izacus

Can you link to patches or commits they upstteamed? I'm not aware Google ever accepted any.

We've been using SSH keys which behave the same for years. At this point it's mostly clowning by old farts in these articles.

We also have devices with yubikeys built-in now.

If you have two toilets in your house, are you going to sign up to clean mine too, for free, because I demanded it from you?

Thought so.

It was never particularly safe to root the phone - both because it drills a hole into the security model and because you don't have any good ways of verifying what apps asking for root actually do.

Moreover, most of root tools and ROMs are rather poorly written and glued together with other forum scripts which you have no way of checking if they're not malware. (There are exceptions.)

So no, "safe" it's not and never has been. The tradeoff might be worth it for you as a user though.

> The reason I'm asking is that I'm stuck with authy as a MFA code app, and would like to move to something that has both desktop and phone support, and my conclusion is I'd need to root my phone to get access to the actual MFA seeds (they don't allow exports to keep you stuck in their app).

The way to do that is to take the hit and recreate your 2FA codes in an opensource app like Aegis or Stratum.

This is where reading ability comes into play.

Your post is essentially admitting that you're ignoring the bugs from the company you love and taking seriously form the company you don't.

So the difference isn't about taking things "more seriously", but in the fact that you take marketing from Apple more seriously.

That's not the same.

(Note: There's plenty of proof that Apple does take security more seriously than Samsung, Xiaomi & Co. in the article, but your feelings aren't it.)

Because you'll be hounded by patent pools and sued into oblivion if you dare to use it in your own software and aren't Apple, Microsoft or Samsung.

"We don't want to support another pile of security bug ridden C++ library" absolutely aren't "dubious grounds".

You'd rip a new one to Google if there would be a CVE in a new C++ library in Chrome because of it.

Now that Rust library is available, they will continue adoption, as it should be.

EU is already 40% better than US, so why exactly are you implying it's worse?

What a bizarre thing to say - is that your attempt to discredit anyone that complains about wrongdoing?

"Everybody's enraged, why don't you like this unethical thing being done to you by a company?"

What's going on here?

Most of those are webapps too (just packaged in APK) since it doesn't make sense for most app developers to build a special bespoke version for Android.

If you check YouTube version string you'll see Cobalt as well on Android.

Yeah, same here, but that's the reason why others aren't seeing it :)

Those ad breaks only appear if you opt out of personalized tracking.

They're a punishment for you because you won't let them collect data.

FB app does that too.

Same way it works for everything else. They sell their performance and then they make something else.

You keep making up strwamen and positions that don't exist.

Maybe mock something people have actually said.

... as opposed to using salted hashing like in every tutorial since 1990s.

Not really - this is akin to doing a complete rewrite of your 30 year old codebase to Rust.

Every organization has their own hacks, bespoke tools, processes and hardware that has to be painstakingly replaced, reprogrammed and users retrained. In many cases, Linux alternatives don't exist so they either have to be written or processes/hardware replaced.

These are OLD organizations and none of them is really the same as any other. Legendarily, companies like SAP made their whole fortunes managing this kind of complexity.

It's just a lot of work with a lot of edge cases you've never thought of (or seen in your life) that takes years.

It's not the consumers only option though.

That explanation doesn't pass a sniff test if you even try to Google anything about car manufacturer data collection practices.

79% of car buyers explicitly said they won't buy a car without carplay: https://www.cnbc.com/2022/07/22/apple-carplay-could-be-a-tro...

So the numbers check out and there's no need for you to find the blame elsewhere.

> And this disparaging language about commenters is not OK. Please stop.

Nothing about that statement is disparaging - just because you don't want to hear it, doesn't make it insulting.

Calling out nonsense is important, especially on this website.

There is no "applause" in my post - please learn to read before you take up your bigcorp defender shield and think for a second why you're fighting against your own benefit.

And Linux support on M Macs would also have a "real job", what is your point exactly?

I find it so bizarre that some of you here are defending a megacorporation that could have easily afforded to provide drivers for Linux Kernel like their competitors do.

You're clapping for free volunteers to spend hundreds of hours reverse engineering Thunderbolt controllers when companies like Intel outright contribute them.

Apple could contribute as well, like Intel does for their Thunderbolt controllers.

Why are you demanding a user does that for free instead of the big corp that made the platform?

> I don’t think many people realize how easily Apple could have locked down the laptop to be able to not run any alternate OS at all and the number of lost sales would be so negligibly small as to not matter. They chose to leave it open.

Oh please - Apple provided a full suite of Bootcamp drivers for their hardware just a couple of years ago, not locking you out is not a big heroic move you're trying to picture here.

That's just plainly false.

No, they mean customized SoCs which what those chips are as well

> I think it's deceptive because people think they will get better privacy/security with a /e/ fairphone when it's actually much worse than an iPhone.

That's just blatantly not true though - even iPhones collect way more telemetry and Ad data than /e/ OSes.

I think you should listen to bringup of Linux on Playstation talk from CCC to understand that those platforms are much more than just "somewhat customized".

There are whole sections of peripheral chips missing and they behave quite a bit differently with how they bootstrap and where things are mapped in memory.