531–540 of 554 posts
Practically speaking, outside Intel and AMD, what CPUs are left to use?
RISC-V.
Earlier quoted context omitted.
So basically, Cory Doctorow's "The Upcoming War Against General Computation" ? https://boingboing.net/2011/12/27/the-coming-war-on-general-... https://github.com/jwise/28c3-doctorow/blob/master/transcrip... Don't know enough about the subject to tell if his "attempts to control general computation will converge on rootkits" prediction has held up.
To this talk, there exists a less well-known sequel: DEF CON 23 - Cory Doctorow - Fighting Back in the War on General Purpose Computers https://www.youtube.com/watch?v=pT6itfUUsoQ
Earlier quoted context omitted.
I think this is more for Android phones, and preventing a malicious app on your phone from using the root access to hijack data from your banking app.
Well that's the problem.... the next step would be requiring users to use MS Edge, because a malicious version of firefox could capture/modify banking/transaction data. Want to pay bills? Give money to microsoft first.
We’re not just talking about the freedom to run software on your own device here, we’re talking about interacting with outside systems. There is an important distinction in context.
Earlier quoted context omitted.
Indeed, so the user should not buy a computer where they're not in control of the TPM, if you can't disable it/add your own keys, then don't buy that computer
That rapidly converges on "you can't buy a computer and use it", because economic interests favor trusted computing devices.
Earlier quoted context omitted.
Well that's the problem.... the next step would be requiring users to use MS Edge, because a malicious version of firefox could capture/modify banking/transaction data. Want to pay bills? Give money to microsoft first.
Are you saying the bank doesn’t have the right to define what kinds of software are permitted to access its systems? We’re not just talking about the freedom to run software on your own device here, we’re talking about interacting with outside systems. There is an important distinction in context.
As long as it adheres to basic web standards, I believe no, the bank should have no say in what browser you use to access their webpage.
Earlier quoted context omitted.
The EU just mandated chats to be scanned for content. Of course just for CSAM just as the meta data collection is only used for terrorism. Problem is that the latter is also used for parking tickets. They really try to hit the definition of a totalitarian state by the letter.
The law has yet to be passed. And its facing immense backlash, even from governments like Germany.
Earlier quoted context omitted.
That is precisely the proof I need before I ever buy into either. I'm very optimistic about PinePhone but AIUI it's currently quite far from being a reliable daily driver for the kinds of tasks I need one for.
If everyone behaved as you do, we probably wouldn't have any progress.
A de-Googled Android or iOS device with a judicious selection of apps is good enough to fulfill 80% of the "geek device" use case segment (though not at the same time - de-Googled Android is better at running arbitrary software, whereas iOS seems to be better at painless privacy). I'm just not invested enough in open smartphones to fight PinePhone's software immaturity, or to spend crazy amounts of cash on a Librem.
On the other hand, I was an adopter of the Pinebook, and will be for (affordable) productivity VR as soon as I get the chance. For both of these form factors, I'm more than happy to write 80% of the UI I use if it gives me what I want otherwise.
Earlier quoted context omitted.
Why don’t you spell out the conspiracy theory directly? It’s not relevant to this thread even if true but leaving the details vague makes it seem like you don’t think it would stand up.
You only think it's a "conspiracy theory" because that's what they have told you to believe. The organisations of OSS have been infected with those whose ultimate goal is to EEE, and they will do it by whatever means they have available to them.
The thing I fear the most with this is "proof that secure boot has never been disabled". This is just a way to brick your device from accessing services. What if you government's tax service requires such proof? Or bank? I cannot count how many machines I booted on Linux to rescue a hard drive, or image it, or wipe it, or just to install linux on them. All those devices, boom, paperweight for regular personal use. I…
This is already a problem with SafetyNet hardware attestation on Android. Because it's so easy to implement on the app side, everything from banking apps to games is verifying the device is running a blessed system image with a locked bootloader and no root access (read: no access to general-purpose computing). As a developer of a banking app, I do my best to avoid implementing this user-hostile crap, but not all dev…