Exactly how does it have implications in a country it’s not a law of?
Because it had, and continues to have, a significant bearing on the development of technologies that are used internationally, many of which shape the society you live in.
modem_down
- 3 Posts
- 24 Comments
Joined 2 months ago
Cake day: July 23rd, 2026
You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.
Not gonna dispute that.
However, someone like that not only probably wouldn’t want to submit residency evidence to Google, they probably wouldn’t have utility bills or land registry documents etc that could prove residency. Therefore, they’d be outside the scope of this post.
They might not know it.
But they would, if anyone with your name & address ever:
- Stored it on a Google server. (Maybe a business you once placed an order with uses GSuite?)
- Made a Google/GMail Contacts/Address-book entry with that info. (Maybe you invited a friend or colleague for dinner?)
- Made those details public (land registry, company officer registry, etc).
- Etc.
3·18 days agoSomewhat relevant: https://thebrainbin.org/m/linux@lemmy.ml/t/1858588
It would probably be a better use of time for those people to vote and lobby their legislatures for decent privacy protections in law.
Yet another example of why US citizens would benefit from GDPR-equivalent privacy laws.
How does resale value “support Google”?
If you want GrapheneOS without funding Google, why not get a secondhand Pixel?
Thanks, I’ll try that.
The issue has happening on an increasing number of websites, though: Ecosia, ScienceDirect, TrainSplit (which thankfully has a fallback to hCaptcha), Indeed, and more.
Thanks. What’s your source for that list? I think you’re right that those measurements are factors in the final “bot score”, but I expect there are many other measurements also factored in.
If you look at my OP, though, you’ll see my browser passed the checks but was still blocked, which Cloudflare said shouldn’t happen.
It pops up on which page?
I can’t see it on either of the pages mentioned in my OP:
I’m getting this issue in Chromium.
Like you, I’ve encountered it especially often in the last 3 weeks or so. Thanks for confirming it’s not just me!
Do you have a link to that feedback form, by any chance?
I eventually managed to find contact details for the webmaster for the site on which I most recently encountered this. Hopefully they’ll fix it in their Cloudflare configuration.
Failing that, I’ll try User-Agent spoofing. Failing that, another ISP, or VPN.
Cloudflare is already wrongly flagging this Linux box as a bot when it connects from an ordinary domestic ISP.
Surely it would be more likely to flag it if it was connecting from a VPN exit node.
No VPN present in this particular case.
This reminds me I need to have another look at Ledger, Beancount, et al. More info at https://plaintextaccounting.org/
3·1 month agoProgress report 1
- I’m ruling out HMAC-SHA1, because:
- Plain vanilla HMAC-SHA1 uses a shared secret. I don’t want the PC/server to have a copy of the credential. May also be susceptible to MITM/relay attacks.
- Rolling-code HMAC-SHA1 only partially solves those problems.
- Encrypted rolling code HMAC-SHA1 solves those problems, but I haven’t found a reliable source for using it with LUKS.
- If using
systemd, pick FIDO2:- Avoids flaws of HMAC-SHA1.
- Native support in
systemd, so “future-proof”. - Wider support than OpenPGP. More HST vendors to choose from, including cheaper options than NitroKey or Yubikey: useful if each sysadmin (or colleague, or relative) needs an HST.
- Compatible with QubesOS.
- Otherwise, OpenPGP:
- TBD: Clevis/Tang:
- Remote/network-based unlocking.
- I’m ruling out HMAC-SHA1, because:
Thank you for this! That thread is helpful in itself, and also links to other relevant resources - including by Lennart Poettering (controversial guy, but the canonical source on systemd).
I read them before writing my OP. I’m still not sure what you’re getting at.
I would be grateful if you could say what you mean, instead of initiating an oblique guessing game.
Getting annoyed is a form of judgement.
Yes, U.S. defaultism is problematic.
Still, as long as companies, especially US-based ones like Google, are exporting their US-centric products & practices, people outside the US will be exposed to products & practices shaped by US law.
Because enforcement is rarely watertight, the above holds true even if the importing country’s laws forbid those products & practices.
Therefore, unless you wish to live in ignorance, it’s worth being aware of the laws that most strongly shape the technologies that in turn shape your society - even laws from jurisdictions outside your own.