fsflover's comments

On: First public macOS kernel memory corruption exploit on Apple M5

[fsflover]

It's probably impossible to achieve security through correctness, but security through compartmentalization can work. See: https://qubes-os.org.

On: Dutch suicide prevention website shares data with tech companies without consent

[fsflover]

Sell it to insurance companies, employers? Use it to target ads of snake oil to vulnerable people?

[simonw → fsflover]

Sell what to insurance companies?

All they have is that there was a hit from an IP at a specific date and time. Any cookies they set will let them tell that the same browser came back an hour later - but won't let them join traffic together across multiple sites.

[fsflover → simonw]

IP can be correlated with other data to infer the identity. Google ads are everywhere, so Google probably knows, who you are and your IP.

On: Dutch suicide prevention website shares data with tech companies without consent

[fsflover]

Nothing deeper is required. This is already outrageous. You can hardly make it worse.

On: Google says criminal hackers used AI to find a major software flaw

[fsflover]

My phone has a hardware kill switch for that.

On: A Caddy Cert Expired Because Systemd-Resolved Was Selectively Broken

[fsflover]

A lot of knowledgeable people hate systemd, and I start suspecting that they have good reasons for that. However, it's extremely hard to get a good list of related substantiated facts about systemd in order to convince a larger community. If you encounter something specific, please write some kind of article about it.

[eqvinox → fsflover]

You're right in that I should really be able to back my position up better. I don't know if/when a situation where I have to deal with the systemd network components will come up though :/

[justsomehnguy → fsflover]

> in order to convince a larger community

Even if you would get such a list it would be dismissed anyway, because 'works on my machine'. Eg: see a sibling response to the OP.

On: Show HN: TikTok but for scientific papers

[fsflover]

> ² Outside of a few truly ideological non-profits.

So the question stays the same: why is this not just a Mastodon server?

[latexr → fsflover]

It’s an app promoted as the “TikTok for…”, heavily LLM centric, and the author’s personal website says in huge letters “WELCOME IN MY WORLD CRYPTO ART”.

What about that makes you think this is a “truly ideological non-profit”?

[ciwrl → latexr]

I cannot tolerate comments like this one. I’m aware of what was the NFT shit stuff, if you check my art stuff you can find that are just wallpapers made with processing without any profit but made just because I like art in every form. Second, I actually do not have any profit idea, maybe in the future some tinder style card banner for ads, obv not now that I have just a POC.

On: Hardware Attestation as Monopoly Enabler

[fsflover]

> Show me an industry that ships source code, and manuals with all software that runs on the device, along with hardware manuals and the manuals to write your own drivers and doesn't use hardware primitives to enforce their business models over you, then we can talk

Here you go: https://puri.sm/products/librem-5

(And indeed, their Pureboot with Heads and a hardware key allow to restrict which OS can be booted on laptops, while not restricting the user.)

On: Traces Of Humanity

[fsflover]

How so? Qubes OS is the best operating system you can have today to reclaim the control over your computer.

On: Killed by Apple

[fsflover]

Nevertheless, when Apple decides to kill "your" hardware, you will have no recourse. You are forbidden to manage and update it yourself.

On: Killed by Apple

[fsflover]

Not supporting old hardware is fine. Forbidding users from updating their hardware themselves is killing it though.