• 1 Post
  • 60 Comments
Joined 3 years ago
cake
Cake day: June 11th, 2023

help-circle
  • It should be noted for the record, if you ever have to use your duress code, do it before you hand the device over, don’t offer it up to them, and SHUT THE FUCK UP.

    If you have time, turn the phone back on and you’ll get a “recovery” screen asking to do a factory reset. Select this and let it boot back to the setup screen then turn it off again. It’s now in a state where, if you remembered to shut the fuck up, they’ll have a much harder time proving that you destroyed evidence and didn’t just hand over a device you hadn’t setup yet, as is a somewhat common (good) practice with border crossings.

    As with all things you may have to depend on, ideally you should test this flow. Carefully make a backup, verify the backup integrity, then use the duress pin ensuring that everything works the way you expected.

    https://m.youtube.com/watch?v=Q7oM0IB-IiM





  • Okay I looked over their stuff, a couple thoughts:

    I want them to be more clear in their privacy policy about what exactly they can and would reveal for a court order, what their screening process is for those orders, under what conditions they would fight one and if they will reveal anything outside the context of a full court order.

    Reason: this is one of your biggest areas of vulnerability when signing up for a phone plan.

    The lexipol leaks showed that many police departments use phone information requests so much that they include a set of request forms (typically one for each carrier) in the appendix of their operations manuals. Frequently the forms are the only data request tool in that appendix.

    If you happened to have a call with someone who then did something Cool™ and got picked up, expect the detective to have your name and address on a post-it on their desk by the next morning. If you talked to them on some online chat platform they’ll send a court order to that platform for your IP then do the same to your carrier to unmask your identity.

    Yes, if you were also sufficiently Cool™ they’ll start doing more invasive things like directly tracking your phone via tower dumps, but that’s a significant escalation in time and effort. If things got Cool™ enough that this is a concern though, it may buy you time to get a new phone if you live in an area dense enough for that to not be immediately identifying.

    Also: I suspect the zip code is completely unverifiable so put whatever you want in there, basically pick your favorite sales tax rate.

















  • …sure?

    This kid doesn’t know what he’s writing or why, he’s just coaxing cursor to vomit up commits and apparently that’s their only metric for success.

    I work with AI tools and with people who are absolute top tier Cursor users and their shit is always broken. They iterate fast but they absolutely do not fully understand what they’re producing. It’s great for rolling out flashy UI quickly (apparently the only thing investors care about), then you watch it all go to shit the second you push because every update breaks everything in horrifying ways. It’s like watching the early days of enterprise C++/Java where everything was spaghetti, but 100x worse.

    I don’t think this paradigm of AI is likely to rival a decent human developer, there needs to be a fundamental change in how the models work and how we use them. What were doing now is hoping quantity is somehow going to replace quality.