There’s hardware required to shunt the display out the USB port and since it’s not a super in demand feature they usually don’t implement it. As such the software for looking nice while doing it isn’t as developed.
But yes, it’s been in developer settings for years, and was usable if your hardware supported it.
Yes. And now it’s native in all android! Samsung helped make it!
It’s good when things get better.
The official story is that it’s mobile general surveillance to deter crime.
They’re very open that it’s a surveillance system that watches everyone and records everything.
They’re a little less open about how open they are with police or exactly how much they can correlate everything with other data. Most people don’t have an intuitive feel for how easy it is to piece together a lot about their lives from some small measurements when tied to everyone else’s, so they just stop at being annoyed by the lights and sometimes fucking commercials.
There’s no precedent at all. Precedent implies that it happened, which it didn’t.
Something being thought of and dismissed is just not evidence for that thing being done.
It’s not like it was even that original of an idea. There had been two plane hijackings by cubans in the past year. Proposing “what if a third went wrong” is hardly a masterclasses in outside the box thinking.
We’ve done other false flag operations. Other terrible things to domestic civilians.
Using that time we didn’t actually do anything as an example is just odd.
Personally, I think people like it just because it has a cooler name. “Mongoose” just doesn’t have the same ring.
And? What happened next? Did they do an operation Northwoods? Did we go to war with Cuba? Was Johnson more aggressive on Cuba than Kennedy, or was he actually more engaged on diplomatic fronts?
I’m not forgetting anything. It just doesn’t fit with any narrative that makes a lick of goddamned sense. Like, Kennedy rejected Northwoods because he was worried the troops might be needed in Europe, so starting a war in Cuba would be a bad move.
He was strongly in favor of every other operation they proposed as part of the larger plan.
Why would a massive conspiracy exist to kill Kennedy for rejecting a plan and then… Not do the plan?
I agree, and feel similarly about the inclusion of operation Northwoods.
It’s most prominently a horrifying plan that was rejected and remained classified, with the proposer being replaced shortly afterwards (it’s entirely possible that’s a coincidence).
Someone thinking of something horrible and then not doing it isn’t evidence that they would do something similar. There’s no particular reason to think they hid evidence because they admitted in the same deeply classified documents to doing far worse things.
Nah, it’s cool. We’re clearly talking at cross purposes. Have a good one.
It was bought by Microsoft after becoming established. Most free software projects don’t care enough to move if they don’t self host.
And I’m just letting you know that link bombing isn’t, and it’s actually a discussion if you explain your point rather than dropping someone else’s novel.
If for no other reason than because you don’t have to dig for what part of what was posted is related to what they were saying, and you can much faster say “ah, you’re talking about something totally different than I am”.
Just so you know, from looking at the wall of text you pasted by proxy: those are arguments against the notion that a tpm can make the device itself secure, not that it is untrustworthy for the notion of signing and storing encrypted data.
Next time, make your point and provide references (or not), rather than just link bombing.
I’m not seeing anything that’s not a great look about requiring strong authentication for access to sensitive portions of a users account. What you’re saying is akin to calling it a bad look that they force users to use complex passwords against user wishes.
I’m not sure what “trust me bro, my cloud is safe” has to do with anything. Passkeys live on your device. There are ways of facilitating device to device migrations of the keys if you want. You don’t need to use them to use passkeys. And at least on Android you don’t need to even use Google to manage the keys.
Most semiconductors are closed source. The processor, ram, and radio are also more than likely closed. The software interfaces to all of them have open specification and implementation. There’s like, six for Linux. Microsoft open sourced theirs.
Tpms are not security through obscurity. They are obscure, but that’s not a critical component to their security model.
What they do isn’t really what “collecting biometrics” implies. They’re storing key points in a hashed fashion that allows similarities to be compared. Even if it wasn’t encrypted in a non-exportable way you still can’t do anything with it beyond checking for a similarity score.
You’ve done a good job explaining what I said previously: there’s sometimes a disjoint between privacy and security concern, and so sometimes people don’t understand something about security.
That’s close enough for a privacy perspective. There’s also limitations on domains that can request the auth, specifically ”only the one the credential is for", and there’s a different key per domain and user typically.
It’s also implemented in a way where if the user doesn’t choose to disclose their account to the service, the service can’t know.
Caring about privacy and caring about the details of a security protocol are distinct. You’d be surprised how many people who care about privacy are deeply wary of passkeys because of the biometric factor, which is unfortunate because the way it authenticates is a lot harder to track across domains by design.
I understood they had a lot of concerns, one of which was biometrics via passkeys since GitHub was a very early adopter due to the supply chain risk they pose.
I know how device fingerprinting works, thank you though.
You don’t need my fingerprint, hardware or personal, or biometric shit.
To me that sounds like hardware identifiers, but also quite specifically the things passkeys use. Hence I mentioned it as aside from their main point, which was “don’t track me”, because the biometrics GitHub or any website is going to ask you to use can’t be used for that.
Tangential to the main point you’re going for: when you say fingerprint or biometrics I think you’re referring to passkeys.
Passkeys don’t share any of your fingerprint or other biometric identifiers with anyone.
https://www.eff.org/deeplinks/2023/10/passkeys-and-privacy
One of the major design criteria of their creation was to be an increase in security without sacrificing privacy. It’s made them more finicky to get working but there’s a very good reason they’re very popular with security professionals.
Yeah, the conventional ones still draw a good chunk of power, and they’re not clean but they’re not dirty. Same as how a grocery store isn’t good for the environment but you’re not looking at them first for places to clean.
They tend to be boring, and are usually not a public thing but just something owned by a company to house their computers. The only reason I know about the ones near me is I used to work at one and people would move jobs to or from other ones. (As an aside, a datacenter is a great place to nap if you like white noise).
For a sense of scale:
This is the site of an open AI data center. The yellow square is about 1 square mile and mostly encompasses the area they plan to/have filled.
That angle shows more build out.
This photo has two normal data centers in it. The yellow square is also about 1 square mile. I’ve highlighted the data centers in red. One is to the left of the square near the middle, and the other is down from the right side near the big piles of what looks like rocks. (Spoilers: it’s rocks. They make asphalt). The sprawling complex in the upper right is a refrigerated grocery store distribution complex. The middle on the other side of the block from the asphalt is a coal power plant.
Of the things in this picture, I’m most upset about the giant freeway interchange. Coal is shit, but it’s a modern plant so it’s not belching soot, just co2, and the utility is phasing it out anyway. The grocery traffic is mostly dead except between the hours of midnight and 7am when they do restocks.
I can hear the freeway if I go outside.
I think the part you’re missing is that 1) it’s my community too 2) they’re not talking about AI data centers, or new data centers or anything like that, they’re petitioning to ban all data centers, and 3) we have multiple data centers in the city already that no one complained about until AI data centers became a thing people felt concerned about.
There’s a major difference between the 2 square mile hyper scale AI data center that requires a nuclear reactor and a full water treatment plant to cool and the 2 acre data center that’s air cooled and has no more ground pollution than any other parking lot and essentially a warehouse.
The state government has two in the city, at least, for processing electronic tax records, applications and hosting service sites. We have a few national insurance companies that need to process all the things they process. A research university, and a web hosting company round out the list of ones I know about.
This is my entire point about why sometimes it’s really necessary to point out that what someone is referring to is only a small part of what the words they’re using describe. The language being imprecise doesn’t matter until someone proposes a law outlawing chemicals, shuttering all data centers, or banning AI.
LLMs are problematic. My fancy rice maker isn’t.
I take your point. :)
It’s worth mentioning in my opinion though, because if someone were to say “we should ban chemicals” it’d be worthwhile to point out what that actually means.
I don’t actually think the broadness of the category is intentionally abused, it’s just that it’s an incredibly common thing to remove anything from the AI category that’s explicable.
I feel slightly more hanlons razor about it since there’s people in my city talking about and petitioning on the popular notion of banning all data centers from the state, and how it would be awful if s data center came here. I know what they mean, but it’s not what they’re trying to get the law to do, and our city already has six data centers I know of off the top of my head. The language drift is fine, but when it starts to conflate with policy it’s another issue.
https://blog.mozilla.org/en/mozilla/leadership/mozillas-next-chapter-anthony-enzor-demeo-new-ceo/
The root of the current discussion.
A conservative guess would be around 60 people.
https://bugzilla.mozilla.org/describecomponents.cgi
You can click around and see the bug reports they’re working on. There are a few, to say the least.
https://www.firefox.com/en-US/releases/
This is a way to see what’s in each release. The ones on the left are major releases and tend to have bigger features, and the others tend to be bug fixes.
Web browsers start with core functionality that’s very complex. Then you tack on that they’re being used for things like banking, and managing the critical details of people’s lives. That means security galore, which is hard and constant. Then you have ad people, who are also something that’s hard to defend against.
Then there’s the constant flood of new features you have to implement to keep up with Google.
Chrome has 1,000 to 4,000 people working on it. Mozzila employs about 700 to work on firefox, with maybe 1,000 additional open source developers.
My initial guess was very wrong.
That’s not bullying, that’s enforcing social mores.