megous

Fully deserved. I hate these spammers.

There's no escaping the fact that EU fucked the hobbyists that previously were able to ship stuff not even made or available in EU at sane prices from china. I f I were to buy things I did in last 12 or so years based on current rules, I'd pay like 200% on customs/taxes and bullshit charges like 3+EUR per made up category on invoice or whatever it's now.

Hopefully, it will put a downwards price pressure on middlemen/resellers, now that buying directly is prohibitively expensive.

Yeah, sure. By magic I guess. :)

?

Why would you need to be elite? That's your own assumption.

There are two conditions for compromise. You're in the position where you have opportunity/access. You are willing to do what's asked.

MITM only works if you allow trust in corporate CA on the outbound HTTPS connections. And why would you?

You're sending your knock over the public network in the clear. It's observable by anything in the path. And then you're not the only one that can find the keyhole.

Naive. There's not much that prevents you from running ssh over https. Not even traffic patterns will give you up in the age of ubiquitous websockets and/or http2 streams.

Smartphones are everywhere, and Israeli spyware is well known, some companies producing it are even banned in US. Not in EU though, for whatever reason. (one probably being, some governments are/were using it against opponents, like in Poland, Hungary or Greece)

They likely mean manipulated equipment for purposes of spying. It follows from the context further in the article when he's talking about Gaza.

Ever wondered how much Israel uses their 8200 alumni it has embedded in all major tech corporations? Maybe this is part of it. Embedding backdoors, and plausibly deniable bugs, or giving access directly, exfiltrating data, whatever.

Optionally. And passkeys attestation only covers the HW key for example, not the OS running the website or the website. You're still completely free to re-implement it your way + FIDO2 is a standard, so eg. if you want to write your own native app for the bank web API, or whatever else, you can and passkey attestation will not stop you.

Android app/os attestation on the other side is a complete lockdown that prevents you from creating your own apps on top of server side apis the original mobile apps use.

Well, dog and baby owners are great targets for advertising, so this makes sense.

You can do the same with LLM. Have one session document something, and other session write up an implementation, with nothing but docs shared in between.

JS webapps have one key feature in this respect, there's no possibility for banks to force particular OS/HW on you via attestation.

Not all UAF are explotiable. It really depends on what code that uses the stale pointer does with it and how controllable the freed/re-used data are. Although when evaluating I'd count much more on the first condition, rather than the second one, which may not be so easy to ascertain.

Logic would indicate that if it didn't happen, it would not be normal if it did now.