But then you have to deal with this annoying “feature” of it deleting your data when it feels like it. Can’t tell you how much work I’ve lost to this bug.
I’ve just switched to using hurl. Can’t be bothered with any of this nonsense with all these GUI programs
I'm not aware if you can do it the way you mention, but you can used NextDNS and it pretty much cleans most of the ads (I actually haven't seen an ad in a very long time).
I am pretty active in the blocklist community, co-maintain a FOSS network monitor and firewall for Android, was a contributor to AOSP, and run a public DoH/DoT resolver; to me, the writing has been on the wall for the past few years. Plugins like uBlockOrigin, alt web-based front-ends like Invidious, and reverse-engineered apps like YouTube ReVanced will most likely be the only options left in the not so distant future.
I don't know about any research on the matter, but I can say 2 things that worked very well for me:
1) take an intensive course first
2) then live in a country where the main language was the one I learned
Granted, point 2 isn't easy, but nothing can beat it.
The most important point is to use the language on a regular basis. If you don't, you'll forget it quickly.
I agree, the bootstrapping trust is a hard issue, and I don't think either that a distributed system will magically fix things. What would happen is we'd just change one set of problems for another one, but IMHO it'd be a better system overall. In this case, making things more visible is a better thing. That's an interesting point about the way a distributed model would evolve. My question is: does it matter? If we could more easily spot a bad actor, wouldn't it make everyone behave better?
He was probably talking about the centralised model used with CAs, and trying to start a discussion about an alternative to the CA model, probably some way of decentralised control, hence the bitcoin reference.
Convergence [1] comes to mind.
I would be in favor of decentralised as well; nobody should have to pay money to some bunch of trolls just to use encryption; this is a friction point for a lot of newcomers to web development. In fact, making HTTPS free to use would probably be the best thing that could ever be done for cybersecurity for mankind. Make it zero-friction over HTTP, somehow.
Let's encrypt works on the assumption that there is no reason why https certificate cannot be easy (not as cumbersome?) to use AND free of cost. They hope to start availability in the middle of this year. Free of cost is possible. We just need to make it easy, reliable, and repeatable for domain name owners to prove their ownership.