@pojntfx.mastodon.social.ap.brid.gy
Building digital infrastructure that lasts with #linux #virtualization #containers #kubernetes #gnome
Software engineer @livekit.com, on the board @vanlug and member [ā¦]
š bridged from ā https://mastodon.social/@pojntfx, follow @ap.brid.gy to interact
@pojntfx.mastodon.social.ap.brid.gyAnd no, no matter of HSM support in Free OSes etc. will fix this until the regulation changes to no longer prevent modified OSes, because the wallet does not reject your phone for lacking a secure element, it rejects it because you can modify it
@pojntfx.mastodon.social.ap.brid.gyWith PCI CPoC (payee's side) it's even worse than that, probably worth it's own article
@pojntfx.mastodon.social.ap.brid.gyThis chain is the reason why even with the new "sovereign" payment options - e.g. currently proposed version of the eā¬ - you won't be able to pay contactless for a sandwich with your phone unless it's running an unmodified OS image signed by a US-American company (Google/Apple) in practice.
@pojntfx.mastodon.social.ap.brid.gy5) No certified keystore means no wallet unit attestation, because its keys must sit in a tamper-resistant device: 2024/2979 Art. 3(2), Art. 6(2), Art. 2(12). 6) No attestation means no identity data issuance, because issuers must verify a genuine wallet unit: 2024/2979 recital 7. 7) Full wallet [ā¦]
@pojntfx.mastodon.social.ap.brid.gyHere is my best attempt right now with the new EUID: 1) Payment in the wallet means strong customer authentication at assurance level high: 2024/2979 Art. 4(3). 2) Level high means resisting attackers with high attack potential: 2015/1502 Annex s. 2.1.4. 3) The keystore and its software must [ā¦]
@pojntfx.mastodon.social.ap.brid.gyI've got to do a writeup on _how_ the whole web of eIDAS, PSD2 and CPoC regulation, not Google's Play Integrity per se, makes it illegal for a bank or the future wallet provider to let you use an OS you can modify in any meaningful way. Every time I bring this up I have to dig through EU [ā¦]
@pojntfx.mastodon.social.ap.brid.gy@atomicpoet https://www.crowdsupply.com/certain-things/sprout-pi-mainboard š
@pojntfx.mastodon.social.ap.brid.gy@deobald Haha thanks! I share a tiny appartment with my roommate so I had to get a bit creative with the desk space (it all folds up towards the desk when I'm gone so she has more space).
And yes! Thunderbolt 5 dock. I looked at a few but settled for this one because best Linux support and all [ā¦]
@pojntfx.mastodon.social.ap.brid.gy@razze (On mobile I mean)
@pojntfx.mastodon.social.ap.brid.gy@razze > t3code
Oh this looks interesting! Remoting with DSH I do via iroh with https://github.com/zexadev/dsh-tether
@pojntfx.mastodon.social.ap.brid.gy@razze Probs yeah! Idk my other open harness experiences were OpenCode (I really dislike TUIs because they are so slow on my high-RTT server setups) and Kimi Code (which was very mid)
@pojntfx.mastodon.social.ap.brid.gy@neilk Real. It's such a bummer. I'm used to it - it (or OpenOffice I don't remember) has been my main editor since like 2011 - and still, every time I use Impress especially I just hate it
EuroOffice "feels" so much better
@pojntfx.mastodon.social.ap.brid.gy@manlycoffee One of the ways to do this kind of stuff could be to just include sales tax in purchase prices like elsewhere, it depoliticizes the whole debate
@pojntfx.mastodon.social.ap.brid.gy@manlycoffee I don't think there would need to be a surcharge at all is my point. Redirecting sales tax revenue intransparently seems a ton easier!
@deobald.fantastic.earth.ap.brid.gyReposted by @pojntfx.mastodon.social.ap.brid.gypasskeys: do not use them.
@pojntfx.mastodon.social.ap.brid.gy@neilk Ha, yeah I did my own version of this post a while ago too: https://lnkd.in/p/ehg3jGvW
But idk. Lots of this is just reinventing waterfall for no reason, and inventing unnecessary process to "feel like you're still a solid engineer" ... - the sames rules and attitudes to prevent people [ā¦]
@pojntfx.mastodon.social.ap.brid.gy@neilk True, yes! I mean that's why I'm on here as well, although I no longer peak at Twitter because I'm ngl it enrages me every time I do lol. I just started muting people after the post above and honestly? Instant timeline cleanse.
@pojntfx.mastodon.social.ap.brid.gy@matt Thank you for sharing! That's very good to know.
@pojntfx.mastodon.social.ap.brid.gy@eljojo Happy thanksgiving to you too!
@pojntfx.mastodon.social.ap.brid.gy@CyReVolt Hehe, that could be so much fun! I must give this a shot!
