phh

51 ms·

541.
by phh 5y ago
Personally, I didn't understand the title as a security flaw. I simply understood it as a step forward into understanding/documenting the way Intel CPU work. So I don't think it is clickbait. The only part I'm not clear
542.
by phh 5y ago
Compare the project fundings? Chrome funding is probably in the XXM$/year, while Zerodium offers 500k$ for a vulnerability, that's an approximate 20-100 funding / vulnerability ratio. Pidgin is at 25k$/year, for 100k$ fo
543.
Zerodium offers $100k for a RCE in Pidgin, who received $25k donation this year(twitter.com)
141 points by phh 5y ago|69 comments
544.
by phh 5y ago
It sounds so easy to make, yet so useful, that I can't see how they wouldn't do that. Deontology has been thrown out Google's window a long time ago.
545.
by phh 5y ago
That's definitely pretty cool, and I really wish that European's funding had a track record anywhere close to DARPA (though I don't really complain, Europe funding isn't too bad) Does someone have information about the s
546.
by phh 5y ago
I totally agree with you. I wouldn't necessarily say that rich people subsidize poor ones, other one we wouldn't see Facebook racing for Brazil and Google racing for India. But yes, one major property of ads is how it adapts to th
547.
by phh 5y ago
Except emulators and actual web browsers you mean?
548.
by phh 5y ago
For once I'm surprised. Android has been stripping location from Exif when the app don't have location permission for more than a year now: https://developer.android.com/training/data-storage/shared/
549.
by phh 5y ago
I've been taught in school that perfect competition ( https://en.wikipedia.org/wiki/Perfect_competition ) requires perfect information ( https://en.wikipedia.org/wiki/Perfect_information ), so
550.
by phh 5y ago
Not really related, but related enough to be interesting: https://ubic.app/ This is a proof-of-passport cryptomoney: You receive money on a regular basis simply with your passport, making it a de-facto UBI
551.
by phh 5y ago
FWIW, considering what's in it, Chromecast with Google TV probably has positive margin in the USA. It is using only off-the-shelf very cheap components. Except for USB-C part, you can find same-speced boxes for 30$ on chinese market. I
552.
by phh 5y ago
The UI is 95%+ ads, I wonder how it looks like with adblocking.
553.
by phh 5y ago
Nope, the nVidia Shield is miles ahead. Chromecast with Google TV doesn't have TrueHD support, ethernet, 6/8ch PCM HDMI output, automatic frame-rate switch, game streaming (yes this is an obvious troll, but still it is true). nVid
554.
by phh 5y ago
The ratio of available apps of Android without gapps over pinephone is still more than 1000 fold, despite SafetyNet or other reliances on Google. For push notifications, microg does fill the gap, so I'm not sure what you're talkin
555.
by phh 5y ago
Maybe don't scratch Android too fast. Android is opensource, and is technically really great. There is a great opensource community of people that are very capable in this area, and supports already the vast majority of devices in the
556.
by phh 6y ago
Looking at the comments in that ticket, I can understand why ffmpeg developers don't want to help those people, and the devs probably spoiled more time answering this annoying person than it would take to have fixed the issue, making t
557.
by phh 6y ago
Yup it's precisely because Huawei stopped providing bootloader unlock. Before that, Huawei was on a good track to be appreciated by developers. They had developers program (giving away devices), great GSI support (which means easier to
558.
by phh 6y ago
Google is slowly working on deprecating/hiding OEM's GLES drivers, in favor of Vulkan, but we're still very far from that. Most of Android's rendering is still mostly GLES, using directly OEM's GLES driver. Since An
559.
by phh 6y ago
The idea of Project Treble is to separate drivers from Android, and also to version drivers. When you receive a smartphone running Android 10.0, you also receive drivers "targetting" Android 10.0. With Treble, you can replace that
560.
by phh 6y ago
In the Android smartphone world, most big OEMs abid by the GPL properly, with nothing closed source in kernel. But if you have bugs either in other processors' firmware, or in userspace binary libraries, kernel's GPL won't sa
561.
by phh 6y ago
I, as an OSS community contributor, have been using Treble for years now, and I have devices who got let down by their OEMs on Android 8, that I pushed up to Android 11, and that's been pretty cool. I, as an OEM, am still NOT allowed (
562.
by phh 6y ago
What about Google? The issues fairphone mention are passing Google certification suites. They should be relaxed to help those cases. As far as I know the major issues are around GLES. It passed older CTS, so GLES was good enough back then.
563.
by phh 6y ago
That's both true and wrong at the same time. Sure all the big companies that relied on dhcpcd will rewrite it. But still the loss of one opensource project has a major impact on the economy. You mention the part of time saved by the co
564.
by phh 6y ago
My goal for Phh-Treble remains the same, which is provide a good basis for a pure unmodified AOSP with good hardware support, so that other people can make whichever ROM they want with it. As such, I'm saddened that many ROMs, includin
565.
by phh 6y ago
Uh, both have been forever wrong using my GSIs? I've never made any GSI without storage encryption, and My GSI have always been running SELinux enforcing. Some kinds of GSIs have those kind of issues, but it's only those that are
566.
by phh 6y ago
That's objectively wrong. Less than 1% of apps require verified boot/safetynet/hardware attestation. I'm running my own Android ROM without cheating Safetynet and I still have access to everything I use using their origi
567.
by phh 6y ago
The offers of GrapheneOS and /e/ are very different. /e/ targets to be a usable alternative to a google-owned software, which includes for instance cloud storage and backup, access to third party proprietary apps, etc. W
568.
by phh 6y ago
That's amongst the reason I do my AOSP GSI ( https://github.com/phhusson/treble_experimentations/releases... ; Generic System Image, an Android that works on pretty much all recent Android phones). Xiaomi dev
569.
by phh 6y ago
A few years ago, I would have agreed. However nowadays I can't even list the SVoD offerings in my country, and last time I searched (or was Stargate SG1), I couldn't find any offering. (One SVoD has it... Only seasons 8 and 9).
570.
by phh 6y ago
> Can someone knowledgeable explain to me how a tracker source code violates DMCA? > What's next, hard disk manufacturers? Internet providers? Hard drives are already taxed in France because of piracy (well not exactly, but that&

More ›