They can't exactly modify older devices to include everything grapheneos mandates. Simply having an unlockable bootloader isn't enough. Why do you think grapheneos developers declined to support fairphone? Or why they will likely never support pixel 11?

They could easily make it work on these phones, but they don't have the hardware to support the entire security model the OS built its reputation on, so the developers don't want to bother. It's kind of like how you're only interested in dating tubgirl because the others just won't do exactly what you want.

And? Grapheneos is incredibly easy to install. All you need is another device with a web browser and a USB cable.

https://grapheneos.org/install...

The installer literally walks you through it. I installed grapheneos on my pixel 10 fold using my pixel 8a. The only thing you can't use to install it from is iOS, because all of the web browsers that run on iOS are dogshit.

I dunno...it's kind of telling that this is between Hawaii and California. One thing we do a lot here in California is litter. Like...everywhere. There's this sign off the side of a freeway onramp that says $1,000 fine for littering and...there's a big circle of trash surrounding the base of it. Eventually that shit does make its way onto the beaches somehow. Sure, the wind blows inwards, but it all collects into the LA river, which doesn't look anything like a river, where all of the storm water gets flushed into the ocean, taking the trash with it, instead of into storm basins where storm water can replenish groundwater and the trash stays on land, basically the way real civilizations do it.

Perhaps everybody here isn't lying about being green after all, because they're just trying to re-engineer the oceans?

And these aren't even that expensive either. Shit, I was on a pixel 8a last week until I bought a 512gb pixel fold 10 on Amazon for almost right at $1k. Technically a used phone since it was a return, but whatever. Either way, first time spending anywhere near this on any phone, period, but my eyesight isn't getting any better, so on-demand tablet sized screen it is.

People who work for a living get grapheneos, rsilvergun gets Lizzo.

Just don't get a pixel 11 anything. Not only is there little to no improvement, for the same cost you actually get less RAM, and to save itself $5 per device, Google stripped out the MTE function on the CPU, which is what grapheneos needs for its hardened malloc, basically because Google doesn't really use MTE in stock Android. I was thinking of the pixel 11 pro xl, til I learned that, and learned that Google removed physical SIM slots on all but the fold phones, hence I have the fold a shot to begin with. It's pretty decent, IMO.

Skia perhaps.

Good, Discord takes a ridiculous amount of time to start up these days.

Like what? A tactical swat team? /Facepalm

The irony that you're basically agreeing with what GGP said is not lost.

Good question, why DO you guys do that?

Yeah man. The honor system works great. Abolish all law enforcement. True communism has arrived and the state has withered away. I must have just missed the memo since I'm not on bluesky.

...happen again.

Voters get really mad at a party and hand control to the opposite party. And there is much rejoicing. Then the new party turns out to be just as bad but in different ways, gets voters really mad, and the vote swings to the other party. Wash, rinse, repeat.

Of course, Republicans and Democrats alike hate to hear this, because each thinks their own party is right about everything and the other party is wrong about everything, and insists that the voters handed the vote to the other party not because they had legitimate reason to be angry, but because they are all moral reprobates and complete morons.

So, yeah, both sides.

I don't think so. There are ways of tightening the security model so that even attacks on a compromised system are highly impractical.

This isn't reinventing the wheel. The technology already exists, and it's already in widespread use.

No, no, and...good lord...no. Honestly I'm not quite sure where to start telling you what's wrong with this idea, but in fact, THIS is reinventing the wheel, not to mention sticking a square peg into a round hole. Why do I say that? A lot of reasons...Payment cards don't have a standard protocol usable to sign arbitrary messages. Technically there's kind of one usable by the terminal, but you're talking 32 bits of entropy, and even then, that's a ... maybe but don't count on it? Because it depends on the card. Some cards may have additional applications you can select and...ahh...don't bother. Those are a fucking mess of proprietary shit, and that's before you even get to the bureaucratic red tape. I've written software that does the authentication bits using FIDO2 over NFC, and thousands currently use it in a production environment. And you know what? It's really easy, and really well documented. You don't need to pay anybody for the documentation, or for permission just to implement. There are paid certification programs, but they're only necessary in some very limited circumstances that most people, even most developers, don't need to worry about.

But...well...Let me give you a little preview of what you're asking for with payment cards:

https://www.eftlab.com/knowled...

Now...of those application identifiers, how many of them, to your count, are for these payment cards that you're telling me you want to use? After you do that, go dig up the documentation for each of them, if it is even public at all or you're lucky enough that somebody reverse engineered it. Namely, the PDUs, their inputs, their outputs, including all TLVs or other command payload length specifiers that each may or may not deal with. Each of them are different, some are way, way different.

Oh, and we haven't gotten to implementation yet. And how many of these have attestation keys separate from the ephemeral signing keys? Make sure you get the PDUs from all of those as well, plus any relevant gotchas and quirks.

Oh oh oh and...we haven't even gotten to user privacy yet! What do you plan to do to ensure that, say, your payment card that you used to authenticate to say, protonmail, can't be used for say ad companies, governments, etc, to know that this same card wasn't also used to authenticate to ilikeboobies.com? (oh wait nvm, that's a real website, but you get the idea...) Did I mention that FIDO2 already has very strong protections against exactly this kind of thing?

And this barely scratches the surface. Nor is that AID list anywhere near complete. There probably aren't even any that are complete that you'll find anywhere. Even if you throw up your hands and say "ok so the card can only be used by the issuer's website! It'll be like payment terminals!" except for the fact that you'd need to permit the web browser to have direct access to the transport (i.e. PCSC) so that raw APDUs can be exchanged...umm....yeah, that sounds reeeaaaallly secure...

So tell me again how FIDO2, a technology that has already been in use for over a decade, doesn't rely on obscurity, and can be used to authenticate with literally anything, including things that aren't even connected to the internet at all, reinvents the wheel, but your payment card based authentication somehow does not? In fact, I'd even argue that the key card tesla made is, in many respects, an even more ideal choice for this than a payment card, because at least it can do message signing.

So why wouldn't you just say "reform the police"? Perhaps English is a second language to you, because that isn't what "defund the police", or another popular slogan at the time "abolish the police" means. At all. And I recall several major cities literally reducing police funding, with some elected city leaders seriously talking about having none at all. One mayor in particular literally ordered the police to effectively abandon a large portion of her city during a protest, including the literal police department building. She called it the "summer of love", describing it as peaceful. The rest of us remember it as either CHAZ or CHOP, and anything but peaceful. Bottom line: It ended about as well as you'd expect She could have ordered the police to return at any time, namely before people started dying, so instead she waited until well after the fact.

So...why would a Seattle mayor do that? What was the motive here?

And what's a "mainstream democrat"? And are any of these "mainstream democrats" mayors or city council? Because that's who decides whether this would even happen, given they control those local budgets.

If anything, I think you'd want to increase police funding, at the very least to provide more training for things like de-escalation, and being able to offer higher officer salaries to be able to retain officers that would otherwise seek more pay elsewhere.

But nobody asked for that, did they? Which "mainstream democrats" did ask for it? Which ones actually did it?

In Massachusetts, there's an elected body called the Governor's Council that has veto power over pardons.

I'm starting the see the wisdom of this.

Constitutional amendment? I'm in if you are.

https://ocasio-cortez.house.go...

Oh look. A sitting congresswoman literally calling to "defund the police" on her own official government website.

Followed immediately by the same bullshit excusemaking:

Yeah like rich suburbs and high poverty urban areas have the same exact kind and amount of criminal activity, but the suburbs just flipped the evil bit to off and that's all we need.

See my other posts about politics being a magnet for morons.

If anarchist thugs were shooting at me, I might be a little testy about #resistance karens tracking my movements as I go about my work too.

Now how do we prevent official misconduct in this environment?

Maybe go back in time about 40 years to before the reagan amnesty and knock some sense into the gipper before he signed off on two generations of normalized casual lawbreaking re: border enforcement.

But let's also make the data they record useless for anything other than cherrypicking!