this post was submitted on 08 Sep 2025
49 points (73.3% liked)

Technology

74961 readers
3238 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
 

cross-posted from: https://programming.dev/post/37090037

Comments

you are viewing a single comment's thread
view the rest of the comments
[โ€“] x1gma@lemmy.world 2 points 18 hours ago (1 children)

No matter how well reasoned, allegedly fit for purpose or how much something pretends to be it, we shouldn't be trusting those promises, especially not from people we don't know. That does not end well neither for the free candy van nor for cybersecurity. Trust like that has been responsible for a lot of attacks over varying vectors and for projects going wrong.

Well yeah, that just requires a consensus on what is trustworthy. There are some things that are trustworthy, and you need to have some way to identify that, if you are going to protect yourself.

But that just shifts the blame to the user, who is a non expert, and we don't really have good ways to identify safe software products. There's stuff like CSA for physical products. It's short-sighted to say "well if you don't know, use nothing", because that's not going to happen.