Sysosmaster

The thing to remember here is that the only way to hide (real world) data in an image is to reduce the amount of data in the picture... a blur or swirl leaves most if not all data just in the picture (although distorted) Any filter that removes data (such as pixelate or blacking out / whiting out) can be used to safely hide this data... Just remember to also strip out any unwanted meta data (Exif-data) and do not use layers but a 'flattened' version of the picture.

Well. It’s a very Roddenberry view to not have borders, currency, poverty.

Might be better than what we have but it won’t fix any inherent problems in society (or to put it differently. The inherent society problems must be solved before such an utopia can be created imho.)

You make it clearer than I said it. Thank you for that. And I learned from you that the U.K. implemented the detective by explicitly making the action a gift, this differs from my country in that regard. (I am always glad to learn something new)

The directive is an old one making all consumer business laws in the union more or less the same.

The thing that makes it a gift, is that A gift is the only allowed legal transformation that can happen. (Ownerships transfer is a transition in the legal sense). Ea. A company is required to always act lawfully and the only action open for unsolicited (=anything without a predefined base) package is to gift it.

A contract (=agreement to do something in exchange for something else, usually in paper but can be in any form even verbally) is needed before any transformation besides gifting.

This legal sense does not mean it’s still proper to send the package back if the company contacts you and pays for the shipping, but that’s not in law.

The detective I remember reading about during my ‘middle school’ studies (around 1998). I could be mistaken In it and if I am feel free to tell me. All I remember was that the directive made it so that all in the commons market must implement similar protections for Consumers regarding unsolicited mail and package by companies, not in small part to stop the extortion type of sale practice of the “free sample with overpriced subscription” (it’s why they switched to you having to request the sample)

If the U.K. properly implemented the European directives, if a company sends you something without you requesting it (e.a. Unsolicited) than it’s legally a gift. Even if they add a bill (it’s unsolicited after all).

If they request it back you may send it back with property rights reverting to them (it’s a gift again) but legally there is no way to enforce it nor is there a request to get anything back For it (Ea. Money or other credit)

If there is no contract (Ea a purchase request/ intend) than anything a company Can send to a consumer is a gift.

Not very many use cases??

Except for: - updates of software. - distribution of public video files. - distribution of install images. - distribution of raw public measurements (ea science data).

Basically BitTorrent is the protocol for any usecase with 1:n (or n:n) with public data (ea. No data access controle is needed).

Copyright has nothing to do with it and the nature of BitTorrent does make it also a good fit for some pirates.

Never forget that the following is shared over BitTorrent: - World of Warcraft updates. - Linux distribution install images. - haveibeenpowned sha lists.

And that’s just what I personally know. I know there is more.

Regarding your side note. Apple is also, more and more, requiring you allow the login with Apple button. This would effectively shield most of the data off if you want.

How does a feature of the Command line version of php impact developers? Developers should not run applications on production machines themselves (either its a script, a deployement agent / engine or a operations guy that does that work (including devops guy with operations)).

As for security you must keep up with the capabilities of the tools you use. Php has been able to run as a webserver for years (even before 5) all they did is implement a good sane dev server to run php code without setting up a complex php environment (that is probably less secure).

This is only present in the CLI builds of php, And you should limit who can run the php scripts anyway on a production server.

Remember that setting up a reverse shell only requires a networkable shell (like bash). Most linuxes (including containers) there for have the capability of having reverse shells started on them. The way to protect abuse of PHP’s webserver function is the same as the one to protect against bash reverse shells. Do not allow any outbound traffic but only traffic you trust!

Do not blame php for having a feature that others have had for years. PHP’s version is no better or worse than any of them.

I see a lot of claims regarding controle of data. But only 1 option (Fauna.com) as to actually store the passwords. (Or am I missing something).

This would mean I do not only need to trust your code. I also need to trust this totally 3rd party with my passwords...

Further you list it works everywhere, but are missing a cli variant (so not everywhere).

As to the trust claim in the fake exchange between the 2 people. Nobody talks like that, if they do not want to use a password manager it is always another reason than trusting the code. (Or all you would need is some audits to create that trust) It just gives the feeling (to me) this is a piece of software looking for a problem to fix.