⭒˚。⋆ 𓆑 ⋆。𖦹

  • 0 Posts
  • 11 Comments
Joined 3 years ago
cake
Cake day: June 21st, 2023

help-circle

  • I read your comment and I’m familiar with the technology. I’m not insinuating they’re putting anything sleazy in the kernel, in fact I acknowledge there are practical security benefits to it. That’s where a lot of the nuance comes in.

    Secure Boot and the TPM help verify the boot process and that it hasn’t been tampered with. I keep mentioning TPM as well because it’s part of the mechanisms already in place with CoD[1], it has remote attestation[2], and has been pitched as a DRM mechanism since at least 2009[3]. This makes a lot more sense in a corporate/enterprise environment where you’re either using a company issued laptop or your BYOD device needs to prove it’s up to a standard worthy of trust to connect and interact with network resources. In this scenario the company has created a secure platform and your device needs to be trusted within it.

    But on a consumer level, while you can still argue there’s protection from tampering by malicious parties with the boot process, you have to ask yourself what platform you’re participating in and why. This is the equivalent of allowing the cops to put a camera in your house on the grounds that if everyone is watched it’ll reduce crime. Microsoft (or whatever game developer) wants to know your device can be trusted on their platform and you need to submit to whatever those standards are. Allowing EAC is opening the door to that process. If Microsoft sniffs something out on your PC they don’t like, they can decline to run the software. It gives them right of denial over what your system looks like. They can enforce you to run telemetry scraping services as part of the configuration that must be in place to trust your device.

    So while I don’t have any proof that this is being used quite in that manner yet, or even what it might eventually look like, it is well within possibility. And we know the tech industry absolutely has an appetite for it. This is the Sony rootkit scandal from 2005 except now they just tell you they’re doing it instead of trying to hide the fact.

    You’re free to make of that information what you will and evaluate how much of a likely threat you perceive any of that to be and if it’s worth the tradeoff. And sorry about the people downvoting you, I’m just trying to get this information out there. It’s complicated and nuanced, I get it.




  • I keep saying this myself. I feel bad because there is a real problem they are solving (phishing) but ultimately it is an overly technical solution to an extremely human problem. They’re only as strong as their weakest recovery method and the inability for the average user to understand the technical implementation and ramifications takes power away from a personally held secret (problematic as that may be) and shifts it towards more platformization.

    It all just makes me vaguely uncomfortable in ways I have a problem fully articulating.





    1. What is the main focus of the One UI 8 update?

    Based on current rumors and industry trends, the main focus of One UI 8 appears to be a significant leap in on-device AI capabilities (“Galaxy AI 2.0”) and a major overhaul of home and lock screen customization options.

    Cool. Let’s shoehorn some AI in there and just fuck up my home screen again. I hate stability. I love it when my phone constantly shifts in my hands and never settles. I love waking up one morning to find that my device has updated itself and now nothings behaves as it did before.

    I haven’t felt a significant advancement in years. It’s just shuffling UI elements for the sake of claiming you’re improving things.

    I am less than enthused for this update. I dread it.