tomalley8342

joined 2 years ago
[–] tomalley8342@lemmy.world 23 points 1 day ago (4 children)

Hasn't Sabine been getting in some hot water about promoting academic skepticism and making authoritative claims on fields well outside of her expertise?

[–] tomalley8342@lemmy.world 1 points 1 week ago* (last edited 1 week ago) (1 children)

TLS handles security for the email sent from your device until it reaches the server, and various HIPAA compliance rules mandates security for that data once it reaches that server. It's not alarmingly less secure than other HIPAA compliant methods of communication, unless the email provider on your end has poor support for TLS emails.

Editing to include the disclaimer that this is for communications sent from your end. For communications sent from their end, this protection doesn't necessarily apply (it depends on your email provider at that point, which may not be compliant), so for them to send you protected info via e-mail, they usually ask for your consent first, and usually the e-mail is just a link to a portal where you can access that information more securely.

[–] tomalley8342@lemmy.world 11 points 1 week ago (2 children)

HIPAA prevents providers from handling your information insecurely, but I don't believe there is any rule that prevents you from handling your own information insecurely. You are allowed to refuse if you do not feel comfortable with a method of communication of course.

[–] tomalley8342@lemmy.world 2 points 2 weeks ago

I'm playing through it now and the virtual tourism comparison is bang on. I personally don't mind the repetitive gameplay so I'm still having a good time with it the rest of it though.

[–] tomalley8342@lemmy.world 35 points 2 weeks ago (1 children)

The only reason why consumers like you and me get to enjoy free software on modern PC hardware is because of the expectation of open standards and interoperability set way back when the industry was still growing and computer users gave a shit (or rather, when only the people who gave a shit owned a computer).

Much to the industry giants' enthusiasm, mobile hardware stacks were developed without this baggage, and so unless something fundamental changes, all mobile devices trying to focus on free software will be doomed to failure by abysmally poor hardware support and aging hand-me-down hardware.

[–] tomalley8342@lemmy.world 0 points 2 weeks ago* (last edited 2 weeks ago)

Not just your two android apps, any program on your system that is aware of your waydroid installation could potentially use it as a path to escalate themselves to root, which is generally regarded as a bad outcome. If you don't care about that kind of thing, or don't think that could ever happen to you, that's certainly within your rights to hold such a viewpoint.

[–] tomalley8342@lemmy.world 3 points 2 weeks ago (5 children)

Whenever you see a linux phone advertise both security and android app support, you should be wary, since it's likely waydroid or a waydroid fork, and their design goal of running android in a container instead of a VM has lead to some interesting security decisions.

[–] tomalley8342@lemmy.world 7 points 3 weeks ago (2 children)

You are likely thinking of google play protect, which does the same verification on their platform's end (to try to remove bad actor developer accounts as soon as possible), and the local device end as well (to remove said developers apps if they are already installed on your device). But yes, at the base level, what arrives on your phone from the play store are just signed apk files. That's why mirror sites like apkmirror or apkpure can do what they do, by extracting said apks after they have been released onto the play store.

[–] tomalley8342@lemmy.world 24 points 3 weeks ago

The signing step you see at the end of each revanced install will require a registered google developer account going forward. The question of who will be brave enough to submit their real life information to sign revanced apps, as well as how long those accounts will last are anyone's guess.

[–] tomalley8342@lemmy.world 20 points 3 weeks ago (5 children)

How is this going to be enforced if you are just downloading apks? It states they will enforce verification across sources outside of the play store. This doesn’t sound possible unless they just make stock android unable to side load

apks will have to be cryptographically signed through Google's developer console, and this signature will be checked by the operating system at install time regardless of where you got the apk from. It's like how windows has signed applications for smartscreen, except in this case all applications must be signed through Google, and in order to sign it, you have to let Google know where you live, and unsigned applications will simply be denied instead of just being presented with a warning.

[–] tomalley8342@lemmy.world 2 points 3 weeks ago

They got a forge like level editor this time around

view more: next ›