deno

7 ms·

61.
by deno 7mo ago
Apparently this is handled by the privileged STK[1] service. It can launch browser which is I think what's happening. GrapheneOS presently doesn’t do anything different in this case, they pull it from AOSP without modifications. Howeve
62.
by deno 7mo ago
Go to [Settings] » [Apps] » [Special app access] » [Display over other apps] and check if any preinstalled carrier apps or anything suspicious has this permission granted.
63.
by deno 8mo ago
The main point is logging in to the fake profile does not do anything different from logging in to the main profile. If you image the whole thing and somehow completely bypass secure enclave (but let's assume you can't actually br
64.
by deno 8mo ago
Sorry I explained it poorly and emphasized the wrong thing. The way it would work is not active destruction of data just a different view of data that doesn’t include any metadata that is encrypted in second profile. Data would get overwrit
65.
by deno 8mo ago
The "fake" user/profile should work like a duress pin with addition of deniability. So as soon as you log in to the second profile all the space becomes free. Just by logging in you would delete the encryption key of the othe
66.
by deno 9mo ago
Both tree and rat took out my fiber so the loops are definitely useful. If your fiber goes through your whole house it's significantly less work to only have to reconnect one end instead of redoing the whole run.
67.
by deno 10mo ago
There are standalone eCall units for retrofitting, e.g. [1] and likely soon more since 2G/3G gets phased out. Presumably you could disable the manufacturer’s built-in system and use standalone system instead? [1] https://www
68.
by deno 10mo ago
eCall has very strong privacy protections, see Article 6: https://eur-lex.europa.eu/eli/reg/2015/758/oj
69.
by deno 10mo ago
There are wayyyy easier ways to just get some private calculations. You can spin up an encrypted memory VM or wire up an eager physical kill switch. Launching satellites would bring a lot of attention and requires skills, money, multiple pe
70.
by deno 10mo ago
Bazzite is the opposite of that.
71.
by deno 10mo ago
This makes no sense. The company will still be on the ground in some country and it has to connect to the Earth internet on the ground in some country. Unless you are talking about actual space pirate station, but in that case it better com
72.
by deno 11mo ago
So which knife makers are serializing their kitchen knives so they can be traced back in case of a crime? How many knives come with a GPS tracking its position? Well too expensive, what about an Airtag. No? By your roundabout logic this qua
73.
by deno 11mo ago
Too bad Google Translate doesn't have a subscription to Le Parisien. https://archive.is/wW7N6
74.
by deno 1y ago
You can get decent prints, but that is true of every modern 3d printer basically.
75.
by deno 1y ago
I hate this false dichotomy. Plenty of people like both. People that buy expensive consumer grade printers are just satisfied with mediocre results because they don’t know any better. To get great quality prints you need to actually know ho
76.
by deno 1y ago
Tap to pay sometimes works if the banking app has its own implementation instead of relying on Google Pay. There’s a list[1]. [1] https://privsec.dev/posts/android/banking-applications-compa...
77.
by deno 1y ago
This isn’t unsolvable. A CAD app or similar could ask for permission to use extra resources. There’s already one for storage, extending this to CPU and MEMory is not far fetched.
78.
by deno 1y ago
This isn’t such a great example. You don’t need to have celiac disease to benefit from avoiding gluten. I suspect some people avoid it because they feel better in some way. For myself eliminating gluten (or wheat, I’m not sure how to differ
79.
by deno 1y ago
Isn’t this business model (as described above) literally the definition of racketeering? I guess there might not be an equivalent in Germany.
80.
by deno 1y ago
FWIW the EU also has EUDAMED registry for producers, distributors and importers of medical devices and there are additional regulations beyond CE under the MDR directive. I don't see "ZenBud" or "NeurGear" in the EU
81.
by deno 1y ago
Open windows in a city often means you are invinting in pollution, both air and noise.
82.
by deno 2y ago
You can use `podman-compose --in-pod=1 systemd -a create-unit` and it will create podman-compose@ service, then you can register compose.yml files with `podman-compose systemd -a register` with a $name, after that you can manage those pods
83.
by deno 2y ago
You can just not buy blurays, they were never popular on PCs anyway. TPM is being pushed on everyone upgrading to Win11. One is opt in, the other is maybe opt out if you jump through hoops, for now. Very different. Also you can do other thi
84.
by deno 2y ago
Ice Lake is 10th gen and last gen with SGX on consumer SKUs.
85.
by deno 2y ago
There’s an embedded immutable Endorsment Key (EK) sometimes along with public crypto cert (EKCert) signed by manufacturer the TPM can use to prove its authenticity. With the certificate you can detect the QEMU case.
86.
by deno 2y ago
Intel SGX was never pushed on anyone and it's also Intel only Skylake to Ice lake and requires vendors to provide consistent firmware updates to stay secure. You can’t run the entire OS in SGX enclave because it can’t do I/O on it
87.
by deno 2y ago
How would you do it if this was the goal? First you introduce TPM to every device under the sun until it’s everywhere, then you just have to flip a switch. You write Patriot Act then stash in the drawer until it’s time... > you can happi
88.
by deno 2y ago
And that’s why Play Integrity is based on hardware attestation and it is no longer a swiss cheese? And Win11 requires specifically TPM 2.0 (usually fTPM) not just any TPM. You’re also entirely missing the point. Yes, you can bypass TPM base
89.
by deno 2y ago
It goes TPM → OS Integrity (dm-/fs-verity) → Browser Attestation (Web Integrity) → Your banking website no longer working on Linux because of "security". It’s Play Integrity for the PC. Encrypted video is a red herring. The r
90.
by deno 2y ago
Still better than putting porn site address on children’s product (wicked). And they were able to buy the redirect. They should feel very lucky indeed.

More ›