As an innocuous example of sharing data with pure bash and Arise, these people here have preserved the Trigedasleng dictionary, the fictional language from the science-fiction/young adult show The 100, after another fan site was taken down. They use a github repo as data backend, and Arise as a static-site generator for github pages. All their data are stored in lots of version controlled JSON files instead of a database. According to the authors, this democratizes the process of forking and adding data to the repository.
whydudothatdrcrane
I think Arise is sth I had seen and at the time motivated these thoughts. It is a bash based static site generator, that, according to its docs, it is build with the philosophy of minimal language requirements as well as other dependencies.
I would argue that a solution like this is better than heavily nested JSON files, or a cascade of Ordered Dicts in Python, or even a db.sqlite that would require the user parse or query the data somehow. In fact, a user could retrieve the static site from their own distro package manager and run it in bash with minimal dependencies.
I haven't tested this solution yet, but it looks very promising as to what I originally had in mind.
In AI-generated sound you can see it in the waveform, it has less random noise altogether and it seems like a huge, well, wave. I wonder if sth similar is true for images.
Sure, I see where you are coming from. I used to be in favor of PGP as well, but I think I just was conditioned to it because it was everywhere, eg Linux repositories. The argument I found more convincing in this article is that PGP is a swiss-army knife. You might want to use it in an emergency, but professionals have special tools for each different task. In fact, the article suggests very nice alternatives for each task: Encrypt with age , sign with minisign. Two different tasks, two different tools, no need for a web of trust. Just for the arguments sake why do you think that PGP is worth it given the burden of entry?
Perhaps we could benefit from sth like MetaCritic for science.
As far as I know the peer reviewers are in most cases now selected by the editor, they self-select to respond, are not paid for their work, and the process for alarmingly many journals is not even blind. I always thought that this makes the process vulnerable to network effects in the field, since people are obliged to a certain etiquette when commenting on established figures in their own field. So yes, I get where you are coming from, but similar to the scientific method, peer review is also great to describe in theory, in practice it would require much more precise protocols, like Web protocols I might say. I really don't want to be a pessimist about science in the current political climate, but if we want these great ideals (Scientific method, Peer Reviewed evidence) we will have to abandon the existing situation as soon as possible.
People say this over and over "depends on your threat model" and yet people seem to have a hard time understanding that. Your threat model is "who is your adversary and what he is willing/able to do". Your security goal is what do you want to keep from your adversary.
As others said, if you are an activist or sth important, perhaps you might want to build a working knowledge of cryptography yourself. If you just want META not being able to see your NSFW chat with your romantic partner Signal might be more than enough. In fact, people way more relevant than me also suggest that Signal is good even for bounty hunter vulnerability reporting.
Having said that, what bugs me most is that people think the instant messaging format as suitable for everything: activism, jobs, crimes, broadcasting 1970's prog rock for extraterestrials , whatever lmao. Do you really want to use your phone for all that? Like, just carrying the phone around in the first place nullifies your other precautions, for all advanced threat models beyond privacy of non-critical social messaging.
Persistent/resourceful adversaries can eventually get to you, using a set of penetration and intelligence techniques, which means, if you are involved, the convenience of messaging your partners in crime from the phone in your pocket while waiting for a bus is a convenience you probably can't afford.
protected by PGP
Someone here recently linked to this gem https://www.latacora.com/blog/2019/07/16/the-pgp-problem/
The article warns PGP over Email is a safety concern. They suggest Signal instead. (And several other tools to replace PGP)
This is not just about the pressure put on academics to publish, but it is a whole systemic rot, that is not even remotely living up to the "peer reviewed evidence" myth.
The whole idea of an intermediary authority for scientific publishing is a scam, and it corrupts people who want/need to be in the pyramid. The whole thing is ill-conceived, needs to be abolished, and a new thing should be put in its place. At some point someone said, "I can ditch all this and just publish research on my blog, then people will criticize and build upon that". No publisher, no paywall, no problem. If we follow this example, all of these issues can disappear overnight. But the vast majority of professionals value their career more than anything else, including our tantamount tenets of what science communication should look like.
You might object that "intermediary authorities" and "peer review" are essential to prevent disinformation and conspiracy theories. Well, we are past this point aren't we? Did this system prevent conspiracy theories and disinformation, hoaxes, and fraudsters this far? No, so how exactly will it prevent all of these terrible things in the future? If anything, building arguments in the open without paywalls might deter at least some of the conspiracy theorists that brandish paywalls as further evidence of cover-ups and secrecy, and ditching the horrible jargon and high-brow style might actually help the common sense of scientific arguments just shine, and combat the rising anti-intellectualism of right-wing conspiracy theorists.
Like, if you explain Elsevier's etc business model to any lay person (Pay me money so that I let you publish to my super-selective journal and feed your vanity) they have the most funny reactions, because to anyone who is not conditioned to this absurdity, it just sounds like a pyramid scheme.
This is a story from August 2023, and was covered in many outlets (I quote here NYT for reference only)
Federal regulators continued their crackdown against employees of Wall Street firms using private messaging apps to communicate, with 11 brokerage firms and investment advisers agreeing Tuesday to pay $549 million in fines.
Wells Fargo, BNP Paribas, Société Générale and Bank of Montreal were hit with the biggest penalties by the Securities and Exchange Commission and the Commodity Futures Trading Commission. Together, the brokerage and investment advisory arms of those four financial institutions accounted for nearly 90 percent of the fines, according to statements released by the regulators.
You might have a different type of person in mind than other commenters. Most commenters had such people in mind who won't install a password manager or an ad-blocker, or won't hard reboot their Windows unless supervised. Having said that, I don't think that even if you had technical people in mind this fits the question. They tend to take substantial more effort to learn and use effectively than the scope set by the original question. I thought this question was for little things that have a quick, lasting, and substantial effect. Learning awk and sed is a different thing entirely, I think of those more as productivity tools you can invest in mastering, and pay off in the long run.
Yes, that would be great. People put so much stock in peer review because there is the myth that every statement undergoes under a rigorous process of verification in multiple laboratories. The reality is, as you said, there is a culture of active discouragement of reproduction and the pushing of novel results.
Not to mention that to foster reproductions, researchers should be trained into a culture of replication and collective metanalyses. As it is now, reproductions are less than an afterthought for the vast majority of researchers, and virtually none knows how to handle multiple replicatory studies instead of p-hacking.