• 8 Posts
  • 1.29K Comments
Joined 3 years ago
cake
Cake day: June 11th, 2023

help-circle








  • Signal uses reproducible builds for its Android client, and I think for desktop as well. That means it’s possible to verify that a particular Signal package is built from the open source Signal codebase. I don’t have to trust Signal because I can check or build it myself.

    If I don’t have extreme security needs, I don’t even have to check. Signal has a high enough profile that I can be confident other people have checked, likely many other people who are more skilled at auditing cryptographic code than I am.

    Trusting the server isn’t necessary because the encryption is applied by the sender’s client and removed by the recipient’s client.





  • I had four overnight delays in three round trip transatlantic flights in 2025. The airline was at fault for three of them.

    When the airline is at fault for a delay of four hours or more on a long flight that starts or ends in the EU, they owe the passenger 600 Euros, a hotel room, and meals, so those were long delays but not exactly terrible experiences.

    Getting stuck for 20 hours in the Newark airport due to weather wasn’t as pleasant. The airline did not owe me anything because weather is not their fault. There were hundreds of other delayed travelers sleeping on cots in the halls of the airport. They did not have a cot for me.




  • Let’s clarify some terminology.

    Android is an operating system, not hardware. Android uses the Linux kernel, but differs greatly from desktop-oriented Linux distributions. Most phones are designed for Android, a bit like most PCs are designed with Windows in mind.

    Desktop-oriented Linux distributions have a semi-standardized software stack with Linux, GNU libraries and utilities, a shell, X11 or Wayland, some sort of window manager or desktop environment, etc…

    Other comments have explained how the hardware makes it difficult to have generic operating systems that install easily on any phone like we do for PCs, but they do exist. Ubuntu Touch and PostmarketOS are examples of desktop-like Linux distributions for phone hardware. It’s possible to install and use these on certain phones, but there’s usually a feature or two without a working hardware driver. Desktop Linux on laptop computers used to be that way too, but far fewer laptops have missing drivers now than a decade or two ago.

    I have PostmarketOS installed on an older phone. I don’t think the user experience is quite ready for most people to use as their primary phone, even for me, and I’ve been running Linux on laptops for most of my adult life.





  • I wonder what an alternate history where Google chose not to become evil would look like.

    What if they had looked at Microsoft’s Palladium proposal and thought, as pretty much everyone outside institutional IT departments did that locked devices with remote attestation was a nightmare scenario best forgotten, refused to build it, and made an effort to prevent anyone else from doing so on top of Android? Safetynet didn’t appear until 5-6 years after Android launched to the public. What if it never did? Android already had enough momentum by that point I don’t think the financial sector could refuse to be on it no matter what risk management said.