lxgr

16 ms·

511.
by lxgr 6mo ago
The EU might have slept on Russia having to urgently come up with its own payment systems after the 2014 Crimea annexation (which in turn enabled it to deal with the complete Visa/Mastercard exit in 2022) because political goals were a
512.
by lxgr 6mo ago
> Oh my god. It's 2026, and we're still repeating the "I trust Apple/Google/Microsoft enough to resist the government" spiel. Who is? > But when the US does it [...] I don't live in the US, and while
513.
by lxgr 6mo ago
DRM is arguably a specific use of various generic technology ranging from whitebox cryptography to trusted computing. I don't think remote attestation (or even more so its umbrella technology, trusted computing) is nearly as specifical
514.
by lxgr 6mo ago
Remote attestation is a technology, not a policy or a political effort, so it can't be inherently evil. You can disagree with all its known or proposed uses, but then I think it makes more sense to name these.
515.
by lxgr 6mo ago
You're not necessarily being surveiled just because you're forced to authenticate yourself. It often is the case practically, but it's not inherent, and mixing the two up makes the discussion too imprecise in a technical foru
516.
by lxgr 6mo ago
> then you need to receive an attestation from that external dongle, and/or pre-provision it with an identity (like a national ID card.) That's how it works in Germany: You tap your national ID card (as a citizen) or eID card (
517.
by lxgr 6mo ago
Only if you need to have the entire application behavior (or at least some trusted confirmation) attested, right? Otherwise, an external USB dongle, tapping a contactless smartcard on a phone etc. could do just fine.
518.
by lxgr 6mo ago
Context matters. “Here’s byte 0x67, which is at offset 0x729B1A38 of Copyrighted_Blockbuster.4k.mkv, as requested” is different from “here’s byte 0x67, and it’s the first byte of my text response to your comment”.
519.
by lxgr 6mo ago
Can Graphene OS pass this kind of Google attestation challenge, though?
520.
by lxgr 6mo ago
> designed exclusively for Android and Apple mobile devices That's very different from requiring hardware attestation, though.
521.
by lxgr 6mo ago
Is this actually available in Safari?
522.
by lxgr 6mo ago
> they might be using an app (with enormous access to the phone as the Play Services have) to be able to link a ton of data together, possibly including the local activity on the phone But anything your phone can possibly do in software
523.
by lxgr 6mo ago
I'm sure some people still remember how to mentally decode QR codes and verify ECDSA signatures from Covid days. Public transit ticket inspectors in my city also seem to be quite proficient at it :)
524.
by lxgr 6mo ago
I'd love to, but I'd not be able to visit many sites anymore thanks to Cloudflare...
525.
by lxgr 6mo ago
They almost certainly didn't use that. The projects were named after a Google Doc they'd recently worked on (or a .docx attachment they'd received?) though, so my other guess is that they somehow created a Google Docs macro o
526.
by lxgr 6mo ago
Almost completely unrelated, but I recently helped out a very confused family member with deleting not one, but two Google Cloud accounts they had no idea existed, and that they only learned about from an email referencing reCAPTCHA getti
527.
by lxgr 6mo ago
DOCSIS would probably not be be specified in RFCs, but see e.g. here: https://account.cablelabs.com/server/alfresco/9b8a9bd8-dea3-... I suppose the main reason was compatibility with existing cable headend infrast
528.
by lxgr 6mo ago
The nice thing about fMP4 is that it's supported by both HLS and MPEG-DASH, so you can save yourself the effort of duplicating all data at the CDN level (or using a CDN that can just-in-time assemble fMP4 and M2TS files from the same u
529.
by lxgr 6mo ago
Sure, but there are a lot of media applicances that don't really have upgradeable software. I suppose it can be pretty useful to just (un)wrap MoQ and feed the result over a local interface into something that just expects M2TS and vic
530.
by lxgr 6mo ago
I don't think MKV is better suited for low-latency streaming production (as opposed to consumption) than MP4. That's really more of the domain of MPEG-TS, RTP etc., and presumably this is a reliable transport alternative to that.
531.
by lxgr 6mo ago
Transport Stream is for everything, which includes the Internet.
532.
by lxgr 6mo ago
No, but under it ;)
533.
by lxgr 6mo ago
Including IP (over DOCSIS), I believe!
534.
by lxgr 6mo ago
Nice job, this is seriously one of the fastest websites I've ever used! I feel like I have some minimum latency "priced in" to my expectation when I click a link on a static site, so yours feels uncannily like it's someh
535.
by lxgr 6mo ago
Just a typographic approximation of my mental state when thinking about Google's instant messaging product naming and strategy, or rather the lack of both :)
536.
by lxgr 6mo ago
Who still believes that anyway given that WhatsApp, Facetime, and even Google Meet (formerly Duo) (formerly Hangouts) (the one that was not Google Meet 1.0) (not for Woरkspaces) have been supporting E2E multi-party video calls for a long ti
537.
by lxgr 6mo ago
I suppose it might be one of those things that just oscillate in society, since neither extreme is without frustrations. And as soon as the generation most familiar with the specific downsides of either extreme steps aside, the cycle of his
538.
by lxgr 6mo ago
We should really host another one though; I think I've since lost a few more.
539.
by lxgr 6mo ago
All articles exist, some just haven't been discovered yet ;)
540.
by lxgr 6mo ago
Nice, that's what I used for by LLM-backed HTTP server [1] a while ago as well :) It's a shame they got rid of the generous free quota a while ago, which is why I had to shut my public instance down. [1] https://github.

More ›