Recent searches
Search options
Today's threads (a thread)
Inside: It's not a crime if we do it with an app; and more!
Archived at: https://pluralistic.net/2025/01/25/potatotrac/
1/
*Picks and Shovels* is a new, standalone technothriller starring Marty Hench, my two-fisted, hard-fighting, tech-scam-busting forensic accountant. You have JUST TWO MORE DAYS to pre-order it on my latest Kickstarter, which features a brilliant audiobook read by Wil Wheaton:
2/
I enjoyed the article on enshittification via apps. I have now removed Facebook and many other apps from my phone, and replaced them with Firefox and/or DuckDuckGo browser links. That said, I'd be interested in your thoughts on trust/security.
The same technology that allows for odious DRM, and which (potentially) protects apps from modification vs. browsers (namely,
secure processing nodes and software authentication) are also the Root of Trust/Security
I enjoyed the article on enshittification via apps. I have now removed Facebook and many other apps from my phone, and replaced them with Firefox and/or DuckDuckGo browser links. That said, I'd be interested in your thoughts on trust/security.
The same technology that allows for odious DRM, and which (potentially) protects apps from modification vs. browsers (namely,
secure processing nodes and software authentication) are also the Root of Trust/Security
in the system. So in a fully open source ecosystem, how do we ensure trust in our software? The normal technical means is digital signatures, rooted in trusted hardware--which as I noted, is
also required for DRM.
Bottom line, how do we avoid DRM-based enshittification, while also providing the means to trust our collective hardware/software chain? (and I realize there are all sorts of other supply chain problems that are buried in here)
I ask from the perspective of someone @pluralistic
who likes freedom, free speech, fair use, etc... but also as someone who has been intimately involved with anti-tamper technologies
(https://at.dod.mil/What-Is-Anti-Tamper/) and product security policy and implementation.