News for hackers. Stuff that matters.

danieldk

Re:Linux phones are more important now than ever on Sunday September 21, 2025 @12:02PM (#45323891)
They certainly can. Since Android 8.0, apps can check if a key is stored in a hardware-backed store:

https://developer.android.com/privacy-and-security/security-...

This works by signing an attestation using a hardware-backed key (which is in turn signed by Google). So, there is no way to emulate this in software, because your ROM simply does not have the private key to do so. Part of the attestation is information on whether the booted operating system was signed:

https://source.android.com/docs/security/features/keystore/a...

Again, since this is all hardware-signed, you could only fake this information if you were somehow able to extract the private key from the secure element. The primary weakness is that you could try to patch out the part of the application that asks for this attestation. But they found a solution to that, remote attestation. Instead of the app asking for the attestation, e.g. Google's servers or your bankcan ask for the attestation and for the reasons outlined above, your custom firmware is not able to fake this. If your bank, etc. implemented remote attestation, you can simply do not do banking on your phone anymore.

Re:iFixIt iPhone Air Teardown on Sunday September 21, 2025 @11:40AM (#45323699)
Yeah, I had exactly the same issue with my 12 Mini, even when the battery was still new.
Re:They Thought They Were Free (1955) on Sunday September 21, 2025 @11:22AM (#45323559)
...then maybe the comparison to Nazi Germany and authoritative dictatorships more generally are perhaps not as far afield as you're implying.

Sorry, I was not implying they are far afield. We have seen this playbook in several nearby European/Asian countries in the last two and a half decades (I live in Europe). Of course, not all these countries did have a long democratic history, but they did show the fragility of democracy, you have to actively protect it.

Heck, even in the country where I live, which has quite a healthy democracy, a majority of parliament has just accepted a motion to request declaring antifa a terrorist organization because Trump did it as well (all Dutch experts, including former secret service personnel agree that antifa is neither an organization, nor terrorist). Some of them just to score a few points for the upcoming elections. Only a judge can declare an organization to be a terrorist organization, but it's all small steps in eroding the rule of law.

(Coincidentally, the next day 1500 right wing hooligans rioted in the streets of The Haglue the next day, burning police cars, damaging the office of a center-left political party and the parliament square.)

Re:They Thought They Were Free (1955) on Sunday September 21, 2025 @11:11AM (#45323457)
Also see Umberto Eco's 14 characteristics of fascism:

https://en.wikipedia.org/wiki/Ur-Fascism

Re:They Thought They Were Free (1955) on Sunday September 21, 2025 @10:47AM (#45323220)
This. If you read Reddit, a whole lot of comments go from Nazi parallels (which is partly justified, but as another comment points out there are also a lot of parallels with Orban's Hungary, Erdogan's Turkey, Putin's Russia, etc.) to 'Luigi'.

There are so many non-violent approaches that would be effective. First, there is the 3.5% rule [1]. Second, if 10%-20% of the general population would go on a general strike, pretty much all of society would come to a standstill and it would send a heck of a powerful message. One of the issues though in the US is healthcare tied to employment, combined with fire at will. It reduces preparedness of people to protest until it's possibly too late. So, it's simultaneously important to build/strengthen unions, etc.

Aside from that, and this is true for Europe as well, we need to heal as a society. People have divided themselves in stupid 'teams', fueled by politicians, foreign interference, algorithms, etc. Not woke enough? You are cancelled. Left-wing? You are cancelled (employer contacted and fired). We have to do a little less social media and go outside and talk to other people. Even if I disagree with people politically, there often a lot of common ground (we all want food, health, to be safe, etc.), we all like to talk about some sports match, and whatnot. We don't have to agree with each other, but we can at least try to understand and care for each other. Break the stupid tribe wars.

[1] https://en.wikipedia.org/wiki/3.5%25_rule

Re:iFixIt iPhone Air Teardown on Sunday September 21, 2025 @08:47AM (#45322240)
Regardless. Apple tried, they made the 12 Mini and 13 Mini. Very few people bought it. A few million units is not interesting at Apple's scale.

People want larger batteries and screens than small phones can offer.

(I was in camp 'small phones', but gave up when my 12 Mini had its best time.)

Re:iFixIt iPhone Air Teardown on Sunday September 21, 2025 @08:42AM (#45322204)
Not once do I remember thinking "I would like this phone to be thinner", yet I wish that this thing would have a bigger battery almost daily.

Samsung Galaxy S25 Edge was first with a thinner phone (and some Motorola that most people have probably never heard of?). But it is also quite misplaced, since they just released the 27 Pro, which moves the (stacked) logic board close to the camera to be able to fit a larger battery, going from 3582 mAh in the 16 Pro to 4252 mAh in the 17 Pro (both US eSIM capacities, 18.7% more!). But they also used the space to add a vapor chamber for better sustained performance.

The Air is just a different market. The Air and Pro optimize for almost the opposite:

- Thinness vs. battery life.

- Thinness vs. an additional GPU core.

- Thinness vs. sustained performance.

- One back camera vs three back cameras.

I like this year's line-up because there is much more choice: getting the absolute thinnest phone, getting an absolute performance monster with a large battery and plenty of cameras, or getting a great middle ground, which is almost as light as the thin phone, but has longer battery life, and one more camera, and no lousy 60Hz display this year.

I feel sorry for you. I have experienced their support in both Germany and The Netherlands and it's stellar. You can call them, get someone on the line in a few minutes and they will genuinely try to help you. One time there was an issue with a transaction (amount subtracted twice), within a few minutes of calling I was in contact with someone from their finance department who not only solved the issue, they also called back a few days later to verify that I got the refund and to check if I was happy with their help.

Another time my wife wanted Apple Care, but decided on the last day and the website didn't offer the option anymore. She called, they were really helpful and again called back a few days later to check everything is good on our end.

They are a big-tech company, but actually being able to call someone and getting swift help is refreshing.

Edit: I only now realize the accidental pun: you probably won't be getting 'Swift' help. :p

Re:Linux phones are more important now than ever on Tuesday September 16, 2025 @02:06AM (#45258580)
Custom ROMs do not work with remote attestation (typically), so that means saying bye bye to a lot of apps, including some banking apps.
Re:Linux phones are more important now than ever on Tuesday September 16, 2025 @02:01AM (#45258549)
Perhaps true, but some modern OSes (like macOS and iOS) allow you to copy text from screenshots. And since the text quality of screenshots is typically good, it works well.
It is purely out of spite. They like to rant every time how the EU is blocking progress. They are using it to turn sentiment of iDevice-using EU citizens against the EU. It's interesting how Apple rolls over when an autocratic state (e.g. China) asks, but are trying to mobilize their users against regulators, do malicious compliance, etc. when it's democratic states regulating them.

As a Mac user since 2007 and iPhone user since 2009, this behavior of Apple disgusts me. (Yes, I know - vote with your wallet. I switched from Apple Watch Ultra to Garmin Fenix and do have a Pixel with GrapheneOS.)

This is mostly false. Most AI features are available in some EU countries. For instance, Pixel Studio and Pixel Screenshots are available in Germany, but not in The Netherlands. I think they are dragging their feet on localization (though much Dutch people would be fine with these AI apps only accepting English input).
It's kinda weird to single out Samsung here, because they are pretty good with security updates and they explicitly talk about long security periods in their marketing. They are not as fast as Pixel, but somewhere mid-range and up (A5x) get monthly updates and they are usually 1-4 weeks behind Google.

It's the other vendors that are the issue. Even Fairphone is behind a lot (and they only release one model at a time).

Those are choices. If you want to do that, you need a process that can support it.

I suppose it could be that they just don't care and are deliberately screwing their users, but never attribute to malice that which can be explained by incompetence and all that.

I think for a long time Android users did not really care. Until a few years, Android security support was abysmal with many vendors only doing 1-2 years of updates. Users bought the phones and didn't care, so I guess it was a smart business move to not care.

This changed in recent years due to a mixture of the (then) upcoming EU requirement for supporting devices multiple years with security updates, Apple being able to tout this as an advantage, causing Google and Samsung to enter into a competition to promise the largest number of years of security support, etc.

I don't think it is laziness per se. It's a combination of having far too many models (just look at Samsung's line-up, more than ten models per year if we don't count all the F and W variants), using many different SoCs from different vendors (just taking Samsung again as an example, using Qualcomm Snapdragon, Samsung Exynos, Mediatek Helio, Mediatek Dimensity, sometimes even a different chipset for the same phone model per region), each model supported for multiple years now on a monthly or quarterly update schedule (Samsung: recent A5x, Sxx, Sxx FE, Z Flip x, Z Flip 7 FE, Z fold x, Xcover x, etc. are on a monthly schedule). This across a multitude of kernel versions, AOSP versions (for older phones), OneUI versions (for phones that haven't been updated yet to the latest OneUI).

The must have literally over tens of different models to roll out security updates for, with many different SoCs and software versions to target.

And compared to other Android vendors, Samsung is actually pretty fast with updates.

It's true that other manufacturers have smaller line-ups, but they also tend to be smaller companies.

Compare that with Apple: every yearly phone uses the same SoC, only with variations in simpler things like CPU/GPU core counts.

Re:Apple Debuts iPhone 17 on Tuesday September 09, 2025 @03:12PM (#45187199)
I agree. Though I would formulate it a bit differently. You can live fine without HiDPI or >60Hz. But once you have used them for a few days, it's really hard to go back.

Our daughter still has an older iPhone with 60Hz and I cannot look at it. The flickery animations drive me crazy. Yet, I have had iPhones with < 120Hz screens for well over a decade.

Re:Apple Debuts iPhone 17 on Tuesday September 09, 2025 @02:56PM (#45186923)
I didn't pay attention for the non-Pro, but for the Pro they 'said' they give you 256GB for the price of last year's 256 GB. So it seems like another step in moving the prices up.

Edit: 16 Pro 128 GB was $999 at introduction iPhone 17 Pro 256 GB is $1099. Better for the non-Pro though - the 16 128 GB was $799, the 17 256 GB is also $799.

Re:Apple Debuts iPhone 17 on Tuesday September 09, 2025 @02:54PM (#45186888)
I have a Pixel 9 to check out where Android is standing and for GrapheneOS. Unfortunately Pixel OS still has pretty bad bugs all the time (oneUI is much more polished, but has other issues) and the Pixel 10 is really overpriced compared to the iPhone 17 (the Pixel 10 is more midrange than a flagship, even though it has a flagship price).
Re:Apple Debuts iPhone 17 on Tuesday September 09, 2025 @02:52PM (#45186833)
I think iPhone 17 is the first worthy upgrade to the base model in years, LPTO is a huge upgrade to the aging pre-iPhone 17 screen. The difference between Pro and non-Pro is pretty thin this year. I currently have a 16 Pro, might upgrade, but mostly because models are typically shifted through our family (so everyone gets an upgrade).
Mistral being in the EU is a feature. A lot of European companies/organizations are hesitant to use US/Chinese LLMs because of privacy reasons. For instance, the university my wife is working at are evaluating using Mistral as their default (and only reimbursed) LLM.

One or two years ago, an US solution would be completely acceptable (with promises to comply with the GDPR). But a lot of damage has been done the last 9 months or so.

Re:I am giving up on Intel and have bought an AMD Ryzen 9950X3D on Monday September 08, 2025 @02:13AM (#45165118)
Setting a P-State max percentage is completely reliable/stable, it will clock lower on average to hit the lower performance target. It’s kinda similar to setting a powersave governor, but more granular.

I think you are confusing with undervolting.

Target display mode on the old iMac 27" was nice. But why not get a Studio Display now? It's pretty much the same thing, but not burdened by having an old Mac inside and having to fiddle with target display mode.

They are overpriced for 2025 (especially because the height-adjustable stand costs quite a bit extra). But they wake very fast from sleep and work fantastically with a Mac.

Never. I haven't used Windows since... 3.11 :p.
Re:I am giving up on Intel and have bought an AMD Ryzen 9950X3D on Sunday September 07, 2025 @05:14AM (#45156634)
Also relevant in this context:

https://www.pugetsystems.com/blog/2024/08/02/puget-systems-p...

to;dr: they heavily customize BIOS settings, since many BIOSes run CPUs out-of-spec by default. With these customizations there was not much of a difference in failure rate between AMD and Intel at that point in time (even when including Intel 13th and 14th gen).

Re:I am giving up on Intel and have bought an AMD Ryzen 9950X3D on Sunday September 07, 2025 @04:47AM (#45156520)
Unfortunately, some separately purchasable hardware components seem to be optimized completely for gamers these days (overclocking mainboards, RGB on GPUs, etc.).

I'd rather run everything at 90% and get very big power savings and still have pretty stellar performance. I do this with my ThinkStation with Core Ultra 265K now - I set the P-State maximum performance percentage to 90%. Under load it runs almost 20 degrees Celsius cooler. Single core is 8% slower, multicore 4.9%. Well worth the trade-off for me.

(Yes, I know that there are exceptions.)

Re:I am giving up on Intel and have bought an AMD Ryzen 9950X3D on Sunday September 07, 2025 @04:40AM (#45156493)
Yea, but unfortunately it comes attached to a Mac.

Yeah. If Asahi worked on newer Macs and Apple Silicon Macs supported eGPU (yes I know, big ifs), the choice would be simple. I had NixOS on my Mac Studio M1 Ultra for a while and it was pretty glorious.

Re:I am giving up on Intel and have bought an AMD Ryzen 9950X3D on Sunday September 07, 2025 @04:37AM (#45156479)
However, the vast majority of PCs out there are not hobbyist builds but Dell/Lenovo/HP/etc. [1] with far fewer possible configurations (and much more testing as a byproduct). I am not saying these machines never have issues, but a high failure rate would not be acceptable to their business customers.

[1] Well, most non-servers are probably laptops today, but the same reasoning applies.

Re:I am giving up on Intel and have bought an AMD Ryzen 9950X3D on Sunday September 07, 2025 @04:32AM (#45156454)
I agree that Intel is bad at the moment (especially with the 13th and 14th gen self-destruct issues). But unfortunately I also know plenty of people with issues with AMD systems.

And it's no bad power quality on mains as someone suggested (it's excellent here) or 'in the air' (whatever that means) if it happens very quickly after buying.

I would guess that a lot of it comes from bad firmware/mainboards, etc. like the recent issue with ASRock mainboards destroying Ryzen 9000-series GPUs: https://www.techspot.com/news/108120-asrock-confirms-ryzen-9... Anyone who uses Linux and has dealt with bad ACPI bugs, etc. knows that a lot of these mainboards probably have crap firmware.

I should also say that I had a Ryzen 3700X and 5900X many years back and two laptops with a Ryzen CPU and they have been awesome.

Also, this is also the case with ad-disabling subscriptions, the people who have the disposable income to buy non-ad versions are the most interesting to a lot of advertisers.
Re:I am giving up on Intel and have bought an AMD Ryzen 9950X3D on Sunday September 07, 2025 @03:38AM (#45156192)
I feel like both Intel and AMD are not doing great in the desktop CPU stability department. I made a machine with a Ryzen 9900X a while back and it had the issue that it would freeze when idling. A few years before I had a 5950X that would regularly crash under load (luckily it was a prebuilt, so it was ultimately fixed).

When you do not have a bunch of components ready to swap out it is also really hard to debug these issues. Sometimes it’s something completely different like the PSU. After the last issues, I decided to buy a prebuilt (ThinkStation) with on-site service. The cooling is a bit worse, etc., but if issues come up, I don’t have to spend a lot of time debugging them.

Random other comment: when comparing CPUs, a sad observation was that even a passively cooled M4 is faster than a lot of desktop CPUs (typically single-threaded, sometimes also multi-threaded).

Older »