Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror

Comment Re: Defeating the point of side loading (Score 1) 64

Ahh, here is the link I was looking for:

https://ancillary-proxy.atarimworker.io?url=https%3A%2F%2Fwww.androidauthority.c...

Google is not killing AOSP, but they are making it much harder to support AOSP on Pixel devices.

I hope your move to Pixel works out for you, but it probably won't.

Comment Re: Defeating the point of side loading (Score 1) 64

I see now where you are going with that, but didn't I just read something about Google reducing code sharing? I'll have to look that up later, it's not convenient now.

There are also Moto phones with unlockable boot loaders, but it's not all of them. I'm on a non-unlockable one right now, sigh.

Comment Re: Impossible (Score 1) 36

It all depends on where the ecryption happens.

Client side, the data is encrypted by you before it even goes to iCloud or whereever.

Server side, the data is encrypted by the provider (iClound or whatever) on your behalf with a unique key that the server has.

IF you aren't doing the encryption, it isn't encrypted, only the illusion of encryption is happening.

Comment Re:Should Not Even Be A Question (Score 1) 36

I don't use Biomentric Passkeys for this very reason. They cannot compel me to type in or tell them my password, but they can force me to use a fingerprint or facescan.

They cannot compel me without a court order (or three dollar wrench).

"I don't answer questions. I want my lawyer. Am I free to go? Am I being detained and for what RAS do you have right now? I do not have to help you 'investigate' "

Comment Re:Do not bow to "foreign" pressure (Score 1, Insightful) 36

The problem with Civil Liberties (me being a libertarian) is that government intrusion into our lives is already done, and both D and R have contributed. The Dems take a little here, the R takes a little there and the next thing you know, "Papers Please". Government intrusion says the camel's nose is inside the tent.

Comment Re:So this is illegal (Score 1) 124

When will people marry his declarations and musings with the fact that he's marching Federally-controlled troops into cities to "fight crime". What the hell does everyone think is going to happen in next year's mid-terms when armed forces loyal specifically to Trump with little or no objection from Congress or the Supreme Court starting "guarantee" a "fair vote".

Everything he and the Republicans have been working towards since the claims of Obama's ineligibility has been preparing for the moment when they move in to seize control of state voting apparatus. He'll do what he's done with everything else and claim it's a "national emergency."

And MAGA will cheer while the Democrats put on their sackcloths and roll around in the dust crying about how they were impotent. The American people have chosen, they want tyrants who rule by fiat, engineer and weaponize crises to entrench their power.

The political system the Framers came up with was always a steaming pile of crap. Bagehot pulled apart deftly in the 1860s, explaining that the only thing that made it work was the "American genius for politics". Well, that's done. The Democrats are frozen in place, the Republicans, ruled by oil barons and sociopathic billionaires, intend on building a dictatorship with the shape of the American republic, but where checks and balances once existed, will be impotent paper tigers.

Comment For better security, don't use secure services (Score 3, Interesting) 36

It's easy to forget how utterly fucked up things have become, compared to how a few decades ago, we(? well, at least I) thought things would evolve, and one of those has to do with dedicated services for secure communications.

The thing that defies my predictions, is that dedicated services for secure communications, exist at all.

When you wanted to secure email, you didn't use a "secure email" service; you (the user!) just added security onto your insecure email service. Send a PGP/MIME message and the email provider doesn't give a damn that it's encrypted, it just cares about SMTP.

But these days (could I call it the "Age of Lack of Standards"?), everyone is trying to manipulate you into depending on their software and services (inextricably linked; you can't use their software without their service, or their service without their software), so you can't just replace the service or easily "tunnel" security through their presumably-insecure (perhaps even mandated insecure) service. Whatever security they offer, is all you can reasonably get (pretty much the opposite of the classic email situation).

Why do I bring this up? Because the regulations are all about services! Not protocols. Not software. Services. (emphasis mine in all below quotes)

Here's the beginning of The UK Online Safety Act (1)(1)(a):

imposes duties which, in broad terms, require providers of services regulated by this Act to identify, mitigate and manage the risks of harm

Here's good 'ol CALEA (US Code title 47 Section 1002 (a):

Except as provided in subsections (b), (c), and (d) of this section and sections 1007(a) and 1008(b) and (d) of this title, a telecommunications carrier shall ensure that ...

CALEA even mentions encryption:

A telecommunications carrier shall not be responsible for decrypting, or ensuring the government’s ability to decrypt, any communication encrypted by a subscriber or customer, unless the encryption was provided by the carrier and the carrier possesses the information necessary to decrypt the communication.

I haven't dived into the details of EU's DSA, but I see a hopeful sign right there at the very beginning of Article 1:

The aim of this Regulation is to contribute to the proper functioning of the internal market for intermediary services by setting out harmonised rules...

Look at all those references to services! Not the code you run; the services you use.

What does it mean? I think it might mean that even in the UK(!) you might be perfectly fine and legal using secure software. You just can't have it rely on some coercible corporation's secure services. Send your encrypted blobs over generic protocols and un-dedicated services, and the law won't apply to your situation. I'm not necessarily saying "Make PGP/MIME Great Again" but I do think following in its spirit is a really great idea.

If you run a service, what you want to be able to tell the government (whether it's US or UK or France/Germany) is "we don't provide any encryption, though some of our customers supply their own."

Stop asking for secure services. Worse is better. Ask for secure software (which assumes that all services are completely hostile) decoupled from any particular service.

Comment Re: From the UK (Score 1) 36

The US and UK are both members of five eyes, an intelligence sharing coalition created to get around certain countries' laws against spying on their citizens by having other coalition members do it for them.

But wait, the US is altering the deal, and wants to stop that sharing.

That is what this is really about. They want to spy on us and not share the info with these former allies.

I'm not against stopping the information sharing, which was always really just a way to go around laws designed to protect citizens. But this is not for our benefit, it's for the purpose of punishing other nations by reducing international cooperation.

Slashdot Top Deals

8 Catfish = 1 Octo-puss

Working...