It may even save your wallet, and those expensive carbon rims!
I happen to use the Vittoria’s Air-Liner insert for my rear tires. My use case is bikepacking, and mountain biking (hard tail). One of the first things I noticed was the additional side wall support - I haven't burped a tire in a long while. They have probably also saved my rims on a number of occasions when I've hit a rock or root edge when sending it. I think it's worth the piece of mind.
Also, they aren't just pool noodles, they are made a bit different for use with tire sealant. You may also need to change out your tire stem, for one that will accommodate air passage/interference with the insert.
I think they see the slippery slope emerge, and they take that slope to the logical extreme.
The centralized gatekeeper for attestation, play integrity, etc, the EU sees it as mitigating security risks with Google, the corporations see it as opportunity to change the centralized gatekeeper; to maximize capital. It isn't just a (terrible) strategic move for security, it's also a move to align capital. (also imagine the meta data network you could create with the attestation, another data point for surveillance. think Chat Control) I see GrapheneOS prioritize security; not capital. The people/groups/companies they are often at odds with prioritize the mechanisms of capital (or surveillance capitalism) over security.
Face Palm.
Moving to an Open Education Resources (OER) framework would curtail this kind of BS.
What is OER? Find out more here: https://guides.library.harvard.edu/OER
You make valid points.
I don't know that the word apathy is strong enough in this context, shrug. I mean, why not just say the thing? "This needs to be fleshed out". At least it provides direction and context, (go push sand somewhere else; the TAB) and would probably be quicker/easier to write then sling this tired narrative, and non-answer to what is actually being asked;
Thus seeking documented guidance on new Linux Security Module submissions for how they should be optimally introduced.
(The TSEM LSM people aren't trying to push a specific thing, they are asking for clarity of the process and particulars by witch a thing should be submitted; because from what I understand, their project (and others) keep hitting walls on the grounds of 'formatting' and 'structure'; as a stop-gap, and thus an incomplete review, of the ideas and contents of the problem/solution set of the project. (Think: "It's too difficult for me to read the thing, so I won't until you fix it" -- And not name with specifics to what is considered 'fixed', or what the process for re-submission is; It's a backhand way of claiming "secret knowledge" over the thing and then saying "just fix it". Fix what specifically ? )
That is to say; when outsiders see these kinds of roadblocks, and the responses/narratives of key figures in these spaces is "apathy" of this degree, it feels something to me akin to security theater.
"Yes, I know that security people always think they know best, and they all disagree with each other, which is why we already have tons of security modules. Ask ten people what model is the right one, and you get fifteen different answers."
"I'm not in the least interested in becoming some kind of arbiter or voice of sanity in this."
How do you even get to a consensus model to tease these things out; when your answer is a refusal to engage with "pointless" things?
It just seems contentious to me, that anyone when considering this kind of rhetoric, would make claims in regards to the level of security that Linux (may) provide. It just feels something akin to playing in the realm of security theater.
A non-walled garden isn't much help for you either.
There's nothing stopping them from 'requiring' Client-Side - Device level scanning.
The technological 'problem' required to do that, isn't too difficult to impose when you also create an environment where your device/provider 'requirement' in order to even use your technology, forces compliance, and it isn't that far fetched of a technical problem to be solved.
I know this is probably semantics; but I don't think it will be completely on Signal, ie the app store owner is the one who is going to have the pressure to remove the apps: plural, as they will likely also remove any alternatives in the same vain. Same with any other service provider, store front, internet or cellular access, or device maker...
There is no strictly defined "scope" of what ChatCountrol covers. It's as broad as scanning "communications".
And includes things like Client-Side Scanning.
Pre-encryption scanning - Content is analyzed before it gets encrypted
Device-level analysis - Scanning occurs on the sender's device before transmission
End-to-end encrypted services - Even encrypted communications are subject to scanning requirements
What I mean by Signal complying by leaving, is that they stop allowing registration of phone numbers 'from' these countries, and stop hosting any of their infrastructure (AWS) within these boarders.
Self-Hosted or Federated, is only a small portion of the battle. You have a bigger problem.
I don't see Signal complying, and it's already a target for 'breaking' it's encryption. I think it is more likely to leave the marketplace in which ChatControl is forced (it's the only winning move); and I don't think that necessarily means you 'can't' use it; if anything ChatControl environments give a framework that allows them to force supporting network/service infrastructure into blocking or restricting the 'ease' in which these tools can be installed, accessed and used. I would focus efforts on how people can get around this vector, not just the specific tool in use.
Who benefits from sowing a narrative around "drama", "accusation", and/or "paranoia". Seriously.
I think given the following circumspect; GrapheneOS's reaction, to move project pieces out of potential hostile environments/jurisdiction, is perfectly reasonable.
France's Support for EU “Chat Control”, scanning proposals. France has been one of the governments most supportive of EU‑level proposals that would require scanning of communications and devices for illegal content.
The general French framing and approach to cybercrime. As in other EU countries, French authorities are pushing for: Expanded powers to compel cooperation from service providers, and developers. Strong rhetoric against tools that are seen as systematically obstructing investigations.
Enjoy the journey!
I went with a kit from splitkb ; and the community in their discord was super helpful.
Soldering a keyboard isn't too difficult, the components aren't very fragile, and you mostly have some easy feedback and will know exactly where you messed up (the key doesn't work, which is easier then chasing signals/volts around a more typical soldering/electronics project). I think its a very rewarding endeavor.
I think the harder part is learning a new keyboard layout; and overcoming muscle/finger memory.
Find the skills gaps that you have; find the thing that interests you about it; and dig into that fundamental piece, don't understand what the fundamentals might be, go check out .edu, or certification outlines with the vocabulary/knowledge you do have so you can build from the concepts (and benefit from their already determined progressions) , so you can developed additional vocabulary and knowledge of the discipline.
I think the gatekeeping part isn't the warning or cautionary advice being given, It's the failure to point, and give direction to, the relevant thing(s), the skill sets, the place to start in order to understand the complexities.
Like the hart-surgeon analogy given elsewhere in the comments; it's not just the dire warning of 'you can kill someone' - it's the humanity to say, well if you want to learn how to do this, you're going to have to start by having an understanding of basic biology, organic chemistry, human anatomy, etc, and to learn about those things go here...
I think you've missed the point OP is trying to communicate.
It's not that these things aren't relevant, highly important, and good caution/warning. It's the gate that people are creating with these no depth explainers. "you need to understand" "if you don't know" -- then fail to provide direction to people who want to know, to learn these things, to figure out where to start; that's the gate.
Lockdown mode for websites and apps isn’t terrible to manage/configure on the fly, bonus is it makes you (re)consider if you should.
It may even save your wallet, and those expensive carbon rims!
I happen to use the Vittoria’s Air-Liner insert for my rear tires. My use case is bikepacking, and mountain biking (hard tail). One of the first things I noticed was the additional side wall support - I haven't burped a tire in a long while. They have probably also saved my rims on a number of occasions when I've hit a rock or root edge when sending it. I think it's worth the piece of mind.
Also, they aren't just pool noodles, they are made a bit different for use with tire sealant. You may also need to change out your tire stem, for one that will accommodate air passage/interference with the insert.
I'm of two minds. I agree. But there is also the need to go to where the people having these kinds of conversations are.
I think they see the slippery slope emerge, and they take that slope to the logical extreme. The centralized gatekeeper for attestation, play integrity, etc, the EU sees it as mitigating security risks with Google, the corporations see it as opportunity to change the centralized gatekeeper; to maximize capital. It isn't just a (terrible) strategic move for security, it's also a move to align capital. (also imagine the meta data network you could create with the attestation, another data point for surveillance. think Chat Control) I see GrapheneOS prioritize security; not capital. The people/groups/companies they are often at odds with prioritize the mechanisms of capital (or surveillance capitalism) over security.
Face Palm. Moving to an Open Education Resources (OER) framework would curtail this kind of BS.
What is OER? Find out more here: https://guides.library.harvard.edu/OER
@rockstar1215@lemmy.world OP,
Suggestions:
Build an import/export adapter.You make valid points. I don't know that the word apathy is strong enough in this context, shrug. I mean, why not just say the thing? "This needs to be fleshed out". At least it provides direction and context, (go push sand somewhere else; the TAB) and would probably be quicker/easier to write then sling this tired narrative, and non-answer to what is actually being asked;
(The TSEM LSM people aren't trying to push a specific thing, they are asking for clarity of the process and particulars by witch a thing should be submitted; because from what I understand, their project (and others) keep hitting walls on the grounds of 'formatting' and 'structure'; as a stop-gap, and thus an incomplete review, of the ideas and contents of the problem/solution set of the project. (Think: "It's too difficult for me to read the thing, so I won't until you fix it" -- And not name with specifics to what is considered 'fixed', or what the process for re-submission is; It's a backhand way of claiming "secret knowledge" over the thing and then saying "just fix it". Fix what specifically ? )
That is to say; when outsiders see these kinds of roadblocks, and the responses/narratives of key figures in these spaces is "apathy" of this degree, it feels something to me akin to security theater.
How do you even get to a consensus model to tease these things out; when your answer is a refusal to engage with "pointless" things?
It just seems contentious to me, that anyone when considering this kind of rhetoric, would make claims in regards to the level of security that Linux (may) provide. It just feels something akin to playing in the realm of security theater.
Maybe start here? https://fightchatcontrol.eu/
A non-walled garden isn't much help for you either. There's nothing stopping them from 'requiring' Client-Side - Device level scanning. The technological 'problem' required to do that, isn't too difficult to impose when you also create an environment where your device/provider 'requirement' in order to even use your technology, forces compliance, and it isn't that far fetched of a technical problem to be solved.
I know this is probably semantics; but I don't think it will be completely on Signal, ie the app store owner is the one who is going to have the pressure to remove the apps: plural, as they will likely also remove any alternatives in the same vain. Same with any other service provider, store front, internet or cellular access, or device maker...
What I mean by Signal complying by leaving, is that they stop allowing registration of phone numbers 'from' these countries, and stop hosting any of their infrastructure (AWS) within these boarders.
Self-Hosted or Federated, is only a small portion of the battle. You have a bigger problem.
I don't see Signal complying, and it's already a target for 'breaking' it's encryption. I think it is more likely to leave the marketplace in which ChatControl is forced (it's the only winning move); and I don't think that necessarily means you 'can't' use it; if anything ChatControl environments give a framework that allows them to force supporting network/service infrastructure into blocking or restricting the 'ease' in which these tools can be installed, accessed and used. I would focus efforts on how people can get around this vector, not just the specific tool in use.
I don't know that many of my adult friends even hit half the items talked about in this article.
What's your own score?
Who benefits?
Who benefits from sowing a narrative around "drama", "accusation", and/or "paranoia". Seriously.
I think given the following circumspect; GrapheneOS's reaction, to move project pieces out of potential hostile environments/jurisdiction, is perfectly reasonable.
France's Support for EU “Chat Control”, scanning proposals. France has been one of the governments most supportive of EU‑level proposals that would require scanning of communications and devices for illegal content.
The general French framing and approach to cybercrime. As in other EU countries, French authorities are pushing for: Expanded powers to compel cooperation from service providers, and developers. Strong rhetoric against tools that are seen as systematically obstructing investigations.
I believe this is what you are looking for https://killedbymozilla.com/
Enjoy the journey!
I went with a kit from splitkb ; and the community in their discord was super helpful.
Soldering a keyboard isn't too difficult, the components aren't very fragile, and you mostly have some easy feedback and will know exactly where you messed up (the key doesn't work, which is easier then chasing signals/volts around a more typical soldering/electronics project). I think its a very rewarding endeavor.
I think the harder part is learning a new keyboard layout; and overcoming muscle/finger memory.
The revelations that came out from the Edward Snowden ordeal.
Find the skills gaps that you have; find the thing that interests you about it; and dig into that fundamental piece, don't understand what the fundamentals might be, go check out .edu, or certification outlines with the vocabulary/knowledge you do have so you can build from the concepts (and benefit from their already determined progressions) , so you can developed additional vocabulary and knowledge of the discipline.
I think the gatekeeping part isn't the warning or cautionary advice being given, It's the failure to point, and give direction to, the relevant thing(s), the skill sets, the place to start in order to understand the complexities.
Like the hart-surgeon analogy given elsewhere in the comments; it's not just the dire warning of 'you can kill someone' - it's the humanity to say, well if you want to learn how to do this, you're going to have to start by having an understanding of basic biology, organic chemistry, human anatomy, etc, and to learn about those things go here...
I think you've missed the point OP is trying to communicate. It's not that these things aren't relevant, highly important, and good caution/warning. It's the gate that people are creating with these no depth explainers. "you need to understand" "if you don't know" -- then fail to provide direction to people who want to know, to learn these things, to figure out where to start; that's the gate.