• 0 Posts
  • 12 Comments
Joined 2 years ago
cake
Cake day: June 21st, 2023

help-circle
  • Of course they collect content you upload. How else do you think they maintain a chat history so people can see what was said while they were offline?

    I see nothing in the privacy policy that says they can sell the data. There is, however, things that allow them to share the data with 3rd parties, including bot developers. Having developed Discord bots, I can tell you that you can get pretty unrestricted access (with the server owners cooperation) until you have been added to a bunch of servers (at which point you need Discord approval to get things like message content)


  • If you are building a static system, SELinux is amazing. You need a few lines of policy per application to label things appropriately, then you can see what accesses programs made and decide if you want to allow them or not.

    Taking a full Linux system and adding a locked down SELinux policy can be done in less than a week. If you are starting with an SELinux enabled system and just want to lock down your application, it can be done in less than a day.

    Once you know what you are doing, there is also a pretty powerful policy analysis tool that lets you see what a given domain can do; including transitive things like “domain sandbox_t can launch a program in Domain vim_t, which can write a file in Domain sshd_config_t, which can be read by domain sshd_t” which may indicate that your sandbox has a hole allowing it to compromise your sshd configuration. Although, to be fair, doing this level of analysis is not simple, even with the tooling. And you very quickly notice issues that are inherent in how Linux works.

    The problem with SELinux comes when you try applying it to general purpose systems, because you do not know ahead of time what the user will want to do. To be effective, policy needs to be written for the specific system it will be running on.

    An example I like to use is Android. Android makes great use of SELinux, and is a general purpose system. But the SELinux policy itself does not protect the general purpose Android system. It protects the special purpose system that is the Android runtime. All apps run with the same policy that says things like “cannot access the filesystem at all, unless given access by the Android runtime”, then the actual security policy users see is all implemented in use space by Android. SElinux is just a means of preventing apps from bypassing the Android permission system.


  • Also, AppArmor might not exist without SELinux.

    When the NSA first implemented SELinux, they did so directly, but were not able to get that merged into mainline because there was concern that SELinux was not the correct solution.

    What they ended up doing was creating the Linux Security Modules (LSM) framework, which is just a bunch of hooks in the kernel that a module can implement. SELinux was then rewritten as LSM module. This allowed other solutions like AppArmor to be implemented without any invasive work; they could just plug into the same system SELinux used.

    Some time later, the ability to run multiple LSMs at once was added.

    Incidentally, Linux capabilities are also implemented as an LSM.






  • That’s not how it works. I don’t know what social media is involved, but from according to Facebook’s TOS, you grant Meta a revocable license to use it it a manner consistent with your privacy settings.

    Specifically, when you share, post, or upload content that is covered by intellectual property rights on or in connection with our Products, you grant us a non-exclusive, transferable, sub-licensable, royalty-free, and worldwide license to host, use, distribute, modify, run, copy, publicly perform or display, translate, and create derivative works of your content (consistent with your privacy and application settings). This means, for example, that if you share a photo on Facebook, you give us permission to store, copy, and share it with others (again, consistent with your settings) such as Meta Products or service providers that support those products and services. This license will end when your content is deleted from our systems.

    There is a potential fair use argument to be had (particularly since the allegedly infringing party is news). And it is not clear from the article who owns the original copyright in the first place.


  • homura1650@lemmy.worldtoLemmy Shitpost@lemmy.worldUno reverse 🔁
    link
    fedilink
    arrow-up
    78
    arrow-down
    1
    ·
    2 years ago

    Facebook the product is still Facebook. The only name that changed was that of the company that owns Facebook, which makes sense as that holding company also runs other products like Instagram.

    Google made a similar move in 2015 when it created Alphabet to hold the non Google parts of Google.

    In both cases the renaming was on the coorporate side. They made no effort to loose the old trademark, and continue to operate under it today.

    The only high profile case that comes to mind that is simmilar to Twitter is when Comcast rebranded itself as Xfinity in 2010. In that case, it worked because: A) Comcasts reputation was way worse than Twitters and B) people don’t have that much of an option anyway. In the otherhand, the rebranding failed in the sense that everyone still knows them as Comcast.



  • A) Phyical books cost way more to buy than they do to print. You are mostly paying for the writing/editing.

    B) Youtube is nor charging anywhere near “real” prices for their subscription. Renting movies on youtube is generally in the $3-$5 range, far cheaper than seeing a movie in a theater. The subscription gives you unlimited access to almost their entire library of videos and music. The only physical analouge is a library, but those only exist due to government funding and a quirk of copyright law that does not apply as well in the digital realm.


  • A single ticket to my local movie theater costs $16.50 for an adult ticket to a typical movie. That is already more expensive than a month of unlimited Youtube premium, even at the inflated price.

    Video streaming is a consumable product. What model would you prefer. Ad supported is still available. A la carte is reasonable in theory, but doesn’t seem like it would work well for a site like youtube (even though youtube does have some a-la-carte offerings such as movies)

    We used to have a movie subscription service around here. It failed because it was essentially sellings dimes for nickels.