Saik0

This whole discussion is about a government forcing Proton mail to take actions. Telling me to “read up on pfs” is irrelevant by your own admission. ProtonMail can be compelled to give up their keys, or to hand them over for all current/future transactions.

So once again…

“read up on pfs”
“Pfs doesn’t matter”
Literally this post.

You cannot rely on MTAs to transmit ANYTHING securely in the context of this discussion. Period. There is no E2E when there’s an MTA involved unless you’re doing GPG/PGP or S/MIME. Nobody does this though… Like literally nobody. I’ve got both setup and have NEVER had an encrypted email go through because nobody else does it. It doesn’t matter what Proton claims to support.

That’s it. Telling anyone to read up on anything when they’re 100% correct is asinine.

Email in transit is not encrypted. At least not encrypted by anything that the government can’t compel the company to hand over.

Edit:

Email in transit is not encrypted. At least not encrypted by anything that the government can’t compel the company to hand over.

This is what I originally said. It was clear. I don’t know why you’re arguing otherwise.

“read up on pfs”
“Pfs doesn’t matter”

Literally this post.

Proton would have the key. A government that is already compelling them to hand over your account can simply be compelled to provide the TLS keys. The point is that government doesn’t have to compel proton for at rest storage, but can compel for in transit interception.

Email in transit is not encrypted. At least not encrypted by anything that the government can’t compel the company to hand over. Your password as best can only lockdown the mailbox itself. Not the receipt/sending of emails.

Edit: The point being is that if you’re a person of interest, the government can just watch your activity until they get what they want. And Proton doesn’t really have anything they can do about it other than a canary page I suppose.

Edit2: to make it even more clear, I’m talking about MTAs communicating with each other. Proton being one party would have the keys to their side of the communication which is sufficient to decode the whole lot.

Yes.

t’s not clear if Microsoft will be able to fix these latest flaws alone, though. “Microsoft did a good job designing Secure Device Connection Protocol (SDCP) to provide a secure channel between the host and biometric devices, but unfortunately device manufacturers seem to misunderstand some of the objectives,” writes Jesse D’Aguanno and Timo Teräs, Blackwing Intelligence researchers, in their in-depth report on the flaws. “Additionally, SDCP only covers a very narrow scope of a typical device’s operation, while most devices have a sizable attack surface exposed that is not covered by SDCP at all.”

So microsoft made a standard… and it doesn’t cover the full scope of usage of these devices… Including their own surface pro x and thus can be abused. It’s almost like both the sensor choice, and the software is flawed.

It’s becoming apparent that you and all the other downvoters are just windows fanbois.

Also

The researchers found that Microsoft’s SDCP protection wasn’t enabled on two of the three devices they targeted.

So they recommend to enable this protocol… simply because it’s better overall… But the third device was still vulnerable!

But yeah… I’m the one with reading comprehension problems. Totally.

Edit: You also still failed to articulate how this absolves MS from anything. They created the standard. They can’t choose sensors that use it properly? So either MS is ignorant, or willfully breaking their own standard. Care to actually address how MS isn’t at fault still?

They didn’t build the sensor, but they sourced and implemented it in their product. Part of selling products is getting your parts from reputable locations that are building their parts to your specification. This is absolutely still MS’s screwup. And if MS can’t build a device to implement their “security” standard properly. Then you cannot assume that ANY manufacturer can do it properly.

So you think that somehow absolves Microsoft how?

It’s device manufacturers that are fucking up, not MS.

…

and Microsoft Surface Pro X all fell victim to fingerprint reader attacks

So… MS is not MS? Is that the logic we’re going for now?

Or worse, since the adblocker no longer has direct access, they can just set chrome to ignore it’s requests/changes when it benefits them.

No. My electricity and internet bills do. #Self-hosted #Data-Hoarder.

I have to disable that wired connection.

Sounds like it never works… Why not just unplug the ethernet…

It’s completely useless that it shows up as an audio device.

Does it have HDMI? It might be a digital out over hdmi.

an office fire.

You repeat yourself. That’s a sev0. And the ticket should be filed accordingly so that remediation tasks can be implemented.

Task 1: Leave building
Priority: 0
Assigned parties: Everyone.

No… IM is still asynchronous. You and I can have a conversation over time…

They also take home their laptops most weekends to “catch up”, “don’t fall behind”, or “just in case any emergencies”.

Why???

Cause they’re using the work issued laptop for home purposes.

It’s grandpa’s time to shine.

Because it doesn’t state anywhere in the law what parts must be supplied and at what price.

Apple will simply sell the whole mainboard as one unit… and price it at $799 for an $850 phone. The phrasing is “fair and reasonable terms.” which Apple can simply say that the whole board is tied together as one item from the get go and therefore is not reasonable to separate for repairs. Further Apple gets the win of

The bill requires repair vendors that are “not an authorized repair provider” to “provide a written notice of that fact” to customers and to “disclose if it uses replacement parts that are used” or third-party.

So now there must be a mandatory letter when someone like Louis Rossmann repairs your phone… But Apple doesn’t have to do it, even while the first party repair people steal all your data and post your videos to porn sites.

Through their OEM deals, you’ll have a hard time finding a new computer with anything other than 11

My HP came with FreeDOS.

https://blog.tmm.cx/2022/05/15/the-very-weird-hewlett-packard-freedos-option/ is a good read on what this option really is. It’s clear that the intent on HPs part is to give you an option to buy the laptop without Windows garbage on it. Even if it’s a bit janky on it’s own.

Especially if you’re “enemy” has a fanatic fanbase. You come up with a reason that doesn’t set the fanboys on a rampage against you. I think this is a fair thing to wonder.

I’ve had 2 comments deleted. Can’t prove it because when a comment is deleted from a video it’s removed from your YouTube profile as well… but I’m sure you can test yourself.

When LMG releases a video supposedly addressing everything… doesn’t address it… then actively removed any mention of it in the comments of the video (I’ve had 2 comments removed myself). It’s safe to assume that LMG doesn’t have anything they want to add to the topic. I’ll just presume that I’ve heard all sides of the story.