this post was submitted on 29 Mar 2024
197 points (100.0% liked)

Technology

37800 readers
414 users here now

A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.

Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.

Subcommunities on Beehaw:


This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 2 years ago
MODERATORS
 

Edit: Guys I didn't write the headline; the subtitle that I added, I've now fixed tho

Edit: Also, the information about there being no escape is out of date -- here's a quick guide to how to fix the problem in the modern day

top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 103 points 9 months ago* (last edited 9 months ago) (3 children)

Don't want to sound like I'm proselytizing, but unless you run Linux, your computer really isn't yours (closed firmware aside).

Microsoft is just as bad at treating your hardware as theirs that they so graciously allow you to use (in between forced updates, criticizing your browser choices, and trying to trick you into storing everything you do in one drive)

[–] [email protected] 48 points 8 months ago (15 children)

Forced updates are a good thing for most people, though. The general population doesn't know or care about infosec, so they'll put off updates for months or years.

[–] [email protected] 11 points 8 months ago (2 children)

No.

A notification, in the tray and elsewhere across the OS, with a short description like "Updates are crucial to the security of you and your device, they also provide the freshest experience." would get the point across. What would be even better is if there was a one-click NQA button to initiate the update, perhaps even included on the notification.

[–] [email protected] 20 points 8 months ago

Those notifications have existed for years. People don't give a shit.

All you have to do is restart your computer every so often and nothing will be forced.

[–] [email protected] 10 points 8 months ago (1 children)

The problem is Microsoft have abused it. Now they claim an update is for security, but instead it just reverts settings to promote their other products.

[–] [email protected] 2 points 8 months ago (1 children)

In Windows' case, this is the truth. But certified corporation momentos are not a required side-effect of this approach to updates.

load more comments (1 replies)
[–] [email protected] 6 points 8 months ago (1 children)

Updates forced at inconvenient (or inapropriate) times aren't a good thing though.

Don't interrupt my work right bloody now.

You can update later when I'm done doing what I'm in the middle of.

[–] [email protected] 5 points 8 months ago

The forced updates are usually after the system has bugged the shit out of you to update for a week or two.

Plus, you can easily disable it.

[–] [email protected] 5 points 8 months ago (1 children)

Let's have the authorities force us to eat salad and exercise while we're at it, it's better for us

[–] [email protected] 24 points 8 months ago* (last edited 8 months ago) (1 children)

Oh Christ, that's not the same thing and you know it.

[–] [email protected] 4 points 8 months ago (1 children)

Meh. You're not just talking about just making it automatic or easy or recommended, but actually forcing everyone to have to go along with it and taking away the option to not do it.

[–] [email protected] 13 points 8 months ago (1 children)

You 100% should have to keep your systems up to date. It's a danger to yourself and everyone else when you don't.

[–] [email protected] 3 points 8 months ago (2 children)

Even at the risk of Microsoft adding more spyware to my machine, reinstalling apps I deliberately uninstalled, reverting privacy settings I set, strongarming me into using their browser, etc? All of which has been reported.

My hardware, my choice.

[–] [email protected] 11 points 8 months ago* (last edited 8 months ago) (1 children)

If you want to phrase it as a "personal responsibility" thing, then you should frankly be criminally liable if your system is used for a DDOS attack.

[–] [email protected] 5 points 8 months ago* (last edited 8 months ago) (1 children)

Lol.

As long as security updates are bundled with antifeature updates, this amounts to "install candy crush or go to jail!"

[–] [email protected] 8 points 8 months ago (1 children)

You think it's funny for your system to take part in an attack potentially costing billions of dollars in damages because you can't be bothered to switch off of Windows because "you don't like what Microsoft installs with their security updates" or "actually install security updates"?

load more comments (1 replies)
[–] [email protected] 3 points 8 months ago (1 children)

Sounds like Microsoft is the problem here. Their antics finally got me to switch to Linux with Copilot.

Just curious, are you unvaccinated too?

load more comments (1 replies)
load more comments (11 replies)
[–] [email protected] 26 points 9 months ago (5 children)

Don’t want to sound like I’m proselytizing, but there are other free operating systems not based on Linux: FreeBSD, FreeDOS or ReactOS in example. I wish, I could add GNU/Hurd to the list, but from what I know, its unusable at the moment. Redox is also a new OS written in Rust, but it's not ready yet (I think).

Now, are these real alternatives to a regular Linux based OS? In some cases they are (FreeBSD and their family), but most probably would just use Linux for their PC. They aren't even suited for gaming I guess, the likes of Steam. I was just "Acktually"-ing around that you don't "need" Linux for owning your computer. I mean, you mentioned closed firmware, so technically I was allowed to. :D

[–] [email protected] 14 points 9 months ago (1 children)

Yeah my position is really to recommend any FOSS OS in the large over proprietary ones. However, since my experience is primarily with Linux distributions, and I do think that Linux makes sense for a lot of use cases, I usually start by talking about "Linux" first.

But, from my experience, if a "solution" to a problem "forces" the user to make a choice, then they'll stick with what "currently works" over having to make a choice. So when I talk to people about Linux IRL, I typically direct them to Linux Mint directly, even though other distros exist and it actually doesn't fit my use cases. Once they're comfortable in the Linux ecosystem, they can switch to a different distro or OS family if they feel the need to do so.

[–] [email protected] 7 points 9 months ago* (last edited 9 months ago) (1 children)

Yeah, I know people running FreeBSD as their daily driver; totally left that one out haha.

The rest of them are either niche (e.g. FreeDOS for retrogaming) or not quite ready for daily driving (e.g. ReactOS -- which I've been rooting for for a while now).

There's also TempleOS lol

When we're talking FOSS, feel free to "ackshually" all day. Worst case is I learn something new/cool.

[–] [email protected] 3 points 9 months ago

I would absolutely run FreeBSD on my laptop if the WiFi wasn’t awful. It doesn’t matter which chipset, max is like 20 Mbps. Rouuugh.

On the server side of things, Docker/Podman is so convenient, and keeps me from blowing so much time on “maintenance.”

Hopefully, some day, I can daily a BSD. Until then- NixOS!

[–] [email protected] 5 points 8 months ago

The Hurd hasn’t done anything properly in, what, 3 decades? I am actually surprised someone even remembers it.

[–] [email protected] 4 points 9 months ago* (last edited 5 months ago) (1 children)

spoilerasdfasdfsadfasfasdf

[–] [email protected] 8 points 9 months ago

Don't want to sound like I'm proselytising but do you have a few minutes to talk about our Lord and Saviour, Linus Torvalds?

[–] [email protected] 89 points 8 months ago (2 children)

I've said for years that the very last power we have as consumers is the ability to turn off our internet and still be able to use our devices. That is my minimum expectation of any company.

Fridge needs an internet connection, fuck you. TV won't work unless it's connected to the internet, fuck you.

But most especially (and this is why I moved to Linux originally), computer needs to always be connected to the internet even if all I'm doing is opening an office program that has nothing to do online? Go fuck yourself.

The ability to unplug my ethernet cable and still be able to use 99% of my computer with the exception of email and a web browser is the absolutely most basic human right left to us.

[–] [email protected] 13 points 8 months ago (2 children)

New versions of Android have made turning off mobile data more inconvenient. Now, you need to tap twice instead of just once in previous versions.

[–] [email protected] 12 points 8 months ago

My fix to this is to click the "airplane mode" button

[–] [email protected] 6 points 8 months ago

That's Google's version of android. Most OEMs still have the single tap internet toggle.

[–] [email protected] 33 points 9 months ago

My computer runs Linux.

[–] [email protected] 32 points 9 months ago* (last edited 9 months ago) (2 children)

Your Computer Isn't Yours: Apple stores every program you run, and when and where you ran it

I'm not using Apple hardware or software, so I doubt it.

[–] [email protected] 5 points 9 months ago* (last edited 9 months ago)

Same.

The good thing about buying something it's with your own money you can buy whatever it's better for you.

[–] [email protected] 2 points 8 months ago

I have an iPhone propped up on the desk viewing my laptop screen just so Apple can record my programs and be happy. Don't want them to miss out!

[–] [email protected] 31 points 8 months ago

The version of macOS that was released today, 11.0, also known as Big Sur…

Good thing we’re on top of things here on the fediverse.

[–] [email protected] 23 points 9 months ago (4 children)

This is from 2020. You absolutely can use Little Snitch or a similar firewall to block this traffic.

https://eclecticlight.co/2021/02/23/how-to-run-apps-in-private/

[–] [email protected] 23 points 9 months ago* (last edited 9 months ago) (1 children)

This is from 2020. You absolutely can use Little Snitch or a similar firewall to block this traffic.

We agree how sinister and dystopian it is to need to work against your hardware/os vendor for something like this though, right?

Shutup 10 exists, but that doesn't make it OK that Windows users have to continuously be on guard for MS to try snooping on them, either.

[–] [email protected] 2 points 8 months ago

Spending time to this is waste of life, it used be you setup the PC and it was good, now it is maintenance. I could not justify it any longer... made that switch.

[–] [email protected] 6 points 8 months ago* (last edited 8 months ago)

Can you though? LS now operates in user mode, which means it can no longer block traffic sent to Apple via a kernel thread.

It’s all a bit pointless though, as a LOT of hardware now calls home as well, and it doesn’t matter what OS to run on top of it unless you’re running something like TempleOS. Vanilla Linux is not going to protect you by itself. And if you’re using a repository system for software updates, that’s going to be reporting your software too — and many web browsers also report the URLs you go to (or even consider going to) and what extensions you have loaded.

But that article points at a solution for macOS users: it’s the certificates that are being checked. Any non-bog-standard software I run is not notarized or signed, and it functions just fine and has nothing to send back to Apple’s servers. First time I run it I need to right click and select Open to run the app, and this bypasses the entire signer system.

[–] [email protected] 3 points 9 months ago

Added in an edit

load more comments (1 replies)
[–] [email protected] 12 points 9 months ago (1 children)
[–] [email protected] 10 points 8 months ago

Last time I bought this up, everyone thought I was lying because they couldn't believe the thought of their beloved status symbol not being perfect.

Its important to remind people that apple cares about your security and privacy as much as zuckerberg.

[–] [email protected] 2 points 8 months ago

I haven’t noticed Akamai traffic recently; has Apple moved to another contractor, or do they import these hashes internally now?

load more comments
view more: next ›