summm

11 ms·

1.
by summm 8d ago
Regarding 2. they seem to refer to this: https://github.com/zenfyrdev/bootloader-unlock-wall-of-shame...
2.
Why I'm Not Excited About the Graphene OS and Motorola Partnership(podcast.switchedtolinux.com)
35 points by summm 8d ago|59 comments
3.
by summm 8d ago
Another more important angle: GrapheneOS creates an appliance, where the user has no freedoms, in that freedom aspect not better than stock Android: The users cannot realistically change any aspect of the OS. Sure, technically they could ed
4.
by summm 9d ago
Gnunet was and is incredibly advanced technology, solving many problems better than most p2p systems that came after, who never bothered to even look at those ideas, and implemented worse concepts from scratch (IPFS, veilid, libp2p...) Howe
5.
by summm 29d ago
Correction: GrapheneOS is concerned with their so called "Android security model" more than anything else, and where that security model gives guarantees to app developers and service providers that harms the user's security,
6.
by summm 1mo ago
Which was not the point. Each one of these changes made it harder, not yet impossible to make a custom Android or Linux variant. The harder it is the more likely people will continue. At some point it might be too hard. Or, one of these cha
7.
by summm 1mo ago
Here, the Pixel 10, especially in more niche variants like Pro and with larger flash has almost disappeared from the market, or is as expensive as the equivalent Pixel 11 offers.
8.
by summm 1mo ago
With direction Google has chosen to go with the Pixel 10, it might as well be that GrapheneOS will never be available on the Pixel 11. They started by not publishing device trees anymore, squashing commits in AOSP, publishing open source dr
9.
Walrus: An Efficient Decentralized Storage Network(arxiv.org)
11 points by summm 1mo ago|0 comments
10.
GNUnet 0.28.0 Released(gnunet.org)
2 points by summm 2mo ago|0 comments
11.
Curb impacts of AI on programming to maintain EU sovereignty(draketo.de)
1 points by summm 2mo ago|0 comments
12.
by summm 3mo ago
Can you recommend some?
13.
by summm 3mo ago
I think Meneth was basically correct but a bit imprecise: Boot integrity itself is only user respectful as long as the user can freely decide and change the integrity reference values, without consequences to the latter usefulness of their
14.
by summm 3mo ago
So now you have the choice between two approved ROMs. Not a lot of improvement? And as soon as GrapheneOS implements something beneficial to the users that the government does not like, the approval will be taken back. That's also why
15.
by summm 3mo ago
No, this would just require a publicly verifyable signature of the software, and the user would just choose to have their operating system verify it. No remote attestation or other hand-over-your-controls necessary.
16.
by summm 3mo ago
Nope. It is still not possible to give someone else (the government, or the bank) control over your phone while at the same time run software that you alone control with higher privileges. Please don't mix that up with "is practi
17.
by summm 3mo ago
My opinion: Any kind of attestation that is delivered to a non-user-controlled server about the state of a user's end device that the user (possibly using means outside of the end device) cannot change will be abused, e.g for anti-comp
18.
by summm 3mo ago
The GrapheneOS supporters are not on our sides, apparently. The seem to actually like remote attestation. They just don't like that they are not in on Play Integrity. But what is won if attestation includes official GrapheneOS releases
19.
Mozilla Added Google Play Integrity to Firefox for Android(bugzilla.mozilla.org)
18 points by summm 3mo ago|3 comments
20.
by summm 4mo ago
Depends. In some sense EU companies are quite afraid of the GDPR. Privacy is used in a twisted way in that argument: if any privacy relevant data is exposed to another party, and there is any incident down the line, they fear they could be
21.
by summm 4mo ago
They already add cryptographic authentication to some CAN messages, so you can't change them. It is only a matter of time until they add encryption. This is mostly a corporate problem of risk aversion in my opinion. Some department wr
22.
by summm 5mo ago
Only "open" in a twisted sense, and definitely not user-controlled: Remote attestation per definition means to accept only pre-approved operating systems. If anybody builds an implementation, regardless whether it is aosp-complian
23.
by summm 5mo ago
Their security model requires remote attestation. So, open, user-controlled platforms cannot be used. Of course some other future locked-down linux-based OS might be usable.
24.
by summm 5mo ago
Another "blog" that doesn't even offer an RSS or Atom feed...
25.
by summm 6mo ago
Yeah but many devices still do not support it, and if they support it, then badly, or they hide it. There is not even a USB-Bluetooth adapter that would enable LE Audio on Linux. (Besides the hacky ones that contain a full Bluetooth stack a
26.
by summm 6mo ago
In other news: "Unified Torment Nexus: open-source alternative to Google Torment Nexus" See also https://grapheneos.social/@GrapheneOS/116200110686604617
27.
by summm 7mo ago
Microwaves are a bad example. The cheaper ones are white labels basically all made in the same factory in China. The customer has no way to know if the slightly more expensive one is actually more durable or, much more likely, just the sam
28.
by summm 7mo ago
Motorola omitted a magnetometer in some of their models. This was especially heinous as the "compass needle" can be emulated to some degree by fusion if gps and rotation/acceleration sensors, so the user wouldn't immedia
29.
by summm 7mo ago
In fact Motorola did the opposite: they recently announced that in their opinion they found a loophole in the EU ecodesign regulation that they will exploit in order to not provide updates for some of their cheaper phone models. After that,
30.
by summm 7mo ago
Motorola, the one company that still tries to evade the EU ecodesign regulations? Other vendors just provide the required 5+ years of updates, but Motorola loudly and publicity announced that they saw a loophole in the wording and would us

More ›