4 ms·

You don't have to prevent root access. You just have to inform user of the risks, void warranties if you want but let users do whatever they want with the hardw

You don't have to prevent root access. You just have to inform user of the risks, void warranties if you want but let users do whatever they want with the hardware that they own.

ZiiS 1y ago
Yes, very clear warnings; I could live with a small permanent icon in the status bar (via the GPU firmware) etc. But absolutely should not void warranties (overclocking might but never just root).
- Cthulhu_ 1y ago
  If you can't destroy your own hardware by rooting, do you have true root access?
  - ZiiS 1y ago
    Easy enough to have an efuse blow if you overvolt; then an dificult conversion on a warrenty claim. Whilst ideologically this is ceeding some control I can accept it.
perihelions 1y ago
> "void warranties if you want " Please don't push the Overton Window any further. Installing my own software on my own PC should never void the hardware vendor's warranty. That delegitimizes the core concept of a PC. (A horrific possible dystopia just flashed through my mind: "I'd love to throw out Chrome and install Firefox so that I could block ads, but, the laptop is expensive, and I can't afford voiding the warranty". I bet Google would *love* that world. Or, a UK version: "I'd love to use a VPN, but, regulation banned them from the approved software markets, and anything else would permanently set the WARRANTY_VIOLATED flag in the TPM").
- avhception 1y ago
  This is where it's heading, and I see this as the real driving force behind secure boot on x86_64.
- Cthulhu_ 1y ago
  It depends on what your software does; if it removes hardware protections then your warranty should be voided. Of course, those protections are either hardware or impossible to remove, like emergency cooling / lowering voltage when stuff overheats.
bzzzt 1y ago
Even if it's illegal? (like transmitting on forbidden frequencies) It's not always the user who's installing software. Lots of people depend on other people to manage their devices. Manufacturers like the hardware they delivered to be trusted so users trust it regardless of who handled it.
- AshamedCaptain 1y ago
  I always hear as the excuse but it is ridiculous. If the user wants to transmit on "illegal" frequencies, all he has to do is to change the country setting in their Wi-Fi router, et voilà, illegal transmissions. The entire Android OS has about as much access to radios than your average PC, if not less. In fact, even on recent android devices, wireless modems still tend to show up to the OS as serial devices speaking AT (hayes) (even if the underlying transport isn't, or even if the baseband is in the same chip). Getting them to transmit illegal frequencies is as much easy or hard as is getting a 4G USB adapter to do it.
- sam_lowry_ 1y ago
  At least in EU, transmitting is illegal, having hardware to transmit is not. That's why people can buy TX/RX SDRs and Yaesu transceivers without a license. AFAIK the radioamateur world, serious violations of frequency plans are rare and are usually quickly handled by regulators. OTOH, everyone is slightly illegal, e.g. transmitting encrypted texts or overpowering their rigs, but that's part of the fun.
  - jjkaczor 1y ago
    And in some locations, quickly handled by the local amateur community, with foxhunts and community outreach to frequency violators - only getting regulators involved when just talking to the offenders fails.
- goku12 1y ago
  > Even if it's illegal? (like transmitting on forbidden frequencies) That's not relevant here. If frequencies are illegal, it should be impossible to program it in such a way. But even otherwise, it's the responsibility of the user to follow local laws. If I have a PTT phone, it's not legal for me to use forbidden frequencies just because it's possible. Why do these manufacturers care about what doesn't concern them when they violate even bigger laws all the time? > It's not always the user who's installing software. Lots of people depend on other people to manage their devices. That should be up to the user. Here we are talking about users who want to decide for themselves what their device does. You're talking as if giving the user that choice is the injustice. Nope. Taking away the choice is. > Manufacturers like the hardware they delivered to be trusted so users trust it regardless of who handled it. I see what you did here. But here is the thing. Securing a device is not antithetical to the user's freedom. That was what secure boot chain was originally supposed to accomplish until Microsoft managed to corrupt it into a tool for usurping control from the user. Manufacturer trust is a farce. They should be deligating that trust to the user upon the sale of the device, through well proven concepts as explained above. They chose to distrust the user instead. Why? Greed!
deleted 1y ago
[deleted]
CraigRood 1y ago
I don't think users understand the risks. I'm broadly accepting of the protection of end users through mechanisms. Peoples entire lives are managed through these small devices. We need much better sandboxing to almost create a separate 'VM' for critical apps such as banking and messaging.
mhast 1y ago
The problem is Dunning Kruger effect. The people who shouldn't disable these security features tend to be the first to do so. And then complain the loudest when the enter the "find out" phase.
scott_w 1y ago
> You just have to inform user of the risks Warnings aren't always enough, sometimes we have to lock people down and physically prevent them from harming themselves. It's not always people being stupid. I recall reading an article by someone who got scammed who seemed generally quite knowledgeable about the type of scam he fell for. As he put it, he was tired, distracted, and caught at the right time. Outside of that, a lot of the general public have a base assumption of "if the device lets me do it, it's not wrong," and just ignore the warnings. We get so many stupid pop-ups, seemingly silly warning signs (peanuts "may contain nuts") that it's easy to dismiss this as just one example of the nanny state gone mad.
- alexvitkov 1y ago
  Please read again the sentence you just typed. > We have to lock people down and physically prevent them from harming themselves. You can apply this argument to literally anything, and taken to its logical conclusion, this is exactly what will happen.
  - scott_w 1y ago
    > sometimes we have to lock people down and physically prevent them from harming themselves I highlighted the word you missed, deliberately in my opinion, as it completely changes the meaning to exclude your frankly idiotic assertion.
    - alexvitkov 1y ago
      The idiotic statement is yours. If the "sometimes" is important to you, you can have it - you're not the first person on the internet to play word games. But unless you can come up with a very detailed list of when it's acceptable "to lock people down and physically prevent them from harming themselves" and when it's not acceptable (it never is, it's a crazy statement), and I don't think you have such a list, your "sometimes" just means "whenever I, as the person writing the software judge", rendering it completely meaningless.
- Y_Y 1y ago

You don't have to prevent root access. You just have to inform user of the risks, void warranties if you want but let users do whatever they want with the hardware that they own.

ZiiS 1y ago

Yes, very clear warnings; I could live with a small permanent icon in the status bar (via the GPU firmware) etc. But absolutely should not void warranties (overclocking might but never just root).

Cthulhu_ 1y ago
If you can't destroy your own hardware by rooting, do you have true root access?
- ZiiS 1y ago
  Easy enough to have an efuse blow if you overvolt; then an dificult conversion on a warrenty claim. Whilst ideologically this is ceeding some control I can accept it.

perihelions 1y ago

> "void warranties if you want " Please don't push the Overton Window any further. Installing my own software on my own PC should never void the hardware vendor's warranty. That delegitimizes the core concept of a PC. (A horrific possible dystopia just flashed through my mind: "I'd love to throw out Chrome and install Firefox so that I could block ads, but, the laptop is expensive, and I can't afford voiding the warranty". I bet Google would *love* that world. Or, a UK version: "I'd love to use a VPN, but, regulation banned them from the approved software markets, and anything else would permanently set the WARRANTY_VIOLATED flag in the TPM").

avhception 1y ago
This is where it's heading, and I see this as the real driving force behind secure boot on x86_64.
Cthulhu_ 1y ago
It depends on what your software does; if it removes hardware protections then your warranty should be voided. Of course, those protections are either hardware or impossible to remove, like emergency cooling / lowering voltage when stuff overheats.

bzzzt 1y ago

Even if it's illegal? (like transmitting on forbidden frequencies) It's not always the user who's installing software. Lots of people depend on other people to manage their devices. Manufacturers like the hardware they delivered to be trusted so users trust it regardless of who handled it.

AshamedCaptain 1y ago
I always hear as the excuse but it is ridiculous. If the user wants to transmit on "illegal" frequencies, all he has to do is to change the country setting in their Wi-Fi router, et voilà, illegal transmissions. The entire Android OS has about as much access to radios than your average PC, if not less. In fact, even on recent android devices, wireless modems still tend to show up to the OS as serial devices speaking AT (hayes) (even if the underlying transport isn't, or even if the baseband is in the same chip). Getting them to transmit illegal frequencies is as much easy or hard as is getting a 4G USB adapter to do it.
sam_lowry_ 1y ago
At least in EU, transmitting is illegal, having hardware to transmit is not. That's why people can buy TX/RX SDRs and Yaesu transceivers without a license. AFAIK the radioamateur world, serious violations of frequency plans are rare and are usually quickly handled by regulators. OTOH, everyone is slightly illegal, e.g. transmitting encrypted texts or overpowering their rigs, but that's part of the fun.
- jjkaczor 1y ago
  And in some locations, quickly handled by the local amateur community, with foxhunts and community outreach to frequency violators - only getting regulators involved when just talking to the offenders fails.
goku12 1y ago
> Even if it's illegal? (like transmitting on forbidden frequencies) That's not relevant here. If frequencies are illegal, it should be impossible to program it in such a way. But even otherwise, it's the responsibility of the user to follow local laws. If I have a PTT phone, it's not legal for me to use forbidden frequencies just because it's possible. Why do these manufacturers care about what doesn't concern them when they violate even bigger laws all the time? > It's not always the user who's installing software. Lots of people depend on other people to manage their devices. That should be up to the user. Here we are talking about users who want to decide for themselves what their device does. You're talking as if giving the user that choice is the injustice. Nope. Taking away the choice is. > Manufacturers like the hardware they delivered to be trusted so users trust it regardless of who handled it. I see what you did here. But here is the thing. Securing a device is not antithetical to the user's freedom. That was what secure boot chain was originally supposed to accomplish until Microsoft managed to corrupt it into a tool for usurping control from the user. Manufacturer trust is a farce. They should be deligating that trust to the user upon the sale of the device, through well proven concepts as explained above. They chose to distrust the user instead. Why? Greed!

deleted 1y ago

[deleted]

CraigRood 1y ago

I don't think users understand the risks. I'm broadly accepting of the protection of end users through mechanisms. Peoples entire lives are managed through these small devices. We need much better sandboxing to almost create a separate 'VM' for critical apps such as banking and messaging.

mhast 1y ago

The problem is Dunning Kruger effect. The people who shouldn't disable these security features tend to be the first to do so. And then complain the loudest when the enter the "find out" phase.

scott_w 1y ago

> You just have to inform user of the risks Warnings aren't always enough, sometimes we have to lock people down and physically prevent them from harming themselves. It's not always people being stupid. I recall reading an article by someone who got scammed who seemed generally quite knowledgeable about the type of scam he fell for. As he put it, he was tired, distracted, and caught at the right time. Outside of that, a lot of the general public have a base assumption of "if the device lets me do it, it's not wrong," and just ignore the warnings. We get so many stupid pop-ups, seemingly silly warning signs (peanuts "may contain nuts") that it's easy to dismiss this as just one example of the nanny state gone mad.

alexvitkov 1y ago
Please read again the sentence you just typed. > We have to lock people down and physically prevent them from harming themselves. You can apply this argument to literally anything, and taken to its logical conclusion, this is exactly what will happen.
- scott_w 1y ago
  > sometimes we have to lock people down and physically prevent them from harming themselves I highlighted the word you missed, deliberately in my opinion, as it completely changes the meaning to exclude your frankly idiotic assertion.
  - alexvitkov 1y ago
    The idiotic statement is yours. If the "sometimes" is important to you, you can have it - you're not the first person on the internet to play word games. But unless you can come up with a very detailed list of when it's acceptable "to lock people down and physically prevent them from harming themselves" and when it's not acceptable (it never is, it's a crazy statement), and I don't think you have such a list, your "sometimes" just means "whenever I, as the person writing the software judge", rendering it completely meaningless.
Y_Y 1y ago