https://github.com/RealJohnGalt/KeyBoxRevocationResearch/blob/master/keybox_check.txt

The tournament is started.

Deutsche Telekom released schizo ads targeted at gen Z that likely won't make them any money. I guess that's good.

https://youtube.com/watch?v=75nQs45HP50

(No, I'm not paid, I saw this ad on Reddit and it felt good to see an ad expected to be net negative for the business)

Fold 7 can't be bootloader unlocked, while running stable OneUI 8. Either they rushed it for the marketing points, making it equivalent to a beta (as other devices are still on beta, where they indeed aren't unlockable at this point in time) or Samsung is about to lose money on the people (including businesses) who'll move to Pixels, Nothing and OnePlus (not an exhaustive list).

The irony.
https://netzpolitik.org/2025/utiq-tracking-jetzt-auch-am-internetanschluss-zu-hause/

Still current news: you accept a cookie-like banner and then this gives a company the consent and capability to track you or your household (so with the accuracy of single contract) despite the IP changes because Deutsche Telekom tells them it's still you.

The watchful people who had internet in 2000s and early 2010s know that most of internet safety comes from not oversharing your personal details, and that presence of invasive know-your-customer practices by commercial entities is a major source of personal information leaks. But the topic of what we can do about it in technical aspect is rare.

One of the few things that remain alive in the current internet against all of the legal odds are torrents. And plenty of them thrive on DHT (distributed hash table), which is independent to trackers (predefined centralized servers that come and go).

A chat infra can be as sustainable. But people want reliability and low battery drain, okay, that can be done too. The biggest issue with distributed chat apps is narrow vision, a bet on a certain point in the decentralization spectrum. How many servers you need? What must motivate people to setup servers? What are the obligations of a server owner? What a server owner will have to accept? What's the impact of servers on their users?

Those are very serious questions with pretty long answers beyond the scope of this post. What I really want to say is that "zombies" are good. Chat app designs so invulnerable to politics and design flaws that a build from 2013 will still keep working for the few remaining users decade later. Yes, you can bet there's a known unpatched security flaw present at that point. But that is fine! Why? Because you can resurrect the project or the idea any day, but now do it better, because you'll be equipped with the answer to why it kept working for an unmaintained decade.

So what I propose? Design for both a tragic and thriving internet. If you can save battery on a mobile device, take advantage of it. If you can lessen the ping, take advantage of it. If you can enroll a user more easily into being a seed, if you can optimize for very large groups, please do. Just have a fallback for everything. The most obvious part (because it's stored offline) is self-sovereign identity. You're a public key and private key, not a username and password on a specific server. A lot can be done.

What I think we're missing the most? Actually, the attention. You can consider this post as a teaser for completely-no-ETA post that evaluates the UX and as much of what I can technically understand in various distributed chat projects. Some of them are exceptional at a thing or two and deserve a standing ovation for that. The recognition of individual qualities and number of users motivate developers and give them a better chance for funding.

A sign of potential unintentionality is that people actually report the devices locked themselves after the update to beta. Even in case of OEMs that offer no official means to unlock, taking an action against already unlocked units isn't something you hear about often. You don't want to mess with devices of people who followed a widely known documented behavior, that's a legal risk.

https://github.com/Kyant0/AndroidLiquidGlass
Google and Xiaomi would make it stutter.

Ayaneo plans to release a slider gaming phone, hopefully secure boot off for the freedoms we desire.

Most OEMs at some point

‘iPhone 17 Pro’ reappears in regulatory listings alongside Pro Max, Air


Smh, now the high-end everywhere will consist of a basic model, same size pro model, a big specifically thin model and a big pro max/ultra? Apple effect is scary. But thanks for smaller Pros, I guess.

Everyone already heard of Chinese people coming into Xiaomi service centers to ask for a rollback and snatch their device while it's bootloader unlocked for the procedure.
It looks realistic and if it were fake, Chinese nerd friends would likely tell me. But that creates two interesting conclusions:
1. Either EDL rollback is broken or these service centers often have a hardware/software/skill issue regarding it. A friend of mine had a personal experience where this happened and he needed to help them.
2. Instant bootloader unlock capability is still given to Chinese service centers like candy. The only reason of why it costs 100$+ now on the gray market is either the gray market's incapability of finding enough service centers to bribe or lack of skill to generate and capture the unlock keys covertly. Telemetry on service center PCs may log and report the situations where an unlock isn't followed by a lock and especially log any kind of USB redirection software.
Other possibility is that the unlock state of individual devices is tracked directly whenever these users keep running HOS. Especially if their data says they're clearly abroad or running a global stock, it can be near-impossible to expect gray market's end users to protect the origin of service they're relying on through countless middlemen.

So, you want your Chinese Xiaomi unlocked for free? Befriend a Xiaomi service center guy in China, give them your device, let them unlock, figure out something to backup the unlock key or spoof the bootloader screen and add a fake fastboot so that the lock is never executed. Then right afterwards flash AOSP. Your Xiaomi friend will be safe.

Oooor alternatively, if you overpaid for a global unit and live in EU, just try the snatching technique, it's probably legal. You're not stealing any license, you're just taking back your property. This time you'll save 40-80€, still good.

EU reiterated that OEMs need to prevent the end user capability of going beyond the norms of radio operation in consumer hardware, while a certain slop outlet connected it to OneUI 8 bootloader shenanigans. 🥴 As much as I believe that smartphones with software-defined radio (SDR) capabilities have a right to exist, especially with their relatively low power, this has nothing to do with application processor (AP) bootloaders. EFS is locked more often than not.

I don't think that Wi-Fi routers will ever be permanently region bound to a single country, it doesn't sound feasible. The status quo of compliance is hard to change, but at the same time it also isn't a significant problem. If anything, the situation can be improved by compliance of stock firmware, nerds usually know what are they doing.

And if someone really wants to squeeze an overblown headline out of it, it'd be:

THE DEATH OF OPENWRT?! 😱😱😱

– The world is ending!
– Exactly as I thought! Apocalypse soon! I'm at peace for once!

People who already gave up find comfort in things falling down, they silently want them to be true, so they're proven right and feel a little better.

Slap me whenever I'd do the same.

Oh, and the author is a Turk. Why was it crucial for misinformation to spread?
Well, people who live in EU know that anything as drastic doesn't become actual and enforced law that comes unnoticed by everyone. Bottle caps might've caught some off-guard, but anything happening in tech is closely followed by any relevant community projects.

As being a writer usually requires a bit larger research and background than being a consumer, it's no surprise that actual EU citizens fall for something an actual EU citizen wouldn't write. It's trust.

Inb4 bigotry, the author may be living in EU and still be uninformed. Doubt. It's easy to notice even as a fresh immigrant that things take more time to happen here. We're bureaucratic, but this bureaucracy slows down the time it takes to implement both life regressions and improvements, making it easy to find the proposals years ahead.

The irony in this is that a random Turk at an AI slop site can actually cause an OEM lawyer to get scared simply because this post may pop up in search. Hopefully they're smarter than this.

Again: this wasn't a topic anytime before, an AI slop page is the first occurrence of this interpretation, the law would come peacefully into reality and the only difference you'd notice would be an increase of EU-specific routers with firmware limitations for radio operation.

Bonus part: people living in Turkey know a part of this story first hand too. A crazy tax on smartphones created a popularity of IMEI changing. The problem? Most OEMs use a server to sign EFS so that an end user can't change it without bribery. Yes, exactly what the spirit of EU law in question wants to be the norm.

It's not personal, I know they won't allow you to delete it nor correct it. I've been a writer at a commercial page at some point too, and came up with misinfo that a certain Xiaomi couldn't support 12GB RAM because Qualcomm's public spec said it's up to 8. Been there, done that.

(okay, it is a little personal, I lurk random groups and get pissed off every time I see it, but at the same time get that it is too late when the site's incentives are way off)

I know it's a long thread of messages, but there's something I giggle about inside:
Some time in the future, a frustrated user of a HMD Global phone will ask their support agent why tf the bootloader is permalocked. There's now a very significant chance that such an outsourced human agent will literally cite that post as the reason after copying the question into an LLM. A post itself coming from a conclusion made by LLM.
Tldr, AI already rules, we're cooked.