Except that I didn’t accuse you of clickbaiting - I pointed out that the style was similar and has unfortunate consequences. Because the headlines we’re used to reading are so pervasively clickbait, it’s an easy trap to fall into because that’s how we’re used to seeing things titled.

Edit: On rereading my comment - yeah, that did come off pretty confrontational. Signal gets a lot of bad-faith criticism from people pushing alternatives that are provably less secure, so it’s a knee-jerk reaction for me at this point. In my defense, there’s a reason the more confrontational statements were in a “tinfoil hat” tag - it was meant to make clear they were not literal accusations.

Not in TFA, but in anather article it linked to:

Abbott called a second special session, which began immediately after the adjournment of the first one.

If we take your TLDR at face value, then the result is in no way specific to Signal. Threema, Session, Matrix, Briar, RocketChat, and any other messenger (including the closed source ones) would be equally affected. For that matter, so would Keybase, any encrypted e-mail provider you access from your phone, your VPN (personal or paid) … everything.

Given that, singling out Signal in the post title is clickbaity at best. If I’m putting on my <tinfoilhat> it could be seen as an attempt to drive people to less secure options by scaremongering the one that provides the most protection.

But if we make the assumptions you suggest, why stop there? An undisclosed vulnerability needn’t be limited to stock Android - any fork is potentially vulnerable. And why aren’t they calling for LUKS backdoors? Or the elimination of VPNs? Or … </tinfoilhat>

The reality is that there is another axis to security this type of all-or-nothing aproach to security ignores - how interested are they in you as a target. When that is factored in, the conclusion is that the use of encryption as secure as possible wherever possible helps everyone, because:

1. Most approaches to retrieving that data take time and effort to apply. The governments have vast resources, but not unlimited, so they pick their targets based on priority. More people using encryption helps with this.
2. The more often they use a backdoor or vulnerability, the more likely they are to be caught at it. So they will probably save it for higher priority targets. More people using encryption helps with this.
3. High priority targets remain vulnerable to the hammer attack. With governments, this more often looks like terrorism charges, tax audits, obvious surveillance for intimidation, etc. In extreme cases though, everything up to and including disappearing and assassination are on the table. This one encryption doesn’t help with.

TLDR: Even if true (big if), this type of scaremongering is unhelpful at best, and probably counterproductive. Name checking the most secure option when the threat model applies to any possible messenger is clickbaity and definitely counterproductive.

I see you have yet to meetmy old friend Debian, who was supporting i386 until 2 weeks ago, and includes a much broader library of softwate than Microsoft has ever maintained.

It’s just as clear it is impossible to veer right enough to scrape a single vote off the republican ticket. The left will criticize, but veer left and at least some will hold their noses and (protest sign in hand) vote anyway.

No, the church supporters take a tax deduction that leads to everyone still footing the bill.

I’ve seen them used more often as rolling papers.

If Newsom would stop going hard right, I’d love it more.

I think you mean their listener’s license. Wow, that takes me back.

“Ukraina”, in addition to being the name of the country in both Ukrainian and Russian, is also a Russian word that means “borderland”. Because of that, many Ukrainians take issue with referring to it as “the” Ukraine (and doubly so without capitalization). Doing so is seen as ignoring their existence as an independent nation and reducing it to a geographic region defined by its function as a buffer between Russia and Europe.

Daily driver here. Stable for servers, testing for workstations.

Debian Testing isn’t as stable as Stable, but has been far more reliable than anyone else’s desktop releases. I’m also not a fan of Fedora and others’ policy of ending support on the day of a new release.

If for some reason you decide to hold back on an upgrade of Testing, you’ve still got five years of patch support coming. And if I do want to live on the bleeding edge, there’s always Sid (also called Unstable). That’s where you’ll run into the kind of instability you can expect from a rolling release.

My favorite will probably always be Gentoo, but I don’t always have time for that hobby.

Steal? Microsoft and Apple are the bad guys!

Guinea fowl even more so

Lack of ground contact also deters termites.

Not saying this applies to Sydney Sweeney, but:

In some places, you really can’t assume that registered republican means votes republican. What I mean by that is there are deep red counties in Florida and other red states where most local offices run unopposed, and the only way to have any say in who holds those offices is to vote in the closed republican primary. The only way to do that is register as republican.

Some people do that to mitigate damage, and then vote straight ticket against the republicans in the general election. This can be a useful tactic even in places where the democratic party is active enough to field candidates, but not enough to have two running in a primary.

In this case there are other signs and I don’t think we’re dealing with tactical registration, but it’s good to be aware of when judging people by their voter registration without knowing a lot about the local politics.

No.

Probably not. It looks like it’s setting the fake address before reading the tunnel parameters, where the real address is stored. Probably a kludge in case the connection address is undefined so the program doesn’t crash. So check whether the address is included there.

Also check the function that establishes the connection. 10.1.1.1 is not a public subnet, so unless there is a VPN device listening at the local address, the tunnel should fail to establish and throw an error, triggering the exception clause in that code. Again, you’ll want to confirm that in the code.