Snuupy · HackerTrans

Snuupy

no profile record

投稿

(Android) Key Attestation Leak

apvi.issues.chromium.org

2 ポイント投稿者 Snuupy2 年前1 コメント

コメント

8 か月前議論

I had this issue too, try grounding the charging cable so the static discharge has somewhere to flow

8 か月前議論

My sweet spot is the Wooking X16 - 7840HS/8845HS from taobao in China for ~500usd

bad trackpad, bad touchpad (bring your own for both), great thermals/performance, good screen, bad speakers, unbeatable value

no usb4 (but has 1x usbc)

I refused to get another thinkpad ever since the T14 AMD gen1 firmware debacle where plugging in a Dell usbc dock would cause the entire device to hard reboot

their firmware garbage is off-putting

I considered framework but the $2k+ price point to me was unreasonable

it's literally cheaper for me to carry around the X16 + kb + mouse/trackpad than to buy a framework 16 (I know that's not the point, but still)

https://4pda.to/forum/index.php?showtopic=1076401

昨年議論

Cloud vs. Edge: Why choose a local NAS over iCloud, OneDrive, etc.? Cost, privacy, performance?

Cost, privacy, sometimes performance, mostly because I can run it the way I want it to, so control

Use Case: What tasks would your NAS handle? Jellyfin, Frigate, backups, AI/ML?

My current NAS does all of it, jellyfin, home assistant, backups, LLMs, all the docker apps, etc.

Performance: How key is CPU power, power efficiency, or upgradability (e.g., PCIe slots)? Your LAN speed (1, 2.5, 10, 25 Gbps)?

I have multiple minipcs, 7840HS, N150, etc. NAS is a 5825U. Don't care about pcie slots, can always get an egpu dock if I want later and the 780M is "good enough" for LLMs especially since vram is no longer the limiter with GTT (can do ~112GB VRAM on a 7840/8845HS w/ 128GB RAM if one wants to, but t/s is slow)

LAN speed is just gigabit. If I wanted to upgrade I could get a 2.5gbe managed switch but I just don't currently see the need to. Keeping it simple where I can.

Storage: Preferred drive bay count (2, 6, 8+)? NVMe cache for reads/writes? Ideal capacity (10 TB, 50 TB+)?

4-6

no nvme cache needed, but nvme storage pool used for current NAS.

capacity doesn't matter, can buy/shuck/get used enterprise drives myself.

OS: TrueNAS, Unraid, OpenMediaVault, Linux, or no preference? TrueNAS because ZFS. Or give me a ceph option.

Design: Appearance matter? Displayed or hidden? I don't like trashcan look, synology form factor is nice/aesthetic.

Budget: Ideal price (excluding drives)?

$300-500

Pain Points: What frustrates you about NAS or cloud solutions? Killer feature to switch?

NAS: coil whine, poor QC, no PCIe slot (or it costs way too much)

cloud: subscription hell

switch: already use self-hosted minipcs/NAS.

Your thoughts will build a better NAS. Would you back this on Kickstarter? Thanks!

No, for multiple reasons:

unless you have something unique to bring to the table that aoostar/ugreen/etc. have not brought to the table yet, and

don't do a kickstarter, it has historically been full of scams (such as storaxa if you look them up). Put it on a platform that guarantees a product for money such as a shopify storefront, etc.

昨年議論

take a look at the aoostar wtr pro/wtr max

昨年議論

Do any of these bookmarking apps support adding urls in bulk from currently open windows/tabs?

I often have windows of hundreds of tabs open that I'd like to archive and close but raindrop has been the only one that has been able to get rid of my clutter.

2 年前議論

The context for this link is that people have been finding ways around Play Integrity, which uses a keybox/hardware backed security key to do things like use banking apps, use the McDonald's app, Google Wallet, etc. on custom roms.

Every time a key gets revoked, a new key is found by someone else to share around the community so people can continue to use daily services while retaining control and choice over the OS on their phone hardware.

It seems that Google does not listen to its users about Android on anything except their own forums/bug trackers, so I would encourage any of you that use unlocked bootloaders or custom roms (with or without locked bootloaders) alongside with Play Integrity to provide your perspective on this thread.

From my perspective, Google should not restrict the choice of OS on its users by hindering its use through Play Integrity. You can't even book a hotel at Marriott if it does not pass Strong integrity. Furthermore, abandoning older devices after 3 years is fine, but they should not then restrict features of the device if I decide to use an up to date OS and security patch via custom ROM which is more secure than old android OS versions. In effect, what this does is push users to buy new hardware that they don't need through planned obsolescence. Instead of providing the best experience possible, they are trying to funnel money to new hardware purchases and there is a misaligned incentive going on. Bootloader unlocking should not have anything to do with Play Integrity, just like how on your computers you have root without your banking services refusing to serve you.

Do you think it's fair for a company to tell you what OS you can or cannot use when they stop supporting it with updates after 3 years (for older devices)? What about linking bootloader unlock status with Play Integrity by default when no system modifications have been made?

I have posted my view in the bugtracker linked and I encourage the rest of y'all to as well.

2 年前議論

for self-hosted, look at https://thelounge.chat/

2 年前議論

Until this comes to fruition and banks actually implement it with software (like Actual Budget) supporting it, I will continue using SimpleFIN Bridge. Hopefully this becomes ubiquitous like GoCardless in the EU.

2 年前議論

I'm using Zen browser

2 年前議論

So many negative comments in this thread when it's pretty fuckin great. Yeah, Jellyfin is rough around the edges and needs some handholding but that's what containers are for. Updates don't work? roll it back. No biggie.

Without Jellyfin I'd probably still be using a SMB share with a VPN, not having access to resumable playback/tracking, easily sharing with other people, convenience of using web/apps, etc.

One thing I want Jellyfin to have is the ability to link a specific file with a specific timestamp, similar to how on youtube you can do domain.tld/videoID?&t=timestamp

2 年前議論

I'm hoping the Aoostar 6 bay NAS isn't vaporware, but many previous ones have been, in no particular order:

  - wiretrustee NAS
  - pibox 5 bay
  - storaxa 5 bay (scam/company disappeared into the night)

and several that have actually delivered:

  - axzez cm4 NAS
  - U-NAS (case only)

2 年前議論

Yes. Complete mismanagement and ruins user productivity but can't disable it "due to legal". No gamer would allow this to happen on their gaming laptops (nor afaik have been sued) but according to Lenovo no office worker can put their laptops on their laps with more than 11W TDP being delivered to the laptop. It's crazy.

The laptop stands readily available on amazon allow for airflow while being on a mattress, for example. Just poor design where you can tell they don't care about their products. I will be replacing this unit with either Framework or a Tong Fang laptop which costs half as much but delivers twice the sustained TDP (54W) even when not on lap detection mode, provides proper cooling via 2 fans/vacuum chambers and comes stock with PTM7950 - all things Lenovo keeps on devices that cost 2k+.

ThinkPads/Lenovo no longer take pride in their products. It's a milking machine.

2 年前議論

Yup, planned obsolescence. Apple does it way more but it's still unacceptable. Might as well go with any other brand then since they're charging a premium anyway.

2 年前議論

I use my laptop on a laptop stand on the couch and bed. Every time I slightly shift positions, the lap detection mode is triggered through the accelerometer (even though it's not on my lap) and the power limit throttles to 11W. You can clearly tell Lenovo does not dog food their own products, nor do they care about them. They've also released broken bios updates which ends up bricking devices. I can find links if people want to know more, but I have stopped recommending ThinkPads to friends and family. The quality is no longer there.

This is not a company that cares about their products - just one that attempts to extract the maximum possible value out of its consumers.

2 年前議論

So long, and thanks for all the fish.

3 年前議論

That's disappointing. I don't understand why the author had to include this, it's so unnecessary.

3 年前議論

It's very telling any time a service or provider doesn't openly support adversarial interoperability that it's taking advantage of you, the consumer. If a company knew its products were better than its competitors, it wouldn't need to rely on these types of anti-consumer behaviors.

3 年前議論

I disagree with the author using the analogy of a Centurion lounge. It is not a "premium" messaging app, it is the "default" where Apple is abusing their position on being the default bundled messaging app, where unsuspecting users don't know there are better, interoperable messaging apps, or don't know which ones to migrate to. This is similar to Microsoft abusing its position to bundle Internet Explorer.

For the sake of his analogy, American Express is not a dominant player in the credit card industry compared to mc/visa.

The real situation is this: Apple is intentionally hindering communication between people to coerce others into buying an iPhone. This is different from American Express, where you can bring guests with you into a Centurion lounge.

> > Earlier this month, Beeper introduced Beeper Mini, an interoperable messaging service that allows users of the Android mobile operating system to communicate with users of Apple’s iMessage service.

> Wrong. There is only one service at hand, iMessage, ...

It's interesting that the author completely ignores Beeper (the original, non-mini version), which IS an interoperable messaging client. You can message other Beeper users in the Beeper Community Channel (which operates on Matrix), other social networks (like LinkedIn, Instagram, WhatsApp, Signal, etc.), and up until recently, iMessage as well.

I find it difficult to take this post seriously when the author strawmans the opposing view's argument.

Of course, Apple is free to do whatever it likes - it's their servers after all. But trying to spin this into something it's not is imo disingenuous.

I'm not saying Apple should allow "freeloaders", I'm saying Apple should not abuse its position into coercing non-iPhone users by playing dirty. I'm sure this will fall on deaf ears though, just look at how they coerce users into using iCloud or making it so only the 1st party solution is able to run background tasks properly. And that's fine - I will continue to go around recommending anything but Apple products to others, and support politicians that advocate against big tech abusing their positions.

Is everything this guy writes this one-sided?

3 年前議論

I use librewolf，a Firefox fork, because of the things that corporate Mozilla keeps doing: from pocket to selling vpns and sponsored stories, they do enough user hostile things it ends up being a better experience on librewolf.

On android I'm using iceraven.

3 年前議論

It would totally make sense for Zulip to have a UnifiedPush integration.