Fnoord (u/Fnoord) - Readit News

Fnoord commented on Vouch github.com/mitchellh/vouc... · Posted by u/chwtutha

Bayko · 9 hours ago

Indian here. You are correct. Expecting any employed Indian software developer to not be able to spare 1$ is stupid. Like how exactly poor do you think we are?!

Fnoord · 3 hours ago

You misunderstood the point. The point isn't that you are poor. The point is that the burden of the money lies on average heavier on you than someone from USA. This creates an uneven playing field.

I like to compare it with donations. If you get a USD donated, that is the same USD regardless of who gave it. Right? Right?!? Either way you don't know how heavy the burden is on the person who donated. You probably don't care. But it matters to the person who donated.

Fnoord commented on Vouch github.com/mitchellh/vouc... · Posted by u/chwtutha

strken · 10 hours ago

This might be by design. Almost anyone writing software professionally at a level beyond junior is getting paid enough that $1 isn't a significant expense, whether in India or elsewhere. Some projects will be willing to throw collaboration and inclusivity out the window if it means cutting their PR spam by 90% and only reducing their pool of available professional contributors by 5%.

Fnoord · 3 hours ago

Students don't have a lot of money to burn here. They're borrowing money to study. You'll miss out on them. However, you're unlikely to notice. I mean, there is no control group in such experiment.

Fnoord commented on More Mac malware from Google search eclecticlight.co/2026/01/... · Posted by u/kristianp

baxtr · 12 hours ago

Actually… I think this be solved by AI answers. I don’t look up commands on random websites, instead I ask an LLM for that kind of stuff. At the very least, check your commands with an LLMs.

Fnoord · 10 hours ago

LLMs will allow Mal to sneak in backdoors in the dataset. Most of the popular LLMs use some kind of blacklisting instead of a smaller specific/specialised dataset. The latter seems more akin to whitelisting.

Fnoord commented on Vouch github.com/mitchellh/vouc... · Posted by u/chwtutha

Fnoord · 12 hours ago

To people who don't like this, ask yourself the following: would you complain to someone who had a too strict spam filter or firewall? Or would you be like, we'll work it out? That is how I regard this function: as a (crowdsourced / WoT) spam filter or firewall. Can it be annoying? For sure. Will you work around it if needed? If it is worth the hassle, yes.

How many important emails have been lost due to spam filters, how many important packets have been dropped by firewalls? Or, how much important email or important packets weren't sent because "it wasn't worth the hassle"? I'm sure all of that happened, but to which proportions? If it wasn't worth it, the measures would have been dropped. Same here: I regard it as a test, and if it isn't worth it, it'll be stopped. Personally, I run with a 'no spam' sticker on my physical postbox, as well as a 'no spam' for salesmen the former of which is enforced by national law.

FWIW, it is very funny to me, the people who ignore it: 1) very small businesses 2) shady businesses (possibly don't understanding the language?) 3) some charities who believe they're important (usually a nice response: 'oh, woops') 4) alt-right spammers who complain about the usual shit they find important (e.g. foreigners) 5) After 10 years I can report Jehova's have figured out the meaning of the texts (or remember to not bother here)!

It is my time, it is my door, my postbox. I'm the one who decide about it, not you.

Same here. It is their time, it is their project. They decide if you get to play along, and how. Their rules.

Fnoord commented on Vouch github.com/mitchellh/vouc... · Posted by u/chwtutha

ramon156 · 13 hours ago

Sorry, but this seems like a privileged solution.

Let's say you're a one-of-a-kind kid that already is making useful contributions, but $1 is a lot of money for you, then suddenly your work becomes useless?

It feels weird to pay for providing work anyway. Even if its LLM gunk, you're paying to work (let alone pay for your LLM).

Fnoord · 13 hours ago

It is a privileged solution. And a stupid one, too. Because $1 is worth a lot more for someone in India, than someone in USA. If you want to implement this more fairly, you'd be looking at something like GDP or BBP plus geolock. Streaming services perfected this mechanism already.

Fnoord commented on Vouch github.com/mitchellh/vouc... · Posted by u/chwtutha

femto113 · 15 hours ago

Users already proven to be trustworthy in one project can automatically be assumed trustworthy in another project, and so on.

I get the spirit of this project is to increase safety, but if the above social contract actually becomes prevalent this seems like a net loss. It establishes an exploitable path for supply-chain attacks: attacker "proves" themselves trustworthy on any project by behaving in an entirely helpful and innocuous manner, then leverages that to gain trust in target project (possibly through multiple intermediary projects). If this sort of cross project trust ever becomes automated then any account that was ever trusted anywhere suddenly becomes an attractive target for account takeover attacks. I think a pure distrust list would be a much safer place to start.

Fnoord · 13 hours ago

That is indeed a weakness of Web of Trust.

Thing is, this system isn't supposed to be perfect. It is supposed to be better, while worth the hassle.

I doubt I'll get vouched anywhere (tho IMO it depends on context), but I firmly believe humanity (including me) will benefit from this system. And if you aren't a bad actor with bad intentions, I believe you will, too.

Only side effect is genuine contributors who aren't popular / in the know need to put in a little bit more effort. But again, that is part of worth the hassle. I'll take it for granted.

Fnoord commented on Vouch github.com/mitchellh/vouc... · Posted by u/chwtutha

hermanb · 14 hours ago

I had this idea / pet project once where I did exactly this for email. Emails would immediately bounce with payment link and explanation. If you paid you get credit on a ledger per email address. Only then the mail goes through.

You can also integrate it in clients by adding payment/reward claim headers.

Fnoord · 13 hours ago

Bill Gates already had this idea. All efforts to change email were already documented 25 years ago. The biggest changes are it is more centralized these days, SPF/DKIM/DMARC, JMAP innovation, oh... and one more thing! It is HUGE!! HTML email is the default...

Fnoord commented on Flock CEO calls Deflock a “terrorist organization” (2025) [video] youtube.com/watch?v=l-kZG... · Posted by u/cdrnsf

mrguyorama · 4 days ago

This film is dedicated to the brave freedom fighters of the Mujahideen!

Fnoord · 3 days ago

Hahaha, Rambo 3.

Fnoord commented on Flock CEO calls Deflock a “terrorist organization” (2025) [video] youtube.com/watch?v=l-kZG... · Posted by u/cdrnsf

exabrial · 3 days ago

Flock is a terrorist organization

Fnoord · 3 days ago

Dehumanizing other people as terrorists without applying the scholar definition in order to defame them should be called terrorism. Oh wait, defamation is already a thing. Let's just call it that, and it may end up being libel/slander, but the bar seems to be pretty high for that in USA and Europe as well.

Fnoord commented on Flock CEO calls Deflock a “terrorist organization” (2025) [video] youtube.com/watch?v=l-kZG... · Posted by u/cdrnsf

direwolf20 · 3 days ago

What if a drone with facial recognition could do it? And an ALPR network for their vehicle

Fnoord · 3 days ago

Shoot down the drone one way or another? Don't you guys have guns? /s