• 0 Posts
  • 94 Comments
Joined 2 years ago
cake
Cake day: June 19th, 2023

help-circle

  • I don’t think anyone is embarrassed to be not supporting tor, bud. What’s embarrassing is throwing a fit about it, misunderstanding basic English, tossing out trash analogies, attacking strawmen, and being a massive whiner because you can’t use your protocol of choice.

    Saying “whoosh” doesn’t make your analogy any less shitty. Further, explaining how your analogy was inaccurate just proves the point.

    There is no moral obligation to support tor. I get it. You’re a zealot. Nobody gives a shit. Sucks to fall hard on a niche utility. Grow up and move on.


  • You are neither legally owed nor morally owed tor access.

    Not supporting tor does not indicate a security fault.

    The McDonald’s analogy doesn’t apply to the context of this discussion. You’re morally outraged that McDonald’s doesn’t provide plastic straws. Instead of using the straws provided, not using a straw, or bringing your own plastic straws, you’re yelling that they’re poisoning the drinks.

    There are other ways to handle your taxes, if you find them lousy or undignified, that’s a real bummer for you.

    Your opinions on security are worthless. You are clearly an uninformed zealot.



  • You’ve already been told that you can’t dress up a deliberate act of sabatage as merely “neglecting to support”.

    You’re trying to turn this into semantics. They don’t support tor. That’s a factual statement.

    I presented my own argument, not yours.

    You presented a strawman and attacked that strawman.

    Both scenarios block an arbitrary group

    Blocking tor is not the same as blocking random IP addresses. There’s really no point in pressing with this analogy.

    While claiming that anonymity is non-existent

    Did I make that claim? I recall saying tor doesn’t provide you with perfect anonymity. Another factual statement.

    Yes

    Cool, so use a VPN.

    “Owing” is /not/ a drop-in replacement for “obligation”.

    It’s a synonym. Maybe you should look up synonym while you’re at it. The IRS is not obligated to support tor and they do not owe you that support.


  • Context is important.

    It is important. Which is why claiming there’s a security issue because they don’t support tor is silly. Just don’t use tor. The website also doesn’t support the entire demographic of people who don’t use tech at all, like the Amish. No reasonable person would say that’s a security issue.

    THAT’s incorrect.

    No, it’s absolutely correct. You can continue to whine that they don’t support your particular use case, but that’s your problem. The documents and services are all available right now for all Americans. You insisting on using your niche protocol is nobody’s problem but your own.

    You can also /randomly/ block large swaths of people arbitrarily and with the same mentality claim “better security” because you think a baddy likely got blocked, a claim that inherently requires disregarding availability as a security factor.

    This is a stawman. Tor is notorious for bad actors. Not even remotely the same as blocking addresses at random.

    Infosec, comp sci, and all tech disciplines cover most diligently principles and theory which are resilient over decades, not tool-specific disposable knowledge.

    You really need to go back to school. No principle and no theory in infosec requires every protocol be available in order to achieve “availability”. All of these fields are relatively new and still evolving.

    Perfection is never on the table in the infosec practice.

    Indeed, that’s what I was saying.

    But Tor most certainly provides anonymity in the face of countless threat agents, among other features.

    So does a VPN, you twit.

    “Owes” implies a debt. I never spoke of owing or debts. The IRS has an obligation to inform the public.

    English your second language? It’s fine if it is, just know that “debt” and “obligation” are synonyms.

    When they exclude demographics of people from their service (in particular people who funded them), it’s an infosec failure and an injustice.

    Anything to be a victim. Grow up. Nobody owes you tor access.


  • It’s a red herring.

    It’s really not. You’ve been asserting that there’s somehow a lack of security because they don’t support tor because that means they’re failing on the “availability” point of the CIA triad. That’s incorrect.

    The scope is the American taxpayer.

    This is also incorrect. The scope is the American taxpayer who is able and willing to utilize the website. You are either unable or unwilling. You are not in the scope. You absolutely can block entire swaths of address ranges and, in fact, have better security because you did so.

    My infosec MS came decades ago.

    A lot has changed from decades ago, you might consider going back to school.

    That’s not anonymous.

    Neither is tor. And even if tor did provide perfect anonymity, tough shit. You are again just whining. Nobody owes you the ability to “anonymously” download tax material at your preferred comfort level of anonymity.


  • Indeed, it is not binary. I’m glad you can see that now. Availability has scope, and for the IRS, tor is not in that scope. This is not a security issue. Continue to scream into the void about how literally any impediment to every form is access is a security issue, but that’s not how any of this works. Given you seem to keep bringing up course work and professors and this naive view of security, I’m assuming you’re a student. Keep studying.

    That’s not an option.

    It is an option. Saying “nuh uh” doesn’t make it not an option.

    This does not compensate or serve as an excuse for incompetent security.

    This serves as availability. You have TLS, postage, and physical locations you can utilize. You are just whining. Your refusal to use any of the plethora of means available to you has no relation to the competency of the IRS’ security. Grow up.


  • I’ve read what you wrote, but you are refusing to acknowledge reality. Availability does not even remotely mean what you are stating. You might reconsider taking infosec 101.

    If the Tor network has no access, then they have no availability.

    Then there is no service that has any availability and all meaning is stripped from the word.

    The website is not just for transmitting tax declarations.

    Indeed, and if TLS isn’t sufficient for you then by all means, use the postal service. Hell, you could even go to your local IRS location.






  • RustyWizardtoAsk Lemmy@lemmy.worldWhat are your hobbies?
    link
    fedilink
    English
    arrow-up
    5
    ·
    3 months ago

    Lifting weights, motorcycle, programming at home for fun and not profit.

    Lifting weights is awesome. You can do it with friends, but I tend to go solo. It’s meditative and humbling. At the same time, it’s an absolute ego boost to start seeing your progress and comparing with others.

    Motorcycling is a ton of fun, but quite expensive. Buying a bike is a gut punch, then all the over priced gear. You can be thrifty about it using Facebook marketplace but you’re gonna be out quite a bit of money.

    I’m a software engineer at work, but I honestly enjoy programming. I have a discord bot or two that I wrote just for my discord channel with some buddies. I also run 4 raspberry pi’s at home that require occasional IT work to do their various tasks. It’s low risk and rewarding and helps keep me a little sharper at my day job.





  • It’s like saying GPS was available for decades before, why would putting it in everyone’s phone expand its popularity.

    For myself, I’m hoping the nerds and hackers that otherwise found it not worth the effort will start creating tools to manage real time better and start building them into the applications they write. That way you don’t need to pay an arm and a leg to RedHawk for the privilege of dynamically isolating CPUs or have to reboot the computer to modify kernel arguments a la RedHat MRG.


  • What’s preventing that from working now? If it’s indeterminate latency, then yeah, absolutely. Theoretically this will give you the ability to have a very deterministic loop around the accelerometer data, but 3d printers don’t move all that fast to begin with so having unbounded latency might not matter. The determinism we’re talking about here is on the order of tens of microseconds or less.