KeepassXC is encrypted locally with no public servers :)

Are there really people out there not using a password manager in current year?

Doubly so on federated platforms, though. Your ability to delete your posts, toots, and even DMs is at the mercy of other servers deciding to respect delete requests or ignore them. Not to mention completely invisible non-public nodes that are probably definitely as we speak hoovering up all data.

Nice, I might try this setup.

Nice try, Apple /j

On one hand, those posts were way out of line as a professional representative of a company talking to one of their employer’s clients.

On the other hand, fuck Nic Chiallan for repeatedly threatening legitimate critics of the US Government with “DoD Lawyers” for using their protected first amendment rights. That’s actual government tyranny, or at least a pathetic attempt at such.

A single “entire” instance being ruined is a much smaller problem than a whole platform.

As for the duplicate community problem, I would love to see either a multi-reddit-like feature or the ability to merge/co-mingle “duplicate” communities across instances.

The solution to tyrannical mods or admins is simple: “take your ball and go home” by starting your own instance, or your own community on a separate instance. That said, instances and communities grow by growing trust between users and mods/admins by a track record of acting in a rational and trustworthy way.

Privacy is definitely a problem for Lemmy. You should assume everything you post or comment is public and in the open, and impossible to fully delete, because it is. Post accordingly. You could theoretically be identified by the sum total of all personally identifying information you freely post over a long enough time or by your writing style if a government considered you a real threat.

That said, many instances do not even require an email address. I don’t know whether instances store data like IP addresses, but you could check the lemmy source code to find out.

Edit: But also, who’s to say their server source code is unaltered? Federation lives and dies by trust and mutual cooperation, and that cannot be guaranteed.

I bet a lot of people got really butthurt about that building, but I think it’s amazing.

Alleged rioters!

I don’t want my VPN provided by spooky Microsoft and attached to my Microsoft account.

What’s your favorite color? I’d have to go with cherry red, but white is also tempting.

That information is easily found with a web search, so there is no need to cast aspersions. It’s funded by Brian Acton’s “activist” funding (interest-free loans of $100 million+ total to Signal Foundation over the years). I’d guess Acton used it as a huge tax write-off the year he sold WhatsApp to Facebook.

Other revenue sources include voluntary user donations and grants from many free press organizations whose members rely on Signal. Some years they report positive net income, and other years they report negative.

Signal Foundation tax forms, which list all general revenue sources: https://projects.propublica.org/nonprofits/organizations/824506840

What Signal says about how they operate: https://signal.org/blog/signal-foundation/ https://signalfoundation.org/en/

Signal Privacy Policy: https://signal.org/legal/#privacy-policy

All the code, including what runs on their servers and in their apps, so you don’t need to take their word for anything. You can compile the signal client from source if you like: https://github.com/signalapp

Article which talks about their audit history (this is their weakest point. The full results of the audits Signal paid for were never published): https://restoreprivacy.com/secure-encrypted-messaging-apps/signal/

However, anybody can check for any spooky stuff in their code, so I doubt they would purposely try to hide anything untoward there.

If you burn yourself out on organizing, you won’t be any more use to whatever movement you’re working towards. So in a way, working in a way that is sustainable to continue indefinitely is the best you can do.

I haven’t liked Brave search results in general lately. SearxNG is pretty good and Duckduckgo as well.

It kind of doesn’t matter… That’s the beauty of fully auditable open source end to end encryption.

Basically, it makes the whole platform less secure because you could accidentally send a non-encrypted message at any time. With SMS-free Signal, at least mistaken sent messages are still E2E encrypted.

Is their goal to become the new de-facto messaging app? Or is their goal to become the most secure messaging app for whistle blowers, etc for whom a single mistake could mean losing their life or their freedom?

That’s a little reductive… Lemmy Admins are users as well. And any bug reports or feedback you provide is implemented to improve Lemmy, which we all benefit from.

It’s much worse, actually. Twitter API has been dead for months by exorbitant costs, but TweetDeck is a first-party feature! Twitter is a joke.

Especially rate-limiting your users that love Twitter enough to pay for it. If I were paying for Twitter (I deactivated last year), that would be the last straw for me. Imagine paying for a service, for example Spotify, but you still only get to use it for 4 hours per day.

Until recently, Linux didn’t differentiate between E Cores and P Cores on Intel CPUs. I think there are some efforts underway to implement a “linux hybrid scheduler,” but it isn’t fully optimized by any means. In reality, Linux still often has better battery life due to not being spyware, not updating without being asked, and some very clever battery saving CLI programs available.