So what's the floor here realistically, are they going to lower it to 30 days, then 14, then 2, then 1? Will we need to log in every morning and expect to refresh every damn site cert we connect to soon?
It is ignoring the elephant in the room -- the central root CA system. What if that is ever compromised?
Certificate pinning was a good idea IMO, giving end-users control over trust without these top-down mandated cert update schedules. Don't get me wrong, LetsEncrypt has done and is doing a great service within the current infrastructure we have, but ...
I kind of wish we could just partition the entire internet into the current "commercial public internet" and a new (old, redux) "hobbyist private internet" where we didn't have to assume every single god-damned connection was a hostile entity. I miss the comraderie, the shared vibe, the trust. Yeah I'm old.
I have a script that watches apache or caddy logs for poison link hits and a set of bot user agents, adding IPs to an ipset blacklist, blocking with iptables. I should polish it up for others to try. My list of unique IPs is well over 10k in just a few days.
git repos seem to be real bait for these damn AI scrapers.
Horrifying to read. I don't think we're ready yet for radical transplantation like this until we perfect the immune-system reset procedure first that allows for doing away with anti-rejection drugs.
Whatever happened to that research? I had read there was some success in resetting a person's immune system, by taking out bone marrow immune stem cells from both the donor and donee, letting the stem cells mature together in-vitro, and then injecting them back into the bone (after zapping the donee's original bone marrow), giving the person an immune system that now saw both tissues as 'self'.
At some point we'll just have to tunnel IP over DNS, and then they can't block traffic without destroying the entire internet. Not that it'll dissuade them.
Forgive me but what is intune? I did a quick search and just found some Microsoft endpoint protection thingie -- there is mention of a Managed Google Play but I have no idea what that would mean.
I haven't yet tried -- planning to do that in the next day or so when I get the time.
Others already replied with promising results, I sure hope they work for me as well (Scotiabank in Canada is particularly annoying in this respect in my experience, with LineageOS I had to use Magisk and define stealth rules specifically for their banking app).
Edit: As for camera, I've only tried the GrapheneOS builtin/default camera app. It's pretty basic, but I should see if I can get the Pixel9 official camera app on there, it would be nicer to use if possible but the basic one is probably good enough for my purposes.
I took the jump and installed GrapheneOS on my Pixel 9 this weekend. Easiest alternate OS load I've ever done, didn't even need to see a command line. (I've put LineageOS on many a phone and GrapheneOS's web-based installer is amazing).
Loving it so far. I have three profiles, the main 'Owner' with NO google services/app store at all; and two more 'Personal' and 'Work' profiles that have Google stuff that I alone chose to install.
Amazingly GrapheneOS even lets you deny Google App Store itself permissions to install from untrusted sources (in this case, Google App Store itself) -- I was suprised to see installing just App Store triggered attempts to then load: My Pixel, Google Photos, Fitbit(!!? WTF), and a few others, without any confirmation first. Was able to shut that shit down immediately. (I had never, ever installed Fitbit on my previous phones, so there's no excuse to install it "from my previous device" or whatever...)
I hope GrapheneOS spreads to other phone models. And I'm sure Google has a team planning on how to strangle it before it does...
Yup, to counter the new Dem they FINALLY swore in. Can't have that Epstein papers release happen. They're gonna run out the clock until they can win that vote.
Wait one god-damned minute. If this is true, and I have no reason to think it is not, why is this not another prominent arrow in the quiver of everyone who constantly has to point out how psychotic Gates and billionaires like him truly are? Jeebus Cripes, what an asshole Bill Gates was/is:
Bill’s face changes. And in just a matter of five minutes he’s losing it.
And he’s screaming at me, “YOU FUCKED HIM! YOU FUCKED HIM! YOU FUCKED HIM!” Spit — I’m not making this up — Spit is coming across the conference room table and landing on my glasses as he’s like, “YOU FUCKED HIM!” I have no idea what the hell he’s talking about
There are many accounts of how unhinged and abusive Gates was in Microsoft meetings, but this is just off the scale. Speechless.
This seems like a good idea.