around in high end cars and living luxurious lifestyles on the governments dollar, while they are the ones doing such. Sorry if there was any confusion. I agree with all the statements you have stated against Brett Farve though, they are the scum of the system they wish to project onto others.


  • Despite texts that show Favre sought to keep his receipt of the funds confidential, Favre has said he didn’t know the money came from federal funds intended for poor people. He’s paid the money back, but he’s being sued by the state of Mississippi for hundreds of thousands of dollars in interest that accrued on the money he received. Favre hasn’t been accused of any criminal wrongdoing.

    Source: (Yahoo News)

    So they could easily of have funded this themselves, but just rather steal public funds because “free money”? Sounds like a so called “welfare queen” to me.






  • The first quote is an great demonstration of using logical fallacies to sell a point, and I am glad the article breaks down the argument. Anyone using a loaded question such as:

    Is the goal of the Fediverse to be anti-corporate/anti-commercial, or to be pro-openness?

    Doesn’t fundamentally understand the fediverse. Almost every projects goal is supporting the decentralization of these technologies. To quote the website fediverse.to:

    The fediverse is a collection of community-owned, ad-free, decentralised, and privacy-centric social networks.

    Allowing a single entity with a larger and more dominate platform, more power in the legislatures of the world, and effectively infinite times more capital to come in destroys the decentralized nature. Meta also doesn’t stand for “community-owned”, “ad-free”, nor “privacy-centric”. Meta’s goal here is pretty obviously to centralize and control the networks as much as possible, and scrap the remaining data from other instances, using the ActivityPub protocol. Meta is a corporation who’s motives are to increase shareholder value. The fact these are community ran instances is like Walmart coming in to stomp out the local grocery.







  • There seems to be a lot of FUD going around with the defederation news. The problem, as most problems seem to currently be, is the population is exploding and the tooling isn’t there to support the real growth in numbers. Beehaw has been a community for quite a while, and they were just here first so have more established communities, you can’t blame them for that. They have every right to defederate instances, especially when their main concern is being able to moderate content for their users. Each instance serves their users first, other instances lack of user moderation shouldn’t be their problem. They said they’ll open back up once they can manage the moderation work load.

    As for the fragmentation, this is really how lemmy was designed to be. There is talks of adding federated community listings and community browsers to lemmy itself to support discovery. Really, these features just weren’t needed a couple weeks ago and now they are. In my opinion, the larger communities should have communities on multiple instances. You can cross-post across instance communities as well. Hopefully in the future the fragmentation can be fixed via the use of tags and other possible organizational tools that help federation but keeps things decentralized.

    The established instances have dominance due to the first-mover advantage, which is causing the centralization at present. Overall, the experience is going to be different to a lot of reddit users due to the very nature of decentralizing things. I feel confident solutions will be found for most of these issues, and make the federated experience easier to navigate while still supporting the decentralized nature. But the fact is, this isn’t and never will be "reddit’ as it was, which was a centralized system with a single authority (the ToS and admins).


  • Often is probably a bad way to phrase it, but there is a reason TLS certificates are changed regularly. Generally this isn’t a big concern if you are the sole user and a set of known devices are used. Once you start handing passwords to others to use (such as is common in corporate environments) the problems being to show. Resetting the password is just a sure fire way to revoke access to anyone that may of had access that shouldn’t, for whatever reason.

    You are correct though, that as long as the password isn’t being used on public terminals or in areas it might be compromised, it’s generally secure.


  • This seems like someone learned about key derivation functions and applied it to passwords. So with this system, it’s stateless and no passwords are stored (encrypted or not). You need 4 things to generate passwords:

    • Your full name
    • Spectre secret
    • Site Domain
    • Master password

    This seems counter intuitive to the stateless nature, since at least one (the spectre secret) will need to be stored somewhere. For UX the full name probably would also be stored, and the site domain can be gotten via some API on password use. This leaves the master password as the only portion not stored, and on “unlocking” the database it would probably be stored on the users device for a period of time.

    This also ignores some of the requirements of websites needing passwords (some support all characters, some only a-z0-9_, etc etc). If supported, this metadata would also need to be stored somewhere. The cons of not being able to change passwords is also a huge issue, as passwords should be changed often, or replaced with keys (which you also replace often!).

    For attackers, this seems not much different than a database file. In most cases, they’ll already know two of the 4 (site domain and full name, especially in corporate environments). This leaves only the spectre secret and the master password doing the heavy lifting of security. This sounds a lot like a traditional password manager, where you have a master password, a database file, and an optional key file.

    So the process to attack a traditional database system is to acquire the needed information (database file, master password/key file) and lookup the password (site domain/description). The process to attack spectre is to acquire the needed information (full name, secret, master password) and lookup the password (site domain/description). These have the same challenges of acquiring/brute forcing the master password and key file, and are essentially the same in the eyes of an attacker.

    Overall I think passkey’s will replace passwords, or something along that line. Keys have been used for a long time in security sensitive areas, can be swapped out easily and provide much more protection than a password when large enough.