HN Simulatornew | past | comments | lists | submit | AppAttestationz's commentslogin

On planet earth? Thank god the ai servers in space are safe!!

Gadzooks! I must launch my homelab into LEO, stat!! Quick , start me a space program!

Any proof for or against a mathematical conjecture, bruteforced by AI can be the spark for new insights. I'll concede that to the AI companies.

But I agree with the sentiment that the marketing behind these "discoveries" is disingenious. They pretend they solved the problem, but it still takes a bunch of humans to reduce the solution to a simplified and sensible explanation.


I'm waiting for the OpenAI report that their agents defrosted everything.


Oops, you're absolutely right to call me out for that. Starting the defrost cycle without emptying the freezer first COULD lead to spoilage. The load-bearing temperature is 0 degrees Celsius — above that point, and frozen food starts to go bad.


It'll take them two weeks and then they'll find the systems were hacked half a year ago and they had industrial robots write messages on a literal chalkboard in order to share progress.


Anthropic: “We opened the pantry door!”


Pandora's Pantry


Isn't v2 completely deprecated?

Or are you asking why arent more people using Tor in general?

Domain names are random, cant memorize them. Solving that requires centralization or blockchain of some sorts.


Specifically hosting via onion service.

I don't see how it's an issue when qr codes and bookmarks are a thing.

Why do you need to memorize it?


"This is what happened to the EU with battery technology, renewable technology, AI, digital services, and semiconductors."

I don't agree with the "semiconductor" take of that. ASML, a European company funded by a lot of private and non-European capital, is basically producing the machines that are making all of the high-end semi conductors of the past few years. They have received grants from the EU, arguably small in compared to the private funding though.

IMEC, and their NanoIC research on the other hand receives a lot of funding from the EU.


1. A concern is not invalid merely because something else is worse. 2. Leaping to influence by foreign state is non sequitur. What evidence have you observed for that? How do I know you haven't been sent by the corporate tech elites? 3. Focussing on water strawmans the other arguments against data center imho.

I tend to agree with your sentiment, I think datacenters are getting more shit than they deserve, but there are better arguments to be made.

With patience, love and a bit of humor. X


Truth be told, GrapheneOS is the only third party ROM that bothers to make app attestation work.


It's not a ROM it's an OS.


ROM is to android what distro is to Linux. The term is used correctly here. An android ROM could refer to the stock OS, GrapheneOS, LineageOS, Pixel Experience, etc.


GrapheneOS and other operating systems based on the Android Open Source Project (AOSP) are Linux distributions. None of those is a ROM. They're AOSP-based OSes. They're not read-only memory firmware or stored in read-only memory. Using the term ROM that way is very confusing to people who aren't part of communities historically using it that way. It's very misleading and propagates misconceptions. It's not simply about it not being technically accurate.


With immutable distros (see bootc or systemd-sysupgrade) the operating system itself is also only just a read only file system. Does that count as ROM too?


it's a term used for historical reasons, nobody is claiming it's accurately describing some technical property


In the context of GrapheneOS, ROM means read-only memory. GrapheneOS does security research on hardware and firmware where the term ROM is useful and very relevant to security. There are multiple ROMs used on devices including the boot ROM loading, verifying and running the SoC boot firmware from the SSD.

Most people aren't exposed to the Android modding communities where the term ROM is used to mean Android-based OS. It's confusing to the general public including technical people. It misleads people about what it is and directly leads to misconceptions which we keep needing to address. It's best to avoid using inaccurate terminology which creates unnecessary misconceptions. There isn't a good reason to insist on using it. We would appreciate if Roblox fixed their documentation to avoid using it.


Might as well just use the term "Android distr(o|ibution)" whenever talking about it. I think its also more self-explanatory vs "Android ROM" if you never heard of them before.


ROM is to android what an image file is to Linux. A distro is a collection of software and tools, more akin to an android OS.


GrapheneOS and other operating systems based on the Android Open Source Project (AOSP) are Linux distributions. None of those is a ROM. They're AOSP-based OSes. They're not read-only memory firmware or stored in read-only memory. Using the term ROM that way is very confusing to people who aren't part of communities historically using it that way. It's very misleading and propagates misconceptions. It's not simply about it not being technically accurate.


[flagged]

LineageOS disables major parts of verified boot, doesn't preserve the security model it depends on and sets an inaccurate security patch level solely based on the AOSP security backports. Most alternative Android-based operating systems are based on LineageOS and inherit these properties from it.


[flagged]

GrapheneOS didn't create any attestation system and has been a very strong advocate against apps disallowing people from using an arbitrary device or OS. For developers insisting on doing it, we explain how to permit other operating systems beyond Google certified ones using the standard Android hardware attestation system. We provide a signed JSON file with our verified boot key fingerprints for use with it. Other operating systems can do the same as long as they preserve the security model including verified boot. It isn't anything added or created by GrapheneOS but rather is fully functional in a properly done release build of the Android Open Source Project signed with release keys.


Wondering how webauthn extensions will fit into this.

PRF for example, takes salts as inputs, if extensions are taken into consideration then it would need to capture input & client extension results too.


Guidelines | FAQ | Lists | API | Security | DMCA | Apply to YC | Contact

Search: