9 ms·
Remember...they can make you use touch id...they can't make you give them your password. https://x.com/runasand/status/2017659019251343763?s=20 https://x.com/r
by nova22033 8mo ago
Remember...they can make you use touch id...they can't make you give them your password.
https://x.com/runasand/status/2017659019251343763?s=20 https://x.com/runasand/status/2017659019251343763?s=20
The FBI was able to access Washington Post reporter Hannah Natanson's Signal messages because she used Signal on her work laptop. The laptop accepted Touch ID for authentication, meaning the agents were allowed to require her to unlock it.
- wackget 8mo agoLink which doesn't directly support website owned by unscrupulous trillionaire: https://xcancel.com/runasand/status/2017659019251343763?s=20 https://xcancel.com/runasand/status/2017659019251343763?s=20
- asadm 8mo ago[flagged]
- andwhatisthis 8mo agoHow so?
- asadm 8mo agonasa is fucked up. spacex is US’s only shot.
- pyrophane 8mo agoMaybe. I don't think we yet have a good understanding of how many deaths he will have caused as a result of DOGE so abruptly cutting off assistance to so many vulnerable people around the world, but I've heard estimates hover around 600,000. Assuming that number turns out to be close to reality, how do you weigh so many unnecessary deaths against VTL rockets and the electric cars? Perhaps a practitioner of Effective Altruism could better answer that question.
- deleted 8mo ago[deleted]
- asadm 8mo ago[flagged]
- roboror 8mo agoI've seen corruption in the police. Government. Hospitals. Do you support immediately shuttering those offices with no replacements?
- sejje 8mo agoThey could at least just get funded by their own government.
- deleted 8mo ago[deleted]
- abustamam 8mo agoThere is corruption everywhere. But do you deny that these organizations by-and-large provided aid and therefore saves the lives of folks who may have otherwise died from illness? This doesn't make corruption OK. But he tore out a lifeline for some people without giving them an alternative way to get aid.
- asadm 8mo ago[flagged]
- NoMoreNicksLeft 8mo ago[flagged]
- asadm 8mo agoCorrect. But also, it's a bandaid (and a really ineffective one ie. 99% lossy) on real issues of that world.
- alistairSH 8mo ago[flagged]
- Dylan16807 8mo agoEven if his total contribution is positive, his current contribution is quite bad. And most of that bad has been tied directly to x.
- asadm 8mo agoI can atleast still voice against Israeli genocide there. I am good for now.
- throwawayfour 8mo agoGood reminder to also set up something that does this automatically for you: https://news.ycombinator.com/item?id=46526010 https://news.ycombinator.com/item?id=46526010
- JimA 8mo agoI generally avoid extensions that can read all sites (even if technically necessary), so use the suggestion found here [1] instead. A few bookmarklets: javascript:(function(){if (location.host.endsWith('x.com')) location.host='xcancel.com';})() javascript:(function(){if (location.host.endsWith('youtube.com')) location.host='inv.nadeko.net';})() javascript:(function(){if (location.hostname.endsWith('instagram.com')) {location.replace('https://imginn.com https://imginn.com' + location.pathname);}})() [1] https://www.reddit.com/r/uBlockOrigin/comments/1cc0uon/adding_custom_redirects_with_ublockorigin/ https://www.reddit.com/r/uBlockOrigin/comments/1cc0uon/addin...
- Alive-in-2025 8mo agoWow, where did these come from. these are great alternatives, especially the youtube. I like using the duck player but that's only in that browser. For example duck://player/fqtK3s7PE_k where the video id in youtube url https://www.youtube.com/watch?v=fqtK3s7PE_k https://www.youtube.com/watch?v=fqtK3s7PE_k But it doesn't have that overview page like inv.nadeko.net does
- forgotTheLast 8mo agoI actually think it is fitting to read about a government agency weaponized by an unscrupulous billionaire going after journalists working for an unscrupulous billionaire on an unscrupulous trillionaire owned platform.
- apparent 8mo agoThere are trillionaires?
- alpinisme 8mo agoI guess technically musk rounds to a trillion. 852B acc to Forbes
- apparent 8mo agoThat would be some aggressive rounding.
- alpinisme 8mo agoYes and no. Obviously it’s unusual rounding or I wouldn’t have said “I guess technically,” but rounding is all about domains and relevant precision. To be honest, when someone says “billionaires” I don’t assume that the number 1,000,000 is a meaningful hard cut off. I assume we’re talking about the ones who are three orders of magnitude up from “millionaire” and orders of magnitude work by rounding from .5.
- dragonwriter 8mo ago> orders of magnitude work by rounding from .5. No, orders of magnitude are exponential, not linear, so conventionally “on the order of 1 billion” would be between 100 million × sqrt(10) and 1 billion × sqrt(10), but “billionaire” isn't “net worth on the order of 1 billion” but “net worth of 1 billion or more”, or, when used heirarchically alongside trillionaire ans millionaire “net worth of at least one billion and less than one trillion”.
- antonvs 8mo agoWhat's $148,000,000,000 between friends
- patrickmay 8mo agoIs the knowledge of which finger to use protected as much as a passcode? Law enforcement might have the authority to physically hold the owner's finger to the device, but it seems that the owner has the right to refuse to disclose which finger is the right one. If law enforcement doesn't guess correctly in a few tries, the device could lock itself and require the passcode. Another reason to use my dog's nose instead of a fingerprint.
- parl_match 8mo agoI really wish Apple would offer a pin option on macos. For this reason, precisely. Either that, or an option to automatically disable touchid after a short amount of time (eg an hour or if my phone doesn't connect to the laptop)
- fpoling 8mo agoYou can setup a separated account with a long password on MacOS and remove your user account from accounts that can unlock FileVault. Then you can change your account to use a short password. You can also change various settings regarding how long Mac has to sleep before requiring to unlock FileVault.
- AnonHP 8mo agoI didn’t understand how a user that cannot unlock FileVault helps. Can you please elaborate on this setup? Thanks.
- fpoling 8mo agoWith that setup on boot or after a long sleep one first must log in into an account with longer password. Then one logs out of that and switches to the primary account with a short password.
- xoa 8mo agoAs another alternative, rather than using Touch ID you can setup a Yubikey or similar hardware key for login to macOS. Then your login does indeed become a PIN with 3 tries before lockout. That plus a complex password is pretty convenient but not biometric. It's what I've done for a long time on my desktop devices.
- mbil 8mo agoReminder that you can press the iPhone power button five times to require passcode for the next unlock.
- kstrauser 8mo agoOr squeeze the power and volume buttons for a couple of seconds. It’s good to practice both these gestures so that they become reflex, rather than trying to remember them when they’re needed.
- pkulak 8mo agoOh wow, just going into the "should I shutdown" menu also goes into pre-boot lock state? I didn't know that.
- duskwuff 8mo agoIt doesn't reenter a BFU state, but it requires a passcode for the next unlock.
- snuxoll 8mo agoIt's close enough, because (most of) the encryption keys are wiped from memory every time the device is locked, and this action makes the secure enclave require PIN authentication to release them again.
- overfeed 8mo ago> It's close enough Not really, because tools like Cellbrite are more limited with BFU, hence the manual informing LEO to keep (locked) devices charged, amd the countermeasures being iOS forcefully rebooting devices that have been locked for too long.
- CGMthrowaway 8mo agoThere is a way now to force BFU from a phone that is turned on, I can't remember the sequence
- teejmya 8mo agoI previously commented a solution to another problem, but it assists here too: https://news.ycombinator.com/item?id=44746992 https://news.ycombinator.com/item?id=44746992 This command will make your MacBook hibernate when lid is closed or the laptop sleeps, so RAM is written to disk and the system powers down. The downside is that it does increase the amount of time it takes to resume. A nice side benefit though, is that fingerprint is not accepted on first unlock, I believe secrets are still encrypted at this stage similar to cold boot. A fingerprint still unlocks from screensaver normally, as long as the system does not sleep (and therefore hibernate)
- jakobdabo 8mo ago> I believe secrets are still encrypted at this stage similar to cold boot. Does this mean that the Signal desktop application doesn't lock/unlock its (presumably encrypted) database with a secret when locking/unlocking the laptop?
- dagmx 8mo agoIt wouldn’t matter because the whole OS would be evicted from memory and the entire storage encrypted. Signal itself wouldn’t even be detectable as an app
- goda90 8mo agoRemember that our rights aren't laws of nature. They have to be fought for to be respected by the government.
- b8 8mo agoThey can hold you in contempt for 18 months for not giving your password, https://arstechnica.com/tech-policy/2020/02/man-who-refused-to-decrypt-hard-drives-is-free-after-four-years-in-jail/ https://arstechnica.com/tech-policy/2020/02/man-who-refused-....
- ElevenLathe 8mo agoBeing held in contempt at least means you got a day in court first. A judge telling me to give up my password is different than a dozen armed, masked secret police telling me to.
- C6JEsQeQa5fCjE 8mo ago> A judge telling me to give up my password is different than a dozen armed, masked secret police telling me to. Yes, a judge is unlikely to order your execution if you refuse. Based on recent pattern of their behavior, masked secret police who are living their wildest authoritarian dreams are likely to execute you if you anger them (for example by refusing to comply with their desires).
- qingcharles 8mo agoI don't practically see it happen, but you have to be careful once you are in a jail though, because there are often few limits on what the administration of the jail can do to you for any supposed violation of the jail rules (which they can legally make up on a whim, and due process is extremely limited). In Illinois, at least, a county Sheriff has unlimited power to punish a detainee in any extreme way they can imagine for even the very slightest infraction. There are no laws (statutes) which define what a "crime" is inside jail and what the punishment for it is. If it wasn't for SCOTUS limiting the death penalty to certain levels of behavior (e.g. murder) then a sheriff would be able to simply legally execute a detainee for pretty much anything.
- noident 8mo agoThat's a very unusual and narrow exception involving "foregone conclusion doctrine", an important fact missed by Ars Technica but elaborated on by AP: https://apnews.com/general-news-49da3a1e71f74e1c98012611aedc50b4 https://apnews.com/general-news-49da3a1e71f74e1c98012611aedc...
- p0w3n3d 8mo agoAllowed to require - very mildly constructed sentence, which could include torture or force abuse... https://xkcd.com/538/ https://xkcd.com/538/
- raw_anon_1111 8mo agoAs if the government is not above breaking the law and using rubber hose decryption. The current administration’s justice department has been caught lying left and right
- direwolf20 8mo agoPlausible deniability still works. You enter your duress code and your system boots to a secondary partition with Facebook and Snapchat. No such OS exists.
- laosb 8mo agoHow plausible the deniability is when they discover you only have those two apps and both logged out due to inactivity, while they can see your storage usage is definitely larger than those two apps?
- qingcharles 8mo agoAnd threats aren't illegal. They can put a gun to wife's head and say they're going to shoot. It's up to you then to call their bluff.
- neves 8mo agoI just searched the case. I'm appalled. It looks like USA doesn't have legal protection for reporter sources. Or better, Biden created some, but it was revoked by the current administration. The real news here isn't privacy control in a consumer OS ir the right to privacy, but USA, the leader of the free world, becoming an autocracy.
- joecool1029 8mo ago> they can't make you give them your password. Except when they can: https://harvardlawreview.org/print/vol-134/state-v-andrews/ https://harvardlawreview.org/print/vol-134/state-v-andrews/
- tedd4u 8mo ago75 footnotes for 89 sentences, nice! I guess that's how they roll over at the HLR.
- notyourwork 8mo agoI don't get why I can be forced to use my biometrics to unlock but I cannot be forced to give a pin. Doesn't jive in my brain.
- wan23 8mo agoThe fifth amendment gives you the right to be silent, but they didn't write in anything about biometrics.
- quietsegfault 8mo ago[dead]
- deltastone 8mo agoIt's something you know vs. something you have. That's how the legal system sees it. You might not tell someone the pin to your safe, but if police find the key to it, or hire a locksmith to drill out your safe, it's theirs with a warrant. It's interesting in the case of social media companies. Technically the data held is the companies data (Google, Meta, etc.) however courts have ruled that a person still has an expectation of privacy and therefore police need a warrant.
- direwolf20 8mo agoWhen they arrest you, they have physical control of your body. You're in handcuffs. They can put your fingers against the unlock button. You can make a fist, but they can have more strength and leverage to unfist your fist. There's no known technique to force you to input a password.
- sejje 8mo agoAre we not talking about a legal difference? That was my reading.
- direwolf20 8mo agoThe law follows practicality in this instance.
- deltastone 8mo agoAlso, using biometrics on a device, and your biometrics unlock said device, do wonders for proving to a jury that you owned and operated that device. So you're double screwed in that regard.
- direwolf20 8mo agoRemember, this isn't how it works in every country.
- rustyhancock 8mo agoAs far as I know lockdown mode and BFU prevent touch ID unlocking. At least a password and pin you choose to give over.
- tim333 8mo agoOne thing I miss from windows (on mac now) is there was an encrypted vault program that you could have hide so it wasn't on the desktop or program list but could still be launched. That way you could have private stuff that attackers would likely not even know was there.
- innagadadavida 8mo agoIs there a way to setup Mac disabling Touch ID if the linked phone goes into lockdown or Face ID requires passcode? Apple could probably add that.