henfredemars

joined 2 years ago
[–] henfredemars@infosec.pub 17 points 7 hours ago (3 children)

Don’t dogs identify individuals mostly based on smell? Would you have a smell-name?

[–] henfredemars@infosec.pub 9 points 7 hours ago (1 children)

But have you met the hat man yet?

[–] henfredemars@infosec.pub 1 points 8 hours ago

That’s OK. We can wait. You’re worth it.

[–] henfredemars@infosec.pub 29 points 8 hours ago (2 children)

Wasn’t there an order not that long ago to tear down charging stations at Federal buildings?

[–] henfredemars@infosec.pub 11 points 8 hours ago* (last edited 8 hours ago) (3 children)

Come now anon, no permanent harm. Go ask somebody out today to make up for it.

Shots you didn’t take then; Shots you don’t take now.

[–] henfredemars@infosec.pub 8 points 8 hours ago (1 children)

Note that this principle does not extend to other drivers. Do not be nice while driving. Behave predictably, and follow the rules of the road.

Being nice can confuse drivers and cause accidents.

[–] henfredemars@infosec.pub 16 points 14 hours ago (1 children)

Maybe they won’t from your point of view if you fire the employees and there’s no one around to hear complaints left.

Seniors don’t make particularly good protesters.

[–] henfredemars@infosec.pub 9 points 14 hours ago (1 children)

I see, so it's more of a recommended field to aid in filtering but not required for my post to reach most users.

[–] henfredemars@infosec.pub 6 points 14 hours ago

Very interesting. I'm sure it will find some consumers for this code, in systems that use codesign.

 

I often manually choose English every time I post, but do I actually have to do this? Does this affect the ability of other users to view my posts, or am I wasting my time by taking this extra step on most posts and comments?

[–] henfredemars@infosec.pub 3 points 15 hours ago

Oh man I used to hate aquifers. They're more manageable in the latest version but I still don't find myself enjoying it as a resource.

Volcanos are too much fun. I often unleash gratuitous amounts of fun playing with lava.

[–] henfredemars@infosec.pub 5 points 15 hours ago

Totally get your vibe. I don't want AI BS, and it's a huge waste of my memory and battery. Keep it simple and stupid, please.

 

Google can't make a move in 2025 without veering into the realm of generative AI, and the release of the Pixel 9a is no exception. Curiously, the AI experience on this phone may not match what you've seen from the company's high-end smartphones. Google has confirmed to Ars that the phone's lower memory prevented it from implementing the full suite of Pixel AI features. You can still talk to Gemini by holding the power button or opening the Gemini app, but the on-device Gemini Nano model has seen a downgrade on the 9a.

 

A new study reveals that thousands of Android apps covertly collect location data using Bluetooth and WiFi beacons, allowing continuous tracking and profiling of users without explicit consent.

 

Phone makers need to collectively decide how we approach SIM cards going forward. The current state of eSIMs is an absolute mess, so we either need to ditch the idea of the eSIM-only future, or the big companies need to partner to solve this once and for all.

 
  • Android 16 is on track for its June release, a departure from Google's usual August releases.
  • Google's President of the Android ecosystem confirmed to Android Police it's on track for its target.
  • Google has switched to Trunk Stable development, allowing it to release Android updates earlier.
 

Qualcomm’s Snapdragon 8 Elite promises big things for late 2024 and 2025 flagship smartphones. From a new custom CPU to unrivaled graphics performance, photography, and enhanced AI capabilities, it’s the chip that claims to do it all, and, for the most part, it does. However, our initial impressions of the chip have been tainted by exceedingly high temperatures when placed under stress.

 

According to our source, those purchasing the Google Pixel 9a will get Fitbit Premium for 6 months, YouTube Premium for 3 months and Google One 100GB for 3 months. This is similar to the freebies that Google offered for the rest of the Pixel 9 series.

I feel like this isn't all that interesting news though because I thought trials were commonly included with new Android phones.

 

This is merely a small blurb. Here's the (nearly) complete text of the article (no real need to visit the page):

Qualcomm says Arm is no longer threatening to take its chip architecture away.

”Arm recently notified us that it was withdrawing its October 22nd, 2024 notice of breach and indicated that it has no current plan to terminate the Qualcomm Architecture License Agreement,” Qualcomm CEO Cristiano Amon said on today’s Q1 2025 earnings call. (Qualcomm reported record quarterly revenue, and Amon says Snapdragon now has 10 percent share of $800-plus Windows laptops at US retail.)

Sounds like the chip licensing drama is coming to an end, although it's hard to know what agreements went on behind the scenes to call off the giants' battle.

 
  • Android will soon be able to alert you when your device’s time zone has been automatically updated.
  • This alert will come in the form of a notification.
  • The feature isn’t live yet in the latest Android 16 preview, but when it does go live, it’ll be opt-in.

Sounds like a nice QOL mini-feature.

 

Hello Linux Gurus,

I am seeking divine inspiration.

I don’t understand the apparent lack of hypervisor-based kernel protections in desktop Linux. It seems there is a significant opportunity for improvement beyond the basics of KASLR, stack canaries, and shadow stacks. However, I don’t see much work in this area on Linux desktop, and people who are much smarter than me develop for the kernel every day yet have not seen fit to produce some specific advanced protections at this time that I get into below. Where is the gap in my understanding? Is this task so difficult or costly that the open source community cannot afford it?

Windows PCs, recent Macs, iPhones, and a few Android vendors such as Samsung run their kernels atop a hypervisor. This design permits introspection and enforcement of security invariants from outside or underneath the kernel. Common mitigations include protection of critical data structures such as page table entries, function pointers, or SELinux decisions to raise the bar on injecting kernel code. Hypervisor-enforced kernel integrity appears to be a popular and at least somewhat effective mitigation although it doesn't appear to be common on desktop Linux despite its popularity with other OSs.

Meanwhile, in the desktop Linux world, users are lucky if a distribution even implements secure boot and offers signed kernels. Popular software packages often require short-circuiting this mechanism so the user can build and install kernel modules, such as NVidia and VirtualBox drivers. SELinux is uncommon, ergo root access is more or less equivalent to the kernel privileges including introduction of arbitrary code into the kernel on most installations. TPM-based disk encryption is only officially supported experimentally by Ubuntu and is usually linked to secure boot, while users are largely on their own elsewhere. Taken together, this feels like a missed opportunity to implement additional defense-in-depth.

It’s easy to put code in the kernel. I can do it in a couple of minutes for a "hello world" module. It’s really cool that I can do this, but is it a good idea? Shouldn’t somebody try and stop me?

Please insert your unsigned modules into my brain-kernel. What have I failed to understand, or why is this the design of the kernel today? Is it an intentional omission? Is it somehow contrary to the desktop Linux ethos?

 

This year has been a milestone for us, with significant strides in decentralizing app distribution, expanding the F-Droid ecosystem, and solidifying our infrastructure. All of these advancements were made possible thanks to donations, grants, our volunteers and regular contributors. So thank you again to everyone who helped make 2024 another great year for F-Droid. Now let’s take a closer look at what we accomplished.

 

Pixelfed is now available as a mobile apps for both iOS and Android. The open source, decentralized platform offers image sharing similar to Instagram. However, Pixelfed has no advertisements and does not share user data with third parties.

view more: next ›