Live data from Hacker News

What happened to running what you wanted on your own machine?

hackaday.com

101–110 of 315 posts

Re: What happened to running what you wanted on your own machine?

#101

Earlier quoted context omitted.

This is a bizarre comment for an open source init system

The history of TiVoization[0] tells us otherwise. [0]: https://en.wikipedia.org/wiki/Tivoization

Is the issue that they support secure boot type features?

Re: What happened to running what you wanted on your own machine?

#102

Will LineageOS and other similar ROMs have this limitation as well, or will it be baked into the hardware?

No, but when remote attestation reveals that you're running an OS that's not blessed by Google, the megacorps will make their apps all refuse to run on your phone. A few already do so today, e.g., the McDonald's app. In practice, I expect a situation where we have two phones: one to run Big Tech's apps, and one to run indie apps.

Re: What happened to running what you wanted on your own machine?

#103

Earlier quoted context omitted.

You can’t pass a law; because you have almost no bad examples to point to. Emulators, something that happened on the other side of the world, and piracy aren’t arguments. The banning of Parler did more for activism and awareness regarding platform control than all FOSDEM. Of course, HN happily piled on in favor of this decision, missing the moment to build common ground on platform control, for the sake of political…

It may be across an ocean, but Europe isn’t exactly the other side of the world geographically or culturally. Many of the ideas being trialed there are working their way into parts of the US. The frog is being boiled slowly, but the heat is rising more quickly in big cities. > HN happily piled on in favor of this decision HN is not a monolith with a single opinion. The loudest users at the time (not just here, all ov…

> HN is not a monolith

This is a lazy argument, as I can safely say that 80% or more of HN has the same political bent, and every community ever has said “but not everyone.”

Read the comments on the Parler deplatforming. See what was upvoted. See what the consensus was. Nobody cares about the principles, even here, when rubber hits the road.

Imagine if the undesirables, on either side, started actively using all the decentralized censorship-resist tech for their cause. Would the builders and commentators here be saying “working as designed,” or would there be a sense of fury, a sense of “not like that?” A sense of “that was supposed to enable my cause, not yours?”

Suppose Proud Boys coordinated their Jan 6 activities on Signal and Tor. Suppose Truth Social was built on ActivityPub and MAGA developers were the loudest voices at FOSDEM advocating for censorship-resistant protocols. How do you feel? Are we still citing the same principles? If not, we never believed them.

> The public will not respond until the groundwork has been laid to make effective protest impossible. Only then will important things be regulated out. Until then it will just be “nerd stuff”.

I’m looking at history and noticing that 99.9% of revolutions did not have the internet required to be successful.

Re: What happened to running what you wanted on your own machine?

#104

This idea that protecting users is worth the cost of giving up your ownership rights is fallacious. Protecting 1 million grannies is an entirely different risk class than the security implications of stopping everyone from using their devices as they see fit. Protecting 1 million grannies means everyone loses ability to install apps that: -allow encrypted chat -allow use of privacy respecting software -download art/g…

When they say users need to be protected they don't mean the people. They mean the database record.

Haha, it's a bit sad when the record's get compromised it's still the people's problem. :p https://www.youtube.com/watch?v=CS9ptA3Ya9E

Re: What happened to running what you wanted on your own machine?

#105

Earlier quoted context omitted.

IMO, I don't see how remote hardware attestation avoids being spoofed. Yes, TPM is involved, but the end of the day, it's an API request/response. There are so many ways the request could be spoofed, and the attestation likely requires coordination with hardware vendors that have proven to be Highly Secure TM with the history of secure boot leaks.

> I don't see how remote hardware attestation avoids being spoofed Hardware cryptoprocessor. Keys are held in a tamper resistant secure element. You're not gonna get at those keys without pouring some serious resources into the task. The keys are owned by the corporation and used to establish a root of trust from boot. If you change anything at all to suit your interests, verification fails, your machine is identifie…

History tells us there will always be a “low cost” vendor with exploitable hardware, or if production becomes more tightly controlled, inevitable cost cutting and declining standards will provide a way in. Not that we shouldn’t oppose locked down hardware, but locking things down creates pressure and motivation for the people who like things to be unlocked.

Re: What happened to running what you wanted on your own machine?

#106

Earlier quoted context omitted.

> Roms face a different problem: bootloader locking. Is that a problem these days? It was over a decade ago that I last needed to jailbreak a phone, nowadays it’s just "I’d like to unlock" "Ok".

That’s possible on very few phones these days. Only a handful of OEMs still ship phones that can be bootloader unlocked at all (at least in the US), and even several of THOSE require phoning home to the OEM to get an IMEI-dependent unlock key to pass to fastboot. Source: 7 years of running deGoogled Android phones and 11 years of running ROM’d Android phones before recently moving to iOS and giving up.

Not in the US, so might be one of those pesky regulations we have over here.

Re: What happened to running what you wanted on your own machine?

#107
post #4

I was there, 3000 years ago, when we started ringing the bell about “trusted computing”. Honestly it’s not as bad as I expected

I don't agree, it is absolutely dreadful, and we saw this coming and did nothing about it.

Think about it: you need permission to run software on your own hardware. Every time you launch a Mac App, it checks in with its masters to be sure its okay to do so - every time you install an app on your mobile device, it does the same thing.

People accept this terrible state of affairs because the "user experience is better" - but this is a fallacy. Under the cover of 'security issues' that their are incapable of fixing, due to very poor architecture decisions, OS vendors have instead bolted on an insanity and sold it to the user as progress.

Every computing device should have everything it needs, onboard, to write software for that computing device. That they don't is because the OS vendors are cowardly running from the bloat of yesteryear and adding more bloat tomorrow to cover it all up.

There will be a backlash against this. We see it already in the retro-computing and alternative-platform hacking communities, which are growing and growing, exponentially, by the year.

Its only a matter of time that someone wraps up this freedom-to-use concept in hardware that is sexy enough to compete with the totalitarian-authoritarian platform providers. Any .. day .. now ..

Re: What happened to running what you wanted on your own machine?

#108

It's important to understand that we could genuinely lose general purpose computing. I don't think it's in serious danger at the moment, but we've been in the midst of a slide in that direction for the last 10-15 years. Part of it is mobile phones, part of it is TPM, part of it is market forces. The latest turn is strictly political. We've really foolishly built the technology necessary for authoritarianism just a fe…

Oh wow... The idea of losing general purpose computing is a terrifying thought I've never considered before.

Re: What happened to running what you wanted on your own machine?

#109

Earlier quoted context omitted.

The history of TiVoization[0] tells us otherwise. [0]: https://en.wikipedia.org/wiki/Tivoization

Is the issue that they support secure boot type features?

No, the issue is too much of the Secure Boot chain is currently being controlled by Microsoft.

Kernel being GPL has no point currently. Require hardware attestation with Microsoft private keys + systemd-boot + systemd + uutils can create a nice walled garden, allowing "vendors" to build locked-down hardware-OS pairs.

More importantly, uutils is MIT, which can attest at every level, without sharing a line of source code.

This will affect everything from small appliances to big iron and it can be very ugly.

Re: What happened to running what you wanted on your own machine?

#110
post #107
post #4

I was there, 3000 years ago, when we started ringing the bell about “trusted computing”. Honestly it’s not as bad as I expected

I don't agree, it is absolutely dreadful , and we saw this coming and did nothing about it. Think about it: you need permission to run software on your own hardware. Every time you launch a Mac App, it checks in with its masters to be sure its okay to do so - every time you install an app on your mobile device, it does the same thing. People accept this terrible state of affairs because the "user experience is better…

It can be turned off on your Mac if that is what you want.
Post reply on HN