#power-corrupts — Public Fediverse posts

A quotation from John Adams

Our Passions, Ambition, Avarice, Love, Resentment &c possess so much metaphysical Subtilty and so much overpowering Eloquence, that they insinuate themselves into the Understanding and the Conscience and convert both to their Party. And I may be deceived as much as any of them, when I Say, that Power must never be trusted without a Check.

John Adams (1735–1826) American lawyer, Founding Father, statesman, US President (1797–1801)
Letter (1816-02-02) to Thomas Jefferson

More about this quote: wist.info/adams-john/34664/

#quote #quotes #quotation #qotd #johnadams #checksandbalances #conscience #emotion #intellect #power #regulation #restraint #selfdeception #selfdelusion #trust #abuseofpower #powercorrupts #bestintentions #selftrust #selfawareness

#CitizensAssemblies: strengthening democracy and participation

" #Earth4All advocates for citizens’ assemblies as a way of restoring public trust and participation in politics and creating safe spaces for dialogue around polarising issues.

We are calling for citizens’ assemblies on economic systems change so that we, the people, get a say in the kind of economic system we want.

What is a citizens’ assembly?

Citizens’ assemblies are designed to allow for a public debate outside of political parties. A randomly-selected group of citizens representing the full diversity of society are invited to participate in a process to explore an issue and formulate recommendations to government or parliaments. Often, independent experts are brought in to discuss problems and potential solutions.

We are living in a time of social and political polarisation. Social tensions are on the rise, bolstered by skyrocketing #inequality, and #democracy is increasingly at risk. Just 39% percent of people trust their governments to make good decisions. We urgently need to rebuild trust in our political systems.

On the other hand, we know that around the world, people want economic systems change. Holding citizens’ assemblies on this topic would open up space for exploring the kind of change we want, building trust and understanding between different groups, and co-creating a common agenda for the greater good.

In the 2024 Earth for All survey, 62% of people surveyed supported the use of citizens' assemblies to increase citizens’ influence in political decision-making.

What are some examples of citizens’ assemblies?

Citizens’ assemblies have already been used successfully to navigate politically contentious issues in highly polarised democracies. Prominent examples include:

- The Irish citizens’ assembly on abortion. The assembly is credited with helping Irish society navigate a deeply polarising issue. It led to a referendum and eventually a change in law.
- The Canadian Citizens’ Assembly on Democratic Expression, a three-year initiative to look at impact of digital technologies on society.
- France’s Convention Citoyenne Pour le Climat, the climate citizens’ assembly and a similar UK Climate Assembly.
- The Global Citizens’ Assembly for People and Planet was launched at New York Climate Week in 2024 and aims to bring citizen participation to the COP30 climate summit in Brazil."

Source:
https://earth4all.life/resources/citizens-assemblies/

#SolarPunkSunday #BuildingCommunity
#BuildingResilience #NoKings
#NoRulers #AddressingInequality #PowerCorrupts #PowerToThePeople

Came across this in a post about #SolarPunk a few weeks ago (post may be gone)... Anyhow, I've been reading #DavidGraeber and #DavidWengrow's book, "The Dawn of Everything," and thought the question posited by #Graeber was relevant to #SolarPunkSunday...

Are You An #Anarchist? The Answer May Surprise You!

"Every time you treat another human with consideration and respect, you are being an anarchist. Every time you work out your differences with others by coming to reasonable compromise, listening to what everyone has to say rather than letting one person decide for everyone else, you are being an anarchist. Every time you have the opportunity to force someone to do something, but decide to appeal to their sense of reason or justice instead, you are being an anarchist. The same goes for every time you share something with a friend, or decide who is going to do the dishes, or do anything at all with an eye to fairness"

David Graeber, The Ultimate Hidden Truth of the World, p 243, published 2009

"Chances are you have already heard something about who anarchists are and what they are supposed to believe. Chances are almost everything you have heard is nonsense. Many people seem to think that anarchists are proponents of violence, chaos, and destruction, that they are against all forms of order and organization, or that they are crazed nihilists who just want to blow everything up. In reality, nothing could be further from the truth. Anarchists are simply people who believe human beings are capable of behaving in a reasonable fashion without having to be forced to. It is really a very simple notion. But it’s one that the rich and powerful have always found extremely dangerous.

At their very simplest, anarchist beliefs turn on to two elementary assumptions. The first is that human beings are, under ordinary circumstances, about as reasonable and decent as they are allowed to be, and can organize themselves and their communities without needing to be told how. The second is that power corrupts. Most of all, anarchism is just a matter of having the courage to take the simple principles of common decency that we all live by, and to follow them through to their logical conclusions. Odd though this may seem, in most important ways you are probably already an anarchist — you just don’t realize it.

Let’s start by taking a few examples from everyday life."

Read more:
https://davidgraeber.org/articles/are-you-an-anarchist-the-answer-maysurprise-you/

#SolarPunkSunday #BuildingCommunity #BuildingResilience #NoKings #NoRulers #Inequality #PowerCorrupts

A French proverb

Adversity makes men; prosperity makes monsters.
 
[L’adversité fait l’homme, et le bonheur les monstres.]

French proverb

More info about (and translations of) this quote: wist.info/proverbs/79385/

#quote #quotes #quotation #qotd #frenchproverb #victorhugo #adversity #character #corruption #monsters #power #powercorrupts #problems #prosperity #restraint #struggle #troubles

A quotation (possibly) from Victor Hugo

Adversity makes men; prosperity makes monsters.
 
[L’adversité fait l’homme, et le boneur les monstres.]

Victor Hugo (1802-1885) French writer
(Attributed)

Sourcing, notes: wist.info/hugo-victor/1989/

#quote #quotes #quotation #qotd #victorhugo #adversity #character #corruption #monsters #power #powercorrupts #problems #prosperity #restraint #struggle #troubles

A quotation from Marcus Aurelius

Take heed not to be transformed into a Caesar, not to be dipped in the purple dye; for it does happen.
 
[Ὅρα μὴ ἀποκαισαρωθῇς, μὴ βαφῇς: γίνεται γάρ.]

Marcus Aurelius (AD 121-180) Roman emperor (161-180), Stoic philosopher
Meditations [To Himself; Τὰ εἰς ἑαυτόν], Book 6, ch. 30 (6.30.1) (AD 161-180) [tr. Farquharson (1944)]

Sourcing, notes, other translations: wist.info/marcus-aureleus/7824…

#quote #quotes #quotation #qotd #marcusaurelius #marcusaureliusmeditations #ascent #corruption #dictator #ego #emperor #imperiousness #leader #monarch #position #power #powercorrupts #powerhungry #pride #status

God bless #RoKhanna for getting the #GOP on committee majority on record as supporting & protecting #PEDOS

The #MAGAts wanna think only 'Dem Elite' hung out with #Epstein, but seriously?

Anyone who's read the autobiography of #MalcolmX knows the only way to stop the trafficking of children is to stop having ANYONE with the $$ & power to buy whatever they desire

#PowerCorrupts
#CapitalismKills

The aphorism, the dictum of the Twenty First Century, which should be carved into every Public Building, every statue, every street and painted on a thousand billboards.

"Power corrupts, absolute power corrupts absolutely."

Billionairism is barbarism.

#corruption #powerCorrupts
#uspol #cdnpoli #uk #eu #piketty

A quotation from Washington

It is important, likewise, that the habits of thinking in a free country should inspire caution in those intrusted with its administration to confine themselves within their respective constitutional spheres, avoiding in the exercise of the powers of one department to encroach upon another. The spirit of encroachment tends to consolidate the powers of all the departments in one, and thus to create, whatever the form of government, a real despotism. A just estimate of that love of power and proneness to abuse it which predominates in the human heart is sufficient to satisfy us of the truth of this position.

George Washington (1732-1799) American military leader, Founding Father, US President (1789-1797)
Essay (1796-09-18), “Farewell Address,” Claypoole’s American Daily Advertiser, Philadelphia

Sourcing, notes: wist.info/washington-george/54…

#quote #quotes #quotation #ChecksAndBalances #Constitution #despotism #dictatorship #government #power #powercorrupts #separationofpowers #tyranny

As I write this, the most recent big move by Matt Mullenweg in his ongoing dispute with WP Engine was to abuse his position to seize control of a WP Engine owned plugin, justifying this act with a security fix. This justification might, under other circumstances, be believable. For example, if WP Engine weren’t actively releasing security fixes.

Now, as I wrote on a Hacker News thread, I’d been staying out of this drama. It wasn’t my fight, I wasn’t deeply familiar with the lore of the players involved, etc.

BUT! This specific tactic that Mullenweg employed happens to step on the toes of some underappreciated work I had done from 2016 to 2019 to try to mitigate supply chain attacks against WordPress. Thus, my HN comment about it.

Mullenweg’s behavior also calls into question the trustworthiness of WordPress not just as a hosting platform (WP.com, which hosts this website), but also the open source community (WP.org).

The vulnerability here is best demonstrated in the form of a shitpost:

I do not have a crystal ball that tells me the future, so whatever happens next is uncertain and entirely determined by the will of the WordPress community.

Even before I decided it was appropriate to chime in on this topic, or had really even paid attention to it, I had been hearing rumors of a hard-fork. And that maybe the right answer, but it could be excruciating for WordPress users if that happens.

Regardless of whether a hard-fork happens (or the WordPress community shifts sufficient power away from Mullenweg and Automattic), this vulnerability cannot continue if WordPress is to continue to be a trustworthy open source project.

Since this is a cryptography-focused blog, I’d like to examine ways that the WordPress community could build governance mechanisms to mitigate the risk of one man’s ego.

Revisit Code-Signing

The core code, as well as any plugins and themes, should be signed by a secret key controlled by the developer that publishes said code. There should be a secure public key infrastructure for ensuring that it’s difficult for the infrastructure operators to surreptitiously replace a package or public key without possessing one of those secret keys.

I had previously begun work on a proposal to solve this problem for the PHP community, and in turn, WordPress. However, my solution (called Gossamer) wasn’t designed with GDPR (specifically, the Right to be Forgotten) in mind.

Today, I’m aware of SigStore, which has gotten a lot of traction with other programming language ecosystems.

Additionally, there is an ongoing proposal for an authority-free PKI for the Fediverse that appears to take GDPR into consideration (though that’s more of an analysis for lawyers than cryptography experts to debate).

I think, at the intersection of both systems, there is a way to build a secure PKI where the developer maintains the keys as part of the normal course of operation.

Break-Glass Security with FROST

However, even with code-signing where the developers own their own keys, there is always a risk of a developer going rogue, or getting totally owned up.

Ideally, we’d want to mitigate that risk without reintroducing the single point of vulnerability that exists today. And we’d want to do it without a ton of protocol complexity visible to users (above what they’d already need to accept to have secure code signing in place).

Fortunately, cryptographers already built the tool we would need: Threshold Signatures.

From RFC 9591, we could use FROST(Ed25519, SHA-512) to require a threshold quorum (say, 3) of high-trust entities (for which there would be, for example, 5) to share a piece of an Ed25519 secret key. Cryptographers often call these t-of-N (in this example, 3-of-5) thresholds. The specific values for t and N vary a lot for different threat models.

When a quorum of entities do coordinate, they can produce a signature for a valid protocol message to revoke a developer’s access to the system, thus allowing a hostile takeover. However, it’s not possible for them to coordinate without their activity being publicly visible to the entire community.

The best part about FROST(Ed25519, SHA-512) is that it doesn’t require any code changes for signature verification. It spits out a valid Ed25519 signature, which you can check with just libsodium (or sodium_compat).

Closing Thoughts

If your threat model doesn’t include leadership’s inflated ego, or the corruption of social, political, and economic power, you aren’t building trustworthy software.

Promises and intentions don’t matter here. Mechanisms do.

Whatever the WordPress community decides is their best move forward (hard forks are the nuclear option, naturally), the end result cannot be replacing one tyrant with another.

The root cause isn’t that Mullenweg is particularly evil, it’s that a large chunk of websites are beholden to only his whims (whether they realized it or not).

One can only make decisions that affects millions of lives and thousands of employees (though significantly fewer today than when this drama began) for so long before an outcome like this occurs.

If you aren’t immune to propaganda, you aren’t immune to the corruption of power, either.

But if you architect your systems (governance and technological) to not place all this power solely in the hands of one unelected nerd, you mitigate the risk by design.

(Yes, you do invite a different set of problems, such as decision paralysis and inertia. But given WordPress’s glacial pace of minimum PHP version bumps over its lifetime, I don’t think that’s actually a new risk.)

With all that said, whatever the WordPress community decides is best for them, I’m here to help.

https://scottarc.blog/2024/10/14/trust-rules-everything-around-me/

#AdvancedCustomFields #arrogance #automaticUpdates #Automattic #codeSigning #cybersecurity #ego #MattMullenweg #news #PKI #pluginSecurity #powerCorrupts #SecureCustomFields #security #softwareGovernance #supplyChain #supplyChainSecurity #supplyChainSecurity #technology #threatModels #trust #WordPress #WPEngine

@PJ_Evans @havvyhh2 @CStamp @GottaLaff
Seems that way. #PowerCorrupts.

J.D. Vance on #Trump # ... a thread.

#JDVance
#hypocrite
#powerCorrupts

01/x

https://x.com/sbg1/status/1812930006915355104

Given the eerie similar nature of most rags to barbarity stories, in that good people turn evil, could you ever see yourself as a dictator?

Before you scoff, remember how much evil came from the perception of doing good, or changing the nation.

#CriticalQuestions #Quiz #PubQuiz #RagsToBarbarity #Evil #Good #Dictator #StayHome #StaySafe #StayHomeStaySafe #PowerCorrupts

https://youtu.be/rsQ5YKixQmw

And as the fediverse continues to take off, it would be really worth looking into moving to a smaller instance, maybe even starting your own* with a few friends or family.

The lesson here really should be not letting power concentrate in the hands of a few people.

* See https://stefanbohacek.com/blog/lessons-learned-from-running-a-single-person-mastodon-instance/#hosting for paid services that do most of the hard work for you.

#fediverse #decentralization #capitalism #PowerCorrupts

What has #kevinmccarthy given up, and at what price? #powercorrupts https://www.bbc.co.uk/news/world-us-canada-64194129