• 0 Posts
  • 18 Comments
Joined 2 years ago
cake
Cake day: June 26th, 2023

help-circle
  • The Microsoft account holds a backup of the recovery key, which you need to use to restore access in if you do something like significantly change the hardware or move the drive to a different system (which are effectively the same thing).

    You don’t need it for day-to-day use of the system, and you can also just get the recovery key and print it out or write it down somewhere, which is usually how it’s handled on systems that don’t use a Microsoft account.

    Not as disastrous as I assumed then, thanks!




  • Some of the things mentioned in the OP don’t actually happen in real life, though. Bitlocker is only automatically activated if you use a Microsoft account to log in, and why wouldn’t you know the account credentials if it’s what you use to log in?

    Maybe I’m misunderstanding something here, but does this whole thing not mean that the moment you use your Microsoft account for logging in, you immediately tie the permanent accessibility of your local files to you retaining access to a cloud account?

    TPM is optional (but recommended) for Bitlocker. Practically every computer released in the past 10 years has TPM support. Secure boot is needed to ensure that the boot is secure and thus it’s okay to load the encryption key. Without it, a rootkit could be injected that steals the encryption key. You generally want to use TPM and secure boot on Linux too, not just on Windows. You need secure boot to prevent an “evil maid attack”

    You have different opinions on TPM and the prevalence of evil maids than me, fair. But please don’t disregard the central premise of my last comment: One is already using a different encryption solution. Say, Veracrypt is churning away in the background. Why would one leave Bitlocker activated?



  • I know, I just meant why would someone willingly disable Bitlocker?

    I mean… the premise of the thread seems like a good enough reason, doesn’t it?
    And even if it doesn’t, if one is already using a different encryption solution that doesn’t rely on TPM and secureboot silliness, what possible reason could there be not to disable Bitlocker?




  • Why do people host LLMs at home when processing the same amount of data from the internet to train their LLM will never be even a little bit as efficient as sending a paid prompt to some high quality official model?
    inb4 privacy concerns or a proof of concept this is out of discussion, I want someone to prove his LLM can be as insightful and accurate as paid one. I don’t care about anything else than quality of generated answers

    If you ask other people for their reasoning and opinions, it doesn’t really make any sense to put something “out of the discussion”, does it? :P

    But no, if you have no qualms about sharing your innermost feelings, sexual preference or illegal plans with those that have an explicit desire to exploit that information then there is little reason to attempt something as complicated and wasteful as self-hosting your own LLMs.





  • That’s the thing, though. I respect the analogy, but the equivalent here would be if the game was also checking your drive for other games, for financial apps, scanning your browser’s cookies to see which sites you visit, etc.

    If, while playing a singleplayer game, they’re recording what actions you take within that singleplayer game, it’s understandable some people wouldn’t even want that - but I also don’t see that as nearly so invasive as other data travesties. Worse, highlighting it here feels like a “cry wolf” situation where you’d desensitize people to the most harmful privacy breaches.

    Again, I don’t doubt that you do not see it as an incredibly invasive thing. I’m lamenting that you (and many) don’t.
    You’re doing something on your computer. Locally. In your own time. With a thing that is - ostensibly - yours. Why is it even remotely acceptable that some corporate entity is watching you over your shoulder while you do it? I’m running out of words to express how nuts this seems to me.


  • I’m sorry, but that’s a terrible analogy. In the gaming scenario, Ubisoft is collecting the data on their own product usage

    Well, in the corporate software-as-a-service insane troll logic hellscape in which we live that could indeed make sense. Mind you, that’s not meant to be a rant against you but against the fact that this train of thought has indeed been completely normalized.
    In the fantasy world of the past into which I’d like to go back to live happily it is precisely not Ubisoft’s product. It’s mine. I bought it - none of what I do with it is any of Ubisoft’s business. The business transaction has been concluded. If they want to know what I do with my game then they can ask me nicely about it. I’ll certainly not allow them to install a proverbial camera over the executable.

    It’s not a good analogy, I agree, but I’m too angry to come up with a better one right now.



  • Based on the article text, it’s only citing things like how long you play. I thought most games collected telemetry like this?

    A commonplace travesty is still a travesty and metadata is still data. If my hairdresser asked me “Hey, in addition to me cutting your hair and you giving me money I’d also like you to constantly keep me updated on your sleep schedule, your vacation plans, marital status changes and the myriad of other things that can be directly gleaned from aggregate timeline data - all the other hairdressers have started doing it as well!”, I’d likely look at them incredulously for a few seconds while silently imagining stabbing them with their own scissors.

    Calling it “telemetry” has somehow normalized it over the past decades, I suppose? I just don’t understand how anyone could ever accept this as normal.