Earlier quoted context omitted.
I am genuinely curious here, when one player has a free market and the other does not, how do you think that will work out? Do you believe that America can remain dominant while its companies get 85% access to the world population and Chinese companies get 100% access? I honestly don't understand this attitude, yes free markets are great as long as your counter parties are free market economies also, but China has be…
[flagged]
U.S. Navy bans TikTok from government-issued mobile devices
161–170 of 170 posts
Re: U.S. Navy bans TikTok from government-issued mobile devices
#162Earlier quoted context omitted.
[flagged]
Yes, I realize this, and my belief is that American needs to decouple with China and bring the total net trade between the two down by 70-80%, leaving rare earths, agriculture, and some manufacturing left in the balance of trade. When two systems are so far off of each other, there cannot be fair agreement between the two. As a result the only three options are containment, playing by communist rules, or walking away…
Re: U.S. Navy bans TikTok from government-issued mobile devices
#163Earlier quoted context omitted.
Unfortunately requires root though, which means for the vast majority of Android users this is not an option.
Plus, regardless of background or technical expertise, rooting your phone dramatically decreases security. Downvoters: so what security features do you lose and gain when you root your phone? You've weighed the pros and cons, right?
There's a fantastic example in my sibling post. Rooting gains you the ability to more tightly control network access. That alone is massive for privacy and security.
Obviously you have to run code with lots of permissions, which means you could be highly compromised by a malicious app. The onus on the user is much higher to vet apps. At the end of the day you have to place some trust, even if you don't root. It's a game of balancing tradeoffs.
It's overly simplistic to say that rooting dramatically decreases security regardless of background or technical expertise.
Re: U.S. Navy bans TikTok from government-issued mobile devices
#164Earlier quoted context omitted.
Please don't post unsubstantive comments here, and certainly not nationalistic flamebait. We don't need yet another nationalistic flamewar. https://news.ycombinator.com/newsguidelines.html
I'm not sure that's fair. To me GP comes over as jingoistic nationalism, but it also seems to have a substantive basis - the idea that foreign nations should be ejected at all levels from a governments internal systems? I'd really like to ask "should other nations eject all USA companies products from their governmental systems too?" (because I'm really curious how an apparent ultra-nationalist sees that?), but you'v…
Every government is looking to angle what they can from other governments. If I were in charge of a government it would be the approach I'd take.
Re: U.S. Navy bans TikTok from government-issued mobile devices
#165Doesn't matter, they have it on their personal phone. App security is so bad that you pretty much need to virtualize the phone and feed it fake sensor data. The whole idea of unrestricted network access is stupid.
> App security is so bad that you pretty much need to virtualize the phone and feed it fake sensor data. Yeah, this is really bizarre to me. I was trying to check on volume levels through walls in my apartment, so I wanted to find some random decibel measuring app and lock it down so I don't have to worry too much about trusting it. But somehow Apple's permission model, which provides a whole pile of privilege switch…
Re: U.S. Navy bans TikTok from government-issued mobile devices
#166Earlier quoted context omitted.
Reading your comment melts my mind as a Linux user. You can't just set your vpn connection as the default route? What's even the point if it's not the default route? Applications (at least on Linux) have no idea what device they are using. They just request a connection to an IP and it's the kernels job to route that request correctly.
Of course Windows can (and does usually) use a VPN as an active route. The poster just doesn't know what they are talking about. In particular this sentence is complete nonsense: I'm sick of the idea that Windows perceives an internet connection somehow, hides it from me, and automatically makes it available to everything that asks for "the internet". But I don't actually know how to do this. Someone is working reall…
Re: U.S. Navy bans TikTok from government-issued mobile devices
#167Earlier quoted context omitted.
Plus, regardless of background or technical expertise, rooting your phone dramatically decreases security. Downvoters: so what security features do you lose and gain when you root your phone? You've weighed the pros and cons, right?
Not a down voter, but I disagree with you. There's a fantastic example in my sibling post. Rooting gains you the ability to more tightly control network access. That alone is massive for privacy and security. Obviously you have to run code with lots of permissions, which means you could be highly compromised by a malicious app. The onus on the user is much higher to vet apps. At the end of the day you have to place s…
So yes, that was a bit overly simplistic. I rooted my phones for a number of years before carefully looking at the pros and cons and deciding it was a poor choice for a consumer mobile phone. Obviously, we need root access for our dev machines and servers. But I try to follow the principle of least privilege, and in that case, not clear why root would be needed for a mobile phone.
But I concede that for some use cases, it can be a trade-off.
What other security advantage of rooting can you name besides tighter control of network access? Also, note that there are a few apps that allow some degree of firewall with unrooted phones. I also suspect there's a lot of room for improvement there.
Re: U.S. Navy bans TikTok from government-issued mobile devices
#168Earlier quoted context omitted.
That is what all units in USSOCOM do. No personal cell phones, smart watches, etc allowed in the office. Guests have lock boxes outside main entrance to secure their phone. About once a week security folks wander through the offices looking for phones with some type of detector. God help the person who brought their phone in.
You may have seen people doing the two minute sprint then? That's when you check the TOTP code on your phone, put it back on the stack of phones, and race as fast as you can back to your desk to enter the code before it expires.
Re: U.S. Navy bans TikTok from government-issued mobile devices
#169Earlier quoted context omitted.
Of course Windows can (and does usually) use a VPN as an active route. The poster just doesn't know what they are talking about. In particular this sentence is complete nonsense: I'm sick of the idea that Windows perceives an internet connection somehow, hides it from me, and automatically makes it available to everything that asks for "the internet". But I don't actually know how to do this. Someone is working reall…
I had a feeling that this was just an uninformed user, thank you for clarifying.
> Applications (at least on Linux) have no idea what device they are using. They just request a connection to an IP and it's the kernels job to route that request correctly.
This is a bad idea. I want to connect the application to the device I think it should use. It shouldn't be able to find anything I don't tell it about.
Re: U.S. Navy bans TikTok from government-issued mobile devices
#170Earlier quoted context omitted.
I had a feeling that this was just an uninformed user, thank you for clarifying.
You've described the same system I just said I didn't want. But I'm uninformed for complaining that I want something different? > Applications (at least on Linux) have no idea what device they are using. They just request a connection to an IP and it's the kernels job to route that request correctly. This is a bad idea. I want to connect the application to the device I think it should use. It shouldn't be able to fin…
> This is a bad idea. I want to connect the application to the device I think it should use. It shouldn't be able to find anything I don't tell it about.
Telling applications about resources is literally what the operating system is for. Both Linux and Windows let you do what you want.