Aachen

24 ms·

511.
by Aachen 8mo ago
So long as browsers allow you to open the developer tools and inspect memory etc., they're more open than remote attestation of a stock android or ios device Decompiling apps only works if you can get the app. I don't understand G
512.
by Aachen 8mo ago
Have you seen those prices? I don't think the devices need subsidising at all. How else could competitors, who aren't selling off your data, offer it for cheaper?
513.
by Aachen 8mo ago
Debian surely doesn't depend on Lenovo or Asus to release OS updates for my laptop. Apparently it's not "everyone else" that needs this but it's some sort of dependency for mobile (qualcomm?) devices I have trouble
514.
by Aachen 8mo ago
> The whole reason why GrapheneOS is superior to its alternative is because they do all that. What is "its alternative"? > I also wish they could support non-Google phones, but that's a problem coming from the manufactu
515.
by Aachen 8mo ago
And the amount of lock-in. If they ever decide to kick out your favorite OS or hardware vendor, well, good luck doing that if you can use the services on a website. They'd have to port all the web users over to mobile and know they&#x2
516.
by Aachen 8mo ago
Duckduckgo's only hit for "Gphotoshim" is your comment. Any hint at what to look for?
517.
by Aachen 8mo ago
That makes no sense. If there is a recall program for safety, surely they have to accept whatever software is on there? It's not relevant to the hardware repair
518.
by Aachen 8mo ago
My bank has always had hardware attestation, but it was their hardware that was being attested. Customers get it loaned when signing up I have no problem with a device that they trust being used for transaction approval, but that device s
519.
by Aachen 8mo ago
Needing to use a verified boot chain with keys that the bank trusts is essentially the same as using the authenticator device from said bank, except this one costs 100€ or more, has a microphone and camera built in, and you use it for priva
520.
by Aachen 9mo ago
I would agree if it were RCE This definition in the first paragraph on Wikipedia matches my understanding of it as a security consultant: > The ability to trigger arbitrary code execution over a network (especially via a wide-area networ
521.
by Aachen 9mo ago
Yes, that is the definition consistent with historical use of "RCE": a component is accessible in such a way that it is remotely reachable and you can get full code execution access on the machine via that bug (subject to whatever
522.
by Aachen 9mo ago
I've thought about making such a system before, but never considered making it a single flat file¹. How are you going to identify who keeps inviting these bad actors? Assuming the list is under source control, the commit history can an
523.
by Aachen 9mo ago
> the purpose of the trust metric is to certify that a given user account on Advogato is known by the Advogato community to actually belong to the individual who claims it and is known to be a member of the free software and open source
524.
by Aachen 9mo ago
Good to know there's reply bots out there that copy out content immediately. I rarely run into edit conflicts (where someone reads before I add in another thing) but it happens, maybe this is why. Sorry for that Besides the "what
525.
by Aachen 9mo ago
> My definition of PKI is the one we’re using for TLS, some random array of “trusted” third parties can issue keys Maybe read the actual definition before assuming you're so much smarter than "HN". One doesn't need th
526.
by Aachen 9mo ago
It needn't be related to the corp for it to be a match made in heaven
527.
by Aachen 9mo ago
Information on Discord visible only if you sign up for it (and afaik, in some countries, upload identification)... that does seem rather in line with the deep web architecture that AnkiHub uses. Maybe this would be good in a ticket or the A
528.
by Aachen 9mo ago
Why'd people choose a closed ecosystem but then care about open software? I assume the main crowd is on AnkiDroid, either via f-droid or google play, and that the few iOS people don't care about a new corporation taking over the r
529.
by Aachen 9mo ago
(Same person as above but felt that this part had a separate purpose so I've moved it into its own comment) The ecosystem is currently such that it seems hard to enshittify it. They say they have no intention of doing that and I believ
530.
by Aachen 9mo ago
I'm an Anki user, on and off since 10 years or so, but was still confused. If I understood correctly, the entities here are: - Anki, as set up by dae aka Damien, is like the brand name and desktop implementation with the spaced repetit
531.
by Aachen 9mo ago
(it's unreliable, see second edit) Does it? I've looked at it only briefly (like enabled it, waited a while for it to download something big, then got a basic shell) but it seemed much less capable than Termux. Can you get cell to
532.
by Aachen 9mo ago
Frankly the main thing I take issue with is dumping these garbage titles onto HN. They can do what they want on their site
533.
by Aachen 9mo ago
> I let ChatGPT analyze a decade of my Apple Watch data, then I called my doctor ... and you won't believe what happened next! Can we do away with the clickbait from MSN? The article is about LLMs misdiagnosing cardiovascular status
534.
by Aachen 9mo ago
TL;DR it is keystroke timing obfuscation (of course)
535.
by Aachen 9mo ago
Bad randomness in generating keys, for anyone else wondering
536.
by Aachen 10mo ago
You might enjoy hatetris (tetris, not chess, but it optimises against you in a way that felt similar)
537.
by Aachen 10mo ago
Did you know that you can assign arbitrary programs (protocol handlers) to arbitrary protocols?
538.
by Aachen 10mo ago
What do you use to revise this? Did you download or make an Anki deck?
539.
by Aachen 10mo ago
Right, I should have said Rust. Golang is so 2017!
540.
by Aachen 10mo ago
[It has been (1) days since the last time that I needed strtotime] Don't know how to do this without PHP, so I actually use it on the shell inline between a bunch of Bash. I assume that's the same function with new syntactic sugar

More ›