LedgeDrop

Maybe that’s what this community wants, which is fine (just not for me).

... Judging from the number of downvotes on this post (and my personal opinion): No, the community doesn't want it either.

If this user/bot were committed to posting this, but stayed with a single user (which I could block), I'd be fine with that. If they posted weekly, I'd tolerate it.

... but creating new users and spamming multiple channels with content people really don't want to see: that's just trolling (or ignorance).

Thank you for posting your experience.

I've always thought LLMs would be perfect for being a DM or even a self-hosted "Choose your own adventure" story.

The prospect of having an "unlimited" adventure sounded awesome. In practice, and in my experience - it wasn't that fun.

I throughly enjoy stretching my creativity and "thinking outside the box", but it's no fun when the LLM simply says "yeah, sure whatever." I guess the "stretching my creativity" is more "pushing my creativity against the boundaries of what is allowed/makes sense"... but without any sort of resistance... I got bored.

Preach it! 🙌⛪

In regard to Linux users being left out in the cold.. how so? Do you think that distros are going to start enforcing attestation? I doubt that it will be a hard requirement for most, even in the next decade or two. It's an option, yes, but mandatory?

It does not matter if Linux supports attestation or not, because ultimately the application (or website) will determine if it wants to run on Linux. It's up to the company developing it's application or website to determine if they want to support more than windows/Mac.

Graphene has its own variation of attestation (they cryptographically sign requests with their own key - and not googles), but it requires additional hoops for each application - few companies are willing to do this.

Attestation is a wet dream for companies. You don't need DRM (as the OS will enforce it) and you can be certain your competitors/hackers cannot reverse engineer/pirate your code or run the application in an emulator. And the implementation effort to support it, is as simple as "make function call and check the response".

Linux will still exist (especially on the server side) and developers will still use it as a desktop machine. However, (as I implied) non-Linux games will stop working, accessing you banks website from linux will be rejected, emulation will cease - it'll be a corporate paradise... the stocks will go up.

FWIW, all of my banking apps work just fine with compatibility mode enabled on Graphene.

Revolut explicitly goes out of their way to not work on Graphene.

I've complained, they don't care. The bean counters have done their risk calculations and decided that the personal data they collect/mine (and the integrity of that data) is worth more than losing a few graphene users.

Also, I'm not sure saying it's inevitable is the right way to go, it certainly won't make others care about their privacy and security.

You do have a valid point: giving up after trying nothing won't help. However, I fear there will need to be "government intervention" to allow hardware and software to be "open for everyone". I'll admit my bias in wonder how well governments (of late) are representing the best interests of the people. But, these topics are complicated for even technically inclined people - let alone politicians. And the strawman argument against intervention is always going to be "in the name of security".

From my perspective, the writing is on the wall. This apocalyptic future won't happen over night, but it will be a slow boil over the next 10 years (or so).

If you've got ideas for how to avoid this, I'm all ears.

Nothing I can do to resist?

I admire your optimism, but we are pissing in the wind.

Microsoft is shoving this copilot in all its products? Alright, Linux and open source it is.

Windows 11 is forcing people to throw away functional computers that Microsoft seems "not secure enough" (it's lacking TMP 2.0)

This means you can get a great deal on one of these "inscure pc"... but in the long run your pc now and tomorrow will have TPM. As time progresses, the use of TPM/attestation will become more and more entrenched in application, web pages, everything. ... and Linux, with its 4% user base, will be left out in cold.

Google is bugging with its spyware? Well, I only use a Pixel phone, and ironically, its the best phone to put GrapheneOS on it.

Currently, many banking apps won't run on Graphene (or any custom firmware) due to attestation.

Graphene issued calls for help, because Google is restricting public access to the latest android source code (I cannot find the links atm).

Gmail? I don't remember when I opened mine the last time...

Today things like "email reputation" make it difficult to host your own mail server, so your stuck paying someone who has a better "reputation".

My point is: today, you and I can resist with some (minor) success, but our days are numbered.

I suspect they may not try to pull the entire trap closed all at once and that Windows 11 may continue to more or less function as we've seen past iterations

Microsoft will be taking a page from Google playbook. Google has be gradually reducing the "openness" of their android platform. They now have these "security checks" enforced on android. Meaning that it's trivial for an application to determine if the phone a "genuine android" or not.

This'll trickle into webbrowser too (if it's not already in browsers like chrome). It's only a matter of time before web pages will be able to determine if they're running on a "secure OS" and fail to run. It'll start out with your banking website, then expand to shopping websites, ultimately every page will enforce it ("oh, I see you have an unauthorized browser plug in installed. We care about your security, therefore we won't run. Please restore your device to it's secure defaults.")

This future is so horrible and Linux with its 4% market share won't change anything.

... and that was the last Linux version of Skype.

Well, unless this is an offer to buy me a replacement Quest or Pico (all of which, work on Linux) "yes, I'm going to stay with Windows 10" (and/or maybe dual boot).

... because I have a Samsung Odyssey+ VR headsets, which needs "Windows Mixed Reality" (Windows VR) and was gutted/removed from Windows 11 (and doesn't work on Linux).

I'm sorry this happened, but it seems rather reckless of the author to be running "Malicious PoCs" on their "daily driver" (re: the PC they use for everything).

If I was in the habit of running "Malicious PoCs", you can be certain it would be isolated from the rest of my system. This could be in a sandbox or a vm. Heck, just created a dedicated (one time use) "new user" would have been better than "Hey, let me just download and run some random shell script. Oh, it needs root? No problem!

I have mixed feelings about this.

On one hand, I agree with the technical merits. Having an automated process to renew short lived tls certs is "a good thing" and I think services like Let's Encrypt have demonstrated such automation is viable (at large scale).

But, there are reasons why people pay money for tls Certs rather than use free (short lived) Certs. For example, there's a mom-and-pop webhosting company that allows you to upload your tls Certs (they cost < $25 / year) or you can pay them $95 / year to use their Certs (and they just use Let's Encrypt - lol)

The nearly 4x markup is their "convenience fee" or "dumb tax". Regardless, once the 45 day tls Certs are enforced, I'll have no choice in either paying their 4x markup or migrating to another platform.

... Having a choice is not always a bad thing...

Of course it won't. Bring manufacturing is not the goal. The goal of the tarrifs is for the American People to pay the government more (which I'm sure the current administration will spend responsibly /s).

I'd spent some time in Central America and I'm getting flashbacks, when I hear Trump talking about these tarrifs. I don't want to insult other countries by what I observed, but one place in particular had a weak infrastructure. Roads, especially, were poorly maintained. Potholes (sometimes the size of the hood of a car) were everywhere - even on the (few) highways. The resulting traffic and congestion were the norm (even outside the big cities in the rural areas).

The strange thing was, everything cost as-much or more than North American prices. Especially for things like food/groceries. I was told that the locals often ate beans and rice, as it was affordable.

I was surprised to see, that even with the high prices for groceries _the locals were still shopping there. _ So, this wasn't a "front" for the tourists. I found this odd as I was thinking "with the prices of everything here, someone is making bank! Where is that money going?"

Then, I'd drive past the frequent police check point along the roads and highways. The police had many nice Hummers and SUVs, I saw female officers brandishing assault rifles, everyone dressed very well.

I heard that the country charges a high tax on imported goods, but nothing on domestic goods. This, in theory, is to promote "local manufacturing", but the country doesn't have the infrastructure to support it. And (I'm guessing) the government isn't interested in creating the necessary infrastructure, because it would mean giving up their cash cow. So, the government gets rich, while the people suffer.

This is the dystopian future of the U.S. Pay attention to see how much importance the current administration puts into maintaining and improving the existing infrastructure. How's that rural high speed internet coming along? /s :(

edit: typos2