lrvick

29 ms·

631.
by lrvick 10mo ago
Never been happier, and does not get in my way of doing anything as an owner of two tech companies that frequently travels. Phones are still optional for virtually everything in the US, though it sometimes requires talking to a manager.
632.
by lrvick 10mo ago
The same Apple whose CEO actively kisses the ass of the president buying tickets to be close to him and making him fancy gifts? The same Apple that voluntarily gave the CCP control of all the HSMs controlling the supply chains of all apple
633.
by lrvick 10mo ago
I suspect the people who have jobs that have made them capable of building and flashing their own firmware are exactly the sorts of people the NSA would be more likely to target and thus these tactics become all the more important. Things l
634.
by lrvick 10mo ago
At least one (and I assume all) manufacturers of network hardware have backroom code sharing deals with the NSA, and likely only highest leadership and a single release engineer knows about it. I personally know a trustworthy release engine
635.
by lrvick 10mo ago
TIL. Never been a requirement in the US which is a great privacy hack.
636.
by lrvick 10mo ago
Purchasing things online I sometimes use anonymized bitcoin, or prepaid credit cards purchased with cash. Most of the time I use bank cards like anyone else. Almost everything but appliances is shipped to a P.O. box. IRL I only use cash whi
637.
by lrvick 10mo ago
> I don't see how you could trust any phone Correct, and I do not own one.
638.
by lrvick 10mo ago
Sure but at that point I might as well just use the computer. Cell towers do not offer me much value I cannot obtain via wifi.
639.
by lrvick 10mo ago
I do not have a Google account or smartphone or use proprietary software so Google Fi is not a good option for me.
640.
by lrvick 10mo ago
The government obviously knows when I am at airports, but that is significantly different than them knowing every detail of my day to day life. But this is not just about me, it is about dogfooding tactics that make it much harder to useful
641.
by lrvick 10mo ago
Even when trying to find killers, with known faces, we find out law enforcement facial recognition even in a city like NYC is actually not that effective as most cameras are not sharing data and wearing masks in public is socially acceptabl
642.
by lrvick 10mo ago
I really appreciate the scorched earth efforts to redo computing with security from the start, but personally I have reached the conclusion that compatibility is key to adoption, and that desktop focused linux distros like ubuntu with yolo
643.
by lrvick 10mo ago
I am aware of large manufacturers that have agreements with the NSA to share source code, presumably so they can compile customized firmware. I would not be surprised if Apple does this.
644.
by lrvick 10mo ago
Privacy is like diet, it is not a zero sum game. The less data we give to advertisers and governments the better. The point is to increase the expense of tracking and create as many holes in their databases as possible. > You can be tra
645.
by lrvick 10mo ago
I am a security researcher and three letter agencies have talked to me more than a couple times about their interest in my work. I got a used manual transmission easy to repair vehicle with no internet, no cell phone, I only use cash IRL, a
646.
by lrvick 11mo ago
Building the FOSS primitives to make tamper evident secure enclaves as much of a default on the internet as TLS: https://distrust.co/blog/enclaveos.html
647.
by lrvick 11mo ago
Is there a way to do this with a local LLM, without any internet access needed?
648.
by lrvick 11mo ago
Since I do not have a smartphone or a cell carrier, I only have a voip number, which most sites think is a fake number. As a result I often have to use these shady SMS verification services to get my own personal legitimate accounts open.
649.
by lrvick 11mo ago
You do not own your apple account, and you never did. I would take this as a chance to learn about digital sovereignty and self hosting where you control your own data so this never happens again. Google and Apple can and will delete your c
650.
by lrvick 11mo ago
I am one of the maintainers at this point, fair. This would be a much smaller drop in replacement for the base images used in the post to give full source bootstrapped final binaries. You can still from scratch for the final layer though of
651.
by lrvick 11mo ago
For even smaller images that are always deterministic/reproducible with a multi-party signed supply chain, check out https://stagex.tools
652.
by lrvick 11mo ago
Unlikely, but if that did happen an army of lawyers would be willing to help pro bono for such a constitutionally critical case. Never comply with such nonsense.
653.
by lrvick 11mo ago
Or just do not use a phone at all. I travel internationally without one a few times a year. Europe, mexico, canada, japan, no problems. Dirty looks, but no problems.
654.
by lrvick 11mo ago
I have heard of malware like this, and engineers that found it at Google were instructed by higher ups to ignore it and never talk about it without explanation. Good luck getting anyone close to this to go on the record about it though give
655.
by lrvick 11mo ago
If you are of interest to the US government or any ally, assume your phone comes back from inspection with a compromised bootloader that will continuously re-infect your phone after you wipe/reinstall. Wipe it, let them inspect it, sel
656.
by lrvick 11mo ago
I was just arguing yesterday to coworkers I would quit tech before helping centralize any more of the internet on Cloudflare as a massive single point of failure. Thank you, Cloudflare, for again proving my point.
657.
by lrvick 11mo ago
So basically some idiot company connected toilets with cameras to the internet claiming the media collected of peoples "ends" was end to end encrypted. Except, it wasn't. These compromised toilets could be easily used to exfi
658.
by lrvick 11mo ago
Pnpm cannot be built without an existing pnpm binary meaning there is no way to bootstrap it from audited source code. Perfect trusting trust attack situation. Full source bootstrapped NPM with manually reviewed dependencies is the only rea
659.
by lrvick 11mo ago
Open silicon is a big leap beyond open hardware schematics and BOMs that allow people to repair boards, or redesign them to use alternative components. Precursor is the most open personal computing device that can be built currently.
660.
by lrvick 11mo ago
The BeTrusted/Precursor devices and Raptor Engineering workstations are actually 100% open software and schematics.

More ›