News for hackers. Stuff that matters.
Re:Jitsi Meet Abandons Anonimity Promise by xulres on Monday September 04, 2023 @12:33PM (#37382072)
In every thread someone comes with "but is this the only way to tackle the problem?" Noone ever even makes a suggestion so I guess yes it's the only way.
Re:Jitsi Meet Abandons Anonimity Promise by yieldcrv on Monday September 04, 2023 @01:16PM (#37382563)
that’s mentally negligent.

the only people that have to identify problems and solutions are founders that are grifting for capital or customers. and that’s sad.

the rest of rational actors can see a false dilemmas from afar without knowing what the third and fourth and fifth possibilities are.

in this case its pretty obvious that “privacy for hosts, or not via FAANG Oauth and an unaccountable change in the terms of service to further distance from privacy” is a false dilemma while also not preventing anonymous CSAM rooms on their service.

Re:Jitsi Meet Abandons Anonimity Promise by bradleyjg on Monday September 04, 2023 @01:37PM (#37382845)
It’s only a false dilemma if there’s a third, etc. possibility. You can’t just assume that every problem has a magical happy solution that requires no tradeoffs.
Re:Jitsi Meet Abandons Anonimity Promise by yieldcrv on Monday September 04, 2023 @01:48PM (#37382990)
I agree, so here are several

3. the same signup requirements for the participants instead of just the host

4. phone number verification for the host and participants

5. a credit card for the host and participants

6. some kind of deposit for the host and participants

7. discriminating against Tor users

8. including Apple ID in the list of auth services

9. it actually not being Jitsi Meet's obligation at all and authorities continue to prosecute the criminal action of the participants by doing actual investigations

10. ...

Re:Jitsi Meet Abandons Anonimity Promise by pgeorgi on Monday September 04, 2023 @02:00PM (#37383129)
3. only makes things miserable for everybody (instead of just deferring responsibility to the host), doesn't solve the problem

4. costs money and work for a free service

5. makes the service cost money

6. costs money to pull off (and/or makes the service cost money)

7. simple to pull off, yes. Uncertain how big the benefit really is.

8. If Apple permits that, that seems a sensible request in general. Doesn't solve the general issue since it's the same kind of megacorp as all the others.

9. that's the ideal case, and since they're operating from the US (Delaware company etc) might actually work. Might still bear the cost of every random county sheriff giving them a stern talking-to because they can't offer data during those investigations.

10. not an option at all.

So out of your 7 given options, only one (#7) is reasonably simple to implement with a potential benefit (do they need to block all the popular VPN services, too?)

Re:Jitsi Meet Abandons Anonimity Promise by tqi on Monday September 04, 2023 @04:10PM (#37384476)
How is 3-8 a better solution, rather than merely different?

It seems like your actual opinion is #9, but that's not actually a solution they can implement.

Re:Jitsi Meet Abandons Anonimity Promise by yieldcrv on Monday September 04, 2023 @04:32PM (#37384730)
Its just a random assortment of possibilities to demonstrate that Jitsi’s is a false dilemma

because chronic deflectors were pretending that the only people that can question one solution must also be the person to have the other solution

Re:Jitsi Meet Abandons Anonimity Promise by seanhunter on Monday September 04, 2023 @02:07PM (#37383198)
It's not mentally negligent, "is this the only solution?" is a weird standard that for some reason gets brought up in the specific instance but isn't something we apply to other problems.

Is MFA the only solution to the auth problem? No.

Is having a firewall the only way to prevent unauthorized traffic on your network? No.

Is docker the only solution to how to package software in containers? No

Is git the only DVCS? No.

Is git-flow the only way to manage branching and pull-requests? No.

Is Rust/Python/Javascript the only programming language? No.

Are relational databases the only way to persist important data? No.

etc etc etc...

We normally expect for difficult problems to have a variety of solutions with different tradeoffs and in particular, for really hard problems involving adaptive human adversaries, a lot of time we rely on applying multiple levels of "solution" in order to give us defense in depth and a chance to really crack a particular problem.

Re:Jitsi Meet Abandons Anonimity Promise by yieldcrv on Monday September 04, 2023 @03:19PM (#37383937)
personally I think its weirder how CSAM (or a mere rumor of it in this case) gets people to not question anything

when without that rumor the criticism of the change would be criticism

“is this the only solution” is actually just me being diplomatic on a topic people are emotional about, as its clearly not the only solution, but even that is met with deflection

maybe thats the reason this “weird standard” is only noticed on CSAM mitigation discussions, because people know they cant be frank to you

Re:Jitsi Meet Abandons Anonimity Promise by xulres on Monday September 04, 2023 @04:19PM (#37384580)
So you are basically saying my way or the highway without even offering a option at all. So your "diplomatic" is just another way of saying "I don't give a shit and please stfu". Why would you inject yourself in a discussion if you don't really want to participate? Yikes.
Re:Jitsi Meet Abandons Anonimity Promise by yieldcrv on Monday September 04, 2023 @04:30PM (#37384712)
That’s not my position at all

Its “is this the least worst solution, or the most best, and why?”

I started off with a very cordial question, and you were the one that found the mere question to be absurd. if you cant engage then take your own advice, its an option