TheTaglineToldMeTo [she/her, comrade/them]

the firmware should be open source and be able to be flashed onto the TPMs

I agree, but I’m pretty sure that’s the whole point? It’s just all about the Root of Trust and Attestation (Third-Party/Remote specifically, you can do attestation with your own keys). At least that’s how I understand it.

If you could use your own firmware and fuse/rewrite your own key material you would still have all of the security benefit. but without* “trust” to the vendor(You still have to trust that you did not get sent a tiny CIA agent embodied in silicon still), while you can still kinda do that with modern TPMs but that is not how it’s currently designed and with firmware still being completely locked down. if you would consider being able to overwrite the root keys physically unauthenticated a security flaw (hitlerparticle)(Bricked when stolen (Not always on android, different thing), keys still secure!) there can still exist a user authentication or in this hypothetical even fuse the keys yourself (There are some open source secure elements like this I’m pretty sure, so not so hypothetical… but not ideal still).

BUT. You would lose the main point of TPM to verify from someone else that the chain of trust to the vendor is intact (DRM) and not tampered with (By You!!) and is the main issue of TPMs and where everything just completely sucks.

Secure elements can be completely free and open, but not the Trusted Computing Group, Trusted Computing and TPM.

But you can make the most of a bad situation like with GrapheneOS and the Pixel SE, you can’t write your own firmware to it but there is insider attack prevention (Prevents: vendor firmware update while unauthenticated, with keys remaining the same) but you still don’t own the device so they could still hypothetically one day refuse anything booting not google signed for later updates. and it also wont pass “google certified” SafetyNet attestation, the “just completely sucks”. but it’s the best there is, and a majority of the others are cranks, hacks and/or annoying EU perverts… lol…

I also basically agree with all the features plus NO HOLE-PUNCH FRONT CAMERA >:( and also a display that’s not store isle TV “enhanced” color quality.

How much of this will be actually useful vs a random smorgasbord of random zero context messages with some giant, “Join the conversation” (Signup) button? My faith in Discord to introduce something useful is negative, but if they do that’s great. At least recently any discord community that I wanted to see something in has had a matrix bridge setup. This is something I guess idk.

and will massively reduce the amount of power needed for running the Internet.

Immediately offset by AI crawlers

I also think this is neat: JXL Art

What’s all this then, “Broadcast Yourself”? broadcasting you tube? I’ve seen enough. This whole site, sickos, the lot of you

In a just-world I would never be allowed to open GIMP

“From disrupting network connectivity to enabling local networking espionage and intellectual property theft, foreign-produced routers present additional and unacceptable risks to Americans.”

Climate change mitigation via geoengineering is very feasible, and in my mind, inevitable. […] within 20 years or so.

Finger on the Monkey’s Paw curls

Nuclear winter

My math is a bit shit(understatement), but as I understand it the confusion comes from Celsius being a relative scale.

As 3% hotter than 21 °C^(Example) in Celsius(relative) would be 21.63 °C. But with an absolute scale (21 °C = 294.15 K) it would be 29.8245 °C instead, As the 0 point is not that meaningful other than its just ice (3% more than 0 °C, = 0 °C? there is still energy here). just as something 30% longer in distance is the same in kilometers and miles, the same can be done for other absolute scales of temperature. 3% hotter in 529.47 °R^(Rankine)[1] (21 °C) is 545.3541 °R or 29.8245 °C, the same 8.8245 °C increase. As you would have to convert into an absolute scale before doing any percent change expecting absolutes.

Of course that’s still quite the technological leap

Yeah I highly doubt this specifically will be any meaningful change or particularly the coming avenue for change, but I don’t necessarily think that’s fully it, because it has always been just as technologically feasible DRM currently is (“Secure”/“Trusted^{(treacherous)}” Computing, TrustZone, TEE(s), Secure Element(s), ME, TPM, SGX, TDX et al…) all designed trusting the manufacturer first then the user second if even at all, all widely used(or capable) almost without exception today. I just don’t think the appetite or need has gotten truly there yet. but with with how suffocatingly American core internet infrastructure and historicaly entrenched design elements are, when truly threatened i can see the dropping of the “open” internet facade becoming much much much worse that won’t be as solvable as just some configs or applying some patches. ignoring the liberal dogs with unimaginable cognitive dissonance and white hubris that somehow imagine building around the exact same panopticon but painted blue with stars, and “European”^{(whatever this is)} will somehow be spectacularly different. i can’t tell if my thinking is just borderline conspiratorial, but there is wayyy to much undeserved trust in this stuff that just because it hasn’t been weaponized more overtly yet doesn’t mean in more desperate scenarios/stronger positions it wont or cant be.

• (I agree with you I’m just talking into the aether getting carried away typing saying the same thing but worse and convoluted. I need some sleep :( )

• (removed my doomer disjointed rambling about actually important and real security being wrapped into “trusted” computing. truly free computing died soon after it was born; it is possible, but only in a better world. the last time I smiled was on August 19th, 1991. etc…)-

Having most of the internet infrastructure rely on like 3 load-bearing corporations was an excellent move, bravo