ZoneZealot
Joined 1 year ago
Joined 1 year ago
It's not intended for home users of course, because that could jeopardise sales in families.
Sure, to use the TV you need to go past the EULA screen. And the button right in front of you, pre-selected - is agree to all terms. And after pressing OK, you now have ACR turned on. But you did that, it wasn't on by default.
Okay I can take my soul sucking corporate hat off now.
At least bringing up the underlying method (restrict to contributors) has spawned the discussion about how that's probably a bad idea on the security side.
The account was commenting on the satirical sysadmin subreddit yesterday, so they know what makes a engaging story.
LiveKit Cloud uses virtual compute and networking across multiple (USA based) cloud providers. DigitalOcean, Google and Oracle at minimum. They each have servers all of the world of course, but the controlling entity(s) parent companies are all based in the USA.
Latency shouldn’t be a problem, it's handled by a global CDN.
Proton including that part about geopolitical instability implies that Meet is does not fall under the USA's CLOUD Act - that would be wrong. The metadata of any Meet call could be handed to USA authorities, for example the participants date & time, source IP and useragent of each member. The call itself should be E2E encrypted.
I didn't immediately see a red flag that would make me discount all of their work. It's clear what the author's general opinions are. They're entitled to them of course.
They can even block all but allow-list certain vendors and models, but because USB is an unauthenticated standard - an attacker can easily spoof any vendor or model. So best not to rely on that and instead block all of certain types of USB device.