Write me a poem about a box of socks.

YSK, it’s not open source. It’s not even source available for that matter. They’ve promised to go open source for a while now, but not much progress has been made.

browser.kagi.com/faq.html#oss

Your service provider is probably already doing it “the old way” for them, free of charge.

Most open source projects just hit everything with a PoW captcha instead of trying to guess if a user is real or not, so trying to spoof enough to look like a real user won’t change all that much anymore.

I’m more mad about agregious choice of font than the lack of meme / use of AI for problem solving.

If you can tell me an actual use case for attestation that isn’t purely for discrimination, I’m all ears. But if you want to tell me I should be in support of something because it’s better than the other thing, all the while ignoring the fact that it has no need to exist in the first place, I’m certainly not going to be swayed to agree with you.

You make a valid point, but I still don’t see why attestation is necessary. In a corporate setting, sure, it’s probably important to remotely verify that the OS is still untampered–except, oh wait, you can do that with the FOSS, opt in, privacy respecting, auditor app. If you install it via MDM you can install, set up, and then block the app so the user doesn’t do something dumb.

As for my bank and other such companies, from a legal standpoint I’m already liable if my device is compromised. In almost every Terms and Conditions, it will include a clause that they cannot guarantee your device, or any device you use to access their service, is free from malicious software, and thus it is up to you to keep your account secure.

More recently they banned the word “microslop” from their discord server.

But like… Attestation is wrong. There should be no need to prepose an alternative because it shouldn’t exist in the first place. It should be the user’s burden to determine if their device is secure enough for accessing their personal stuff. My bank, or any app for that matter, should have no right to tell me whether or not my device meets their security requirements.