sugar_in_your_tea

@sugar_in_your_tea@sh.itjust.works

Mama told me not to come.

She said, that ain’t the way to have fun.

This profile is from a federated server and may be incomplete. View on remote instance

sugar_in_your_tea ,
  • probably not, Linux isn't running when you're in Windows, and Windows isn't running when you're in Linux
  • it could, but I think you'd need a targeted attack for malware to jump from Windows to Linux, since that's a pretty niche target
  • yes, if it has write access, you're open to ransomware attacks, which are a fairly common form of malware; if your NAS has a rollback option, you're probably fine, but definitely make sure your remote backup restore works (you do have off-site backups, right?)

If you want to be extra secure, encrypt your Linux partition. They could still corrupt your Linux partition, but they wouldn't be able to read anything on it without your password. Both of my Linux machines (laptop and desktop) use an encrypted root partition, and they run games and whatnot just fine (I don't notice a slowdown).

openSUSE Tumbleweed Monthly Update - April

Welcome to the monthly update for openSUSE Tumbleweed for April 2024. This month began after addressing last month’s supply chain attack against xz compression library for the rolling release. An explanation of that XZ Backdoor, how it was address and what was learned can be found on news.opensuse.org....

sugar_in_your_tea ,

Not sure why they included random Python packages in the KDE Frameworks section.

Good work to everyone patching the various exploits, April was a spicy month. Oh, and I'm loving KDE 6, so awesome work getting the ready too (I think that was last month though).

sugar_in_your_tea ,

Ikr?

I certainly prefer Steam because it has nice features (e.g. Steam Input), but I can also add non-Steam games as needed as well.

sugar_in_your_tea ,

Sure, reach out to the dev to ask to help maintain it if you want to keep the repo. If that doesn't work, clone it to your own repo.

sugar_in_your_tea , (edited )

I'm not a smart man, but I know what a good distro is.

  • Forrest Gump, if he was a Linux user
sugar_in_your_tea ,

Yeah! Just... without the bullying and exploits.

sugar_in_your_tea ,

Scanning through the list, it's more like $20 worth of games I'll actually play for $8. But still pretty good! I saw about 5 games in interested in trying, and I'm sure I'll find more later.

sugar_in_your_tea ,

So, is this a good thing or a bad thing?

I'm not sure what is more surprising that he is at the green giant or that he's able to continue working on the Nouveau driver in an official capacity. Ben Skeggs has been involved with the Nouveau project for more than a decade.

I don't trust them, there has to be a catch.

sugar_in_your_tea ,

Hopefully? I'm optimistic, but skeptical. I hope the dev gets actual information about the product that they can legally use to improve FOSS NVIDIA drivers.

sugar_in_your_tea ,

That really depends on if NVIDIA pulls some nonsense and makes the driver somehow worse.

I'm hopeful, just a bit skeptical due to the decisions they've made in the past.

sugar_in_your_tea ,

Yeah, I'll get right on that and resolve conflicts and maintain my own driver...

I honestly just gave up on NVIDIA and bought AMD. If this ends up working out well, I'll consider NVIDIA the next time I need a GPU, but the GBM nonsense drove me away.

sugar_in_your_tea ,

Skill issue, L for riot games.

I'm no expert here, but couldn't they rely on SEV/SME or similar? My understanding is those features encrypt RAM, which would make it a lot more difficult for an attacker to do memory-based attacks when the game is running within a VM. I expect "physical attacks" would include attacking a VM's memory, but again, I'm not an expert.

I also wonder if this could work in a containerized environment instead of a VM, so players could just run a lightweight container and preserve direct access to resources like the GPU. I don't know if GPU access can be required to be encrypted as well, but surely this is a massive step forward.

sugar_in_your_tea ,

Same, but I did use 7 for a bit. I started with Linux in 2006, and I was 80%+ Linux until about 2013, when I switched full-time to Linux (when Steam came to Linux). I remember buying Factorio and Minecraft in Beta because they supported Linux, and I also remember when Humble Bundle was good (lots of great indies with native Linux support).

I'm always excited to see people finding Linux useful these days. There's no way I'm going back to Windows at this point because it's just so annoying to get anything done imo.

sugar_in_your_tea ,

Yup. I used Windows because I needed certain Windows programs for work/school. For example, I was required to use Visual Studio, so I developed on Linux than ran in VS to meet t the requirements. Same with other MS-specific tooling, none of which I've needed since.

sugar_in_your_tea ,

Yup, I'm guessing that's the main contributing factor here. Just like how Chrome grew in popularity because the nerds (e.g. me) shilled for it, Linux is also growing because gamers still for it. It turns out that if you can solve one major pain point for a very passionate subset of the population, you get a lot of free evangelists and people will follow.

sugar_in_your_tea ,

And it shouldn't be just games, any time it says "buy," that should be understood to mean complete ownership of that thing. That means:

  • DRM will be stripped in a reasonable time frame (say, 2-3 years)
  • for physical goods, no prevention of availability of parts
  • any server components will be made available for private hosting when the vendor is no longer interested in supporting it (ideally FOSS, but any source-available license should work)

And so on. If the product is intended to be available for a limited time, they should instead say "lease," because that's what that means.

sugar_in_your_tea ,

Yup, that's why they hide this nonsense in the TOS or whatever. If the intent was clear upfront, they'd have to reduce prices. So that means people don't really understand what exactly they're buying.

I'd like to add that anything I own, I should be able to sell. Whether the platform supports it is another story, and I think it's acceptable for the platform to take a cut since there's work involved moving licenses, but if I own it, I should be able to lend, sell, or gift my copy to someone else.

sugar_in_your_tea ,

Do you really need all of those drives? You may want an NVMe drive, which will help the system well so much more snappy and load games faster. A 1TB NVMe is ~$80, which would be plenty for your OS and most (all?) of your games.

I think that's totally worth it, but YMMV.

sugar_in_your_tea ,

That's sick. We're getting a new fiber network in my city and we'll top out at 10gbit. I'm probably not paying for that (would be >$200/month), but it's nice to know it exists. Who knows, with the rate of web bloat, maybe I'll eventually need it...

sugar_in_your_tea ,

I disagree on posting where cops live, that's just going to give criminals a target.

But we should absolutely have a record by individual, department, state, and country that documents all of that nonsense. Include last name and badge number so the public can be aware when interacting with them, as well as provide documentation about incidents.

sugar_in_your_tea ,

My last company was Linux only, and we could pick whatever we wanted. My current company is macOS only, which isn't great but at least it's not Windows.

sugar_in_your_tea ,

Why? macOS feels a lot like Linux in my regular workflow, which is largely terminal based. There's two decent package managers (homebrew and macports, I use macports), tmux and vim work as you would expect, etc. 90% of my workflow is the same between macOS and Linux.

I've tried WSL, and the workflow just doesn't feel right.

But at my company, there's another huge caveat: IT locks down the Windows machines, whereas there's pretty much no oversight on the macOS computers. That has a ton of value for me.

sugar_in_your_tea ,

Yup, the web page is good enough. I only use the desktop client on my work computer (macOS) for the meeting notifications, which the webapp also provides (but it needs to be open).

sugar_in_your_tea ,

Yup, I'd pay maybe $1. That's way more than the ad revenue search engines get, so it's a more than reasonable price to pay.

sugar_in_your_tea ,

Google's ad search revenue amounted to 175 billion

That includes way more than search:

That “search and other” figure includes revenue generated on Google’s search properties, along with ads on other Google-owned properties like Gmail, Maps and the Google Play app store.

I couldn't find a reliable source for a breakdown, so I'll use Microsoft Bing statistics instead:

  • $12.2B ad revenue in 2023
  • ~1.3 billion unique visitors globally as of March 2023
  • $9.66 Bing revenue per user

That last number is really close to my $1/month figure.

So something around $1/month range seems like a fair replacement for ad revenue for a search engine.

sugar_in_your_tea ,

That sounds unlikely... But they're a small search provider with a small customer base, so costs will be high maintaining all the infrastructure needed.

As I linked elsewhere, Bing makes ~$10 per user per year. That's really close to my $1/month figure. And that's revenue, which doesn't count advertiser acquisition costs and whatnot.

I'm unwilling to pay $5/month for limited searches, but I'm willing to pay for search if it's reasonable.

sugar_in_your_tea , (edited )

Yeah, Yandex censors quite a bit, at least since the war with Ukraine:

Yandex, the leading search engine for Russian speakers, has meanwhile tightened its censorship, removing independent media from its search results.

And Yandex altered results to trash Navalny.

But at least they have a banner when they're likely censoring stuff.

So I absolutely wouldn't trust it for anything related to politics or Russian interests. Maybe it's okay from a privacy and non-Russian interest perspective though, idk, but by default I don't trust it because Russia is so repressive against media in its country.

As for DuckDuckGo, here's what I found:

That said, it seems as if it's just reducing the search ranking for Russian "disinformation," not removing results. That's annoying, but not as troublesome as Yandex or Google. BTW, I found all of those links through DDG, so it's not like they're trying to hide anything.

sugar_in_your_tea ,

I've never used questions to search, I use keywords, even with Google. So if I want info on the Russia-Ukraine war, I'll search "Russia-Ukraine War". If I want casualty numbers, I'll add "casualties" there, probably at the start if I want to emphasize it. Searching "how many people have died in the ukraine war" has never been something I do.

That said, natural language search may be more useful with AI tools though, but for regular search, I've always used keyword-dense queries, roughly ordered by priority in the query (important terms first).

sugar_in_your_tea ,

You posted content from RSF, which is a CIA propaganda outlet.

You're going to need to provide some proof of that.

Here's the media bias factcheck for RSF, it's rated as mostly neutral, high factual reporting, and no failed fact checks in the last 5 years.

Navalny...

I don't see how that has anything to do with Yandex altering search results.

You trust Google a lot

Not sure what you mean...

I trust Google's security at least as much as other phone manufacturers in the space, I don't trust their data collection. They're an ad company, so they stand to gain by having people trust their security, provided that doesn't interfere with their data collection.

Are you a western liberal by any chance?

Depends on your definition of liberal. I do live in the west, and I do ascribe in Liberalism, but not in what most people today call "liberal."

zero reason to trust western media that loves Zionism and genocide

That's pretty charged language.

For your information, I try to get my news from a variety of sources. Some of my favorites are:

  • Al Jazeera - especially on world events, not so much on middle-east events (esp. the Israel-Palestine war)
  • The Guardian
  • Reuters
  • Reason
  • NPR
  • BBC
  • Wall Street Journal

I'm not a fan of Zionism, but I also dislike Hamas. I'd like to see Israel get sanctioned for war crimes, but also Hamas eliminated as a terrorist organization.

I should also be able to post Russian sources on western propaganda

Sure, by all means, as long as their source their claims. However, there is lots of documentation of Russia interfering with its media that I'm going to be a bit more skeptical vs a more peer-reviewed publication, especially while Russia is involved in an unpopular war.

I'm not saying other countries don't interfere with their media as well, and things like wikileaks are important to help keep all governments honest.

You are trying to poke the bear

Are you essentially saying you're a Russian shill? I just think that's an interesting choice of words, considering the context.

I'm not sure what you're trying to insinuate with Reddit vs Lemmy, please elaborate.

sugar_in_your_tea ,

Dynamic DNS only works if your IP is publicly routable. My ISP (not sure about OP) puts us behind NAT, so the only way to expose services on my network is through a tunnel, like a VPN.

But many ISPs do provide a routable IP. My last ISP did, so it's not uncommon.

And you don't necessarily need to own an IP, services like FreeDNS let you use a subdomain from someone else, but a domain can be as little as $1/year (for TLDs like .site and .store), so it's probably better to just get one. I have like 10 domains, and they only cost $10/year each or so. But if you just want to try out hosting something, using someone else's isn't a bad way to go.

sugar_in_your_tea ,

If it's on a VPS, the host can see your traffic. That may or may not be an issue for you.

You may be offered a free premium Telegram subscription – but please don’t accept ( archive.is )

Telegram is giving away FREE Premium subscriptions! All they need from you is to use your cell phone as a relay to text out their OTP codes! And the recipient of the OTP sees your phone number! What could POSSIBLY go wrong with this deal?...

sugar_in_your_tea ,

It lets that person know your number works. If that person happens to be a scammer or solicitor, you could run into issues.

sugar_in_your_tea ,

iPhone is the most common in the US. Here are some stats:

sugar_in_your_tea ,

They should just only allow other 2FA methods, like OTP, TOTP, and HOTP. It's really not hard to install an app to handle it...

otl , to Privacy
@otl@hachyderm.io avatar

Finally deleted my LinkedIn account!

After putting my account into "hibernation" for the past few weeks, I finally closed it. But I'm still looking for work. Thankfully I can still find positions (SRE and software dev) by just going directly to the company's site and finding a Jobs page.

Good luck to everyone else out there looking for work!

@privacy

sugar_in_your_tea ,

saying it will work when we have no signs for it kinda is

I'm actually working on a proof-of-concept, but I honestly would prefer to not head the project. I don't think I can commit long term to a project like that, I hate being the center of attention, and honestly I think someone else would do a better job pushing it forward. But I'm intrigued by the tech, so I'm trying my hand at building it.

If I have something to show, I'll post it here. But at least from the initial work I've done, I think it should scale nicely. I'll probably get tired of it before "finishing," but I guess time to tell.

I do like lemmy and the fediverse, I just want to be prepared for it falling apart. I think it's seeing some uptake issues because of fundamentals of the fediverse (needing to understand federation just to join communities, for example), and that will limit its mainstream appeal. But I'll keep using it until there's a credible alternative.

voting to become federated

What exactly do you mean by this?

successor to crypto

Honestly, I think crypto is fine, and I'm particularly interested in privacy coins like Monero. The main issue they have is speculation, but honestly, that happens with fiat currencies as well, and if people start using something like Monero regularly that speculation will likely end up in the noise.

That said, I wouldn't say no to something like GNU Taler getting picked up by a privacy-friendly organization. I'd love to see Mozilla integrate it so I could use Taler for payments to various online services.

Have a good one.

You too!

sugar_in_your_tea ,

making PRs

I have actually made a few PRs when I first came to lemmy. I fixed a few bugs that bothered me, implemented a feature I wanted, and took a couple extra bugs from the issue tracker that bothered others. I thought about making my own client, but decided to try patching the existing ones first, and that ended up being easier.

I've stopped being active though since I'm satisfied with the platform as it is. I've considered hosting my own, which might get me to optimize the BE a bit, so I guess we'll see. But I really do think the project is solving the wrong problems, so I prefer to spend my hobby time experimenting with P2P apps since I think that's what we'll ultimately want, but I'll absolutely help if there's any project that's remotely close to what I want.

I don't have anything to show yet since it's rough and I don't want to publish anything without a good moderation story, but hopefully I'll have something later this year.

new search function

I almost did, but the current one (new since I was originally interested) is good enough. Maybe I'll add it to Jerboa or something since it completely lacks post/comment search AFAIK (should be easy now), but searching on my mobile browser works well enough.

But this gets back to the core design decisions. It can't search stuff it doesn't have cached locally, and abusing ActivityPub to broadcast search would have a risk of enabling amplification attacks.

The proper solution to search, imo, is a separate service that indexes as much of the fediverse as possible. That's a massive project, and about on the scale of building a replacement, not to mention hosting costs. I could probably build it as a P2P app though, but at that point I might as well continue with my project since it has other benefits as well (e.g. single namespace, almost no hosting costs outside a few relays, etc).

Voting, as in you vote for something to happen. Democracy. We should federate it so everyone can do it, probably cryptographically or some other way.

Right, but how does that actually work? Every proposal I've seen for distributed voting systems has issues, and federating it won't solve them. Here are a few off the top of my head:

  • barrier to entry - how are you going to get Grandma to use it?
  • malware voting on your behalf
  • privacy - how can you prove dead people aren't voting while also preventing people from knowing if you voted?
  • are normal people going to trust it? We have enough issues with people not trusting voting machines, despite no evidence that voting machines have been exploited to any real degree

I'm satisfied with the current system in my area, which is mail ballots with a barcode so voters can see whether their vote was counted. That's good enough, to the point where I'm going to put my efforts toward getting better voting systems (i.e. ranked, approval, or STAR voting) instead of more cryptography.

You‘re making an alternative to the fediverse because of issues you cant be bothered to solve

I'm making an alternative because the issues I want to solve are fundamental to federation, namely:

  • confusing namespaces - you need "community@instance", and most people would prefer just "community"
  • power hungry mods - the ones I've seen are okay, but they were also okay on Reddit until they weren't; we could vote for mods, but then interested parties could just bot spam their way in
  • hosting costs are high - you need to store everything for every community your users are interested in; that's not going to scale well, especially with so much duplication

I can't submit a PR to fix those, because if I try, it'll just be a hack that's going to have repercussions. Those are design decisions we'll just have to live with for now.

So I'm addressing it with a personal research project, and here's briefly how I'm solving them:

  • no namespaces, just "topics"
  • no permanent moderators, moderation is based on people you explicitly or implicitly trust (everyone would start with some default set)
  • hosting costs are $0, unless you run a relay on a $5 VPS; all storage is on user devices (aside from caching nodes to help with availability)

The hardest part is moderation, which is also the biggest selling point, at least until lemmy instance admins can no longer afford to keep hosting.

I think I can make an ActivityPub bridge as well, and I may end up having it act like a lemmy instance to help seed with data. But that's not in the initial goals, I just want to see if client-side moderation based on votes and whatnot can actually work well.

sugar_in_your_tea ,

The issues that lemmy solves

Oh, I'm not saying the issues it solves aren't important, I'm saying it's focusing on the wrong goals.

What I want out of lemmy is a credible Reddit alternative (so link aggregator with comments), that will be around long term with minimal disruption. It succeeds as a link aggregator, I'm worried about longevity based on its design.

Lemmy also had a goal of being on ActivityPub. Link aggregators (I assume) have a ton more shared data than something like Mastodon. But I don't know for sure, I haven't hosted either, it's just a hunch. Likewise, people already complained about having to deal with a ton of instances on Mastodon, which seems to be an adoption issue for new users. Those aren't solveable with lemmy as designed since they're quirks of federation, but it was probably a faster way to get something out.

I want to be able to see all communities, not posts or comments... together with a rought member and post count

Ok, that's pretty reasonable. I'm not sure how syncing those statistics would go without subscribing, but it's probably not a ton of work.

But isn't that essentially what [Lemmy Explorer] (https://lemmyverse.net/instance/lemmy.world/communities) is for? You get all of that info, and can narrow by instance if you want, even if your instance doesn't federate with it.

Not sure if it was you, but there's an issue for it with generally positive responses. I agree with Nutomic's concern that this could be a lot of data (world alone has >10k communities), but as another user mentioned, we could filter by active communities and drastically reduce that.

The reason we are all here and the ultimate goal of lemmy and the fediverse imo is agency, nothing else

That's pretty vague IMO.

I'm here because I want Reddit, but Reddit made some choices I strongly disagree with, such as:

  • effectively closing its API, which killed my favorite apps
  • selling user data (more recent)
  • "new Reddit," which harvests more data than before; also, new Reddit isn't open source AFAIK
  • sacking mods and probably replacing them with AI

I honestly don't care about federation or ActivityPub, I'm just here because it replaces a service I like but refuse to use. Maybe that's what you mean by agency, but for me personally, I'd just not use any social media if lemmy didn't exist (or maybe I'd go back to hacker news).

So that's the lens I'm seeing things through. I see Lemmy as a temporary stopgap, and I'd really rather not invest a bunch of time into something I think needs to be replaced. But I do believe in cleaning up my corner of the world, so I'll contribute here and there, and I hope to donate to my instance once they accept donations (I've asked).

Maybe we should connect on github or something

Perhaps. I'll save this comment so I can come back later if interested. I'm not in a position to really commit to anything right now, but perhaps starting a Matrix channel for like-minded people would be interesting.

I'd much rather keep discussions in some publicly accessible medium than over DMs, so hopefully someone else can pick up the torch when you or I inevitably lose interest.

That said, once I have a working project, I'll post it on a few relevant communities for review (probably under an alt). So you'll at least hopefully see that. I work primarily in Rust and plan to build my MVP with Tauri and Iroh, but I'm fairly comfortable in a variety of languages (Python and Typescript at my day job, lots of years with Go, looking into Haskell because FP rox and I want to study SimpleX chat).

If you want help on a project, post about it and I'll take a look. I'm comfortable with most fullstack stuff (databases, React, Docker, etc).

sugar_in_your_tea ,

How is the ad blocker? I use Brave at work for debugging frontend code, but I don't really trust the org behind it. But I need something in the Chromium family to test our app, and the ad blocker is nice (main browser is Firefox).

If Vivaldi's ad blocker is as good as Brave's, I'll switch. I'll probably keep Chromium on my personal computers though (all Linux) because Vivaldi isn't open source. I use it very rarely since Firefox meets my needs, so it's less of an issue.

sugar_in_your_tea ,

Cool, I'm playing with it. One concern is that it's closed source.

I'm not going to use it as a main browser most likely though, I'm happy with Firefox, but I need something for when websites refuse to work w/ it.

sugar_in_your_tea ,

Eh, several seems like a bit much, but diversity in general is good. I use Firefox because it solves my needs, but I need a Chromium-based browser for random broken sites.

sugar_in_your_tea ,

Does everybody have a personal beef with this disgusting person?

IDK, seems like it. But that still has nothing to do with the product itself. As long as the product is good and is FOSS, I can look past the people behind it.

It is mostly a rebranding of AOSP features with app permission controlling and firewalling.

That's a good thing IMO. The more an Android ROM deviates from AOSP, the more difficult maintenance becomes and the more problematic a toxic core contributor is.

There are only 3 things they ever did on their own as extras, and even they have basically no value in the grand scheme of things

That doesn't match with what I'm reading online. This comparison table lists a number of differences between the various projects, and many of those are important to me. That source claims to not be affiliated with any of the projects (I haven't done much due diligence though).

I don't really care if these changes were made by GrapheneOS themselves or pulled in from other projects, the end result is a more interesting product that has a fast response to security updates.

Look at Linux distributions, most aren't anything more than a set of configuration changes, packaging policies, and maybe a home grown package manager. Yet there are interesting differences between Ubuntu, Debian, Fedora, Arch, openSUSE (my preference), and others. It's all mostly the same code underneath, just packaged differently. That's what I want from an Android ROM, a secure, privacy-focused configuration.

It's not snake oil if the difference between ROMs/OSes are tangible.

This person is who you seem to like.

I never said I liked him, I said the website has valuable information. I don't really care who makes the recommendation provided the statements are independently verifiable, and they do a way better job of linking sources than PrivacyTools.

At the end of the day, I'm not blindly trusting anyone's advice and I'm looking at a variety of sites. I actually disagree with some of the recommendations, especially omissions, but I can usually find those when searching "X vs Y" with two recommendations from their site. Privacy Tools includes some odd suggestions, and it seems like they just throw a bunch of stuff that claims to be privacy-focused without doing much research (or at least they don't link anything).

Ken Thompson, co-creator of Unix and C, on why we should be able to trust the developer and NOT the code.

That's not my takeaway, in fact it's the opposite.

I don't believe in trusting developers, I believe in a mix of security audits, reproducible builds, eyeballs, code signing, and cryptographic hashes. Developers can be bought, accounts can be hacked, etc, but code can't. For example, I don't think Linus Torvalds would intentionally break Linux security, but that's not why I trust Linux, I trust is because it's the subject of a lot of security researchers, large organizations, and a team of proven-capable subsystem maintainers. If I trust the developers, they could sneak in a malicious Trojan horse like Ken Thompson mentioned and I'd just roll with it.

As the Russian proverb goes, "trust, but verify."

selflessly

Well, you certainly talk about it a lot. Maybe you're genuine, but that's kind of irrelevant. I trust technical sources, not personal attacks.

I'm not suggesting you create a wiki at all, I'm saying that having a community effort for a wiki could be valuable. The place for a mod, imo, is to police rule violations (ideally mostly responding to reports, not active policing), and those rules should come from the community they operate in. Issues arise when the police make the rules. Maybe it makes sense for a mod to coordinate that effort, but contributions should come from the community with proper sources and whatnot.

I will not lie or sugarcoat things

And that's commendable, I prefer transparency when I can get it.

My issue here is that I think you're letting your distaste for individuals (however well founded) supercede technical discussions. I think it's reasonable to put a footnote on the technical discussions noting potential conflicts of interest (e.g. Microsoft's push for TPM is commendable from a security standpoint, but there are concerns about NSA backdoors, chilling effect on alternative OSes, etc), but not reject projects entirely just because of an association with a distasteful entity. For example, most here don't trust Google, but that doesn't mean Chromium-based browsers are automatically bad. Doing so is just poisoning the well. Provide 2-3 points of independently verifiable, technical evidence of BS and that makes a pretty strong case to avoid something.

But that's my 2c. I absolutely thank you for your efforts and intentions, and I appreciate the transparency. However, that doesn't necessarily mean I agree with your conclusions, though I could be persuaded with technical arguments. Since you seem to believe GOS is all marketing fluff, perhaps we could start a community initiative (I'm willing to help) to verify claims of various projects. At the end of the day, citations and methodologies should carry the day.

sugar_in_your_tea ,

seems to get pressured by Daniel Micay (thestinger) himself and his minion/mod mbananasynergy in GitHub issues all the time

I read a few of those, and I didn't see any kind of pressure, just clarifications. And they provided information on not just GrapheneOS, but LineageOS and AOSP.

That's exactly how I would handle things as well if I was working on a project and someone publishes a comparison table that gets posted a few places.

As for why GrapheneOS is mostly green, I guess there are three explanations:

  • GrapheneOS is really that good
  • GrapheneOS happens to meet all the metrics the author is interested in
  • nobody has bothered adding other fields (most likely)

But it's also not all green, GrapheneOS gets red for Google Pay compatibility and device support, which are two pretty important categories for many people.

If you know of categories where GrapheneOS doesn't do well, by all means, suggest them in an issue or open a PR. It's the best comparison I've seen, and seems worthwhile to contribute to.

It is either impossible for one person

Well yeah, Linus Torvalds does almost no actual development, but he's involved in merging patches. That job has value, and the end result is that people trust his branch.

That's the same way I see GrapheneOS or any Linux distro, it's just a handful of patches and configurations on top of a common core. AOSP is a high quality OS and there are lots of independent researchers looking at it, so it's a good base to build on, with the main problem being integration with Google services. Forking it is a huge task, so they should stay as close to AOSP as they can while achieving their goals.

And yeah, if GrapheneOS is an embargo partner, that's has a lot of value, and I hope other ROMs are able to get that as well. Faster access to patches is a good thing.

Code can be bought. Developers can be bought

Sure, and that would likely be pretty obvious, and can happen to pretty much any project. But the community could easily fork it and move on if that happens. That's what GrapheneOS did when they split from CopperheadOS, and that's what'll happen if GrapheneOS is bought or compromised.

So the real concern isn't with copyright, but with Trojan Horse inclusions, which is where security researchers come in. GrapheneOS has documented how to audit their changes vs AOSP, and they share code with other projects, which apparently has uncovered more bugs. That sounds pretty responsible to me.

Micay wants to steer everyone away from Firefox towards Chrome

But Chrome is superior to Firefox on mobile in terms of security because Mozilla hasn't ported many of the security features from the desktop browser. That's a fact. There's also an argument that Chrome is more secure on desktop as well, but there are tradeoffs to that.

I don't see any evidence that Micay prefers closed source code (most of Chrome is open source btw), so I'm not sure where this is coming from.

Fuchsia is the future, where Google's microkernel

Well yeah, Fuchsia is incredibly interesting and mikrokernels have fantastic security and isolation properties. If Google can pull it off, it'll be a really interesting kernel to use.

However, there's a reason mikrokernels aren't very popular: they're kind of difficult to work with. It just so happens that having your drivers in kernel space is incredibly convenient and performant. RedoxOS is another interesting mikrokernels project, and both Windows and macOS' kernels are moving that direction (both are hybrid kernels).

So it's only natural for him to be excited by it, I'm excited too. I don't like Google much, but their FOSS R&D side is really interesting. I don't know if he's a "fanboy" (I haven't bothered to do more than a cursory read of the links you've provided), but that's only relevant if it impacts his security choices (e.g. trusts Google with user data "for security").

feature rebranding plus firewalls, app permission modifications and stuff you can do without rooting, I see absolutely no reason how it claims to be better than anything else

Sane defaults has a ton of value. Most people don't know how to configure an OS to be secure.

It's not the only option obviously, that's just stupid dogmatism, but it is a good option, and perhaps the best option out of the box. There are also security features that Pixels have that other phones either don't or lock away from users, so GrapheneOS can have even better defaults than others due to the hardware it's limited to (e.g. the open bootloader). Whether that matters to you depends on what you're looking for.

So I'll agree that dogmatism should be policed, but ideally with reminders and not comment removals. Maybe have a three strikes policy or something if you're worried about repeat, intentional offenders.

why Google hardware is backdoored by NSA

I'm guessing most phones are, or at least compromised by the NSA. The NSA's job is to maintain backdoors to go after national security threats, so there's no reason to expect any default configuration to protect you.

Projects like GrapheneOS try to protect you as much as they can, but at the end of the day, anything that touches a network is going to risk.

That's why I'm so excited about Linux phones, the Pinephone and Librem 5 both have hardware kill switches for times when you're worried about surveillance.

Snowden lives in Russia to stay alive

Yet Snowing allegedly recommends GrapheneOS. Unless you think Micay is bullying Snowdon as well...

https://sh.itjust.works/pictrs/image/449f5fb4-b78c-4c2e-89b4-445643697b04.png

That said, I don't put a ton of stock into what Snowdon has to say. He's not a security expert, he's just a contractor who got away with government documents. He's careful, but fairly average.

Apple's security chips have all been pwned, and their latest one also got pwned recently

Sure, that's going to happen because they're a big target. That said, it's unlikely to impact regular users because those attacks are quite sophisticated and often caught by security researchers pretty quickly. The Android market is more sketchy because there's so much more diversity to the point where security researchers are going to miss a lot.

Regardless, staying up to date on security patches is the best line of defense, and sandboxing everything is the next line. GrapheneOS provides both.

"security by obscurity"

Ok, you lost me here. What they're providing is security by layers (sandboxing, reducing attack surface by having less stuff running, etc) and rapid security updates from upstream.

The proper solution is to completely open source the telephony stack, but that's not happening for any phone (though the Pinephone community is reverse-engineering theirs, so that's cool).

sugar_in_your_tea ,

propaganda dissemination

I read or skimmed each of your links each time. I'd quote from them, but it's incredibly annoying since that particular link is an image and the others are massive walls of text (that mostly attack the character of individuals, not technical work).

I'll quote one particular part that relates to what I'm talking about:

Attack the message rather than the messenger

You seem to do the opposite. I agree those people suck, but I don't agree that implies their work sucks.

There is nothing "out of the box" about flashing a custom ROM on any phone

Out of the box means what you get right after installing the ROM. It's the set of defaults. Like on a Linux distro, it's the firewall configuration, default apps, memory allocator, etc.

Modifying app permissions and using a strong firewall can be done without root

It's still not going to get you everything GrapheneOS, DivestOS, or CalyxOS provide. A firewall isn't going to protect you from an app accessing files it shouldn't, memory exploits from an attacker, or fingerprinting with your MAC and IP address.

Custom ROMs provide a level of protection that users messing with permissions and firewall settings won't get. Here's how I see it, using the Pareto principle:

  1. 80% of privacy benefits with app permissions and a firewall
  2. 80% of the remaining benefits by installing a decent custom ROM (GrapheneOS, DivestOS, CalyxOS, etc)
  3. GrapheneOS will leave you a bit more secure than other ROMs due to per-connection network spoofing, storage segmentation, EXIF metadata stripping (could be done with an app), etc
  4. Linux phones - no oversight from any tech company (huge privacy win), complete control over the OS, etc

As you go further down that list, you get more painful tradeoffs. So you need to decide how far down that list you want to go.

I think GrapheneOS has the best trade-off of usability vs security and privacy, but everyone is different. For some people, even LineageOS has too many tradeoffs.

He did all the development needed to be done.

I don't see how that's relevant at all. Linux was incredibly insecure, had very liked hardware support, etc until others joined. These days, most code comes from manufacturers building drivers or large tech companies (like RedHat) driving subsystem development (BTRFS, systemd, etc).

These days, the value of a Linux distro has very little to do with the developers (people who write code) and everything to do with the maintainers (people who build, test, and publish packages).

Google partnership is avoided by other custom build makers like LineageOS for a reason

Yeah, cost.

I don't know the requirements, but I know there's a trust system there. If you break the embargo and release early, that gives attackers who didn't know about the vulnerability a window to attack participating projects (i.e. the rest of the Android ecosystem) before the embargo is lifted. Here's an example of OpenBSD getting in trouble for patching before the embargo was lifted.

Perhaps those other projects just don't have the manpower, organization, or funds to get a partnership. Partnering with Google on security embargoes likely has no impact to the privacy of a given project's users, it merely has expectations on the participant.

Tor Project avoids Chromium base for both desktop and mobile browsers for multiple reasons, one of them being security

Tor cares more about privacy and anonymity than security, and Firefox likely provides a stronger base for that. But security is another issue entirely.

After a brief review of that linked Tor page, here's what I saw:

  • the first part is about an extension of Chrome, not a fork of Chromium
  • almost everything is related to privacy, not security

Here's DivestOS's take, which ships Gecko-based Mull on why Android Chrome has superior security. The big one is per-site process isolation:

Firefox calls per-site process isolation Fission and is enabled by default on desktop. Fission is not yet enabled by default on Android, and when manually enabled it results in a severely degraded/broken experience. Furthermore Firefox on Android does not take advantage of Android's isolatedProcess flag for completely confining application services.
Standalone Chromium based browsers strictly isolate websites to their own process.

That said, I agree with DivestOS devs here:

It is an important hardening feature, but the browser isn't completely insecure without it assuming it is up-to-date and that you aren't on the receiving end of targeted/zero-day attacks.

I also care more about per-site data isolation:

The goal of per-site data isolation is to prevent say a third party script from being able to store data and use that to track you across many websites, instead any data set will be keyed to the website it was set from.

...

Chromium calls per-site data isolation (network) state partitioning and is not enabled by default.

It's a trade-off between security and privacy, and Chrome arguably has better security, while Firefox arguably has better privacy. Both are quite secure, so I prefer Firefox.

It risks bricking

That's not a security or privacy issue, and is essentially the same across custom ROM vendors.

Snowden is not a security expert, but an OPSEC expert.

He's neither. He was a contractor for the NSA who had way more access than he needed (NSA fail), and was under less scrutiny vs full time employees. I think he largely got lucky and only got away once. I've read both his account and an alternative perspective and that's my assessment.

I think he has valuable things to say (and should be protected as a whistleblower), but I do verify what he says.

shutter sound

From your link (edit to post concerning the OpenCamera alternative):

The fault is with the device for not supporting standard method for cameras to disable the shutter sound on Android.

OpenCamera doesn't have as good of quality as either the system camera or Pixel Camera included in GrapheneOS (both seem to be based on upstream code).

My guess is that this shutter sound issue is from upstream, and likely only takes effect in Japan. It's a miss for sure, but the GrapheneOS docs make it clear that the goal is to have the same features as the original camera, but with some privacy and security features on top (stripping of metadata, fewer permissions, etc).

But you really shouldn't be using the built-in camera anyway for OPSec, there's too much risk of OTA updates, metadata (tons of sensors), etc. There are smaller cameras if you need something discrete, and OpenCamera may be good enough for even sensitive uses.

That said, good example of a miss by GrapheneOS, I'm interested in any more you might have. That's an odd one I wouldn't have thought of (I rarely use my camera).

Android's zero days cost more than iOS' zero days

This is an unfair comparison imo. Android gives users and apps a lot more system features, so the attack surface is much larger. I'd have to look at the report, but it's probably counting all costs across vendors as well, which have a lot of different hardware.

I'd be interested in narrowing it to just Pixels (or any other phone line) vs iPhones. That's a bit more charitable toward Android since Pixels aren't nearly as popular as iPhones, but it's at least fair from a number of supported models standpoint.

it is Apple that is sketchy, not Android

Both are sketchy. Apple is sketchy because it's closed, Android is sketchy because it's run by an ad firm and tons of data is run through Google's servers (notifications, Play services, etc).

I'd much prefer a Linux phone (Pinephone Pro ideally) to Android, but usability counts too, and Linux phones just aren't there yet.

on Google hardware with proprietary "security" chips that it refuses to open up

Every phone has proprietary hardware they won't open up, the most important of which is the modem. Even Linux phones have this issue.

So I have to ask myself what Google gets out of screwing me with their security chip. It doesn't help them get more ad revenue, and if there's a breach, it could scare customers away from using their hardware. So I don't see any special motivations for Google to compromise this and other phone vendors not to. Google surely doesn't need the NSA's money either.

If you'll look, you'll find Google getting into hardware security tokens (Titan), offering FIDO U2F on their products, etc. They want more people trusting their security so they can collect more interesting data, so it's more likely for them to fingerprint through things like Play services (to serve more relevant app recommendations) than to compromise security.

That said, if you know of a provably more secure device, I'm so ears.

Why is it the only custom Android build to get this?

That's a good question for the other custom Android projects. I'm guessing they haven't put in the effort needed or don't have the infrastructure to comply with whatever Google needs to include them.

I'll have to ask their maintainers.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • random
  • All magazines
    •