cryptarch

If it does not include an EULA, are you not allowed to use it? Does the same hold for computer games with an EULA?

Or does the existence of an an EULA hold your rights hostage until you agree to it?

I have "Status privacy" and "Last seen" set to no one, I assumed that included "If I am online right now".

I figure five eyes already had this information. I think they would have tools to decrypt all communications from any app, by using rooted phones that scan their own memory for common crypto libraries and then extract the keys.

On the initial run it would not know where to look, and the phone would be set up to go through a proxy that blocks all non-decryptable communications, to avoid detection. A profile would be extracted to quickly and silently extract the keys from the phone's memory and subsequently send them to the decrypting proxy.

Then on the second run, the phone would be wiped/reset and the decrypting/blocking proxy would attempt to decrypt the communications that are now extracted from the phone in real-time. The wipe functions to avoid detection (it makes it look like the phone is simply crashing). Perhaps the wipe would include changing some device ID's and the source IP.

Rinse, repeat until only decryptable signals leave the phone.

(Something similar could be done with stubbing the encryption code in memory and then "moving" it to the proxy.)

Either based on virtualization tools or on memory inspection. Or perhaps ring -1 based.

The kind of tool I wish every techy had, so they could easily discover what their apps are really doing.

I've seen footage, I stay noided, I've seen footage, I stay-

Edit: If you know of similar or related tooling, please let me know! I want this software.

All we need a web framework written in Rust which includes the generation of client-side code.

Paired with incremental compiles (yet to land in stable AFAIK) that should be pretty awesome.

Edit: nose

When friends want to use my desktop I change my DE to XFCE for a sec. I also still use the XFCE login screen (because it's easy to install, it works and you get per-user DE defaults).

When you have Intel wifi you'll have to enable the non-free repo, and that's about the extent of it.

Because "it's obvious in the case of China"?

There's a thing called "chilling effects". People stop talking about "risky" subjects because they know they can get prosecuted arbitrarily for it.

The gameplan is simple:

* Someone says something the government doesn't like.

* A plan is devised to get this person in jail and/or to discredit them and/or to ruin their careers.

* In the case of jail, evidence for a crime is collected (from SIGINT) extralegally, and is used to innocuously find, or let someone else find, admissible evidence for the crime. This is called parallel construction and it is very real.

* Maybe they're only sued with the purpose of discrediting them via the press, while making them unable to keep their jobs. Maybe they're actually put in a cage.

It's not out in the open, but it has similar effects to totalitarianism, especially on the part of the population that is more observant and able to affect policy change.

It's not the same, but lets not pretend the US is a lighting beacon of freedom and democracy. Maybe compared to China, but definitely not when compared to e.g. the Netherlands. (I'm biased though.)

Do these tangents on "the US bad too" and "no China worse" bore anyone else?

I particularly hate Facebook though, for turning most everyone around me into US informants.

If I see the opportunity to contribute to their obsoletion I'll dedicate years of my life to that.

I'm not entirely sure it's possible to build such a tool.

1. Not giving your child tattoos, piercings or a circumcision.

2. Female genital mutilation.

Still pretty cool as an alternative to Bing satellite data, I guess it's pretty unlikely we'll have open-licensed satellite data in the near future.

Somehow that sounds more reasonable to me.

I'd like to work on-site, but I don't want to abuse it...

This one too, actually; you have so little control of being distracted in open office compared to working at home, and you wouldn't want to bankrupt your boss drinking the copious amounts of coffee you need to compensate, right?

I figure GGP is trying to do the same, and not sending in a paper to Nature right now.

I'm just asking because I was born in the 90's, I'm not very aware of the state of email server management then.

I wish I could up- and downvote at the same time; I feel like discussions belong at the top and memes at the bottom, but I also enjoy the bits of humor and less information-dense posts at HN, because they help me to humanize the community and they make the rest of the discussions easier to process.

Perhaps a "funny" flag could work?

Kind of like on Slashdot, but with a corresponding "showfun" setting, for the gravely serious user.

A rate or ratio limit for funny posts is needed to not let it spread and dominate the comments, so maybe a heuristic comment identifier that says "I'm glad you're having fun, but this post has reached its meme quotum for today. Have a nice day!" if a threshold is passed would be a solution. That's so much work to implement though...

I'm conflicted re: what to do with these meta thoughts. Perhaps I should set up a blog with essays regarding this, and put it there? I do feel it is on topic as in, "in the HN spirit" and relevant to what I'm responding to re: form, but not the content.

Is there currently a convention for dealing with such "encapsulated but interesting" errors occuring in Rust libraries?

It seems obvious to me that a web framework would have a logging hook but non-obvious how that API would function; would it call a logging callback with a severity and a string? Just a string? Or an error message and some kind of "related data" (such as a stack trace or relevant structs) container?

It doesn't seem obvious to me to log only text in the context of a GUI library. I'm thinking of building a native cross-platform GUI library in Rust (borrowing concepts from IUP[0] but adding more typing) and I feel like there would be value in having structured data as part of the nonfatal error interface, so I'm curious if there are existing patterns to learn from.

[0] http://webserver2.tecgraf.puc-rio.br/iup/

I find it hard to understand the conflict of interest with government-backed science. Scientist A gets a grant to do research, spends it on research and reasonable salaries for PhD's, and goes on to join the EPA board. So what?

It only becomes a conflict of interest if they then start allocating funds to their friends or to themselves, but that's almost too obvious. What does them having previously received grants have to do with anything? Why would they then be more corruptable than private sector scientists?

At least in the case of government-backed science, the research goals are generally aligned with government interests. I don't see how that's sinister in the general case.

On the other hand, it seems much easier to find dark motives in research conducted by corporations. For instance, why would you publish research that is bad for your company?

What am I missing here?

I think they have the right idea; everone knows following the market is a moral imperative, that smoking is attractive and you are #healthyatanysize.

Obviously those leacherous government scientists should be put out of a job. They are harming commerce and therewith the proletariat. They gotta go!

By the way, was that a euphemism for commerce-backed science? Like the science done for cosmetics companies and the tobacco industry?

It doesn't feel like they're talking about foreign Universities.