nostr:npub12r0yjt8723ey2r035qtklhmdj90f0j6an7xnan8005jl7z5gw80qat9qrx the new alien movie was excellent
Is that Alien Romulus?
We've become aware of another company selling devices with #GrapheneOS while spreading harmful misinformation about it to promote insecure products. We're making our usual attempt at resolving things privately. However, we need to quickly address what has been claimed regardless.
Downloading and installing an app followed by entering sensitive data into it or granting it powerful permissions isn't a vulnerability/exploit. Accessibility service access can't be directly requested but rather has to be granted via Settings app in the accessibility section.
Accessibility service access is extremely powerful and essentially gives the same control available to the user to the app. This is explained with clear warnings. It's also not possible to enable it for an app not installed from a modern app store without an extra hidden menu.
Apps not installed through a modern app store have extremely dangerous settings including accessibility service access restricted. Users have to navigate to a semi-hidden menu to enable this. UI doesn't explain how to do it. It's a higher barrier than simply phishing info, etc.
Accessibility services are required by many users and the feature can't simply be removed. It's possible to disable this and other dangerous features for end users via a device management app. This is the right approach if you have a userbase you want to protect from themselves.
If you purchase a device with GrapheneOS, we strongly recommend booting it into recovery and wiping data before using it. Next, verify it's running genuine GrapheneOS:
https://grapheneos.org/install/web#verifying-installation
Due to complete verified boot, wiping provides the same assurance as a fresh install.
Our web installer is very easy to use. If you're able to use a web browser and follow basic instructions, you have the skill set required to install it:
https://grapheneos.org/install/web
However, if you do buy a device with GrapheneOS, you can verify it's the real deal without malware.
Simply going to a mainstream local business and purchasing a device to install GrapheneOS is the most secure way to obtain a device.
Consider the risk of buying a device from a company marketing to cryptocurrency users, and at least follow our wiping and verification advice.
Purchasing a device with malware installed is something we defend against. We provide a way to block this through verified boot and the verification process recommended on the site. But you can't prevent something like replacing battery with one including a standalone tracking device...
Thank you for posting this... I've got one sitting in a corner, and I'm like I can't trust because I don't know how to verify...
Maybe the Aztecs and the Mayans got this too... Ancient sacred quipu suddenly used as braided hairpieces... Loma preta packaged and sold as potting soil... etc, etc...
...not hardening here, but this is just another false dichotomy... In reality there are givers, takers and middlemen, that know how to do both π
The White Witch may ride by in her sleigh and enforce the zone-out code... As sure as you do build a shelter shed, she will approve a coal-burning, industrial factory or a solar wind fart farm... The trees are cool with your shed, only a few are informers to WW...
Price randomization should be a safe middle ground, right? Just get some of those e-ink price displays and have the database scramble the prices every hour or so?
How can I just use nostr profiles to redirect all the annoying requests from others to send me this or that bit of information in their favorite flavor of app/file/format/platform/login? I could just post the "required" info in nostr and send a nostr link... If they don't learn how, they simply don't get the info... Simplify, simplify, simplify...
Do you use the π emoji because Gowron was always making declarative statements with his eyelids wide open and eyebrows all the way up?
It's already there, legislated sexual normatives ARE the new morality...
I liked listening too, but after a while, one had to switch to JRE Clips to hoover up the good stuff and then it was all over and so repetitive... I still like listening once in a while... So many questions followed by anecdotes, but where's them there ANSWERS!
I was reading something somewhere, that grocery stores make their money by renting shelf space "real estate" to the brands that want to sell there... Maybe the razor thin margins are the triple net lease with the shelf owner... π€£
Looking to set up a non-profit organization with Nostr as new way to reach out. Finding it interesting how to resolve the issue of securing the private key, while still providing post permissions without leaving with the key if the person changes roles. Up to now, doesn't seem possible without a hardware signing device which they could still remain with it after leaving their role. Even if it's not easy to implement, anyone with a simple solution to maintain, is appreciated.
But nostr:npub1getal6ykt05fsz5nqu4uld09nfj3y3qxmv8crys4aeut53unfvlqr80nfm could be the solution to separating at least the access to the lightning funds from the Nostr account. How about it, Alby? Just need that invite to test it out π
#getalby
Can I just listen in to the convo? This is something I'm interested in too... The Amber app separates the keys from the nostr app... I'm hoping they add air-gapped QR code signing to turn any device into an nostr signing device (NSD)... Foundation claims their Passport hardware wallet can be upgraded to generate nostr nsecs but I haven't tried yet...
Anyone down with what Steve Emerson out of Orlando says about the inversion of corporatism and private rights? This is one of those examples... A corporation which exists at the pleasure of the government for the profit of it's owners within the laws that are meant to protect the private sector are using said private laws (ie private arbitration) to usurp and bury the laws that are supposed to protect the sacred and inalienable rights of the private individual... The power of 1, the power of 2, the power of maaaannnyyyy... Good grief, they don't even act according to even their own "inspiration"...
Noice, noice... I think it was a 1-2 punch... The Ceasars liked to play the "son of a god" game with the people, like the ultimate in fame and popularity contests... So splitting "Caesar's and God's" was a wedge issue to reintroduce the ultimate dichotomy... Basically the dude was saying Caesar ain't God, but he said it with tact for plausible deniability and to spark self-attestation in those with ears to hear... I like your compliance angle, but the dude was like, I ain't paying but if you want too, go stick your hand in the fish mouth and use that... I'm sure there's some Dagon reference there, but I'm not that smart yet...
"I'm patriotic!"
"God wants us to submit to the authorities."
"Government is there to punish evil."
"My government is good."
"Without government, might makes right will overpower the defenseless."
"Government defends the rights of the weak."
-Quotes
