Every time people hear what it actually involves is outrage and opposition, at least all the way back to when Intel first announced that they wanted to hardcode identity numbers inside CPUs in 1999. But the corporations involved have been relentless, and have sunk countless billions of dollars steadily forcing it forwards, and building front organizations to obfuscate and whitewash it.

With Windows 11, Microsoft was finally able to FORCE Trusted computing hardware into every new computer. Not just every new Windows computer, but every computer.

Every new Intel PC CPU has built in Trusted Computing enforcement hardware. Every new AMD PC CPU has built in Trusted Computing enforcement hardware. Every new ARM PC CPU has built in Trusted Computing enforcement hardware. The only processor lines that DON'T have it are the microcontrollers.

There are some unlocked smartphones available, but as far as I can determine it's literally impossible to buy a smartphone that doesn't have hardware trusted computing built in.

I specified that enforcing Trusted Computing at the internet access level is still a long term goal, they couldn't get away with it today. However they are well on the way to success. Virtually all new hardware supporting trusted computing, all the front groups rolling out standards and systems, and as it gets incorporated into things everyone is going to increasingly running into situations where they get locked out of stuff if they're not Trusted Computing compliant. Streaming already restricts you to the worst quality if you're not compliant, and it's only going to get worse as pre-Win11 computers fade out and as more things require it.

I'd hardly call exact date of birth "low information content".

And yes this does reveal exact date of birth, regardless of the bullshit obfuscation that it supposedly only reports age range. The server simply tracks the reported result every time the user connects, and on some specific day the result CHANGES to announce their date of birth.

-

This is based on SLSA (Supply-chain Levels for Software Artifacts), brought to you by the same fuckers making Trusted Computing and the TMP (Trusted Platform Module). It's part of the same shitstack to prohibit you from altering your software and to lock you out of your own files, and to send spy reports out over the internet so you can be cut off if you "fail" the Trusted Computing check.

The software can use a TPM's (Trusted Platform Module) Sealing function to encrypt your data such that it's impossible to access your own data if the software is modified. It can then pass control over that data only to software updates that carry a signed security certificate from Broadcom (or any other company using this system).

It is no longer open source, your system no longer works as you can no longer access your Sealed data if you change so much as a single letter of the code. Even recompile unaltered code won't work, unless you magically manage to get your build environment absolutely identical to the company's build environment and get byte-for-byte output. Even that may be impossible with the newer levels of non-deterministic compiler optimizations.

Also, with TMP's Remote Attestation feature can be used to transmit your machine's software configuration over the internet, so that you can be cut off if your system doesn't match Broadcom (or other company's) cryptographically signed certificate.

And then of course there's Network Access Control (NAC) / Trusted Network Connect (TNC). In the long term, the goal is for ISPs to use NAC/TNC to interrogate your computer for Trusted Computing compliance, and deny you any internet access whatsoever if your machine isn't compliant. Software with this sort of "security" certificate would pass inspection, while any attempt to alter the code would be detected as "tampering". You then get "quarantined". What "quarantine" means is that you are denied internet access - with the exception that you do get very restricted access which can only be used to download the approved software to "fix" your computer into Trusted Computing compliance.

The Year of the Linux Desktop was 1995, for me. I used to spend time advocating Linux. You can still find my old posts on comp.os.linux.advocacy and many mailing lists. But two things happened: I didn't have time for it due to family/career and Linux just got so easy to use it didn't really need my advocacy or help anymore. It has been on a very slow but as it took over pretty much every market *except* the desktop and nothing short of legal action against Microsoft or enforcement of open standards on the part of the government was going to change that.

Imagine getting millions of people to work for free over the course of 40 years implementing what the people in the product want instead of a corporate agenda and giving the result away for free and still only having single digit marketshare! That's a clear sign of a broken market.

You beat me by a matter of minutes, it would seem.

So what are the 500 CVEs?

We MUST be able to inspect and age verify every AI slop porn image to protect the fictional children!

-

If you read the article carefully, they are talking about lenses THINNER than a hair. I see several of the posts here thinking the width/radius of the lenses is this small, a reasonable mistake given the way this was written. Having a radius that small would severely reduce their light gathering ability, requiring very bright light or very dim images or very long exposure times.

-

I'll just leave this here:

https://github.com/wasi-master...

"misconfigurations" If you use a trivially guessable root password or install sketchy vulnerable third party software all bets are off regardless of how good Linux is. But I bet that had they had SELinux enforcing or running fapolicyd (standard built in security features) they wouldn't have been hacked.

PHP has been a disaster since the beginning. People start out as novice programmers who don't know about better with PHP and it happily lets them shoot themselves in the foot. It's as if the language was specifically designed to encourage it, even. Also check out https://reddit.com/r/lolphp for a long list of PHP fails. Go update your WordPress and all plugins, too. You know it needs it.

I am founder/mod on 8 subreddits. They are not censored or "managed" in any way other than removing obvious commercial spam and harmful scams solely per my own personal preferences as the moderator. I've never had any communications with reddit corporate.

Also, fuck you /u/spez for turning off the API for third party apps.

https://reddit.com/r/lolphp