dustyharddrive

At least some of their software has unique user agents ("Software Heritage*"). I wish a popular FOSS host like Codeberg would block them.

Using this on memory-unsafe languages is just asking for trouble.

If Google's Widevine authorizes a high-quality stream ;)

I wonder if Snapchat notification content is encrypted before it's sent to Apple/Google.

That’s an Android ROM and can’t provide the longevity of mainline Linux.

Nitpick: iPhone 7 never got iOS 16 or 17, which means it won’t be fully patched (https://arstechnica.com/gadgets/2022/10/apple-clarifies-secu...).

Soon you can also expect Apple to stop providing both service and parts for it (https://support.apple.com/en-us/HT201624).

I’d question whether our techie peers can be bothered to care about these principles. IME most are too complacent.

IIUC Secure Scuttlebutt works a bit like this.

Thanks PaLM 2!

> Users don't want to get owned.

I can assure you most people don't think about their tech choices long enough to conclude anything like this.

> With the permisivity of the protocol, Meta (and anyone) can consume any ActivityPub data they want.

This is the common case but AFAIK doesn’t have to be true. Mastodon lets users make their AP outboxes private. Followers can be screened before posts are sent to their instances.

I’m spooked by this comment: https://news.ycombinator.com/item?id=34434995

Is there anything like this for Linux aside from Qubes?

> No binaries

There are so many binary packaging formats available, almost to a fault.

If you have the time, will, and ability, audit the latest release and turn off auto update. That’s counter productive when the extension has its own attack surface of course.

I also haven’t read anything concerning about Mozilla’s Recommended review system yet.

I don’t think cloning products is illegal, and can’t find any patents held by Reddit.

Am I correct in assuming that after an answer to a novel prompt is posted, it doesn't work as a reasoning test of LLM deployments that search the web?

Edit: an incorrect answer could degrade its performance too.

Found this in a press release (https://www.apple.com/newsroom/2023/06/apple-announces-power...):

> New protections encompass safer wireless connectivity defaults, media handling, media sharing defaults, sandboxing, and network security optimizations.

Hopefully a session will cover the details.

I wish we had more details on this (https://www.apple.com/ios/ios-17-preview/):

> The expanded Lockdown Mode increases security to help protect against sophisticated cyber attacks.

No support article updates or mentions in the Platforms State of the Union.

Why do these attacks ever use WiFi? Or plaintext DNS?

Did you ever identify the iOS malware?

I wonder if it was a misbehaving app or had persistent root.

Aside from its inexplicably captivated US user base, what does iMessage have over Signal and its derivatives? Or Matrix, SimpleX, and XMPP?

IIRC Pop kernels are upgraded at a faster pace than Ubuntu. That could explain the compatibility improvements.

Bard isn’t self-aware and can’t know what it’s capable of except for what’s in an initial prompt.

I don’t think we should give fingerprinting scripts another bit of entropy.

They’re making up for the fact that the history of every transaction input is public, something no other payment system even attempts to do.

Apple’s nearly there.

Most cryptocurrencies make dragnet surveillance super easy, barely an inconvenience.

Guides on running macOS VMs always seem to involve downloading some EFI build with opaque origins. Is there a safer option?

GPT output isn’t deterministic though?