Technology

hideshow 9 child comments

parent

[–] phlegmy@sh.itjust.works 2 points 6 days ago

Supposedly only the pentium III returns serial info with CPUID though, and even then it can be disabled in the bios.

parent

[–] frongt@lemmy.zip 1 point 6 days ago (7 children)

Why not? Is that information considered sensitive? Personally I tend to avoid running untrustworthy programs outside of a sandbox or VM.

hideshow 7 child comments

parent

[–] palordrolap@fedia.io 4 points 6 days ago

Are you a believer in the idea "They who have nothing to hide have nothing to fear"? Hint: You shouldn't be.

And do you know for certain that your sandboxes and VMs don't simply pass through the CPUID instruction? And if they don't, do they rotate their fake CPUIDs? And how often does that happen?

parent

[–] WhyJiffie@sh.itjust.works 3 points 6 days ago* (5 children)

Personally I tend to avoid running untrustworthy programs outside of a sandbox or VM.

what does that mean? are you not running any programs at all? you cannot know just by looking at the name if a program reads such sensitive info. and its not unlikely that some developer figured it would be a good idea to include it in automatic crash reports

yes, this is sensitive information. its like your fingerprint, you cannot change it. I think its quite obvious. ~~web browsers~~ firefox is fighting to hide more and more that even indirectly could lead to identification. websites can't read this ID, this is just a comparison.

hideshow 5 child comments

parent

[–] Axolotl_cpp@lemmy.dbzer0.com 1 point 6 days ago (4 children)

you cannot know just by looking at the name if a program reads such sensitive info.

I can know from the code ;P

hideshow 4 child comments

parent

[–] WhyJiffie@sh.itjust.works 1 point 5 days ago (3 children)

have you ever used Gentoo? if you do, you know how long it takes to build updated software from source code.

vetting all that, even just the changes would take a lot more time. and it's a constant effort.

hideshow 3 child comments

parent

[–] Axolotl_cpp@lemmy.dbzer0.com 1 point 4 days ago* (2 children)

Never used gentoo but i do build the software i use often

vetting all that, even just the changes would take a lot more time. and it's a constant effort.

First of all, I am, like you and everyone else not alone in this, and for changes it's sooo easy thanks to Git

hideshow 2 child comments

parent

[–] WhyJiffie@sh.itjust.works 1 point 4 days ago (1 child)

yes, git is a godsend. but who will you trust that they checked the new code, and found nothing bad? different people have different expectations too.

parent

hideshow 1 child comment

[–] Axolotl_cpp@lemmy.dbzer0.com 1 point 4 days ago

Idk about other peoples, i usually do this with friends so idk