this post was submitted on 05 Sep 2023

262 points (98.2% liked)

Programming

17503 readers

11 users here now

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Follow the programming.dev instance rules
Keep content related to programming in some way
If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities [email protected]

founded 1 year ago

MODERATORS

[email protected]

262

Android 14 blocks all modification of system certificates, even as root (httptoolkit.com)

submitted 1 year ago by [email protected] to c/[email protected]

57 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 77 points 1 year ago (3 children)

Google: wants to push their browser based DRM, to which they would inevitably be the ultimate controller of, in the name of "safety".

Also Google: intentionally kneecaps the existing certificate system which is the main safety system of the web.

Gee, I wonder if the two are connected.

[–] [email protected] 33 points 1 year ago (2 children)

I heard this on the radio yesterday. Secretly ruthless is a good way to describe Google.

SHAPIRO: OK. So big picture on this anniversary, 25 years in, if you could describe Google's legacy in a sentence, what would that be?

PATEL: Secretly ruthless.

SHAPIRO: Oh, that's rough. Wow. Secretly ruthless - that's even less than a sentence. Give me a little bit more. Why do you say secretly ruthless?

PATEL: Google has convinced everyone that it is this incredibly sincere and earnest company - that it's just a bunch of goofballs making cool things. That is true. But I think if we just paid a little more attention to where Google's money comes from - and it is almost entirely advertising - I think we would be able to see the company and its influence a little bit more clearly. But the truth is, it is an utterly ruthless advertising company that is very, very, very successful at delivering results to its clients.

SHAPIRO: But Nilay, you didn't mention how cute the Google doodles are.

PATEL: Yeah, the - I understand. They're very cute.

https://www.npr.org/2023/09/04/1197548359/the-verges-nilay-patel-talks-googles-legacy-and-its-future-on-its-25th-anniversa

[–] [email protected] 7 points 1 year ago

I freaking love the new updates!!

I love it when I can't manage my own SSL certificates, even as root

I love not being to use the fucking McDonalds app on a rooted device

Web environment integrity is so great! It's incredible that my rooted tablet will be locked out of lots of websites since I'm not using AUTHORIZED chrome on an AUTHORIZED device

It's so awesome that adblock will stop working in most Chromium-based browsers

LIKE WTF I JUST GOT A PIXEL NOW YOU NEED TO RUIN IT?

[–] [email protected] 7 points 1 year ago (1 children)

This is very true, although from what I’ve seen both sides are correct. They give very little guidance to any of the stuff they put out, see killing off stadia or how badly they have been messing up chromeOS and just let their engineers do what they want until they lose their way then it falls off. They just don’t care about that because the ad money keeps coming regardless. It seems almost like a result of the fact that google just hires talent so no one else can have it and then they just let them do whatever they want. It’s almost like there are two googles.

[–] [email protected] 2 points 1 year ago

Intellectual Property.

That is it.

You can’t protect a product or service will never reach customers. But you sure can protect a sold and failed product or service.

[–] [email protected] 10 points 1 year ago (2 children)

Honestly the entire certificate system is a fraud. You can see just how vulnerable it is with the recent Microsoft vulnerability

[–] [email protected] 4 points 1 year ago (1 children)

I'm ootl on this one - what happened?

[–] [email protected] 10 points 1 year ago (1 children)

Microsoft has been signing stuff that is being used maliciously.

Plus they have has their keys stolen to create malicious stuff...

[–] [email protected] 2 points 1 year ago

I was referring to the latter

[–] [email protected] 1 points 1 year ago

Never said it wasn't flawed.

But Google itself is flawed. Their search results have been a joke for years now, top results are almost always malware now, no matter what you search for.

[–] [email protected] 9 points 1 year ago

And there we go. I was trying to figure out the "why?" beyond "think of the children it's secure!" and that's the part that makes it make sense.