Wack Playstation Sup! 🙊 🇮🇸 🍏 is a user on mastodon.xyz. You can follow them or interact with them if you have an account anywhere in the fediverse. If you don't, you can sign up here.
Wack Playstation Sup! 🙊 🇮🇸 🍏 @HerraBRE

InfoSec folks love to talk about OpSec. It feeds the fantasy of being an agent on a secret mission or something... 🕵

OpSec is really just about behaving in a way that maintains your security - avoiding mistakes.

Software can help: Self-destructing messages, UIs that prevent screenshots, follower-only Toots on Mastodon.

Although easily circumvented, all of these can help groups avoid common mistakes. So although not "strong security", they help with OpSec.

I learned this only recently.

Wack Playstation Sup! 🙊 🇮🇸 🍏 @HerraBRE

I wonder if I can find any literature (or just blog posts) about the value of soft "cooperative" security features?

I should probably write something about this myself, actually.

I'd like to implement both "request recipient delete a message" and "burn after reading" style features for , but it's important to get the UI right so users aren't misled.

Maybe I'll start with a discussion on GH.

· Web · 2 · 3
rysiek ✅ @rysiek@mastodon.social

@HerraBRE this... sounds like a bad idea. It's extending the protocol, with little chance other mail clients will implement it. I am immediately thinking of all the "features" Outlook brought to e-mail...

Wack Playstation Sup! 🙊 🇮🇸 🍏 @HerraBRE

@rysiek In this case, I really don't care.

If we can't add headers and behaviours to e-mail, then we can forget about the AutoCrypt effort, we can forget Memory Hole (encrypted headers) and basically any progress at all.

Of course things will be -only to start. Except when I can be compatible with Outlook. 😄

That is a challenge for the implementation when it comes to not over-promising, but that's the only concern I see there.

Bob Mottram @bob@social.freedombone.net
@herrabre @rysiek it's kinda monstrous that Outlook is still a thing.
Walter van Holst @whvholst@mastodon.social

@bob @HerraBRE @rysiek As monstrous as FOSS developers that refuse to acknowledge that VCALENDAR is no substitute for a calendaring tool in which others can schedule meetings for you and other collaborative features. For example SoGo is nowhere close to Outlook+Exchange.

Bob Mottram @bob@social.freedombone.net
@whvholst @rysiek @herrabre Personally I'm a Free Software person who wouldn't touch Microsoft stuff with an extended cattleprod, but each to their own.
Walter van Holst @whvholst@mastodon.social

@bob @HerraBRE @rysiek I am a Free Software person who has to soil himself on a daily basis with Microsoft stuff because the Free Software people refuse to acknowledge that it has functionality I need and therefore they won't produce.

Bob Mottram @bob@social.freedombone.net
@whvholst @rysiek @herrabre the usual approach if there's missing functionality is to make a pull request, or raise a bounty to hire someone to make a patch.

On Outlook and things like that I only used it a very long time ago, and so I'm entirely unaware of any newer features it might have.
Walter van Holst @whvholst@mastodon.social

@bob @HerraBRE @rysiek I am talking about classic Outlook functionality. For example to invite other people to a meeting or a series of meetings in your calendar. I can't do that with SoGo. SoGo is nonetheless being presented as a plausible alternative to Outlook. Which it isn't. Just one example of pretty basic functionality that is lacking.

rysiek ✅ @rysiek@mastodon.social

@whvholst @HerraBRE @bob I can do this with KDE PIM though.

Bob Mottram @bob@social.freedombone.net
@whvholst @rysiek @herrabre There are various calendar systems out there, and I had one of them (don't remember which) in the early version of !Freedombone. I think I dropped it because Redmatrix, which became Hubzilla, had the sort of functionality you describe (maybe Friendica does too). There's also Radicale, but I havn't tested that extensively.
Maiyannah of Mirrah @maiyannah@community.highlandarrow.com
@whvholst @bob @rysiek @herrabre < basically this, right here, if you're in certain fields
rysiek ✅ @rysiek@mastodon.social

@whvholst @HerraBRE @bob on one hand we, the devs, have to acknowledge there are usability issues and missing features, and start fixing those instead of re-writing each piece of software every 3 years (looking at you, Akonadi!).

On the other hand we, the users, have to acknowledge that "free as in freedom" says nothing about the price, the devs need to eat and pay their rent, and hence we need to start supporting FLOSS financially more.

Bob Mottram @bob@social.freedombone.net
@rysiek @herrabre @whvholst it has always been the case that if you see voluntary groups doing things you like or find useful then it's worth supporting them in whatever way you can.
rysiek ✅ @rysiek@mastodon.social

@bob @whvholst @HerraBRE yes, but we - the FLOSS community - put too much emphasis on the "gratis" part. We should really stop doing that. It's detrimental to the community, to the software, and to the user experience.

Walter van Holst @whvholst@mastodon.social

@rysiek @bob @HerraBRE Given that there are people willing to pay for hosted Exchange, that seems not to be the issue. Babysitting an Exchange server is sufficiently painful that a lot of organisations really are willing to pay.

rysiek ✅ @rysiek@mastodon.social

@whvholst @HerraBRE @bob yeah, I had an idea to do a well-integrated, easy-to-install organisation software bundle (LDAP-based, some SSO, NextCloud, EtherPad, you get the point); Sandstorm is doing something a bit similar, but not exactly.

rysiek ✅ @rysiek@mastodon.social

@whvholst @HerraBRE @bob the problem is they would need to pay and then wait a bit for the results...

rysiek ✅ @rysiek@mastodon.social

@HerraBRE fair enough. :)

Paul Sheprow @paulsheprow@octodon.social

@HerraBRE Feature requests:

"Please Don't Quote Out Of Context"

"Burn Before Tweeting"

Wack Playstation Sup! 🙊 🇮🇸 🍏 @HerraBRE

I've created a issue for arguing / discussing / debating about "cooperative" soft security features.

github.com/mailpile/Mailpile/i

Feel free to chime in if you feel strongly.

mastodon.xyz powered by Mastodon