jeroenhd

48 ms·

811.
by jeroenhd 9mo ago
It should work fine for any Android phone with pKVM support. It runs Debian in a VM, with some kind of Wayland trick (using virgl for GPU acceleration) to get GUI support. pKVM requires a) a compatible CPU (most CPUs will do, probably), b)
812.
by jeroenhd 9mo ago
I kinda wonder what the packet loss story of UDP is like for simple protocols like these in the modern day. Clearly, it's good enough that this application runs without issue. > Instead of bolting TLS onto every application protocol
813.
by jeroenhd 9mo ago
AFAIK the signature mechanism hasn't been defeated, so the attacker can only load software signed by the factory keys. Which includes old, vulnerable versions and all patched, newer versions. By burning in the minimum version, the old
814.
by jeroenhd 9mo ago
Qualcomm phones come with a special mode ( https://en.wikipedia.org/wiki/Qualcomm_EDL_mode ) that allows devices to get unbricked even after you break the normal user-updatable "bootloader" on flash completely.
815.
by jeroenhd 9mo ago
... and get a Check Engine light+fault code for the built-in emergency SOS feature, thereby making it unable to pass vehicle inspection until you fix the antennae
816.
by jeroenhd 9mo ago
They patched a low-level vulnerability in their boot process. Their phones' debug features would allow attackers to load an old, unpatched version of their (signed) software and exploit it if they didn't do some kind of downgrade
817.
by jeroenhd 9mo ago
A bit overdramatic, isn't it? Custom ROMs designed for the new firmware revisions still work fine. Only older ROMs with potentially vulnerable bootloader code cause bricking risks. Give ROM developers a few weeks and you can boot your
818.
by jeroenhd 9mo ago
Their low-level bootloader code contains a vulnerability that allows an attacker with physical access to boot an OS of their choice. Android's normal bootloader unlock procedure allows for doing so, but ensures that the data partition
819.
by jeroenhd 9mo ago
These measures are indeed the result of governments blaming their citizens getting scammed on phone manufacturers. There's not a lot Google can do here. However, Google is choosing to extend these changes worldwide. That's where t
820.
by jeroenhd 9mo ago
GrapheneOS can choose to simply not apply the same restrictions but now that they're partnering with another vendor to get security updates earlier, I'm not sure what the future holds in this aspect. This is only an issue for Goog
821.
by jeroenhd 9mo ago
From that I can see from the early leaks, it may actually be if you live inside of the EU where alternative app stores are now a requirement. iOS doesn't have the F-Droid ecosystem equivalent, but she F-Droid dies because of Google, th
822.
by jeroenhd 9mo ago
Signal offers a chat app that works fine and is not owned by Meta. That's enough for a significant amount of people to switch already. I'd love some quality of life updates to some of the niche features, like the desktop app, but
823.
by jeroenhd 9mo ago
I don't use any of the other features (in fact, I actively avoid them and would disable them if they ever came to Signal), but: > only three sticker packs and no obvious way to add my own https://support.signal.org/h
824.
by jeroenhd 9mo ago
> Why was it relevant that these operators must specifically be in the EU The integration is only possible because the EU forced Meta's hand. The law only applies to massive digital empires with gatekeeper levels of control. I don&#
825.
by jeroenhd 9mo ago
iMessage isn't popular enough in Europe to be broken up by the DMA from what I recall.
826.
by jeroenhd 9mo ago
> better than SMS - there is an implicit cost to send Funnily enough, people being charged per SMS but being allowed to send as much messages as they need on apps like WhatsApp is exactly why SMS/MMS is barely used on a large scale
827.
by jeroenhd 9mo ago
Phones have had FDE enabled by default for years. Nobody needs backup keys for those. Of course this feature comes at the cost of no longer being able to have low level control over your device, but this isn't a binary choice.
828.
by jeroenhd 9mo ago
They could still have asked. They do if you enable Bitlocker outside of the OOBE. This story is just yet another confirmation of what used to be the "the americans have bugged most computers in the world" conspiracy theory. I hope
829.
by jeroenhd 9mo ago
Explicit tail call optimization is in the works but I don't think it's available in stable jut yet. The `become` keyword has already been reserved and work continues to happen ( https://github.com/rust-lang/rus
830.
by jeroenhd 9mo ago
> - You're nuking the ground-based command & control centers for those satellites. Again, nothing like 10,000 missiles needed. With Starlink's peer-to-peer capabilities, hitting every single ground station and keeping the s
831.
by jeroenhd 9mo ago
There's definitely irony in that Microsoft's GitHub is hosting the leaked source code (which probably got sucked into Copilot and every other AI under the sun as a result). However, I don't think copyright lawyers will care.
832.
by jeroenhd 9mo ago
Various versions of Windows have had their source code leaked out in part or almost whole. If Claude produces an exact copy, like LLMs used to do with the fast inverse square root from Doom, Microsoft would have good reason to sue and it&#x
833.
by jeroenhd 9mo ago
With the way the courts seem to judge LLM outputs, I don't think that's an issue as long as it's provable that the code was shat out by an LLM. Of course Microsoft could still claim that someone used a leaked Windows build as
834.
by jeroenhd 9mo ago
> And it took more than a decade to get MMSC interoperability. It's still not perfect even now. That's an understatement, my carrier has disabled MMS years ago. Still, that's not an issue with the MMS protocol, just an iss
835.
by jeroenhd 9mo ago
With the extra work that LLM slop has been causing to core maintainers, I think they're quite friendly. Hopefully the volume of the bullshit they receive goes down once they stop paying bug bounties. The people who got upset that their
836.
by jeroenhd 9mo ago
It is rather jarring to be stuck in the woods with Google Maps offering turn-by-turn navigation back home while the emergency room only gets a vague triangulated position (which might be wrong entirely if the signal gets reflected off of so
837.
by jeroenhd 9mo ago
Context: DigiD is the Dutch national infrastructure for authenticating to government (and semi-government) services. It's used for anything from doing taxes to checking the status of your pension. The company that basically runs it for
838.
by jeroenhd 9mo ago
> Oo enterprise. I believe you missed another 5 or 6 acronyms that are also required for having ipv6 internally. It's not 2010 anymore, IPv6 works internally out of the box. If you don't know what ARP means then you will have n
839.
by jeroenhd 9mo ago
That freedom for many free licenses comes with the caveat that you provide basic attribution and the same freedom to your users. LLMs don't (cannot, by design) provide attribution, nor do LLM users have the freedom to run most of these
840.
by jeroenhd 9mo ago
The "inside" is your /56 or /48. You can add more local-only "inside"s if you'd like, which is useful for terrible ISPs with rotating network prefixes. The "outside" is everything on the internet

More ›