grumpyinfosec

i don't really get the point of this? Its a ITX motherboard with a moible chip. I could buy a itx board and a desktop chip for less. Or get a miniPC with the same chip for even less.

They are trying to disrupt building a PC, which was already modular and easy to upgrade, with a 1000+$ motherboard with soldered RAM?

realistically blocking low cost personal VPNs / proxies is pretty easy. Any new servers they stand up are gonna get picked up by commercial threat intel services with an hour and then just blocked. Especially if the CDNs are working with the government.

You could roll your own but wireguard/openvpn going to random hosting provider is gonna achieve the same thing if they are playing hardball.

ya it does seem that way. But, there is a pretty big cohort of people that are like this and they click on stuff to. So i'd guess it's more marketing to sad grind-set loners than deliberate propaganda.

You sue them and win damages? Courts tend to uphold contracts at face value.

ya it does seem like a good opportunity for US and Asian companies to get public sector research without even having to pay taxes for it. Europe really needs to build out the theory > applied science > product development > actually adding some value pipeline to make this have some impact longer term.

This makes alot of business sense, most orgs know better than to homebrew their mail env on (lets be honest here) "basement hosting LLC". So that leaves the people that are spamming/phishing as the core SMTP customer here.

We lost the personal self hosting fight long ago. I used to do it, but now i pay protonmail to do it for me and even that is losing its luster since proton technology IP blocks are pretty radioactive at this point. Some day will have join the outlook or gmail gang which makes me sad; but setting here in my chair staring at my orgs email firewalls and seeing 80+% inbound volume being auto-blocked as spam, bulk or phishing it make me wonder if anything of value was lost.

go to the IRL hardware / grocery store? I still get out of my chair to go the Costco, Ace hardware, Microcenter and REI's of the world. But short of that target, walmart, home depot have really stepped up their (fast/free) shipping game in the past few years.

Its possible to restrict DIY building of pretty much anything if your end goal was to stop people from doing something outside of their basement with it. I can't build my own open source coal fired power plant and except to sell power without the EPA coming to kill me. Same would be if i used a open source AI that violated some new consumer protection / anti fraud law if i choose to use it over the public internet / build it into a product. Hell you could probably go after the devs for being accessory if you really wanted to.

The license really does nothing to protect your project from regulation its just that the government doesn't care about open source yet.

sounds about right, but I'd up #1 from "basic computer knowledge" to "sysadmin level enterprise system experience" if you want to truly be an expert. Success in cybersecurity on the blueteam side to me is more being a really good sysadmin that is paid to only think about security. I've seen people that just jumped into the field with just their fancy cybersecurity degree and by god they can tell me exactly what part of MITRE this control handles (in painful detail) but when rubber meets the road they don't really know how domain controllers work. It sometimes doesn't inspire confidence and since we need main IT to listen to us as security "experts" that really can be a issue if they think we can do anything practical. (they don't let us touch their toys) Im a computer janitor and i know it, just a fancy one with security written on my door.

or you could enable ios lockdown mode in one click if you feel like going full "im a targeted individual". I'm more talking appsec here. Even from the personal non-enterprise security angle android has the sideloaded boyfriend stalkerware issue and the flavor of the week banking Trojan PDF readers on google play issue. Apple just seems to stay out the news on the app store security front.

i wouldn't put much stake a zerodium numbers as the benchmark of platform security. People who sell these kind of gray market mobile zero days for big bucks aren't going public about it. Mostly because the only buyers that aren't the OEM are nation states, maybe the top end of criminal land and of course the NSO group. Plus android's at least 10x the market when you start talking IOT and point sale etc.

I don't even let my users have browser extensions without them going through the formal review process. Managing the proliferation of PWAs (potentially unwanted apps) is one of the most unsolvable issues in security. iOS is the gold standard for secure mobile computing due to inability to support alot of these risky use causes.

But like stealing from people just because you don't like them doesn't really change the moral calculus. I'd imagine most people that steal anything don't like the victim very much. Do what you want (or what you can get away with) but the "moral" thing would be abstain from consuming the products entirely or buy them according the terms of the seller.