mortalkastor
Up until ~5 years ago, hacking U2F to make it pass (smuggle?) arbitrary data was exactly how hardware wallet like those from Ledger and Trezor were communicating with websites and web extensions (like Metamask), for the lack of a better alternative. This is how hardware secured "web3" came to be.
They also:
- added their own affiliate codes when visiting some sites [1]
- installed VPNs without consent [2]
which also taints their privacy focused posture.
[1] https://www.theverge.com/2020/6/8/21283769/brave-browser-aff...
[2] https://www.androidpolice.com/brave-browser-windows-vpn-with...
My 5 y/o is having great fun with the Crayola app and Cooking Mama, and, honestly, between each round, I'm waiting for an ad to pop, a nag screen to pay for stuff or review, a countdown or some other crap we're accustomed to on mobile games and no. Nothing. Just the full game and nothing else. It's a refreshing experience.
If you're not confortable using Bluetooth, you can disable it on the device itself.
> all the bluetooth, screen and button IO goes through an unsecure processor
On the new device, the screen and buttons are now directly wired to the ST33 secure element
This was the PS3, actually.
Technical details here : https://web.archive.org/web/20120829232220/http://ps3wiki.la...
I was able to retrieve the content but not the CSS, so I made a mirror with no stylesheet (but with working comments) here : http://jsbin.com/apanuw/1
The Chrome app Hotot too. https://chrome.google.com/webstore/detail/hotot/cnfkkfleeioo...
Fucking hippies lamenting over the lot of a few Chinese working 10 h/day in a toxic prison factory while they are not even totally enslaved.