LLMs are vulnerable to classes of attacks that humans just aren’t. In your framework, the way to prevent attacks is to… invent human consciousness?? It’s an impossible goal.

But even then your argument breaks down when you consider more complicated cryptographic structures.

Now I’m basically expected to do what my boss wants me to do every minute of the day, it’s gotten much more micromanaged.

Software is full of leaky abstractions

We can have a discussion about FaceID specifically, but “convenience” is not considered trivial within the security sphere.

Second, I work for a (very large) bank, and you actually do not want to trust them with your biometric data directly. You can be absolutely assured of the privacy of your biometric data with the bank, better than with a Silicon Valley tech company. But I would not trust the bank’s data scientists to come up with a model that will not have an extremely high rate of false positives and negatives.

The reality is, if such an initiative was started at a bank, it would be shuttered after years of delays.

Whereas juniors are eager to chat, have lunch with you , and share what they’re working on, the seniors are guarded and solitary.

Maybe that’s just my workplace though!

And yes, the office is important.

Anyway flawed implementation doesn’t mean that hardware attestation is a fundamentally useless primitive. Apple Wallet is responsible for millions of transactions a day.

Amazon doesn’t really have a leg to stand on in objection here. Building a platform to re-sell an open source project may end up fracturing that open source community’s user base, that’s a consequence of their own actions.

The reality is that there is software dependent on the user being unable to modify it. This safeguards the server against fraudulent users.

This is the exact opposite of what will happen (and in fact what has happened). Reddit is suing Perplexity right now for scraping.

Meta will not serve content to some other app for free - for what benefit? They will not see advertising data.

I was just tinkering around with MCP Apps the other day, and I had a really hard time serving images (this is for rendering in VSCode Copilot). Did you serve static resources through resource endpoints in the mcp server, or via another mechanism?