Spyke

Replies

memes

Comment on

Your Piefed year in review

Piefed does know in what communities you posted, which posts you liked, under which posts you commented etc. There could easily be a Piefed (or Lemmy) wrapped. The data is public so you don't even need to be signed into an account to get its relevant data

privacy

Comment on

Claude Code source leak reveals how much info Anthropic can hoover up about you and your system

I started reading and thought that it isn't that bad, just what I expected from closed source software but then came this:

Team Memory Sync, an unreleased internal project. There's a bidirectional sync service (src/services/teamMemorySync/index.ts) that connects local memory files to api.anthropic.com/api/claude_code/team_memory. It provides a way to share memories with other team members within an organization. The service includes a secret scanner (secretSanner.ts) that uses regex patterns for around 40 known token and API key patterns (AWS, Azure, GCP, etc). But sensitive data that doesn't match these regexes might be exposed to other team members through memory sync.

This seems like a great idea!

Comment on

Why They Don’t Want You Driving a Chinese Car

Reply in thread

Many countries subsidiese their car brands. In Germany exact numbers are not known, because the government works for the companies I guess, but most experts assume that brands like Volkswagen receive about 1 billion euros (or 1.15 billion US dollars) a year. Source A Source B. I'm no expert for other countries, but a quick research lead to the claim that until 2015 Tesla and the adjacent businesses (SpaceX etc.) had received 4.9 billion US dollars in subsidies Source. I don't think its fair to say that they are cheap just because they receive subsidies, they are just getting what everyone else is.

Comment on

/e/OS is not a secure OS

/e/OS is not fully degoogled, as DNS connectivity checks, hardware attestation provisioning, and eSIM activation all go through Google.

They are working on some of this, at least eSIM activation. Also do you have a source for DNS connectivity checks? AFAIK they have used their own for a while

It is often many weeks or months behind on security updates, especially in the WebView, which makes it easy to exploit.

This is a serious problem, however their update speed is comparable to a lot of default ROMs

It doesn't support bootloader locking on many devices, and if you lock the bootloader on a phone that does support it, it could brick if /e/OS is on an older security patch than the stock ROM was

/e/os supports boot loader relocking on most official devices, however the community builds don't support it. The bricking part has nothing to do with /e/os, it's a hardware security feature of some devices. This would happen with any ROM including the official one

And finally, /e/OS's text-to-speech sends what you say to OpenAI, despite local options being available.

I assume you mean speech-to-text? Anyway the feature is opt in and they have since updated it to include a prompt to inform you about what it will do. Their reasoning for a cloud option was that local options either are bad or have too high ressource usage (important as /e/os supports a lot of underpowered devices). Overall a stupid move, but they adjusted the feature to let users make an informed choice

If you can't get a Pixel then iOS in lockdown mode is the next best option, however if you can't replace your phone, LineageOS is much worse than Graphene although it is still much better than /e/.

Lineageos might have quicker updates, though it is even more connected to google, except for not including microg. However a lot of people will need google play services so they will have to install it anyway