What happened to running what you wanted on your own machine?

Post by fragmede » Mon, Oct 27, 2025, 8:13 PM UTC

donmcronald wrote: post #183

dghlsakjg wrote: post #154

Earlier quoted context omitted.

It’s already happening. Many big institutions lean heavily on mobile apps and other gated computing. I live in BC Canada and by far the easiest way to authenticate a login to provincial sources involves using the BC ID App as a second factor, even when logging in via desktop. Many banks now also use their app as a second factor, rather than a generic OTP option that can run on any hardware. There were also issues lik…

> Many banks now also use their app as a second factor, rather than a generic OTP option that can run on any hardware. This is one I’m willing to tolerate, as long as it’s optional. Something I don’t understand though is banking app setup. When I got a new phone this year, the RBC app made me submit some kind of live selfie. The thing is, I know they can scan your debit card with NFC and authenticate the PIN. I’ve us…

Post by Rohansi » Mon, Oct 27, 2025, 8:24 PM UTC

bigfatkitten wrote: post #240

rini17 wrote: post #232

Earlier quoted context omitted.

Raspberry Pi and clones/alikes are ARM devices with perfect Linux support.

Raspberry Pi is one of the least open platforms around. Broadcom SOCs preferred by Raspberry Pi require proprietary blobs to function, and much of their functionality is buried under a mountain of NDAs.

Post by bayindirh » Mon, Oct 27, 2025, 8:40 PM UTC

bitwize wrote: post #192

bayindirh wrote: post #109

Earlier quoted context omitted.

No, the issue is too much of the Secure Boot chain is currently being controlled by Microsoft. Kernel being GPL has no point currently. Require hardware attestation with Microsoft private keys + systemd-boot + systemd + uutils can create a nice walled garden, allowing "vendors" to build locked-down hardware-OS pairs. More importantly, uutils is MIT, which can attest at every level, without sharing a line of source co…

Uutils is literally one guy's self-tutorial to learn Rust. The fact that it's breaking Ubuntu has more to do with that than some shadowy conspiracy.

    - 22K stars
    - 1600+ forks
    - 33 releases
    - 622 contributors
    - 678 users (at minimum)
    - Code of conduct (with a debian.org mailing address nonetheless)
    - 1 distribution shipping it as default (so far)

Post by grebc » Mon, Oct 27, 2025, 9:20 PM UTC

bhelkey wrote: post #239

stephen_cagle wrote: post #196

Earlier quoted context omitted.

I think it is unfortunate how many resources are put into making things secure with TPM's and how little resource is put into basically having secure and simple sandboxing... All I really want is a computer that allows me to fully control the permissions and filesystem access of all the programs that I manually install on my system. Almost every program (in my case) needs 0 filesystem access outside of what it instal…

Another simple permission is network access. Why can't I restrict, say, a calculator app from accessing the internet on either iOS or Android?

Post by elric » Mon, Oct 27, 2025, 10:24 PM UTC

walterbell wrote: post #163

coldpie wrote: post #129

Earlier quoted context omitted.

Passkeys are another brick in this wall. The authors of the spec built in client software identification and attestation, which means authenticating parties can require you to only use certain, closed-source passkey clients. It's not hard to imagine a future where only blessed Passkey clients, such as Microsoft's, Apple's, and Google's implementations, are allowed by most services.

Password managers are regulated as "important" software under EU CRA (Dec 2027).