Indie iOS app developer with a passion for SwiftUI

  • 1 Post
  • 23 Comments
Joined 1 year ago
cake
Cake day: July 1st, 2023

help-circle

  • There are a couple of concerns with biometrics.

    The big one is, as you already mentioned, spoofing biometrics.

    The FaceID or TouchID sensor essentially saying “I got that face/fingerprint that you have in your Secure Enclave”. Granted it is a sophisticated attack, but nevertheless one you’d want to prevent if only because it’s good practice to maintain a secure chain in which the individual links can trust each other.

    For similar reasons the lockdown mode exists, which is mainly useful in limited scenarios (e.g. journalists, dissidents, etc).

    On the other hand, if ever there was a potential attacker, it would be a government because they unlimited funds in theory and it isn’t hard to imagine the FBI trying to utilize this in the San Bernardino case if it was available.

    A different risk, which would make the above quite a bit easier to accomplish, would be an altered biometrics scanner that, in addition to working the way it’s supposed to work, stores and sends off your biometrics or simply facilitates a replay attack.


  • Lossless is understood to have a bitrate of at least 1411kbps, or about 1.4Mbps.

    Theoretical sustained bandwidth capability of Bluetooth on the 2.4Ghz spectrum is 1Mbps, but in practice it’s a chunk lower in part due to overhead.

    Even if we assume if you could just cram a higher bitrate through a smaller bandwidth (spoiler, you can’t), everyone would be up in arms about Apple lying about lossless and class action suits would ensue.

    That said, you can’t. This is not like your internet connection where you’ll just be buffering for a minute.

    As for what is and isn’t perceptible, I think you’re mixing up your tonal frequencies with your bitrates here.


  • Honestly the most frustrating part is that there is plenty to criticize Apple on, so there’s no reason to get caught up in fabricated clickbaity nonsense.

    But instead of focusing on genuine concerns, people would rather hop on some misinformation train.

    All the while, if you espouse opinions that are bit more nuanced than “Apple bad”, then you must be a bootlicker like you said.

    It’s as if people are more concerned about missing out on joining the hype and showing off their armchair skills, rather than exercising a modicum of critical thinking.


  • Obfuscating what you have to do ≠ not providing you with a roadmap on what you have to do.

    If they didn’t obfuscate it there would be many tools out there already to let it be done.

    This is a non sequitur.

    It doesn’t automatically follow that a lack of tools means there is obfuscation. The simple fact that there can be many reasons why tools aren’t widely available alone breaks that logic.

    But I’d say the fact that we already know exactly why difficulties arise when replacing parts, definitely proves that there’s no obfuscation.

    Which again circles back to the difference between anti-repair and not pro-repair.

    Just because Apple doesn’t go out of their way to provide a roadmap and hold your hand and as a result you are having difficulties when you’re trying to do it yourself, doesn’t mean they are actively thwarting you.

    Apple doesn’t even think about you and me, their concern is to facilitate their own repair processes.

    They literally serial lock almost half of their parts.

    They don’t.

    Aside from biometrics none of the parts are serial locked.

    What you’re thinking about is parts based factory calibrated data loaded into the parts from a central database.

    Just because the system ignores the calibration data once the part doesn’t match the one the calibration was intended for, doesn’t mean it’s “locked”, it just means that you’re trying to use calibration data for the wrong part.



  • I’m not sure if you’re serious or trying to be sarcastic.

    Bluetooth and WiFi are two different things.

    For starters standard Bluetooth operates on 1MHz wide channels, BLE on 2MHz wide channels, whereas WiFi (nowadays) operates on 20 or 40 MHz wide channels.

    Modern Bluetooth (on 2.4Ghz) can theoretically do bursts of 2Mbps, but in practice even 1Mbps is hard to hit in a sustained fashion.

    2.4Ghz is just a frequency band and is not the same as bandwidth.

    You might as well argue that a pickup truck and a formula 1 race car should be able to reach the same top speed in the same time because their wheel distance is the same.

    I think […]

    Think again



  • lazyvar@programming.devtoTechnology@lemmy.world*Permanently Deleted*
    link
    fedilink
    English
    arrow-up
    28
    ·
    edit-2
    1 year ago

    You’re right that a lot of Terms of Service documents and similar agreement documents have language that reserves the right to modify those terms.

    At the same time just because something is in the terms doesn’t mean it can stand the test of adjudication and terms as well as changes are often challenged in court with success.

    Unity is in a particular tricky situation because the clause that governed modifications in their last ToS explicitly gives the user the option to pass on modifications that adversely affects them and stick with the old terms:

    Unity may update these Unity Software Additional Terms at any time for any reason and without notice (the “Updated Terms”) and those Updated Terms will apply to the most recent current-year version of the Unity Software, provided that, if the Updated Terms adversely impact your rights, you may elect to continue to use any current-year versions of the Unity Software (e.g., 2018.x and 2018.y and any Long Term Supported (LTS) versions for that current-year release) according to the terms that applied just prior to the Updated Terms (the “Prior Terms”). The Updated Terms will then not apply to your use of those current-year versions unless and until you update to a subsequent year version of the Unity Software (e.g. from 2019.4 to 2020.1). If material modifications are made to these Terms, Unity will endeavor to notify you of the modification. If a modification is required to comply with applicable law, the modification will apply notwithstanding this section. Except as explicitly set forth in this paragraph, your use of any new version or release of the Unity Software will be subject to the Updated Terms applicable to that release or version. You understand that it is your responsibility to maintain complete records establishing your entitlement to Prior Terms.

    https://web.archive.org/web/20201111183311/https://github.com/Unity-Technologies/TermsOfService/blob/master/Unity Software Additional Terms.md



  • Cue the nuclear shills that will handwave away any legitimate concern with wishful thinking and frame the discussion as solely pro/anti fossil, conveniently pretending that renewables don’t exist.

    ETA:

    Let’s look at some great examples of handwaving and other nonsense to further the nuclear agenda.

    Here @danielbln@lemmy.world brings up a legitimate concern about companies not adhering to regulation and regulators being corrupt/bought *cough… Three Mile Island cough*, and how to deal with that:

    So uh, turns out the energy companies are not exactly the most moral and rule abiding entities, and they love to pay off politicians and cut corners. How does one prevent that, as in the case of fission it has rather dire consequences?

    So of course the answer to that by @Carighan@lemmy.world is a slippery slope argument and equating a hypothetical disaster with thousands if not millions of victims and areas being uninhabitable for years to come, with the death of a family member due to faulty wiring in your home:

    Since you can apply that logic to everything, how can you ever build anything? Because all consequences are dire on a myopic scale, that is, if your partner dies because a single electrician cheaped out with the wiring in your building and got someone to sign off, “It’s not as bad as a nuclear disaster” isn’t exactly going to console them much.

    At some point, you need to accept that making something illegal and trying to prosecute people has to be enough. For most situations. It’s not perfect. Sure. But nothing ever is. And no solution to energy is ever going to be perfect, either.

    Then there’s the matter of misleading statistics and graphs.
    Never mind the fact that the amount of victims of nuclear disasters is underreported, under-attributed and research is hampered if not outright blocked to further a nuclear agenda, also never mind that the risks are consistently underreported, lets leave those contentious points behind and look at what’s at hand.

    Here @JohnDClay@sh.itjust.works shows a graph from Our World in Data that is often thrown around and claims to show “Death rates by unit of electricity production”:

    Seems shocking enough and I’m sure in rough lines, the proportions respective to one another make sense to some degree or another.
    The problem however is that the source data is thrown together in such a way that it completely undermines the message the graph is trying to portray.

    According to Our World in Data this is the source of the data used in the graph:

    Death rates from energy production is measured as the number of deaths by energy source per terawatt-hour (TWh) of electricity production.

    Data on death rates from fossil fuels is sourced from Markandya, A., & Wilkinson, P. (2007).

    Data on death rates from solar and wind is sourced from Sovacool et al. (2016) based on a database of accidents from these sources.

    We estimate deaths rates for nuclear energy based on the latest death toll figures from Chernobyl and Fukushima as described in our article here: https://ourworldindata.org/what-was-the-death-toll-from-chernobyl-and-fukushima

    We estimate death rates from hydropower based on an updated list of historical hydropower accidents, dating back to 1965, sourced primarily from the underlying database included in Sovacool et al. (2016). For more information, see our article: https://ourworldindata.org/safest-sources-of-energy

    Fossil fuel numbers are based on this paper which starts out by described a pro-nuclear stance, but more importantly, does a lot of educated guesstimating on the air-pollution related death numbers that is straight up copied into the graph.

    Sovacool is used for solar and wind, but doesn’t have those estimates and is mainly limited to direct victims.

    Nuclear based deaths is based on Our World in Data’s own nuclear propaganda piece that mainly focuses on direct deaths and severely underplays non-direct deaths.

    And hydropower bases deaths is based on accidents.

    So they mix and match all kinds of different forms of data to make this graph, which is a no-no. Either you stick to only accidents, only direct deaths or do all possible deaths that is possibly caused by an energy source, like they do for fossil fuels.

    Not doing so makes the graph seem like some kind of joke.







  • The proposal is bad enough as it is, but it’s the duplicitous gaslighting BS that really pisses people off.

    If they came out and said “We came up with this thing to prevent loss of revenue on ads and prevent LLMs from capturing data” then people would still be against it, but at least it would feel like an honest discussion.

    Instead it’s just another page out of Google’s playbook we’ve seen many times already.

    1. Make up some thinly veiled use cases that supposedly highlight how this would benefit users, while significantly stretching the definition of “users”
    2. Gaslight every one by pretending that people simply misunderstand what you’re proposing and what you’re trying to achieve
    3. Pretend that nobody provides reasonable feedback because everyone is telling you not to commit murder in the first place instead of giving you tips on how to hide the body
    4. Latch onto the few, inevitable, cases of people going too far to paint everyone opposing it in a negative light
    5. Use that premise to explain why you had to unilaterally shut down any and all avenues for people to provide comment
    6. Make the announcement that you hear people and that you’re working on it and that all will be well
    7. Just do what you want anyways with minimal concessions if any and rinse repeat

    For what it’s worth I blame W3C as well.
    Their relatively young “Anti-Fraud Community Group” has essentially green lit this thing during meetings as can be seen here:

    https://github.com/antifraudcg/meetings/blob/main/2023/05-26.md

    https://github.com/antifraudcg/meetings/blob/main/2023/07-07-wei-side-meeting.md





  • But for iOS you’re forced to use Xcode for implementing certain things like permissions, build and upload.

    You can do all that via VSCode as well if you so desire.

    Permissions, configurations, etc. are essentially all just XML files and can be edited as such, building, running in simulator and uploading can all be done via CLI.

    And if you’re not comfortable doing it via the terminal in VSCode, you can also find some extensions.

    Personally as a native dev I don’t know why you’d want to of course, but to each their own.