• 0 Posts
  • 18 Comments
Joined 1 year ago
cake
Cake day: June 26th, 2024

help-circle

  • Context: I worked in IAM (computer security) at a past job.

    In computer security, we don’t wait to get proof that a vulnerability was exploited. We have to operate under the assumption that any vulnerability was immediately exploited, and take immediate action to fix it and limit the impact. Doubly so when the stakes are high.

    We need popular support to get real security experts to investigate these claims. If there was even a single path that could have led to a vulnerability of this scale, we need to completely secure these systems and do an immediate recount/re-vote.

    I’ll also say, I was surprised to learn that these voting systems and their specs are not fully public and open source. That alone makes me very uncomfortable. Security through obscurity is not security at all.






  • On any site with unverified signups (all of them) you can’t.

    If you want to talk to real people, you’d have to use a platform that has in-person ID verification. Like a pub, or a park.

    Good luck finding a bot free place on your phone. It’d have to involve zero-sum proofs and biometrics. And even then you can’t really be sure that person isn’t using a bot to write without full root access to their system and a live webcam feed.










  • minoscopede@lemmy.worldtoMicroblog Memes@lemmy.worldNotepad
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    14
    ·
    2 months ago

    Sorry you got downvoted. Once again people are downvoting positive posts about Brave blindly.

    It’s no coincidence that the only open source browser that actually blocks ads is the one that gets downvoted all the time. Meanwhile people are dead silent when someone recommends a fully closed source chrome alternative that makes money from search tracking. 🤔