EU to Impose Tariffs Up to 45% on Chinese Electric Vehicles
  • Andromxda Andromxda Now 100%

    they can subsidize EV manufacturing to the same degree

    Meaning that we would either have to increase tax rates or borrow more money? Wow, what a great solution.

    1
  • What's the most useful thing in the room you're in right now?
  • Andromxda Andromxda Now 100%

    Emulators exist... ...oh wait... FUCK NINTENDO

    I love their exclusive titles, but their hardware, and the way they deal with emulator developers make me want to throw up

    1
  • What's the most useful thing in the room you're in right now?
  • Andromxda Andromxda Now 100%

    Probably the walls. Without them, the ceiling would collapse and everything in the room would be useless.

    1
  • Who owns your shiny new Pixel 9 phone? You can’t say no to Google’s surveillance
  • Andromxda Andromxda Now 100%

    And we really have no idea how close of a relationship Google, or any other corp for that matter, has with various intelligence agencies

    Ok let's assume this is true, and US intelligence agencies have actually backdoored all US phone manufacturers. What about foreign phones? If this was true, someone the NSA is interested in could just defend themselves by e.g. buying a Chinese phone. All this effort, just to be defeated by foreign phone manufacturers? It wouldn't be worth it, which is why it's so highly unlikely.

    2
  • Who owns your shiny new Pixel 9 phone? You can’t say no to Google’s surveillance
  • Andromxda Andromxda Now 100%

    Just about all of your identifying data is stripped out by the framework before interacting with Google at all

    For all of them, we strip device identifier (MAC addresses, IMEI, etc)

    This is literally nothing special, as all user-installed apps are denied access to identifiers like the IMEI and MAC address since Android 10. Since GrapheneOS isolates Play services in the Android application sandbox, they don't have access to any of these identifiers either.

    I’m not too worried about memory exploits as I don’t really install apps

    That's not how memory corruption exploits work. These can occur anywhere in the system, and just need to be triggered by an attacker. This doesn't require you to install an app, receiving a rogue message might for example be enough to exploit a memory vulnerability in the SMS app. Visiting a rogue website, which loads malicious JavaScript can be enough to trigger a memory corruption vulnerability in the Chromium WebView. That's why GrapheneOS doesn't just use hardened_malloc, but it also disables the JavaScript JIT compiler in Vanadium by default, and offers a toggle in the settings to disallow JavaScript JIT compilation in all apps making use of the system WebView component.

    2
  • Who owns your shiny new Pixel 9 phone? You can’t say no to Google’s surveillance
  • Andromxda Andromxda Now 100%

    but why run it at all?

    Because it is unfortunately required by some apps. microG is not a viable alternative, as it requires root access on the device, which drastically reduces the security. It also has worse compatibility than Sandboxed Play services, and doesn't offer much of a benefit. It still downloads and executes proprietary Google blobs in the background in order to function. Apps that require Google services also include a proprietary Google library, making microG essentially useless. It's an open source layer that sits between a proprietary library and a proprietary network service, using proprietary binaries and requiring root access. You gain absolutely nothing from using it, and significantly increase the attack surface of your device.

    fully open source emulator

    This is simply false, as I explained, only a tiny bit of what microG requires to function is open source

    You're far better off using Sandboxed Play services on GrapheneOS

    2
  • Who owns your shiny new Pixel 9 phone? You can’t say no to Google’s surveillance
  • Andromxda Andromxda Now 100%

    Calyx doesn't actually support Google Play Services or Google Services Framework. It uses microG, a sometimes buggy workaround that requires root access and has pretty poor compatibility. GrapheneOS on the other hand uses the official Google Play binaries, but isolates them in the Android application sandbox, instead of installing them as system apps with special privileges (like it is the case on stock Android). You can read more about it at https://grapheneos.org/features#sandboxed-google-play

    2
  • Who owns your shiny new Pixel 9 phone? You can’t say no to Google’s surveillance
  • Andromxda Andromxda Now 100%

    How can it be a block? I thought graphene was like a one atom thick layer of graphite? If you want to make a block, you need to stack them, making graphite, not graphene.

    1
  • Who owns your shiny new Pixel 9 phone? You can’t say no to Google’s surveillance
  • Andromxda Andromxda Now 100%

    But it could be used for smaller scale surveillance, like targeted at specific individuals

    Why would this only be present in Pixels then? Google isn't interested in specific people. Intelligence agencies are. This would mean, that every phone in the world needs to be compromised using this sophisticated, stealthy technology, which is even more unlikely.

    4
  • What's going on today that you wish you could have a little help with?
  • Andromxda Andromxda Now 100%

    Not today, but recently at work, I, a DevOps engineer specializing in Linux and other Unix/Unix-like systems, was given the task of doing some admin and maintenance work on a few Windows servers...

    I FUCKING HATE WINDOWS

    THIS OS MAKES NO SENSE AND ADMINISTERING IT IS A NIGHTMARE

    FUCK MICROSOFT!

    2
  • Who owns your shiny new Pixel 9 phone? You can’t say no to Google’s surveillance
  • Andromxda Andromxda Now 100%

    I don't mean to discredit your opinion, but it is pure speculation and falls in the category of conspiracy theories. There are plenty of compelling arguments, why this is likely completely wrong:

    • Google Pixels have less than 1% of the global smartphone market share, in fact, they are currently only sold in 12 (the Pixel 9 is sold in 32 countries, my bad, I had an outdated number in mind) countries around the world. Do you really think that Google would spend all the money in research, custom manufacturing, software development and maintenance to extract this tiny bit of data from a relatively small number of users? I'd say more than 90% of Pixel owners use the Stock OS anyways, so it really doesn't matter. And Google has access to all the user data on around 70% of all the smartphones in the world through their rootkits (Google Play services and framework, which are installed as system apps and granted special privileges), which lets them collect far more data than they ever could from Pixel users.
    • Keeping this a secret would also immensely difficult and require even more resources, making this even less profitable. Employees leave the company all the time, after which they might just leak the story to the press, or the company could get hacked and internal records published on the internet. Since this would also require hardware modifications, it's also likely that it would get discovered when taking apart and analyzing the device. PCB schematics also get leaked all the time, including popular devices like several generations of iPhones and MacBooks.
    • Lastly, the image damage would be insane, if this ever got leaked to the public. No one would ever buy any Google devices, if it was proven that they actually contain hardware backdoors that are used to exfiltrate data.
    8
  • Decisions Decisions
  • Andromxda Andromxda Now 100%

    You clearly forgot Hannah Montana Linux and Moebuntu

    10
  • Who owns your shiny new Pixel 9 phone? You can’t say no to Google’s surveillance
  • Andromxda Andromxda Now 100%

    Yeah there's also a relevant post on the GrapheneOS forum where this was discussed in detail, but I can't find it anymore

    3
  • feddit.online will live on as a PieFed instance
  • Andromxda Andromxda Now 100%

    There's always room for improvement, and your free to submit a pull request.

    3
  • Who owns your shiny new Pixel 9 phone? You can’t say no to Google’s surveillance
  • Andromxda Andromxda Now 100%

    That's why I buy my phones used or refurbished. It's also cheaper and more environmentally friendly.

    3
  • https://hear-me.social/@Jerry/113240544262203511

    There used to be a Kbin instance called feddit.online, which was shut down. @Jerry@hear-me.social just announced on Mastodon, that he brought feddit.online back to life, this time using PieFed. PieFed is a pretty neat alternative to Lemmy and Kbin/Mbin, created by @rimu@piefed.social and of course it's fully free and open source on Codeberg: https://codeberg.org/rimu/pyfedi It has some cool features like “Topics”, which are basically groups of multiple communities that you can view all at once (similar to these Lemmy feature requests: https://github.com/LemmyNet/lemmy/issues/3071 https://github.com/LemmyNet/lemmy-ui/issues/1113).

    98
    31

    Just wanna try out and see if this actually appears in the "Mentions" tab of the notification section of my Mastodon account @Andromxda@hachyderm.io

    3
    5

    cross-posted from: https://lemm.ee/post/43035752

    106
    2

    cross-posted from: https://lemmy.dbzer0.com/post/28234230 > I'm looking into setting up Mastodon instance for myself on a very minimal cloud server. To save resources on that box, I'd like to run the web interface on my own server at home, and only have the Mastodon backend running on the VPS. Is it possible to completely get rid of the web interface and only access the instance through the API? What's the best way to achieve this? Does anyone have experience with this, or do you know any useful resources?

    32
    4

    I'm looking into setting up Mastodon instance for myself on a very minimal cloud server. To save resources on that box, I'd like to run the web interface on my own server at home, and only have the Mastodon backend running on the VPS. Is it possible to completely get rid of the web interface and only access the instance through the API? What's the best way to achieve this? Does anyone have experience with this, or do you know any useful resources?

    29
    5
    https://beacondb.net/

    cross-posted from: https://lemmy.dbzer0.com/post/24292207 > [beaconDB](https://beacondb.net/) is a drop-in replacement for MLS, which uses the same [format request](https://ichnaea.readthedocs.io/en/latest/api/geolocate.html) that's used by Mozilla's [Ichnaea](https://github.com/mozilla/ichnaea). > > The source code is available on Codeberg: https://codeberg.org/beacondb/beacondb > > You can contribute to the project by using an app like [NeoStumbler](https://f-droid.org/packages/xyz.malkki.neostumbler.fdroid/) ([GitHub](https://github.com/mjaakko/NeoStumbler/)) or [Tower Collector](https://f-droid.org/packages/info.zamojski.soft.towercollector/) ([GitHub](https://github.com/zamojski/TowerCollector)) to submit location reports. NeoStumbler does Wi-Fi, Bluetooth and GSM, while Tower Collector can only do GSM cell towers. Both are FOSS and available on F-Droid. > > It is also recommended by the GrapheneOS project: https://grapheneos.social/@GrapheneOS/112759509558471713 > > https://grapheneos.org/articles/positon-location-service > > Just keep in mind that it's still in relatively early development, which is why it really needs contributions.

    88
    7
    https://beacondb.net/

    [beaconDB](https://beacondb.net/) is a drop-in replacement for MLS, which uses the same [format request](https://ichnaea.readthedocs.io/en/latest/api/geolocate.html) that's used by Mozilla's [Ichnaea](https://github.com/mozilla/ichnaea). The source code is available on Codeberg: https://codeberg.org/beacondb/beacondb You can contribute to the project by using an app like [NeoStumbler](https://f-droid.org/packages/xyz.malkki.neostumbler.fdroid/) ([GitHub](https://github.com/mjaakko/NeoStumbler/)) or [Tower Collector](https://f-droid.org/packages/info.zamojski.soft.towercollector/) ([GitHub](https://github.com/zamojski/TowerCollector)) to submit location reports. NeoStumbler does Wi-Fi, Bluetooth and GSM, while Tower Collector can only do GSM cell towers. Both are FOSS and available on F-Droid. It is also recommended by the GrapheneOS project: https://grapheneos.social/@GrapheneOS/112759509558471713 https://grapheneos.org/articles/positon-location-service Just keep in mind that it's still in relatively early development, which is why it really needs contributions.

    45
    20
    https://fedi.simonwillison.net/@simon/112757810519145581

    cross-posted from: https://lemmy.dbzer0.com/post/23752739 > https://simonwillison.net/2024/Jul/9/hangout_servicesthunkjs/

    169
    6
    https://fedi.simonwillison.net/@simon/112757810519145581

    cross-posted from: https://lemmy.dbzer0.com/post/23752739 > https://simonwillison.net/2024/Jul/9/hangout_servicesthunkjs/

    1.5K
    195

    https://nitter.poast.org/denicmarko/status/1774077890281267451

    1.5K
    136
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearMI
    Microsoft Microsoft Teams Teams Teams' Microsoft Teams Team
    https://mastodon.social/@danlockton/112682625923116907
    114
    19
    Andromxda Now
    72 1.4K

    Andromxda 🇺🇦🇵🇸🇹🇼

    Andromxda@ lemmy.dbzer0.com

    Mastodon: @Andromxda@hachyderm.io

    wiki-user: Andromxda