@demesisx@infosec.pub
@demesisx@infosec.pub avatar

demesisx

@demesisx@infosec.pub

Plutus, Haskell, Nix, Purescript, Swift/Kotlin. laser-focused on FP: formality, purity, and totality; repulsed by pragmatic, unsafe, “move fast and break things” approaches

AC24 1DE5 AE92 3B37 E584 02BA AAF9 795E 393B 4DA0

This profile is from a federated server and may be incomplete. Browse more on the original instance.

demesisx,
@demesisx@infosec.pub avatar

Colin Furze takes oil money.

demesisx,
@demesisx@infosec.pub avatar

Godcunt: the dickening

Proton Mail CEO Calls New Address Verification Feature 'Blockchain in a Very Pure Form' (tech.slashdot.org)

Proton Mail, the leading privacy-focused email service, is making its first foray into blockchain technology with Key Transparency, which will allow users to verify email addresses. From a report: In an interview with Fortune, CEO and founder Andy Yen made clear that although the new feature uses blockchain, the key technology...

demesisx, (edited )
@demesisx@infosec.pub avatar

What does Monera do?

it is a crypto currency that:

Monero uses three different privacy technologies: ring signatures, ring confidential transactions (RingCT), and stealth addresses. These hide the sender, amount, and receiver in the transaction, respectively. All transactions on the network are private by mandate; there is no way to accidentally send a transparent transaction. This feature is exclusive to Monero. You do not need to trust anyone else with your privacy.

IMO, as a software engineer, leveraging the network effect of Monero was a wise choice. In decentralized systems, the network effect (the amount of unique, separate nodes on a network) is directly correlated to the security of that network. If I were to transact with you in a public place (like a mall food court), you could correlate the presence of other parties in the food court as unique nodes in a network. The more eyes you have witnessing you transaction, the more intrinsic security that transaction has.

Another concept that actually comes into play in cryptocurrency-based systems is that the intrinsic value of that token directly relates to the security of the data in its network. That could be another reason that they chose Monero. Since it already has stable value, it offers a pre-existing and stable security solution.

demesisx, (edited )
@demesisx@infosec.pub avatar

Thanks for lazily puking a couple of reductive, bankster-funded, cherry-picked, neolib rage-bait videos at me. Did you want to discuss this issue or do you want to lazily let the videos do it for you while forcing me to write essays that will be brigaded by the hivemind?

demesisx,
@demesisx@infosec.pub avatar

I have yet to see a software system that is better at preventing voter fraud than humans looking at your government-issued ID at a poll site and humans overseeing other humans manually counting votes.

have you seen any of the research that the US government did on it? Homomorphic encryption enables votes to be both public and obfuscated at the same time. I don’t want to write an essay right now but are you truly up to date on this?

Our current system is by far not a perfect one but removing the ability for governments to i.e. freeze accounts of bad actors is not a boon.

I COMPLETELY DISAGREE. It should be exactly as hard as it is to freeze the cash of bad actors. That’s the point of it. I, of course, happen to be a libertarian socialist/anarcho syndicalist. You happen to be a capitalist. You seem to want be in the camp of “you will own nothing and you will like it” but I just so happen to not trust governments and their decisions. I believe in socialism but have seen it co-opted and destroyed by corruption. Anyway, I don’t think that those same clearly corrupted governments should have the unilateral right to prevent me from attemtpting to claw enough back from their corruption and greed to feed my family.

demesisx, (edited )
@demesisx@infosec.pub avatar

I could be wrong (since article is paywalled) but as a DApp dev, Proton probably has a wallet with enough Monero to run this smart contract without anyone needing to add any money at all. So you wouldn’t be getting a Monero wallet in it. It would simply mint an NFT that you could then refer back to for verification that this is the same address that I say it is. It would simply leverage the monero chain every time an account was created and mint that as a unique ID (NFT!).

demesisx,
@demesisx@infosec.pub avatar

If you dislike corruption and capitalists, then why do you like cryptocurrency?

Because properly-implemented cryptocurrencies make corruption impossible. Even the shitty, scammy FTX project had a decentralized ledger, allowing the FTC to quickly and easily forensically untangle SBF’s tangled web of lies and fraud. Even Do Kwan’s TerraLuna hack would have been possible to detect had the project been open source (like any viable crypto project) but regardless of that, it will still now be quite trivial for the regulators prosecuting him and his co-conspirators with fraud.

More learning for those listening in that haven’t already made up their mind like you have: youtu.be/J5xegDJphvc?si=x3tJw9s1c1WL_WNy

demesisx,
@demesisx@infosec.pub avatar

It’s interesting that you can identify cherry-picking on my part but fail to identify it on your own. I merely mentioned situations where fraud (which I didn’t fall for because I follow certain principles about transparency and auditability of the crypto technologies that I prefer) was easily detected because the nature of the technology puts all transactions on an immutable ledger.

What valid criticisms of THE TECH have you offered so far? You’ve simply pointed to situations where stupid people failed to protect themselves from clear frauds then went and used that brush to paint the entire crypto space. You’re not really the intellectual heavyweight you seem to think you are.

demesisx, (edited )
@demesisx@infosec.pub avatar

This video only mentions ERC-20 tokens as NFT’s. Are you so ignorant that you don’t realize that Ethereum is not the only crypto currency project? Do you realize that many projects have entirely different tech stacks? Actually, if you wanted to, you could go through my history and find me criticizing Ethereum’s badly flawed accounts model at least 20 times.

I’m not wasting any more time trying to have an intellectually honest debate with a person that blindly writes off an entire class of technologies yet doesn’t even understand beginner level things about it.

demesisx, (edited )
@demesisx@infosec.pub avatar

“You drink water and breathe air. Peter Thiel drinks water and breathes air too. Therefore you are just like Peter Thiel!”

You’re a troll. I literally hate Peter Thiel. He is invested in so many technologies that it’s VERY likely that we’re invested in the same tech somewhere. Pretty sure he doesn’t give a shit about Cardano which is the project I develop applications for.

Spreading your investments out is kind of how investing works when someone is a billionaire, dipshit.

Anyway, that’s enough feeding the trolls for today. Have a good night, intellectually dishonest hiveminder.

demesisx, (edited )
@demesisx@infosec.pub avatar

Here’s some easy ways to spot fraud in a crypto project:

  • not open source
  • not decentralized
  • anonymous team (not always a sign of sketchiness)
  • the crypto is locked in someone else’s wallet (not your keys, not your crypto)
  • promises of ROI that are too good to be true (like TerraLunas 20% guaranteed return or the unsustainably high return promised by FTX)
  • not formally verified
  • an actual use-case rather than leveraging buzz-words to sell a utility token (looking at you IOTA and AGIX)
  • initial token allocation is all insiders (Ergo had one of the fairest launches in the whole space, for example so I’d be shocked to see that one be a pump and dump)

I didn’t predict the failure of FTX or TerraLuna but they also didn’t smell right to me because they ticked MANY of the warning boxes above. I’m fairly centered around Cardano ecosystem projects but even in that ecosystem there’s bound to be some fraud. I protect myself by sticking to my gut feeling and using that small checklist. I have yet to be defrauded and I’ve been investing the space since 2017. It’s not hard and I am not Nostradamus but thanks for the compliment.

demesisx,
@demesisx@infosec.pub avatar

Nice. He recognized a good technology. You sound SO stupid.

demesisx, (edited )
@demesisx@infosec.pub avatar

I’d absolutely use this. I’m glad to see people using this incredibly powerful concept to solve problems that would literally be impossible to solve without it. It is especially encouraging that they used Monero since it has an extra layer of untraceability built-in. Blockchain is experiencing kind of a backlash in public perception, but like tech closely related to it like NFT’s, it is a VERY viable idea that just so happens to be tainted by greed and disinformation.

Voting is another concept that would become unhackable overnight…but would also probably:

A. enable the creation of a CBDC (which would also allow the state to REVOKE ownership of your own money)

B. force a state to pick a technology/crypto of choice (and tip the scales toward that crypto)

both of which I somehow am vehemently against yet moderate a (ghosty) community on blockchain voting. 😅

!blockchainvoting

demesisx,
@demesisx@infosec.pub avatar

It’s funny when you pretend that each of those weren’t 100% coordinated by the DNC to prevent Bernie from winning a bunch of states and perhaps the presidency.

Spending a few days with Hyprland made me realize how awesome Gnome is

Don’t get me wrong. Hyprland is great. I like it a lot. It looks fresh, it’s easy to configure and the keybindings are super easy to implement, but it’s also very barebones. Most of the functionality expected from a DE come from external software. Be it a top bar, an app launcher, a notification daemon or anything else....

demesisx, (edited )
@demesisx@infosec.pub avatar

I use xmonad as my main WM, so Hyprland would be a very easy transition. I would have switched by now but I just love Haskell

so much.

I’m not talented enough to port Hyprland to Haskell (at least the configuration aspect) but I wish someone wanted to do that. What I like about xmonad is that its core is actually formally verified.

I use Arch BTW. jk

demesisx,
@demesisx@infosec.pub avatar

I wish you luck… but honestly, it sounds like a lot of painful steps to get the exact same thing that a solid config flake in NixOS would get you.

I use NixOS btw. ;)

What's an alternative to Spotify that doesn't play you the same fucking songs over and over?

I am in an intense love-hate relationship with Spotify. It makes good mixes for me, I have found a lot of great bands that way. BUT IT KEEPS REGURGITATING THE SAME SONGS IN THERE. I know about Song Radios and Artist Radios, so please don’t recommend those. Smart Shuttle doesn’t cut it, either....

demesisx,
@demesisx@infosec.pub avatar

I disagree entirely.

I used the free trial. The algorithm was a whole lot shittier than spotify’s recommendations. It had the same annoying vibe as the regular youtube algo where if you watch one video from Jordan Peterson, you suddenly inherit the feed of an Elon Musk worshipping alt right tech bro.

It was the same for music. I listened to one song as a joke then it stopped recommending good music and just made my whole feed into joke songs. Much like youtube’s algorithm, youtube music algo clearly uses google’s machnine learning tech (which they use for ads too) where it tries so hard to predict what you like without real data, instead preferring to use solely other people’s browsing habits rather than creating a unique profile for that user without it making too many assumptions right off the bat. Perhaps, I’d describe that algorithm as “HIGHLY reductive” when compared to any other recommendatiion algorithm which seem more geared toward slowly discovering the tastes of its users.

demesisx, (edited )
@demesisx@infosec.pub avatar

Yes. He also helped create RSS which is basically where content needs to be moving. He had exactly the same principles in mind as Lemmy/Mastodon creators and would have been a vocal opponent of what Reddit became. I mean, perhaps he could have eventually been corrupted, but judging by his record of hacktivism, he probably would have become a “problem” for the powers that seek to control/centralize, advertise to, and study our browsing habits.

demesisx,
@demesisx@infosec.pub avatar

Aaron would be appalled at the state of the world of today if he, like so many brave, selfless defenders of human rights, hadn’t been murdered by the capitalist cadres of yesterday.

demesisx,
@demesisx@infosec.pub avatar

NixOS VM’s.

demesisx,
@demesisx@infosec.pub avatar

Is this article (and the many sources I see confirming it) inaccurate then?

www.theregister.com/AMP/…/linux_kernel_email/

I’m happy to be wrong if you have any evidence to refute what I’ve written.

Ps. I’m talking about the kernel.

demesisx,
@demesisx@infosec.pub avatar

Thanks for the insight. I’ll edit my comment to point to yours.

demesisx,
@demesisx@infosec.pub avatar

I, for one, was quite ignorant of that fact.

demesisx, (edited )
@demesisx@infosec.pub avatar

Edit: my below comment was actually wrong. They actually do use git.

Thanks for sharing. What I find most interesting is that Linus is still using the same email-based software development methods for the kernel while the rest of the software engineering world has evolved to use his other invention, git, for that. I’m kind of second-hand embarrassed for those geniuses who have yet to adopt proper version control for (what I’d argue is) the most important project in the computing world.

Here’s a far more nuanced explanation from Spore’s reply to this comment :

Git and Email are not mutually exclusive. In order to collaborate with git, you need and only need a way to send your commits to others. Commits can be formatted as plain-text files and sent through emails. That is how git has been used by its author from literally the first release of it.

demesisx, (edited )
@demesisx@infosec.pub avatar

I like to repurpose that argument and leverage it to argue that sectors that are essential to basic human needs (food, shelter, education, healthcare, infrastructure, utilities including the internet) have no other option than to be socialized. If a sector is properly socialized, they wouldn’t even have the option of being corrupted by profit motives that seek to create artificial scarcity around and withhold goods and services that would otherwise keep a society functioning in a sustainable way.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • localhost
  • All magazines
    •
    Loading…
    Loading the web debug toolbar…
    Attempt #