Its more that its really hard to do security when the attacker has unlimited physical access.

My son has found about 25 different ways to access YouTube across our Android, Android TV, Apple and Roku devices. I have found ways in almost all of them to "nicely" block youtube for him (while keeping it for me or keeping the device functional).

Roku is the only one that just doesn't give a crap. Screw Roku.

(Insert about 1000 other examples of very awkward ToS updates)

When I put my credit card into Apples ecosystem they take a 0.15% cut of the transaction and appear to be very happy with the results. When I put my application into the ecosystem they take 30%..

You can then break down why this is, but boy is that an interesting contrast.

Holy Crap, I got about 45 minutes into setting up billing and just gave up and un-did everything.

Hint: If you want to put a spending Limit on your google cloud account, its not trivial.

I will say that Stability AI is similar to Claude, they will just let you buy credits and hit an API.

1. The terms and conditions of a product, service, etc. "primarily" aimed at a consumer have simple, human readable terms. Like a food label or similar to the broadband label.

2. The terms are presented and acknowledged PRIOR to purchasing (not after opening the package, driving off the lot, putting the DVD into the player). The company needs to find a way to deliver the T&C's before purchase. If you need me to agree to 50 pages things before I can use your product, I didn't really purchase it, I am receiving a license to use it....

3. If these terms and conditions will be changed retroactively (for existing customers) that must be optional, opt-in and not required to continue to use the product.

I think this would stop a lot of the shenanigans companies pull on end users, that they DON'T pull in B2B environments.

I am running multiple Zigbee networks near each other (in a house and in a detached garage) with Home Assistant, MQTT server and a Sonoff Zigbee bridge, with Tasmota.

"The FISA Court’s only jurisdiction is “to hear applications for and grant orders approving electronic surveillance anywhere within the United States.” 50 U.S.C. § 1803 (a) (1)."

I still have too much stuff and its a fraction of what my parents had.

(Perhaps this is more of an American thing?)

From there, I allow AdGuard DNS out over port 953.

I then use pfBlockerNG with a few block-lists to block DoH and known DNS over 443 servers.

Overall works fairly well, I've had an issue or two when a device cant talk to 1.1.1.1 directly....

Realistically we are talking about FISA here, so in theory if the FBI gets a FISA court order to gather "All of the Apple account data" for a non-us person, Apple would either hand over the encrypted data OR just omit that....

Based on the stance Apple is taking here, its reasonable to assume they would do the same in the US (disable the feature if USG asked for a backdoor or attempted to compel them to decrypt)

I would be much more interested in rules that don't start with that... Like "Rules for debugging when you don't have the capacity to fully understand every part of the system."

Bisecting is a great example here. If you are Bisecting, by definition you don't fully understand the system (or you would know which change caused the problem!)

PC gamers would say that a modern mid-range card (1440p card) should really have 16GB of vram. So a 5060 or even a 5070 with less than that amount is kind of silly.

I am not going to do it justice, but the bottom line is that systems get complex very very fast (n! factorial complexity). Cyberniticians (or Stafford Beer at least) reason that we should just treat these systems as black boxes (and examine their inputs / outputs) as any attempt to explain or rationalize the inner working of the system itself (as you are trying to do) will never go well (again because of the complexity).