@Madagascar_Sky@molly0xfff if you are actually interesting in the problem itself and not in using the 'chains for their own sake, you should look at how Certificate Transparency Logs work and clone their approach.
@whitequark@dalias@glyph@mcc Makes me wonder if it would be legal to attempt to log in to the provided email/password via imap, and if it succeeds - reject it and tell the user "no really, do not use your email password here".
@lethalbit probably an even more cursed proposal: use iso 9660 as your filesystem. Iirc it only supports contiguous files, but all the tooling to deal with it from pc side already exists.
@whitequark what state of mind should even a mf be in to think that telling someone that they are dumb for not following their suggestion will increase the chance that it will be followed.
@karolherbst@boo_ why is having signed firmware such a big problem? Would it be impossible to carve out the "good" firmware out of the windows or the proprietary driver and write the open drivers against that? Or am i missing something?