Internet Archive

My first impressions of web3

Moxie Marlinspike takes a look at “web3”. Despite considering myself a cryptographer, I have not found myself particularly drawn to “crypto.” I don’t think I’ve ever actually said the words “get off my lawn,” but I’m much more likely to click on Pepperidge Farm Remembers flavored memes about how “crypto” used to mean “cryptography” than I am the latest NFT drop. Also – cards on the table here – I don’t share the same generational excitement for moving all aspects of life into an instrumented economy. Even strictly on the technological level, though, I haven’t yet managed to become a believer. So given all of the recent attention into what is now being called web3, I decided to explore some of what has been happening in that space more thoroughly to see what I may be missing. Cryptocurrencies are the MLMs and pyramid schemes for nerdbros. They are a complete waste of effort, hardware, and electricity, and literally do not serve any purpose other than drawing in more unfortunate suckers to broaden the base of the pyramid at the expense of the environment. And NFTs are even worse. There is definitely interesting technology behind these concepts, but for now, they’re being used for scams, pyramid schemes, and MLMs. Don get suckered into this dumpster fire.

Simplicity of IRC

During discussions with my friends and colleagues, whenever the topic of chat protocols comes up, I often remark how simple the Internet Relay Chat (IRC) protocol is and how this simplicity has fostered creativity in the lives of many young computer hobbyists growing up in the late 1990s and early 2000s. For many of us who were introduced to the Internet during that time, writing an IRC bot turned out to be one of our first few non-trivial hobby programming projects that involved network sockets, did something meaningful, and served actual users. It’s a big loss we let IRC kind of fall by the wayside as the world moved to things like Slack, Discord, and Teams. It turns out people want features like audio and video chat, emoji, images, videos, and so on – all things a slow-moving, classic standard like IRC will never properly support.

Unicode normalization forms: when ö != ö

Some time ago, a very weird issue was reported to me about a Nextcloud system. The user uploaded a file with an “ö” on a SMB share that was configured as an external storage in the Nextcloud server. But when accessing the folder containing the file over WebDAV, it did not appear (no matter which WebDAV client was used). After ruling out the usual causes (wrong permissions, etc…), I analyzed the network traffic between the WebDAV client and the server and saw that the file name is indeed not returned after issuing a PROPFIND. So I set some breakpoints in the Nextcloud source code to analyze if it is also not returned by the SMB server. It was returned by the SMB server, but when the Nextcloud system requested more metadata for the file (with the path in the request), the SMB server returned a “file not found” error, which lead Nextcloud to discard the file. How can it happen that the file is first returned by the SMB server when listing files but then the server suddenly reports an error when requesting more metadata? Special characters must be second only to time, dates, and timezones when it comes to weird behaviour in code.

You must never press the original Razr’s forbidden internet button

The first phone I ever owned was a Motorola Razr. The Razr’s buttons are some of the finest ever to grace a mobile device. The keypad is laser-etched out of a sheet of shimmering aluminum, and when pressed, ignites in a lambent blue glow that looked like the sci-fi future. But there was one button that I was terrified to press. In all my years of owning a Razr, I can’t say I tapped it more than once or twice, and never on purpose: the internet button. A lot of much younger people will never understand the dread that these internet buttons filled us with in the early 2000s. Whether true or not, I didn’t know anyone who was not terrified of accidentally pressing one of these buttons on their phones and racking up a massive bill, or rushing through your prepaid card. Times certainly have changed.

Running your own email is increasingly an artisanal choice, not a practical one

To be clear, you absolutely can still run your own email infrastructure, getting email delivered to you, filtering incoming spam, sending email (with DMARC signatures and other modern email practices), providing IMAP access, and even run your own webmail setup. You can even do this with all open source software. But the email environment you get this way is increasingly what I called an artisanal one. It’s cute, decent enough, and hand-crafted, but it doesn’t measure up in usability, features, and performance to the email infrastructure that is run by big providers. Your IMAP access might be as good as theirs, but things like your webmail, your spam filtering, and almost certainly your general security will not be as good as they have. In short, if you run your own email infrastructure, it will not be up to the general quality you could get from outsourcing to big providers (they can’t really be called specialists). And you cannot fix this by trying harder, nor with the magical right choice of open source software, nor with the magical right choice of commercial software. Entirely “on premise” email is now an inferior thing for almost everyone. I’ve always wanted to try and run my own email server, but I’d never run my main email address myself, since my income and interactions with the government depend on it. Still, it’d be a fun side project.

Diacritical marks in Unicode

I won’t bury the lede, by the end of this article you should be able to write your name in crazy diacritics like this: Ḡ͓̟̟r̬e̱̬͔͑g̰ͮ̃͛ ̇̅T̆a̐̑͢ṫ̀ǔ̓͟m̮̩̠̟. This article is part of the Unicode and i18n series motivated by my work with internationalization in Firefox and the Unicode ICU4X sub-committee. There are three motivations behind linking to this article. First, it’s an deep technical look at how Unicode handles complex diacritics, which in and of itself is interesting. Second, it’s related to language and writing, which sparks my person interest. And third and finally, I want to see if this will break OSNews. Sorry Adam.

ungoogled-chromium: Google Chromium, sans integration with Google

ungoogled-chromium is Google Chromium, sans dependency on Google web services. It also features some tweaks to enhance privacy, control, and transparency (almost all of which require manual activation or enabling). ungoogled-chromium retains the default Chromium experience as closely as possible. Unlike other Chromium forks that have their own visions of a web browser, ungoogled-chromium is essentially a drop-in replacement for Chromium. In light of the previous post, if you really do need to use Chromium for whatever reason, forego Microsoft ‘coupon clipper‘ Edge, the closed-source Vivaldi, or the cryptoscammy Brave – and opt for ungoogled-chromium instead.

Firefox is the only alternative

Supposedly today we have a lot of browsers to choose from – Google Chrome, Safari, Microsoft Edge, Firefox, Brave, Opera, Vivaldi, etc. Having choices is a good thing, right? Nobody wants to relive the time of almost complete Internet Explorer domination again. Unfortunately our choices are significantly fewer than they seem to be at first glance, as Chrome and Safari (thanks to the iPhone) totally dominate the browser landscape in terms of usage and almost all browsers these days are built on top of Chromium, Chrome’s open-source version. Funny enough even Edge is built on top of Chromium today, despite the bitter rivalry between Google and Microsoft. What’s also funny is that Chrome and Safari control about 85% of the browser market share today, and Microsoft’s Edge commands only about 4%. Firefox all the way for me. We need more than one browser engine to succeed, and Firefox is the only viable alternative to Chrome’s dominance. Safari is tied to Apple so far too limiting, but at least it’s not Chromium-based, so that’s a plus. I’ve been starting to see websites that simply do not work in Firefox, which has me deeply worried about just how long I can keep up using my browser of choice.

So what is “the metaverse”, exactly?

So is the metaverse the next big advance that will revolutionize the way we all connect with each other? Is it just a repackaging of existing technologies into a new catch-all concept? Or is it just the latest buzzword marketing term? The answer to that depends on what you mean by “metaverse”. If there’s ever been a buzzword that truly gets under my skin, it’s this one. It’s clearly manufactured and groomed by corporations, Facebook especially, to distract form that company’s massive problems, lousy reputation, and damaging effects on society, and yet, tech media gobble it all up. The metaverse is nothing. There’s nothing that exists today called “the metaverse” that’s any different from things that existed four years ago, or even eight years ago.

Facebook changes its name to Meta

Facebook CEO Mark Zuckerberg announced Thursday at his company’s Connect event that its new name will be Meta. “We are a company that builds technology to connect,” Zuckerberg said. “Together, we can finally put people at the center of our technology. And together, we can unlock a massively bigger creator economy.” “To reflect who we are and what we hope to build,” he added. He said the name Facebook doesn’t fully encompass everything the company does now, and is still closely linked to one product. “But over time, I hope we are seen as a metaverse company.” You can call a pile of shit whatever you want, but that won’t magically turn it into gingerbread cookies.

The Facebook files

Apparently, Facebook, Instagram, and WhatsApp experienced a massive outage today – just days after a huge whistleblower report confirmed what we already knew – Facebook is sleazy, destructive, negligent, and as close to actual evil as an inanimate entity can be. Facebook Inc. knows, in acute detail, that its platforms are riddled with flaws that cause harm, often in ways only the company fully understands. That is the central finding of a Wall Street Journal series, based on a review of internal Facebook documents, including research reports, online employee discussions and drafts of presentations to senior management. Time and again, the documents show, Facebook’s researchers have identified the platform’s ill effects. Time and again, despite congressional hearings, its own pledges and numerous media exposés, the company didn’t fix them. The documents offer perhaps the clearest picture thus far of how broadly Facebook’s problems are known inside the company, up to the chief executive himself. It really sucks when all your friends and family use WhatsApp and Facebook Messenger, since getting entire countries to switch messaging applications simply isn’t going to get you anywhere.

Why are hyperlinks blue?

Elise Blanchard goes on a deep dive of ancient GUI design and early browsers to figure out why hyperlinks are blue. But now, I find myself all consumed by the question, WHY are links blue? WHO decided to make them blue? WHEN was this decision made, and HOW has this decision made such a lasting impact?  I turned to my co-workers to help me research, and we started to find the answer. Mosaic, an early browser released by Marc Andreessen and Eric Bina on January 23, 1993, had blue hyperlinks. To truly understand the origin and evolution of hyperlinks though, I took a journey through technology history and interfaces to explore how links were handled before color monitors, and how interfaces and hyperlinks rapidly evolved once color became an option.

Brave Search beta now available

Starting today, online users have a new independent option for search which gives them unmatched privacy. Whether they are already Brave browser users, looking to expand their online privacy protection with the all-in-one, integrated Brave Search in the Brave browser, or users of other browsers looking for the best-in-breed privacy-preserving search engine, they can all use the newly released Brave Search beta that puts users first, and fully in control of their online experience. Brave Search is built on top of a completely independent index, and doesn’t track users, their searches, or their clicks. Brave Search is available in beta release globally on all Brave browsers (desktop, Android, and iOS) as one of the search options alongside other search engines, and will become the default search in the Brave browser later this year. It is also available from any other browser at search.brave.com. I’m going to give Brave an honest try, since I’ve been quite unhappy with DuckDuckGo lately, and Google’s search engine has been going down the drain for years now. Being in search engine limbo is not a fun place to be, so I’m genuinely hoping Brave Search can fill this void.

Airline and bank websites go down in another major internet failure

Airlines, banks, stock exchanges and trading platforms suffered brief website outages early Thursday after a key piece of internet infrastructure failed, sparking the second major interruption of the past 10 days. Virgin Australia said in a statement on Thursday that it had resolved an IT outage caused by a failure at Akamai Technologies, a global content delivery network. The second major internet outage in a few weeks. Not a good look.

Ohio Republicans close to imposing near-total ban on municipal broadband

Ohio’s Republican-controlled legislature is on the verge of imposing a state law to dramatically restrict the rights of cities and towns to build and operate municipal broadband networks. The Ohio Senate on June 9 approved a budget bill that contains an anti-municipal broadband amendment. It’s not a done deal yet, and advocates for public networks are urging the legislature to strip the amendment from the final budget. The budget bill is expected to be hammered out within the next two weeks. If passed, the proposed law could kill existing broadband services and prevent new ones from being deployed. There are reportedly 30 or more municipal broadband providers in Ohio that “would not be allowed to operate so long as there is a private-sector company operating in the area, as there are in most, if not all of the cities.” Broadband in the US is a complete and utter joke, and it seems Republicans are hell-bent on keeping it that way.

Nyxt browser 2.0 released

Nyxt is a keyboard-oriented, infinitely extensible web browser designed for power users. Conceptually inspired by Emacs and Vim, it has familiar key-bindings (Emacs, vi, CUA), and is fully configurable in Lisp. A browser like this surely isn’t for me, but I feel there’s quite a few OSNews readers among us who would be interested in something like Nyxt. The developers just released version 2.0 with a massive list of improvements and new features.

Developers flee Freenode after ‘takeover’ by Korean crown prince

Developers of the open source organization Freenode are quitting en masse after Andrew Lee, a tech entrepreneur and the Crown Prince of Korea, has taken control of the network in what developers are describing as an “hostile takeover.”  On Wednesday, a dozen Freenode staff volunteers published posts announcing their resignations, which explain their decision to quit. The broad strokes of the letters explain that they believe Lee bought the entire Freenode network under what they believe are false—but legal—pretenses, and that they have lost control over the network. They said there is little the staff can do to oppose changes that Lee wants to implement.  The now former staff members announced that they are launching a new chat network, Libera.chat, to continue Freenode’s mission. I did not have this on my 2021 bingo card.

FrogFind: the search engine for vintage computers

The search functionality of FrogFind is basically a custom wrapper for DuckDuckGo search, converting the results to extremely basic HTML that old browsers can read. When clicking through to pages from search results, those pages are processed through a PHP port of Mozilla’s Readability, which is what powers Firefox’s reader mode. I then further strip down the results to be as basic HTML as possible. FrogFind is a clever and incredibly useful search engine if you like to play around with old, outdated hardware with terrible browsers. It makes a lot of the web accessible, fast, and usable on my old Palm devices, for instance, but truly anything that at least has a browser should work just fine. There are quite a few old and unmaintained platforms out there that cannot access the current web anymore, but tools like FrogFind address this problem in a very usable way. It’s the creation of YouTuber ActionRetro, an excellent YouTube channel with tons of awesome vintage Mac (and other platforms) content.

Signal embeds shady cryptocurrency in its service

Many technologists viscerally felt yesterday’s announcement as a punch to the gut when we heard that the Signal messaging app was bundling an embedded cryptocurrency. This news really cut to heart of what many technologists have felt before when we as loyal users have been exploited and betrayed by corporations, but this time it felt much deeper because it introduced a conflict of interest from our fellow technologists that we truly believed were advancing a cause many of us also believed in. So many of us have spent significant time and social capital moving our friends and family away from the exploitative data siphon platforms that Facebook et al offer, and on to Signal in the hopes of breaking the cycle of commercial exploitation of our online relationships. And some of us feel used. Signal users are overwhelmingly tech savvy consumers and we’re not idiots. Do they think we don’t see through the thinly veiled pump and dump scheme that’s proposed? It’s an old scam with a new face. Allegedly the controlling entity prints 250 million units of some artificially scarce trashcoin called MOB (coincidence?) of which the issuing organization controls 85% of the supply. This token then floats on a shady offshore cryptocurrency exchange hiding in the Cayman Islands or the Bahamas, where users can buy and exchange the token. The token is wash traded back and forth by insiders and the exchange itself to artificially pump up the price before it’s dumped on users in the UK to buy to allegedly use as “payments”. All of this while insiders are free to silently use information asymmetry to cash out on the influx of pumped hype-driven buys before the token crashes in value. Did I mention that the exchange that floats the token is the primary investor in the company itself, does anyone else see a major conflict of interest here? And there goes Signal, down the drain, throwing away all the goodwill it has managed to build up. Apparently, the donations they received from users weren’t enough, and it has to resort to shady schemes like these to keep the service running. I wasn’t using Signal to begin with, but this ensures I’m not touch it with a ten foot pole. As for cryptocurrency, a topic we effectively do not cover on OSNews – I’m not saying cryptocurrency is by definition shady, but let’s just say I don’t read many stories about cryptocurrency that instill me with any confidence in its trustworthiness and stability in any way, shape, or form. The technology in and of itself is cool, but what people are doing with it is, well, not.