skarn

joined 2 years ago
[–] skarn@discuss.tchncs.de 9 points 1 day ago

Actually there is a custom filter for uBlock Origin for that:

https://github.com/DandelionSprout/adfilt/blob/master/LegitimateURLShortener.txt

You add this as a custom filter to uBlock, and it does all the URL cleaning without needing an extra extension.

[–] skarn@discuss.tchncs.de 1 points 4 days ago

Aye aye.

Patrick Stewart and Jason Statham, among my favorites, show you can look gorgeous with a nice trimmed dome.

[–] skarn@discuss.tchncs.de 1 points 1 week ago

No, I can assure you of my good faith. I wish I could assume the same.

Your playing semantics. Both sandboxed google play and micro g are ways to get around Google Play services but only GOS implementation actually solves the main privacy issue.

You wrote security wrong. Your phone will be leaking more data, but reduce the attack surface and have better compatibility. Which is an OK choice.

The reason I mentioned aurora is because a lot of user install micro g so they can use the play store as it requires play services or a substitution. This was obvious in context.

It was really not obvious, mainly because it's an entirely nonsensical thing to do, so why would I assume that? As far as I can tell this is also materially not possible in /e/OS or CalyxOS. Maybe it's possible in Lineage, but why would anyone do that?

[–] skarn@discuss.tchncs.de 1 points 1 week ago (1 children)

Plugins and extensions are not the same thing.

[–] skarn@discuss.tchncs.de 0 points 1 week ago (2 children)

There about a gazillion background services in your phone right now having privileged access. Have you taken a look at those? Do you know what they do?

MicroG does not give you access to the play store. Like, not at all. If you think Aurora store is a replacement for microG or Google Play Services you have no idea what you're talking about.

[–] skarn@discuss.tchncs.de 3 points 1 week ago* (last edited 1 week ago) (4 children)

The reason why Google Play Services is such a privacy nightmare is that it's malicious, and it's privileged.

The recent revelation of how Yandex/Facebook were tracking us through anonymous sessions shows just how much damage can be done with unprivileged apps.

Unlike Play Services, MicroG will do only what it has to (or nothing, if you decide to forgo using all google services). While doing so, it will still minimize the data sent, and spoof what it can to reduce fingerprinting.

As far as I can tell, MicroG seems to be reasonably well trusted. All objections I could find to MicroG are either based on principle, like yours, or on FUD. I have yet to find any mention of actual issues with MicroG.

Yes, it's privileged, and if you reduce the issue of running privileged code an issue of trust, either microG is about as trustworthy as your android ROM (which runs a lot of privileged code on your device). You ROM, minus a few patches, come 99% from Google after all, but you place a lot of trust in the GOS team to sanitize and patch that up. It's OK, I don't disagree.

So once we establish that MicroG is not malicious, running it privileged may be less than optimal, but it's only an issue in terms of attack surface.

Which is not nothing.

With all this being said, I expect that the threat model that regard as an obvious advantage running know malicious code, though unprivileged, over non-malicious privileged code, are going to be few and far between.

[–] skarn@discuss.tchncs.de 3 points 1 week ago (6 children)

Claiming that literally installing Google Play, though sandboxed, gives massively better privacy than MicroG is a pretty wild claim.

[–] skarn@discuss.tchncs.de 69 points 2 weeks ago (1 children)

Damn, I went to read the linked post I Want to Love Linux, it Doesn't Love Me Back and it is, indeed, a banger.

[–] skarn@discuss.tchncs.de 3 points 2 weeks ago (1 children)

I find actual Bruges pretty Boring. Ghent or Antwerp FTW.

[–] skarn@discuss.tchncs.de 7 points 2 weeks ago (1 children)

What? Your phone came with Facebook in the system image?

[–] skarn@discuss.tchncs.de 4 points 3 weeks ago

They call it "affluenza"

[–] skarn@discuss.tchncs.de 26 points 3 weeks ago (6 children)

Why? It's pretty clear that Google is mostly done with users having choices, particularly indovidual users, and all the more so on Google-branded hardware.

Manifest V3, Play Integrity, the attempt of introducing Web Integrity. How many more examples do you need to see?

This seems like a perfectly logical decision in that direction.

view more: next ›