We told them to go fuck themselves. We retain lawyer specifically in case we have legal concerns, and the way we use their products, price jack up would be so extreme that it’s entirely worth risking it while we migrate away.

Too late ~

User Fault FD “UFFD” support for enhancing the write-watches performance.

I’m too stupid to know what any of this means, but it bothers me so much that the title doesn’t say what it is.

I hunger to see Tesla turn into a penny stock.

Things are getting so bad I fear for being labeled a troublemaker and sent to the gulag over declining.

Great work, Canada! Stand strong and tall.

As long as the user owns the TPM and has full control over it, I don’t see a problem. I paid for that hardware. I want to use it. There are already tools that can talk to it. It’s just not fully implemented and integrated into the system in a secure fashion. Indirectly, you kind of point out why there hasn’t been as much motivation to provide these features because they’re associated with the user giving up control, but it doesn’t have to be this way. The hardware can work for me if the support were there.

With the right support, it can even be combined with the password. This lets me enforce that the drive only unlocks in this machine, with this password, and only with the software that I set. That’s certainly more secure than how most distros do FDE today. It covers more use cases and enables a much stronger threat model.

One major obstacle is third party drivers, specifically Nvidia, that forces building and signing your own kernel modules. It can be done, but it’s certainly more complexity than distributing signed binary drivers from the distro. I think Ubuntu has preliminary support for TPM-backed FDE, but only if you aren’t using such drivers. It doesn’t work in combination.

I don’t want to sign my own modules. I want them to shipped signed, so the key isn’t expected to be on my machine. If I were doing kernel development work, I’d have disabled secure boot entirely anyway.

I would really like to see broad support for TPM-backed FDE, which also requires secure boot to work to implement this properly.

For me, this is essential to have for feature parity with Windows on laptop.

Why is it when I read one of these news articles China always appears to negotiate from a position of strength while Trump sounds like a bumbling idiot?

I don’t even get to see any of that money. Yet, I have to live on a dying planet with the rest of you.

They’ll send you to the Gulag here even if you didn’t commit a crime.

Not doing this would require not being an idiot, which is simply too much to ask of the USA lately.

If the Nazis don’t like you, you’re doing something right.

🩴

With better infrastructure and fast charging that shouldn’t be a big deal. I mean, we don’t have that infrastructure today, but ideally the gargantuan battery mode isn’t where we stay in the extreme long-term.

It could make a great town car.

Failing? But they’re not trying. They’ve been soft on disinformation for years and are known for meddling in elections.

90 days and 10 dollars.

No honor among thieves.

Robber barons at “work.”