> Many rooted devices display during boot a warning that they have been rooted. Usually, this happens after a bootloader unlock because then verified boot is disabled. You can still have a rooted device and not break verified, resulting in no warning. See: jailbroken iPhones. I wouldn't say it's a solved problem. Just have to find an exploit that works with verified / attested boot. And device manufactures are getting more and more restrictive here, too. Why do you think that is? > Let's pretend there aren't plenty other ways they could spy on you. Sure, of course there are other ways to spy on people. But as we see here: If the device itself does it, then we like to blame LG. If they used an exploit to do that, then we blame LG's shitty security. If a hotel owner installed a microphone inside one or their specific TVs, then we blame the hotel owner at least - not LG. > If it's bad if a hotel does it, why is it okay if LG does it? It doesn't seem like it is okay. We are discussing this right here. > Do you honestly trust LG, and the thousands of "partners" that they sell your data to, and every government whose warrants they have to honor? Do I trust LG more than a shady hotel / BnB owner or eBay seller? Yes. Do I trust them fully? No. It's not fully binary, I'd say. > Your argument reduces to "if the warden lets us out of our jail cells, who will make sure we behave?" I am just trying to say, it's really not that binary. You can extend that to other places whenever attestation is involved. Do I like Linux and open platforms? Sure! Tampering is fun! Do I hate people using open platforms to scrape my websites and constantly cause load, steal my content and use that for AI training? Also, yes. But how can I fight that? We run into CAPTCHAs, Cloudflare, Anubis and co. Now that issue is reduced, but the openness is also gone. And you always see in tech spaces we rather want "dumb" devices rather than smart devices, because we cannot trust them. Attestation buys you more trust, but at the cost of openness.
I haven't finished reading and had to make a detour into another article by the same author, so, probably, I will have to extend the comment, but so far this: > Perhaps the limiting factor is just that knowledge of effective test techniques isn't very widespread That linked to: https://danluu.com/testing/ But of course... the problem of testing is a lot harder than performance optimization... I'm surprised this comes as a surprise. Performance optimization has plenty of evaluation metrics by its very nature. Testing? -- I wish there was anything tangible at all... Because we have metrics for optimization, we have theories of optimization, i.e. we have a way of explaining how or what optimization should do. With testing? -- we are nowhere close to this point. Another aspect of this disparity is that we also know how to sell performance optimizations. It's easy to write into an ad pamphlet that the version 2.0 of gobbledygook does 185% more gobbledygook than the 1.0! (The number faithfully copied from my cereal box!) With testing? -- How can you even tell the customer that the product was tested better? Swear on your life and cross your heart (twice, as opposed to the last time when you only did it once?) In general, in the field, I've only have so far met with extreme pessimism about feasibility of "theory of testing" existing. Even though the need for testing goes without saying, the actual testing task is reserved for the least competent and there's little no no effort made to improve anything in this department as it's perceived to be a black hole in the budget: no matter how much you could spend on testing, the effect is likely to be the same.
AI is not the problem here, but the difference in deep beliefs of the company founders. When I had partners in my business I studied them first deeply like I was going to marry them because I WAS going to marry them! You should agree on your values or else the company will go nowhere. One founder will raw one way and the other the opposite making the boat to stay in the same place. I have a software company and the opposite problem: I am obsessive about testing and meta programming. We write way more testing code than code, we automate everything with meta programming. It was clear several times that we tested and automated way more than necessary. We automated things that only used once for example(although we used later multiple times on other projects). So we had not the usual problems than companies have like bloat or security vulnerabilities but we had the problem of having software that was was super expensive because we did double or triple the code than the competition with tests that developers hated(they are boring to write). Our software took also way more time to market. Companies love to buy the cheapest they can today and tomorrow we will see, so that put us in a difficult position. It was specially hard at first, but then this principles gave us an edge(because most companies would compromise early and not reap the benefits later). Had I a business partner with a different mindset and beliefs, it would have been impossible to me not to change course of the boat in hard times. BTW we use LLMs with great success. It let's us test even more spending way less than before.
 Top