@getimiskon TBH I'd use Google Chrome than moz://a firefox.
@itzzenxx both suck, but there aren't many alternatives, especially on BSD
@getimiskon fair, only those two really exist. Chromium sucks less for me, faster and much more stable.
@itzzenxx @getimiskon Both Firefox and Chromium have terrible UIs, but at least Chromium has a sane back-end and security. Firefox sandbox took way too long to roll out (latest ESR 91 doesn't even have it fully enabled!) and it's still broken, allowing cross-site leaks. Imagine being vulnerable to Spectre in 2022...
@getimiskon @inference I disabled JIT on my pixel 4a, my iPhone 12 pro, and my thinkpad.

removes so much attack surface from doing this lmao
@itzzenxx @getimiskon JS is bad, JIT is worse.

Yes, it can get worse. Why fuck yourself with JS when you can fuck yourself with natively compiled JS bypassing memory protections?
@inference @getimiskon happy that apple finally enabled the option to disable JIT on iOS, really makes me feel more comfortable using iOS whenever my android phone destroys itself (becoming more and more common thanks to the shit release of android 12)

I want a new phone but I cannot afford to pre order a 6a right now
@itzzenxx @getimiskon If I used an iPhone, I'd use Lockdown Mode just for disabled JIT. I already do on GrapheneOS and Chromium.

@itzzenxx @getimiskon @inference A sophisticated cyberattack would involve much more. Let me just hit a switch and I'm definitely not going to be bothered by my other devices or the IoT at home. I wonder if they are still giving the information to the government. If one hits that button, I'm fairly certain the government will know if they are watching.

Gotta love apple for making it easier to stalk people and spy. They don't have a great track record for human rights.

@AmpBenzScientist @getimiskon @inference the people hitting that button are probably aware / don't own IoT devices. And this was released in the dev beta tree not even a week ago. I'm hopeful more features will be added.

Also assuming that they have bounties open encouraging people to try to break this I think they really are going in on this.

Or, you can try GrapheneOS
@itzzenxx @AmpBenzScientist @getimiskon Apple have $2,000,000 bounties on exploiting Lockdown Mode, and have doubled the payout for exploits while Lockdown Mode is enabled.
Follow

@inference @getimiskon @itzzenxx That's pocket change when compared to developers have. Remember that wifi exploit that required being reflashed to make wifi work again? That wasn't the real bug that was turned down as part of their alleged bug hunt. They are trash like many other bug hunting programs.

Sign in to participate in the conversation
Qoto Mastodon

QOTO: Question Others to Teach Ourselves
An inclusive, Academic Freedom, instance
All cultures welcome.
Hate speech and harassment strictly forbidden.