672

Boycotting FOSS projects in the wake of the "buy canadian/european" movement makes no sense (lemmy.blahaj.zone)

submitted 4 months ago by not_IO@lemmy.blahaj.zone to c/opensource@lemmy.ml

146 comments fedilink hide all child comments

I've seen many threads suggesting products but they often don't mention FOSS projects, which should always be preferred to corporate software. With FOSS you are already boycotting capitalism, on either side. Free and Open Source ignores borders and shouldn't be categorized in nationalist terms, no matter where some of the maintainers happen to live.

you are viewing a single comment's thread
view the rest of the comments

[-] chebra@mstdn.io 53 points 4 months ago

@Irelephant

> "Hey guys, I want to leave X, should I go to Bluesky or Threads? What? Mastodon? Never heard of that. Looks very complicated, I'll pass"
> -- CEO, founder, IT wizz on LinkedIn

Every time!

[-] adbenitez@lemmy.ml 5 points 4 months ago

Or the classic "guys I am leaving WhatsApp, moved my whole family to Signal, another centralized US-based silo that requires phone numbers and runs on AWS, CloudFlare, etc."

[+] easily3667@lemmus.org 27 points 4 months ago* (last edited 2 months ago)

[deleted]

[-] adbenitez@lemmy.ml 8 points 4 months ago

        if they leaked something you wouldn't know because US government law doesn't allow them to disclose if they requested data.
uses AWS servers that also the gov could ask for access to Amazon directly without even talking to Signal, being centralized and depending on AWS infra is also a weakness.
needing phone numbers to register, often tied to passport and it is super easy to get your whole network when compromising 1 device
all centralized services start nice, attracting users, once they have you, and money starts being a problem.... meet: enshitification

[-] FauxLiving@lemmy.world 14 points 4 months ago

If they were leaking there would be prosecutors using the evidence in court, on the public record.
It doesn't matter what infrastructure that they use because the service provides end to end encryption. This remains secure even if a third party is able to record all of the traffic between the two devices.
Has there ever been a single instance where a Signal client had a RCE exploit? Of all of the software on your phone likely to be exploited, signal is low on the list (your browser is where they get you).
Enshittification is a reason to leave, speculation about maybe possible enshittification in the future is not.