To be more inclusive I recommend Men and Nonmen. /s

Imagine, you run a 2 year attack in a package to compromise the ssh server indirectly, while you could have just send 257 A to the server.

Yeah I’m good thanks I’d rather use kanidm as SSO Server. It’s also opensource and made by people who know what they are doing.

To be fair, with Rust macros anything goes. There was an example where someone demoed descriping rust structs and enums nested as xml with a macro to parse it.

Signal dies something called sealed Sender. The idea is, the sender information is encrypted in the package. https://signal.org/blog/sealed-sender/

Well, unless you login and transfer all your keys every time, the client already has all the info required to fetch and decrypt all the messages.

I know that you can configure synapse to delete messages. However every federated server only operates on their own delete scedule and you as the reciever can’t see the messages then anymore. Which I think is stupid.

The messages should only be stored on the reciever device after they were delivered and deleted on the transfering server.

I think a messaging server should store messages only until they are delivered. It shouldn’t have access to who sent it, only where they are going.

Matrix keeps a massive stack of metadata on the server, because the server takes care of the protocol and it needs all that metadata.

However you can’t loose data you never aggregated.

How do you migrate everything?

Im more surprised it works at all considering it uses eac

So you needed an implementation of a e2e protocol in rust.

So why didn’t you use signals libraries directly? Or the Matrix implementation of it. Or OpenMLS the probable follower of the axolotl protocol.

All of which are implemented in Rust. All of them.had at least one security audit. All of them where implemented by people probably knowing much more about cryptonthen you.

You can limit upload size.

Immich has an LlmMachine Learning Model classify images and makes them.searchable. That is actually useful. However only acceptable because it is completely self hosted and everything stays in my db.

How do you make sure that the security flaws are patched promptly? Do you open a ticket on GitHub and simply hope it gets picked up by the devs?

No you dont expect free labour and pay them.

Can you even take a project on github serious, if the author can’t even use git?

The way you currently say it, they tried to stop the exemption. They fought for the law, so OS gets an exemption.

Or do I understand you wrong?

We’ve got my 95 old grandma https://enna.care/ and she can use it. Instead of having to use the touch interface it works by placing cards on to an NFC reader.

Fun fact. That is not in the rules for monopoly. Of included it drags out the length of the game.

What did you do about authentik always loading several seconds before login someone into a service?

One thing Torvalds enforces is not breaking userland. So it shouldn’t be kernel problems. More likely its some other lib that breaks compatibility.