If you change the bootloader to some other software, how could the software company be expected to provide support for something they may have no knowledge of?

like xiaomi did, in the past at least. if you can reinstall the official software, you can receive service under warranty

My point here is that I don’t think it’s reasonable to legally require a software company to

phone manufacturers are hardware companies first and foremost

It’s fair for them to flash the original software as part of any diagnostic or service process

only fair if it does not come with any data loss. so basically not actually fair

surveillance cameras out in the forest? what a time to be alive! say bye bye to privacy even out in the nature, because everything must be watched

maybe the most raw form of corporate media

well not sure if fixable

there is no way to verify the downloaded package before installation.

also I generally deem both webusb, and chrome’s broader filesystem access apis dangerous, partly because a vulnerability in the website permission checking code with this permission is much worse than with e.g. the camera.
but the more realirealistic problem is that its just too easy to grant a random website so deep permissions to your device, either by accident, by habit or because the user does not understand what is happening. just a click or two and you have just granted a ransom website full access to your drive. with webusb, they can even write a bootable anything to your pendrive.

my concern here is not that you cannot make sure that the graphene website will only do what it needs to, but that the feature exists at all, because of all the other websites. I sincerely bless mozilla for not implementing these.

oh google pay, I see. but that’s not NFC’s fault, it’s useful for other things too.

speaking about it, I’m not sure google pay will work. but I never used it, so I don’t know for sure, but there’s this suspicion after what banks do

that’s the spirit

LOS has privacy issues though, if I remember correctly. like, default DNS server is 8.8.8.8of google, assisted gps contacts a global server of I think qualcomm to speed up getting a GPS fix, and others I don’t remember now

If someone finds your phone can’t they just tear it apart and read the storage with external tools?

that’s not the problem that BL locking solves. this is solved by storage encryption. BL locking solves 2 other problems:

• helps keeping stolen phone from being wiped, though maybe it’s not 100%
• makes it much harder to plant malware on your phone while it’s not with you

afaik it should. but why do you think NFC defeats privacy? it is quite short range, isn’t it? having google services is much worse

that’s not a feature of the ROM. that’s a tool provided by ROM maintainers. that being said, it almost certainly supports it, as in in someone makes a website that does that, it will be possible.

now, don’t get me started on how bad of an idea it is to use webusb

it’s not like they are the only providers. There’s plenty of other choice

Is making a profit = profiteering?

no, what I wanted to mean is wanting to make lots of money just for the sake of it, or to increase value

The ads I had in mind would be topic-based. If you’re on a supplement sub, you see suggestions for a vendor. If you’re on a web dev sub, you see VPS vendors.

yeah, exactly, that’s not so bad

correct me if I’m wrong, but doesn’t enshittification mean that the provider reduces functionality? it seems to me that didn’t happen

The subscription model rarely works

when the objective is profiteering and endless growth

I have an unpopular opinion that ads are still the best way to pay for servers and staff

I think that’s acceptable if it’s not based on datamining and profiling and personalization, but on context, and if ads are honest and not too attention grabbing. yeah advertise your product/service, with its benefits, and do not try to persuade people into paying for garbage

The subscription model rarely works

when the objective is profiteering and endless growth

I have an unpopular opinion that ads are still the best way to pay for servers and staff

I think that’s acceptable if it’s not based on datamining and profiling and personalization, but on context, and if ads are honest and not too attention grabbing. yeah advertise your product/service, with its benefits, and do not try to persuade people into paying for garbage

and a lot of the permissions you can only disable one by one, 3-4 taps for each of the dozens of apps, with needing 2 taps even just to see if the permission is granted for the app

and sadly, calyx and such forks don’t fix it either

don’t forget the list maintainers

then they are questioning the other security properties of the app. safery of used encryption algorithm or its implementation, healthyness of having proprietary google code built into the app, etc