End-to-end encryption is the one of the most basic requirements for a communication system to be secure. Endpoint authentication is another. Message authentication is the third. After those 3 are fulfilled, further requirements can vary from system to system.

It’s like electrical or building code. Just because it’s compliant doesn’t mean it’s safe, but if it’s not compliant it’s almost certainly not safe. Necessary, not sufficient!

It’s only mostly methane. There are other gases, like ethane. Ethane clogs up power plants & furnaces, so it has to be separated out from the methane. It gets used to make PETE (#1), HDPE (#2), & LDPE (#4) plastics. Natural gas extraction produces so much waste ethane that it’s currently economically unviable to recycle those plastics, since it’s cheaper to make new. Even if sent to a recycling facility they almost entirely get landfilled or incinerated. :(

Focalboard. FOSS.

What if we only kill non-rich people?

The “AI safety” field is about two things: marketing AIs as so powerful that they’re risky to use but riskier to get left behind by competitors using, and keeping AIs from doing so much brand damage that stock price suffers. This story is about marketing an AI as powerful.

The business is genociding the out-group. It is just the cost of doing business to them.

Notably Death Cap mushrooms aren’t present worldwide. A number of the poisonings are from people who learned about mushroom foraging in one area, then moved to California and didn’t learn that the safe mushrooms from their home have deadly lookalikes in California.

LLMs are perfectly suited to make propaganda. That (and advertising, which is just corporate propaganda instead of government propaganda) is their best use. It doesn’t matter that they’re bullshit generators when the goal is to generate bullshit.

DoH & DoT still leak the domain name (and of course IP address) you’re connecting to. The domain name leak can be solved by Encrypted Client Hello but that’s still a draft and not turned on for many servers.

I’dv deleted the default, it’s never come back.

You mean SNI, not ESNI. ESNI is the Encrypted Server Name Indication that gets around that, though the newer ECH (Encrypted Client Hello) is better in many ways. Not all sites support either though.

NixOS + Home Manager user here.

I run in an opt-in state config. / is tmpfs. /home is tmpfs. /boot and /nix are real filesystems. At boot, the EFI loader reads the configuration from /nix/persist/etc/nixos/flake.nix, symlinks all the programs and configs into / and /home, and startup proceeds as normal.

That means nothing persists across boots unless I add it to my config. Cruft doesn’t accumulate in hidden areas, it’s all in my config. That keeps things fast, makes management easier, and makes troubleshooting easier.