Post #2553660
2025-11-11 16:38 UTC
@sunfish@hachyderm.io @esoterra@hachyderm.io @yosh@toot.yosh.is to not empower software producers over software consumers, it is often necessary to void security guarantees. e.g., DRM leverages "security" infrastructure to unethically enforce monopolies with no regards to the user's actual legal rights
the most important thing is for users to know and control which external inputs, including cryptographic entropy, a program will be able to access
Replies (1)
-
@migratory@jorts.horse 2025-11-11 16:40
@sunfish@hachyderm.io @esoterra@hachyderm.io @yosh@toot.yosh.is to put this another way, it can be very useful for a capability-based program to *suggest* certain input sources be hooked up to it, but the program *must* not be able to actually control or check which input sources it gets hooked up to