Netflix, no. Disney+, no. HBO, no. Replaced binge show watching with trips to the local library. Huge collection of DVD, Blu-ray movies. Found a few books to read. I had enough.
Remote
Denzil Ferreira
@denzilferreira@techhub.social
mastodon 4.7.2Director, Security & Engineering at HMD Secure
I'm a scientist, developer, tinkerer. Toots on life reflections, news reactions, and experimental notes (successes and lessons learned).
My opinions, not my employer, jada jada.
🇵🇹 living in 🇫🇮
#Linux #Fedora #sovereignty #europe
399 Followers
592 Following
50 Posts
Joined November 14, 2022
Website:
I've been coming here, just to enjoy some quiet, sauna, do some fishing and absorb nature. Maybe some siideri tai ollut 😉
Replying to
@EUCommission@ec.social-network.europa.eu is there any plan in motion to stop this monopoly from Google on Android? reCAPTCHA now also requires a Google Certified device status. Soon won't be able to use apps without being locked to Google.
Interesting development. Banking apps, to be allowed on Play Store, they must use Play Integrity. As the majority of Android phone users are Play Certified devices, even if old, this means that engineering of said banking apps are pushed to use Play Store and leave everyone else excluded.
This is where we stand. EU regulatory bodies have to wake up to this. A duopoly is here. Soon, there is no other option.
Well, this is getting traction and an email to #MobilePay team on their app solved the issue and they no longer use bootloader status for gating using their app 🥳🤝💫
I can tap to pay using Mobile Pay in Finland on a deGoogled device running non-rooted LineageOS 23.2. Take that #GoogleWallet.
https://techhub.social/@denzilferreira/116801114249934177
#mobile #integrity #Europe #LetsDeGoogle
Slowly but surely, #Microslop dominance in corporate is evaporating. Year of Linux has been almost a meme for years, to completely see YouTubers and governments drop Microslop license slugs. Now fund the #opensource projects. A percentage of the money you would pay to Microslop will be more than what most projects receive. Become sponsors. Get involved in fixing and improving the projects you use.
https://www.zdnet.com/article/china-drops-windows-for-linux/
It's almost a year since I joined HMD, and later to HMD Secure. During this time, because we are working with #deGoogled devices, I came to see very sketchy moves by Google in limiting significantly what you experience with a deGoogled device. #Murena e/OS is a great example of what you can achieve when you say no and go against the stream together. It's great to know we are not alone, on a raft and we paddle against the waves of shenanigans Google pushes towards us. It is defiance, it is persistence, it is giving people an option where privacy matters the most.
Replying to
@nomad99@techhub.social @artelse@mastodon.social @volla@mastodon.social @jolla@techhub.social in Finland, we do have an API that apps can use to validate one's identity via bank credentials. But if banks move to force Play Integrity, we can't approve the bank login to validate one's identity. Which makes it impossible to login on public services, tax office, health care, etc. We are slowly becoming dependent on a Google Certified device to identify who we are. And that is the problem.
#Volla, #Jolla, #Murena #HMD Secure devices would be penalized because we take EU Digital Sovereignty seriously and offer deGoogled devices. @gael@mastodon.social @murena@mastodon.social e/OS is also on the same boat if Play Integrity is the only way that developers use to check device integrity.
Replying to
I've ended up with #Bazzite #Gnome, modern #AMD and it works great. 2GB VRAM allocated on #iGPU with latest BIOS update (set to auto). Until I bring in more DDR4 and a dGPU SFF, this will do. O is extremely happy, game controller from #Stadia has a new life, a second hand monitor for 20€ and wired network. It boots into #SteamOS, desktop mode Gnome is available for homework. #Windows is so last decade. Current gen will game on #Linux. Work on Linux. And #Microsoft will try to enforce Windows for corporate, sweeten the #Azure licenses to have IT migrate to self-hosted Linux servers.
Replying to
@EUCommission@ec.social-network.europa.eu it would help to get an official stance on this matter.
Meanwhile, I'll meet with MobilePay and hopefully Volla & Jolla to have a deGoogled NFC payment option in European made devices without Google Services.
"Thank you for your messages and input. I have forwarded the issue to the appropriate team with you contact details. They will be in contact with you."
Replying to
@EUCommission@ec.social-network.europa.eu MobilePay responded that due to security reasons, they use Play Integrity. This cannot be the only option. This kills any dream of a Google free device that you can use for any banking activities. Do we really want Google to control every single transaction occuring in Europe?
Replying to
@paoloredaelli@mastodon.uno we don't know what we don't know 😉 I trust we can elect EU representatives which share the same concerns. It is our responsibility to make sure of that if we want change. There are so many items that require attention, some more pressing than others. And we have the option of not using a smartphone at all 🙈 Banks are making their apps only work on such devices with Play Integrity, and closing bank offices. Soon, you can't check your balance, transfer, etc unless you have a smartphone that is certified (iPhone or Google Certified device).
Meanwhile, we can have an open dialog like we are having here, so that people around the world also think about what this actually means for them: no alternatives, no options, a monopoly.
Replying to
@paoloredaelli@mastodon.uno I'm not sure I follow the reasoning behind EU wanting Play Integrity being a mandatory requirement for non Apple devices. Same way EU forced Apple to open their walled garden.
The only nuance thing here is, a Google Certified device means that they are running Google's proprietary blobs. So really, the course of action is, install alternative OS/use alternative OS and instead tell the devs of apps with Play Integrity checks that there are alternatives to check a device is not compromised - because that is what it should be about. Force Google to provide a different verification path that allows alternative ROMs/OS to be seen as safe.
Replying to
@nomad99@techhub.social @artelse@mastodon.social @volla@mastodon.social @jolla@techhub.social open letter has been published by Volla a while back and they have been pushing awareness, for example https://volla.online/de/resources/Documents/VCD26-UnifiedAttestation.pdf
This needs to be an EU regulatory requirement, to force app developers to consider devices without Google Services. The requirement needs to come to developers, not from developers.
I am aware that GrapheneOS also does not like the idea of unified attestation and prefers to use what is already on Android APIs. And that is also another option that can coexist. Right now, it is Play Integrity or nothing. That is what needs to change.
Replying to
@nima@mstdn.social yes, but adoption is key. Unless it is mandated. For example, this could be a fallback to Play Integrity on non Google Certified devices. But current status is that not certified, no fallback.
Replying to
@nielsTFranck@mastodon.nu did some research, ended up with a Radeon Pro WX3100, which is Polaris 12 and higher clock and performance than WX4100, with 4GB VRAM and low profile so it fits nicely. Got it for 25€ second hand 👌 also managed to find a soul selling 3x 8GB DDR4 for 40€ so the machine is rocking 32GB of RAM. Should be plenty to game 🎮
Solo Piano #photography
Replying to
@kallekn@mastodonsweden.se if your device was sold with e/OS, your device is fused to e/OS platform key, which means your bootloader is safely locked and with e/OS :) but for us with devices initially sold with another OS version and manufacturer, which don't update the OS or do security patches, it creates e-waste unless we unlock the bootloader to install an up to date OS, for example e/OS on a Samsung or other brand. #eOS is great!
Replying to
@antti@2046.mywire.org this is great stuff!
Google responds to Chrome’s silent Gemini Nano install, stops short of addressing consent
What people need to understand is that there was always some sort of data processing on the browser. That's how profiles, your ad profile, is created and how Google makes profit every day. Its selling you, as profiled, for targeted ads. Google wants to do this profiling on your hardware and your electricity bill, not theirs. Is it private? Never was.
Part of me is happy people are realising what "free" actually means. This is not just Google btw. Sure, maybe Google could have asked people: hey, do you want to have your profile data processing done on your machine or ours? Yes, do it locally. No, you can take it on your data centers. It was never a hey don't collect data about me at all.
This is the tip of the iceberg. Add side data, for example camera footage, face recognition, debit/credit card usage, store bought items, etc and you realise you never had a choice. And now you carry a device on your wrist or pocket, listening, recording, processing. Sleep tight.
Replying to
@paoloredaelli@mastodon.uno @karhima@graz.social for example, my bank uses a an app that receives OTP codes, biometric authentication. However, without Play Services, you can't use it at all. Meaning I need to use a device with them if I want to use my bank, including website. For now, they are not blocking non Google Certified devices, but if they do, it's impossible to do any bank activities.
The end of cheap smartphones... Better use a device you can easily repair.
Replying to
@sakura84@lgbtqia.space it's worth raising awareness that there are alternatives to Google Play Integrity, for example Promon Shield from Norway https://promon.io/products/shield-mobile and many others. It definitely does not need to be a device that installs apps from the Play Store, and is GMS certified. F-Droid, Aurora Store work well on a deGoogled device but if the apps themselves don't work unless they detect that Play Store is installed, it means only Android with Google services can be used. No alternatives.
BudsLink Brings Advanced Earbud Controls to Linux Desktops | Linux Journal
Oh this is very nice 💯
https://www.linuxjournal.com/content/budslink-brings-advanced-earbud-controls-linux-desktops
The EU becomes the latest authority to signal that VPNs are next, after launching its age verification app. Here's how VPNs went from a necessity security tool to circumvention software that needs to be restricted.
Right... what is the goal? How about addressing the elephant in the room? The parents! If parents cared, the kids would not have smartphones. Parental controls exist. Is this even about kids?
Commission blocks EU funding for Huawei solar tech... Ok, is EU manufacturing their own?
https://www.politico.eu/article/commission-blocks-eu-funding-for-huawei-solar-tech/
And I'm back on LineageOS, this time 23.2. Amazing work on Android 16! #AgainstTheCurrent
EU recommends member states to not use Huwaei, ZTE in connectivity infrastructure - looks like EU got up and chose violence...
Replying to
@preslavrachev@mastodon.social what if its local LLM? 😉
Replying to
@kallekn@mastodonsweden.se then its unlocked...
Replying to
The $31 GPU vs 1080p | Return of the Radeon Pro WX 3100
Adata sees DRAM, NAND prices rise 40% in 2Q26.
Yep... And 2027 output is already reserved. Hold on to what you got. Buying new will be very difficult.
#ramcopalipse #short #supplychain
https://www.digitimes.com/news/a20260507PD240/adata-dram-nand-flash-revenue.html
Replying to
@kallekn@mastodonsweden.se Pixels allow a custom key to be used. Depending on what instructions you followed, you may have relocked it as eOS supports relock of bootloader on Pixel.
Replying to
@jago@mementomori.social yeah good call 😅 but the latency to network would be amazing 😆
There is more to it than meets the eye. A brand model also needs the spare parts suppliers to still have a production line active so that spare parts can be manufactured. So effectively, this means have plenty surplus of items. Which may never be sold, replaced.
And if it's a battery, they need to be recharged after some time if the device is on a shelf in a warehouse. While the intent is good, this will make things more expensive. Because that is the only way to comply with this regulation.
There is an acute supply of people who can fix electronics. When the price to repair is more than to get a new one, people will pick the cheapest option. And so will manufacturers. This regulation makes the cheapest option expensive, so that repairs seem cheaper, but they will be more expensive than what they could be.
Replying to
@nomad99@techhub.social @artelse@mastodon.social @volla@mastodon.social @jolla@techhub.social eIDAS is the protocol used in Finland, and it's linked to your social security identifier or phone number (Mobile Certificate) https://dvv.fi/en/identification Banks here use it to verify you are who you say you are. But we never get to this stage as the app will not run if the device integrity check is using Play Integrity.
For example, Danske Bank main banking app works, but the Mobile ID app is not installable unless you have a Play Certified device (you won't find it on the Play Store) and you need to get it from alternate stores. Once you have the apk, you can sideload it, and identify and verify your identity with eIDAS. But if Mobile ID enforces Play Integrity as well, means I can't login at all on the main banking app. Or on the web banking for that matter. Basically I'm unable to use any banking services. For now, this is not enforced. But I want to make sure it never is, or that there is room for deGoogled, non Google Certified devices to exist.
Replying to
@nomad99@techhub.social @artelse@mastodon.social @volla@mastodon.social @jolla@techhub.social thank you for the link. These are two separate discussions. One is about the ability to use devices without Google. Digital Wallet, and Digital IDs piggyback on the trust of the devices they are running on. If we can't verify the device is secure and untampered with, you cannot protect someone's funds (digital wallet) or their identity (digital ID).
This is why it is of upmost importance that Play Integrity alternatives exist. Because otherwise, you will not have any choice other than use Google Certified devices.
Replying to
@nomad99@techhub.social @artelse@mastodon.social @volla@mastodon.social @jolla@techhub.social must join in pushing for a non-Google device attestation. And this also means making sure devs of services use the alternative for devices without Google Services.
Going today with the family scout a piece of land in the middle of woods to get away from noise.
Replying to
@nielsTFranck@mastodon.nu as this is on a 1080P monitor, no scaling on the desktop. We manage game resolution directly on Steam Overlay or game settings :) with AMD FSR, this 3200G is pretty capable of pulling its own weight 🏋️ I can upgrade the CPU (its socket AM4), but I rather get a GPU (e.g. 580) with 8GB VRAM!
Right... OpenAI will soon share your conversations and profiled data with ads. Cool beans 🫘
After testing Qwen3.8 27B locally, I can assure you, you do not need ChatGPT.
CopyFail should show that you need humans to check and verify if your servers are vulnerable. An LLM won't check, verify and guarantee your uptime or your infrastructure reliability.