That’s kind of the point. Security teams have stopped doing any risk assessment after Heartbleed, and now all it takes is a pretty website to have a “real” vulnerability

It’s a heat chamber or heat gun and some fresh solder. Certainly not anywhere close to a new RAM module

I’ve watched our techs move parts between boards

Google dismantles botnet

But then, no updates are applied to affected devices, and

Google worked with several other organizations to disrupt the x.cpe network, including Japan’s National Police Agency, Synthient, and Trend Micro. Google says it has taken legal action to shut down the domains and servers Videostrong

Sounds more like Google asked these other people to dismantle a botnet after detecting it.

The headline implies they somehow stopped it through Google Play

That’s literally what I said, and why I disagreed with the other poster saying it ran in the TEE

Whether the protections of the main binary are sufficient I’ve made no comment on

I very much disagree with

think the phrase “running in the TEE” is the idiomatic way to describe a program running on the main CPU

In the Confidentiality/Integrity/Availability triangle, a secondary process running in another operating system gives you integrity, but not confidentiality

Attesting is very different from protecting

The binary performing the inference isn’t running in the TEE, because the TEE runs on a weaker processor. The TEE is validating that the binary running on the main processors hasn’t been tampered with

That’s decent, but doesn’t match the statement that inference is happening in the TEE

There’s no way that’s possible

My reading of this is the TEE is used to validate the binary hasn’t been tampered with, but the TEE is definitely not powerful enough to do any inference.

The provider process is hardened against common local inspection paths, including debugger attachment and external memory inspection. The integrity of the running binary is also part of the trust model, helping ensure that the software serving requests matches what the network expects.

The system also uses hardware-backed attestation rooted in Apple’s security architecture. Secure Enclave keys, attestation signals, and recurring challenge-response checks are used to verify that a participating node is running with the expected protections and software state.

Impossible. The elite want to know where every penny you spend goes, and it’s too hard with cash

You’re more likely to see credit cards only allowed through Google Pay or Apple Pay than going back to cash

They’ll claim it’s having to support so many third party’s in the chain causing the problem, so we need 2 “trusted” entities

They now use Proton, but they removed the native Linux client and Proton wasn’t integrated yet at that time

Rocket League was one

I believe it was delisted on steam as well, but it still removed support for players at the time

They were purchasing studios and removing Linux clients from games that already had native clients

They’ve been bolting on more complex use cases, but keeping packaging simplistic was their stated goal 20 years ago

It’s not a bad thing, but missing modules for the running kernel on updates is one edge case new users might not expect

Arch is just the most popular one where that would happen. Most distros don’t have that issue; it’s an artifact of the simplistic packaging that Arch uses.

I don’t happen to know how Gentoo handles it, though

I’d guess Arch or a derivative user?

Then I assume the cookie UX has separate toggles for local analytics vs analytics through Google, et. al.?

That way they can get the data they want without sharing it to any third parties, or through third party services?

Also, does Docker do rootless containers yet?

That’s why I said we don’t know the overall effect on the biome due to less efficient engines

With how quickly we industrialized, my intuition is we were mining and burning it as fast as possible, but maybe more efficient engines could have let us mine and burn even more

40 years of burning far more coal than necessary due to inefficient engines

Whether the overall effect was positive or negative with respect to the biome, no clue

Cambridge University found that the steam engine was held back for ~40 years because of bad patents

https://archive.org/details/againstintellect0000bold

Every DRAM manufacturer has pled guilty to price fixing https://en.wikipedia.org/wiki/DRAM_industry_price_fixing

If we still have governments holding them accountable, then it will go down. If we don’t, it won’t