branon

Q: What network bands are supported?

A: Please see the Network Specifications section above this FAQ for supported bands and carrier compatibility.

But there is no "Network Specificiations" section on the page that I can find. It would be really nice to know which specific bands the modem supports.

Is this true? I did some research on flip phones the other week and I didn't turn up anything running Sailfish. Options seemed limited to

* custom AOSP derivatives (Punkt, Sunbeam, Kyocera, others - most common)

* older KaiOS devices (Nokia 2780 and friends)

* Nokia S30+ devices (traditional proprietary feature-phone firmware, somehow Nokia is still producing these)

Are there any other examples of Sailfish phones being vendored similar to how Commodore is doing theirs?

Also do you need an iPhone to manage the kid's Apple Watch or can you do this with a PC (web UI somewhere? apple.com?) or Android device etc? This is very important, if they're billing it as a safety device for kids, interacting with/reading data from the safety device should NOT require a _specific model_ of separate device. I should be able to do it from anywhere.

If the logic is that it's the window manager's job to set window rules for this, fine, but in that case Plasma should probably ship with preconfigured rules matching the Chrome/Firefox PiP window.

I also find the lack of an Xlib-compatible macro API disruptive but I usually run an X11 session inside Xvnc for this purpose anyway.

Currently, I'm feeling like it was a pretty wise move.

I'm not sure why "I browse reddit" is any sort of a valid qualifier upon which to base this decision

but yes otherwise the article is correct, dotfiles != distro

This has implications - the bypasses cannot run on Linux for example where a cracked executable could. They are not the same thing.

One big difference is that the bypass method _requires_ Microsoft Windows in order to function. You cannot use the bypass on Linux.

I don't have a Windows install anywhere, so if I want to play the game I have to either purchase it, or wait for a crack that will remove Denuvo from the executable.

I get this probably doesn't matter to most people because they're on Windows anyway and will happily disable whatever security is required to access free games, but it's disappointing to have the technical distinctions and broader implications glossed over.

This article reads like a Kiwi Farms thread. Just saying. I'm not a fan of what they do, but that's what came to mind. And when people do undesirable things, documenting them for public awareness is important. But how deep is too deep when it comes to freelance investigative journalism of this type?

e: critically I'm _agreeing_ that the reporting is important, and I'm not passing judgement either way here, only making a comparison and posing a question

DOA. We need more feature phones running custom firmware. Or Linux phones. What Jolla is doing with Sailfish is nice.

Stop leaning on Android. It's unnecessary baggage. Divest.

So this is vendor lock-in to an online account being sold as a way to "win" against a problem _created_ by said vendor? I would prefer a per-device wait time and I sincerely hope a Google account will not be a hard requirement. I didn't consider this initially.

Google is in the process of stealing the shirts from our backs and selling them back to us. Whoever wrote this article is drinking the kool-aid. This should NOT be presented as a positive thing. Some of us use Android without a Google account and would still like to sideload.

But again, I've never heard of sideloading being used as an attack vector here. Nor have I ever seen reporting on it.

I figure Krebs or somebody would have written about this if it was an issue.

Would welcome evidence to the contrary. Is this truly a threat model that's seen in the wild?

My gut says no because social engineering is about hijacking legitimate, first-party processes. Scammers attack login credentials, MFA flows, and use first-party apps to maintain access (think remote control software like TeamViewer). These apps come from the Play Store, not from meticulously curated collections like F-Droid, and not from somebody pressuring you to sideload an APK.

And if scammers decide to use sideloading as an attack vector -- then like all the other security gates that can be defeated via social engineering, I expect they will find an end-run around this one as well. Either on a technical basis, or by social-engineering users into bumbling past it and on to the next stage of the scam.

Build an idiot-proof system and society will build a better idiot. And yeah, the rest of us only wind up slightly annoyed, _for now_, until Google tightens their grip further on some other flimsy pretext.

In this instance I'd say the surety and closure provided by the ability to simply review the footage is an important aspect for potential victims. And if victimized by something worse than petty theft, the value only goes up.