• 0 Posts
  • 142 Comments
Joined 3 years ago
cake
Cake day: June 13th, 2023

help-circle


  • I just wish it was a native feature of browsers instead of something that is part of the page. Like, all the other permissions - camera, microphone, Bluetooth, USB, etc access - are native, why can’t be the “hey let me write some crap onto your device that other pages may or may not read” and “hey lemme see what I wrote onto your device when invoked from another website” requests be native too?













  • AGPL can be closed too, the license bases the right to the source based on the access to the end product:

    • GPLv2/v3 - if you have the binary executable output of the GPLv2/3 covered source, you must be granted access to the exact source used to make the binary. This applies to legitimately sourced binaries only - if you were to hack into a company’s servers and get a binary of a modified GPL product, this wouldn’t apply. But extracting a binary from a device you own IS a legitimate access (so e.g. if your phone uses U-boot, the manufacturer must grant you access to their modified U-Boot sources used to build the bootloader)

    • AGPL - if you have (legitimate) access to a service you can request the source. This is so e.g. web services can be made into GPLed code where modifications must be released (negating the requirement of possession of a binary, since you can’t possess a binary that runs on a remote server). e.g. let’s say I run GTK app via browser using kasmVNC - if the app is GPL, I don’t have to provide the source, if it’s AGPL, I have to provide the source.





  • I’m not talking about the banking regulatory system.

    Fintech - non-bank-certified money institutes - have a lot of duplicate regulatory requirements. Things like: certify PCI-DSS for payment processing, BUT ALSO certified for some kind of local framework which matches PCI-DSS 99% but has its own certification process and expenses etc., so it’s not as simple as just “doing what’s required”.

    Again, there’s a ton of regulations that are beneficial for the institutes and their customers, but there is also a lot of them that are hindrances because they’re duplicate or obsolete processes, red tape, and so on, stuff that serves little to no actual purpose but are essentially leftover regulations that have been superceded but not officially eliminated.