

RIP. Maxis, Westwood, and now this.


RIP. Maxis, Westwood, and now this.


Won’t work.
They’ll call in experts from the FBI, forensics firms, etc. Show the court other graphene OS models, show what happens when the duress code is entered and ask the agents whether it matched what happened. Demand his lawyers provide an alternative explanation (there are no other plausible ones). Search github and try to find similar reports of the Graphene phones “just doing that” as in wiping themselves or displaying a screen like that. There won’t be any. Reasonable conclusion that’s good enough for a conviction will be that he gave them the duress code.
He’ll either go down or walk on other factors such as the legality of the search, whether the fact he didn’t personally enter it counts (I really doubt that holds water, it’s like encouraging cops to activate a booby trap that burns down your house, the courts take a dim view of it and it’s still destruction of evidence), or some other vague technicality.
Also cops are allowed to lie to you and do it regularly as a matter of practice so the police lying to him about what the search was for is not illegal. It was a tactical, calculated lie designed to outrage the subject and get him to cooperate to prove he wasn’t a pedophile.
And the word of authorities is considered to have more weight than the word of your average person so their word it happened like this vs his that it didn’t and no other plausible explanations with evidence for his version of events and they’ll find against him.
The best thing to do is not cross international borders with sensitive info on your device. The second best thing failing that is to use a securely encrypted device like Graphene that they can’t crack and while passing through customs to put it in before first unlock mode such as restarting it.
What Graphene should have is a setting that wipes the phone automatically after so much time without an unlock. They’d have seized his phone, wouldn’t be able to crack it. Would set it aside hoping for a future vulnerability to be discovered by those zionist fascists they employ and the phone while in storage and through no direct action of his would wipe itself before they could deploy such a future vulnerability 6-12+ months down the line. Now maybe they already have a way to affect the clock on the device to prevent such a thing but it’s the only alternative I can think of to hoping the encryption stands up and there are no vulnerabilities found for years or ever.


I just want a real security solution for Linux that’s privacy respecting and not the NSA in a trenchcoat (aka M$) but that’s too much to ask. The offerings for advanced security on Windows are better than those on Linux for desktop use (we’re not talking server) and it’s not even close. Secure enough for most people is nice. But it’s not enough for the paranoid like me and I desperately want it to be.
Defender has a very good thing in its configurable hard mode that simply blocks new executables that have never been seen before by M$'s cloud data. That stops pretty hard and fast a lot of new in the wild malware including campaigns by sophisticated actors. Combine with good management of LOLbins and a lockdown on those and you have a pretty hardened machine. The issue is it isn’t private because it’s sending M$ a complete list of hashes of every file on your machine which they pass to the NSA I’m sure. That and Windows itself being NSA-malware you know.
I’m not talking definition detections or clamAV (which is shit and has long had the lowest scores in comparative testing, it’s for use on email servers to prevent known old malware from being passed around or stored on a file share, that’s it, it’s not end-point security, it won’t even try to stop the most amateur hacker out there to say nothing of nation-state actors).
I’m talking real endpoint security that consumers can access without slapping down $400 a year for a corporate security license from Palantir (NSA in a trenchcoat warning) for 8 machines when only half that is needed.
I’m talking access controls, comprehensive exploit prevention, attack chain interruption and mitigation, scripting control, prompt to allow execution warnings, IPS/IDS in a software package for the desktop.
“Just do this deranged thing where you totally lock your Linux machine down and break tons of things you need and then spend dozens of hours every 3 months fixing it because an update badly broke your whole OS again” yeah no thanks I have a life and troubleshooting my own machine due to trouble I made isn’t part of it. On Windows machines I can click and deploy after a short audit period software that does all I outlined, it’s easy, it works, it comes with default allowlists of essential OS executables and libraries so it doesn’t break the OS itself and the most trouble I have is needing to occasionally click a prompt to allow or block something which takes all of a few seconds, maybe a few minutes if I need to look up what’s going on. And I can find free, pay once, and cheap annual subscriptions for under $200 annual from multiple providers for at least parts if not the whole thing. It’s frustrating!
Due to advances in AI driven exploit finding the cost for zero-days is due to plummet and the access to such abilities with some money has come within the reach of even small criminal/hacker groups. So saying zero days are expensive and unlikely is a variant of the obscurity argument and not valid to rebut the points nor increasing relevant with AI driven exploit fears which may allow mass campaigns with brand new zero days for cheap.
And you can hmm and haw about security through obscurity but that doesn’t really help your argument or my situation and we both know it.
-Signed someone who likes Linux and desperately wants the same security options and capabilities as a properly configured Windows machine running properly configured security software (you can’t do it on Linux if it doesn’t exist and that’s a market size problem to some degree). I fucking hate Windows and I hate Micro$lop even more but I’m not going to bury my head in the sand and pretend this isn’t a real problem.
P.S. Please prove me wrong. Point me to software that does most of what I asked, isn’t $60 per machine annual (or a minimum purchase of $300 of licenses due to requiring at least 10 machines), meets the usability requirements of being relatively easy to run and maintain (security that’s relatively easy is security that holds up over time, security that’s hard gets turned off, turned down, ignored, or deferred for ease of use). I desperately want this and I will retract my statements and sing your praises. (No Bitdefender for Linux doesn’t count, they’re an NSA/eyes vacuum and really not a hard-configurator, access control/IPS centered solution anyways. Anything that sends files or file hashes to remote servers whose developers are based in eyes countries is an NSA/eyes vacuum that feeds them data on you.)
P.P.S. I already have network edge defenses and firewalls/IPS/IDS set-up but that’s not really enough by a long-shot as I’m not talking about the low-hanging fruit of known cryptolocker campaigns or known cobaltstrike beaconing but the real big fish bad threat actors who pull out something never before seen and pair it with at least one 0-day exploit.
This is another way they’ll lock out Linux as an OS. It won’t pass passkey attestation or age check attestation so it just won’t be allowed to access the web because clearly you’re a bot or some other bad actor for failing those.
That or they’ll create a special government backdoored and approved Linux that has attestation in among a bunch of other blackbox modules that you have to trust aren’t an NSAKEY right into your system.
The future looks so bleak with all this online, Flock, Axon, etc cameras IRL controlling all movement and all fed into Palantir for one online and offline profile of you for the police state.


Let’s be clear that not just any state actor can do this. We’re talking about the US, UK, rest of the eyes alliance. Snowden revealed they are the threat who operates like this and we shouldn’t forget it.
India can’t likely do this, China, Russia, Brazil, South Africa cannot do it.
I even ensured I refused survey data on my Windows machine but that it ran on my Linux machine to help game the numbers as I’m sure other Linux users do.
I’m convinced Microsoft would have to mandate sticking a probe up your ass when creating a user account/setting up a computer before significant switching among average users would take place and even then a huge 50% of the population would say it’s not that big a deal and switching is a larger hassle and they have no choice, blah, blah.
Linux is kind of still stuck in the doldrums of tech and privacy enthusiasts and a few of their friends and I’m just not sure what if anything can change that in terms of individual actions and markets. Now sure if China or the EU made it harder to sell Windows computers and really pushed people onto a version of Linux that could bump the numbers but in both cases they’re just trying to gain some sovereignty by putting government systems on Linux and that transition alone will probably run for a good part of a decade.


There are several issues here.
The lemmy instance thing is because people don’t like being spammed by onlyfans ads, torrents of AI generated porn spam, deluges of random penises men are happy to post assuming lots of people want to see it, and in some cases operators have ethical objections to porn production itself, or don’t want to deal with the possibility of rehosting and being responsible for content containing minors being hosted on their services and the legal headaches that entails.
The last one about legal problems has arisen due to increased awareness yes but also increased pressure. The amount of hosting companies out there who look the other way for violations are fewer and fewer by year out of their own fears from payment companies, technical partners, etc. Even accidentally hosting that stuff besides the risk of getting you raided by cops at 2am and having your whole life gone through (while automatic weapons are being pointed at your face) could lead to your hosting being terminated and having to pay more and more each time that happens as you move up from the cheapest hosts to the ones left. It’s also a hassle to move.
Censoring tarot cards, swear words in memes and on TV that’s an example of corporate prudishness. That’s an example of fear of upsetting advertisers, of people self-censoring to go viral, to avoid Zuckerbook removing their post and actioning their account because Zuckerbook has this weird notion of being family friendly and appealing to advertisers. So much of that lays at the feet of advertisers and Christian pressure groups who exist to beat the drums of fear of losing advertisers and pressuring those same advertisers to pressure the tech companies.
It’s about risk compliance for those tech companies as well. Your bank would rather close all your accounts and refuse to do business with you ever again if you have less than several million dollars with them if you bring too many automated red flags. They won’t care you have half a million with them, they won’t care you protest your innocence, even the chance the system is right in flagging you a risk and getting hit by authorities leads them to a behavior similar to self-censoring where they self-police overly aggressively out of fear because you’re just not worth the trouble and risk.
In the same way these companies don’t care about artistic expression, they don’t care about freedom of speech, they care about maximizing profits and that means minimizing compliance risks, minimizing risks of being legally actioned because there’s even a chance what you shared could turn out to lead to legal liability, and minimizing risks of upsetting overly sensitive prudish customers and advertisers.
So at it’s core its driven by a capitalist drive to avoid government scrutiny, fines, interventions, and by that same desire to offend the least amount of people and not upset advertisers by placing their ad for a new burger next to erotica art or bared human body parts or naughty words.
This is silly. You’re approaching this with wrong-headed thinking. Just use makemkv.
What you will have if you used hacked firmware to bypass physical anti-copying methods present on BluRay discs to actually get a bit for bit copy of your disc is a useless blob of encrypted data that you have no way of verifying for accuracy (that it was copied correct or that the disc itself didn’t have subtle physical damage which gave you something damaged because you can’t play it to verify) and which you have no way of using. You’ll have no way of ripping it or turning it into usable data in future if your disc does go bad because no one else uses this method so there’s no software that will allow you to turn this encrypted blob easily back into a playable movie and to burn it to a new BluRay writable disc would break laws anyway because you’re engaging in duplication and secondly all BluRay authoring (burning) programs are built around building and burning unencrypted video files to a disc not around burning an encrypted blob to a disc (often specific sectors containing specific data must be written to specific parts of the disc to make it playable, something no public program will help you with when trying to bit for bit copy in reverse and which blindly bit for bit copying at low level isn’t likely to achieve).
Everyone else breaks the encryption and dumps a copy of the disc including the AACS keys and certs to prove ownership and you should do the same rather than thinking you’re particularly special or vulnerable. If you’re that much an enemy of the state or media companies they’ll do you just as much for having the encrypted copies and state you had INTENT to break it (and indeed defeated DRM mechanisms on the drive firmware itself first which may be a violation of law in order to get that copy) if they’re trying to make an example out of you because you’ve pissed them off.
In practice no media company is likely to go after someone breaking the encryption while retaining the discs and keeping the copies only for themselves. There’s simply no incentive to harassing paying customers in that way if you’re not uploading the contents or hosting a for-profit Plex or Jellyfin server of the contents or burning bootleg copies of the films. You’d have to go around publicly bragging in your own name about breaking the encryption and pretty much dare them to get you for them to know or care enough to do anything about it short of you otherwise breaking the law as I outlined above.


Not surprising but unfortunate. As to the new model probably they’re waiting for upgraded Siri AI to include that as a selling feature as a kind of home assistant hub seems to be the consensus. Really only reason to wait has been a newer chip that can support on-device AI upscaling of older video content. At this point they may not release it until late 2027 or even 28. Really hard to say as Apple isn’t rushing into the AI stuff the way Google is and seem to be pacing themselves or struggling with it depending on how you see it.
That is quite an ouch bump too. The 128GB model with ethernet used to be only $150 and the cheaper wifi only one was $120. Still a decent chance some retailer puts them on sale as the old prices used to drop by up to $30 each a few times a year.
As to the Shield. Last I saw IF you can even find the Shield pro was that they were going for $250 or so each. NVIDIA may not have updated MSRP but that’s probably because they forgot it exists. I know for a fact that things like Ugoos and Homatics have bumped their prices up to mostly over $200 lately thanks to the AI nonsense so the future really is over $200 for a device like this new and if this continues it could be $300 by spring/summer next year.


Apple TV4k. No ads on Home Screen, prompts for permissions like location data use by apps, etc.
Anything else I could recommend would cost at least as much or more and either require ADB commands/rooting process and installing alternative launchers OR lack the ability to use commercial streaming apps.
Price new is significantly lower than the Shield pro.
So far due to old stock prices haven’t gone up but once they release a new model due to AI RAM crisis I expect an increase of $30-$50 at least probably including the used market. It’s not cheap but it’s cheaper than most of the “nice” Android running devices.
Pair with a pi-hole or firewall with DNS blocking capabilities and you can do a lot more to block tracking by the apps themselves though obviously only so much without breaking them.


Maybe they should have done proper investigations aimed at penetrating the network instead of just seizing devices and thinking they can pop them into their zionist entity hacking devices and get their case delivered on a silver platter?
The old way would be build a case against someone in this network then flip them into an asset with threats of heavy jail time for their involvement in it and other crimes and get them to assist in penetrating it in exchange for sentencing leniency or even going free.
They still happily take the time to do this and secure informants when infiltrating leftist groups but criminals are not worth the hassle I guess.


Enjoy not being able to use your bank, major websites, email, online shopping, pay utility bills, do basic and required civic functions online (that require alternatives of driving long distances and/or waiting on the phone for long periods of time), etc because your open source operating system doesn’t pass the attestation check.
Maybe not long after Google, Cloudflare and others will just block you behind anti-bot defenses because you don’t pass such a check and only bots would not pass such a check.
Hiding on Linux is not a solution to a legal problem. It’s at best punting.
This stuff is either defeated or you’ll enjoy living as a hermit cut off from society with your perfectly private, perfectly offline computer.


Same. And LO cannot do everything MS office does.
It can do major things and Writer is probably 98% there (Calc much lower) but as an example of an obscure feature: Word can do nested tables and last I checked LO cannot. As a major feature Calc cannot do proper tables with headers and sorting and the opinion of the devs is to just use a database which for large sets is fair enough but I semi-often work with smaller sets where it doesn’t make sense and I just need a quick CSV sort. I have also tried to convince not so computer literate people to switch to LO and some of them have missed the proper tables support and telling them to learn to use databases isn’t an acceptable solution as many of these people are older and their needs are things like finances or lists of their collections of stuff.
Word’s styling options are also just leagues ahead if you’re preparing documents for the office it’s just easier to get better looking results. Same with Powerpoint.


Well could be these companies are buying on fascism because they’re either run by fascists or being shaken down by fascists or their friends are fascists encouraging them to do this and they uncritically do so for some vague or not so vague promises. So it’s more a signal of obedience and doubling down on the move to open, naked reaction and taking over open source with fascism.
That or its an intelligence op and the fascism is a bonus but the guy behind it is just pliable or a useful tool and there are larger plans to use this as a vehicle for influence to control open source, insert back-doors, push CIA coder guys into the right positions, steer in anti-China stuff to carve up the world of open source into strictly divided western and non-western code, remove openness and cooperation and militarize the space for American use.
Either way not good as functionally this is a big money pot being created and centralized under reactionary control to bully open source into adopting reactionary politics and other not good things. Could be Linux is seen as increasingly a threat with the open spying on Microsoft driving enough of the public to Linux that corporations, governments, etc feel a need now to seize control of it.


BIOS boot passwords were from another era with different needs and assumptions. In controlled access environments they can still have an impact if you have a proper chassis that has locks on it preventing removal of drives. Most normal people don’t possess such business class chassis. The scenario was a business environment with security teams, other employees, supervisors and locks that while you could cut them with heavy equipment you’d be noticed doing so. In terms of preventing a team of thieves breaking in with power tools and stealing things true it never was meant to prevent that. It’s more authorization and access control within an organization. The idea being perhaps the CEO’s machine or a special machine for accessing sensitive devices would be physically locked and have such a password installed as another layer of security that couldn’t be bypassed surreptitiously.
Additionally back in the day these BIOS boot passwords were paired with chassis intrusion alarms which went off every subsequent boot if the chassis was opened thanks to a sensor and the only way to clear that alarm was logging into the BIOS with an admin password.
Your gaming computer BIOS supports neither of these nor does your gaming motherboard have a chassis intrusion connector nor does your gaming case come with support for such a device.
But it was never about preventing data destruction even in these cases. It was more preventing access and making any such access more time consuming and likely to trip alarms to allow a response including evaluation of compromise by professionals.
If you want to protect your data make backups. If you want it well protected against determined parties who want to destroy all copies and/or thieves then locate a copy off-premises. If you can’t do that at least locate a copy within a bolted down safe.
No. Western governments for decades have been running automated keyword systems on all calls listening for phrases like “bomb” and flagging all such calls. Get flagged enough and a human reviews it.
This is done with full cooperation of the big telephone companies and has gone beyond intelligence use to “lawful access” requests from the police. The Snowden revelations were not that this was being done (I mean it’s mentioned in Enemy of the State so it was an open ‘secret’ by 1998) but rather that the NSA was doing this for all internet traffic, for all emails, for webcam sessions, that they were storing things that were not even flagged in a vast database of innocent people who hit no keywords and thus had no reason to be under suspicion. That was the big outrage, that and the hacking and national security letters to big companies and the fact it was all searchable by humans like Snowden (and now with AI can all be analyzed in detail unfortunately to create detailed records on every single living person).
Linux works with 4k. Jellyfin, Plex, Kodi, etc can all stream 4k streams to Linux assuming you’re using your own content and not content from commercial services that impose DRM.
HDR and Dolby Vision are another matter because even on Windows those are recent and limited implementations.
Linux hasn’t implemented proper Dolby Vision and HDR can be finicky but does mostly work on wayland. This is down to it being a lot of work, closed source and DRM and licensing problems from Nvidia, HDMI forum, etc that make it hard and very slow going. To be fair Dolby Vision doesn’t really work on Windows either for streaming your own videos purposes. I think LG has an application that can sort of make it work with certain models of theirs but I believe it’s mainly for gaming.
Media company DRM refuses to allow it. They fear the pirates (who bypass their DRM regardless using hacked android streaming devices) will use it to pirate their stuff more easily.
Even on Windows which has a locked down DRM pipeline you have to use Google Chrome or Microslop Edge with widevine for this and a few services STILL refuse to let you watch above 1080p on anything but a streaming box/stick or mobile OS because of their incredible fear of pirates and incredible hatred of general computing devices and user freedom.
Do you need works out of the box without a ton of work on your part but the privacy isn’t totally perfect? Then Apple TV 4k.
Do you use no major commercial streaming services and only your own hosted content from Plex/Jellyfin and you want to do some very light cloud gaming from the couch/bed? Then an Intel N150 mini PC or AMD equivalent (at present with RAM prices expect to pay at least $400 though if you want you can probably get a used SFF PC made recently (important for energy saving hardware decoding of video codecs) may work for you with either Jellyfin client or Kodi.
Caveat: HDR on Linux isn’t happening anytime soon and forget Dolby Vision. Also forget above 720p, maybe 1080p in Google Chrome for online streaming services.
Vero V by the OSMC people is also an option but won’t work with commercial streaming services though it is more private but you have to use your own content. It’s more plug and play than the mini-pc route and does support HDR and such. But unlike mini-pcs you can’t even open a browser to jankily watch commercial streaming services using it.
I have a hard time believing this wasn’t intentional at the orders of the famously anti-encryption, anti-privacy Indian government under Modi. It would also have allowed their spy agencies to carry out certain activities with plausible deniability with global reach.
I just don’t believe incompetence in this case. It’s so incompetent it’s like it was intentionally engineered to look that way rather than something malicious.
I’ll not be allowing this company’s certs into anything I run ever again.