• 0 Posts
  • 13 Comments
Joined 9 months ago
cake
Cake day: May 14th, 2024

help-circle
  • Apple has three realistic options:

    1. Submit to the UK’s demands and grant them a backdoor to encrypted backups.
    2. Disable encrypted backups in the UK.
    3. Leave the UK market entirely.

    They went with #2, which is probably the least user-hostile option available.

    From 1500GMT on Friday, any Apple user in the UK attempting to turn it on has been met with an error message.

    Existing users’ access will be disabled at a later date.

    I am very interested in seeing what the UX around this will be. Ideally, they should give users direct notice well in advance, so they have time to plan a migration or mitigation. Of course, Apple makes it basically impossible to perform a full backup through any mechanism except iCloud, so…one more example of how vendor lock-in is inherently a security and privacy risk.



  • I’m sure there will be workarounds.

    I think there are plenty of people who would be pirates if it were more convenient, but I suspect the point of diminishing returns for legislation has already been passed. If you’re savvy and dedicated enough to use a VPN in the first place, then this probably won’t stop you. Non-tech-savvy people are already turned off of torrents for half a dozen different reasons.

    DNS, though? That will block a lot of people from accessing things like Z-library, which is currently easy enough to access for anyone who knows how to use Google.

    China’s measures have been largely successful, unfortunately. It’s still possible to VPN out, but it’s a risk a lot of people are unwilling to take since it could realistically get them in trouble. I’ve lost contact with some friends in China because we have no shared platforms and the increasing blocking measures over the past 10 years finally passed their tolerance threshold.

    I guess I could figure out how to use iMessage, which AFAIK is the only end-to-end encrypted messaging service that still works (or at least the only moderately popular one). Makes me wonder how secure it really is if China hasn’t banned it…




  • This assumes a legitimate need to prove who you are outside the context of that specific site, rather than just within it. Sometimes that need is real, sometimes it is not.

    When it’s not, and you only need to prove you are the same person who created the account, then a simple username and password is sufficient. Use 2FA (via authenticator app or key, NOT via SMS or email) on top of that. This allows users to prove to a sufficient degree that they are the owner of that account.

    This is how most Lemmy instances work, for example. I can sign up by creating a username and password, with optional 2FA. They do not need my email. They do not need my phone number. They do not need my name, or my contacts, or anything else that is not related to my identity within their server.

    I realize that this is untenable at large scales for any communications platform. Spam (and worse) is a problem wherever there are easy and anonymous signups. I’m honestly not sure how Lemmy is as clean as it is. I guess it’s just not popular enough to attract spammers.



  • I think it’s just for enterprise contracts, yeah.

    Fedora seems like a good general-purpose pick to me, because it is modern, it has a large community, and it’s easy enough to install and use. It has similar advantages as Ubuntu — that is, a large community and broad commercial third-party support — without the downsides of having a lot of outdated software and lacking support for new hardware. I think Fedora is less likely to have show-stopping limitations than a lot of other distros, even beginner-friendly ones like Mint.

    But that’s just one opinion. There’s nothing wrong with Ubuntu or derivatives. I’ve heard good things about Pop_OS as well, though I’ve never tried it myself.



  • That’s when Windows 10 stops getting security updates. Expect most software vendors to drop support for Windows 10 this year if they haven’t already. That doesn’t necessarily mean things will stop working, but it will not be tested and they won’t spend time fixing Win10-specific problems.

    In enterprise, you can get an additional three years of “extended security updates”. That’s your grace period to get everyone in your org upgraded.

    While I strongly relate to anyone who hates Windows 11, “continue using Windows 10 forever” was never a viable long-term strategy.

    Windows 10 was released in 2015. Ten years of support for an OS is industry-leading, on par with Red Hat or Ubuntu’s enterprise offerings and far ahead of any competing consumer OS. Apple generally only offers three years of security updates. Google provides 3-4 years of security updates. Debian gets 5 years.

    There has never been a time in the history of personal computing when using an OS for over 10 years without a major upgrade was realistic. That would be like using Windows 3.1 after XP was released. Windows 10 is dead, and it’s been a long time coming.

    Now go download Fedora.


  • Silly question perhaps, but are you sure you’re using the correct port on your Linux system? If I plug my external HD into a USB2 port, I’m stuck at 30-40MB/sec, while on a USB3 port I get ~150-180MB/sec. That’s proportionally similar to the difference you described so I wonder if that’s the culprit.

    You can verify this in a few different ways. From Terminal, if you run lsusb you’ll see a list of all your USB hubs and devices.

    It should look something like this:

    Bus 002 Device 001: ID xxxx:yyyy Linux Foundation 3.0 root hub
    Bus 002 Device 002: ID xxxx:yyyy <HDD device name>
    Bus 003 Device 001: ID xxxx:yyyy Linux Foundation 2.0 root hub
    Bus 004 Device 001: ID xxxx:yyyy Linux Foundation 3.0 root hub
    

    So you can see three hubs, one of which is 2.0 and the other two are 3.0. The HDD is on bus 002, which we can see is a USB 3.0 hub by looking at the description of Bus 002 Device 001. That’s good.

    If you see it on a 2.0 bus, or on a bus with many other devices on it, that’s bad and you should re-organize your USB devices so your low-speed peripherals (mouse, keyboard, etc.) are on a USB2 bus and only high-speed devices are on the USB3 bus.

    You can also consult your motherboard’s manual, or just look at the colors of your USB ports. By convention, gray ports are USB 1.0, blue ports are 2.0, and green ports are 3.x.

    If you’re running KDE, you can also view these details in the GUI with kinfocenter. Not sure what the Gnome equivalent is.


  • I know this is from 2015, but even then, it was a bit late to make this argument. This was already mainstream enough in the 90s to be the punchline in syndicated comic strips. By 2015, we already had “customer experience engineers” (i.e. tier-1 helpdesk). The ship has not only sailed, it has sunk.

    Anyway, the phrase originated in an era when programming was very different from what it is today, when most programmers came from a background in electrical engineering or something along those lines.