Gargyle

or honestly @Any Browser Dev people

By that matter.

@BraveBrowser people

Add some things as user controlled public key pinning or even web resource version pinning in an advanced menu.

Which is a way weaker statement than what the parent implied.

An activist organization that is so intransparent that I don't even get what they are activists for.

I have only ever recognized blog posts about interpersonal matters by them which are rather cringy and don't add anything to the preexisting matter. All about first world problems.

Do you happen to know what concrete and half effective activism they actually do?

Bashing Gecko security in such ways is dishonest. Did you ever actually look at their architecture or do you just parrot a lazy blog post?

The real problem here is browser ever increasing scope. I never cared for VR or gaming in browsers. SPAs are user unfriendly garbage that I seldom see used for anything else than preventing user agency.

Never heard of any substantial thing there. Most "reports" state obvious things. Never seen anything but vaporware beyond Firefox. Thunderbird does their own thing now. Seamonkey is dead.

I currently do not use Brave due to other reasons but still want say:

Dns leaks are bad but Brave never was a serious anonymity browser. Just as Firefox never was and Firefox had many real ip behind proxy leaks as well. Firefox also never intendedly prevented dns leaks because it just takes system settings or specific doh settings. Its a dishonest comparison. Still their tor mode is a joke.

The referral tags aren't a big thing. They are fixed strings that are the same for every user. They do not identify anyone other than as Brave user, which is trivial anyway due to user agent and fingerprinting. Do you remember that Firefox back in the day did the same when it was underdog? If it makes them money,thats a very privacy and intrusion inexpensive way of getting that.

Ad replacement is opt-in only and an actually interesting concept to try fix the spying third party to everything issue. If its not on ads are just blocked.

Pocketing money from the Ad-view rewards if not claimed. I can't tell if they are actually pocket or just wait for registration of $creator. How else would they do it? They can't magically find out their bank account.

You say they grab donations? Like they actually replace Donation buttons in sites by their own? I haven't heard of that.I only know that you can pay into a Brave Wallet and distribute it to signed up creators. But you have to explicitly pay into Brave and its likely to have read how it works on the way to that. Have a source?

Whitelisting Facebook/Twitter tracking? They had a setting for that in main settings. Is it gone? Else give a source or decrypted pcap please.

Last time I checked telemetry code (early 2020) there really wasn't anything interesting to correlate in there.

KYC for using Brave Wallet breaks the whole vision of the ad replacement thingy. Ack. I hate it.

Most modified Firefox builds are extra buggy or make an easy to match browser fingerprint change that makes you unique. Icecat is severely broken. Waterfox can't keep up with releases. More... I use my distros build with custom settings and disabled backchannels.

I dont use Brave because their release management is garbage and their team is kinda opaque.

Applies to domains. Not just websites. Even phone number in whois required.

X Display Access ~ RCE

Can windows do per-user encryption?

On Dell devices in that age range I saw a bitlocker mode that used the drive controllers own encryption feature. I dont remember if the key was provided by tpm but they used attestation. I dont know if they had a key unwrap dependent on that attestation or if it was just a postfactum check that is submitted to management servers.

In that course I have seen a bunch of blog posts where people found bugdoors or easy auth bypasses in these drive controller encryption schemes. Is that still a thing?

In the lower class "Philantropist" is a most sarcastic word.

If you spend huge amounts into your de-facto own NGO's and use that to buy ridiculous amounts of land. This is not anything like contributing back. Its just charity-washed wielding of power. Because these "philantropists" still determine how their "donations" are actually used.

As admin and programmer: I didnt understand what spaces are trying to do when it was presented to me.

Initially, the framework agreement is only intended to demonstrate that Thales can also build radios at the technical level of the 1980s - and then also supply them well into the next decade: The framework agreement runs until Dec. 31, 2032, and includes extension options until Dec. 31, 2035. (...) On the one hand, the term is necessary to successively ensure the necessary equipment supply, starting from an equipment quantity of up to 30,000 units. On the other hand, the planned service life of the devices is at least 10 years. A change of manufacturer would lead to technical difficulties in maintaining the existing interfaces, technical dependencies, external dimensions and functionalities of the existing SEM 80/SEM 90 radios and is therefore not possible.

A decision on procurement is to be made only afterwards, which is why the value is initially also only stated as 0.01 euros in the announcement. After that, however, it could really go into the money: Should the Bundeswehr actually order all of the maximum 30,000 new old radios required, the volume involved would be around 600 million euros.

However, such a procurement would then have to be submitted to the Bundestag's budget committee for approval, the scope of which would depend not least on the progress of the digitization of troop radio. The parliamentarians must then decide whether they want to accept what the ministry calls the best of the bad solutions. And whether the Bundeswehr should still be able to afford technical equipment at the 1980 level in 2035.

Addendum: In the comments, the correct hint that there was already an article on this in the specialist publication Soldat&Technik on September 4, which, however, is also behind paywall and which I do not know. But a reference from their sister publication Europäische Sicherheit&Technik, September 2021 issue, also fits in with this:

The example of leadership capability clearly shows the extent of what has been missed. While at that time with the continuous introduction of AUTOKO90, BIGSTAF and SEM93 an effective command and control system was implemented with the technical means of that time, today the command and control means are either still the same, not (any longer) continuously available or in the meantime completely obsolete. Regrettably, the Army is thus unable to achieve the interoperability and crypto-standards of allied forces with SDR (Software Defined Radio) radio on the basis of, for example, the SEM 70/80/90 analog radio series.

(Archive photo July 2020: Soldiers during an exercise with the SEM70 radio, the portable version of the SEM80/90 - Christoph Loose/Bundeswehr)

In that spirit I'd believe this is just a giant ploy by preppers.

Deepl translation (they got really good):

Because the Bundeswehr is making slow progress in equipping itself with modern digital radios, the force's procurement agency is taking an unusual approach: old analog radios from the 1980s, which are beginning to show signs of age and for which there are no longer any spare parts, are to be replicated one-to-one.

For years, the Bundeswehr has been working on equipping its land forces in particular with digital radios - this technology is needed not only to better protect radio traffic from eavesdropping and interference, but above all for data transmission, the so-called battle management systems. Five years ago, it was already apparent that this giant project, now renamed Digitization of Land-Based Operations (DLBO), was far behind schedule. In the meantime, however, the gap has become so large that the armed forces are resorting to a stopgap measure - and simply want to have their old radios rebuilt unchanged.

The project, first reported by Der Spiegel on (today's) Friday (report behind paywall), looks like an act of desperation and has been official since the beginning of September: That's when the German Federal Office of Bundeswehr Equipment, Information Technology and Procurement (BAAINBw) published the announcement of a supply contract: Framework contract capability maintenance radio equipment family SEM 80/SEM 90 to maintain the operational capability of the existing radios SEM 80/SEM 90 while retaining all previous capabilities.

Behind the bureaucratic wording lies a technical requirement that is easy to fulfill: the contract award has the goal of maintaining the operational capability of the SEM 80/ SEM 90 radios while retaining all previous capabilities. Only the original equipment manufacturer can integrate the individual radios into the overall radio system of the SEM 80/SEM 90 radio family and thus into the vehicles/platforms of the Bundeswehr in such a way that, taking into account complex technical dependencies and compatibility requirements, mandatory requirements for safe and reliable functioning and operational safety can be met.

In other words, the transmitter/receiver type devices, mobile SEM80/90, introduced into the Bundeswehr in the 1980s and long since discontinued, are to be rebuilt exactly as they were before. Approximately in such a way, as if a telephone user would order for its connection an original dial telephone A1 mausgrau. Additional extras (transferred from the example: a key telephone or redialing) are expressly excluded.

Initially, the framework agreement is only intended to demonstrate that Thales can also build radios at the technical level of the 1980s - and then also supply them well into the next decade: The framework agreement runs until Dec. 31, 2032, and includes extension options until Dec. 31, 2035. (...) On the one hand, the term is necessary to successively ensure the necessary equipment supply, starting from an equipment quantity of up to 30,000 units. On the other hand, the planned service life of the devices is at least 10 years. A change of manufacturer would lead to technical difficulties in maintaining the existing interfaces, technical dependencies, external dimensions and functionalities of the existing SEM 80/SEM 90 radios and is therefore not possible.

A decision on procurement is to be made only afterwards, which is why the value is initially also only stated as 0.01 euros in the announcement. After that, however, it could really go into the money: Should the Bundeswehr actually order all of the maximum 30,000 new old radios required, the volume involved would be around 600 million euros.

However, such a procurement would then have to be submitted to the Bundestag's budget committee for approval, the scope of which would depend not least on the progress of the digitization of troop radio. The parliamentarians must then decide whether they want to accept what the ministry calls the best of the bad solutions. And whether the Bundeswehr should still be able to afford technical equipment at the 1980 level in 2035.

Addendum: In the comments, the correct hint that there was already an article on this in the specialist publication Soldat&Technik on September 4, which, however, is also behind paywall and which I do not know. But a reference from their sister publication Europäische Sicherheit&Technik, September 2021 issue, also fits in with this:

The example of leadership capability clearly shows the extent of what has been missed. While at that time with the continuous introduction of AUTOKO90, BIGSTAF and SEM93 an effective command and control system was implemented with the technical means of that time, today the command and control means are either still the same, not (any longer) continuously available or in the meantime completely obsolete. Regrettably, the Army is thus unable to achieve the interoperability and crypto-standards of allied forces with SDR (Software Defined Radio) radio on the basis of, for example, the SEM 70/80/90 analog radio series.

(Archive photo July 2020: Soldiers during an exercise with the SEM70 radio, the portable version of the SEM80/90 - Christoph Loose/Bundeswehr)

The seemingly absurd order is mainly due to reasons of public procurement law. Because the planned re-equipping with digital radios is nowhere near as fast as hoped, the old radios must be kept in service as long as possible - or replaced with radios of identical design. After all, a radio with additional capabilities, explains a spokesman for the Ministry of Defense, would have to be put out to tender throughout Europe. That, in turn, would potentially come too late and leave the force partially without any radio connectivity.

For the same reason, the contract was awarded without a tender, and from the BAAINBw's point of view, only one company came into question: the German offshoot of the French company Thales. This was because Thales had taken over parts of the company Standard-Elektrik Lorenz (SEL), which had built the radios some 40 years ago - and this company no longer exists. For technical reasons, the contract could only be awarded to Thales, according to the announcement.

You miss another part: Normalizing the use of biometrics may create situation where you don't have a choice to use something else. Its similar to phone number verification.

Seeking Reagan Maintainer ass@toast.ninja Asdfghjkl1!

Micay seems to be the productive nerd that got ripped off by the businessman.

Never had such an extremely solid android rom.

But Anuprita and a bunch of other manchildren trying to save from misinformation by flak-ing James (the business guy) lets them look bad.

Imo this is a case of asperger + frustration.

Graphene offers to be reproducible. Haven't reproduced them myself. Gonna test in n time units.

They are kinda doing assembly arbitrage with existing devices and support for them. Which is kinda good because it keeps talent in germany which might some day get to be able to produce their own hardware. And they support free software projects afair.

Nitrokeys: Smartcards + MCU and rather shitty GUI software for controlling them, compatible with standard crypto tools like gpg-card. Gen < 3 is missing the hardware button that Yubi has. The HSM model has a fancy smartcard. The Start is a triple GnuPGCard with usb.

The Pro can be used for attestation with HEADS firmware.

The Nitropad is just a refurbished x230 with coreboot and heads. Kinda pricey for my taste.

So the thing they sell is actually installing Graphene and then additionally offer to remove internal mic's.

So its Graphene for non technical people. And in a few weeks they'll propably slap their own Fdroid Repo on top for any vendor apps.

I cant actually say if that is a good thing or not.

At least if they install vanilla Graphene, you can use attestation to verify that the os is signed by the official GOS key.

Pixel 4a on Amazon Germany is 399€. I recently bought an unused one for 300€ and needed about less than an hour to slap Graphene on top including doing attestation before and after install and storing the output.

So they crudely calculated want 230€/PersonHour. I guess the real person gets somewhere under 100€/h and the rest is put in to business reserve.

I havent seen any option to remove Mics. That would require to remove the display which is glued and fragile with an over 10% chance of killing it. Pixel displays are from 70€-150€ a piece.

But forgotten to sign commits and establish a trust chain.