The level of phoning in the complete lack of any work beyond the absolute bare minimum is the most frustrating aspect to me.

> open source solutions … centering on browsers

https://hn.algolia.com/?query=Igalia%20comments%3E5&sort=byD...

Bookmarking this confidence because people speaking confidently bothers me; we'll see.

They may succeed or not, but right now it's hard to stomach as a former fan. I see where a blog post like this could be coming from.

sitzfleisch: the ability to endure or carry on with an activity

Something Oppenheimer did not have, apparently.

In the same manner, if the critical concern is a device/service being used against one's self remotely, stop the use of the device/service if it is capable of remote access or data collection for later retrieval.

The ultimate baseline reality is that deciding to care whether or not remote access/data retrieval is using a method supported by the device manufacturer/service provider and/or whether doing so is allowed by the current legal system is too late.

Premptive HN disclaimers: I acknowledge the growing unavoidability of devices and services supporting remote access and/or data collection as I type this here on my phone. Remote access and data collection are very convenient and somehow still expected by device owners and service users to be under their control alone. It can be difficult to determine if a device or service supports remote access/data collection. There are often immediate consequences and eventual legal consequences for stopping the use of devices or services that belong to others. Working to change the legal system to slow/reduce use of devices and services against one's self and encouraging others to do the same is admirable.

https://hn.algolia.com/?query=working%20author%3Adavid927&so...

Keep up the good work!

My mistake, leaving out some adjective one could interpret as a misunderstanding of containers as an effective (etc.) security boundary. Fool me 100+ times and all that.

There must be at least a triple-digit number of CVEs by now demonstratimg that in practice containers are a thinner layer of security (perhaps not quite as thin as the classic recommendation of running SSH on a nonstandard port, but that might be leaning toward the safer side of analogies vs. malicious code!) rather than a boundary like virtualization (not perfect but a best practice for isolation).

Thank you for emphasizing this important detail.

> you should update both firefox, and your linux kernel

No doubt, update all the things! My point was, it can most likely wait until Monday.