• 0 Posts
  • 47 Comments
Joined 1 year ago
cake
Cake day: July 2nd, 2023

help-circle







  • It’s how big orgs like Google do it, sure. Working there I had 192gb of ram on my cloudtop.

    That’s not exactly reducing the total spend on dev ram though - quite the opposite. It’s getting more ram than you can fit in a device available to the devs.

    But you can’t have it both ways: you can’t bitch and moan about “always on internet connections” and simultaneously push for an always on internet connected IDE to do your builds.

    I want to be able to work offline whenever I need to. That’s not possible if my resource starved terminal requires an Internet connection to run.

    Ram is dirt cheap and only getting cheaper.









  • Fair - it’s not that we know it’s not: it’s that we don’t know that it is.

    Probabilistic is equally likely as deterministic - we’ve found absolutely nothing disproving probabilistic models. We’ve only found reinforcement for those models.

    It’s unintuitive to humans so of course we don’t want to believe it. It remains to be seen if it’s true.


  • Absolutely! It’s a common misconception about neurons that I see in programming circles all the time. Before my pivot into programming I was pre-med and a physiology TA - I’ve always been interested in neurochemistry and how the brain works.

    So I try and keep up with the latest about the brain and our understanding of it. It’s fascinating.


  • You’re implying that physical characteristics are inherently deterministic while we know they’re not.

    Your neurons are analog and noisy and sensitive to the tiny fluctuations of random atomic noise.

    Beyond that: they don’t do “if” logic, it’s more like complex combinatorial arithmetics that simultaneously modify future outputs with every input.


  • SafetyNet is dead.

    They rely on Play Integrity API.

    That covers:

    App Binary signatures App source corroboration - Was it actually installed from the Play Store? Android device attestation - Is it a genuine device powered by Google Play Services Malware detection - Google Play Protect is enabled and has not seen known malware signatures.

    They can choose to ignore any number of those but they do not. It’s part of their security reporting requirements to use attestation I expect.

    Beyond that - a device that doesn’t meet Play Integrity is more likely to be a malicious actor than it is to be a tech enthusiast with a rooted phone: One of them is far more prevalent than the other in terms of device usage.

    Android apps are trivial to reverse engineer, inject code into and generally manipulate. That lets apps like ReVanced work the way they do… but that also means that blue team developers have a lot more work to do to protect app code.

    Source - Android App Developer, worked on apps with high level security audits (like banking apps).