• 1 Post
  • 21 Comments
Joined 3 years ago
cake
Cake day: July 31st, 2023

help-circle

  • The working class isn’t their target audience. They are selling AI to other companies with the promise that AI will be able to increase their profits by replacing expensive and needy meatbag workers.

    The AI companies’ goal is to siphon wealth away from other businesses, and the other businesses’ goal is to accumulate wealth by siphoning it away from workers. It will grind the economy to a halt once the lower class can’t afford to spend money anymore while they hoard their wealth. With the way things are going right now, the next step after that will be living in a technofedualist dystopia ruled by the few ultra-wealthy who invested in private compounds and armed militias.

    We should be praying for the AI bubble to burst before AI can start succeeding in eliminating workers.




  • “But that’s unenforceable”, some will claim.

    And to that, let me remind us all of a little-known concept called cryptographic attestation. If that doesn’t ring any bells, then the term “secure boot” should.

    Once this shit passes into law, that’s the next step. Operating system vendors have their private keys to sign attestation tokens saying “John Johnson is an adult” and you’re only getting one if you verify your government ID. When you go to a website, your browser sends your signed token to the website and then the website checks if it’s a valid token signed by Microsoft, Apple, or Google.

    But Linux?, you may be wondering. No. No Linux. Kiss it good-bye. Your bank will “require” identity attestation for “extra security”, and your bank doesn’t give a fuck about Linux. Your bank will check against whatever list of public keys they want to trust, and it ain’t going to include anything not backed by a global megacorporation.





  • It’s not. They both expose a POSIX API and userspace, but the underlying architecture is very different. macOS is in part based on the Mach microkernel, and creating a process has a bunch of work related to that.

    Even ignoring that difference, macOS has built-in signature checking that suspends a newly-started process the first time its executable is seen.









  • I think you are misunderstanding what is possible with the history API.

    Pages can’t read your navigation history.
    Pages can’t manipulate history prior to their loading.

    The original history API is a careless mistake. It can:

    • Tell the browser to navigate forward n entries.
    • Tell the browser to navigate backward n entries.
    • See the length of the history stack.

    Seeing the length is a privacy problem. Allowing arbitrary forward navigation is a usability problem that’s ripe for abuse. Allowing back navigation to be more than a single page is a usability problem.

    The newer pushState and replaceState APIs are fine. As their names imply, they push a new URL or replace the current URL in the navigation stack. The URLs are also subject to same-origin constraints, so you can’t just replace the current page with an entirely different domain.

    Using a replaceState followed by pushState to insert a dummy marker that runs history.go(1) when the popState event is fired allows pages to prevent users from navigating away from the website. That’s shitty and abusive, yes.

    Do you know what else can do that, though?

    if (window.location.hash != "no_redirect")
        setTimeout(() => { window.location.hash = "no_redirect"; }, 1000)
    

    Or

    <?php
    if ($_GET["no_redirect"] != "1")
        echo '<meta http-equiv="refresh" content="1; url=?no_redirect=1 />';
    ?>
    

    Back button hijacking is an infuriating problem, but it’s not a new one exclusive to SPAs. This fuckery has existed for a long time.

    Edit: I don’t like the state of the modern web either, but as you also noted, the problem with it is by and large Google’s monopolistic dominance over web browsers and their incentive to not take privacy seriously. The only non-Blink browser engine with any notable market share is WebKit2, and that’s only because Apple is abusing their own position.