5 ms·

Apple has device attestation deployed like one year before Google even proposed it: https://httptoolkit.com/blog/apple-private-access-tokens-attestation/ https:

by magnio 5mo ago

Apple has device attestation deployed like one year before Google even proposed it: https://httptoolkit.com/blog/apple-private-access-tokens-attestation/ https://httptoolkit.com/blog/apple-private-access-tokens-att...

doctorpangloss 5mo ago
hacker news when discovering that apple deployed WEI, for ages, with beloved IT company Cloudflare, affecting hundreds of millions of users: "aww, you're sweet" hacker news when reading that google is doing the same thing for the rest of the userbase: "hello, human resources?"
- raincole 5mo ago
  Really. I think HN hates Cloudflare with (quite unjustified if you ask me) searing passion.
  - dakolli 5mo ago
    In 2008, the Department of Homeland Security (DHS) contacted Unspam Technologies, asking, "Do you have any idea how valuable the data you have is?" The DHS' email served as the impetus for Cloudflare, a technology company Prince co-founded with Holloway and fellow Harvard Business School graduate Michelle Zatlyn the following year. https://en.wikipedia.org/wiki/Matthew_Prince#:~:text=In%202008%2C%20the,the%20following%20year. https://en.wikipedia.org/wiki/Matthew_Prince#:~:text=In%2020... They're literally a government surveillance program larping as a private company, many such cases.
- Dylan16807 5mo ago
  I thought that cloudflare system worked on any hardware and the tokens are anonymous. Did that change at some point? If it didn't change, then yeah it should get a very different reaction! (Edit: it looks like the new system is still private and still interlinked with the old system that lets you use any hardware? I think?) Also I don't know how you could have missed the widespread criticism of apple and especially cloudflare on this site.
  - doctorpangloss 5mo ago
    apple has blessed cloudflare WAF with backend access to the apple ID service tokens that they manage for things like iMessage authenticity I think it has also blessed Amazon's WAF Cloudflare has a turnstile product that i'm sure uses this apple IDS token Mobile Safari generally is not shown Cloudflare captchas or similar because of Apple-Cloudflare cooperation. it's not complicated. Apple calls it a "Personal Access Token" but that makes it sound more like a DRM scheme - which it sort of is, it is managing your right to a free-as-in-beer access scheme - than a broad web integrity environment solution
- michaelcampbell 5mo ago
  Were you attempting to give us an example of the Goombah Fallacy? Because this is a picture perfect one.

by magnio 5mo ago

doctorpangloss 5mo ago

hacker news when discovering that apple deployed WEI, for ages, with beloved IT company Cloudflare, affecting hundreds of millions of users: "aww, you're sweet" hacker news when reading that google is doing the same thing for the rest of the userbase: "hello, human resources?"

raincole 5mo ago
Really. I think HN hates Cloudflare with (quite unjustified if you ask me) searing passion.
- dakolli 5mo ago
  In 2008, the Department of Homeland Security (DHS) contacted Unspam Technologies, asking, "Do you have any idea how valuable the data you have is?" The DHS' email served as the impetus for Cloudflare, a technology company Prince co-founded with Holloway and fellow Harvard Business School graduate Michelle Zatlyn the following year. https://en.wikipedia.org/wiki/Matthew_Prince#:~:text=In%202008%2C%20the,the%20following%20year. https://en.wikipedia.org/wiki/Matthew_Prince#:~:text=In%2020... They're literally a government surveillance program larping as a private company, many such cases.
Dylan16807 5mo ago
I thought that cloudflare system worked on any hardware and the tokens are anonymous. Did that change at some point? If it didn't change, then yeah it should get a very different reaction! (Edit: it looks like the new system is still private and still interlinked with the old system that lets you use any hardware? I think?) Also I don't know how you could have missed the widespread criticism of apple and especially cloudflare on this site.
- doctorpangloss 5mo ago
  apple has blessed cloudflare WAF with backend access to the apple ID service tokens that they manage for things like iMessage authenticity I think it has also blessed Amazon's WAF Cloudflare has a turnstile product that i'm sure uses this apple IDS token Mobile Safari generally is not shown Cloudflare captchas or similar because of Apple-Cloudflare cooperation. it's not complicated. Apple calls it a "Personal Access Token" but that makes it sound more like a DRM scheme - which it sort of is, it is managing your right to a free-as-in-beer access scheme - than a broad web integrity environment solution
michaelcampbell 5mo ago
Were you attempting to give us an example of the Goombah Fallacy? Because this is a picture perfect one.