Florian

[GrapheneOS @GrapheneOS]

Apple and Google are gradually expanding their use of hardware-based attestation. They're convincing a growing number of services to adopt it. Google's Play Integrity API and Apple's App Attest API are very similar. Apple brought it to the web via Privacy Pass, which Google intends on doing too.

Google's Play Integrity API requires hardware attestation for the strong integrity level and is gradually phasing in requiring it for the more commonly used device integrity level. Apple already has it as a requirement. Over the long term, this will increasingly lock out hardware and OS competition.

The purpose of these systems is disallowing people from using hardware and software not approved by Apple or Google. This is wrongly presented as being a security feature. Banks and government services are the main ones adopting it but Apple and Google are encouraging every service to use it.

Apple's Privacy Pass brought hardware attestation to the web to help with passing captchas on their own hardware. Many people saw that as harmless since few sites would be willing to lock out non-Apple-hardware users. Apple and Google are both likely to bring broader hardware attestation to the web.

Google's reCAPTCHA is planning an approach where they use Privacy Pass on Apple hardware, their own approach on Google Mobile Services Android devices and a QR code scanning system to require an iOS or Google certified Android device for Windows and other systems:

https://t.co/7rQnioRa8A

Banking and government services increasingly require using a mobile app where they can use attestation to force using an Apple or Google approved device and OS. Apple's privacy pass, Google's 'cancelled' Web Environment Integrity and now reCAPTCHA Mobile Verification are bringing this to the web.

Current media coverage for reCAPTCHA Mobile Verification misunderstands it and the impact of it. They're bringing a hardware attestation requirement to Windows, desktop Linux, OpenBSD, etc. by requiring a QR scan from a certified smartphone to pass reCAPTCHA in some cases. They could expand it more.

Control over reCAPTCHA puts Google in a position where they can require having either iOS or a certified Android device to use an enormous amount of the web. Google defines certification requirements for Android which includes forcing bundling Google Chrome, etc. It's enormously anti-competitive.

Google's Play Integrity API bans using GrapheneOS despite it being far more secure than anything they permit. It also bans using any other alternative. This isn't somehow specific to an AOSP-based OS. You can't avoid this by using a mobile OS based on FreeBSD instead. You'll just be more locked out.

Google's Play Integrity API permits devices with no security patches for 10 years. The device integrity level can be bypassed via spoofing but they can detect it quite well and block it once it starts being done at scale. The strong integrity level requires leaked keys from TEEs/SEs to bypass it.

It doesn't provide a useful security feature, but it does lock out competition very well. Services requiring Apple App Attest or Google Play Integrity are primarily helping to lock in Apple and Google having a duopoly for mobile devices. Play Integrity is more relevant due to AOSP being open source.

Governments are increasingly mandating using Apple's App Attest and Google's Play Integrity for not only their own services but also commercial services. The EU is leading the charge of making these requirements for digital payments, ID, age verification, etc. Many EU government apps require them.

Instead of governments stopping Apple and Google from engaging in egregiously anti-competitive behavior, they're directly participating in locking out competition via their own services. Requiring people to have an Apple device or Google-certified Android device is anti-competition, not security.

reCAPTCHA Mobile Verification will currently work with sandboxed Google Play on GrapheneOS but it clearly exists to provide a way for them to start using hardware attestation on systems without it. People without an iOS or Android device will be locked out when this is required even without that.

This isn't about security or any missing functionality. GrapheneOS can be verified via hardware attestation. Google bans using GrapheneOS for Play Integrity because we don't license Google Mobile Services and conform to anti-competitive rules already found to be illegal in South Korea and elsewhere.

Services shouldn't ban people from using arbitrary hardware and operating systems in the first place. Google's security excuse is clearly bogus when they permit devices with no patches for 10 years but not a much more secure OS. It's for enforcing their monopolies via GMS licensing, that's all.

[Cryptoast @CryptoastMedia]

🎁 Calendrier de l'avent Cryptoast 🎁

Jour 12 :

2 Ledger Nano Gen5 à gagner pour mettre vos cryptos en sécurité ! 🔒

Pour participer :

- Follow @Ledger & @CryptoastMedia
- Like & RT ce post 💞

Tirage au sort : 26 décembre 🎅
Bonne chance à tous 🍀

[Florian @GrandFloCrypto]

@Crypto__Goku @alephium @CryptoGeneOff Je participe

[Goku 🗞 @Crypto__Goku]

🎄 CALENDRIER DE L'AVENT - [9/24] 🎅

ALEPHIUM vous souhaite de bonnes fêtes de Noël en vous offrant 3 Hardware wallet ONEKEYS édition limitée 🎁

👉 Pour participer :
🔹 Follow @alephium & @CryptoGeneOff
🔹 ♥️ + RT 🔁
🔹 Commenter "Je participe"

📅 Tirage au sort le 15 Décembre.
3 gagnants.

Bonne chance à tous ! 🍀

#Giveaway #CalendrierDelAvent #concours

[Cryptoast @CryptoastMedia]

🎁 Calendrier de l'avent Cryptoast 🎁

Jour 8 :

- 1 pack de merch ultra rare de Binance

Pour participer :

- Follow @LeBinanceFR & @CryptoastMedia
- Like & RT ce post 💞

Tirage au sort : 26 décembre 🎅

Bonne chance à tous 🍀

[Florian @GrandFloCrypto]

@Crypto__Goku @Lyzi_app @CryptoGeneOff Je participe

[Goku 🗞 @Crypto__Goku]

🎄 CALENDRIER DE L'AVENT - [06/24] 🎅

LYZI vous offre généreusement 250$ de $LYZI 🎁

👉 Pour participer :
🔹 Follow @Lyzi_app & @CryptoGeneOff
🔹 ♥️ + RT 🔁
🔹 Commenter "Je participe"

📅 Tirage au sort le 10 Décembre.

Bonne chance à tous ! 🍀

#Giveaway #Calendrierdelavent #concours

[Florian @GrandFloCrypto]

@LeCryptoDaily Du coup plutôt le 23 octobre

[Journal du Coin @LeJournalDuCoin]

🚨 Tether va lancer l’USDT sur RGB, un protocole de seconde couche construit sur Bitcoin, permettant ainsi des transferts natifs d’USDT vers un wallet Bitcoin.

[SpaceScience🌟 @SpaceScience_]

🎁OPTIQUE UNTERLINDEN VOUS RÉGALE ! Juste avant la nuit des étoiles (1,2,3 août), le 1er des deux télescopes à gagner est la ! Un Sky-Watcher 130/900 sur EQ2, motorisée s'il vous plait !

Partager et liker ✅

Etre abonné ✅

TAS dans 48h 📨

La boutique : https://t.co/pYFVmxZuFD

[Alephium @alephium]

Update on the Situation

The review of the new full node release containing the DAA patch should be finalized soon. However, in parallel with preparing the upgrade, we’ve continued investigating the issue and now have a clearer understanding of what’s happening.

It appears that following the sudden drop in hashrate, one mining pool’s influence on the network increased significantly. As a result, their mining pattern has been triggering the difficulty penalty mechanism repeatedly.

Given this new insight, we are temporarily holding off on releasing the upgrade. If our theory holds, and the mining pool is open to adjusting their hashrate distribution, we may be able to restore normal network performance without requiring an urgent network upgrade.

We’ve reached out to the pool operators and are currently awaiting their response. We’ll share a further update as soon as we have clarity on the next steps.

For the long-term health and resilience of the network, we strongly encourage miners to distribute hashrate across multiple pools whenever possible. A more balanced mining landscape benefits everyone.

Thank you for your continued patience and support as we work toward a resolution.

[MoneyRadar Crypto @MRadarCrypto]

🚨 Fuite massive de données : +16 milliards d'identifiants exposés !

Une base de données géante comprenant des accès à Google, Facebook, Telegram, GitHub et des services gouvernementaux a été mise en ligne puis aspirée. Du jamais vu. 😱

Les identifiants sont maintenant en ligne sur le darkweb.

Les risques sont élevés pour ceux qui :

- Réutilisent leurs mots de passe
- N’activent pas le 2FA
- N'ont pas recours à des applications de mdp

Les joies des bases de données centralisées ...

[Florian @GrandFloCrypto]

@CryptoPicsou @coinacademy_ia Btc

[Florian @GrandFloCrypto]

@TagadoBTC Viens en Suisse dans la région de Neuchâtel. C'est pro cryptos avec une super communauté

[Tintin @TintinTafa]

Pour ceux qui veulent passer la tempête en stables ou générer un peu de rendement sur leur BTC, y’a quelques bonnes opportunités en rendement delta-neutre en ce moment.

➡️ Les pools de stabilité BOLD de Liquity performent bien grâce aux liquidations et à la volatilité élevée dernièrement. (Leur V2 est cool et a dig si pas encore fait)
➡️ Certains PTs sur Pendle et Spectra deviennent vraiment intéressants pour verrouiller de beaux APR. Par exemple, le contrat USR du 24 avril tourne à 24,3% APR en ce moment. Il y a même mieux sur Spectra, mais faites gaffe à la liquidité qui est assez faible, donc évitez d’y aller avec trop de size.
De mon côté, j’attends de voir le FOMC du 19 mars pour voir si Powell remet les imprimantes en marche.

💡J’ai pris quelques puts ETH pour le 28/03/25 en couverture, je trouve qu’ils sont encore assez bon marché et offrent un bon rapport qualité/prix selon où vous pensez qu’on peut aller dans le pire des cas.

💡Et n’oubliez pas la puissance du short covering pour gérer votre exposition longue. Si le prix descend, vous pouvez racheter plus bas avec les profits tout en encaissant les funding rates.

L’idée, c’est de calculer le coût pour atteindre un niveau où vous vous sentez plus à l’aise pour repartir en mode bull. Une approche qui permet de jouer défensif tout en gardant une cartouche pour rebondir au bon moment.

[MoneyRadar @MoneyRadar_FR]

🎁Cadeau🎁

Notre partenaire GOLD AVENUE vous fait gagner un lingotin d'or pur et une pièce d'argent pure!

Pour participer :

👉@MoneyRadar_FR
👉@GoldavenueFR
👉Like & Retweet ce post

TAS : 1 semaine

En exclu, 30€ de réduction sur la première commande à partir de 300€.
Grâce au code Promo : MONEYRADAR30👇

[Florian @GrandFloCrypto]

@Crypto__Goku @mtpelerin @CryptoGeneOff Je participe

[Cryptoast @CryptoastMedia]

🎁 Calendrier de l'Avent Cryptoast 🎁

Jour 23 :

- 3 lots de 500€
- 2 maillots de l’EDF de Rugby signés par A. Dupont

Pour participer :

- Follow @Bitpanda_FR & @CryptoastMedia
- Like & RT ce post 💞

TAS : 24 décembre 🎅
Bonne chance à tous 🍀

[Cryptoast @CryptoastMedia]

🎁 Calendrier de l'avent Cryptoast 🎁

Jour 22 :

- 50€ en Bitcoin

Pour participer :

- Follow @VenaLabs & @CryptoastMedia
- Like & RT ce post 💞

TAS : 23 décembre 🎅
Bonne chance à tous 🍀

[Astro🚀 @Astro_Crypto_]

CALENDRIER DE L’AVENT [20/24] 🎅

Mt Pelerin, la plateforme d’achat / vente de cryptos sans frais cachés, vous fait gagner une carte cadeau de 100€ en $BTC ! 🎁

👉 Pour jouer :

🔹 Follow @MtPelerin & @LeCryptonome
🔹 Like + RT

📅 Résultat dans 4 jours

À vous de jouer 🎄