Computers and the internet gave you freedom. Trusted Computing would take your freedom.
Learn why: https://vimeo.com/5168045

  • 0 Posts
  • 151 Comments
Joined 1 year ago
cake
Cake day: June 7th, 2023

help-circle
  • FDE requires third-party software (veracrypt)

    There’s bitlocker, I think it was added in 7 or Vista. What do you mean?
    But other than that, I would rather use VC too.

    standard system utilities (think ssh, git etc.) are not available on a fresh install

    Hmm, depends. It has a built in openssh client and server, but the “feature” (automatically installing package) is off by default. It can be enabled at install time with the use of the standard windows image modification tools (DISM I think?)

    And then you’re supposed to download and install .exe files from the internet? Since microsoft controls what goes in the windows store

    I think it’s better that Microsoft does not have that much control over software distribution.

    But again, most things you want aren’t there, and you can’t even trust the things that are there.

    Of course you can’t, nobody can tell by looking at the store page if it was modified by anyone, including Microsoft.
    The amazon app store for android explicitely tells that they are adding tracking code to every uploaded app, and to make this possible they replace the digital signature of apps uploaded. Google with the play store does not tell anything like this afaik, but for a few years now it also basically compromised the digital signatures of developers, by requiring the private keys to be mandatorily handed in for continued app updates.
    I don’t trust that these companies that already rely on mass surveillance as a revenue stream, they won’t add tracking code to apps unauthorized by the devs. If not right now, it will happen in the future.

    For some reason, a billion dollar company cannot curate a software repository of the same quality as the ones maintained by unpaid volunteers in the Linux world.

    Besides quality, I think open source distro’s repository and it’s packagers are largely more trustable. They are not motivated financially to modify the packages in unwanted (by the user) ways, and they are transparent.

    So yeah, I think it’s just not there yet. Maybe in a few years windows will be a viable alternative for desktop systems.

    I think they are drifting farther and farther away.
    It was an option. But the shitshow of 11… thanks that’s too much. I’m not installing that for anyone. And 10 is soon end of life…




  • Ater purchasing and downloading a game from Steam, the Steam client is not actually needed for it to be playable. Of course it will try to start up Steam, and if isn’t installed then it will complain, but if use use a “steam emulator” that can be worked around.
    This is useful if you don’t want Steam to track how much and when do you play, when is it that you are online, what achievements you got and such. This is afaik also the only way to say no to forced automatic game updates.

    One such emulator is Mr Goldberg’s steam emu.
    It has a bunch of configuration options, per-game settings, optionally portable settings, windows+linux support, and I think it’s even open source.

    Using the Goldberg emu is not piracy, neither DRM circumvention. The Steam API is not a DRM, most Steam games just make the Steam client a hard dependency, not bothering with making it work without it.
    When the game is protected by DRM (this should always be marked on its store page), the steam emu won’t be enough, but you would also need to patch it’s DRM protection. Sometimes that’s easier, sometimes harder.

    Steam emus may or may not work with multiplayer games.
    The Goldberg emu has a replacement Steam’s own multiplayer network communication system, which works through the local network or a selfhosted wireguard-like VPN, but with big centrally hosted multiplayer games you’ll run into licensing validation problems or such.













  • Did you read my comment in it’s entirety?

    For programs, that is not a problem.
    This is a problem for data.

    Why? Because you very rarely need to read the program’s “content”, and when you do, you’ll instead go look at the source code anyways. But for binary data files there is no source code that is the equivalent of the contents in readable form.

    If you want to read it as a human in your text editor, good luck with making sense of it. If you want to read it with your program it’ll have to pull in a tree of dependencies out of questionable necessity, and any of that dependencies could have a severe bug or a security vulnerability that affects your program and it’s users. And the only reason you needed to import that lib is to be able to parse this binary format. It’s not even a common one like an archive format, but a totally custom made format of systemd.
    And then there’s another problem. You may be able to make sense of the binary data with your bare hands and a text editor, but you better not edit it that way, because you may mess up the delicate offsets, or you may wanted to replace a value (e.g. a string, out some kind of list) with a longer one but you can’t because of the former problem.

    Binary is ok for programs, and you know what, it’s also fine for data in transit (network) and of course archives.
    But for data, whether it’s a log file or configuration, or some other that would be totally fine in text format, it’s just annoying, limiting, and overcomplicated.



  • Nothing is hidden, it’s all there

    Yeah, of course, it’s all there in binary. For programs of course that’s not a problem, but for data that you may need to look at any time, it is. It’s harder to interpret both for humans (significantly) and both for any program that want to make use of it (unless they use the specific library that came up with the format, and by that also pulling in all its libs transitively)

    Binary data is not much less obfuscated than the system files of windows. It’s all there, you can read it