521–530 of 565 posts
Earlier quoted context omitted.
my understanding is that they can hold you for a couple days without charges for your insubordination but as a citizen they have to let you back into the country or officially arrest you, try to get an actual warrant, etc.
they can just break the law
Earlier quoted context omitted.
> The "cryptographically sound seed" however is stored inside the secure enclave for anyone with the capability to extract. Sorry, I'm not sure I follow here. Is anyone believed to have the capability to extract keys from the SE? The secure enclave (or any Root of Trust) do not allow direct access to keys, they keep the keys locked away internally and use them at your request to do crypto operations. You never get di…
> Is your concern the secure enclave in an iPhone is deflatable, and in such a way as to allow key extraction of device unique seeds it protects? This is a safe assumption to make as the secret bits are sitting in a static location known to anyone with the design documents. Actually getting to them may of course be very challenging. > Do you have any literature or references where this is known to have occurred? I'm…
Earlier quoted context omitted.
uhm, are you saying its not possible to require an actual password to unlock osx?
> uhm, are you saying its not possible to require an actual password to unlock osx? uhm, are saying that i'm saying that? if so, please show me where i said that. thank you
Earlier quoted context omitted.
There is a way now to force BFU from a phone that is turned on, I can't remember the sequence
It’s called restarting the phone.
Quick-press Volume Up, then Quick-press Volume Down. Hold the side power button until the screen turns black (approx. 10 seconds). Immediately hold both the side button and the Volume Down button for 5 seconds. Release the side button but continue holding the Volume Down button for another 10 seconds. The screen will remain black. If the Apple logo appears, the side button was held too long, and the process must be repeated.
Remember...they can make you use touch id...they can't make you give them your password. https://x.com/runasand/status/2017659019251343763?s=20 The FBI was able to access Washington Post reporter Hannah Natanson's Signal messages because she used Signal on her work laptop. The laptop accepted Touch ID for authentication, meaning the agents were allowed to require her to unlock it.
Earlier quoted context omitted.
I'll bite. Why is it so terrible? I'm browsing this site right now on my phone and don't see the horror.
Phone networks by design track you more precisely than possible over a conventional internet connection to facilitate the automatic connection to the nearest available network. Also, for similar reasons it requires the phone network to know that it is your phone
Which sure, not using your phone is more secure, but good luck convincing users that they shouldn't use any apps or websites on the go.
Earlier quoted context omitted.
I guess technically musk rounds to a trillion. 852B acc to Forbes
That would be some aggressive rounding.
Earlier quoted context omitted.
>* Lockdown Mode disables javascript JIT in the browser - I want fast javascript, I use some websites and apps that cannot function without it, and non-JIT js drains battery more This feature has the benefit of teaching users (correctly) that browsing the internet on a phone has always been a terrible idea.
I'll bite. Why is it so terrible? I'm browsing this site right now on my phone and don't see the horror.
It's all objectively terrible, and it accomplishes nothing except allowing the user to use the internet right then and there.
Earlier quoted context omitted.
He was begging to go party with someone that spent time in prison for child exploitation. That in itself should make you hate the dude.
Yup. Hate him as person. But he is still net positive with his scientific/engineering contributions, is he not? Wasn't Edison an asshole?
Earlier quoted context omitted.
> Essentially, the question referenced here is that of ownership. Is it your device, or did you rent it from Apple/Samsung/etc. If it is locked down so that you can't do anything you want with it, then you might not actually be its owner. Both goals actually are possible to implement at the same time: Secure/Verified Boot together with actually audited, preferably open-source, as-small-as-possible code in the boot an…
The TPM can be programmed (ie designed) to lie about the whitelist though.