Skip Navigation

Posts
0
Comments
368
Joined
5 yr. ago

  • SIM card is absolutely required even for emergency services

    For anyone wondering: while technically the cell towers might be able to accept emergency calls even without network authentication (which is what's the SIM is for), there are countries/places that will still require an active SIM with the excuse of wanting to prevent hoax calls.

  • They don't say what tech it's behind it but according to the article, it would be decentralized in Europe.

    Personally I don't mind if it's not federated with the fediverse, but imho, at the very least the protocol / basis should be FOSS.

  • The only reason for CSD is touch interfaces on small screens.

    Even in this case I'd argue that on small screens most apps simply have no real decorations (not even client-side).. there's typically not even a close button. Hamburger buttons are menus, which isn't what's typically considered "decoration". One could argue that the bar at the bottom in Android with home/back/etc controls is effectively a form of SSD. Android offers system UI or gestures to send the app to the background (ie. minimize) or closing it, it does not require Apps to render their own, which is effectively what Gnome is asking with CSD.

  • They justify the rejection of SSD because it isn't part of the core Wayland protocol and at the same time push client apps for the "minimize" and "maximize" buttons (along with respecting some settings) despite it also not being part of the core protocol and it being only possible through extensions. There's a ton of tiling compositors that don't even have any concept of minimize/maximize, so why should this be required of every client app?

    It feels backwards to ask the app developers to be the ones adding the UI for whatever features the window compositor might decide to have. They might as well be asking all app developers to add a "fullscreen" button to the decoration, or a "sticky" button, or a "roll up"/"shade" button like many old school X11 WM used to have. This would lead to apps lagging behind in terms of what they have implemented support for and resulting in inconsistent UX, and at the same time limiting the flexibility and user customization of the decorations, not just in terms of visuals but also function and behavior.

  • LLMs abstract information collected from the content through an algorithm (what they store is the result of a series of tests/analysis, not the content itself, but a set of characteristics/ideas). If that makes it derivative, then all abstractions are derivative. It's not possible to make abstractions without collecting data derived from a source you are observing.

    If derivative abstractions were already something that copyright can protect then litigants wouldn't resort to patents, etc.

  • You are not gonna protect abstract ideas using copyright. Essentially, what he's proposing implies turning this "TGPL" in some sort of viral NDA, which is a different category of contract.

    It's harder to convince someone that a content-focused license like the GPLv3 protects also abstract ideas, than creating a new form of contract/license that is designed specifically to protect abstract ideas (not just the content itself) from being spread in ways you don't want it to spread.

  • I don't think we would be throwing USB-C away completelly, because it even became mandated by law in EU with the goal of trying to slow down the rate at which people generate trash by getting new cables and power bricks for every new generation of connectors.

    But I agree that at the very least there should be a clear labeling mandated by consumer protection laws as well.. it's a nightmare and a scenario that opens the door for a lot of scams... this is even made worse by the fact that nowadays you can even have malicious software running inside of the connector of a cable plugged into an extremely capable port without realizing it, messing up with your device even though the only thing you wanted was to charge it.

  • I have something like this myself, it's useful for knowing the power delivery of the cable/port combination, but I'm not sure if that really helps when it comes to determining the speed of the data transmission that the cable/port is capable of, or other features like displayport support, or which version of USB4 it might be supporting (I believe they have the same power delivery, even though the transfer speed is double).

  • Thanks for the link, and the clarification (I didn't know about april 2026).. although it's still confusing, to be honest. In your link they seem to allude to this just being a way to maintain a voluntary detection that is "already part of the current practice"...

    If that were the case, then at which point "the new law forces [chat providers] to have systems in place to catch or have data for law inforcements"? will services like signal, simplex, etc. really be forced to monitor the contents of the chats?

    I don't find in the link discussion about situations in which providers will be forced to do chat detection. My understanding from reading that transcript is that there's no forced requirement on the providers to do this, or am I misunderstanding?

    Just for reference, below is the relevant section translated (emphasis mine).

    In what form does voluntary detection by providers take place, she asks. The exception to the e-Privacy Directive makes it possible for services to detect online sexual images and grooming on their services. The choice to do this lies with the providers of services themselves. They need to inform users in a clear, explicit and understandable way about the fact that they are doing this. This can be done, for example, through the general terms and conditions that must be accepted by the user. This is the current practice. Many platforms are already doing this and investing in improving detection techniques. For voluntary detection, think of Apple Child Safety — which is built into every iPhone by default — Instagram Teen Accounts and the protection settings for minors built into Snapchat and other large platforms. We want services to take responsibility for ourselves. That is an important starting point. According to the current proposal, this possibility would be made permanent.

    My impression from reading the dutch, is that they are opposing this because of the lack of "periodic review" power that the EU would have if they make this voluntary detection a permanent thing. So they aren't worried about services like signal/simplex which wouldn't do detection anyway, but about the services that might opt to actually do detection but might do so without proper care for privacy/security.. or that will use detection for purposes that don't warrant it. At least that's what I understand from the below statement:

    Nevertheless, the government sees an important risk in permanently making this voluntary detection. By permanently making the voluntary detection, the periodic review of the balance between the purpose of the detection and privacy and security considerations disappears. That is a concern for the cabinet. As a result, we as the Netherlands cannot fully support the proposal.

  • The thing is that the moment 1 country voluntarily decides to mandate it, the infrastructure for the backdoor needs to be set up in place, as a mandatory requirement.

    For it to be truly optional there should be a demand for the opposite too (ie. countries placing fines to those who do chat scanning), otherwise it doesn't make much difference... any chat app that wants to work globally in the EU is gonna end up implementing the scanning EU-wide, even if there are countries that don't enforce it.

  • Where is this explained? the article might be wrong then, because it does state the opposite:

    scanning is now “voluntary” for individual EU states to decide upon

    It makes it sound like it's each state/country the one deciding, and that the reason "companies can still be pressured to scan chats to avoid heavy fines or being blocked in the EU" was because of those countries forcing them.

    Who's the one deciding what is needed to reduce “the risks of the of the chat app”? if it's each country the ones deciding this, then it's each country who can opt to enforce chat scanning.. so to me that means the former, not the latter.

    In fact, isn't the latter already a thing? ...I believe companies can already scan chats voluntarily, as long as they include this in their terms, and many do. A clear example is AI chats.

  • The thing is.. that even if there are countries publicly rejecting this, once the infrastructure is in place and a backdoor exists due to it being enforced by some other country, how can you be sure it's not being used / exploited?

    Even in the (hypothetical) case that the government is not using it (regardless of what they might say to the public), I wouldn't trust that this backdoor would be so secure that nobody else than a government could make use of it.

  • I believe Germany is now in favor of this new proposal, according to https://fightchatcontrol.eu/

    Only Italy, Netherlands, Czech Republic and Poland are against. This seems to be based on "leaked documents from the September 12 meeting of the EU Council's Law Enforcement Working Party".

  • the local sending side has some way to control the state their particle wavefunctions collapse into (otherwise they’re just sending random noise).

    Do they? My impression is that, like the article says, "their states are random but always correlated". I think they are in fact measuring random values on each side, it's just that they correlate following Schroedinger's equation.

    I believe the intention is not "sending" specific data faster than light.. but rather to "create Quantum Keys for secure information transmission". The information between the quantum particles is correlated in both sides, so they can try to use this random data to generate keys on each side in a way that they can be used to create a secure encryption for communication (a "Quantum Network that will be used for secure communication and data exchange between Quantum Computers"), but the encrypted data wouldn't travel faster than light.

  • I'm not sure if that'd be what it'd look like.. distributions are hardly ever that heterogeneous.

    I'd bet all the GrapheneOS users would get together in their own corner and nerd out about their customizations.

    For the record: 1 in 25 is 4% ...the image gives (intentionally?) the illusion of the proportion being higher.

    1. The Pixel is easily unlockable, so one can install custom firmware without being a "pro", its hardware is (or was reverse-engineered to be) compatible enough to make the experience seamless, with a whole firmware project / community that it's exclusively dedicated on that specific range of hardware devices, making it a target for anyone looking for a phone where to install custom Android firmware on.

    But I'd bet it's a mix of 2 and 3.

  • Code being visible is not very useful if you can't distribute it, extend it, expand it and improve it.

  • Many Keepass clients have support for not actually deleting entries, and instead moving them to a "Trash" subgroup inside the kdb that is ignored when searching entries. Also they usually keep track of the history of changes to each entry, to make it non-destructive.

    Coupled with Syncthing typically automatically creating backups whenever it encounters conflicting changes, I feel this should be enough, at least for me personally.