Hacker News new | ask | show | jobs
by fhsketbx 697 days ago
> out of Western programmer's heads

This is less about regional borders and more about security.

Security is all about compromise.

I use Qubes because it’s an operating system where the compromise always heavily favors security over other considerations. Limiting to ascii shrinks the attack surface.

The fact that ascii contains English characters is historical rather than ideological.

The team behind Qubes is multinational, but the lead is Polish and the Polish language has a character set outside the ascii standard.

How do you propose protecting against the sort of attacks Qubes was trying to mitigate?

1 comments

I think a whitelist that covers more than English would be the way to go. You could even set up maintainers for each block or something.

I don't think it's ideological in any "conscious" sense, however there is an argument to be made about ideology being the water the fish swims in.

Also I know I said ASCII as a shorthand and because that's often something that developers say, but it's quite possible these "Latin" characters aren't pure ASCII but may include extended Latin sets like Latin-1 and the like, which might cover the Polish case.

Again though, I think that you could have a system where you have maintainers for different blocks to audit them for whitespace or other deceptive characters and that could work fine.