saagarjha

Safety means more than torn writes

It is not appropriate and downvoting those comments is how one indicates this.

Hooking code you don’t own is typically playing with fire. Because Microsoft wrote the code, they’re generally in a better position to understand when it is safe to do so.

It's an API that a lot of software uses (as opposed to the thing that they were using, which ~nobody used)

Glad to see Apple providing APIs that go beyond the bare minimum they ship with on iPhones

Why though

> the government knows best, give us all your money and we will take care of you and save the planet

Yeah this is kind of explicitly what most people living there seem to want

Which seems like a reasonable way to go about it? If you’re in California and taking advantage of the benefits the state offers, you should be contributing towards it?

Sure, I don’t see what’s horrible about this? It is a lot to read, sure, but it doesn’t seem unreasonably advanced

If there was a way to do FTL communications you’d expect that Jane Street would have found it already

I wouldn’t really say it compares to entitlements

I’m confused why they can’t just write a sandbox profile that does the equivalent

I only skimmed the paper but it doesn’t see particularly dense, mostly just relying on college math?

Yeah sure dude they’re going to do nation-state level silicon attacks against the key material in that sensor

I assume it's the same reason that Google decided to develop its own browser

Port what? The UI code is going to be completely different across platforms?

I did yes, sorry

While looking at resources invested is necessarily a great measure of difficulty, it is somewhat indicative, yes.

To be clear I have a much higher standard for what is acceptable than that, you really need to consider software that a hundred million people are going to use

This is really hard to do in general

Sandboxing something like that is challenging, yes. But probably not for this reason you can always disclaim responsibility for your process.

No, I mean, often they won’t even give you a wallet pass, they want you using their app specifically

Yeah but most of these places want you installing their app

macOS attributes shell commands to their parent app bundle.

Yes but they are not going to sign your pass you make

No what happened was that the government basically stepped in to take all the evidence away and so Apple couldn’t do discovery properly

Sure, it’s just that the special key costs a million dollars

> The past few weeks of people ripping into it have demonstrated that SE is mostly reality distortion and does not offer any unique or meaningful protection.

Link?

Modems have been used to exploit the AP (but I don’t necessarily agree that it’s a backdoor here).

Nice! I made my own version of this for Pi but I’m excited to see if I can just replace it lol