Forgot your password?
typodupeerror

Comment Re:Integral layer of the Trusted-Computing/DRM sta (Score 1) 33

Every time people hear what it actually involves is outrage and opposition, at least all the way back to when Intel first announced that they wanted to hardcode identity numbers inside CPUs in 1999. But the corporations involved have been relentless, and have sunk countless billions of dollars steadily forcing it forwards, and building front organizations to obfuscate and whitewash it.

With Windows 11, Microsoft was finally able to FORCE Trusted computing hardware into every new computer. Not just every new Windows computer, but every computer.

Every new Intel PC CPU has built in Trusted Computing enforcement hardware. Every new AMD PC CPU has built in Trusted Computing enforcement hardware. Every new ARM PC CPU has built in Trusted Computing enforcement hardware. The only processor lines that DON'T have it are the microcontrollers.

There are some unlocked smartphones available, but as far as I can determine it's literally impossible to buy a smartphone that doesn't have hardware trusted computing built in.

I specified that enforcing Trusted Computing at the internet access level is still a long term goal, they couldn't get away with it today. However they are well on the way to success. Virtually all new hardware supporting trusted computing, all the front groups rolling out standards and systems, and as it gets incorporated into things everyone is going to increasingly running into situations where they get locked out of stuff if they're not Trusted Computing compliant. Streaming already restricts you to the worst quality if you're not compliant, and it's only going to get worse as pre-Win11 computers fade out and as more things require it.

Comment Re:Looking forward to this (Score 1) 207

This is awesome for renters.

And rental homes, at least near me, are usually lacking in insulation since the owner isn't paying the utility bills and the typical landlord has no interest in improving their property if it doesn't provide them an immediate financial benefit.

Being able to help offset needing to run the air conditioner more frequently would be nice.

Comment Re:Dual purpose age-bracket signal :o (Score 1) 126

I'd hardly call exact date of birth "low information content".

And yes this does reveal exact date of birth, regardless of the bullshit obfuscation that it supposedly only reports age range. The server simply tracks the reported result every time the user connects, and on some specific day the result CHANGES to announce their date of birth.

-

Comment Integral layer of the Trusted-Computing/DRM stack (Score 1) 33

This is based on SLSA (Supply-chain Levels for Software Artifacts), brought to you by the same fuckers making Trusted Computing and the TMP (Trusted Platform Module). It's part of the same shitstack to prohibit you from altering your software and to lock you out of your own files, and to send spy reports out over the internet so you can be cut off if you "fail" the Trusted Computing check.

The software can use a TPM's (Trusted Platform Module) Sealing function to encrypt your data such that it's impossible to access your own data if the software is modified. It can then pass control over that data only to software updates that carry a signed security certificate from Broadcom (or any other company using this system).

It is no longer open source, your system no longer works as you can no longer access your Sealed data if you change so much as a single letter of the code. Even recompile unaltered code won't work, unless you magically manage to get your build environment absolutely identical to the company's build environment and get byte-for-byte output. Even that may be impossible with the newer levels of non-deterministic compiler optimizations.

Also, with TMP's Remote Attestation feature can be used to transmit your machine's software configuration over the internet, so that you can be cut off if your system doesn't match Broadcom (or other company's) cryptographically signed certificate.

And then of course there's Network Access Control (NAC) / Trusted Network Connect (TNC). In the long term, the goal is for ISPs to use NAC/TNC to interrogate your computer for Trusted Computing compliance, and deny you any internet access whatsoever if your machine isn't compliant. Software with this sort of "security" certificate would pass inspection, while any attempt to alter the code would be detected as "tampering". You then get "quarantined". What "quarantine" means is that you are denied internet access - with the exception that you do get very restricted access which can only be used to download the approved software to "fix" your computer into Trusted Computing compliance.

Comment no buy (Score 2) 185

I am actually thinking about my next BMW (my current one is getting old). Knowing this, the iX3 is off the list.

BMW had a great control system, intuitive, possible to do many things without even looking. "Young people prefer" ? Really? The young people that actually buy your cars? Well, they'll learn and not prefer touchscreens anymore on the 2nd car.

Comment Re:Put your mouth where your money is, Bill. (Score 1) 109

AI isn't actually smart. It's an at best average intelligence thing with an insane amount of available knowledge. Like the village idiot with eidetic memory.

As soon as you do any work with AI that's not available as a ready-to-apply solution from its training data, you begin to notice how much you need to correct it, keep it on track, remind it of basic constraints you already mentioned five times, etc. - it's performing at a level I'd accept from an intern, but not from a co-worker.

What it does have is data. Tons of data. Any question that would take you and me half an hour on Google and Wikipedia to answer it can answer in 10 seconds. That's a great tool. It is not intelligence, however.

Comment Re:No.... (Score 1) 83

lol

Welcome to the 21st century, you might have to catch up on a few things. Start with Mozilla Media Engine and AVFoundation / WebKit Media Stack.

Your website sends me an H.264 stream (or whatever you decided you'll use). It doesn't need to know shit about my graphics hardware.

Comment Re:No.... (Score 1) 83

Congrats, you just broke every video player on the internet. Nothing fullscreens anymore.

Complete bullshit. Even for fullscreen video, the website doesn't need to know my screen size. It should tell the browser "here are the resolutions I can offer you" and the browser picks one of those. All the website needs to know is if I prefer 1080p or 4K. And I might pick 1080p even if my screen is 4K because, say, the hotel wifi is slow.

You just broke layout, encryption, media delivery, fonts

Complete bullshit. None of these things break if I don't tell you my OS. I've got extensions in this browser that can fake my agent string and nothing breaks. Fonts? Are you kidding me? Be more specific, what exactly do you mean by that?

Errr it's the browser rendering engine that actually tells the website the graphics capabilities.

And there's no reason it needs to. What legit use case requires a website to know whether my GPU is an NVidia, AMD, Intel or whatever chip? A shitload of the capabilities are only needed for 3D scenes (like max texture size), which is 0.1% of the websites I visit - they can ask and I can whitelist just them. Why does it need my refresh rate?

Again: All of these things have a legit use case, sure. Often exactly one. That is rarely if ever used. There's absolutely no reason that EVERY WEBSITE can query information that only one website in a thousand actually needs.

You don't tell the baker, florist and car dealer your shoe size just because the shoe shop needs it to serve you, right?

Why? You'd be such an irrelevant bit of noise in the dataset.

Because I want to be irrelevant to the fucking ad industry. I don't want them to track me, profile me and try every trick in the book to manipulate me into buying shit I don't need.

Comment Re:No.... (Score 1) 83

Your browser leaks uniqueness out of every orifice and every single one of those things has a legit use case.

Sure, the same way that putting a finger into another man's ass has a legit use case (prostate examination) - but that doesn't mean I want every man to do that to me all the time.

The point is that tech companies are exploiting the legit use cases by abusing them when you're not in that use case. Basically, they think they can finger up your ass whenever they want, because once a few years ago you consented to a doctor to give you an exam and maybe you will do that again in the future.

which is capable of

I don't mind it being capable of. I mind it doing all kinds of shit without telling me and without giving me a choice. For example, I absolutely do not want websites to access my microphone. Or even know that I have one. For the once-a-year case where I might actually use that, I can enable it.

The problem is the same problem that the cybersecurity field has been fighting for 40 years: Permit All being the default.

Comment Re:No.... (Score 1) 83

It doesn't NEED to know any of these things. My browser knows the window (not screen) size and if your CSS is well-formed, it'll manage or maybe your page looks shit if you build it shit. It needs to know my OS only if I want a download link, not on every page I ever visit. It doesn't need graphics capabilities unless it wants to bypass the browser rendering engine, in which case it should ask for permission or fuck off.

The thing is that we give up too easily and the major browser manufacturers (one of which is an ad company themselves) are complicit.

I want "fuck the ad industry" mode, where the browser generates random but plausible values for every non-essential information a website requests. Different ones every 5 minutes.

Slashdot Top Deals

If a thing's worth doing, it is worth doing badly. -- G.K. Chesterton

Working...