I don’t necessarily disagree, but the fact they walked back the original policy because it was so unpopular leads me to believe they are trying to save face by implementing a PITA way of enabling unknown sources, such as through ADB.
The reason why I suspect that is because even with the original policy change, they were still going to allow unsigned apps to be installed via ADB.
But I guess we’ll just have to wait and find out.
They reversed course, so it’s not an immediate issue.
But to answer your question, they would have provided an OS update to only allows app installations from verified developers, no matter the source.
To get verified developers have to submit identification to Google and go through a Google process.
So it wouldn’t matter if the install source was a third-party repo, or Google Play, the system would not have installed any applications not signed by a Google authorized certificate.
That becomes very problematic because it gives Google the ability to restrict applications outside of the Google Play Store ecosystem.
They were copying Apple’s playbook from the EU wherein Apple was legally mandated to allow third-party app stores, and in response Apple required all apps to be signed by an Apple verified developer certificate, no matter the repo.
And wouldn’t you know it, Apple either revoked or would not provide certificates to developers of apps Apple didn’t like, such as BitTorrent clients.
It’s a QEMU specific vulnerability.
I skimmed most of the article, glad to see it’s been patched.
It looks like the attack vector requires access to a VM on the host machine i.e. public cloud/VPS.
So maybe not a huge risk exclusively for self hosted configurations?
Depends on what your metrics are. If they are for longevity and long-term business health, sure.
But I don’t think that’s how they’re measuring success. They are maximizing shareholder value in the short term, and any medium to long-term problems will be concerns for another set of C-Suite vultures as the current ones will have already moved on, or retired with their golden parachutes.
I can almost assure you, it was not considered.
Nutanix is a mature platform, but more importantly, they’re a mature vendor, which means support contracts with SLAs.
Others may have better, or fancier solutions, but I’m a fan VPN -> Home Network -> VNC over SSH/TLS for Linux boxes, and RDP for Windows.
Again, none of VNC or RDP ports or services are ever exposed externally, and even on the LAN, they require authentication and use secure tunnels.
Full disclosure, I haven’t used RDP in a while and I don’t know what version of SSL/TLS it comes with anymore.
I know their are self-hosted AnyDesk style options and maybe they’re better than my approach, but I’ve never used them so I can’t really speak on that.
Stop using TeamViewer. If you can’t setup your own secure self hosted remote desktop, then at least use AnyDesk.
I’m not claiming they’re perfect, or that any SaaS RD provider is good, but TeamViewer is right there with LogMeIn as the worst of a bad bunch.
One way they conduct themselves is by using the politicians they’ve purchased to advocate for forming public-private partnerships, in areas where they shouldn’t exist, which they can then legally siphon off the resources from.
I disagree on the private sector aspect of this, but I agree on the democracy part. Although, I don’t really view America as true democracy at this moment in history, but that’s besides the point here.
Fusion technology is at a point in its life cycle where it needs to be a public sector project. There is no path to profitability in the near-term, that would justify private sector involvement, except as a means to extract profit from the very expensive research process of even making this technology feasible.
Not that I’m against the private sector within the nuclear power industry. I’m very excited to see what they can do with SMR technology. I’m just extremely skeptical of most private-public partnerships, especially in cases like this.
Fusion reactors are incredibly complicated… This is a research reactor, with the goal of figuring out how to create sustainable fusion for real world uses by 2050.
This is not a performative action for a determinative outcome, this is aspirational and has no guarantee of achieving its goals, which is good. This type of research and science needs to be funded, even when it may fail.
Maybe this will spurn competition between powers to accelerate their own fusion reactor research, and create a virtuous cycle that accelerates this technology becoming a major source of green energy in the near, or medium-term, future.
I use both of them everyday. I’m using one of them right now.
Haven’t had that issue.
You’re on Android use NewPipe and it’s forks, personally I prefer Tubular and PipePipe.
Periodically YouTube will break, but both of those forks, as well as new pipe prime, update fairly quickly.
GrayJay is interesting… It has different feel and feature set than newpipe, but it’s worth using. I will say I get more login errors with GrayJay, but closing the app and reopening it resolves it.
All the piped apps will be in f-droid/droidify, you can download GrayJay directly, or just scan the QR to add the repo to a FOSS repo manager.
deleted by creator
I believe Tails already supports I2P, you just have to enable it in the terminal and reboot.
I don’t know who this developer is, maybe they are well-known and well regarded.
I just know that for an OS, better to be safe than sorry and go with and established and well respected project such as Tails IMO.
Not trying discourage users from trying it, just that they should be mindful of the risks and adjust their behavior accordingly.
Not everyone has a safety deposit box, or the ability to access a proper and secure off-site storage.
And if you’re just keeping those in your house, then fire, flood, and other incidents can destroy all copies at once.
Nah, I’m with you, except I use BitWarden.
There are somethings either worth paying someone else to host, or where you trust a 3rd party more than you’re own setup. I realize other users may feel different, but ultimately it’s a judgement call
BW has been a pretty great opensource company, and it’s worth my $10/yr for premium.
Okay … All of that could be true, and then some, and it still wouldn’t give the DMCA any legal jurisdiction in Germany, or Mexico, or anywhere else that isn’t America…
Is this thread about some moral invective? Or is it about the DMCA?
I’m sorry, is this about Independence Day? Or the DMCA?
Like in a kennel…?