41

The much maligned "Trusted Computing" idea requires that the party you are supposed to trust deserves to be trusted, and Google is DEFINITELY NOT worthy of being trusted, this is a naked power grab to destroy the open web for Google's ad profits no matter the consequences, this would put heavy surveillance in Google's hands, this would eliminate ad-blocking, this would break any and all accessibility features, this would obliterate any competing platform, this is very much opposed to what the web is.

top 50 comments
sorted by: hot top controversial new old
[-] TheYang@lemmy.ml 4 points 1 year ago

This is why we need Firefox.

And Firefox needs to be a market that can't be ignored.

[-] Mnmalst@kbin.social 1 points 1 year ago

@TheYang Exactly! Came here to say this. Everybody actively using chromium based browsers is a part of the problem.

[-] Engywuck@beehaw.org 0 points 1 year ago* (last edited 1 year ago)

Stop with this excuse and stop Insulting people. I've been on Firefox for nearly 20 years, but Mozilla has ruined it for me little by little. The last straw has been the horrible UI redesign. So I switched to a Chromium browser. Tell Mozilla to make a better browser and to listen to their community, instead of blaming people for using what serves them best.

[-] steakmeout@aussie.zone 1 points 1 year ago

What does your UI gripe have to do with this biased tabloid piece you shared?

Firefox is fine and works even better than it ever has. If you cared about the UI so much you'd have tried any of its forks that use different and older designs.

load more comments (8 replies)
[-] phillycodehound@geddit.social 3 points 1 year ago

Ugh. DRM. I freaking hate DRM. I "buy" a book from Amazon and it's all DRMed. I like the Kindle app so I keep buying there. But when I can I buy physical books at a LBS

[-] jarfil@beehaw.org 2 points 1 year ago

THIS IS NOT (just) ABOUT GOOGLE

Currently, attestation and "trusted computing" are already a thing, the main "sources of trust" are:

  • Microsoft
  • Apple
  • Smartphone manufacturers
  • Google
  • Third party attestators

This is already going on, you need a Microsoft signed stub to boot anything other than Windows on a PC, you need Apple's blessing to boot anything on a Mac, your smartphone manufacturer decides whether you can unlock it and lose attestation, all of Microsoft, Apple and Google run app attestation through their app stores, several governments and companies run attestation software on their company hardware, and so on.

This is the next logical step, to add "web app" attestation, since the previous ones had barely any pushback, and even fanboys of walled gardens cheering them up.

PS: Somewhat ironically, Google's Play Store attestation is one of the weaker ones, just look at Apple's and the list of stuff they collect from the user's device to "attest" it for any app.

[-] ModdedPhones@lemmy.ml 33 points 1 year ago

I started looking at Mac's for my next computer. Due to this amazing project. https://asahilinux.org/

[-] argv_minus_one@beehaw.org 1 points 1 year ago

you need a Microsoft signed stub to boot anything other than Windows on a PC

False. Every PC I've had has allowed Secure Boot to be turned off, and some of them allow me to add another trusted certificate as well.

you need Apple’s blessing to boot anything on a Mac

False. The Mac boot process is completely unlocked, at least on Intel Macs.

your smartphone manufacturer decides whether you can unlock it and lose attestation

My Pixel 6 allows me to unlock the boot loader at any time.

Attestation exists, unfortunately, but it's not nearly as pervasive as you seem to think.

This is the next logical step, to add “web app” attestation, since the previous ones had barely any pushback

Uh, there was huge pushback. That's why even a Microsoft Surface won't stop you from installing Linux.

[-] SomethingBurger@beehaw.org 1 points 1 year ago

My Pixel 6 allows me to unlock the boot loader at any time.

By doing that, you no longer pass SafetyNet, and some apps refuse to work without it. If unlocking your device removes features, then you aren't really allowed to do so.

[-] abhibeckert@beehaw.org 0 points 1 year ago* (last edited 1 year ago)

The Mac boot process is completely unlocked, at least on Intel Macs.

On Modern Macs, the process is somewhat convoluted, but you are able to boot into a custom compiled boot loader / operating system while secure boot is enabled. It just needs a few minor hoops to sign the boot loader - steps that would be difficult to social engineer around but perfectly reasonable to do them intentionally if installing an alternate operating system is your thing.

iPhone is, of course, a different story. Hopefully that changes some day. The CPU and boot process is the same as a Mac, so there's no reason it couldn't be unlocked. Might require government intervention though.

[-] argv_minus_one@beehaw.org 1 points 1 year ago

It just needs a few minor hoops to sign the boot loader - steps that would be difficult to social engineer around but perfectly reasonable to do them intentionally if installing an alternate operating system is your thing.

Does that not create a barrier for entry for non-technical people looking to use an alternative operating system?

[-] mnrockclimber@lemmy.sdf.org 1 points 1 year ago

non-technical people looking to use an alternative operating system

Umm, you don't see the oxymoron there?

[-] beefcat@beehaw.org 1 points 1 year ago* (last edited 1 year ago)

you need a Microsoft signed stub to boot anything other than Windows on a PC

Not necessarily, most motherboards and laptops (at least every single one I've ever owned) allow users to enroll their own Secure Boot keys and maintain an entirely non-Microsoft chain of trust. You can also disable secure boot entirely.

Major distros like Ubuntu and Fedora started shipping with Microsoft-signed boot shims as a matter of convenience, not necessity.

Secure Boot itself is not some nefarious mechanism, it is a component of the open UEFI standard. Where Microsoft comes in to play is the fact that most PC vendors are going to pre-enroll Microsoft keys because they are all shipping computers with Windows, and Microsoft wants Secure Boot enabled by default on machines shipping with with their operating system.

load more comments (12 replies)
load more comments (4 replies)
[-] Jaysyn@kbin.social 2 points 1 year ago

It's time for Alphabet to be broken up into separate letters.

[-] jherazob@beehaw.org 1 points 1 year ago* (last edited 1 year ago)

Note of amusement: The GitHub issues tracker for that proposal got swamped with tickets either mocking this crap or denouncing it for what it is, this morning the person who seems to be the head of the project closed all those tickets and published this blog post, in essence saying "Shut up with your ethical considerations, give us a hand in putting up this electric fence around the web". Of course that didn't stop it.

Also somebody pointed out this gem in the proposal, quoted here:

6.2. Privacy considerations

Todo

Quick edit: This comment on one of the closed tickets points out the contact information of the Antitrust authorities of both US and EU, i think i'm gonna drop the EU folks a note

Edit: And they disabled commenting on the issues tracker

[-] TheOakTree@beehaw.org 2 points 1 year ago* (last edited 1 year ago)

My favorite part is when they ask you to give them the benefit of the doubt, but also anyone who disagrees with them in a way that doesn't fit their expectations is "noise."

[-] Norgur@kbin.social 1 points 1 year ago

And if you have issues with the "use case" itself, you're shit out of luck, shut it, shithead!

If you raise legal issues with the 'use case' of their 'web platform' thing, ppl will just not respond to you!

Meaning: we don't care if the shot we plan might be illegal, and we won't be stopped by you fucks telling us if it is or not "

[-] resetreboot@geddit.social 2 points 1 year ago

We developers should stop just looking at the technical side of our work only. There's social, economic and values to be taken into account when we put our minds to solve a problem. We tend to go blindly into it, without thinking what it can cause when it is released into the world.

It's like if we put a bunch of developers into a secret project to develop an Internet World Wide Nuclear Bomb a là Project Manhattan... the leaders shouldn't really have to hide what they were about to do, just throw the developers and engineers troubles to solve and they wouldn't mind what it will be used for. It's just tech, right?

At least this guy seems to fit the type: I want to do this technology I've been tasked for, I'm trying to solve a technological problem. The rest of the world is telling him «Man, this is a bad idea to implement.» and he whines saying «I want solutions to this technology, not what is wrong with it!»

(And if you aren't one of those developers, congratulations, we need more of you!)

[-] Nepenthe@kbin.social 1 points 1 year ago

[Don't assume consensus nor finished state]

Often a proposal is just that - someone trying to solve a problem by proposing technical means to address it. Having a proposal sent out to public forums doesn't necessarily imply that the sender's employer is determined on pushing that proposal as is.

It also doesn't mean that the proposal is "done" and the proposal authors won't appreciate constructive suggestions for improvement.

[Be the signal, not the noise]

In cases where controversial browser proposals (or lack of adoption for features folks want, which is a related, but different, subject), it's not uncommon to see issues with dozens or even hundreds of comments from presumably well-intentioned folks, trying to influence the team working on the feature to change their minds.

In the many years I've been working on the web platform, I've yet to see this work. Not even once.

.....?
What is this, "Good vibes only?"

[-] rambaroo@beehaw.org 1 points 1 year ago

Never seen it work? These faang people are totally delusional. Google keeps putting off their third party cookie retirement exactly because of outcries like this.

[-] tojikomori@kbin.social 1 points 1 year ago

"Good vibes only" seems to be embedded in the culture of web development today. Influential devs' Twitter accounts have strong Instagram vibes: constantly promoting and congratulating each other, never sharing substantive criticisms. Hustle hustle.

People with deep, valid criticisms of popular frameworks like React seem to be ostracized as cranks.

It's all very vapid and depressing.

[-] rambaroo@beehaw.org 1 points 1 year ago

Do you have an article about react? I'd love to read it. And yes tech is chock full of egos and fakers.

[-] tojikomori@kbin.social 1 points 1 year ago

Alex Russell is a good read on React. His position gives him a broad view of its impacts and has kept him from being sidelined. This Changelog podcast is a decent distillation of his criticisms – it was recorded earlier this year, a few days after his Market For Lemons blog post.

(Sorry for the late reply! I've been a bit swamped lately and away from kbin.)

[-] BumpingFuglies@lemmy.zip 0 points 1 year ago

Wow, that blog post is truly nauseating and infuriating to read, knowing the context.

Fuck Google. They're the Nestlé of tech.

[-] Bishma@discuss.tchncs.de 1 points 1 year ago

I don't think Google has recently insisted that child slavery is just a thing we all have to be OK with if we want chocolate, or starved millions of babies by convincing their mothers that their breast milk is dangerous. But I also wouldn't be shocked to learn that they had...

[-] fulano@lemmy.eco.br 2 points 1 year ago

No, but they accepted to publish political fake news ads for one of the running parties (the fascistoid one, of course) in the last elections here in Brazil.

That party has lost, but it was too close. In the 4 last years, during their mandate, hunger, violence, discrimination rape, and other problems rose to the highest levels in the century.

Google and other big tech companies have been influencing elections in a lot of places, and the consequences are enormous.

[-] Fontasia@feddit.nl 1 points 1 year ago

Can someone explain to me how this is different to the trust system used by SSL Certificates?

[-] observer@feddit.nl 1 points 1 year ago

I think that the main difference is that with SSL you only encrypt the data, and then you can modify at will(as in making changes to every page your browser renders - ad block, grease monkey like extensions etc. With DRM, you won't be able to modify the pages at all

load more comments (2 replies)
[-] Faydaikin@beehaw.org 1 points 1 year ago

Yep, that sounds like a very Mega-Corp thing to do.

[-] kool_newt@lemm.ee 1 points 1 year ago

I'm working on essentially removing Google from my life.

[-] FunzioneSperimentale@feddit.it 0 points 1 year ago

Like everyone else, I was an avid google user and used google for all its services. Then I started to learn about privacy and switched to chrome to firefox with duckduckgo. Until yesterday I was also often using an adblocker for advertising, I then realized that this does harm to companies and sites that I am interested in. Advertising is fine, I enjoy it if it's on the site, but I want to be given a choice to behave. That's it. Tradotto con DeepL https://www.deepl.com/app/?utm_source=android&utm_medium=app&utm_campaign=share-translation

load more comments (2 replies)
load more comments
view more: next ›
this post was submitted on 21 Jul 2023
41 points (100.0% liked)

Technology

37554 readers
323 users here now

A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.

Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.

Subcommunities on Beehaw:


This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 2 years ago
MODERATORS