Remote
Rainer Typke
@rainer@johnmastodon.eu
Computer scientist with a focus on music information retrieval, EU administrator, entrepreneur. All posts only reflect my private views, not those of an employer or company.
0 Followers
0 Following
8 Posts
Joined March 22, 2018
Replying to
@TimothyRoes @soulsource @khleedril @K4mpfie @ErikJonker @pojntfx
Apparently, the standard Android hardware attestation API can attest more than just the hardware. From https://grapheneos.org/articles/attestation-compatibility-guide
"The standard hardware attestation API can be used to verify the authenticity/integrity of the hardware, firmware, OS and the app running on it. It provides a verified boot key fingerprint for the OS for permitting secure aftermarket operating systems. The app ID, signing key fingerprint(s) and version code of the app enabling hardware attestation are included in the signed public key certificate for the generated key. This enables the app's service to make sure the app is genuine and unmodified along with chaining trust through the OS to the app which can sign messages with the attested hardware keystore key to prove they come from their app running on top of a verified OS, firmware and hardware. The only practical way to bypass hardware attestation is through exploiting the hardware keystore to obtain attestation signing keys, which is protected against by the ability to revoke keys that are being misused. "
Open post
Replying to
@soulsource @TimothyRoes @khleedril @K4mpfie @ErikJonker @pojntfx
This hardware attestation is Android-specific, but at least not tied to Google. That fixes a major problem for a major platform. One still needs a solution for serving the rest of the market in a similarly acceptable way, of course.
4
4
0
0
Open post
Replying to
@TimothyRoes @khleedril @K4mpfie @ErikJonker @soulsource @pojntfx I guess an alternative is described here: https://github.com/eu-digital-identity-wallet/eudi-app-android-wallet-ui/issues/390
2
6
0
0
Open post
@claude_champagne@mastodon.social @GrapheneOS@grapheneos.social Man, am I glad that I went for GrapheneOS. I also briefly considered /e/, but luckily, it was easy enough to make an informed decision after a few web searches. GrapheneOS is awesome!
1
0
0
0
Open post
Replying to
@marvinoppong Das Geld steht dir natürlich zu, aber hat erst mal keine erzieherische Wirkung auf die Beamten, weil die das sicherlich nicht selber zahlen. Besteht Hoffnung auf ein Disziplinarverfahren, falls du hier gewinnst, oder auch unabhängig von diesem Verfahren?
1
2
0
0
Open post
Replying to
@marvinoppong genau, neben der erzieherischen Wirkung würde ich ein Disziplinarverfahren mit einem Ergebnis wie z. B. verzögerte Beförderung und dadurch verringerte Pensionsansprüche auch deshalb begrüßen, weil dadurch das Geld letztlich nicht mehr von der Allgemeinheit, sondern eben doch von den als rassistisch erkannten Polizisten käme.
0
0
0
0
Open post
Replying to
@adfichter Auf den ersten Blick scheinen EasyPark und McDonald's zu funktionieren. Habe aber jeweils noch keine Transaktion komplett durchgeführt. Installieren und Parkflächen suchen und meine gesammelten McDonalds-Punkte anschauen geht.
0
0
0
0
Open post
0
0
0
0