ChocolateGod

6 ms·

91.
by ChocolateGod 3mo ago
> Even with a rooted phone you can't mess or snoop on data in the trusted execution environment A rooted phone can have a modified runtime/kernel that can inject code into whatever processes it sees fit, including Google Pay. W
92.
by ChocolateGod 3mo ago
Compared to some other cc TLDs (like .ly, .ga) that are used for domain hacks, at least the ones for the BoTs (.sh, .ai, etc) are politically stable.
93.
by ChocolateGod 3mo ago
How many people would have played if it wasn't on Game Pass though? I doubt many. Expedition 33 was on game pass and still sold 8 million copies.
94.
by ChocolateGod 3mo ago
I think some of these game studios got so content with Microsoft constantly paying that they forgot to make games that would actually sell. South of Midnight took 7 years to make and cost $100 million to make... yet sold hardly any copies a
95.
by ChocolateGod 3mo ago
PCI-DSS (enforced by banks/payment processors) means the EMV token store on your Android phone must be in an isolated uncompromised location (usually the TEE). If your phone is rooted or has an unlocked bootloader then it's possib
96.
by ChocolateGod 3mo ago
Are the batteries in the Nintendo switch locked in anyway? Wonder if its viable that third party batteries could have an increased capacity.
97.
by ChocolateGod 3mo ago
> Still leaves the attestation API though. Which makes using a non-Google sanctioned device a non-viable option The attestation API isn't Google 'being evil', it exists as part of legal requirements that exists, namely for
98.
by ChocolateGod 3mo ago
It does as much good for the cause as those climate activists who glue themselves to motorways and block ambulances.
99.
by ChocolateGod 3mo ago
It's part of Google Play Services, so it's already integrated into Xiaomi, OnePlus etc phones.
100.
by ChocolateGod 3mo ago
> ...if you wait 24 hours. False. ADB is not restricted at all, the moment you enable developer options and enable ADB you can install an APK. The Google "wait 24 hour" flow only triggers if you install an APK off the web. htt
101.
by ChocolateGod 3mo ago
I lost a lot of sympathy for these campaigns when they started to use hyperbole. ADV is not a virus, nor a trojan horse. > killing the ability to install your own software on your phone But you can still install whatever you want over AD
102.
by ChocolateGod 3mo ago
So it's effectively a clone of Nebula minus the need for a lighthouse.
103.
by ChocolateGod 3mo ago
It doesn't run GNOME Shell, which is the main memory hog of GNOME. It uses some GNOME services, namely so it doesn't have to invent it's own. None of these services are memory heavy and all have a purpose (e.g. managing Bluet
104.
by ChocolateGod 4mo ago
> but good news, Nebula Security found it before attackers do. Which is why they released the code to the exploit before it's been patched, meaning bad actors now likely have months to profit off it before a meaningful % of devices
105.
by ChocolateGod 4mo ago
FreeBSD relies on being able to run the Linux graphics drivers though via a compat layer.
106.
by ChocolateGod 4mo ago
The HA certainly makes this more of an alternative to JuiceFS now. Would need something like HAProxy to correctly handle failover for NFS though?
107.
by ChocolateGod 4mo ago
I believe the first version of this required the metadata to be stored on the ZeroFS server, making HA kinda hard. This has changed now that if I stop the server and create a new instance with the same configuration file it'll pickup t
108.
by ChocolateGod 4mo ago
If any distro made their own way to store a DoB field, it'd be a nightmare of interoperability.
109.
by ChocolateGod 4mo ago
> I’ve seen is that it tries to be too much which violates the Unix philosophy of small tools doing a single thing well Usually the same crowd that makes this complaint about systemd also have a strong affinity to Xorg and dislike to Way
110.
by ChocolateGod 4mo ago
The field does nothing when left untouched, which it is by default. If having the ability to set a piece of metadata worries you, don't set it.
111.
by ChocolateGod 4mo ago
Are you offering to pay for their lawyers?
112.
by ChocolateGod 4mo ago
> comply with age verification laws Do you want the developers to ignore the law and in the case of companies like Red Hat etc be vulnerable to law suits?
113.
by ChocolateGod 4mo ago
IIRC laws in some US states will require OS's to collect the age of the user so services can age restrict, it does not mandate any kind of ID verification. It doesn't matter it's an open source project, ultimately it ends up
114.
by ChocolateGod 4mo ago
This makes the mistake of confusing systemd the service manager and systemd the project. This is an easy mistake to make given they have the same name. The systemd service manager does not have an installer, systemd-sysinstall is a separate
115.
by ChocolateGod 4mo ago
Because a debugger launches the target process as a child process and thus has access to its memory? /proc/sys/kernel/yama/ptrace_scope is usually set to 1 on non-Selinux distros.
116.
by ChocolateGod 4mo ago
> Wayland also has fewer features than xorg I don't want my display server/compositor to have a print server.
117.
by ChocolateGod 4mo ago
> Most of the time applications can read each other's memory, so protecting the display does not make much sense. Unless you're running everything as root, applications can not read eachothers memory.
118.
by ChocolateGod 4mo ago
> XACE Which is configured by default on what distros?
119.
by ChocolateGod 4mo ago
Correct me if I'm wrong, but passing through the X socket gives a giant sandbox escape as any application can control/see any other application, including a root terminal in a GUI app.
120.
by ChocolateGod 4mo ago
I don't think requiring secure boot is a big deal given every computer since Sandy Bridge iirc ships with it.

More ›