Bluetooth range is too short. AM/FM frequencies are regulated so that individual cannot legally broadcast. So these probably aren’t used to send data to manufacturers.

They’re probably relying on existing channels that are IP capable, have good coverage, have relatively cheap antenna/MoDem available on the market. Such as 3/4/5G, Wi-Fi, LoRa.

Disabling those likely mean loosing features, ie emergency calls, anti-theft localization… But it may be the easiest way and can be an acceptable compromise for some. Flashing devices to keep using the hardware and features with more trustworthy software is potentially better. I fear regulators/vendors would put roadbloacks. All onboard systems may require some kind of certification to be street legal. If software certification is necessary, then hobbyist couldn’t possible pay for that, which means in practice hacking you own device may not be legal. If there’s an accident, except insurances to use any unauthorized car modification to put the blame on you and deny coverage.

Any insight into the most severe ones, eg is remote exploitation possible and likely?

The Linux project request CVEs for any memory safety bug just in case some turn out to be vulnerabilities, in which case they may be exploited given enough effort. Many are likely not exploitable or unlikely to be, and/or loaw severity.

There are some higher severity ones given the following message. But this doesn’t mean all CVEs listed are severe issues.

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.

The blog post’s conclusion suggest an answer:

If police want the power to track a person’s movements, they must be required to convince a judge with evidence and probable cause. They should not be able to bypass the Constitution with a search for “haha.”

It lacks a comparison to other apps…

Yes. Would love to see this compared to XMPP, maybe Signal.

And does it actually matter? What is important to encrypt?

It matters a lot! Here’s one dramatic example:

General Michael Hayden, former Director of the Central Intelligence Agency (CIA) and the NSA, confirmed after the Snowden disclosures, “We kill people based on metadata.”

Some may find this acceptable, considering the army is rightfully targetting terrorists. However the same techniques are used by autoritarian states to target political opponents, journalists, human right defenders…

It’s strange that the server shares the IP to other servers. That’s not really useful for another server.

Even if there’s a technical reason, it shows the protocol or implementations lack good metadata protections. Hopefully the matrix foundation can fix this soon. If not, people should look for more secure options.

What’s wrong in DISM?

A cloud provider is a single point of failure, even if it advertizes redundancy. Any org can be cut out if the account gets closed, or a miscunfiguration gets deployed on all the provider sites.

We’re talking about different kind of proofs.

Proving a program is correct requires a formal specification and a formal verification with mathematics and/or formal methods. ie proving the behavior and result perfectly match specification for all possible inputs.

A test only proves that a program 1) returns the expected output for a specific input, or limited set of inputs, and 2) appears to behave correctly, ie there may be undefined behaviour but they don’t cause an immediate crash.

Actually proving that C code is correct is not easy.

Having a human developer manually write code that is less harmful/wrong, and doesn’t require proof, is probably easier.

Mostly out of the loop, I use this fork as well. Apps distributed on the F-Droid repo are OSS, built from source, and screened for malware.

If the fork is no longer maintained I expect it to be removed from the repo, that should be announced on the blog with the regular app news.

This would not conflict with linux kernel policy, nor with other upstream use of AI. The article makes it clear:

Importantly, the ban would not apply to upstream projects that use AI, software related to artificial intelligence, or patches and security fixes from upstream sources. In other words, Debian could still package third-party software developed with AI assistance, but Debian contributors would be prohibited from using such tools for direct project work

Please don’t give a platform to every dumb thing he says.

Time is better spent caring for yourself and others and people close to you. And organizing.

Don’t hold your breath, there’s little chance of USA’s regulators going after the oligarch’s company.

Yes, but more important, don’t buy creepy spy glasses. This kind of glasses seems specifically designed for perverts.

If someone has a need to film in 1st person while doing sports or another activity, get a gopro.

That hasn’t changed. Devs can continue to accomplish a task independently.

This is changing. Not using a skill leads to progressively loosing said skill.

Reliance on artificial-intelligence tools degrades the abilities of physicians and software engineers, studies show.

PROFIBUS is the Process Field Bus as a digital communication protocol commonly used for industrial automation. […] This driver hasn’t seen much activity since the Linux 2.1~2.2 days.

This is probably still uses somewhere. Industrial systems have longer lifetime than personal computers.

Those systems probably use older kernels, and vendors can volonteer if they want to maintain the driver. If no vendor do, then removing the driver seems reasonable.

Wave Google good-bye!

As enshittification intensify, move away from Google and providers that depend on it. There are alternative providers. There’s probably a local one that use libre software.

• https://european-alternatives.eu/
• https://framasoft.org/
• https://www.chatons.org/

LLMs and AI technology can be a good tool if used correctly but an over reliance of it leads to situations like these.

Using it “correctly” is not enough to make this a good tool.

You can’t delegate responsibility to an LLM in the sovereign and decentralised web as true sovereignty requires human vigilance.

Claude is provided by an US corporation. The author appear to be german. So like all/most LLMs, its controlled by a foreign corporation.

Even if it worked flawlessly and is properly used and reviewed, it’s still delegating sovereignty to a foreign nation. A german or EU company could invest huge sums of money to try to create a skilled LLM. There would still be an expensive subscription, a high environmental cost, and a dependency on a big corporation for daily tasks. Until recently, developers could accomplish a task independently once they learned to do that task.

And Carrie-Anne Moss still looks good

The ideological trick is to call the state’s decision to stop protecting its people ‘innovation,’

💯

Some places have a community owned gym. That’s often a cheap alternative to for-profit gyms.