Notices by Luc (luc@chaos.social)

H.2215 for anyone else wondering if they were there

@evan this would be interesting as a
- Yes + I'm from the USA
- Yes + I'm not from the USA
- No + I'm from the USA
- No + I'm not from the USA

to see how many of the "yes"es are just that one country that puts a lot of value in its PR. North Korea would be interesting for similar reasons but probably not many respondents on Mastodon 😁

EU age verifier app was released today on github, saying it'll include remote attestation

Is it just me who finds this terrifying?

No more open operating systems for your phone if you want to be able to use it for age verification. For now, it sounds like this will be for porn, but social media (hello Mastodon) recently got a "recommendation" from our government to not be allowed below a certain age

Will we need a Google or Apple attested device to get around on the internet in a few years?

@lynn I guess? I don't want my phone to track my biometrics, nor enter a secure password every time I unlock it. Maybe nowadays with the security chips (TPM) a short PIN is fine and I could entrust the device with a banking app, but so far I just haven't wanted to install one

I found it quite ingenuous to put one's bank card into a reader and do a chip+PIN zero-euros transaction to generate a token which the website then accepts as login. It's what I grew up with and use to do online banking

Question for everyone: What do you use to limit the tracking of "forced" apps?

- The train company sends my data to Tiktok (ticket needs to be shown in-app)
- Signal to Google
- TooGoodToGo to data brokers (can't order leftover food via their website anymore)
- etc.

How to block this?

I'm hoping for a better alternative to TrackerControl since it's buggy (legit connections hang often) and makes that I can't ever use a VPN under any circumstance, but I'm at a loss for other options

:BoostOK:

I'll either have root xor GrapheneOS, in case any suggestions depend on that. Which phone I buy depends on whether @GrapheneOS can be useful here

Btw, DNS blocking (e.g. hosts file) isn't a good option because:

- That can't be done per app, and some apps require access to Google APIs where others (like Signal) don't

- I assume many trackers will just fall back to IP addresses since it's trivial to do

@evan sorry if it came across as arguing

@evan huh, okay that's not how the word is used where I'm from! Would you interpret it as that broad a set of options in Canada? Wondering if this is just the broad definition that Wikipedia gives given that it's often misused, or if it's actually what people mean when they say this

@evan median, not average, for a start

@kolev ah I see, that's good to be aware of! Thanks

@kolev Why is Framework not in the poll? They seem like the coolest thing, supporting Linux and hardware upgrades and all that

Don't have one myself but I'm considering it once my current laptop finally dies — the cpu fan actually started to break a few weeks ago, thankfully, so probably once I have time after the holidays I'll properly look into my options and would be curious what pros and cons others experience with Framework laptops!

@evan wouldn't that be useful for people not yet on fedi, so they don't have to choose an instance because there's already one with people they know? So basically the target audience is people who aren't voting in this poll?

@GossiTheDog what's a JST? Jordan? Japan? Java?
*tries to think really hard about other geographical regions' names starting with J*

This is why I like UTC/GMT offsets...