[–] 1 point 6 months ago

This comment... Confuses me.

Black box testing is MUCH harder than white box testing, especially as, and I hate to say it, AI based security scanners become better and better at identifying flaws in source code. Having more information about your target is always the first step in penetration testing, and more information is ALWAYS better.

This is exactly why security by obscurity is a valid tactic. It hides information and makes a system harder to attack.

Absolute security is achievable, but comes with costs. If I'm willing to airgap everything and never go online, only using my own code, my device will be safe.

No, it's not. Every system has flaws. Using your own code is especially a bad idea, as it is much more likely to be flawed than a 20 yo open source project. Your airgapped device may be secure from remote attacks, since it is not connected to any network, but if it is stolen, that means nothing.

Absolute security is impossible.

  • source
  • parent
  • context
  • [–] 6 points 6 months ago

    I'm curious to see how this will go.

    My guess is: When the products were sold, the price was simply higher and the tariffs not mentioned on the invoices. Customer did not pay taxes themselves, they agreed to pay a high price. Of course everyone knew why, but I doubt a capitalistic country like the US will rule in favor of the customers here, unfortunately.

  • source
  • parent
  • context
  • [–] -1 points 6 months ago* (2 children)

    I find it weird that you're making what seems to me to be a strawman argument about "burdening (mostly) small developers," as I'd say they are mostly not the ones trying to do this bullshit where they try to retroactively destroy art and culture because it stops being profitable enough. Indie studios typically don't design their games to use publisher-operated servers with ongoing costs attached in the first place, let alone to self-destruct when they shut off!

    Releasing source code isn't without extra work. My point is, unless you make sure to specifically target the companies abusing gamers, you're going to mainly hurt the part of the industry that is not the problem.

  • source
  • parent
  • context
  • view more: ‹ prev next ›