But it’s global version or China version?

China version ROM is like this since the mi 6, the excuse was “limiting grey market sales”

Also the ROM now uses a different signature so from mi 5 onwards, flashing global ROM on china version, doesn’t allow to lock the bootloader again (you can send the command to lock it, but then you get a softbrick)

Illegal but tolerated: just think to all the Chinese companies thriving on Facebook ads sales

They crack down on it only when they need to punish a specific target/person

When you enter China, you have to run their application on your phone to fill the immigration form. Way more convenient compared to the paper slip, right? 😉

It’s this https://apkpure.com/zhong-guo-ling-shi/com.gov.mfa

Luckily, you don’t need to install full malware but only medium malware, there’s a way to run it as a web app inside tencent WeChat by scanning a special qr code.

I run this stuff inside insular because tencent is tencent and even on fully patched Android 15 without any file access permission they still manage to drop fingerprinting files disguised as images in /pictures/.gs_fs0

For connecting to my servers, technically ssh on standard ports isn’t blocked (otherwise it would hurt their bots, no?) but I don’t want to show my server IP address, so I use a hysteria2 proxy hosted on a Oracle VM in the Japan datacenter. There are services like doggygo that rent access to those proxys for literal pennies (like $2 per month) but payment need to do with alibaba’s alipay or tencent wepay which is ultra traceable (linked to Chinese id+Chinese bank account+Chinese phone number) and very stupid. Honeypot?

There are reports of evil maid attacks where a secret service agent poses as room cleaner in your hotel room and tampers with your laptop when you’re away, but for normal people this seems unlikely. Keep your electronics with you at all times, always use a VPN, check hashes of executables if really need to run them (better not) and you’re going to be ok

In this specific case can do it but the bootloader unlock request must come from a Chinese ip address, from a verified Chinese number (get otp code via SMS) and wait like one month

They’re mostly configured to ignore it, at most quarantine it

I set the mail server to bounce everything that doesn’t match dkim.

I almost don’t receive spam anymore.

The problem is that sometimes some legitimate services didn’t configure their email server correctly

This could be an option but a little cumbersome to keep updated perhaps?

Debian on auto update with minimal packages lasts for years

Another option that I’m using is this:

1. I do a encrypted backup with Borg on a separate drive on my server
2. On my work desktop PC, Windows, at boot it connects via ssh and syncs that Borg backups on a new HDD that I purchased and installed, one way sync, silently and without prompts (We are a small business and I am allowed to do that, if you’re not allowed to do that it could be your parents PC)
3. Success syncs are pinged to healthchecks.io which emails me if after too many days (configurable) the sync hasn’t been completed
4. Errors are also sent to healthchecks.io
5. Company group policy settings then keeps my backup server automatically updated

With the guy that’s going to be defense secretary saying “I don’t see germs, so they aren’t real” maybe it could be the opposite.

I don’t also see ionizing radiations, so they definitely aren’t real, maybe let him taste some polonium tea

Also the irony of a Christian fundamentalist saying that because something can’t be seen, then it can’t be real

They still bought 98% of their needs from Russia in 2023? Ok that’s cheaper but they can weaponize it…

Using the Yuzu case for guidance, dumping encryption keys, regardless of the source of those keys, is illegal

This is false, as the case is non existant, because it has been settled out of court. It has to be proven in court that is illegal, as there’s no law that says that dumping the keys from my own hardware that i paid with my own money is illegal.

Facebook not only sends the code to text without asking, but they love to just directly start the reset password procedure.

Now, that’s super weird. Are they assuming that, because last time I logged in was 6 months ago, I must have forgot my password?

At $12/terabyte/month it seems pretty expensive for media collection (I mean: family photos are irreplaceable but generic video?)

Other options are to use “glacier” tier S3 which is cheap to rent but ultra expensive to recover (but hopefully you won’t need that)

Or just put a pi+HDD hidden somewhere at work/parents and copy to that

How to make money with shitcoins 101:

1. Pay some $100k to some dev to create something the slightly differs from the existing ones

2. Pay some millions of dollars to some marketing agency to find a way to get this shitcoin popular. A funny name, a funny icon, or some solution in search of a problem. Something like “this shitcoin can lower the transfer fees of other shitcoins and also if you hold the bag you get 69% APR”

3. When it launches you immediately buy it for pennies, or even directly access some premined quota (like 30% of whole distribution) that the dev left for you

4. When idiots buy it, raising the price, you slowly dump it

5. Clueless people did the staking (lock them for a year) of millions of “cat coin”, worth $1 each at the time thinking that they are going to get 69% APR. They actually get the 69% APR, but the problem is that each “cat coin” after a year is worth $0.000001 each

It’s already the moment of selling high. Buy low is when they’re introduced. Shitcoins are generally going down with value. If you buy now you will end losing money 100%

None of them have a real practical application, it’s 100% speculation

I have a revolut account and for some reason they give $1 in shitcoins if you answer some questions like “bonk differs from the other shitcoins because it’s made for the lolz” or “floki does exactly the same of other shitcoins but slightly different”

The upside is that in this way they use less plastic. Cardboard can’t be transparent and people doesn’t separate the plastic from the cardboard when recycling.

We all know what razor blades look like so a photo can suffice, no?

He is insane

All that info is publicly available, but a nice CSV ready to be fed to spambots isn’t a really good idea…

If I was involved with wordpress for business, i would start to find a plan b, because now they target wp engine, then who’s next?

Hall said the trial was unfair and continued to insist the bombing didn’t happen as he left the court.

Nice try, openai bot (/s)

LOL genuinely thought it was a case of “engineer hates the user”, instead it was a case “management said we need to save 5 cents for the voltage regulator”

Google enforces rules only against small devs. Big companies are allowed to do what the fuck they want.

Example with one of those “ad viewing apps disguised as games”, every single screenshot is misleading, showing a different game to what actually will be downloaded. It’s clearly a violation of Google Play terms that read:

Screenshots must demonstrate the actual in-app or in-game experience, focusing on the core features and content so users can anticipate what the app or game experience will be like. Use captured footage of the app or game itself.

In the example not a single screenshot demonstrate the actual game experience.

Google sees the big cash influx from ad impressions and IAP from whales and is closing all the eyes

Tencent and Alibaba instead are still allowed to illegally fingerprint and track the user by placing tracking data in /Pictures/.gs_fs0 which for some reason they can access even without storage/photo permission