hurutparittya

Fortunately Google thought about this, so government ID and banking apps usually check that they are running on a sufficiently locked down and officially blessed phone through the Play Integrity API.

This makes emulation basically impossible.

Is there any person or organization out there doing significant work against remote attestation being a thing? I'd love to support them.

So if I understand the last comment correctly...

It's possible to get unauthenticated streams if you know the media paths. Media collections, at least in my experience, usually adhere to a few common organization schemes. This would allow someone with a list of common titles, which are available in various public databases, to leak data by brute force from a public facing Jellyfin instance quite efficiently.

Discounting this as merely "suboptimal behavior" sounds like a mistake.

Well, I've been using NixOS for a while now, and it's by far the most "integrated" feeling distro I've ever tried.

I'm not sure what you mean by "invented", but as far as I know the Chinese lab leak theory is still widely accepted as credible and supported by many facts.

Just... get the TGZ then?

Any target date for open-sourcing it? :^)

Foot would be beyond perfect if it had ligature support.

Exit node or relay?

I agree, "tech-literate" was a poor choice of words on my part. Tech enthusiast or tinkerer would have been much better options to convey my opinion.

I feel like there used to be a higher concentration of those people here.

I'm always surprised when people speak highly of Apple devices here. While they do have certain advantages, there are some issues that should be dealbreakers for tech literate people. (in my own, possibly biased opinion at least)

In case of Macbooks, it's the fact that they refuse to provide an official GPU driver for Linux and general poor support for things outside the walled garden. The Asahi stuff is cool and all, but come on, is a 3.4 trillion dollar company really going to just stand there and watch some volunteers struggling to provide support for their undocumented hardware without doing anything substantial to help? That sounds straight up insulting to me, especially for such a premium product.

For iphones, it's the fact that you are not allowed to run your own code on YOUR OWN DEVICE without paying the Apple troll toll and passing the honestly ridiculous Apple Store requirements.

And of course, in both cases, they actively sabotage third party repairs of their devices.

I'd never use anything less than completely open source and self-hostable for this purpose! Which is why I'm having trouble with finding a viable alternative to KeepassXC. I intended to go with Bitwarden+Vaultwarden, but that sounds a lot less appealing now.

Not having a built-in syncing mechanism is the #1 reson I'm looking to move away from KeepassXC as soon as possible. Making users kludge together their own makeshift sync methods using file shares and dropbox is honestly comical when syncing is probably one of the main features people think of when talking about password managers.

It's only a matter of time when it's this easy. Some essential service, most likely a bank, will inevitably turn it on in the future. And it only takes one of those to make all freedom respecting providers non-viable for someone. For our safety, of course. :)