News for hackers. Stuff that matters.
Re:Kagi Search API by nicce on Tuesday December 03, 2024 @10:00AM (#42306802)
Everything is based on trust. How do you know that your phone is not sending your browser history once per month at random time at night, along with random legitimate-looking service?
Re:Kagi Search API by guappa on Tuesday December 03, 2024 @10:32AM (#42307212)
My phone's software is open source, kagi (and the others) aren't.
Re:Kagi Search API by aniviacat on Tuesday December 03, 2024 @10:04AM (#42306839)
By running an open source OS for which I can confirm the contents of all outgoing connections.
Re:Kagi Search API by nicce on Tuesday December 03, 2024 @10:10AM (#42306907)
You can hope, but even then processor microcode is likely closed source.

And you cannot really confirm the above use case very well. What if it is so sophisticated that it knows when it is being monitored, or it is so random or well hidden, that it might take years to spot.

Re:Kagi Search API by mldbk on Tuesday December 03, 2024 @10:13AM (#42306960)
What is that? Even your custom android build will have some binary blobs for your SoC.

We are just doomed.