Monthly Archives: April 2021

Source: Schneier on Security

According to Wired, Signal is adding support for the cryptocurrency MobileCoin, “a form of digital cash designed to work efficiently on mobile devices while protecting users’ privacy and even their anonymity.”

Moxie Marlinspike, the creator of Signal and CEO of the nonprofit that runs it, describes the new payments feature as an attempt to extend Signal’s privacy protections to payments with the same seamless experience that Signal has offered for encrypted conversations. “There’s a palpable difference in the feeling of what it’s like to communicate over Signal, knowing you’re not being watched or listened to, versus other communication platforms,” Marlinspike told WIRED in an interview. “I would like to get to a world where not only can you feel that when you talk to your therapist over Signal, but also when you pay your therapist for the session over Signal.”

I think this is an incredibly bad idea. It’s not just the bloating of what was a clean secure communications app. It’s not just that blockchain is just plain stupid. It’s not even that Signal is choosing to tie itself to a specific blockchain currency. It’s that adding a cryptocurrency to an end-to-end encrypted app muddies the morality of the product, and invites all sorts of government investigative and regulatory meddling: by the IRS, the SEC, FinCEN, and probably the FBI.

And I see no good reason to do this. Secure communications and secure transactions can be separate apps, even separate apps from the same organization. End-to-end encryption is already at risk. Signal is the best app we have out there. Combining it with a cryptocurrency means that the whole system dies if any part dies.

EDITED TO ADD: Commentary from Stephen Deihl:

I think I speak for many technologists when I say that any bolted-on cryptocurrency monetization scheme smells like a giant pile of rubbish and feels enormously user-exploitative. We’ve seen this before, after all Telegram tried the same thing in an ICO that imploded when SEC shut them down, and Facebook famously tried and failed to monetize WhatsApp through their decentralized-but-not-really digital money market fund project.

[…]

Signal is a still a great piece of software. Just do one thing and do it well, be the trusted de facto platform for private messaging that empowers dissidents, journalists and grandma all to communicate freely with the same guarantees of privacy. Don’t become a dodgy money transmitter business. This is not the way.

EDITED TO ADD (4/14): Moxie Marlinspike is on the advisory board for MobileCoin, which was designed for the purpose of providing a payment function in Signal.

Source: Ars Technica

Enlarge / Exterior view of a Googleplex building, the corporate headquarters of Google and parent company Alphabet, May 2018. (credit: Getty Images | zphotos)

The Supreme Court has sided with Google in its decade-long legal battle with Oracle over the copyright status of application programming interfaces. The ruling means that Google will not owe Oracle billions of dollars in damages. It also has big implications for the broader software industry, since a ruling in the opposite direction could have triggered a wave of lawsuits against software companies that re-implemented other companies' APIs.

The case dates back to the creation of the Android platform in the mid-2000s. Google decided to base Android on Sun's Java programming language, enabling existing Java programmers to easily develop for the platform. Google independently implemented the Java API methods, but to ensure compatibility, it copied Java's method names, argument types, and the class and package hierarchy.

A few years later, Oracle acquired Sun and soon afterward sued Google, arguing that Google's copying had infringed Sun's copyrights. Over a decade of litigation, Google won twice at the trial court level, but each time, the ruling was overruled by the Federal Circuit appeals court. The case finally reached the Supreme Court last year.

Read 2 remaining paragraphs | Comments

Source: Hacker News

Source: Hacker News

Source: Hack a Day

What’s the coolest-looking way to ease the repetitive stress of typing without quitting altogether? Move nothing but your fingers, and move them as little as possible without any stretching or reaching. We’ve been fans of the weirdly wonderful DataHand keyboard since we first laid eyes on one, but [Ben Gruver] has actually been using these out-of-production keyboards for years as a daily driver. And what do we do when we love something scarce? Make our own, improved version like [Ben] has done, with the lalboard.

[Ben] has been using the lalboard for about two years now and has a laundry list of improvements for version two, a project we are proud to host over on IO. Many of the improvements are designed to make this massive undertaking a bit easier to print and put together. Version one uses copper tape traces, but [Ben] is working on a fab-able PCB that will use something other than a pair of Teensy 2.0s, and perhaps QMK firmware.

Something that won’t be changing is the fantastic optical key switch design that uses an IR LED and phototransistor to capture key presses, and tiny square magnets to return the key to the home position and deliver what we’re quite sure is a satisfying clack.

The absolute coolest part of this keyboard is that it’s so adjustable. Every key cluster can be adjusted in 6 directions, which includes the ability to dial in different heights for each finger if that’s what works best. Once that’s all figured out, then it’s time to print some perfect permanent standoffs. Want to make one of these sci-fi clackers for yourself? [Ben] has the BOM, some printing instructions and tips, and a guide to making the copper tape PCBs over on GitHub. Check it out in action after the break as [Ben] rewrites Kafka’s Metamorphosis at 120 WPM.

Interested in learning more about the original DataHand keyboard? Here’s our take.