jedieaston

What happens when iOS 20 comes out and the A11 can’t run it? Is it suddenly okay then to ask Apple’s permission? I don’t think the court would hold up a bootrom exploit in an older chip as good enough for research purposes (what if an exploit only affected the A12 and A13 for some reason?)

If you require the user to hook into iTunes/Xcode, flip the device into recovery mode, click a few buttons, and agree to a "You're hecked if you break it now" policy, it'll be enough to scare off 99.9% of people from getting owned. After that, just have it work like the current profiles/supervision system where Settings makes it clear that non-verified code is running and has a big "make it go away!" button (sideloaded IPAs show up in profiles with a delete app button, and that works well enough except for the time limit).

I wonder how much people are able to publish about the device. I'd expect not much, but it'd be nice to be able to compare a iPhone that was completely unlocked (at least, to whatever that means for Apple) with whatever security they put on the ARM Macs which are supposed to be "open for hobbyists". I'd expect that the ARM Macs have much of the same security stack (by default) that iOS devices have given what they said in the WWDC talks, but maybe that's not the case.

Also, if you found an exploit on a research iPhone because you made use of entitlements that were Apple-only, I wonder if that'd be worth anything bounty wise. Nobody can/should be able to write an that'll get through App Store checks if they asked for PLZ_NO_SANDBOX_ILL_BE_GOOD or something (at least, that's what I thought before the whole Snapchat system call thing happened). But hypothetically the App Store review process is vulnerable to a bad actor inside Apple pushing an update to a big app that included malware, so I'd think that private entitlements shouldn't be available at all to binaries that didn't ship with the device/in a system update (unless some kind of hobbyist flag was flipped by the consumer). So I'd say that would be worth something, even if smaller than a more interesting exploit.

What's the annoyance? It's an MSI. Use msiexec /x to remove it (probably via PDQ Deploy or SCCM or a PowerShell Script), and then block the installer from running again during an Office install with GPO [0]. It's definitely easier than cleaning up some of the other garbageware in Pro.

0: https://docs.microsoft.com/en-us/deployoffice/teams-install#...

Blocking it's removal? How? Teams was installed with Office on my current system, and it pops up in Add/Remove Programs. IT Admins can prevent it from being installed with Office (and remove it from all of their machines if it has already been installed)[0]. It's not included with Windows either (just as Office isn't). And Slack isn't blocked from being installed either.

What's the anti-competitive angle here, other than the OS is created by Microsoft, the IM system is created by Microsoft, the Office suite is created by Microsoft, and the licenses are often bundled? Apple would be guilty of a similar thing by shipping Messages.app and iWork with macOS, no?

0: https://docs.microsoft.com/en-us/deployoffice/teams-install#...

It's just annoyingly expensive for Windows boxes, with all of the licensing and stuff. Microsoft includes licenses for running VDI in Azure with Microsoft 365 now, but it still requires a full on-prem Active Directory setup (which you probably don't have if you are using Microsoft 365). And then on top of those licenses, you also have to get Citrix/VMWare licenses if you don't want to use Azure. It becomes more expensive than hiring a IT person to just manage all of the laptops you deploy everywhere (except in certain scenarios like healthcare).

I want to live in a world where we all have SunRays and I just plug in a card and show my session running in the cloud, but it's too darn expensive still (and everyone in enterprise is too scared to try and build one themselves since the big vendors have Microsoft's blessing when building their solutions). That one time I had a VDI at an internship, boy was it magical. Being able to walk into a conference room, type my password and show people something was extremely powerful.

I’m thinking that someone at Microsoft may have snuck the code for Windows into the archive after it was pulled from Github. Between Windows and OS X, a ton (most?) of the end user software would be unusable to a future generation in its original form since they didn’t have the desktop OS it was used on.

Ironically, 500 years from now, they may think that the year of the Linux desktop was 2008 :-D

Presumptively, the Tech Tree will have some way of bootstrapping a system capable of decoding the tapes. They say in the introduction that it’s nearly useless to access the tapes without a computer and that they expect whoever is reading this is to have a computer that is centuries more advanced than we have now.

Maybe they just zip tied a ThinkPad to the tape reader and pray that it can eat whatever happens to it in the vault.

I don't know, it'd probably take 18F like a month to add a page to whitehouse.gov called "Things the President said", add 2FA and whatever else it needs to be installed on his government phone, and a little bot that listens for whenever he writes something on there and tweets it on Twitter. Then you have a source of truth that we know wasn't modified between the government and the reader, and it doesn't break the social following.

But I guess its easier to just complain about Twitter.

In the other thread, this was phrased as Tesla not allowing those states to release the information of people who bought a car to third-parties because privacy. I'm sure if you wanted to take the survey in one of those states you can just reach out to JD Power yourself, they can't scrape your information though.

I feel like you could just as easily say "Simple. As soon as Google changes their cut to 20% for Android-exclusive apps, developers will move to that store to make more money. Users will follow". They won't. Users won't leave the walled garden, just as people on Android didn't leave it for Fortnite (the most popular game in the world at the time). The App Store comes with the phone and is safe, has customer support and nearly no malware. Any other App Store would require multiple extra steps to install, along with a bunch of "please don't" prompts that Apple would build in to make sure that the user knows what's happening (just like what happens on macOS with unsigned software). It would end up being too confusing for the masses, and they'd just find an alternative that was willing to sit in the App Store (or the nightmare, not use the app at all and go unhappy).

Amazon already tried this exact thing on Android, where the barriers are a lot lower. They've never had success with their app store outside of their first-party devices. Why? Because it's too dang hard, and I'm willing to pay an extra buck for Minecraft if I don't have to track it down in another app and worry about malware coming through the wall.

I'm all for a switch to install unsigned software, but only for development stuff. The App Store serves as a good barrier for 99% of users who just need to turn on their phone and use the darn app. The other 1% just need Apple to put a hidden switch to disable the protections ala csrutil in macOS and we'll be fine.

That's just as true of GitHub though, and isn't the problem. The problem is the related services, like issues, PRs and now CI/CD which all sit with the code but don't come down on a clone. That problem still hasn't been solved, which could mean your whole knowledge base goes missing if you lose access to the server. CI/CD can maybe be replicated from what's on your laptop, but if you don't have the PR history it could spell doom for big codebases that don't use extended commit messages a lot.

Zoom, Slack and Teams all use WebRTC for running their respective clients in the browser.

I think I've heard of a place like this [0]...

[0]: https://news.ycombinator.com

Although hn doesn't have an exact assigned niche (it falls towards science and technology but that's not an enforced rule), it's fairly civil because the site doesn't need to make money and it's well moderated (almost to the point of authoritarianism, albeit that's not necessarily a bad thing in a website). A similar phenomona can be found in a place like r/neutralpolitics (heavily moderated to keep everyone on track, doesn't need to make money since subreddits are free).

This isn't feasible for a site the size of reddit though (they need money for servers and stuff), so federation is the only real alternative since each sub would pay (probably a provider, honestly, but they could selfhost) a little to keep their spot going. The trick is to make the federation invisible to the end user through some kind of reddit-ish frontpage site, which would be much like current reddit's frontpage but be accessing the federated subs, each with it's own moderators/janitors. This may be unfeasible, but it's the only way anything like reddit could keep free speech up. Add an easy to setup ad-network for each sub (they can opt-in to serve ads to the people accessing their sub's page, like Google ads on blogs) and it works. If a sub becomes evil just unsubscribe.

Yep. But Pyodide is under development and has numpy and friends already...

https://github.com/iodide-project/pyodide

Skype for Business, Lync, and in the dark ages Office Communicator even had it. If you left IM open and your PC unlocked but you weren't using it, after a user set delay your status would turn to idle. You can't set the timeout in Teams anymore, IIRC.

Does Slack not have this? I'm 99% sure Zoom does as well.

They could, but since so much of healthcare sits inside Citrix these days, it's unlikely that in OP's scenario it would've mattered. It's pretty easy to find out if you are running in a VM on Windows though, so I bet they do.

At least for Apple, they claim the iPhone (at least devices post-checkm8) has not been compromised. iCloud is required to comply with records requests, but the data isn’t in iCloud the feds can’t get it. Even with checkm8, the Secure Enclave still has not been compromised.

If they were in bed with the feds, the FBI/NYPD wouldn’t keep asking them for keys that Apple doesn’t have.

I wish they'd let users set the green squares to public projects only. I use github a lot for private projects or archival (did a quick thing, write myself a readme and store it in case I need it again). But it looks like I'm doing a lot of work when I'm not. The green squares would be a heck of a lot more interesting if you could see how much they are doing in public repos (where you could see if they are faking their squares).

Time Machine (I don't know if that is what they are talking about, but it's an example) is designed to be used daily as well as in case your laptop explodes. Opening Time Machine allows you to go back and see every version of a file as long as your backup drive was connected when you saved it.

Comcast's newer IPTV/X1 boxes are somehow worse, as they have 100x the processing capacity of the old Motorola/Cisco boxes, but use it to run a slow as molasses JS SPA. The Netflix app runs at probably half the speed of the Apple TV (or the Fire TV Stick) and even Comcast's UI can sometimes take upwards of 1-2 seconds to respond to a button press.

Comcast is $10 per TV (unless you’re cool with Roku) and the cord-cutter apps have good support on a bunch of different devices you can plug into your TV. I think Hulu still wins unless you want all of the channels.

I had a similar experience a couple years ago with a $2k MacBook Pro, except they did the whole spiel.

“No, please! I want to give you money. Can I please give you money now?”

Last time I saw an air card in a laptop, you had to turn it off whenever you sleeped the computer to save battery life (because it would die in your bag) and the connection took a long time to boot. That was in 2011 or so though, is it better today?

Even if Docker wasn’t possible (because no virt), a sandboxed terminal with enough utilities to bootstrap Brew is just a software problem. It wouldn’t require special hardware stuff, just as chroot doesn’t. As long as it could be accessed by other apps and stay alive in the background, it’d be a great way to code on the go.

They can make something work if Swift Playgrounds works (which is a pretty silly experience anyway. “Hey kid, great job learning Swift. Want to make a real app? Buy a $1200 MacBook and get to work!”

It still hurts today, because Microsoft puts a space between your first and last name in your profile if you are using a local account but not for a domain account, which causes all kinds of weird issues if you ever have to use cmd.exe...

They don't, it's all online with webviews on iOS and Android. I don't think there is offline functionality (still haven't gotten an invite).

Custom domains are apparently in testing right now (i'm on a list to hear back about it). The corporate version requires them.

Namely, Power Query and some of the formula stuff (the entirety of the formula ribbon is just missing). I guess I could just start using pandas more, but its super handy to just click Excel, tell it where the CSV file is and start messing with something.

Why do you have to jinx it?