3,770 karma · joined June 15, 2010
[ my public key: https://keybase.io/gst; my proof: https://keybase.io/gst/sigs/-vez5ahYjj47RuQTVggRLZIC1T4hi2GuTnIdw4Z5rHc ]
Here's a related Quora discussion: https://www.quora.com/If-you-smelted-a-varied-mix-of-scrap-m...
How would you separate the metals after melting them? My understanding is that you can extract some high valuable metals via different processes, but otherwise it's technologically and economically not feasible to separate molten metals.
To me this looks somewhat like the broken windows fallacy: In countries where the tax code is simple and allow for "automated" taxes nobody is going to advocate for a new law if it makes filing taxes a lot more complicated. But in countries where the tax code is already complex adding one more complex law doesn't make too much of a difference.
The reason why it's so easy to file taxes in lots of European countries is because the tax system (for the general population) is a lot simpler. For example in Austria you pay the same amount of taxes no matter if you're single or married, capital gains are taxed at a flat rate and directly withheld by brokers, and "social benefits" are typically handled outside of the tax system instead of being folded into the tax system.
In the United States the tax code is a lot more complex. You pay different taxes if you're married compared to if you're single, capital gains tax rate depends on your other taxes so brokers can't automatically withhold taxes, and there are a lot of edge-cases for certain other situations that can't be easily automated. Like tax credits if you're affected by natural disasters, different tax handling for railroad worker pensions, and so on.
With that complexity it is a lot harder to automate taxes, but it's also hard to retroactively reduce that complexity, as any changes will negatively financially impact some of the affected groups. Also I think that it might be easier in the US to handle those aspects as part of the tax system (instead of handling them independently), as the federal government has the authority to collect taxes, but direct payments (outside of the tax system) to individual groups might be harder? (But I'm not sure if that's true).
Quite a bit of code related to usernames has already been checked into Signal. Here's the username regexp and the method that checks if a username is valid: https://github.com/signalapp/Signal-Android/blob/a5e5a735800...
Meanwhile I'm currently in Europe and as a consumer I can buy Antigen tests for around 3 Euro per test (would be less than 2 Euro if bought in bulk). As far as I know those prices are not subsidized.
Does Materialize provide a commercial non-cloud version where workers can run on multiple nodes in a cluster? On the website I only see references to the BSL-licensed single-node version and to the cloud version that is hosted at Materialize. Would a company be able to run Materialize on their own Kubernetes cluster?
Also is it possible to add custom code for data sources (for example Kafka, but with a different format than what Materialize currently expects) or is Materialize limited to the pre-defined sources?
Tile is planning to use Amazon Sidewalk: https://www.thetileapp.com/en-us/blog/announcing-tile-joins-...
Don't forget to sell the containers as NFTs.
There are several third-party tools that allow to convert the history from Android to iOS. I recently switched and was able to keep all of my history.
It's still possible to sideload apps if they are installed with ADB.
There are definitely some workarounds for encryption available. For example, it appears that even for some newer phones Cellebrite supports an approach of brute-forcing the PIN without locking the phone due to too many retries. But those workarounds don't seem to be the primary benefit / use-case of Cellebrite: It seems that in lots of cases people surrender their passwords when asked and the main benefit of Cellebrite is in extracting and presenting information from a phone once it's unlocked.
Once unlocked data from iPhones is relatively easy to extract with a local backup. Android is much more limited in terms of which data is available as backup and the common approach appears to be to use ADB for extraction. Either by downgrading an application or by automated screen-scraping of the data (or by using exploits on outdated Android versions). For WhatsApp it appears that the "downgrade" approach might be used, which downgrades to an earlier version that makes extraction easier. That's the same approach that's also used by consumer backup tools such as Wondershare Dr.Fone.
Regarding the more complicated approach to extract data from Android: Starting with Android 11 and API level 30 Android is starting to ignore the allowBackup manifest attribute, thereby allowing to locally extract data from applications via ADB even if the applications don't allow that (source: https://www.xda-developers.com/android-11-force-app-local-ba...). While definitely a benefit for users, I wonder if another motivation for that change was to simplify data extraction for law enforcement.
> This is alpha-grade software and not yet ready for production use. Do not use if you don't know what you're doing.
Personally I'd also be concerned that Google's bot detection code might mark accounts that use microg as suspicious (as they're going to behave differently than phones using the official software) which could increase the risk of Google banning the account.
Java does not need to be run through emulation. Azul already published ARM64 Zulu builds for OpenJDK (here: https://www.azul.com/downloads/zulu-community/?package=jdk) and they work great on the M1. I'm currently using IntelliJ running in emulation mode (an official release for the M1 was originally expected by the end of November) and but build/run my projects on a local Zulu JVM with ARM64 support.
On the other hand I wouldn't be surprised if Google just closes the accounts of people who upload large amounts of pictures and videos (taken on another phone) with the Pixel 1.
The primary use-cases are probably:
* If used in the United States prevent fraud where someone uses a stolen identity to obtain a phone and then sells it in another market (that doesn't use IMEI blacklists) once it arrives.
* If used in other countries that don't have IMEI blacklists to provide a similar functionality as those blacklists. One benefit of that is that it could reduce the credit requirements and make it easier for people with no or a poor credit to obtain a phone.
Are you sure that this is the case? According to https://support.google.com/fi/thread/761170 there was at least one case where support agents moved a Fi number from a locked account to a newly reopened account, without the user being able to access the locked account:
> I call Google Support and the amazing Google Support rep I spoke to (The only good one I’ve talked to so far during this whole process) stayed with me for over an hour and worked with tier 2 support in getting my Project Fi number transferred to Account 2.
A SIM swap with Fi might be harder to accomplish than with a regular provider, but it looks like there's still the risk that someone manages to convince a support agent to move the number to a different account.
How much are accounts currently worth on the market? It seems that making the recovery procedure more expensive than the worth of the account should resolve that issue. At the same time legitimate users are probably willing to invest some money in order to recover their account.
For example offer a $20 option to send a registered letter to an address provided by the user. Then Google can check if: 1) The name on the credit card matches the name on the account, 2) a given address hasn't been used too often, 3) the identity check done by the postal service (checking if the recipient actually has a given name) succeeded.
This won't be a perfect solution and there are definitely edge cases for which it won't work (in countries without registered mail, if someone doesn't have a credit card, etc.). But it should be able to cover the majority of cases where legitimate accounts have been locked.