tripdout

I think a lot of the work is in new device bringup, and given that they can start from official Pixel trees, it shouldn't be too much work to adapt them for whatever GrapheneOS-specific build processes they have, and then I'm assuming the rest of the GrapheneOS customizations are framework side which should be device agnostic. I guess they could have kernel changes for hardening, but not sure how easy or hard porting those would be - is the Pixel 9 series on a newer kernel version than say the Pixel 8?

The bot detection takes 5 whole seconds to solve on my phone, wow.

How successful can you consider the alternatives to be when using them means you can't (easily, potentially at all in the future with hardware backed attestation) use ChatGPT, banking apps, order McDonalds, etc.?

It's funny because this only works on a single device, the Android emulator, and not even first-party Nexus and Pixel devices without first downloading hundreds of megabytes of proprietary blobs.

A classic Ars story I always like linking in discussions like these: https://arstechnica.com/gadgets/2018/07/googles-iron-grip-on...

Yes, Niri still supports numbered workspaces in the same was as WMs like Sway. It's just that now you can scroll them horizontally too.

The iOS screenshot displays a message saying it's no longer available for new users.

Wow, kindlemodding.org loads instantly. I know it's a simple website, but simple websites often still load slowly.

It just adds your Nix profile to your path.

Has anyone gone through that firmware update and seen what changed? What exactly are they doing to improve battery performance/reliability?

I would guess just down clocking the CPU or something.

I much prefer sops or age.

How does it figure out which commit to add each change to?

For some reason I always thought it had to do with storage.

Those `goto`s between two different for loops is crazy.

If you don't know about it, sure, but I find it's kind of convenient to get a safe shutdown and then be able to easily say "I don't care, just stop this program" without needing a separate kill -9 command or something.

On the same platform and browser, it displays the header line separator and my CPU fan ramps up but it does load after a few seconds.

All it did was roast me for having 2 followers and no readme!

Does it allow both shrinking and growing the FS? Really wish ZFS allowed shrinking.

I've also used greetd for this: https://sr.ht/~kennylevinsen/greetd/

Why doesn't Windows need such a directory to store folder customizations in Explorer?

Thought this was going to be about Comma [0]

0: https://github.com/nix-community/comma

I use Linux at home but when I got my work MacBook I was able to get an identical setup (shell aliases, git config, shell plugins, nvim, etc etc) with very minimal effort and not needing to understand a macOS way of installing all these programs like with e.g. homebrew.

Declarative, reproducible, and no fiddling with macOS specific stuff.

Plus, we had instructions in our wiki for dealing with homebrew package installation failures and conflicts with macOS-installed versions of required software, needing to install other programs like Ruby version manager, etc to fix these issues. but with Nix I just setup a devshell and got the exact version we needed installed with no issues.

And this can be pinned and reproduced for every developer using Nix, eliminating the hassle for everyone.

I used PintOS in my operating systems class last semester - wish there was a part 2 to that class where we go even more in depth!

How do they guarantee both deterministic results and parallelism?

I'd love to have this in-depth level of knowledge of kernel inner workings. Super interesting writeup.

> The questions that are harder to answer (and again, I know these will come up based on prior experience), are what the password is that was exposed, what the website it appeared next to was and, indeed, if it appeared next to a website at all or just alongside an email address. Right at the beginning of this project more than a decade ago, I made the decision not to load the data that would answer these questions due to the risk it posed to individuals and by extension, the risk to my ability to continue running HIBP. We were reminded of how important this decision was earlier in the year when a service aggregating data breaches left the whole thing exposed and put everyone in there at even more risk.

Seems it's a design decision not to.

7900X equivalent 9900X has 120W TDP as opposed to 170W. Is it that much more power efficient?

DroidGuard is particularly relevant nowadays (article from 2019) given that Google is using it to implement hardware-backed attestations (i.e. using device TEE) of device integrity.

Current cat-and-mouse game is to spoof props to a device that doesn't support hardware attestation, but Google is somehow able to detect props used for spoofing (as opposed to using the actual device with those profs) and bans them.

Once Google decides that enough devices support hardware attestation and they get rid of software attestation, even unlocking the bootloader will trip it and you won't be able to use apps that request this level, and this level is impossible (barring exploits) to spoof.

> “I co ming offise to day AAAAaaaa?”

--E-mail from a Vietnamese student. She got an A in my trigonometry class, dominating the other students despite not knowing much English. Yes, she did work in a nail salon, and no, she didn’t graduate the equivalent of high school in her native country.

What does a nail salon have to do with your point?

Yet Khan Academy is free.