Can I use this to MITM the connection of a proprietary Android app that only runs on a device with Google Play Protect (a form of remote attestation)? And then reverse engineer the API?

🪡

I think this is a better representation of Debian (the beard is important). https://commons.wikimedia.org/wiki/File:Ken_Thompson,_2019.jpg

GOG is a platform for selling closed source software. If the client was open source, would you be willing to use it to buy and run closed source games? If so, why are the requirements for the client different from the games?

Seedvault doesn’t backup apps whose developer chooses not to let you back them up. It doesn’t backup the encrypted keystore or the tee. It misses a lot, because Android fundamentally puts developers above users.

xdotool

The OS itself, Debian. If I have to pick a component, Mate Panel. Compared to the Windows 11 start menu, it’s useful, customizableand has no ads. My IT department at work can’t even figure out how to remove the Windows 11 start menu ads from my computer.

Flatpak doesn’t have digital signatures anyway, so effectively nothing is verified on Flathub

You mean get Microsoft to take it down? And then it goes back up on a self-hosted git repo? This does not enable Bambu, Microsoft, or anyone else to sue Rossman in China.

Does Rossman have any presence in China? If not, and if the files are hosted outside China, there’s nothing China can do.

I have to use Windows 11 at work. Whenever I complain about it to any of my friends, they say, “it’s easy to work around that. You just have to…” and then they say to modify some registry key, or set up a group policy, or run a powershell command, or use some cleaning tool.

But even if it’s easy to do that, it’s not easy.

1. You have to know about the key or the cleaning tool, and there’s a different one for every problem.
2. You have to keep up to date with the new user-hostile behavior introduced to Windows every month.
3. You have to keep up to date because Microsoft removes those circumventions, because they don’t want you to be able to remove their trash.
4. You have to vet the tools, make sure they’re not malware. And continuously make sure it’s not replaced by malware in the future. There’s no central repository of Windows programs like there is for Debian or Ubuntu, so if you just web search for the tool name every time, you might click on a malvertising link in the search results instead.

LLMs and current generative AI won’t. But there will be better AI systems in the future.

And consider the scale of the datacenters they’re building: New AI data center in Utah will generate and consume more than twice the amount of power the entire state uses. They’re installing 9GW of natural gas turbines on site. They’re planning for better AI that will be much different from the current batch.

While we all know that current AI is much worse than human work, consider that they might just use it anyway, and not care that their product is shit.

Anyone got a mirror of the post? I’m getting this error message:

Sorry, a potential security risk was detected in your submitted request. The Webmaster has been alerted.

Reference ID: 18.a104d217.1777692249.4596f77

You can proceed to www.senate.gov.

If this problem persists, please contact the Office of the Secretary Webmaster at webmaster@sec.senate.gov.

Clicking the www.senate.gov link gives the same error message.

A car warranty lasts like 2 years. I can’t afford a car less than 2 years old.

$100-$500 according to the article. No discount for the biometric data they’ll sell.

Web browsers have a huge attack surface, and are most people’s main exposure to potential exploits. Without javascript, 99% of the attack surface disappears, becuase the attacker no longer has a way to run arbitrary code.

A lot of terminal-based browsers don’t do javascript.

If I want to scrape a page, this makes it a pain for both parties. I’m not an AI company, so I can afford the hash tax, but it’s still a pain to spin up Firefox from a from cron job instead of wget. And I’m still doing it, Anubis doesn’t stop small time scrapers like me who aren’t running AI training, and only scrape like one page per day. So now the server has to serve the original page, plus all the Anubis stuff each time my crown job goes off.

It sucks that you can’t browse anywhere without javascript anymore. It used to be that all the open source sites, most news sites, forums running phpbb, even YouTube aside from the actual <video> element all worked without javascript, and as a bonus there would be no ads.

Now, you can’t browse anywhere without these challenges. At least this one is noninvasive, but the Cloudflare one and the Google Recaptcha do a ton of fingerprinting to choose whether to let you in.

USPS has a home-rolled one that requires web assembly enabled, or it silently fails with a blank page. There’s no non-malicious excuse for that.

If this is the future of web browsing, hopefully more sites use systems like Anubis. But I also hope at least static pages can be viewable as plain html.

Their proof doesn’t prove anything if they control the hardware and software scanning your biometrics.

In 1991, lithium-ion batteries cost around $9,200 per kilowatt-hour — 33 years later, they cost just $78.

Where can I get lithium-ion batteries for $78 per kilowatt-hour?

This affects SD cards, which are extremely common and supported by open source operating systems. This affects Compact Flash cards, which use the same protocol as PATA hard drives, just a different connector.