Skip Navigation
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)KO
Posts
2
Comments
130
Joined
2 yr. ago
Anime @ani.social
kolorafa @lemmy.world

The date it posted on this site doesn't convince me it is a joke, and even if it is, it's not funny.

  • Best to buy phones that you can relock your bootloader, from memory I can only think of 2 phone manufacturers that allow that: Fairphone and Pixel phones that allow you to relock bootloader.

    I bought Fairphone 5 with Degoogled /e/ OS from Murena to avoid that annoying cat and mouse game. I bought from murena website to get my phone already with degoogled firmware flashed.

    In my case bootloader is locked with google attestation so 99,9% apps works, including Banks apps with TAP to pay. Bank payments that dont use google pay but implent NFC directly works (so except for google pay other pay method should work).

    Both my bank apps works with tap to pay, But Your milage may vary.

    Im happy with my phone. Due to all that, not a single app had issues with "valid OS checks" because it actually is valid, it did came directly from seller and never got unlocked/flashed.

    It is locked but I should be able to unlock bootlader, flash different firmware version and lock it back up making the attestation valid again but didn't do that yet so can't be 100% sure.

  • It sounds like jest plain simple website/forum BUT with specific protocol making it more discoverable/searchable?

    Allowing to post comments anonymously... sound like a bad idea in the long run, but who know, make me eat my words.

  • I did saw You could also use Tailscale and use their internal signed certificates. Then you can access it both internally and remotly over Tailscale with SSL.

    Personally I own a domain for years and just use it.

  • assuming that Google is not malicious

    Previously they would need to push malicious code to your device to steal your login data, that is a risk that someone would do reverse engineering on that and expose it, now they will have the data on their servers and they can abuse it any time they want, I doubt they will use it to login as you, but they will use it as metadata to connect all your accounts for marketing.

  • proper authentication protocol do not send your password to Google to authenticate

    That is not true for 99% services including google. Google have a plain text password at the time you are logging in, they just store hashed+salted version in storage.

    (Almost) No website (or app) is hashing the password before sending it to server, so if you hack the login screen you can dump RAW passwords anytime.

  • No thanks, sounds like security and privacy nightmare.

    The part about "no user interaction required" doesnt feel right secure.

    Especially as it is stored at google servers, it says it is encrypted but it is encrypred using keys that google has access to as they are unlocked with you logging in into google account.

  • Games @lemmy.world
    kolorafa @lemmy.world

    This should be illegal

    This should be illegal, companies should be forced to open-source games (or at least provide the code to people who bought it) if they decide to discontinue it, so people can preserve it on their own.