Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)L

Limonene

@ Limonene @lemmy.world

Posts
3
Comments
510
Joined
3 yr. ago

  • bmw

    Jump

  • I did not know about soft turn signals until I saw this post.

    I question why this feature exists. Drivers should be aiming to signal 10 seconds ahead. When making a lane change or turn, you should be keeping your signal on until the maneuver is completed. I can't think of a circumstance where 3 blinks is enough. 1 blink looks more like a mistaken signal.

  • The days of custom Android ROMs are numbered, and Google is to blame

    Jump

  • Swapping out random parts of the OS will certainly lead to breakage and dependency hell in your package manager (unless you just replace files without using the package manager, which might make all of this even worse).

    I've done it, and it works. I've built packages of libraries and binaries before, at higher version numbers than Debian had, and deployed them to multiple Debian sid systems. They worked. When Debian caught up, I seamlessly upgraded all 3 systems with no problems.

    Even in the worst case scenario of dependency hell, you would be able to downgrade to the Debian supported version. But I never had to do anything like that.

    I'm not going to respond to all the rest of your post, because I don't think it will help with anything. It seems that we have very different ideas about device ownership.

  • The days of custom Android ROMs are numbered, and Google is to blame

    Jump

  • Some apps resist being backed up. "android:allowBackup=false" was one way. Apparently that can be overridden, but there are other ways apps can resist backup that can't be overridden. It's not clear what those are, but some of my apps definitely aren't being backed up by Seedvault, even though they aren't using keystore.

    The apps using keystore can only ever be backed up by installing a backdoor in the TEE.

  • The days of custom Android ROMs are numbered, and Google is to blame

    Jump

  • They do provide instructions for compiling from source, they just don't support you at all afterwards. If you compile GrapheneOS and put it on your phone, they say "you are not running GrapheneOS" at that point. Unlike Debian or Ubuntu, where every package can be replaced by a hand-compiled version, and it's still Debian or Ubuntu.

  • The days of custom Android ROMs are numbered, and Google is to blame

    Jump

  • need to charge it in a public space? You better hope no one had modified the charger with something like an RPI to silently exploit your phone

    Any secure Android device should be starting each USB session in device mode, set to charge only. It is usually not possible to change this mode without unlocking the screen. I don't know what this has to do with sandboxing or unlocked bootloaders.

    Crossing a border into a country and they suspect you’re some sort of threat?

    How does this attack work? Are you saying they'd replace the operating system by using the unlocked bootloader? There are plenty of ways to prevent this with full disk encryption. Of course you need to check for modifications when you get it back, but that's true even if you have a locked bootloader, because of hardware modifications and leaked keys.

    Not running software that updates the hardware’s proprietary software drivers? One text message and you’ve got a rootkit.

    In any of the open source Android distros, like LineageOS or GrapheneOS, those updates come as part of the operating system. The updater is open source, and doesn't care whether your bootloader is locked. I assume a Linux Mobile system would be closer to Debian's Apt system, which is also an open source updater than can install proprietary drivers, and also doesn't care if your bootloader is locked.

    didn’t really need an “um ackshually” about people who don’t want a secure os

    This is pointlessly condescending.

  • The days of custom Android ROMs are numbered, and Google is to blame

    Jump

  • Comprehensive backups, which can only be done after rooting. You can do this, but only after disabling verified boot.

  • The days of custom Android ROMs are numbered, and Google is to blame

    Jump

  • They literally have a whole instruction page for it on their official website: https://grapheneos.org/build

    I've asked, and they don't support you at all after you build it. You can't get updates or packages from GrapheneOS. Compare to Debian, Ubuntu, RHEL, etc., where you can compile your own newer package, install it, even replace core operating system components, and then seamlessly upgrade to the OS vendor's version when they catch up.

    What they don’t support is making modifications to GrapheneOS, compiling it, and then still calling it GrapheneOS. It’s not. You changed it, so it’s something else. It’s your own fork of GrapheneOS, so you should name it accordingly.

    Even if you don't modify it, they tell you not to call it GrapheneOS, and don't offer any way to install patches, besides building it again.

    Uh that’s by design? Do you even understand the purpose of a secure element and trusted execution environment, and how they work?

    Yes, I understand it. I've opposed TPM from the start, and this is just TPM for Android. I don't want a device that keeps secrets from me. I do want comprehensive backups, including all cryptographic keys. I should be able to access the TEE from my authenticated PC over SSH.

    I'm fully aware that Widevine won't run on a device where the owner has control over the whole device.

    The code is open source, you can freely modify the OS, compile it, sign it with your own keys...

    I don't have the resources to do this (PC nor effort). They recommend 100GB+ storage and 32GB RAM for building it, and you seemingly can't do it incrementally, since you have to flash an entire operating system at a time. I want to modify one file, like the call recording xml file. (That file is from a previous operating system I had, but I can't provide an example of niche cases like that for GrapheneOS, because I only ever used GrapheneOS for a few days, so I don't know what kind of small modifications I would want to make.)

  • The days of custom Android ROMs are numbered, and Google is to blame

    Jump

  • Can you please explain how rooting adb only, not any apps, makes it less secure? Use concrete examples, not abstract.

  • The days of custom Android ROMs are numbered, and Google is to blame

    Jump

  • Not everyone runs dangerous proprietary apps that need sandboxing. Does my offline puzzle game need sandboxing? Firefox has its own sandbox built in.

    Some people consider unlocked bootloaders a feature.

  • The days of custom Android ROMs are numbered, and Google is to blame

    Jump

  • Just try asking about rooting in the GraoheneOS Discord, and you risk getting banned.

    GrapheneOS has a ton of locked down stuff they don't want you to access. They make rooting extra hard, they don't support compiling the OS from source, there's still the TEE you can't access even with root, and the OS filesystem is readonly to inhibit customization.

    GrapheneOS promotes "verified boot" that stops you from doing many important things.

  • The internet kind of sucks right now

    Jump

  • Even if Discord wasn't doing it, public Discord guilds are known to be scraped by a number of different bots. Previously, it was for spies, cops, and private investigators who wanted to search for messages by username. If those bots could do it before, AI bots will be doing it aggressively today.

  • Why are anime catgirls blocking my access to the Linux kernel?

    Jump

  • Cloudflare has IP banned me before for no reason (no proxy, no VPN, residential ISP with no bot traffic). They've switched their captcha system a few times, and some years it's easy, some years it's impossible.

  • It Took Many Years And Billions Of Dollars, But Microsoft Finally Invented A Calculator That Is Wrong Sometimes

    Jump

  • Give Microsoft some credit! Excel has been able to come up with wrong answers for decades. For example, reporting 1900 as a leap year.

  • Flight attendant was four times over alcohol limit, court told

    Jump

  • Why is the driving limit 4 times higher than the limit for acting as a flight attendant?

  • I could show you a trick or two

    Jump

  • killall -u 1001

    I think top has a way to do it interactively.

  • Does anyone have a Faraday bag for phone that works?

    Jump

  • Aluminum foil works. At least, I can't receive calls or texts through it last I tried.

    Get the heavy duty kind. It's not any more conductive, but is more durable against tearing.

    Note that a gap in your phone's tracking data can look suspicious at times. Sometimes it's less suspicious to leave your phone at home.

  • Battlefield 6 cheats day 1 of early access. Depite kernel level anti cheat, forced secure boot TPM 2.0

    Jump

  • A USB keylogger is not detectable by the computer, not in firmware nor operating system. It passively sniffs the traffic between the USB keyboard and the computer, to be dumped out later.

  • Battlefield 6 cheats day 1 of early access. Depite kernel level anti cheat, forced secure boot TPM 2.0

    Jump

  • A person with physical access can tamper with the OS, then tamper with the signing keys. Most secure boot systems allow you to install keys.

    Secure boot can't detect a USB keylogger. Nothing can.

  • A Rimworld fan comic

    Jump

  • In the Odyssey DLC, there is a scenario where you start with a ship.

    Raid strength is proportional to your wealth, as shown in the history tab. You can reduce raid strength by donating wealth (using caravans or drop pods) to potential allies.