• 0 Posts
  • 125 Comments
Joined 1 year ago
cake
Cake day: June 12th, 2023

help-circle


  • The law… But seriously, it’s not meant to spy on you or me. It’s meant for 90% of the population who can’t install an .apk and don’t know the difference between a web browser and a search engine. They’ll just download facebook messenger from the play store if it doesn’t come already pre-installed with their phone and won’t even know that this law is a thing until they get arrested for sharing pictures of their sick kid with the family doctor or political dissent terrorism once it gets inevitably expanded to other things than csam.







  • qwerty@discuss.tchncs.detoProgrammer Humor@lemmy.mlLemmy today
    link
    fedilink
    arrow-up
    3
    arrow-down
    16
    ·
    27 days ago

    Yes, my comment wasn’t about online casinos but about the people who think they have a right to tell others how to live their lives. I’m not defending the gambling industry, I think gambling is stupid. I’m defending the right of the people to make their own decisions.

    My “defense of the gambling industry” was just me pointing out that as long as something isn’t inherently nonconsensual and the terms and conditions are clear there is no reason to forbid other people from doing it just because you disagree with it.




  • qwerty@discuss.tchncs.detoProgrammer Humor@lemmy.mlLemmy today
    link
    fedilink
    arrow-up
    4
    arrow-down
    28
    ·
    27 days ago

    Who’s “they”? I don’t know much about the gambling industry but if it’s anything like any other industry then it’s not a centralized monolith but many independent business. As long as the founding principles aren’t inherently corrupt (and in the case of casinos they aren’t. Nobody is forced to play and everyone knows the house has an advantage and in the long term is guaranteed to win. Because of this it doesn’t make sense for the house to cheat and risk getting caught, it will win anyway.) there is no reason to think that the majority of the industry engages in criminal activity. This is a massive generalization.


  • qwerty@discuss.tchncs.detoProgrammer Humor@lemmy.mlLemmy today
    link
    fedilink
    arrow-up
    11
    arrow-down
    52
    ·
    27 days ago

    Why are online casinos bad? I don’t understand this pervasive need some people have to force their way of life on others and take away their agency over their own lives. It comes off to me as some kind of superiority complex. “They’re too stupid to make their own decisions, I know better what’s best for them, I must protect them from themselves”.





  • Ownership of the domain is verifiable on the blockchain, if the same wallet that owns the domain (nft) also publishes the pub key (owns the pub key nft or key data is embedded in the domain name nft) you can verify that the key is valid.

    IMO blockchain is more trustworthy than any single CA because you aren’t trusting a single entity, but a decentralized network of nodes. Assuming that most nodes are honest you can query 100 independent nodes for the same data, if 99 say the same thing you can be fairly confident that the data is valid. You can also run your own node and not have to trust anyone.

    To protect against MITM of your connection redirecting all traffic to their malicious node, some well known and trusted nodes would be hardcoded in the browser/OS software along with their public signing key to verify the signed data they send you, and genesis block data in case you want to run a node yourself. Signing keys of nodes would also be published to the blockchain. Think a unified, immutable, cryptographically verifiable, distributed database of public key - domain name pairs, which is what blockchain basically is. Encrypting the connection is a good idea too, extra privacy is always welcome.

    The biggest advantage here is that every single pub key (certificate) is stored by every single node (CA), so if one node goes rogue or is compromised and starts serving false data, it will be immediately discovered by the client by comparing it’s data to the data from other nodes, and can be immediately and verifiably reported to the network, even in the case of a targeted attack, because all data recived from the nodes is signed.

    No solution is perfect and this one is not an exception, if your hardware or your os/browser is compromised there is nothing short of manually checking certificate data or using an external device to verify it, that can be done, but that’s true for most IT systems, including the current TLS certification and authority based system.

    Blockchain is a well tested technology that has proven itself to work by being a core part of a trillion dollar industry and was specifically designed to eliminate the need for trusting a 3rd party. It seems like a natural solution to the biggest problem with CAs - trusting a 3rd party. It’s honestly sad that so many people dismiss it or are downright against it coz “crypto”, even when no crypto currency is invloved. I guess they spent so much time hating it they can’t even admit it might be useful to them after all.

    Thanks for asking for a follow-up instead of just downvoting.


  • Ownership of the domain is verifiable on the blockchain, if the same wallet that owns the domain (nft) also publishes the pub key (owns the pub key nft or key data is embedded in the domain name nft) you can verify that the key is valid.

    IMO blockchain is more trustworthy than any single CA because you aren’t trusting a single entity, but a decentralized network of nodes. Assuming that most nodes are honest you can query 100 independent nodes for the same data, if 99 say the same thing you can be fairly confident that the data is valid. You can also run your own node and not have to trust anyone.

    To protect against MITM of your connection redirecting all traffic to their malicious node, some well known and trusted nodes would be hardcoded in the browser/OS software along with their public signing key to verify the signed data they send you, and genesis block data in case you want to run a node yourself. Signing keys of nodes would also be published to the blockchain. Think a unified, immutable, cryptographically verifiable, distributed database of public key - domain name pairs, which is what blockchain basically is. Encrypting the connection is a good idea too, extra privacy is always welcome.

    The biggest advantage here is that every single pub key (certificate) is stored by every single node (CA), so if one node goes rogue or is compromised and starts serving false data, it will be immediately discovered by the client by comparing it’s data to the data from other nodes, and can be immediately and verifiably reported to the network, even in the case of a targeted attack, because all data recived from the nodes is signed.

    No solution is perfect and this one is not an exception, if your hardware or your os/browser is compromised there is nothing short of manually checking certificate data or using an external device to verify it, that can be done, but that’s true for most IT systems, including the current TLS certification and authority based system.

    Blockchain is a well tested technology that has proven itself to work by being a core part of a trillion dollar industry and was specifically designed to eliminate the need for trusting a 3rd party. It seems like a natural solution to the biggest problem with CAs - trusting a 3rd party. It’s honestly sad that so many people dismiss it or are downright against it coz “crypto”, even when no crypto currency is invloved. I guess they spent so much time hating it they can’t even admit it might be useful to them after all.

    Thanks for asking for a follow-up instead of just downvoting.


  • This is slightly off-topic but I was thinking about it and all of thoes isues can be solved by utilizing blockchain. Imagine a world where instead of CAs, decentralized domain (unstoppable domains, ENS etc.) owners publish their pub keys to the blockchain, the client can than query multiple nodes or store the chainstate locally. When establishing a connection client sends a secret handshake message + clients’ pub key encrypted with domains’ pub key. To complete the handshake server responds with the same secret message encrypted with clients’ pub key.