dwaite

35 ms·

541.
by dwaite 3y ago
Or even Apple paying developers a cut of iPhone sales, since apps provide so much value to the hardware ecosystem. And maybe a pony.
542.
by dwaite 3y ago
Because of how malicious notifications are by default in Slack (e.g. @here, @channel, bots you can't mute) and how poorly the catch-up flow is (e.g. no "unreads" view on mobile, I'm in 16 different slacks which have to b
543.
by dwaite 3y ago
I think iMessage is still using older attestations, but generally an attestation of this sort (App Attest, Play Protect API) represent a chain of the hardware, boot process, OS and application. So iMessage is not going to be willing to hand
544.
by dwaite 3y ago
I suppose it is determined by where you set the bar, even more so with privacy which still varies person-to-person and can sometimes take a qualitative feel. Security wise, there is interesting work adopting MLS (and I believe key transpare
545.
by dwaite 3y ago
RCS Universal Profile. Vendors are going to have to actually work on improving the standard (and Apple has committed to working within GSMA on an appropriate multi-vendor E2EE mechanism) In the absence of interoperable standards through GSM
546.
by dwaite 3y ago
Trust is generally something you build and lose, rather than something you are given by default. That reputation can be a massive asset or liability. The level of trust I currently give in Beeper is that identity verification happened such
547.
by dwaite 3y ago
IMHO profiled RCS is notably worse than SMS for privacy, because the vast majority of RCS servers are hosted by Google. SMS can be read but it is still at least somewhat decentralized. It isn't being funneled to a single party whose bu
548.
by dwaite 3y ago
Beeper mini includes a hosted service to receive APNS notifications (meant for Apple software) So I would summarize it as the corporate entity connecting to an Apple API and using it in undocumented ways that they reverse engineered, interc
549.
by dwaite 3y ago
> Completely agreed about the nonsensical first claim. We have many third-party clients for other messaging platforms where privacy and security are a primary feature. I can't think of an any with independent implementations. For in
550.
by dwaite 3y ago
> They can increase security by breaking a single target into multiple targets, by increasing competition around security and privacy issues, by having more people use and work with the protocols and able to spot potential problems, by e
551.
by dwaite 3y ago
For iPhone there are two tiers - the carrier provided SMS spam filtering, and apps written to provide such filtering[1]. 1: https://developer.apple.com/documentation/sms_and_call_repor...
552.
by dwaite 3y ago
You can't use regulations to change physics, and (demands or no) it is unclear what sort of interoperability is really possible. What will really happen is that there will be some subpar common denominator. An existing "walled gar
553.
by dwaite 3y ago
Do you mean a default "carrier SMS service" app? In everyday iPhone usage, you would either run an app directly, use sharing intents, or use a messaging service specific identifier (eg custom URI scheme) to converse with someone.
554.
by dwaite 3y ago
> for desktop maps, AFAIK Google is still tops (on my phone I use Apple Maps and it's...fine) I use Apple Maps on desktop as well. In my area (Denver) they seem to have about the same number of unique issues, but 1. Mobile Google Ma
555.
by dwaite 3y ago
I've gotten local political messages from volunteers, but those were sent from their cellphones (and may have resulted in them being banned from iMessage a few days later) I've never gotten an automated spam via iMessage protocol.
556.
by dwaite 3y ago
You switched from Android _just_ for iMessage? Why on earth for? Could you elaborate?
557.
by dwaite 3y ago
Yes, crazy moon math! I am not a cryptographer, and try to be careful when I wave my hands around. Cryptocurrencies seemed to accelerate the revision, implementation and deployment of newer cryptographic techniques. Range proofs are used in
558.
by dwaite 3y ago
You can say JWS (JSON Web Signature) provides integrity/authentication and JWE (JSON Web Encryption) provides confidentiality. JWP (JSON Web Proofs) are meant to provide for privacy. I'll give an example of digital documents used
559.
by dwaite 3y ago
> IMO one of the major problems with JOSE is that the algorithm to be used for verification is part of the object being verified and is generally not part of the verification API or the verification key. This results in the alg "non
560.
by dwaite 3y ago
The JWS/JWE compact and JSON encodings are text based formats, safe for various internet protocol use (such as embedding in a HTTP header, URL query parameter, or cookie) The header is JSON and could have potentially used another encod
561.
by dwaite 3y ago
Yes, encrypted JWTs are a thing. You typically have a JWT as a signed payload, then encrypt that JWT using JWE. An example of such an approach is in the RFC appendix: https://datatracker.ietf.org/doc/html/rfc7519#a
562.
by dwaite 3y ago
Hello! I a one of the editors, feel free to ask questions.
563.
by dwaite 3y ago
This was unclear to me as well. I think the article is talking specifically about downloading and running scripts for working around a particular site dynamically, such as Youtube ad blockers. That said, I don't know if this really is
564.
by dwaite 3y ago
There are 3-4 types of hybrids: 1. Series, where it is fuel -> engine -> battery -> e-motor -> wheels , with regenerative breaking as a second power source to the batteries. These are range-extended vehicles, where a small gener
565.
by dwaite 3y ago
I'm curious to see performance of Rosetta between the two - my understanding is that (at least for M1) the E cores did not support the alternative memory ordering mode for assisting in X86-64 compatibility.
566.
by dwaite 3y ago
> ...more, but even slower clocked efficiency cores The E cores have a wider range on both sides in the M3; they are lower at base clock and have a higher max clock.
567.
by dwaite 3y ago
> ...but you can end up with something like the Cell processor if you aren’t careful to make sure those features are used. The Cell hardware didn't turn out how Sony expected either - hence adding an Nvidia GPU at the 11th hour, and
568.
by dwaite 3y ago
> Genuine question, what app is able to utilize ANE? It seems like it's been there for multiple generations and yet nothing makes use of it. It is not directly exposed/documented, but instead leveraged by system ML-oriented fra
569.
by dwaite 3y ago
So you recreated Blipverts? https://en.wikipedia.org/wiki/Blipvert
570.
by dwaite 3y ago
Interesting use of A/B testing

More ›