Email or username:

Password:

Forgot your password?
Eleanor's posts Post Back to profile
Eleanor Saitta

It really sucks to be in a world where you have to choose between two vendors for the tools you must use to access most of your life, both of which have clearly stated they are actively working against both your best interests and the best interests of society. Of course, there's an alternative — various third parties, many of which are actively malicious and none of which are remotely reasonable choices when it comes to security, feature parity, or anything else.

Today this is about browsers, but the fact that I have to specify is its own problem.

4 October at 7:56 | Open on infosec.exchange
14 comments
Eleanor Saitta
Ahmet Alphan Sabancı

@dymaxion couldn’t agree more. It took me a while to come to terms with it but right now the only meaningful option is strategic pragmatism in these cases. I wish this wasn’t the case but there’s nothing I can do if the “alternatives” are nowhere near to being real options in my life.

4 October at 8:30 | Open on mastodon.social
SamLR/Cass

@dymaxion Thank you for answering "which duopoly" :)

(Also ugh)

4 October at 8:37 | Open on chaos.social
quoll (√)
Eleanor Saitta

@quoll
Hi.

What part of this did you not understand?
4 October at 8:56 | Open on infosec.exchange
quoll (√)

@dymaxion you don't have to _use_ the software just give them some of your hard earned.

but fair enough, sorry 🙇

4 October at 9:36 | Open on mastodon.sdf.org
Eleanor Saitta

@quoll
A browser is the size of an operating system. If you can't stand up at least a ten person full-time dedicated security team, separate from all the actual dev work — or have a meaningful short-term path to doing so — you're not building a serious tool for non-hobbyists. Like, nothing wrong with hobbies, but I have more than enough expensive hobbies as it is. Maybe they'll get lucky and in fifteen years they'll have something useful with a big enough team to back it up, but I'm not betting on it. And to be clear, ten security engineers is a bare minimum even if you're working in a memory safe language with generated parsersfrom scratch.

@quoll
A browser is the size of an operating system. If you can't stand up at least a ten person full-time dedicated security team, separate from all the actual dev work — or have a meaningful short-term path to doing so — you're not building a serious tool for non-hobbyists. Like, nothing wrong with hobbies, but I have more than enough expensive hobbies as it is. Maybe they'll get lucky and in fifteen years they'll have something useful with a big enough team to back it up, but I'm not betting on...

4 October at 10:14 | Open on infosec.exchange
Alan Campbell For Harris

@dymaxion It looks to me that NASA is in a similar bind RE human access to space. Their choices [so far as I'm aware] are a company run by an undeservedly rich inveterate fascist or a company most recently known for their aircraft suffering multiple incidents.

4 October at 8:58 | Open on techhub.social
.vad//hakara🧭

@dymaxion I thought you were talking about mobile phones until the final line. Our world is sad and broken.

4 October at 10:00 | Open on mastodon.social
Eleanor Saitta

@vadhakara
RIGHT?? Or like a dozen other places where oligarchs have gotten their claws in

4 October at 10:06 | Open on infosec.exchange
Nini

@dymaxion There's a lot of situations with two bad options competing for which'll hurt and/or inconvenience you the least in the world which is in itself a sad situation to find oneself in.

4 October at 10:18 | Open on bitbang.social
Go Up