171–180 of 187 posts
One of the reasons I stopped using it.
Earlier quoted context omitted.
No, like specific apps that have been granted full disk access etc lose their permissions. It’s hell for IT, constantly breaks AV. I would not characterize that as reverting to a default. More often it’s a breaking change for how the security model works that ends up requiring reauthorization
Ah, sure, it's annoying but it's never giving new permissions you didn't give it before. And yes "revert to default" is probably not what's happening, but reverting to forcing a specific permission grant when the existing one was superceeded or replaced.
Earlier quoted context omitted.
You can obtain a cryptographic proof by recording the tls exchange, including the keys You need to use a tls intercepting proxy for that. I couldn't find any ready-made tool unfortunately, there's tlsnotary.org but it seems far from simple.
So basically I record what the browser sends to the server when I click the toggle and the server response? I wonder how I can attach a timestamp that cannot be faked.
https://en.wikipedia.org/wiki/Electronic_discovery
Specifically forensic web preservation or web capture tools.
PS: If they made it impossible for you to prove that you clicked a checkbox or not, then, logically, the burden of proof is on THEM.
Since I still need to use that account with Plus, I added a new card, flipped the switch back to no training, and submitted that thing on the privacy page which is a bit more formal. Probably should have signed up for a business account.
Earlier quoted context omitted.
You can obtain a cryptographic proof by recording the tls exchange, including the keys You need to use a tls intercepting proxy for that. I couldn't find any ready-made tool unfortunately, there's tlsnotary.org but it seems far from simple.
So basically I record what the browser sends to the server when I click the toggle and the server response? I wonder how I can attach a timestamp that cannot be faked.
They could only claim that it's been faked by claiming that you stole their TLS private key.
I've consistently refused to allow switching my privacy mode and despite their many iterations, they have never transgressed and kept me stuck on "legacy privacy mode"; their strongest privacy setting, which is not even available to select anymore. It requires that I keep my agents and cursor usage local and can't use their cloud agents (pretty neat cuz you can keep working with them on your phone). But so be it.
I am glad they don't secretly turn it on and instead keep nagging me to change it.
Earlier quoted context omitted.
So basically I record what the browser sends to the server when I click the toggle and the server response? I wonder how I can attach a timestamp that cannot be faked.
Look into court-grade eDiscovery Software. https://en.wikipedia.org/wiki/Electronic_discovery Specifically forensic web preservation or web capture tools. PS: If they made it impossible for you to prove that you clicked a checkbox or not, then, logically, the burden of proof is on THEM.
> If they made it impossible for you to prove that you clicked a checkbox or not, then, logically, the burden of proof is on THEM
Even in Europe the only "proof" that's required to companies is a log or database entry (both easily manipulated); if a user strongly disputed to have done it and sued the company for that, maybe you'd able to obtain some investigation on their systems.