2026-10-23T15:10:33Z https://njump.me Nudelstapler https://njump.me/npub14xmnyqu8sw5smlq2usf8crqvzssup7nuruptl99mena9nk7m4pxs9j2m4c https://assets.chaos.social/accounts/avatars/110/220/491/275/025/857/original/d2e8e68a5cc86069.png https://assets.chaos.social/accounts/avatars/110/220/491/275/025/857/original/d2e8e68a5cc86069.png https://njump.me/nevent1qqstzwxze7mls2y7hzpz24vg9de4kv53yrlkytjxk96sxyap3ed0zcszyz5mwvsrs7p6jr0uptjpylqvps2zrs860s0s90u5h0x05kwmmw5y69uyclf In reply to <a href='/nevent1qqsw83tq6ajgp82rnhyjulg9963fqunedjtsc3svd3ejtsgg5tkhmpszu65hm'>nevent1q…65hm</a><br/>_________________________<br/><br/>Or access to a thread mesh for things control.<br/><br/>Or do I misunderstand the capabilities for Bluetooth/Thread/etc access under the nearby devices umbrella? 2026-10-14T22:58:10Z https://njump.me/nevent1qqsw83tq6ajgp82rnhyjulg9963fqunedjtsc3svd3ejtsgg5tkhmpszyz5mwvsrs7p6jr0uptjpylqvps2zrs860s0s90u5h0x05kwmmw5y6vn3ua0 In reply to <a href='/nevent1qqs8wz2sdw5rr6emcgexuk3lrssc4xthp7r4wsy2v0dfsfrtw7qu2ucsxxwx7'>nevent1q…xwx7</a><br/>_________________________<br/><br/>...<br/>Having comms to hosts on a link local network is less assumed trust than accessing Bluetooth peripherals, which in their purpose often have way more access to data. For example headsets that receive audio i/o channels, call control, gesture intents, assistant trigger, contacts access, caller&#39;s number. They are themselves vulnerable to apps seeing f.e. airoha ble debug endpoints. 2026-10-14T22:55:11Z https://njump.me/nevent1qqs8wz2sdw5rr6emcgexuk3lrssc4xthp7r4wsy2v0dfsfrtw7qu2uczyz5mwvsrs7p6jr0uptjpylqvps2zrs860s0s90u5h0x05kwmmw5y63ys729 In reply to <a href='/nevent1qqsz3pwxn7ue2kwrcgnvel67jdch4898ddwkjgvfau7uhrh8fsl8xvq4rxh9z'>nevent1q…xh9z</a><br/>_________________________<br/><br/>So non globally routable ip ranges and mdns access is squashed into the same permission group as access to bluetooth peripherals.<br/>(But according to docs not in all cases. I could interpret their wording as system modal mediated things have contextual grants like video cast intents or gateway&#39;s dns. But they are light on details there.)<br/><br/>From a fingerprinting perspective that makes sense.<br/>But from an attack surface consideration its horrible.<br/>.... 2026-10-14T22:50:33Z https://njump.me/nevent1qqs2aj4ghd4vsjap5u82kr2hfw3t5jp6yyk45qp39usf9fjq04xua8szyz5mwvsrs7p6jr0uptjpylqvps2zrs860s0s90u5h0x05kwmmw5y6cheg0m <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1kwarc5z9lwhen05uknd2nuwhhthd4ws0cku3t9j3rchm0fcd6luslse0nj" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>GrapheneOS</span> (<span class="italic">npub1kwa…e0nj</span>)</a></span> <br/><br/>The mental overhead of understanding and reasoning about the impact of Android 17 permissions is high. 2026-10-14T10:36:10Z https://njump.me/nevent1qqsz4232w66pl8z43wurqw8tc4sej0x7nm3kn22pp7fgxp5a8qrrqwgzyz5mwvsrs7p6jr0uptjpylqvps2zrs860s0s90u5h0x05kwmmw5y6w6vxcm Yo<br/><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1mtrk3vl7546q9c4lf0k62nkaypanv6t95gyh32f5jp63ffalu98s4mtrt0" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>F-Droid</span> (<span class="italic">npub1mtr…trt0</span>)</a></span> <br/><br/>Your Gitlab bugtrackers don&#39;t work without giving them a phone number. Even when oidc login via GitHub.<br/><br/>Here is the bug that it is about:<br/><br/><a href="https://github.com/ArcaneChat/android/issues/173">https://github.com/ArcaneChat/android/issues/173</a> 2026-08-13T18:59:28Z https://njump.me/nevent1qqsp8l9j750p8lv8s3ec76dsnxz64m9yexpzlfhghyxkatsus39raaqzyz5mwvsrs7p6jr0uptjpylqvps2zrs860s0s90u5h0x05kwmmw5y6fqy278 In reply to <a href='/nevent1qqsdvafzpy9lc8wlmhet62uejv6rqlgdcgeupttpw2wwdmrpvsduprqwlm3vq'>nevent1q…m3vq</a><br/>_________________________<br/><br/>So when whomever does not have inspected the machine beforehand and the situation is so urgent, that they won&#39;t have the patience to force you to write the password down and then check if it is a duress password? 2026-08-02T16:04:34Z https://njump.me/nevent1qqsvw6gh494lvxxeqkk5yxzrxe4wlyz7ehttnnjt3jll9lgdmsxykdczyz5mwvsrs7p6jr0uptjpylqvps2zrs860s0s90u5h0x05kwmmw5y6wkcxsq In reply to <a href='/nevent1qqsrtpq73v8huqyn6pv4ea6snl374630vflrz67lv9k2y4u65ac8g4qms7tfp'>nevent1q…7tfp</a><br/>_________________________<br/><br/>No, because it is simply not assurable.<br/><br/>Standard forensic procedures lead to state agents and similar capability being told to always image the machine first, and never try to unlock using the software on the machine. So as they have a copy of the luks header pre-wipe and can just use an implementation of luks that does not support duress passwords.<br/><br/>Most luks deployments do not employ any surefire wipable memory for cryptographic key encryption keys. 2026-08-02T00:20:06Z https://njump.me/nevent1qqsdmscndarm54u2v44yjp6ypkxl5d98vyghg2yr6sz5t5lufnqnxqgzyz5mwvsrs7p6jr0uptjpylqvps2zrs860s0s90u5h0x05kwmmw5y6qyuwgm In reply to <a href='/nevent1qqsvjs9t50jca3p22nwwws800zcxd5gpqyyc90su3tcex964w4q8qjs9ms7pa'>nevent1q…s7pa</a><br/>_________________________<br/><br/>But how much capacity do the balls have?<br/>They growing? 2026-07-07T16:26:16Z https://njump.me/nevent1qqsr6rnznyf7qhaee5p3krk8vsfn4krw9nukppjtt9whvemwt2fac9qzyz5mwvsrs7p6jr0uptjpylqvps2zrs860s0s90u5h0x05kwmmw5y6zg8ke9 In reply to <a href='/nevent1qqsy62wamfeehdeylh7c7r3rqd9rpe4rsn4hmg973pv03zqmuu2sttckpa60t'>nevent1q…a60t</a><br/>_________________________<br/><br/>Kinda sad that it does not have a hole in the dick to easily get it out if you put too much water in. 2026-07-07T16:13:52Z https://njump.me/nevent1qqsx8nuceacl6l9q9ds57u8pyyfdh5hkywffgrpgpe4hjk3qh4rv6uqzyz5mwvsrs7p6jr0uptjpylqvps2zrs860s0s90u5h0x05kwmmw5y60634jr In reply to <a href='/nevent1qqsrrcjfjjz3nfuatsypmkq0nd6ez9mr5pe620s8lg4gr694ac7gjnqdvlwjm'>nevent1q…lwjm</a><br/>_________________________<br/><br/>The opt out is a lie 2026-06-29T11:33:32Z https://njump.me/nevent1qqstktuzl3x7qeclr80dhw2z4tyrkr7ce0z7pguy55kwdn3856junlszyz5mwvsrs7p6jr0uptjpylqvps2zrs860s0s90u5h0x05kwmmw5y6s8ax2w In reply to <a href='/nevent1qqsd2p3d2vr8g4wxr6r2mr9yx203vfkgmrner2u6sfrtm82j009nk8str6xwz'>nevent1q…6xwz</a><br/>_________________________<br/><br/>What does local network access mean combined with VPN for this thing? <br/><br/>How is locality decided for ipv6?<br/><br/>Does it restrict localhost ports?<br/><br/> imagine an app like vendors Bluetooth headphone control app. <br/>I set it to no internet because usually firmware updates break stuff instead of improving. But i enabled nearby for it to have Bluetooth access. Does the app now additionally have local network access? <br/><br/>It could still communicate to internet via direct comms to a local resolver? 2026-06-26T22:58:26Z https://njump.me/nevent1qqsz0ap44sdgdjfxpgk3mnkcxdncrv78tk58hkvlzxez556rkxjkhsszyz5mwvsrs7p6jr0uptjpylqvps2zrs860s0s90u5h0x05kwmmw5y6yue5z4 <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1kwarc5z9lwhen05uknd2nuwhhthd4ws0cku3t9j3rchm0fcd6luslse0nj" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>GrapheneOS</span> (<span class="italic">npub1kwa…e0nj</span>)</a></span> <br/><br/>That is new. What exactly does it do?<br/><br/>No alt text, time constraint<br/> <img src="https://assets.chaos.social/media_attachments/files/116/815/758/510/386/366/original/e3d4cd839ae870a0.png"> <br/> 2026-06-26T09:43:39Z https://njump.me/nevent1qqsfuqrw0n0xwtjwvax0sgj4vsma0jzscdamdz3paz03n0fa9y057ngzyz5mwvsrs7p6jr0uptjpylqvps2zrs860s0s90u5h0x05kwmmw5y62e399c In reply to <a href='/nevent1qqsdd365y83aah74jt66tashrukje4mwkqlj68tk0sgre2upzs3rxzgneay6n'>nevent1q…ay6n</a><br/>_________________________<br/><br/>Next Level wenn Bestatter für sowas dann Infos in LLMs tun und die Grütze vorlesen. 2026-06-14T10:19:17Z https://njump.me/nevent1qqsr0hpct4d0zgugdak249gg57w859h97us8whvlct0mq4exz5hlc6czyz5mwvsrs7p6jr0uptjpylqvps2zrs860s0s90u5h0x05kwmmw5y6fz49pn In reply to <a href='/nevent1qqstk4u2j250f9wgv2emdn3jledhxexj8fz8tvmc28gyeqrgch3p36spw5mfz'>nevent1q…5mfz</a><br/>_________________________<br/><br/>Es gibt noch mindestens das vorinstallierte Messages von Samsung,Jio und +Message, also Pfon Hersteller und Carrier.<br/>Nix unabhängiges. 2026-01-25T10:26:33Z https://njump.me/nevent1qqsgjl7nyw3f094agv2n6fs42xcuclwskpkmtk5hwqu5006c0ygjlzczyz5mwvsrs7p6jr0uptjpylqvps2zrs860s0s90u5h0x05kwmmw5y6mktqqd In reply to <a href='/nevent1qqsgs7fln5xseaclsvlqzzc52akzc0m9jce9fgd6cfuwsrs57jvkx6s7wd4ur'>nevent1q…d4ur</a><br/>_________________________<br/><br/>Kein Indikator ob E2E oder nicht. Keine Möglichkeit Keys zu vergleichen.<br/>Die Entscheidung ob E2E unterstützt wird ist phone-carrier bestimmt.<br/>Kein Metadatenschutz.<br/>Keine unabhängigen Clients.<br/>Nur Google Messages und Apple Messages. 2026-01-24T18:52:19Z https://njump.me/nevent1qqsfpdhngdk4d5ulnhk9nunf6asgut3w5jfeej7lums5xrzdka0rdvszyz5mwvsrs7p6jr0uptjpylqvps2zrs860s0s90u5h0x05kwmmw5y6mwd2c9 <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1kwarc5z9lwhen05uknd2nuwhhthd4ws0cku3t9j3rchm0fcd6luslse0nj" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>GrapheneOS</span> (<span class="italic">npub1kwa…e0nj</span>)</a></span> <br/><br/>Did you do massive UI changes in 2025122500?<br/>Like colour scheme and glass? 2025-12-27T18:23:14Z https://njump.me/nevent1qqspdy23yuvepcj5vp2t3gaeqpgf7flmdvptlhn2xs9m0u2llwj934szyz5mwvsrs7p6jr0uptjpylqvps2zrs860s0s90u5h0x05kwmmw5y6vfze9h In reply to <a href='/nevent1qqsgtm27v4zqjk4r58m09lm7mdu5z4eww7w6clu2yd8vvdp9mc4pryqpvy5dy'>nevent1q…y5dy</a><br/>_________________________<br/><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub13jf7lnxukxjl7tkraze3g4n78pwzxq5zr8mk5n930yuuhtdzg7wsnvw6av" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Dronn</span> (<span class="italic">npub13jf…w6av</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1m9z3pdhlx9sv2nwheajue25x7cukavasfpyczlzt2k0aaqxj909q2wwhzq" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>The Matrix.org Foundation</span> (<span class="italic">npub1m9z…whzq</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1l92m9e5chenp7u57fn8ehxh65n8a8wk4zmwx2vhn058yfvxhw6us8dsqd6" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>:awesome:🐦‍🔥nemo™🐦‍⬛ 🇺🇦🍉</span> (<span class="italic">npub1l92…sqd6</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1nqnfeudz9vq2tdv7js8swge57mrw09ha6avm0dzne0s0y28qhrrq4xnfm7" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Debacle</span> (<span class="italic">npub1nqn…nfm7</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1tccury3pwf0fcrn7cva564hk886gl5sc8tt9kky00wh8mzuevmnqxt4342" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Element</span> (<span class="italic">npub1tcc…4342</span>)</a></span> <br/><br/>If it was not possible to publish on google without giving them signing power, no messenger at all would have code integrity guarantees on there. 2025-12-14T16:47:53Z https://njump.me/nevent1qqsgtm27v4zqjk4r58m09lm7mdu5z4eww7w6clu2yd8vvdp9mc4pryqzyz5mwvsrs7p6jr0uptjpylqvps2zrs860s0s90u5h0x05kwmmw5y6670jmf In reply to <a href='/nevent1qqs82plsg8mdp8tahhp82wknud8lje9m8ueekzttqw2fde9xdu4sh2g0u7dtm'>nevent1q…7dtm</a><br/>_________________________<br/><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub13jf7lnxukxjl7tkraze3g4n78pwzxq5zr8mk5n930yuuhtdzg7wsnvw6av" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Dronn</span> (<span class="italic">npub13jf…w6av</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1m9z3pdhlx9sv2nwheajue25x7cukavasfpyczlzt2k0aaqxj909q2wwhzq" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>The Matrix.org Foundation</span> (<span class="italic">npub1m9z…whzq</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1l92m9e5chenp7u57fn8ehxh65n8a8wk4zmwx2vhn058yfvxhw6us8dsqd6" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>:awesome:🐦‍🔥nemo™🐦‍⬛ 🇺🇦🍉</span> (<span class="italic">npub1l92…sqd6</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1nqnfeudz9vq2tdv7js8swge57mrw09ha6avm0dzne0s0y28qhrrq4xnfm7" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Debacle</span> (<span class="italic">npub1nqn…nfm7</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1tccury3pwf0fcrn7cva564hk886gl5sc8tt9kky00wh8mzuevmnqxt4342" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Element</span> (<span class="italic">npub1tcc…4342</span>)</a></span> <br/><br/>I am not dronn<br/><br/>Its just that the usual security wankers recommend to load everything from playstore, which I think is the wrong message. 2025-12-14T16:44:59Z https://njump.me/nevent1qqstw4rmwv9aelaplqhqlcxczhxzrp5lq0vfutrn8rsz2gka89xuz4czyz5mwvsrs7p6jr0uptjpylqvps2zrs860s0s90u5h0x05kwmmw5y6gstfhn In reply to <a href='/nevent1qqs9a3g6v6twzzx5acp86trccpt78xmqlpcaf223a43gzawfuqlctuswmp500'>nevent1q…p500</a><br/>_________________________<br/><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub13jf7lnxukxjl7tkraze3g4n78pwzxq5zr8mk5n930yuuhtdzg7wsnvw6av" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Dronn</span> (<span class="italic">npub13jf…w6av</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1m9z3pdhlx9sv2nwheajue25x7cukavasfpyczlzt2k0aaqxj909q2wwhzq" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>The Matrix.org Foundation</span> (<span class="italic">npub1m9z…whzq</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1l92m9e5chenp7u57fn8ehxh65n8a8wk4zmwx2vhn058yfvxhw6us8dsqd6" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>:awesome:🐦‍🔥nemo™🐦‍⬛ 🇺🇦🍉</span> (<span class="italic">npub1l92…sqd6</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1nqnfeudz9vq2tdv7js8swge57mrw09ha6avm0dzne0s0y28qhrrq4xnfm7" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Debacle</span> (<span class="italic">npub1nqn…nfm7</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1tccury3pwf0fcrn7cva564hk886gl5sc8tt9kky00wh8mzuevmnqxt4342" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Element</span> (<span class="italic">npub1tcc…4342</span>)</a></span> <br/><br/>App-Bundles delegate apk signing to Google. <br/>And they are now required.<br/>Did something happen that fixed that? 2025-12-14T16:25:24Z https://njump.me/nevent1qqswtnnra9s6q5fzx342jw5sjkt0gpz4wr5j9khpydtk0akszds8y0qzyz5mwvsrs7p6jr0uptjpylqvps2zrs860s0s90u5h0x05kwmmw5y65sk4c0 In reply to <a href='/nevent1qqsfpnawczlev2ptq69s83vfxdmj5aqgvzael4mdtydmptnhydhv5sghzg4jh'>nevent1q…g4jh</a><br/>_________________________<br/><br/>I don&#39;t quite believe that.<br/>I thought Meredith was.<br/>Sounds more lime search summary is lying. 2025-10-28T19:34:36Z https://njump.me/nevent1qqsfpnawczlev2ptq69s83vfxdmj5aqgvzael4mdtydmptnhydhv5sgzyz5mwvsrs7p6jr0uptjpylqvps2zrs860s0s90u5h0x05kwmmw5y6qx680u In reply to <a href='/nevent1qqs2xqkrl8tty28a9mrt4dmdrefe2r5fm09ckgjuyc35gtxqk8n96gs4tza7w'>nevent1q…za7w</a><br/>_________________________<br/><br/>Wuat<br/><br/>Bryan Acton, the asshole that sold WhatsApp to Facebook is CEO of Signal Foundation? 2025-10-28T19:33:31Z https://njump.me/nevent1qqsvjz3kwge7xshysm500tqdq8znkz2neutz4wz2r28765s6ed3mkcczyz5mwvsrs7p6jr0uptjpylqvps2zrs860s0s90u5h0x05kwmmw5y6wcajn4 In reply to <a href='/nevent1qqsv0j5ccqg5lvuktw5t0904kpcxtfpvnjtwntaf3dtd6sjeh6qwrxsc6wj9a'>nevent1q…wj9a</a><br/>_________________________<br/><br/>Whats the illegal ant the unethical ones for example? 2024-10-29T19:41:38Z