• 26 Posts
  • 378 Comments
Joined 2 years ago
cake
Cake day: November 5th, 2023

help-circle
  • /e/ has Murena Services, which is a completely different can of worms

    Its basically the replacement to Google Photos, drive, etc, and it advertises itself as private, yet it has no privacy benefits over google. The data is still stored unencrypted on a server with your email/number and name on it, and it can just be sold or given out or hacked at any time. Its google with a different name

    Also, MicroG theoretically works, but its more like wine or a windows 11 TPM back than a replacement. It spoofs everything, which just means that besides the phone being insecure since there’s no way you can verify if someone tampered with it, because it just spoofs the values anyway, it can also be disabled by google at any time by an update which makes the values unspoofable.

    If you ever wondered why enterprises don’t just use win 11 with no TPM, its because Microsoft (like google) can at any time decide to say fuck you and brick all your systems, since they don’t officially support it anyway


  • Banks cant trust every client device to be secure and not compromise their infra, therefore they are using a certificate from a software authority to make sure their apps only run on secure devices. Currently, this authority is Google.

    But since everything is using google as their authority, google can at any time decide if they want to exclude any devices/manufacturers/whatever from running most banking apps.

    For example, they are excluding everything that is not shipping their G services Spyware. (And to ship the G services, you need a license, so you can’t have most banking apps without paying google)

    Now, volla, a maker of a Linux Phone is trying to make a new attestation API. This in no way mitigates any problem I mentioned in the paragraphs above. In that case, Volla is the Authority, and they can at any time exclude anyone for any reason.

    There is already an adequate Attestation system that mitigates every issue I mentioned built into android. Since the system is present at any time, this will not only reduce the attack vector on a system, but allow any app to add any authority they want.

    Every company will at some time become corrupt. This happened with google, this will happen with volla, every company will at some time become corrupt. Therefore, every software must be designed in a way that the company behind it dosent have total control over it.

    If the original Lemmy.ml defederates, it will not kill every other instance. If volla/google decides to exclude a specific phone model/OS from running it, be it for purely ideological reasons, no one will have any access to it. There are no alternatives in a system with volla attestation.

    If the app uses the android attestation api on the other hand, you simply add the OSs authority key. No rewrite required.



  • Email.

    As someone who has been self hosting some stuff and generally aspires to work in IT, it is simply unfeasible to expect services like this for free

    Would it cost me less to host such a server divided by x users? Yes

    Do I have x users I can sustainably service without burning out? No.

    So its either a managed server for like 15€ per month + a bunch of work or a paid email provider, in my case fastmail.










  • Luffy@lemmy.mltoTechnology@lemmy.worldIs the Memory Shortage Intentional?
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    12
    ·
    edit-2
    20 days ago

    The goal is to desensitize the general population into accepting thin clients

    Shame on you, because Im in the thin client Hype for 2 years now

    My backup PC and media center both run on 2015 thin Clients running Debian, they are really cheap, dont have any moving parts, draw 15w at most, and are Really space efficient



  • As someone who had a phase where my day consisted of saying snarky stuff to stupid people on a forum known for stupid people, its about your self worth being so bad that you start seeing others as subhuman for not knowing such a basic thing

    At the time, I was not sure if I would pass high school, and since I needed the degree for the thing I want to study (system integration), I was pretty much suicidal, although only passively/only wanting to jump off of a bridge, not doing it

    And since my self worth was already zero, I saw others who knew even less as the unsaveable bottom of humanity



  • Goddamn what Kind of lobotomy did you get? Full service?

    Aside from your apparent phobia to make your text readable via punctuations, here’s the main points I found.

    1. The deep state is not a thing. You don’t need one if the US exists
    2. User data is not worth the millions openai is shoveling towards datacenters. Even google and others live off of enterprise and subscriptions
    3. Where are you even getting these numbers from? OpenAI publishes their quarterly earnings, and that has clearly shown that they are losing money and rely on investor bailouts