jeroenhd

4 ms·

31.
by jeroenhd 10d ago
You'd need to jailbreak the camera sensor chip and the phone's secure element. Which isn't exactly impossible either, but it's harder. I don't think it has been done yet (but I'm sure it will be at some point).
32.
by jeroenhd 10d ago
That's also why the approach is fundamentally flawed. The open-ish C2PA protocol has been "defeated" by tricking phones into signing arbitrary data already. The even-more-closed Apple version can be defeated the same way and
33.
by jeroenhd 10d ago
By the time you made your comment, such a system had already been invented, even partially rolled out: https://en.wikipedia.org/wiki/Content_Credentials Apple's protocol differs in that it requires a timestamping
34.
by jeroenhd 10d ago
That's a lot of words to say "we re-invented C2PA but made worse by getting our servers involved somehow". Like with C2PA, the entire thing hinges on nobody being able to dump keys or trick the TPM into signing arbitrary imag
35.
by jeroenhd 12d ago
Apple can hold the AI customers hostage by locking this level of AI integration to their app store, taking a 30% cut of AI subscriptions while at the same time having someone else fix the reputation of their devices' voice assistant fo
36.
by jeroenhd 12d ago
WhatsApp doesn't even have the option to disable e2ee anymore and it's doing just fine, despite their best efforts to screw over their customers.
37.
by jeroenhd 12d ago
So was RCS, until Google resurrected its rotting corpse and made it the default messenger for billions. All we need is for a billion dollar company to build their own implementation and XMPP can be back once more. Exactly the way it gained
38.
by jeroenhd 12d ago
Based on web browser statistics I've seen, most people use Chrome, some of them use Safari on their phones. There are also people who use Edge sometimes. But most people seem to use Chrome on every device, no matter how much I wish the
39.
by jeroenhd 12d ago
To be fair, dead birds don't tend to migrate as much (unless they're helped along and stored in a cooler, if you call that migration).
40.
by jeroenhd 12d ago
Depending on your needs, XMPP or Matrix are probably your best bet. Both have different clients of varying usability and quality on different platforms, so you have to pick your poison. If E2EE is important, you also need to determine how e
41.
by jeroenhd 12d ago
Matrix is a vastly different protocol with vastly different privacy implications. Things like leaking reaction metadata outside of the encrypted envelope (though there finally is an MSC to fix that) should make that obvious. Matrix is cool
42.
by jeroenhd 12d ago
A lot of chess.com information is public (by default) if you know someone's profile. Stuff a couple million email addresses and phone numbers into the "find friend" API and all you need to get profile information is the assoc
43.
by jeroenhd 13d ago
I would feel the same way if these people weren't installing a permanent surveillance camera. I don't think it's fair to cry harassment if you're getting filmed setting up the harassment machine. If anything, Americans a
44.
by jeroenhd 14d ago
> FortiClient VPN and SmartVPN have 4,134,648 cumulative Google Play installs between them, while Google reports more than 3 billion active Android devices. A very strange way to reason about killing an API instead of fixing the VPN issu
45.
by jeroenhd 14d ago
That seems like a good trick to me if you want to prevent people from installing spyware without any obvious signs. You can almost hide the warnings (there's one small notification in the bottom of the notification tray you can't
46.
by jeroenhd 14d ago
It's technically possible but very unlikely. Running TTS continuously is a big battery drain and slows down the rest of the phone while you're using it. Google has a live TTS service for hearing impaired which I've run for a
47.
by jeroenhd 14d ago
Some are friends with politicians
48.
by jeroenhd 14d ago
No need for more regulation, is there? A company used its infrastructure to orchestrate a cyber attack. Arrest the people running the company.
49.
by jeroenhd 14d ago
If you make money trying to resell Google's free services and data, this is a disaster. As a regular user, it's a minor annoyance.
50.
by jeroenhd 15d ago
These days with cryptenroll and friends, using the TPM is hardly an issue anymore. LVM and swapfiles both work well if you just create one large "everything but EFI" encrypted volume. You'd need to keep secure boot on, prefer
51.
by jeroenhd 15d ago
Swapfiles on BTRFS seem to work great if you allocate them early (with the command linked in your article) and put them in a different subvolume than the rest of your system. BTRFS in general seems more I/O constrained than ext4 or xfs
52.
by jeroenhd 15d ago
Windows also does a neat trick Linux lacks: automatically adding more swap, up to a limit. Systems with loads of RAM barely lose any storage to swap, but once they do get hit, they can get many gigabytes of swap space without user interacti
53.
by jeroenhd 15d ago
What reason would your professor have to have you take it down, at least past your due date? One could claim copyright on the project itself if you shared the files, or if you kept the original framework a course might provide, but the work
54.
by jeroenhd 15d ago
There's quite a difference between stealing a loaf of bread and making a career out of fraud to pay your way through college. Of course, this type of fraud is legal for the one doing the work, so even on that front the comparison doesn
55.
by jeroenhd 15d ago
Your link is explaining an addendum on the link OP posted. My guess is that OP got their account flagged as being a minor and posted the link in either surprise or (understandable) outrage after finding out that Claude has been asking peopl
56.
by jeroenhd 15d ago
The usual read on cybersecurity determines how bad an issue is using (something akin to) impact on confidentiality, integrity, and availability. Being able to freeze a computer from the browser is a plain availability risk. It's not ex
57.
by jeroenhd 15d ago
Pixel 9 Pro with Brave, it just sort of freezes for a second or two before I can close the tab using the normal brave button. Wonder what made the difference. I must've disabled some shady JS attack surface at some point.
58.
by jeroenhd 15d ago
You could probably make a pretty believable virus page with this. First you freeze the screen, forcing the user to force reboot. Then, when the system boots again and reopens the website (at least Safari does), you go full-screen and show a
59.
by jeroenhd 15d ago
"May 18, 2026" is right there next to the title. Nothing changed.
60.
by jeroenhd 16d ago
println!() already works, who needs more than that? Kidding aside, VS Code has excellent debugging support already. Unless you need to share your Rust code base with a legacy C/C++ code base, I don't think VS is the best environme

More ›