• 98 Posts
  • 830 Comments
Joined 2 years ago
cake
Cake day: July 23rd, 2023

help-circle

  • But these sham community engagement exercises piss me off

    That’s Google for you: they’ve been doing self-serving open-source for decades.

    For instance: they open-sourced Android. That helped Android become the dominant platform and Google capture the cellphone market. Since then, Google has been slowly moving their stuff away from the open-source AOSP and into their proprietary stack, introduced proprietary features that are almost compulsory for a practical, working Android system like Play Protect, and are actively killing deGoogled ROMs.

    There’s only one thing to keep in mind with Google: if they do something, it’s not in your interest, and they know how to play long games. Anything they do will be used against you some day.




















  • descent into a kind of fusion of tech and fascism

    This isn’t new.

    One of the defining traits of fascism is that the private sector is in cahoots with the government. In fact, that’s the root of the words fascism: fasces in Latin means bundle - the bundling of state and private interests.

    Corporations have no principles and no morals: whatever will make them more money, they’ll ro-ro with. When it takes colluding with an authoritatian regime, they have no problems getting onboard.

    The danger today compared to IBM helping the Nazis is of course that today’s computers are vastly more powerful than mechanical tabulators. This is going to turbocharge the dystopia orders of magnitudes.

    And finally, people have been lulled into a false sense of security and convinced to give away a lot more personal information than they should’ve for the past 25 years - the “I have nothing to hide, why do I need privacy?” fallacy. Now they’re going to find out why they should have been careful. I almost want to say “I told you so” every day, having been called a paranoid crackpot for the past 25 years, but it’s so sad and so too late that it isn’t even anything to gloat about…



  • Exactly. This is a malicious PAM module. Of course something as sensitive as PAM running as root can do any nasty thing it wants.

    But the trick is, someone has to convince the target to go root and install it. And I guarantee you, of all the Linux users out there, only a teeny tiny fracition knows what PAM even is, and those who know aren’t likely to install any old PAM module willy-nilly. Which leaves an unlikely supply chain attack - unlikely because, just like expert users who diddle with PAM, any maintainer of a distro that supplies PAM modules is going to be super-careful what they onboard. Because ya know… PAM. It’s like super-sensitve.

    So yeah, I’m not very worried.