• 0 Posts
  • 200 Comments
Joined 1 year ago
cake
Cake day: June 30th, 2023

help-circle
  • It actually seems more like a windows 10 compatibility dilemma for developers. You can support older systems but it would require some effort. The problem is not the absence of some specific certificates, but the absence of newer ciphers altogether.

    This does give security but also removes backwards compatibility with some clients that might be important for some websites.


  • It’s barely anonymous, and poorly encrypted. The latter is the reason Durov is in custody

    There is no logic here. If it was poor it would be very easy to track anyone including criminals. You can check the news to find the reasons.

    There have absolutely been cases where a backdoor/weakness/lack of encryption used to catch criminals before

    I meant telegram related cases.

    Some are staying safe, others are being caught precisely because of this.

    I didn’t see any proofs of that.

    Using better encryption schemes is definitely part of that.

    Part of what? I don’t get the point here.


  • is not any different from just having TLS for transport

    Yes, in simple terms, all encrypted transfer protocols are similarly protected from mitm attacks.

    That just means that they store both your data in some encrypted way and the key. They can still read it trivially.

    They can and they said the decryption keys are always kept separately (there are probably more layers than I can describe) from the data to make sure the servers are not used to decrypt the data locally. They can be lying for all I care. The bigger problem is that people somehow assume this a huge threat, while all previous cases didn’t involve anything like that. People are getting into trouble for their public content - protected by some encryption but visible to anyone interested (who then report it to oppressive authorities).

    While some go extra mile to explain to you how you should use e2e for your family group chats, real criminals do their stuff everywhere (especially on telegram) for years, staying safe. Problem is not how weak or strong the encryption is, but that once you are under oppression and do opposition activities, you’re going to learn by yourself how to deal with it. Signal will not save you from people in your group chats if they are there to report on you.










  • I mean if they would produce a better UI by using their expertise, how would not becoming an expert in the new thing be better?

    I failed to understand the meaning of this sentence. It doesn’t make sense to me. Producing a better ui is not even on the table when we are talking ui frameworks and native programming - you use what’s available, and if you are a graphics designer then maybe you should’ve sticked to that instead. Becoming expert in native ui is super cool but I wouldn’t expect such miracles from everyone. Just producing a valid low level code is enough to meet my standards of performance. That’s because those standards were heavily affected by web frameworks existence.

    The reality is that the people paying the engineer are going to want the better UX

    And I hoped it would be customers who would pay for a software or a service who would send valid feedback.

    AI can assist you if you more-or-less know what you’re doing

    Assuming web devs creating apps don’t know what they’re doing?

    but a novice replacing proper learning with ChatGPT pairing is going to write some shitty code.

    Chances are that code would be much more optimized than anything electron/CEF wrapped.

    to actually be up to our code quality standards

    Quality standards are great. But seeing companies shipping fixes to simple CSS issues that were breaking some of main app functions made me realize most of them don’t care about quality standards. If that’s how it is and if there will still be a lot of broken stuff across app updates - might as well just go all the way to proper low level languages.