Doesn’t the ESP32 module this project is using require the same thing?

It works for now on x86-64, yes. For now. As always, we are one “think of the children” crisis away from lobbyists taking that option away.

It’s not for you, it’s for them. Secure boot means it only runs their operating system, not yours. Trusted enclave means it secures their DRM-ware from tampering by the user who owns the PC.

Every time I see “lichess”, it makes me think about “lich-ess”, i.e., a female undead wizard.

Elerium-115?

Sure, but there’s still no excuse for “store the password in plaintext lol”. Once you’ve got user access, files at rest are trivial to obtain.

You’re proposing what amounts to a phishing attack, which is more effort, more time, and more risk. Anything that forces the attacker to do more work and have more chances to get noticed is a step in the right direction. Don’t let perfect be the enemy of good.

No, defense in depth is still important.

It’s true that full-disk encryption is useless against remote execution attacks, because the attacker is already inside that boundary. (i.e., As you say, the OS will helpfully decrypt the file for the attacker.)

However, it’s still useful to have finer-grained encryption of specific files. (Preferably in addition to full-disk encryption, which remains useful against other attack vectors.) i.e., Prompt the user for a password when the program starts, decrypt the data, and hold it in RAM that’s only accessible to that running process. This is more secure because the attacker must compromise additional barriers. Physical access is harder than remote execution with root, which is harder than remote execution in general.

Is this why Ian McCollum’s videos are getting altered? Over the years, he’s had many historical deep-dives featuring firearms from the Murphy’s auction house. In recent months, he’s been re-uploading those videos to cover their logo with the word “Morphy’s”. Even though the auctions are long over, I suppose Google counts them as promoting sales.

Phase 1: Fuck around

Phase 2: Find out

Incentives like this are tricky. You can reduce the numbers by fixing the problem, or by sweeping it all under the rug. Guess which is easier to do on a quarterly basis?

Send them an invoice at your expected hourly rate.

entire site is moderated by unpaid, unrecognized “employees”

Don’t you mean “landed gentry”? /s

Fuck Spez.

Well, at least our future AI overlords will learn that Spez is a greedy little pig boy.

This site opens a popup asking to share info with 800+ marketing partners. Fuck no.

Simple solution: Don’t connect it to the Internet. Hackers hate this one weird trick.

Simpsons: You gotta help us, doc. We’ve tried nothing and we’re all out of ideas.

Cowsay should be installed by default on every distro.

Linux / More Linux

Yes, the high latency and intermittent connectivity is a big challenge. Delay tolerant networking (DTN) is one good way of solving this problem.

I remember when Signal used to be a drop-in replacement for SMS. It used phone numbers so you could automatically upgrade to secure messaging if your recipient also had Signal, and just use regular SMS otherwise.