3 ms·

Then the spammers sell the hardware and real customers gets affected whenever they buy in the second-hand market. Also, hardware bans essentially require unique

Then the spammers sell the hardware and real customers gets affected whenever they buy in the second-hand market. Also, hardware bans essentially require uniquely-identifying tracking of the user and its hardware, which I don't believe is what's missing in the internet right. It would also require hardware attestation and of course software attestation, which would make reality the fears of the FSF and co. regarding secure boot and the trusted platform module being used for user control. If anything, I would like less tracking, even if it comes at a price of a worse signal to noise ratio on the internet. Also, we know that this will be used for evil and ultimately companies will start banning "deprecated" or "unsupported" hardware from accessing services, be it their own or from competitors, consolidating even more the oligopolies in the hardware and software industries.

charcircuit 3y ago
>Then the spammers sell the hardware and real customers gets affected A site could chosen to only ban a computer for day or just give it a bad reputation (require a credit card number or phone to make an account). Or real customers could learn not to buy from shady sources and instead by new, safe devices. >uniquely-identifying tracking of the user and its hardware, which I don't believe is what's missing in the internet right. It is missing from the internet and it is part of the reason why spam is a big problem. >which would make reality the fears of the FSF and co. regarding secure boot and the trusted platform module being used for user control. User control? It allows services like GitHub to provide a better experience to users by having much less spam. This makes the lives of average users better. >start banning "deprecated" or "unsupported" hardware from accessing services It makes sense if you want to have your service be more secure. You could also provide a degraded experience to people with insecure hardware. For example you may not be able to make a PR with insecure hardware, but you could still bookmark a project.
- viraptor 3y ago
  > A site could chosen to only ban a computer for day or just give it a bad reputation (require a credit card number or phone to make an account). That's already happening with IP reputation and captcha essentially. It's just per-connection rather than per-device. > Or real customers could learn not to buy from shady sources and instead by new, safe devices. New safe devices can be compromised. (Paying off someone at bestbuy to install malware would become a very cheap investment) "Shady source" is not a clear category. (See all the scams "sold by Amazon")

charcircuit 3y ago

>Then the spammers sell the hardware and real customers gets affected A site could chosen to only ban a computer for day or just give it a bad reputation (require a credit card number or phone to make an account). Or real customers could learn not to buy from shady sources and instead by new, safe devices. >uniquely-identifying tracking of the user and its hardware, which I don't believe is what's missing in the internet right. It is missing from the internet and it is part of the reason why spam is a big problem. >which would make reality the fears of the FSF and co. regarding secure boot and the trusted platform module being used for user control. User control? It allows services like GitHub to provide a better experience to users by having much less spam. This makes the lives of average users better. >start banning "deprecated" or "unsupported" hardware from accessing services It makes sense if you want to have your service be more secure. You could also provide a degraded experience to people with insecure hardware. For example you may not be able to make a PR with insecure hardware, but you could still bookmark a project.

viraptor 3y ago
> A site could chosen to only ban a computer for day or just give it a bad reputation (require a credit card number or phone to make an account). That's already happening with IP reputation and captcha essentially. It's just per-connection rather than per-device. > Or real customers could learn not to buy from shady sources and instead by new, safe devices. New safe devices can be compromised. (Paying off someone at bestbuy to install malware would become a very cheap investment) "Shady source" is not a clear category. (See all the scams "sold by Amazon")